User Tools

Site Tools


pom-ng:analyzer:arp

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
pom-ng:analyzer:arp [2012/10/12 13:38]
2001:7e8:2221:600:9471:feff:febb:91f7
pom-ng:analyzer:arp [2012/11/14 13:33]
2001:7e8:2221:600:a47b:1eff:fe63:53c6 Add VLAN info
Line 1: Line 1:
 ====== Analyzer arp ====== ====== Analyzer arp ======
  
-This analyzer listens to ARP packets and generates events out of them.+This analyzer listens to ARP packets and generates events out of them. Its main goal is to monitor ARP activity and provide useful information if the pair IP/MAC changes.
  
 ===== Events ===== ===== Events =====
Line 15: Line 15:
 |mac_addr|mac|MAC address of the station.| |mac_addr|mac|MAC address of the station.|
 |ip_addr|ipv4|IPv4 address of the station.| |ip_addr|ipv4|IPv4 address of the station.|
 +|vlan|uint16|VLAN id where the station was observed. 0 means the native VLAN.|
 |input|string|Input name from which the event was observed.| |input|string|Input name from which the event was observed.|
  
Line 24: Line 25:
 |new_mac_addr|mac|New MAC address observed for this station.| |new_mac_addr|mac|New MAC address observed for this station.|
 |ip_addr|ipv4|IPv4 address of the station.| |ip_addr|ipv4|IPv4 address of the station.|
 +|vlan|uint16|VLAN id where the station resides. 0 means the native VLAN.|
 |input|string|Input name from which the event was observed.| |input|string|Input name from which the event was observed.|
pom-ng/analyzer/arp.txt ยท Last modified: 2020/05/26 21:59 (external edit)