Project

General

Profile

Actions

Bug #12101

open

ArpWatch Suppression Mac for "flip-flop" not suppressing

Added by Shaun Gause over 2 years ago. Updated over 2 years ago.

Status:
Assigned
Priority:
Normal
Assignee:
Viktor Gurov
Category:
arpwatch
Target version:
-
Start date:
07/02/2021
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:
7100

Description

I have working notifications with ArpWatch on my pfsense running on an XG-7100.

I get notifications the way I should, but was receiving many notifications (sometimes multiple per minute) for a Unify UAP XG access point that was changing between two mac addresses regularly. I added both mac addresses to the suppression list set to suppress "flip flop" only.

After saving, I still received the same regular flip flop notifications for the mac addresses. I restarted the service also, with no changes.

I then changed the suppression from "flip flop" to "all" and the notifications stopped, but I would still like to receive notifications for these mac addresses for non "flip flop" conditions.

It seems that the type of notification to suppress other than "all" is not working.


Files

Notification.jpg (37.8 KB) Notification.jpg Shaun Gause, 08/12/2021 08:54 AM
ArpWatchConfig.jpg (72.8 KB) ArpWatchConfig.jpg Shaun Gause, 08/12/2021 08:54 AM
Actions #2

Updated by Jim Pingle over 2 years ago

  • Status changed from New to Pull Request Review
Actions #3

Updated by Renato Botelho over 2 years ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Viktor Gurov

PR has been merged. Thanks!

Actions #4

Updated by Shaun Gause over 2 years ago

I have updated to version 0.2.0_6 and still are getting flip-flop notifications. I have tried restarting the service after update. Here are the Arpwatch settings and the email notification I receive.

Actions #5

Updated by Kris Phillips over 2 years ago

  • Status changed from Feedback to Assigned

Moving status back to Assigned as this hasn't been confirmed as fixed in updated package.

Actions

Also available in: Atom PDF