1 Index: arpwatch/arp2ethers.8
2 diff -u /dev/null arpwatch/arp2ethers.8:1.1.2.3
3 --- /dev/null Sat Aug 14 03:19:34 2004
4 +++ arpwatch/arp2ethers.8 Thu Aug 12 14:37:09 2004
8 +arp2ethers \- convert arpwatch address database to ethers file format
19 +.IR /var/lib/arpwatch/arp.dat
20 +(or the file specified on the command line)
27 +is an ethernet/ip database file generated by
29 +The arpwatch daemon in Debian will create different
31 +depending on its configuration. All of them will be available at
32 +.IR /var/lib/arpwatch/ .
37 +/var/lib/arpwatch - default directory for arp.dat
38 +arp.dat - ethernet/ip address database
52 +Please send bug reports to arpwatch@ee.lbl.gov.
55 +Original version by Craig Leres of the Lawrence Berkeley
56 +National Laboratory Network Research Group, University of
57 +California, Berkeley, CA.
59 +Modified for the Debian Project by Peter Kelemen, with
60 +additions from Erik Warmelink.
62 +The current version is available via anonymous ftp:
65 +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz
68 +This manual page was contributed by Hugo Graumann.
70 Index: arpwatch/arpfetch.8
71 diff -u /dev/null arpwatch/arpfetch.8:1.1.2.2
72 --- /dev/null Sat Aug 14 03:19:34 2004
73 +++ arpwatch/arpfetch.8 Tue Apr 17 14:12:51 2001
77 +arpfetch \- obtain ethernet/ip address pairings via snmp
85 +gets pairings between ip addresses and the ethernet address of the
86 +corresponding network card. These pairings are retrieved from other
87 +network entities, like routers, by the SNMP protocol using
89 +Mostly, this program is an agent that
90 +is used to get data for
92 +This fetching of address mappings can be further automated by use of
95 +Both command arguments must be present for proper operation.
98 +argument is the hostname of the network entity being queried and the
100 +argument is the SNMP community name of the network entity.
102 +The information is presented on
104 +in a format compatible with
109 +Further information about SNMP can be found in
125 +Please send bug reports to arpwatch@ee.lbl.gov.
128 +Lawrence Berkeley National Laboratory Network Research Group,
129 +University of California, Berkeley, CA.
131 +The current version is available via anonymous ftp:
134 +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz
137 +This manual page was contributed by Hugo Graumann.
138 Index: arpwatch/arpsnmp.8
139 diff -u arpwatch/arpsnmp.8:1.1.1.1 arpwatch/arpsnmp.8:1.1.1.1.16.2
140 --- arpwatch/arpsnmp.8:1.1.1.1 Tue Apr 17 13:31:36 2001
141 +++ arpwatch/arpsnmp.8 Tue Apr 17 14:53:57 2001
143 .TH ARPSNMP 8 "17 September 2000"
146 -arpsnmp - keep track of ethernet/ip address pairings
147 +arpsnmp \- keep track of ethernet/ip address pairings
151 Index: arpwatch/arpwatch.8
152 diff -u arpwatch/arpwatch.8:1.1.1.1 arpwatch/arpwatch.8:1.1.1.1.16.2
153 --- arpwatch/arpwatch.8:1.1.1.1 Tue Apr 17 13:31:36 2001
154 +++ arpwatch/arpwatch.8 Tue Apr 17 14:53:57 2001
156 .TH ARPWATCH 8 "8 October 2000"
159 -arpwatch - keep track of ethernet/ip address pairings
160 +arpwatch \- keep track of ethernet/ip address pairings
164 Index: arpwatch/bihourly.8
165 diff -u /dev/null arpwatch/bihourly.8:1.1.2.2
166 --- /dev/null Sat Aug 14 03:19:34 2004
167 +++ arpwatch/bihourly.8 Tue Apr 17 14:12:51 2001
171 +bihourly \- track ethernet/ip address pairs
177 +is a script that automates the operation of
181 +on a series of hostnames and then
182 +sending the results to
186 +The result is a report of the current pairings
187 +between ip addresses and the corresponding ethernet address
188 +of the network hardware as reported by
191 +is logged and noted changes are reported by email.
193 +In its working directory
195 +expects a file named
197 +which contains a space separated list of hostnames to be queried
200 +which holds the SNMP community name by which to query these hosts.
202 +Contrary to the name,
204 +does not run twice every hour. It
205 +runs once each time it is invoked. For repeated operation
207 +must be invoked on a periodic basis by a program like
213 +/var/lib/arpwatch - default working directory
214 +list - file containing names of hosts to query
215 +cname - file containing the SNMP community name by which to query
229 +Please send bug reports to arpwatch@ee.lbl.gov.
232 +Lawrence Berkeley National Laboratory Network Research Group,
233 +University of California, Berkeley, CA.
235 +The current version is available via anonymous ftp:
238 +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz
241 +This manual page was contributed by Hugo Graumann.
242 Index: arpwatch/massagevendor.8
243 diff -u /dev/null arpwatch/massagevendor.8:1.1.2.2
244 --- /dev/null Sat Aug 14 03:19:34 2004
245 +++ arpwatch/massagevendor.8 Tue Apr 17 14:12:51 2001
249 +massagevendor \- convert the ethernet vendor codes master list to arpwatch format
256 +is a program that converts a text file containing ethernet vendor codes
257 +into a format suitable for use by
263 +is a master text file containing vendor codes. The output
268 +is expected to have a six digit hexadecimal vendor code
269 +followed by spaces followed by the name of the manufacturer.
271 +All ethernet devices have a unique identifier which
272 +includes a vendor code specifying the manufacturer of the
273 +device. In normal operation
279 +to report this vendor code.
281 +is used to generate the
283 +file from text files containing these vendor codes.
285 +Locations where an ethernet vendor codes master text file
286 +can be obtained are given below.
291 +/usr/share/arpwatch - default location of the ethernet vendor list
292 +ethercodes.dat - file containing the list of ethernet vendor codes
304 +Sources for ethernet vendor codes seen in the wild are
310 +.I http://map-ne.com/Ethernet/vendor.html
311 +.I ftp://ftp.cavebear.com/pub/Ethernet.txt
312 +.I http://www.cavebear.com/CaveBear/Ethernet/vendor.html
317 +Useful for comparison or completeness are the
318 +ethernet vendor codes as assigned
319 +by the IEEE which can be found at
322 +.I http://standards.ieee.org/regauth/oui/oui.txt
325 +Please send bug reports to arpwatch@ee.lbl.gov.
328 +Lawrence Berkeley National Laboratory Network Research Group,
329 +University of California, Berkeley, CA.
331 +The current version is available via anonymous ftp:
334 +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz
337 +This manual page was contributed by Hugo Graumann.