Re: checking the not allowed changing of IP's

[Noel Koethe <noel@koethe.net>]

On Fre, 12 Okt 2001, Szabó Tamás wrote:

Hello,

> The logging of the internet activity is done based on the IP addresses,
> so our policy doesn't allow changing of IP addresses. But currently
> there will be no notification of the fact if someone changes it's IP. So
> I'm looking for a solution for this...
> 
> Are there some nice utilities for this?
> 
> I could write a script and put it in crontab to check the ARP-IP
> association of hosts periodicaly.
> But probably there are already some written, tested utilities out there.
> Right?

http://packages.debian.org/unstable/admin/arpwatch.html
Arpwatch sniffes on a NIC and mail when a MAC-IP changes.
 
-- 
Noch einen schönen Tag

	Noèl Köthe