Re: arpwatch exclusion ?
In article <[🔎] 3EE74FB6.firstname.lastname@example.org>
>I am using arpwatch, but I use a few machines with 2 ethernet cards, and
>they often flip-flop... As I know them, I want to exclude the flip-flop
>mails from my mailbox...
>How could I tune arpwatch so that it does not listen to those
>flip-flops, or it does not send mails for these ?
Use the "-s program" option to send the "mail" via a program that does
whatever filtering you want. I'm filtering out the proxy-arp responces
this way. (There are hundreds of them every day on my firewall.)
Unless you know all flip-flops will be noise, I'd recomend only filtering
the ones you know about.
Blars Blarson email@example.com
"Text is a way we cheat time." -- Patrick Nielsen Hayden