module arpwatch_cld

define verb arpwatch
	noparameters
	qualifier debug
	qualifier device,	value (required)
	qualifier display,	default, value (type = display_options)
	qualifier both
	qualifier from,		default, value (default = "*")
	qualifier to,		default, value (default = "*")
	qualifier nonames
	qualifier begin,	value (required, type = $datetime)
	qualifier end,		value (required, type = $datetime)
	qualifier count,	value (required, type = $number)
	qualifier output,
			value (type = $outfile, default = "ARPWATCH.LOG")
	qualifier record,
			value (type = $outfile, default = "ARPWATCH.RECORD")
	qualifier playback,
			value (type = $infile, default = "ARPWATCH.RECORD")
	qualifier generate,
			value (type = $infile, default = "ARPWATCH.INDEX")
	qualifier header

	disallow (end and count)
	disallow (record and playback)
	disallow (playback and (begin or end))

define type display_options
	keyword	all
	keyword both
	keyword	none
	keyword ascii, default
	keyword	text
	keyword	hexadecimal
	keyword fast