HONEYD-ARPD(8)

NAME
honeyd-arpd - ARP reply daemon

SYNOPSIS
honeyd-arpd [-d] [-i interface] [net ...]

DESCRIPTION
honeyd-arpd replies to any ARP request for an IP address matching the specified destination net with the hardware MAC address of the specified interface, but only after determining if another host already claims it.

Any IP address claimed by honeyd-arpd is eventually forgotten after a period of inactivity or after a hard timeout, and is relinquished if the real owner shows up.

This enables a single host to claim all unassigned addresses on a LAN for network monitoring or simulation.

honeyd-arpd exits on an interrupt or termination signal.

The options are as follows:

-d  Do not daemonize, and enable verbose debugging messages.

-i interface
    Listen on interface. If unspecified, honeyd-arpd searches the system interface list for the lowest numbered, configured ``up'' interface (excluding loopback).

net The IP address or network (specified in CIDR notation) or IP address ranges to claim (e.g. ``10.0.0.3'', ``10.0.0.0/16'' or ``10.0.0.5-10.0.0.15''). If unspecified, honeyd-arpd will attempt to claim any IP address it sees an ARP request for. Mutiple addresses may be specified.

FILES

/var/run/honeyd-arpd.pid

SEE ALSO
pcapd(8), synackd(8)

AUTHORS
Dug Song <dugsong@monkey.org>, Niels Provos <provos@citi.umich.edu>