Hello,

I'm permit to take the arpalert list in Cc.

the order
- "mac address of requestor"
- "ip of requestor"
- "supp. param."
- "ethernet device listening on"
- "type of alert"
is the good order.

I'm just forget to update the comments in the default config file and in
the man file.

Thierry

Jimi Schwar a écrit :
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> In version 2.0.8 of the arpalert software, action on detect has the
> following information in the etc/arpalert.conf file
>
> # script launched on each detection
> # parameters are: "mac adress of requestor" "ip of requestor" "supp.
> parm." "type of alert"
> # type of alert:
> # 0: ip change
> # 1: mac address only detected but not in whithe list
> # 2: mac address in black list
> # 3: new mac address
> # 4: unauthorized arp request
> # 5: abusive number of arp request detected
> # 6: ethernet mac address different from arp mac address
> # 7: global flood detection
> # 8: new mac adress without ip
> # 9: mac change
> action on detect = ""
>
>
> but when i launch a script the following parameters are actually passed
> to my script: "mac address of requestor" "ip of requestor" "supp.
> param." "ethernet device listening on" "type of alert"
>
> example of data I'm receiving:
>
> 00:1b:63:00:00:00 192.168.100.2 169.254.53.111 eth1 0
>
> Is this an intended change to the behaviour of software, or do you think
> that I may have misconfigured the software? Any help you can provide in
> this matter would be great. If I have not explained what is happening
> well enough please let me know an I'll try to reword my question.
>
> Jim Schwar
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFHL2cDLoFgk8gx/48RAj8LAJ0c6os7tsA4GXi/APdgpC6VwUC1JACfRVYP
> eYBUJVyTURemeL9Y55OqJlU=
> =UqC8
> -----END PGP SIGNATURE-----
>

-- 
To unsubscribe send a mail to list+unsubscribe_at_arpalert.org