|Original author(s)||Craig Leres|
|Developer(s)||Lawrence Berkeley National Laboratory Network Research Group|
|Initial release||v1.0 Tue Jun 16 3:05:31 PDT 1992|
3.1 / April 5, 2020
|License||3-clause BSD source with autoconf parts under GNU General Public License|
arpwatch is a computer software tool for monitoring Address Resolution Protocol traffic on a computer network. It generates a log of observed pairing of IP addresses with MAC addresses along with a timestamp when the pairing appeared on the network. It also has the option of sending an email to an administrator when a pairing changes or is added.
Network administrators monitor ARP activity to detect ARP spoofing, network flip-flops, changed and new stations and address reuse.
- "arpwatch(8) manual page". Retrieved 2015-01-07.