[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Noisy arpwatch



On Tue, 24 Aug 2004 09:55:59 +0200
Steinar Bang <sb@dod.no> wrote:

> Platform: Intel Pentium M,
>           debian sarge (testing/unstable),
>           arpwatch 2.1a11-6.3
> 
> After my last "apt-get dist-upgrade", arpwatch has gotten very noisy.
> It keeps sending me emails about every matchine it sees on the LAN.
> At first it was kind of interesting.  Right now, I would rather switch
> it off.
> 
> First I looked at the /etc/arpwatch.conf file, which has the following
> lines near the end:
> 	# Uncomment this lines to have these interfaces monitored
> 	# sending mails to the local root user
> 	#eth0	-N -p -m root
> 	#eth1	-N -p -m root
> 
> Both the -N and -p flags looked promisng.  -N is "don't report any
> bogons", and -p is "disable promiscous operations".
> 
> So I uncommented the eth0 line above, and did
> 	/etc/init.d/arpwatch restart
> 
> That just made it noisier, presumably becaus it was busy rebuilding an
> eth0-specific database.
> 
> Can anyone assist me in makin arpwatch stop sending emails, short of
> doing 
> 	apt-get remove arpwatch
> ?

Previously I have used/created an option in the /etc/init.d startup
script for programs that I didn't want to start at bootup time, then I
can just run them as I want to. As an example, look at the way apache2
isn't started at boot time until you change NO_START to 0 instead of 1
in /etc/default/apache2 (which is checked by /etc/init.d/apache2).

HTH,
Jacob

-- 
GnuPG Key: 1024D/16377135

Random .signature #33:
Linux: transforms your microcomputer in a workstation.
Windows NT: transforms your workstation in a microcomputer.

Attachment: pgppMGN2G7sH0.pgp
Description: PGP signature


Reply to: