Nu stiu daca arpwatch este o solutie... mai ales daca ai o retea prea mare....
Chestia asta > hostname: bunicu > ip address: 192.168.0.13 > ethernet address: 0:30:84:9d:d0:7b > ethernet vendor: ALLIED TELESYN INTERNAIONAL > old ethernet address: 0:2:44:36:d4:86 > old ethernet vendor: SURECOM Technology Co. iti arata 2 lucruri posibile: 1) Ori sunt 2 utilizatori pe aceelas IP - cu hostname la fel 2) Ori respectivul si-a schimbat placa de retea sau PC-ul Si ca sa te apuci sa faci "sapaturi" la fiecare mesaj de la arpwatch... devii prea stresant... ----- Original Message ----- From: "Costi" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, November 03, 2003 4:34 PM Subject: [rlug] Re: iptables cu --mac-source | tot nu merge > Birzan George Cristian wrote: > > >On Mon, Nov 03, 2003 at 04:25:15PM +0200, Laurentiu STEFAN wrote: > > > > > >>Mi, personal, se pare cam aiurea sa se chinui sa faci cu --mac-source cand > >>tot pe lista, s-a discutat anterior cum sa convingi un linux sa "simuleze" > >>ce mac vrei tu... > >>Asa ca va, dupa parerea mea, va chinuiti degeaba... cu mac-urile (mai ales > >>daca ai cativa care se pricep la PC-uri si la linux in retea). Daca nu ai... > >>spor la treaba cu mac-urile... :D > >> > >> > >D-aia iti iei un switch decent. :-) > > > > > > Cei ce nu-si permit nici asta (ca mine), macar au arpwatch: > > From: [EMAIL PROTECTED] (Arpwatch) > To: [EMAIL PROTECTED] > Subject: new station (ionut) > Message-Id: <[EMAIL PROTECTED]> > Date: Thu, 9 Oct 2003 07:51:26 +0300 (EEST) > > hostname: ionut > ip address: 192.168.0.2 > ethernet address: 0:6:4f:1:62:2a > ethernet vendor: PRO-NETS Technology Corporation > timestamp: Thursday, October 9, 2003 7:51:25 +0300 > > > > > From: [EMAIL PROTECTED] (Arpwatch) > To: [EMAIL PROTECTED] > Subject: changed ethernet address (bunicu) > Message-Id: <[EMAIL PROTECTED]> > Date: Thu, 9 Oct 2003 13:13:08 +0300 (EEST) > > hostname: bunicu > ip address: 192.168.0.13 > ethernet address: 0:30:84:9d:d0:7b > ethernet vendor: ALLIED TELESYN INTERNAIONAL > old ethernet address: 0:2:44:36:d4:86 > old ethernet vendor: SURECOM Technology Co. > timestamp: Thursday, October 9, 2003 13:13:08 +0300 > previous timestamp: Thursday, October 9, 2003 13:11:42 +0300 > delta: 1 minute > > > > -- > Ce nu te omoara ti-o intareste. > > > > --- > Detalii despre listele noastre de mail: http://www.lug.ro/ > > --- Detalii despre listele noastre de mail: http://www.lug.ro/
