https://github.com/ndejong/arpwitch

A modern arpwatch replacement with JSON formatted outputs and easy options to exec commands when network changes are observed.
https://github.com/ndejong/arpwitch

arpwatch network network-analysis network-monitoring network-programming pypi python

Last synced: 25 days ago
JSON representation

A modern arpwatch replacement with JSON formatted outputs and easy options to exec commands when network changes are observed.

• Host: GitHub
• URL: https://github.com/ndejong/arpwitch
• Owner: ndejong
• License: bsd-2-clause
• Created: 2017-12-15T17:04:01.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2023-11-22T04:28:14.000Z (12 months ago)
• Last Synced: 2024-08-10T10:52:47.799Z (3 months ago)
• Topics: arpwatch, network, network-analysis, network-monitoring, network-programming, pypi, python
• Language: Python
• Homepage: https://arpwitch.readthedocs.io
• Size: 105 KB
• Stars: 29
• Watchers: 6
• Forks: 7
• Open Issues: 4
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# arpwitch

[![PyPi](https://img.shields.io/pypi/v/arpwitch.svg)](https://pypi.python.org/pypi/arpwitch/)

[![Python Versions](https://img.shields.io/pypi/pyversions/arpwitch.svg)](https://github.com/verbnetworks/arpwitch/)

[![Build Tests](https://github.com/verbnetworks/arpwitch/actions/workflows/build-tests.yml/badge.svg)](https://github.com/verbnetworks/arpwitch/actions/workflows/build-tests.yml)

[![Read the Docs](https://img.shields.io/readthedocs/arpwitch)](https://arpwitch.readthedocs.io)

![License](https://img.shields.io/github/license/verbnetworks/arpwitch.svg)

A modern arpwatch replacement with JSON formatted outputs and easy options to exec commands when network changes are 

observed.

Includes a convenience `--exec` definition to invoke nmap when new network-addresses are observed.

## Features

* Uses the Python `scapy` module to watch for network ARPs

* Filter ARP events based on new addresses only, or select all ARP events

* Easy to define `--exec` actions on arp related events

* Quick to use `--nmap` action to invoke nmap if installed, easy network device landscaping.

* Lookup of hardware addresses against the OUI database for manufacturer resolution.

* Logging available to STDERR

* Easy installation using PyPI `pip`

* Plenty of documentation and examples - https://arpwitch.readthedocs.io

## Installation

```shell

user@computer:~$ pip install arpwitch

```

## Command line usage

Use arpwitch to nmap all new hosts on the network

```shell

user@computer:~$ arpwitch --nmap --datafile /tmp/arpwitch.dat

```

## Project

* Github - [github.com/verbnetworks/arpwitch](https://github.com/verbnetworks/arpwitch)

* PyPI - [pypi.python.org/pypi/arpwitch](https://pypi.python.org/pypi/arpwitch/)

* ReadTheDocs - [arpwitch.readthedocs.io](https://arpwitch.readthedocs.io)

---

Copyright © 2021 Nicholas de Jong