ARPWATCH(8)
ARPWATCH(8)          arpwatch - keep track of ethernet/ip
address pairings          arpwatch [ -dN ] [ -f datafile ] [ -i
interface ]                 [ -n net[/width ]] [ -r file ] [ -u
username ] [ -e username ]        [ -s username ]
Arpwatch keeps track  for  ethernet/ip  address  pairings.  It
syslogs        activity  and reports certain changes via email.
Arpwatch uses pcap(3)        to listen for arp packets on a
local ethernet interface.         The -d flag is used enable
debugging. This also inhibits  forking  into        the
background  and  emailing  the  reports. Instead, they are sent
to         The default is arp.dat.         The -i flag is used
to override the default interface.         The  -n flag
specifies additional local networks. This can be useful to
avoid "bogon" warnings when there is more than one network
running  on        the same wire. If the optional width is not
specified, the default net-