osquery-1/specs/arp_cache.table
2017-01-10 19:09:46 -08:00

13 lines
459 B
Plaintext

table_name("arp_cache")
description("Address resolution cache, both static and dynamic (from ARP, NDP).")
schema([
Column("address", TEXT, "IPv4 address target"),
Column("mac", TEXT, "MAC address of broadcasted address"),
Column("interface", TEXT, "Interface of the network for the MAC"),
Column("permanent", TEXT, "1 for true, 0 for false"),
])
implementation("linux/arp_cache,darwin/routes@genArpCache")
fuzz_paths([
"/proc/net/arp",
])