Shulou(Shulou.com)06/02 Report--

The editor will share with you the record of using linux's arpwatch command to monitor ARP on the network. I hope you will gain a lot after reading this article. Let's discuss it together.

The arpwatch command is used to listen for records of ARP on the network.

ARP (Address Resolution Protocol) is a protocol used to resolve the hardware addresses of IP and network devices. Arpwatch can listen for and record ARP packets in the local area network, and report the monitored changes through E-mail.

Syntax format: arpwatch [parameters]

Common parameters:

-d start debug mode-f sets the file where ARP records are stored, the default is / var/arpwatch/arp.dat-i to specify the interface for listening to ARP, and the default interface is for eth0-r to read ARP records from the specified file instead of listening from the network-n specifies additional local network-u specifies user and user group-e to send mail to the specified user, non-default root user-s specifies user name as the return address Instead of the default user root

Reference example

Listen to the ARP information of the Nic eth0:

[root@linuxcool] # arpwatch-I eth0

Monitor the information of ARP and record the relevant information to the appropriate file:

[root@linuxcool] # arpwatch-I eth0-f a.log has finished reading this article. I believe you have some understanding of using linux's arpwatch command to monitor the records of ARP on the network. You want to know more about it. Welcome to follow the industry information channel. Thank you for reading!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.