Implementation of timeout on new MAC discovery

Mirekmal

Since many virtualization platform assign random MAC address to virtual machins on startup, it creates lots of false alarms due to these MACs being detected on LAN and then immediatelly vanishing from network. It is the case even if machines are configured with static MAC addresses. I experienced this in ESXi and even running Windows in Bootcamp on Mac. Other users reported similar case in MS SCVMM also.
Would it be possible to implement configurable timeout after which newly discovered MAC address raises alarm, if still present on network? This way MAC addresses that are in range for less that a ~minute could be discareded and only these that are 'more permanent' would trigger alarm. Obviously such MACs should be by default blocked for security.

VioletChepil

Just turning this one into an ideas thread so others can vote. Cast your vote if you'd like to see implemented too.