Re: Network "Change Management"

From: Ben Nelson (lists_at_venom600.org)
Date: 09/16/04

  • Next message: Adrian Senn: "Re: Network "Change Management"" 
    Date: Thu, 16 Sep 2004 12:17:34 -0600
To: Dave Torre <dtorre@fostercity.org>

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Check out arpwatch:
    http://www.securityfocus.com/tools/142

    Can be very noisy if you have a DHCP enabled network, otherwise it's
    pretty good.

    - --Ben

    Dave Torre wrote:
    | Does anyone know of a Linux utility that can watch the MAC address
    | tables in Cisco switches and alert admins as to when a new device has
    | been plugged in?
    |
    | Basically, we have your standard client network with DHCP. Internet
    | access is restricted to authenticated users, and so are the file shares.
    | However, we've had a few instances where people just plug in their
    | personal laptops which makes me very worried...
    |
    | Any thoughts/suggestions as to how I can monitor such events in real
    | time?
    |
    | Thanks,
    | -Dave
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.4 (GNU/Linux)

    iD8DBQFBSdi+3cL8qXKvzcwRAq5XAKCPzKuHYZlwha7qhkwnSqaecwJKBQCfTST9
    AaE/octbFTvvxtl9G1bYkkA=
    =md+f
    -----END PGP SIGNATURE-----

  • Next message: Adrian Senn: "Re: Network "Change Management""