pom-ng:analyzer:arp
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionLast revisionBoth sides next revision | ||
pom-ng:analyzer:arp [2012/10/12 13:38] – 2001:7e8:2221:600:9471:feff:febb:91f7 | pom-ng:analyzer:arp [2012/11/14 13:33] – Add VLAN info 2001:7e8:2221:600:a47b:1eff:fe63:53c6 | ||
---|---|---|---|
Line 1: | Line 1: | ||
====== Analyzer arp ====== | ====== Analyzer arp ====== | ||
- | This analyzer listens to ARP packets and generates events out of them. | + | This analyzer listens to ARP packets and generates events out of them. Its main goal is to monitor ARP activity and provide useful information if the pair IP/MAC changes. |
===== Events ===== | ===== Events ===== | ||
Line 15: | Line 15: | ||
|mac_addr|mac|MAC address of the station.| | |mac_addr|mac|MAC address of the station.| | ||
|ip_addr|ipv4|IPv4 address of the station.| | |ip_addr|ipv4|IPv4 address of the station.| | ||
+ | |vlan|uint16|VLAN id where the station was observed. 0 means the native VLAN.| | ||
|input|string|Input name from which the event was observed.| | |input|string|Input name from which the event was observed.| | ||
Line 24: | Line 25: | ||
|new_mac_addr|mac|New MAC address observed for this station.| | |new_mac_addr|mac|New MAC address observed for this station.| | ||
|ip_addr|ipv4|IPv4 address of the station.| | |ip_addr|ipv4|IPv4 address of the station.| | ||
+ | |vlan|uint16|VLAN id where the station resides. 0 means the native VLAN.| | ||
|input|string|Input name from which the event was observed.| | |input|string|Input name from which the event was observed.| |
pom-ng/analyzer/arp.txt · Last modified: 2020/05/26 21:59 by 127.0.0.1