On Mon, 14 Apr 2008 12:08:05 +0200 (CEST) Helder Vieira Mendes helder.mendes.84@gmail.com wrote:
Helder Mendes from ISEP. I am using NAV 3.3.3 in Debian 4.0, but the Machine Tracker is not working well because if I do MAC Search NAV return´s the IP in the correct door / switch (by ARP table search), but if I search by IP does not return the MAC, does not return any thing ... The ARP tables are the same it should work ...
Hi Helder,
I'm a bit confused as to what searches you are trying to perform here.
An IP search in the machine tracker will yield results only from the ARP data NAV has collected from your routers, showing the mapping between IP addresses and layer 2 MAC addresses.
A MAC search in the machine tracker will search both the collected CAM data and the collected ARP data. CAM data shows which switch and port a MAC address is active on, the ARP data will show the mapping between the MAC and IP addresses.
The machine tracker will never tell you what switch or port an IP address is active on, it will tell you what MAC addresses have been associated with that IP address in what time periods, and you can use those MAC addresses to figure out which switch ports this MAC address has been active on in the same time periods.
Now,
if I interpret you correctly, you are searching for an IP address but cannot find the corresponding MAC address, which means that something is missing from your NAV's ARP data. Are you sure that this IP address has actually been active in the time period you are searching for, and has had traffic routed by a router you are monitoring with NAV? What vendor/model is this router?