From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id A48671382C5 for ; Wed, 1 Jul 2020 23:17:15 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8243DE0942; Wed, 1 Jul 2020 23:17:07 +0000 (UTC) Received: from neon.hostmds.com (neon.hostmds.com [208.88.6.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 3B5D3E0908 for ; Wed, 1 Jul 2020 23:17:07 +0000 (UTC) Received: from fctnnbsc38w-47-55-76-75.dhcp-dynamic.fibreop.nb.bellaliant.net ([47.55.76.75]:40530 helo=fellowsandcarr.ca) by neon.hostmds.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1jqlyU-000I9l-1N; Wed, 01 Jul 2020 19:17:06 -0400 To: gentoo-user@lists.gentoo.org, Caveman Al Toraboran From: "David M. Fellows" Subject: Re: [gentoo-user] arpwatch changed syntax? In-reply-to: References: Comments: In-reply-to Caveman Al Toraboran message dated "Wed, 01 Jul 2020 16:38:44 -0000." X-Mailer: MH-E 8.6+git; nmh 1.6; GNU Emacs 26.3 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <23539.1593645425.1@owl.pooh.corner> Date: Wed, 01 Jul 2020 20:17:05 -0300 Message-ID: <23540.1593645425@owl.pooh.corner> X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - neon.hostmds.com X-AntiAbuse: Original Domain - lists.gentoo.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - fellowsandcarr.ca X-Get-Message-Sender-Via: neon.hostmds.com: authenticated_id: dmf+fellowsandcarr.ca/only user confirmed/virtual account not confirmed X-Authenticated-Sender: neon.hostmds.com: dmf@fellowsandcarr.ca X-Source: X-Source-Args: X-Source-Dir: X-Archives-Salt: 3d692d38-4b0c-4e52-8a6c-1e5d3a8b3c9a X-Archives-Hash: 4fd771a7fb2b5d8dc5460d480467a422 >hi. > > >background: ----------- > >previously, i used to run it by this: > > > arpwatch -i enp7s0 -m caveman@domain.com -s /usr/sbin/sendmail > >but now, after some update, apparently this doesn't work any more. > >what seems to have changed is: > > * "-m" is replaced by "-w" or "-W". * "-s" doesn't specify sendmail > path, but is rather only a flag to suppress "reports sent by email". > >if i update the command into: > > > arpwatch -i enp7s0 -w caveman@domain.com No answers to your questions below, but you could try PATH=/usr/sbin:$PATH arpwatch -i enp7s0 -w caveman@domain.com and see if that solves your problem. DaveF > >then, it runs normally, but, it fails to send emails, with this error: > > > execl: sendmail: No such file or directory > >`whereis sendmail`: > > > sendmail: /usr/sbin/sendmail /usr/lib/sendmail /usr/lib64/sendmail >/usr/share/man/man1/sendmail.1.bz2 > > >questions: ---------- > >Q1: what happened that caused this syntax change? e.g. is it an update >from upstream? or is it a totally new app written by other devs? or am i >hallucinating (pretty sure it used to work tho)? > >Q2: is there any better tool to monitor arps and to email me when >interesting things happen? > >thanks a lot for your time. > >rgrds, cm. > >