Arpwatch Tool to Monitor Ethernet Activity in Linux

Download all articles in PDF format with our TecMint Content Subscription and Linux Support Services starting at $39 per month.

Support TecMint: Did you find this tutorial helpful?. Please help to keep it alive by donating. Every cent counts! - Donate Now

Ravi Saive

I am Ravi Saive, creator of TecMint. A Computer Geek and Linux Guru who loves to share tricks and tips on Internet. Most Of My Servers runs on Open Source Platform called Linux. Follow Me: Twitter, Facebook and Google+

Your name can also be listed here. Got a tip? Submit it here to become an TecMint author.

Receive Your Free Complimentary eBook NOW! -

Download Free Linux eBooks

Advanced Bash-Scripting Guide
Linux Bible
A Newbie's Getting Started Guide to Linux
Introduction to Linux - A Hands on Guide

You may also like...

12 Responses

  1. Ant says:

    Is there a way to look up each address like MAC address so I know whose device it is?

  2. techboyz says:

    i m using fedora 20
    arpwatch -i eno1
    arpwatch: lookup_device: no suitable interface found

  3. kaleem says:

    when I install the arpwatch in centos 6.5 , it installed successfully, but when i used this command:/etc/init.d/arpwatch start. It generated the error: aprwatch: lookup_device : can’nt open the netlink socket 13: Permission denied

    service failed to start:

  4. Kevin says:

    Great tutorial.

    FYI,

    Installing using Yum on CentOS 6.5, it put the ARPwatch DB file in “/var/lib/arpwatch/”. Your instructions showed “/var/arpwatch/”

    Thanks!

  5. jagadeesh says:

    thank you verymuch bro you are giving the very useful information to linux learners.

  6. Wynman says:

    I tried to install arpwatch an Untangle box via ssh but was returning error “Couldn’t find package arpwatch” is there a workaround to this?

  7. John says:

    Arpwatch has problems with VLANs.
    It always sends:
    arpwatch: xx:xx:xx:xx:xx:xx sent bad hardware format 0x3e7
    to the log.
    So at present it is unusable in those networks.

  8. Alex says:

    Hi,

    I got this problem.

    [root@fedora18 init.d]# chkconfig –level 35 arpwatch on
    Note: Forwarding request to ‘systemctl enable arpwatch.service’.

    [root@fedora18 init.d]# /etc/init.d/arpwatch start
    -bash: /etc/init.d/arpwatch: No such file or directory

  9. Wilson Silva says:

    I have been searching for a tutorial like this for the past week and I didn’t found it. They were always incomplete or outdated. I finally got this to work. Thank you! :)

    If I don’t specify an interface, arpwatch watches all interfaces?

Got something to say? Join the discussion.

Your email address will not be published. Required fields are marked *

Join Over 95000+ Linux Users
  1. 77,543
  2. 4,213
  3. 35,218

Enter your email to get latest Linux Howto's