Re: Network "Change Management"

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Check out arpwatch:
http://www.securityfocus.com/tools/142

Can be very noisy if you have a DHCP enabled network, otherwise it's
pretty good.

- --Ben

Dave Torre wrote:
| Does anyone know of a Linux utility that can watch the MAC address
| tables in Cisco switches and alert admins as to when a new device has
| been plugged in?
|
| Basically, we have your standard client network with DHCP. Internet
| access is restricted to authenticated users, and so are the file shares.
| However, we've had a few instances where people just plug in their
| personal laptops which makes me very worried...
|
| Any thoughts/suggestions as to how I can monitor such events in real
| time?
|
| Thanks,
| -Dave
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBSdi+3cL8qXKvzcwRAq5XAKCPzKuHYZlwha7qhkwnSqaecwJKBQCfTST9
AaE/octbFTvvxtl9G1bYkkA=
=md+f
-----END PGP SIGNATURE-----