The arpwatch NG package contains arpwatch and arpsnmp. Both utilities monitor Ethernet or FDDI network traffic and build databases of Ethernet/IP address pairs, and can report certain changes. It is based upon the original, but old, arpwatch package.
| Tags | Networking Monitoring |
|---|---|
| Licenses | GPL |
| Operating Systems | POSIX |
Recent releases


Changes: The autoconf system has been updated to fully support x86_64.


Changes: All report mode related information has been consolidated into one central report function table to allow for easy customization.


Changes: The error reporting on startup has been improved.


Changes: This release fixes bugs related to the new functionality added in the previous version.


Changes: The reporting system was reworked so that all errors should be reported using the currect active reporting method. The ethercodes database was updated. Minor code cleanups were done.
- All comments
Recent commentsPlease, can arpwatch-ng recognize VLANs?
I just use old arpwatch on Fedora, I want monitor eth0 interface, and at this interface is also configuted several VLANs (see ip config below). And arpwatch log fills with messages like:
arpwatch: 0:9:41:be:1a:dd sent bad hardware format 0x9
where 0x9 is VLAN number. These messages perhaps isn't possible suppress. Would it be better, when I use arpwatch-ng?
Thanks in advance, franta na hanzlici.cz
Interfaces:
# ip addr
1: lo: mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
2: eth0: mtu 1500 qdisc mq state UP qlen 1000
link/ether d8:d3:85:dd:c2:90 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.202/16 brd 192.168.255.255 scope global eth0
3: eth1: mtu 1500 qdisc mq state UP qlen 100
link/ether d8:d3:85:dd:c2:91 brd ff:ff:ff:ff:ff:ff
inet 198.33.85.25/29 brd 198.33.85.31 scope global eth1
inet 198.33.85.27/29 brd 198.33.85.31 scope global secondary eth1:0
4: vlan9@eth0: mtu 1500 qdisc noqueue state UP
link/ether d8:d3:85:dd:c2:90 brd ff:ff:ff:ff:ff:ff
inet 172.17.9.200/24 brd 172.17.9.255 scope global vlan9