What's the best way to monitor (and log) duplicate ip address in a network?

I manage an internal firewall/gateway between development lab and
company network.

I am looking for way to log all duplication ip addresses occurrances
in the lab and give timely notification to engineers to fix the problem.


What's the best methods/tools to monitor this?

I am looking into ntop, ping -b, but they don't have exactly
what I wanted.


Thanks

-Tony

T Lee wrote:
> I manage an internal firewall/gateway between development lab and
> company network.
>
> I am looking for way to log all duplication ip addresses occurrances
> in the lab and give timely notification to engineers to fix the problem.
>
>
> What's the best methods/tools to monitor this?
>
> I am looking into ntop, ping -b, but they don't have exactly
> what I wanted.
>
>
> Thanks
>
> -Tony

Check arpwatch. It monitors the IP/MAC address pairings.

--

Tauno Voipio
tauno voipio (at) iki fi