kind off "ARP" test

Need new test, action, option? Post request here.
Post Reply
menno
Posts: 158
Joined: Fri May 21, 2010 1:27 am

kind off "ARP" test

Post by menno »

I like to see a test method that respond to MAC address changes.

we authorized all our phones & tablets via MAC address filter so we know EVERY mac address of our devices in the building

for example we have several mobile phones/tablets running in and out of the building.
It is nice to see if that mobile device ( phone or tablet ) is in the building.
Because you can not ping android or windows mobile phones and we do not know the ip address we still want to see if the device is in the building.

if the mac address is not available ...there is a possibility that this device is not in the building. Thats all we need

if the mac address is available we can test if the hostname is correct via the MAC address.

i hope you will understand my question,.
many thanks in advance
Menno


:roll:
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

Not sure how this can be done.
Inverse ARP requests? Will it work in your network? I think normally routers do not pass ARP traffic so you can get result only if cell phones connected to the same network segment as HostMonitor.

Regards
Alex
menno
Posts: 158
Joined: Fri May 21, 2010 1:27 am

Post by menno »

Not sure how this can be done.
Inverse ARP requests? Will it work in your network? I think normally routers do not pass ARP traffic so you can get result only if cell phones connected to the same network segment as HostMonitor.

Regards
Alex
Hello Alex
Yes all the phones are on the same network as HM. Thats no problem. If i look in the logs from the router i see all ARP request comming true.

Is it still possible ?
m
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

Then I think you may setup such check using SNMP Table test method
- host: IP address of your router
- Table OID: 1.3.6.1.2.1.4.22.1.2
- Alert when any item = <MACaddress> (e.g. %71%2A%34%2C%62%3E)

Some routers allow to specify how long entries remain in the ARP cache
(e.g. arp timeout command, CISCO IOS).
E.g. if you setup HostMonitor to perform test every 5 min, you may set arp timeout to 150 sec

Regards
Alex
Post Reply