1 Index: arpwatch/arpwatch.8
2 diff -u arpwatch/arpwatch.8:1.1.1.1 arpwatch/arpwatch.8:1.1.1.1.6.1
3 --- arpwatch/arpwatch.8:1.1.1.1 Tue Apr 17 13:31:36 2001
4 +++ arpwatch/arpwatch.8 Tue Apr 17 13:50:23 2001
17 flag disables reporting any bogons.
21 +flag disables promiscuous operation. ARP broadcasts get through hubs without
22 +having the interface in promiscuous mode, while saving considerable resources
23 +that would be wasted on processing gigabytes of non-broadcast traffic. OTOH,
24 +setting promiscuous mode does not mean getting 100% traffic that would concern
26 +YMMV. (Debian specific)
30 Index: arpwatch/arpwatch.c
31 diff -u arpwatch/arpwatch.c:1.1.1.1.2.1 arpwatch/arpwatch.c:1.1.1.1.2.1.4.1
32 --- arpwatch/arpwatch.c:1.1.1.1.2.1 Tue Apr 17 13:47:57 2001
33 +++ arpwatch/arpwatch.c Tue Apr 17 13:50:23 2001
54 snaplen = max(sizeof(struct ether_header),
55 sizeof(struct fddi_header)) + sizeof(struct ether_arp);
57 - pd = pcap_open_live(interface, snaplen, 1, timeout, errbuf);
58 + pd = pcap_open_live(interface, snaplen, !nopromisc, timeout, errbuf);
60 syslog(LOG_ERR, "pcap open %s: %s", interface, errbuf);
63 extern char version[];
70 Index: arpwatch/util.c
71 diff -u arpwatch/util.c:1.1.1.1 arpwatch/util.c:1.1.1.1.6.1
72 --- arpwatch/util.c:1.1.1.1 Tue Apr 17 13:31:37 2001
73 +++ arpwatch/util.c Tue Apr 17 13:50:23 2001
77 int initializing = 1; /* true if initializing */
78 +int nopromisc = 0; /* don't activate promisc mode */
80 /* syslog() helper routine */
82 Index: arpwatch/util.h
83 diff -u arpwatch/util.h:1.1.1.1 arpwatch/util.h:1.1.1.1.6.1
84 --- arpwatch/util.h:1.1.1.1 Tue Apr 17 13:31:37 2001
85 +++ arpwatch/util.h Tue Apr 17 13:50:23 2001
89 extern int initializing;
90 +extern int nopromisc;