Project

General

Profile

Actions
Copy link

Bug #12101

open

ArpWatch Suppression Mac for "flip-flop" not suppressing

Added by Shaun Gause almost 3 years ago. Updated over 2 years ago.

Status:
Assigned
Priority:
Normal
Assignee:
Viktor Gurov
Category:
arpwatch
Target version:
-
Start date:
07/02/2021
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:
7100

Description

I have working notifications with ArpWatch on my pfsense running on an XG-7100.

I get notifications the way I should, but was receiving many notifications (sometimes multiple per minute) for a Unify UAP XG access point that was changing between two mac addresses regularly. I added both mac addresses to the suppression list set to suppress "flip flop" only.

After saving, I still received the same regular flip flop notifications for the mac addresses. I restarted the service also, with no changes.

I then changed the suppression from "flip flop" to "all" and the notifications stopped, but I would still like to receive notifications for these mac addresses for non "flip flop" conditions.

It seems that the type of notification to suppress other than "all" is not working.

Files

Download all files
Notification.jpg (37.8 KB) Notification.jpg Shaun Gause, 08/12/2021 08:54 AM
ArpWatchConfig.jpg (72.8 KB) ArpWatchConfig.jpg Shaun Gause, 08/12/2021 08:54 AM
Actions
Copy link

Also available in: Atom PDF