On Fri, 16 Mar 2001, Simon Tennant wrote:
> I run arpwatch. It watches for new arp requests and mails me the > following: > > Subject: new station (w192.z064003150.sjc-ca.dsl.cnc.net) > Date: Thu, 08 Mar 2001 16:49:59 -0800 > From: [EMAIL PROTECTED] (Arpwatch) > To: [EMAIL PROTECTED] > > hostname: w192.z064003150.sjc-ca.dsl.cnc.net > ip address: 64.3.150.192 > ethernet address: 0:10:67:0:3b:92 > ethernet vendor: Redback Networks, Inc. > timestamp: Thursday, March 8, 2001 16:49:59 -0800 > At our campus we're usuing static ARP mapping, with table generated from our users database. But still one can easily change his MAC :(