|
From: Andy R. <ac...@gm...> - 2015-01-02 18:21:12
|
On Fri, Jan 2, 2015 at 11:15 AM, Simon Hobson <li...@th...> wrote: > Andy Ruhl <ac...@gm...> wrote: > > > ... consequently macsuck and arpnip are running nearly constantly. I > don't mind if they only run once a day or so. > > You do realise that both of these grab dynamic information and will be of > limited (if any) use if not run frequently ? > For example, a switch will typically delete a MAC table entry after > something like 5 to 15 minutes after a device is disconnected/switched off. > Thus if you only scan once/day, you'll miss devices that aren't connected & > switched on during a fairly small window. Ditto for ARP table entries on > routers. > > I don't know if there's an existing ability, but simply rate-limiting > queries would seem to be the best way round this - it's how I'd prefer to > do it on a large network. > Yeap, don't care too much. Most stuff is pretty static. I see the value in what you're saying but it's not huge to me at the moment. Explain rate-limiting please. Andy |