Re: OT: Arpwatch - meaning of bogon

[Camiel Dobbelaar <cd@sentia.nl>]

On Sat, 16 Dec 2000, Kai Gallasch wrote:
> ns1 arpwatch: bogon 123.123.123.123 0:0:c0:d5:66:f7

I don't know what the word 'bogon' means either, but the source is pretty
clear:
/* Watch for bogons */
        if ((sia & netmask) != net) {

So, arpwatch saw an IP address that does not belong on the local
network.

> Another arpwatch question I have is about the file
> arp.dat
> 
> ---snip---
> 
> 0:50:4:45:d3:4  123.123.123.42   976818206       groucho
> 0:50:da:41:d5:8 123.123.123.63   976954173       chico
> 0:40:96:11:0:bc 123.123.123.16   976960030       harpo
> 
> ---snip---
> 
> What do the values in the third column mean?

Those are Unix timestaps, seconds since 1970.
perl -e 'print scalar localtime(976818206)'
Thu Dec 14 19:23:26 2000


--
Cam