|
From: Simon H. <li...@th...> - 2015-01-02 18:15:32
|
Andy Ruhl <ac...@gm...> wrote: > ... consequently macsuck and arpnip are running nearly constantly. I don't mind if they only run once a day or so. You do realise that both of these grab dynamic information and will be of limited (if any) use if not run frequently ? For example, a switch will typically delete a MAC table entry after something like 5 to 15 minutes after a device is disconnected/switched off. Thus if you only scan once/day, you'll miss devices that aren't connected & switched on during a fairly small window. Ditto for ARP table entries on routers. I don't know if there's an existing ability, but simply rate-limiting queries would seem to be the best way round this - it's how I'd prefer to do it on a large network. |