IPCAD.CONF(5)

NAME
ipcad.conf - ipcad configuration file

SYNOPSIS
/usr/local/etc/ipcad.conf

DESCRIPTION

The file /usr/local/etc/ipcad.conf contains configuration information for the ipcad(8) daemon. The ipcad.conf file consists of a series of configuration options describing the interfaces on which ipcad should be listening and other configuration data.

  Interface configuration

interface <face> [promisc] [input-only]

Put interface into promiscuous mode. This enables listening for the packets which are not destined for this host and thus ipcad will count and display all the traffic within the local network. Note that the interface might be in promiscuous mode for some other reason.

  Interface options:

  promisc:
Put interface into promiscuous mode. This enables listening for the packets which are not destined for this host and thus ipcad will count and display all the traffic within the local network. Note that the interface might be in promiscuous mode for some other reason.

  input-only:
Use kernel feature of counting only incoming packets. NOTE: "input-only" directive must be supported by kernel. Probably, you were noticed about it during the compilation process if it was not supported. FreeBSD 3.x and elder kernels do not support this feature.

  IP aggregations

aggregate <ip>/<masklen> strip <maskbits>;

Aggregate addresses from the specified network (<ip>/<masklen>), by AND'ing with specified mask (<maskbits>). Use of aggregation helps to save memory space and recomendeed for efficiency.

  RSH server configuration

rsh { enable | disable } [at <listen_ip>];

Enable/disable RSH server (enabled by default). Optionally, the listening IP can specified.

rsh [[<user>@]<host_addr>] [access] ;

Specifies an rsh access list entry. access values are:

admin Can shutdown ipcad

backup Can dump/restore/import accounting tables

default Can view and modify accounting tables

view-only Can view accounting tables

deny Deny all activity

  Other options:

memory_limit = <number> [{ k | m | e }] ;

Defines a memory limit. Shortcuts are for kilobytes, megabytes or entries respectively.

chroot = </path>;

Chroot to this directory before processing.

uid = <number>;

Set this uid to be safe in the long run. Please change it if you're aware of the consequences. RSH service will NOT work if process is not privileged.

gid = <number>;

Set this gid to be safe in the long run.

dumpfile = <filename>;

Dump memory table to this file on exit and read on startup (refer to ipcad(8) and read about -s and -r options)

ttl = <ttl>;

Keep time to live reasonably low to avoid remote attacks.

rsh timeout = <seconds>;

Set rsh timeout for the same purpose.

pidfile = <filename>;

File to keep getpid() in it. ipcad will also hold a lock. Creation of the file is done after chroot()'ing.

SEE ALSO
ipcad(8).

AUTHORS
Lev Walkin <vlm@spelio.net.ru>