Ignore MAC OUI in Arpwatch?
-
Is there any way to ignore a MAC OUI in Arpwatch?
My Proxmox cluster generates MACs in the OUI bc:24:11, and I'd like to ignore flip flop messages as I migrate those VMs & LXCs among the cluster members. All I've been able to do is individually list the VM and LXC MACs, which is a bit of a burden. Not insurmountable but just a bother.
I looked to see if Arpwatch offered this ignore functionality, but it seems ignoring alerts isn't part of Arpwatch itself but perhaps custom code introduced by Netgate into pfSense?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.