This program tries to prevent unauthorized usage of IPs within the local ethernet broadcastdomain by giving an answer to ARP-requests. After receiving such a faked reply, the requesting party stores the told MAC in its ARP-table and will send future packets to this MAC. Because this MAC is invalid, the host with the invalid IP can not be reached.
--action" option to execute a program when a disallowed ARP packet was detected. Sorting of IP addresses happens now in an endian neutral manner and support for the old, deprecated logging format was physically removed from the source. Beginning with this version, ip-sentinel will be hosted at Savannah.
*@<mac>" is used for this feature which helps e.g. to isolate hosts infected by worms or viruses.
--poision --mac 802.3x --direction BOTH" as already announced in earlier versions.
Latest sources and their GPG signatures can be found here. Filenames
which are having the format
are official releases; such with a triple version like
X.Y.Z are inofficial snapshots. A short description
and further information are given in
README; user visible changes in
Binary packages are not provided but can be built with the usual
./configure && make && su -c make install
Please look at the output of
for further options. When using older versions of dietlibc, you will
have to use '--disable-dietlibc'. RPMs can be created by executing
rpmbuild -tb ip-sentinel-<version>.tar.bz2
Enrico Scholz Last modified: Wed Mar 30 00:10:16 CEST 2005