[Snort-users] IP check

Lance Boon lboon at ...11799...
Tue Nov 23 07:45:00 EST 2004


Use arpwatch http://www.securityfocus.com/tools/142


Hi everybody!
I'm newbie in snort configuring (about 3 days........) and i have a
question
for you!
I have configured my snort-machine to analize only my internal lan
traffic
and i want to manage ip/mac couple for every host.
I explain it:
i want to register every ip/mac for every host and i want to be alerted
if
somebody changes his/her ip address or a new mac address appear on the
network
(i.e. somebody attach his/her laptop on the lan without
authorization)......
What i have to do???????

Thanx a lot in advance!
Simone Nanni.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3739 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20041123/2dab3771/attachment.bin>


More information about the Snort-users mailing list