logging ARP changes

RouterOS General
1

Hi,

I’m not a SNMP hard user. I would like to know if it is possible, to send SNMP traps when the change in ARP table occurs? Can this be done? Maybe some other way?

thanks.

br,

bysaRD

2

I would love to see this as well (arp logging option, ie when any changes are made to the arp table they can be logged via the standard mikrotik logging options)

tks

3

This is difficult because the lifetime of an unused ARP entry is short, and the router would not know if it is
a changed entry or a new entry when it appears again.
However, you can (and I am doing this for many years on all kinds of routers, servers and switches) just
setup a script on a central system that polls the ARP table and keeps memory of it in a file or database.

arptable="ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaPhysAddress"

function walkit () {
    ( snmpbulkwalk -v2c -c $* || snmpwalk -v1 -c $* ) 2>&1 | \
        sed -e '/walk:/d' -e '/No Such /d' -e '/Timeout/d' -e '/End of MIB/d'
}

for router in $SERVERS $ROUTERS $SWITCHES
do
    walkit public -Oq $router $arptable
done