1 Index: arpwatch/arpwatch.8
2 diff -u arpwatch/arpwatch.8:1.1.1.1.2.2 arpwatch/arpwatch.8:1.1.1.1.6.4
3 --- arpwatch/arpwatch.8:1.1.1.1.2.2 Thu Aug 12 22:31:09 2004
4 +++ arpwatch/arpwatch.8 Thu Aug 12 22:30:19 2004
25 +flag disables promiscuous operation. ARP broadcasts get through hubs without
26 +having the interface in promiscuous mode, while saving considerable resources
27 +that would be wasted on processing gigabytes of non-broadcast traffic. OTOH,
28 +setting promiscuous mode does not mean getting 100% traffic that would concern
36 file must be created before the first time you run
37 Index: arpwatch/arpwatch.c
38 diff -u arpwatch/arpwatch.c:1.1.1.1.2.5 arpwatch/arpwatch.c:1.1.1.1.2.1.4.3
39 --- arpwatch/arpwatch.c:1.1.1.1.2.5 Sat Aug 14 02:33:07 2004
40 +++ arpwatch/arpwatch.c Fri Aug 13 00:14:41 2004
64 snaplen = max(sizeof(struct ether_header),
65 sizeof(struct fddi_header)) + sizeof(struct ether_arp);
67 - pd = pcap_open_live(interface, snaplen, 1, timeout, errbuf);
68 + pd = pcap_open_live(interface, snaplen, !nopromisc, timeout, errbuf);
70 syslog(LOG_ERR, "pcap open %s: %s", interface, errbuf);
82 Index: arpwatch/util.c
83 diff -u arpwatch/util.c:1.1.1.1.2.2 arpwatch/util.c:1.1.1.1.6.3
84 --- arpwatch/util.c:1.1.1.1.2.2 Fri Aug 13 00:06:49 2004
85 +++ arpwatch/util.c Fri Aug 13 00:14:41 2004
87 int initializing = 1; /* true if initializing */
90 +int nopromisc = 0; /* don't activate promisc mode */
94 /* syslog() helper routine */
96 Index: arpwatch/util.h
97 diff -u arpwatch/util.h:1.1.1.1.2.1 arpwatch/util.h:1.1.1.1.6.2
98 --- arpwatch/util.h:1.1.1.1.2.1 Fri Aug 13 00:06:49 2004
99 +++ arpwatch/util.h Fri Aug 13 00:14:41 2004
101 extern int initializing;
104 +extern int nopromisc;