Arp

Implemented #118 with 'system' call in osX (not found other way so far) and reading from /proc/net/arp in linux.

Info shown in vtable is: ip, arp, iface
where arp is the mac address, and iface is the interface this entry was added from.
Thanks for notes. Fixed both in a new commit in the arp branch.

The 'foo' var was just a place holder to ignore de field. Should it had to
been clearer.


On Wed, Oct 29, 2014 at 11:20 AM, mtmcgrew <notifications@github.com> wrote:

> In osquery/tables/specs/x/arp.table:
>
> > @@ -0,0 +1,7 @@
> > +table_name("arp")
> > +schema([
> > +    Column(name="ip", type="std::string"),
> > +    Column(name="arp", type="std::string"),
>
> The "arp" field contains the MAC address of the remote machine in the arp
> table. A better name might be "mac"
>
> —
> Reply to this email directly or view it on GitHub
> <https://github.com/facebook/osquery/pull/271/files#r19560383>.
>



-- 
"Las montañas no son estadios donde satisfacer nuestra ambición de logros,
son las catedrales donde practicar nuestra religión."
Anatoli Bukréyev