Jak máte řešeno sledování sítě na úrovni ARP. Nějaký script?
Používám:
ipaddr;
macaddr;
iface;
macoui;
/ip arp
#Jen vybrane interface.
# i in= do={
#Vsechny interface.
i in= do={
ipaddr
macaddr
iface
( = "") do {
/ip firewall address-list add list="arpwatch" address=$ipaddr comment=$macaddr disabled=yes
warning ("New MAC address: $macaddr ($ipaddr@$iface)")
macoui ([ . [ . [ . [ . [ . [ )
#
/tool e-mail send to="email@email" subject="ARPwatch" body="New MAC address: $macaddr ($ipaddr@$iface)\r\n\r\nManufacturer: http://standards.ieee.org/cgi-bin/ouisearch?$macoui"
}
}
