On 04/24/2011 07:27 AM, Cameron Kerr wrote:
> And if you can't run arpwatch on such router, you could try SNMP to query the ARP table on the router.
>
> On 24/04/2011, at 1:35 PM, Manuel Wolfshant wrote:
>
>> On 04/23/2011 09:27 PM, carlopmart wrote:
>>>
>>> Arpwatch is a correct solution when host and guests are in the same
>>> network, but in my environment, they are in different nets with a
>>> firewall in the middle...
>> I run arpwatch on the core router which sits between all VLANs
>>
If I put arpwatch on the router side, I will see firewall ip address
only, because firewall does a nat over all networks behind it ...
--
CL Martinez
carlopmart {at} gmail {d0t} com