ndejong / arpwitch Goto Github PK

Improve documentation making it easier to understand how to use interpolated variables in exec

The documentation examples are thin-in-detail on this
https://arpwitch.readthedocs.io/en/latest/docs/command-line/examples/

And there is no other reference to the variables in the documentation other than in the CLI help - thus easily missed.

See ticket #2

Could you provide an example of how to pass along details of the from the discovery to the exec command? I am trying to send along details of a discovery to pushbullet - but I don't know how I might get the IP/MAC into the exec. Also - I know that the .dat file has the OUI lookup manufacturer, but arpwitch output does not provide that (unless I am just using it to query the dat). Ideally I'd like to send along ip/mac/manufacturer to pushbullet.

$ arpwitch --datafile /tmp/arpwitch.dat --exec "pushbullet push note --body arpwitch"

Occurs because Arpwitch does not pin the OuiLookup version.

Workaround is to install the previous OuiLookp version until Arpwitch is updated

pip install ouilookup==0.2.4

Hello, I was just testing arpwitch to package it for Debian,

Currently it seems like it's not possible to exit on SIGINT (ctrl+c), so if I run arpwitch I have to send a kill signal (SIGTERM) to terminate its execution. I believe the user experience could be improved if I could terminate arpwitch with a ctrl+c directly so I'd like to request this feature.

Thanks for working on arpwitch :)

We currently have the following interpolated variables that can be referenced in the --exec

• {IP}=ipv4-address
• {HW}=hardware-address
• {TS}=timestamp-utc
• {ts}=timestamp-utc-short

Need another variable that allows user to obtain the hardware-manufacturer details

Refer to ticket #2