User Tools

Site Tools


pom-ng:analyzer:arp

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Last revisionBoth sides next revision
pom-ng:analyzer:arp [2012/10/12 13:38] 2001:7e8:2221:600:9471:feff:febb:91f7pom-ng:analyzer:arp [2012/11/14 13:33] – Add VLAN info 2001:7e8:2221:600:a47b:1eff:fe63:53c6
Line 1: Line 1:
 ====== Analyzer arp ====== ====== Analyzer arp ======
  
-This analyzer listens to ARP packets and generates events out of them.+This analyzer listens to ARP packets and generates events out of them. Its main goal is to monitor ARP activity and provide useful information if the pair IP/MAC changes.
  
 ===== Events ===== ===== Events =====
Line 15: Line 15:
 |mac_addr|mac|MAC address of the station.| |mac_addr|mac|MAC address of the station.|
 |ip_addr|ipv4|IPv4 address of the station.| |ip_addr|ipv4|IPv4 address of the station.|
 +|vlan|uint16|VLAN id where the station was observed. 0 means the native VLAN.|
 |input|string|Input name from which the event was observed.| |input|string|Input name from which the event was observed.|
  
Line 24: Line 25:
 |new_mac_addr|mac|New MAC address observed for this station.| |new_mac_addr|mac|New MAC address observed for this station.|
 |ip_addr|ipv4|IPv4 address of the station.| |ip_addr|ipv4|IPv4 address of the station.|
 +|vlan|uint16|VLAN id where the station resides. 0 means the native VLAN.|
 |input|string|Input name from which the event was observed.| |input|string|Input name from which the event was observed.|
pom-ng/analyzer/arp.txt · Last modified: 2020/05/26 21:59 by 127.0.0.1