This activity builds a report using the ARP table from selected devices as source data. On a Cisco IOS device it uses a simple "Show IP ARP" command and builds a table of results over time.
The data is stored in a text file whose default location is:
It automatically indexes MAC addresses against IP addresses and device interfaces, and then resolves their host names via DNS if required. By default the table is updated with each run of the activity, so it provides a historical record of the devices attached to your network over time. Each entry is time stamped, and "First Seen" and "Last Seen" columns included in the report.
By importing the file into a spreadsheet program like Excel, you can search for specific MAC addresses or host names, or maybe list all devices on a particular port.
The Time, Devices, and Email tabs operate for this Activity in exactly the same way as for all other Activities.
The Options tab allows you to use an alternate command, to set the expiry date of MAC entries in the report, and to select whether to resolve IP addresses.