]>
Commit | Line | Data |
---|---|---|
e2fb63d0 TP |
1 | Index: arpwatch/arp2ethers.8 |
2 | diff -u /dev/null arpwatch/arp2ethers.8:1.1.2.3 | |
3 | --- /dev/null Sat Aug 14 03:19:34 2004 | |
4 | +++ arpwatch/arp2ethers.8 Thu Aug 12 14:37:09 2004 | |
5 | @@ -0,0 +1,64 @@ | |
6 | +.TH ARP2ETHERS 8 | |
7 | +.SH NAME | |
8 | +arp2ethers \- convert arpwatch address database to ethers file format | |
9 | +.SH SYNOPSIS | |
10 | +.na | |
11 | +.B arp2ethers | |
12 | +[ | |
13 | +.B arp.dat file | |
14 | +] | |
15 | +.ad | |
16 | +.SH "DESCRIPTION" | |
17 | +.B arp2ethers | |
18 | +converts the file | |
19 | +.IR /var/lib/arpwatch/arp.dat | |
20 | +(or the file specified on the command line) | |
21 | +into | |
22 | +.BR ethers(5) | |
23 | +format on | |
24 | +.IR stdout . | |
25 | +Usually | |
26 | +.IR arp.dat | |
27 | +is an ethernet/ip database file generated by | |
28 | +.BR arpwatch(8) . | |
29 | +The arpwatch daemon in Debian will create different | |
30 | +.IR arp.dat | |
31 | +depending on its configuration. All of them will be available at | |
32 | +.IR /var/lib/arpwatch/ . | |
33 | +.SH FILES | |
34 | +.na | |
35 | +.nh | |
36 | +.nf | |
37 | +/var/lib/arpwatch - default directory for arp.dat | |
38 | +arp.dat - ethernet/ip address database | |
39 | +.ad | |
40 | +.hy | |
41 | +.fi | |
42 | +.SH "SEE ALSO" | |
43 | +.na | |
44 | +.nh | |
45 | +.BR arpwatch (8), | |
46 | +.BR ethers (5), | |
47 | +.BR rarp (8), | |
48 | +.BR arp (8), | |
49 | +.ad | |
50 | +.hy | |
51 | +.SH BUGS | |
52 | +Please send bug reports to arpwatch@ee.lbl.gov. | |
53 | +.SH AUTHORS | |
54 | +.LP | |
55 | +Original version by Craig Leres of the Lawrence Berkeley | |
56 | +National Laboratory Network Research Group, University of | |
57 | +California, Berkeley, CA. | |
58 | +.LP | |
59 | +Modified for the Debian Project by Peter Kelemen, with | |
60 | +additions from Erik Warmelink. | |
61 | +.LP | |
62 | +The current version is available via anonymous ftp: | |
63 | +.LP | |
64 | +.RS | |
65 | +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz | |
66 | +.RE | |
67 | +.LP | |
68 | +This manual page was contributed by Hugo Graumann. | |
69 | + | |
70 | Index: arpwatch/arpfetch.8 | |
71 | diff -u /dev/null arpwatch/arpfetch.8:1.1.2.2 | |
72 | --- /dev/null Sat Aug 14 03:19:34 2004 | |
73 | +++ arpwatch/arpfetch.8 Tue Apr 17 14:12:51 2001 | |
74 | @@ -0,0 +1,63 @@ | |
75 | +.TH ARPFETCH 8 | |
76 | +.SH NAME | |
77 | +arpfetch \- obtain ethernet/ip address pairings via snmp | |
78 | +.SH SYNOPSIS | |
79 | +.na | |
80 | +arpfetch | |
81 | +.I host | |
82 | +.I cname | |
83 | +.SH "DESCRIPTION" | |
84 | +.B arpfetch | |
85 | +gets pairings between ip addresses and the ethernet address of the | |
86 | +corresponding network card. These pairings are retrieved from other | |
87 | +network entities, like routers, by the SNMP protocol using | |
88 | +.BR snmpwalk(1) . | |
89 | +Mostly, this program is an agent that | |
90 | +is used to get data for | |
91 | +.BR arpsnmp(8) . | |
92 | +This fetching of address mappings can be further automated by use of | |
93 | +.BR bihourly(8) . | |
94 | +.LP | |
95 | +Both command arguments must be present for proper operation. | |
96 | +The | |
97 | +.IR host | |
98 | +argument is the hostname of the network entity being queried and the | |
99 | +.IR cname | |
100 | +argument is the SNMP community name of the network entity. | |
101 | +.LP | |
102 | +The information is presented on | |
103 | +.IR stdout | |
104 | +in a format compatible with | |
105 | +.BR arpsnmp(8) | |
106 | +and | |
107 | +.BR arpwatch(8) . | |
108 | +.LP | |
109 | +Further information about SNMP can be found in | |
110 | +.BR snmpcmd(1) | |
111 | +and | |
112 | +.BR variables(5) . | |
113 | +.SH "SEE ALSO" | |
114 | +.na | |
115 | +.nh | |
116 | +.BR arpsnmp (8), | |
117 | +.BR arpwatch(8), | |
118 | +.BR bihourly (8), | |
119 | +.BR snmpwalk (1), | |
120 | +.BR snmpcmd (1), | |
121 | +.BR variables (5) | |
122 | +.ad | |
123 | +.hy | |
124 | +.SH BUGS | |
125 | +Please send bug reports to arpwatch@ee.lbl.gov. | |
126 | +.SH AUTHORS | |
127 | +Craig Leres of the | |
128 | +Lawrence Berkeley National Laboratory Network Research Group, | |
129 | +University of California, Berkeley, CA. | |
130 | +.LP | |
131 | +The current version is available via anonymous ftp: | |
132 | +.LP | |
133 | +.RS | |
134 | +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz | |
135 | +.RE | |
136 | +.LP | |
137 | +This manual page was contributed by Hugo Graumann. | |
138 | Index: arpwatch/arpsnmp.8 | |
139 | diff -u arpwatch/arpsnmp.8:1.1.1.1 arpwatch/arpsnmp.8:1.1.1.1.16.2 | |
140 | --- arpwatch/arpsnmp.8:1.1.1.1 Tue Apr 17 13:31:36 2001 | |
141 | +++ arpwatch/arpsnmp.8 Tue Apr 17 14:53:57 2001 | |
142 | @@ -22,7 +22,7 @@ | |
143 | .TH ARPSNMP 8 "17 September 2000" | |
144 | .UC 4 | |
145 | .SH NAME | |
146 | -arpsnmp - keep track of ethernet/ip address pairings | |
147 | +arpsnmp \- keep track of ethernet/ip address pairings | |
148 | .SH SYNOPSIS | |
149 | .B arpsnmp | |
150 | [ | |
151 | Index: arpwatch/arpwatch.8 | |
152 | diff -u arpwatch/arpwatch.8:1.1.1.1 arpwatch/arpwatch.8:1.1.1.1.16.2 | |
153 | --- arpwatch/arpwatch.8:1.1.1.1 Tue Apr 17 13:31:36 2001 | |
154 | +++ arpwatch/arpwatch.8 Tue Apr 17 14:53:57 2001 | |
155 | @@ -22,7 +22,7 @@ | |
156 | .TH ARPWATCH 8 "8 October 2000" | |
157 | .UC 4 | |
158 | .SH NAME | |
159 | -arpwatch - keep track of ethernet/ip address pairings | |
160 | +arpwatch \- keep track of ethernet/ip address pairings | |
161 | .SH SYNOPSIS | |
162 | .na | |
163 | .B arpwatch | |
164 | Index: arpwatch/bihourly.8 | |
165 | diff -u /dev/null arpwatch/bihourly.8:1.1.2.2 | |
166 | --- /dev/null Sat Aug 14 03:19:34 2004 | |
167 | +++ arpwatch/bihourly.8 Tue Apr 17 14:12:51 2001 | |
168 | @@ -0,0 +1,73 @@ | |
169 | +.TH BIHOURLY 8 | |
170 | +.SH NAME | |
171 | +bihourly \- track ethernet/ip address pairs | |
172 | +.SH SYNOPSIS | |
173 | +.na | |
174 | +bihourly | |
175 | +.SH "DESCRIPTION" | |
176 | +.B bihourly | |
177 | +is a script that automates the operation of | |
178 | +.B arpsnmp(8) | |
179 | +by executing | |
180 | +.B arpfetch(8) | |
181 | +on a series of hostnames and then | |
182 | +sending the results to | |
183 | +.B arpsnmp(8) | |
184 | +for analysis. | |
185 | +.LP | |
186 | +The result is a report of the current pairings | |
187 | +between ip addresses and the corresponding ethernet address | |
188 | +of the network hardware as reported by | |
189 | +.B snmpwalk(8). | |
190 | +Activity | |
191 | +is logged and noted changes are reported by email. | |
192 | +.LP | |
193 | +In its working directory | |
194 | +.B bihourly | |
195 | +expects a file named | |
196 | +.IR list | |
197 | +which contains a space separated list of hostnames to be queried | |
198 | +and a file named | |
199 | +.IR cname | |
200 | +which holds the SNMP community name by which to query these hosts. | |
201 | +.LP | |
202 | +Contrary to the name, | |
203 | +.B bihourly | |
204 | +does not run twice every hour. It | |
205 | +runs once each time it is invoked. For repeated operation | |
206 | +.B bihourly | |
207 | +must be invoked on a periodic basis by a program like | |
208 | +.B cron(1). | |
209 | +.SH FILES | |
210 | +.na | |
211 | +.nh | |
212 | +.nf | |
213 | +/var/lib/arpwatch - default working directory | |
214 | +list - file containing names of hosts to query | |
215 | +cname - file containing the SNMP community name by which to query | |
216 | +.ad | |
217 | +.hy | |
218 | +.fi | |
219 | +.SH "SEE ALSO" | |
220 | +.na | |
221 | +.nh | |
222 | +.BR arpsnmp (8), | |
223 | +.BR arpfetch(8), | |
224 | +.BR snmpwalk (8), | |
225 | +.BR cron (8) | |
226 | +.ad | |
227 | +.hy | |
228 | +.SH BUGS | |
229 | +Please send bug reports to arpwatch@ee.lbl.gov. | |
230 | +.SH AUTHORS | |
231 | +Craig Leres of the | |
232 | +Lawrence Berkeley National Laboratory Network Research Group, | |
233 | +University of California, Berkeley, CA. | |
234 | +.LP | |
235 | +The current version is available via anonymous ftp: | |
236 | +.LP | |
237 | +.RS | |
238 | +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz | |
239 | +.RE | |
240 | +.LP | |
241 | +This manual page was contributed by Hugo Graumann. | |
242 | Index: arpwatch/massagevendor.8 | |
243 | diff -u /dev/null arpwatch/massagevendor.8:1.1.2.2 | |
244 | --- /dev/null Sat Aug 14 03:19:34 2004 | |
245 | +++ arpwatch/massagevendor.8 Tue Apr 17 14:12:51 2001 | |
246 | @@ -0,0 +1,91 @@ | |
247 | +.TH MASSAGEVENDOR 8 | |
248 | +.SH NAME | |
249 | +massagevendor \- convert the ethernet vendor codes master list to arpwatch format | |
250 | +.SH SYNOPSIS | |
251 | +.na | |
252 | +massagevendor | |
253 | +.I vendorfile | |
254 | +.SH "DESCRIPTION" | |
255 | +.B massagevendor | |
256 | +is a program that converts a text file containing ethernet vendor codes | |
257 | +into a format suitable for use by | |
258 | +.B arpwatch(8) | |
259 | +and | |
260 | +.B arpsnmp(8). | |
261 | +The input | |
262 | +.I vendorfile | |
263 | +is a master text file containing vendor codes. The output | |
264 | +is sent to | |
265 | +.I stdout. | |
266 | +Each line of the | |
267 | +.I vendorfile | |
268 | +is expected to have a six digit hexadecimal vendor code | |
269 | +followed by spaces followed by the name of the manufacturer. | |
270 | +.LP | |
271 | +All ethernet devices have a unique identifier which | |
272 | +includes a vendor code specifying the manufacturer of the | |
273 | +device. In normal operation | |
274 | +.B arpwatch(8) | |
275 | +and | |
276 | +.B arpsnmp(8) | |
277 | +use the file | |
278 | +.I ethercodes.dat | |
279 | +to report this vendor code. | |
280 | +.B massagevendor | |
281 | +is used to generate the | |
282 | +.I ethercodes.dat | |
283 | +file from text files containing these vendor codes. | |
284 | +.LP | |
285 | +Locations where an ethernet vendor codes master text file | |
286 | +can be obtained are given below. | |
287 | +.SH FILES | |
288 | +.na | |
289 | +.nh | |
290 | +.nf | |
291 | +/usr/share/arpwatch - default location of the ethernet vendor list | |
292 | +ethercodes.dat - file containing the list of ethernet vendor codes | |
293 | +.ad | |
294 | +.hy | |
295 | +.fi | |
296 | +.SH "SEE ALSO" | |
297 | +.na | |
298 | +.nh | |
299 | +.BR arpwatch(8), | |
300 | +.BR arpsnmp(8) | |
301 | +.ad | |
302 | +.hy | |
303 | +.SH NOTES | |
304 | +Sources for ethernet vendor codes seen in the wild are | |
305 | +.LP | |
306 | +.na | |
307 | +.nh | |
308 | +.nf | |
309 | +.RS | |
310 | +.I http://map-ne.com/Ethernet/vendor.html | |
311 | +.I ftp://ftp.cavebear.com/pub/Ethernet.txt | |
312 | +.I http://www.cavebear.com/CaveBear/Ethernet/vendor.html | |
313 | +.RE | |
314 | +.ad | |
315 | +.hy | |
316 | +.LP | |
317 | +Useful for comparison or completeness are the | |
318 | +ethernet vendor codes as assigned | |
319 | +by the IEEE which can be found at | |
320 | +.LP | |
321 | +.RS | |
322 | +.I http://standards.ieee.org/regauth/oui/oui.txt | |
323 | +.RE | |
324 | +.SH BUGS | |
325 | +Please send bug reports to arpwatch@ee.lbl.gov. | |
326 | +.SH AUTHORS | |
327 | +Craig Leres of the | |
328 | +Lawrence Berkeley National Laboratory Network Research Group, | |
329 | +University of California, Berkeley, CA. | |
330 | +.LP | |
331 | +The current version is available via anonymous ftp: | |
332 | +.LP | |
333 | +.RS | |
334 | +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz | |
335 | +.RE | |
336 | +.LP | |
337 | +This manual page was contributed by Hugo Graumann. |