Arpwatch - setup notes

http://just4fun.schule.at/jwein/arpwatch.html

Check if you have packets already installed:

dpkg --status libpcap0.8
dpkg --status arpwatch

If not already installed, install packets:

apt-get install libpcap0.8
apt-get install arpwatch

Create empty file for storing host information:

vi /var/lib/arpwatch/arp.dat

Configure parameters:

vi /etc/arpwatch.conf

insert line like this:

eth0 -a -n 124.18.0.0/24 -m alerts.here@mydomain.com

Restart arpwatch for new configuration:

/etc/init.d/arpwatch restart

Check if the process is running:

ps –ef | grep arpwatch
root 218 1 0 11:38 ? 00:00:00 /usr/sbin/arpwatch ...