arpcheck-1.8
Platforms:
Linux
Categories:
Monitoring,
System Security Management
Version: 1.8
URL: http://ge.mine.nu/code/arpcheck
arpcheck checks /proc/net/arp for MAC/IP combinations and compares them to a static or dynamic MAC list.
If something does not fit, you'll get an alarm which will also be logged. You can also run custom scripts/commands like adding iptables rules and so on.
This is very useful, if you're using the tool on a router with multiple interfaces (e.g. WAN, LAN, DMZ) and want to check
if anyone from your clients is evil and does some arpspoofing (mitm) or changes his IP.
