Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.networking > #3465
| Date | 2015-08-08 21:02 -0700 |
|---|---|
| From | Ant <ant@zimage.comANT> |
| Newsgroups | comp.os.linux.networking |
| Subject | Re: Lookup of addresses in arpwatch's e-mail notifications? |
| References | <_8KdnTvKiuQH6iPInZ2dnUU7-WednZ2d@earthlink.com> <slrnmru17b.eij.grahn+nntp@frailea.sa.invalid> <cpednRzJv5oN9V7InZ2dnUU7-RGdnZ2d@earthlink.com> <slrnms8ig7.eij.grahn+nntp@frailea.sa.invalid> |
| Message-ID | <Qe2dndXOp7JDTVvInZ2dnUU7-XmdnZ2d@earthlink.com> (permalink) |
On 8/6/2015 11:02 PM, Jorgen Grahn wrote:
>>>> Is there a way to look up each address like MAC and IP addresses, so I
>>>> know whose device/host it is? I am currently using Debian oldstable.
>>>
>>> You're talking about the arpwatch utility which sends a mail when a
>>> new computer shows up in a LAN.
>>>
>>> But it already does what you want! It resolves both IP addresses and
>>> MAC addresses, whenever possible. It's the "hostname" and "ethernet
>>> vendor" headlines.
>>
>> Hmm. I don't get those hostnames and ethernet vendors though.
>
> But do you get the headlines?
Here is what mail command shows me:
$ mail
Mail version 8.1.2 01/15/2001. Type ? for help.
"/var/mail/user": 2 messages
> 1 arpwatch@MyBox Sat Aug 08 20:57 28/921 flip flop
(192.168.1.10) eth0
2 arpwatch@MyBox Sat Aug 08 20:57 28/918 flip flop
(192.168.1.9) eth0
& 1
Message 1:
From arpwatch@MyBox Sat Aug 08 20:57:24 2015
Envelope-to: root@MyBox
Delivery-date: Sat, 08 Aug 2015 20:57:24 -0700
From: arpwatch@MyBox (Arpwatch MyBox)
To: root@MyBox
Subject: flip flop (192.168.1.10) eth0
Date: Sat, 08 Aug 2015 20:57:24 -0700
Content-Length: 394
Lines: 10
hostname: <unknown>
ip address: 192.168.1.10
interface: eth0
ethernet address: 96:10:3e:a3:5a:f4
ethernet vendor: <unknown>
old ethernet address: 96:10:3e:a3:5a:f8
old ethernet vendor: <unknown>
timestamp: Saturday, August 8, 2015 20:57:24 -0700
previous timestamp: Saturday, August 8, 2015 20:51:48 -0700
delta: 5 minutes
> I'm not that surprised that the IP address isn't resolved, because
> IPv4 addresses on a LAN tend to be private like 192.168/16, and you
> won't find those in DNS. If you haven't written them down in
> /etc/hosts, the address--name mapping is just in your head.
Yeah, I understand this. /etc/hosts has that static addresses' information.
> For the MAC address, I don't know ... there is a vendor database
> somewhere, but I don't know how common it is for NICs not to be listed
> there. My latest computer[0] was listed anyway:
>
> hostname: <unknown>
> ip address: 169.254.171.130
> interface: eth0
> ethernet address: 00:30:05:d0:c5:24
> ethernet vendor: Fujitsu Siemens Computers
> timestamp: Wednesday, June 3, 2015 21:09:33 +0200
>
> But my BeagleBone Black wasn't.
>
> /Jorgen
>
> [0] Fujitsu-Siemens Esprimo something. Nice little desktop. Bought
> second-hand: the brand is now obsolete, as I understand it.
>
169 address? :/
--
"None preaches better than the ant, and she says nothing." --Ben Franklin
Note: A fixed width font (Courier, Monospace, etc.) is required to see
this signature correctly.
/\___/\ Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
/ /\ /\ \ Ant's Quality Foraged Links: http://aqfl.net
| |o o| |
\ _ / If crediting, then use Ant nickname and AQFL URL/link.
( ) Chop ANT from its address if e-mailing privately.
Ant is currently not listening to any songs on this computer.
Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Lookup of addresses in arpwatch's e-mail notifications? ANTant@zimage.com (Ant) - 2015-08-02 15:03 -0500
Re: Lookup of addresses in arpwatch's e-mail notifications? Anonymous <anonymous@hoi-polloi.org> - 2015-08-03 04:20 +0200
Re: Lookup of addresses in arpwatch's e-mail notifications? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2015-08-03 09:34 -0400
Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-06 06:59 -0700
Re: Lookup of addresses in arpwatch's e-mail notifications? Kirk_Von_Rockstein <Kirk_Von_Rockstein@nowhere.invalid> - 2015-08-06 17:18 +0000
Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-08 20:56 -0700
Re: Lookup of addresses in arpwatch's e-mail notifications? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-09 05:42 +0000
Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-06 06:58 -0700
Re: Lookup of addresses in arpwatch's e-mail notifications? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-03 06:06 +0000
Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-06 07:00 -0700
Re: Lookup of addresses in arpwatch's e-mail notifications? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-07 06:02 +0000
Re: Lookup of addresses in arpwatch's e-mail notifications? Rick Jones <rick.jones2@hp.com> - 2015-08-07 20:45 +0000
Re: Lookup of addresses in arpwatch's e-mail notifications? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-08 07:15 +0000
Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-08 21:05 -0700
Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-08 21:04 -0700
Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-08 21:02 -0700
Re: Lookup of addresses in arpwatch's e-mail notifications? Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2015-08-09 10:12 +0300
Re: Lookup of addresses in arpwatch's e-mail notifications? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-09 07:28 +0000
Re: Lookup of addresses in arpwatch's e-mail notifications? Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2015-08-09 21:34 +0300
Re: Lookup of addresses in arpwatch's e-mail notifications? Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-08-03 06:05 +0000
Re: Lookup of addresses in arpwatch's e-mail notifications? Dumpsdrive Drive <fromdrive@gmail.com> - 2015-12-19 06:38 -0800
csiph-web