Blame SOURCES/arpwatch-promisc.patch

1c6a1b
--- a/arpwatch.8	2016-01-26 10:13:58.344326599 +0100
1c6a1b
+++ b/arpwatch.8	2016-01-26 09:59:46.620048949 +0100
1c6a1b
@@ -27,7 +27,7 @@ arpwatch - keep track of ethernet/ip add
1c6a1b
 .na
1c6a1b
 .B arpwatch
1c6a1b
 [
1c6a1b
-.B -dN
1c6a1b
+.B -dNp
1c6a1b
 ] [
1c6a1b
 .B -f
1c6a1b
 .I datafile
1c6a1b
@@ -70,6 +70,10 @@ background and emailing the reports. Ins
1c6a1b
 .IR stderr .
1c6a1b
 .LP
1c6a1b
 The
1c6a1b
+.B -p
1c6a1b
+flag disables promiscous mode.
1c6a1b
+.LP
1c6a1b
+The
1c6a1b
 .B -f
1c6a1b
 flag is used to set the ethernet/ip address database filename.
1c6a1b
 The default is
1c6a1b
diff -rup arpwatch-2.1a15/arpwatch.c arpwatch-2.1a15-new/arpwatch.c
1c6a1b
--- a/arpwatch.c	2016-01-26 10:13:58.356326563 +0100
1c6a1b
+++ b/arpwatch.c	2016-01-26 10:13:37.273390029 +0100
1c6a1b
@@ -162,7 +162,7 @@ void dropprivileges(const char* user)
1c6a1b
 }
1c6a1b
 
1c6a1b
 char *
1c6a1b
-try_dev(char *interface, pcap_t **pd, int *linktype, char *errbuf)
1c6a1b
+try_dev(char *interface, pcap_t **pd, int *linktype, int promisc, char *errbuf)
1c6a1b
 {
1c6a1b
 	register int snaplen, timeout;
1c6a1b
 
1c6a1b
@@ -170,7 +170,7 @@ try_dev(char *interface, pcap_t **pd, in
1c6a1b
 				  sizeof(struct fddi_header)) + sizeof(struct ether_arp);
1c6a1b
 	timeout = 1000;
1c6a1b
 
1c6a1b
-	*pd = pcap_open_live(interface, snaplen, 1, timeout, errbuf);
1c6a1b
+	*pd = pcap_open_live(interface, snaplen, promisc, timeout, errbuf);
1c6a1b
 	if (NULL == *pd) {
1c6a1b
 		syslog(LOG_ERR, "pcap open %s: %s", interface,  errbuf);
1c6a1b
 		return NULL;
1c6a1b
@@ -187,14 +187,14 @@ try_dev(char *interface, pcap_t **pd, in
1c6a1b
 }
1c6a1b
 
1c6a1b
 char *
1c6a1b
-iterate_dev(char *arginterface, pcap_t **pd, int *linktype, char *errbuf)
1c6a1b
+iterate_dev(char *arginterface, pcap_t **pd, int *linktype, int promisc, char *errbuf)
1c6a1b
 {
1c6a1b
 	static char interface[64 + 1];
1c6a1b
 	pcap_if_t *alldevs;
1c6a1b
 	pcap_if_t *dev;
1c6a1b
 
1c6a1b
 	if (NULL != arginterface) {
1c6a1b
-		return try_dev(arginterface, pd, linktype, errbuf);
1c6a1b
+		return try_dev(arginterface, pd, linktype, promisc, errbuf);
1c6a1b
 	} else {
1c6a1b
 		if (pcap_findalldevs(&alldevs, errbuf) == -1) {
1c6a1b
 			(void)fprintf(stderr, "%s: lookup_device: %s\n",
1c6a1b
@@ -203,7 +203,7 @@ iterate_dev(char *arginterface, pcap_t *
1c6a1b
 		}
1c6a1b
 		for (dev = alldevs; dev && (arginterface == NULL); dev = dev->next) {
1c6a1b
 			strncpy(interface, dev->name, strlen(dev->name)+1);
1c6a1b
-			arginterface = try_dev(interface, pd, linktype, errbuf);
1c6a1b
+			arginterface = try_dev(interface, pd, linktype, promisc, errbuf);
1c6a1b
 		}
1c6a1b
 		pcap_freealldevs(alldevs);
1c6a1b
 		return arginterface;
1c6a1b
@@ -224,6 +224,7 @@ main(int argc, char **argv)
1c6a1b
 	struct bpf_program code;
1c6a1b
 	char errbuf[PCAP_ERRBUF_SIZE];
1c6a1b
 	char* serveruser = NULL;
1c6a1b
+	int promisc = 1;
1c6a1b
 
1c6a1b
 	if (argv[0] == NULL)
1c6a1b
 		prog = "arpwatch";
1c6a1b
@@ -242,7 +243,7 @@ main(int argc, char **argv)
1c6a1b
 	linktype = -1;
1c6a1b
 	rfilename = NULL;
1c6a1b
 	pd = NULL;
1c6a1b
-	while ((op = getopt(argc, argv, "df:i:n:Nr:u:e:s:")) != EOF)
1c6a1b
+	while ((op = getopt(argc, argv, "df:i:n:Nr:u:e:s:p")) != EOF)
1c6a1b
 		switch (op) {
1c6a1b
 
1c6a1b
 		case 'd':
1c6a1b
@@ -304,6 +305,10 @@ main(int argc, char **argv)
1c6a1b
 			}
1c6a1b
 			break;
1c6a1b
 
1c6a1b
+		case 'p':
1c6a1b
+			promisc = 0;
1c6a1b
+			break;
1c6a1b
+
1c6a1b
 		default:
1c6a1b
 			usage();
1c6a1b
 		}
1c6a1b
@@ -317,7 +322,7 @@ main(int argc, char **argv)
1c6a1b
 	} else {
1c6a1b
 
1c6a1b
 		/* Determine interface if not specified */
1c6a1b
-		interface = iterate_dev(interface, &pd, &linktype, errbuf);
1c6a1b
+		interface = iterate_dev(interface, &pd, &linktype, promisc, errbuf);
1c6a1b
 		if (interface == NULL) {
1c6a1b
 			(void)fprintf(stderr, "%s: lookup_device: no suitable interface found\n",
1c6a1b
 						  prog);