rarpwatch
Carter Bullard
carter at qosient.com
Thu Jan 31 08:52:45 EST 2013
Hey Craig,
rarpwatch() doesn't work, its a work in progress. I haven't finished it, but I'm glad you're
trying to use it. Argus data has all the info needed to perform the classic arpwatch()
function, and most people have stopped running it, so..... It's on the list to finish.
Carter
On Jan 30, 2013, at 7:46 PM, Craig Merchant <cmerchant at responsys.com> wrote:
> The documentation for rarpwatch says it supports classic arpwatch functionality using Argus flows.
>
> What are the anomaly events that rarpwatch looks for? I’ve tried running it against my radium instance, but no flows ever appear. I’m presuming that’s because I don’t have any bad arp traffic currently.
>
> Thx.
>
> Craig
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130131/10af3e2a/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2589 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130131/10af3e2a/attachment.bin>
More information about the argus
mailing list