On Wed, Nov 20, 2002 at 06:49:47PM +0100, Johan Denoyer wrote: > Hi, > > we are currently looking into illegal usage of a protected network. We are > managing a class C network, and we would like to be able to detect illegal > usage of the network by finding the MAC address of the ip address used and > then checking it against a database. > > Now I would like to find a software or a perl scrip that would do the work. > (The budget that we have is 0$, so freeware is likely to be the solution) > > I have tried doing searches using google without any luck. If anyone uses > such software, please tell me which one, and where I can find it.
Arpwatch and arpping would be my suggestion: ftp://ftp.ee.lbl.gov/arpwatch.tar.gz http://ftp.cerias.purdue.edu/pub/tools/unix/netutils/arping/arping-1.04.tar.gz
