arpwatch + postfix

[hdkutz]

On Wed, Aug 22, 2007 at 01:48:10PM +0200, Stefan Jensen wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> hdkutz schrieb:
> 
> > Aug 22 13:29:50 meinebuechse arpwatch: new station 172.25.63.30 0:2:a5:7f:41:da
> > Aug 22 13:29:50 meinebuechse postfix/pickup[12362]: 62EF6E7D59: uid=77
> > from=<pcap>
> 
> [...]
> > Funkt out of the box!
> > Ohne Aenderungen!
> 
> Mmhh, wie sieht bei Dir denn "/etc/sysconfig/arpwatch" aus? Und welche
> Gruppenzugehörigkeiten hat "pcap" bei Dir?
<snip>
[root at meinebuechse ~]# cat /etc/sysconfig/arpwatch
# -u <username> : defines with what user id arpwatch should run
# -e <email>    : the <email> where to send the reports
# -s <from>     : the <from>-address 
OPTIONS="-u pcap -e root -s 'root (Arpwatch)'"

[root at meinebuechse ~]# grep pcap /etc/group
pcap:x:77:
<snip>

mfg.
ku

-- 
Luke Skywalker:
	How did my father die?
Ben (Obi-Wan) Kenobi:
	A young Jedi named Darth Vader, who was a pupil
	of mine until he turned to evil, helped the
	Empire hunt down and destroy the Jedi knights.
	He betrayed and murdered your father.