Centralized Arpwatch?
Russ Starr
russ.starr at gmail.com
Thu Aug 31 10:30:45 CDT 2006
Is there program out there that can collect remote arpwatch logs and
keep a "running total?" I have about 25 remote places that I would
like to put a minimal floppy or CD distro with arpwatch and maybe
remote syslog to a centralized server. I'm sure I could whip out some
shell scripts and put all the known hosts in to a csv.
My ultimate goal is to be notified of new hosts on all our network
segments. I'd probably take snapshots of the central csv and do diffs
with e-mail notifications on a regular interval or something similar.
I have also toyed with the idea of using arpsnmp to collect all remote
router's arp tables via SNMP and collect them in a similar manner.
Does anyone have any recommendations? Maybe there is a better-fitting
alternative to accomplish this task?
Thanks,
-Russ
More information about the Kclug
mailing list