- Enable loading of ethercodes.dat with arpwatch.ETHERCODES.patch - Log useless 0-source only once for each MAC OBS-URL: https://build.opensuse.org/request/show/1040923 OBS-URL: https://build.opensuse.org/package/show/security/arpwatch?expand=0&rev=51
20 lines
426 B
Plaintext
20 lines
426 B
Plaintext
--- a/arpwatch.c
|
|
+++ b/arpwatch.c
|
|
@@ -481,6 +481,16 @@ process_ether(u_char *u, const struct pc
|
|
if (toskip(sia))
|
|
return;
|
|
|
|
+ /* dhcp broadcasts source from 0.0.0.0 - ignore */
|
|
+ if (sia == 0) {
|
|
+ static u_char old_sea[6];
|
|
+ if (memcmp(old_sea, sea, 6)) {
|
|
+ dosyslog(LOG_INFO, "0-source", sia, sea, sha);
|
|
+ memcpy(old_sea, sea, 6);
|
|
+ }
|
|
+ return;
|
|
+ }
|
|
+
|
|
/* Watch for bogons */
|
|
if (isbogon(sia)) {
|
|
if (!quiet)
|