On 04/24/2011 07:27 AM, Cameron Kerr wrote:
And if you can't run arpwatch on such router, you could try SNMP to query the ARP table on the router.
On 24/04/2011, at 1:35 PM, Manuel Wolfshant wrote:
On 04/23/2011 09:27 PM, carlopmart wrote:
Arpwatch is a correct solution when host and guests are in the same network, but in my environment, they are in different nets with a firewall in the middle...
I run arpwatch on the core router which sits between all VLANs
If I put arpwatch on the router side, I will see firewall ip address only, because firewall does a nat over all networks behind it ...