Scott,
One method to detect duplicate IPs is to use SNMP to query your routers every 4 hours for the ARP entries. (ARP times out every 4 hours in a cisco router) We use the CMU snmp package to do the queries. Then put the info into a database and query the database for duplicates. We have a system like this with a web interface and also some scripts that scan ths database daily for duplicates and e-mails notices to people in charge of the relevant subnet.
The code is somewhat rough, so I do not want to offer it to the net-at-large. If you can not find a polished product, e-mail me and I'll share more aobut this solution.
Art. On Mon, 29 Sep 1997, Scott wrote:
Alittle off subject but does anyone out there know of some SW that detects duplicate IP addresses?
Scott
I think you are searching for arpwatch. Source can be found at ftp://ftp.ee.lbl.gov/arpwatch.tar.Z It needs libpcap to run but that can be found also at this location. Have fun, Erich -- Erich Meier Erich.Meier@informatik.uni-erlangen.de http://www4.informatik.uni-erlangen.de/~meier "The truth is not out there. The truth is not out there. The.." - Bart Simpson