'arpalert' listens on a network interface, catches all conversations of MAC address to IP request, and compares the MAc addresses it detected with a pre-configured list of authorized addresses. If the address is not on this list, arpalert launches an alert script with the MAC address and IP address as parameters. 'arpalert' can run in daemon mode and is very fast (low CPU and memory consumption). It responds at signal SIGHUP (configuration reload) and at signals SIGTERM, SIGINT, SIGQUIT and SIGABRT (Kwhere it stops itself).
released on 1 January 2006
|License||Verified by||Verified on||Notes|
|GPLv2||Janet Casey||19 July 2005|
Leaders and contributors
Resources and communication
This entry (in part or in whole) was last reviewed on 7 January 2008.