A modern arpwatch replacement with JSON formatted outputs and easy options to exec commands when network changes are observed.
Project description
arpwitch
A modern arpwatch replacement with JSON formatted outputs and easy options to exec commands when network changes are observed.
Includes a convenience --exec
definition to invoke nmap when new network-addresses are observed.
Features
- Uses the Python
scapy
module to watch for network ARPs - Filter ARP events based on new addresses only, or select all ARP events
- Easy to define
--exec
actions on arp related events - Quick to use
--nmap
action to invoke nmap if installed, easy network device landscaping. - Lookup of hardware addresses against the OUI database for manufacturer resolution.
- Logging available to STDERR
- Easy installation using PyPI
pip
- Plenty of documentation and examples - https://arpwitch.readthedocs.io
Installation
user@computer:~$ pip install arpwitch
Command Line Usage
Use arpwitch to nmap all new hosts on the network
user@computer:~$ arpwitch --nmap --datafile /tmp/arpwitch.dat
Project
- Github - github.com/verbnetworks/arpwitch
- PyPI - pypi.python.org/pypi/arpwitch
- TravisCI - travis-ci.org/github/verbnetworks/arpwitch
- ReadTheDocs - arpwitch.readthedocs.io
Copyright © 2020 Nicholas de Jong
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
arpwitch-0.3.6.tar.gz
(11.5 kB
view hashes)
Built Distribution
arpwitch-0.3.6-py3-none-any.whl
(20.6 kB
view hashes)