What is NDPMon FOR MAC?

NDPMon

NDPMon, short for Neighbor Discovery Protocol Monitor, is a handy tool that works with ICMPv6 packets. It keeps an eye on your local network to make sure all the nodes are playing nice and using neighbor discovery messages correctly.

How NDPMon Helps You

Whenever NDPMon spots something fishy in a Neighbor Discovery message, it alerts the administrator. This happens through syslog entries, and sometimes it even sends an email report. So, you’re always in the loop!

NDPMon vs. ArpWatch

You might have heard of ArpWatch; well, NDPMon is similar when it comes to tracking activities and catching configuration errors. But here’s the cool part: it has some extra features that focus specifically on the Neighbor Discovery protocol. This means it can spot attacks that could mess up your network.

Learning Phase

If you want to ease into things, NDPMon lets you start without sending reports right away. This learning phase helps build a neighbor database during its first run without bothering you with unnecessary warnings.

What Activities Does NDPMon Report?

• Wrong MAC/IP pairings


• Incorrect router MAC addresses


• Mismatched router IPs


• Wrong prefixes or redirects


• DOS from Duplicate Address Detection


• Reused old Ethernet addresses and other suspicious behaviors

Syslogged Activities to Keep an Eye On:

• Unknown MAC Manufacturer sightings


• A new station popping up


• A new IPv6 Global Address or Link Local Address showing up unexpectedly


• Mismatched router flags in Neighbor Advertisements (NDPMon only trusts official routers from the config file)


• And many more details like wrong RA lifetimes or hop limits!


• Download NDPMon now!

How Download Works

Go to the Softpas website, press the 'Downloads' button, and pick the app you want to download and install—easy and fast!