##
##  arpalert.conf -- ARPAlert server configuration
##

maclist file                = @l_prefix@/etc/arpalert/arpalert.allow
maclist alert file          = @l_prefix@/etc/arpalert/arpalert.deny
auth request file           = @l_prefix@/etc/arpalert/arpalert.authreq

maclist leases file         = @l_prefix@/var/arpalert/db/arpalert.leases
lock file                   = @l_prefix@/var/arpalert/run/arpalert.pid
log file                    = @l_prefix@/var/arpalert/log/arpalert.log
log level                   = 6
use syslog                  = false

daemon                      = true
user                        = @l_rusr@
umask                       = 0177

#interface                  = eth0
dump paquet                 = false

action on detect            = ""
ignore me                   = true
max alert                   = 20
execution timeout           = 10

dump black list             = false
dump white list             = false
dump new address            = true

mac timeout                 = 259200
max entry                   = 1000000
anti flood interval         = 5
anti flood global           = 50
ignore unknown sender       = false
ignore self test            = false
unauth ignore time method   = 2
max request                 = 1000000

log referenced address      = false
alert on referenced address = false
log deny address            = true
alert on deny address       = false
log new address             = true
alert on new address        = false
log new mac address         = true
alert on new mac address    = false
log ip change               = true
alert on ip change          = false
log mac change              = true
alert on mac change         = false
log unauth request          = false
alert on unauth request     = false
log request abus            = true
alert on request abus       = false
log mac error               = true
alert on mac error          = false
log flood                   = true
alert on flood	            = false