search for: arpwatch

Hi, What happened to the rhel3 i386 arpwatch package? There is only a x86_64 version: sarastro:/users/henkvl 573% ls /users/mirror/Linux/centos/3/*/*/RPMS/arp* /users/mirror/Linux/centos/3/addons/x86_64/RPMS/arpwatch-2.1a11-7.E3.5.x86_64.rpm but there once was a i386 version, as a have a /var/cache/yum/addons/headers/arpwatch-14-2.1a11-7....

Hi, I think the package arpwatch-2.1a11-7.E3.2.i386.rpm is missing in centos-3/3.1/updates. Or is it located somewhere else? The packages libpcap-0.7.2-7.E3.2.i386.rpm and tcpdump-3.7.2-7.E3.2.i386.rpm are present and they come from the same src.rpm Jan Kees

On and off, I'm seeing Mar 22 14:10:04 <server> arpwatch: short (want 42) The only thing like it I find in googling is an old debian bug, with the only solution I see, from <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=155182>, is "It seems that "struct ether_header" was 2 bytes too long, and with attribute packed it works fine...

Is any way to detect changed MAC adresses? Someone taught change MACs peoples in my network and I have problems. E.g. Two computers working on one MAC, and one IP (static ARP and DHCP). WinXP is screaming some message... that two computers or more have the same IP. How can I find out who''s changed MAC?

Dear all, Has anyone experienced this whilst running DRBD over eth1 between two CentOS 5.7 servers? eth1 is a private IP address, unroutable. eth0 is the public address. CentOS will reply sometimes once every 3 days or every 14mins~ saying "My public IP is on eth1" to arp requests when it's not, it's eth0. This freezes traffic and causes issues. We've looked at arp*

Hello everyone, I need a little help finding an issue one of my machines. I have 4 setup all the same way and just this one gives the errors. Here are the errors from Logwatch; ?################### LogWatch 5.2.2 (06/23/04) #################### ?--------------------- Arpwatch Begin ------------------------ Argument "4444'service' option expects either the name of a filter" isn't numeric in numeric ge (>=) at /etc/log.d/scripts/services/arpwatch line 14. ?---------------------- Arpwatch End ------------------------- ?---------------------...

...:14 AM, Javier Barroso <javibarroso@gmail.com> wrote: > Hello, > > I have a etch xen server with a virtual machine with 2 network > interfaces configured. Every interface has a different mac, and inside > the host has a different ip. > > However I can see with tcpdump and arpwatch (I discover this because > arpwatch told me), about the two ips has the two macs. > > I asked it in xen chat channel, but I hadn''t got response. > > itsm:~# ip add > 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN >    link/loopback 00:00:00:0...

...tos.org> Content-Type: text/plain; charset=us-ascii -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CentOS Errata and Security Advisory CESA-2005:417 https://rhn.redhat.com/errata/RHSA-2005-417.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: arpwatch-2.1a13-9.RHEL4.i386.rpm libpcap-0.8.3-9.RHEL4.i386.rpm tcpdump-3.8.2-9.RHEL4.i386.rpm src: tcpdump-3.8.2-9.RHEL4.src.rpm To get the update run : yum update - -- Karanbir Singh <kbsingh at centos.org> Web: http://www.centos.org/ irc: #centos @ irc.freenode.net -----BEGIN PGP SIGNATURE-----...

Using a default xen3.0.1 setup for dom0(rhel4 distro) and domUs (gentoo, rhel4, centos4.2 distros, ttylinux) with the domUs all having dhcp turned on, is there an easy way to tell from within the dom0 what ip addresses were assigned to the domUs after bootup? Toby Ford USi _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com

...roblem is when I am using firewall described below the client cannot access the server. No idea why. Without firewall everything works flawless. So the problem is not in the NTP configuration. No idea why but with disabled firewall the first query gives error but all other query is work. I am using arpwatch to see what is happen on network (new machines and so). Not know is that related to the problem or not. First I had used the system-config-firewall generated firewall (standard firewall with port 123:udp added). No success, client cannot connect. Next I made a script for myself and saved with ...

CentOS Errata and Security Advisory 2007:0387 https://rhn.redhat.com/errata/RHSA-2007-0387.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/arpwatch-2.1a13-12.el4.s390.rpm updates/s390/RPMS/libpcap-0.8.3-12.el4.s390.rpm updates/s390/RPMS/tcpdump-3.8.2-12.el4.s390.rpm s390x: updates/s390x/RPMS/arpwatch-2.1a13-12.el4.s390x.rpm updates/s390x/RPMS/libpcap-0.8.3-12.el4.s390x.rpm updates/s390x/RPMS/tcpdump-3.8.2-12.el4.s390x.rpm -- Pasi Pirhonen...

...com/errata/RHSA-2005-421.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/libpcap-0.7.2-7.E3.5.i386.rpm updates/x86_64/RPMS/libpcap-0.7.2-7.E3.5.x86_64.rpm updates/x86_64/RPMS/tcpdump-3.7.2-7.E3.5.x86_64.rpm addons/x86_64/RPMS/arpwatch-2.1a11-7.E3.5.x86_64.rpm source: updates/SRPMS/tcpdump-3.7.2-7.E3.5.src.rpm You may update your CentOS-3 x86_64 installations by running the command: yum update libpcap tcpdump arpwatch Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=g...

...tcpdump security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2005-421.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/libpcap-0.7.2-7.E3.5.i386.rpm updates/i386/RPMS/tcpdump-3.7.2-7.E3.5.i386.rpm addons/i386/RPMS/arpwatch-2.1a11-7.E3.5.i386.rpm source: updates/SRPMS/tcpdump-3.7.2-7.E3.5.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update libpcap tcpdump arpwatch Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&a...

CentOS Errata and Security Advisory CESA-2005:417 https://rhn.redhat.com/errata/RHSA-2005-417.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/arpwatch-2.1a11-7.E3.5.s390.rpm updates/s390/RPMS/libpcap-0.7.2-7.E3.5.s390.rpm updates/s390/RPMS/tcpdump-3.7.2-7.E3.5.s390.rpm s390x: updates/s390x/RPMS/arpwatch-2.1a11-7.E3.5.s390x.rpm updates/s390x/RPMS/libpcap-0.7.2-7.E3.5.s390x.rpm updates/s390x/RPMS/tcpdump-3.7.2-7.E3.5.s390x.rpm -- Pasi Pirhonen -...

...login rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin pcap:x:77:77::/var/arpwatch:/sbin/nologin xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin pegasus:x:100:500:tog-pegasus OpenPegasus WBEM/CIM services:/var/lib/Pegasus:/sbin/nologin postfix:x:89:89::/var/spool/postfix:/sbin/nologin ntp:x:38:38::/etc/ntp:/sbin/nologin [root@io source]# =====================================...

...RPC > user:/:/sbin/nologin mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin > smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin > rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin > nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin > pcap:x:77:77::/var/arpwatch:/sbin/nologin > xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin > pegasus:x:100:500:tog-pegasus OpenPegasus WBEM/CIM > services:/var/lib/Pegasus:/sbin/nologin > postfix:x:89:89::/var/spool/postfix:/sbin/nologin > ntp:x:38:38::/etc/ntp:/sbin/nologin > [root@io source]# >...

How can I find out that someone is using it's network card in promiscuous mode in a subnet? Thank you!

CentOS Errata and Security Advisory 2007:0387 https://rhn.redhat.com/errata/RHSA-2007-0387.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/arpwatch-2.1a13-12.el4.ia64.rpm updates/ia64/RPMS/libpcap-0.8.3-12.el4.ia64.rpm updates/ia64/RPMS/tcpdump-3.8.2-12.el4.ia64.rpm -- Pasi Pirhonen - upi@iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored -------------- next part -------------- A non-text attachment was scrubbed... Name: not av...

...ars corrupted, and I am not sure if this is affecting the the behaviour of how users connect. wbinfo -u and wbinfo -g appear to be functioning ok. Here is the the last few lines of output from getent passwd: nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin pcap:x:77:77::/var/arpwatch:/sbin/nologin xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin named:x:25:25:Named:/var/named:/sbin/nologin apache:x:48:48:Apache:/var/www:/sbin/nologin zutenis:x:500:500::/home/zutenis:/bin/bash ?RESDOM\Administrator::0:1000:?:: ::0:1001:?:: ::0:1002:?:: ::0:1003:?:: ::0:1004:?:: ::0:1005:?:: :...

CentOS Errata and Security Advisory 2005:505 https://rhn.redhat.com/errata/RHSA-2005-505.html The following updated files have been uploaded and are currently syncing to the mirrors for both CentOS 4.0 and 4.1: i386: arpwatch-2.1a13-10.RHEL4.i386.rpm libpcap-0.8.3-10.RHEL4.i386.rpm tcpdump-3.8.2-10.RHEL4.i386.rpm src: tcpdump-3.8.2-10.RHEL4.src.rpm -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally s...