Arpwatch – Monitor ARP activity and detect ARP Spoofing
Posted on Dec 02, 2007 under ARP, Security | 3 CommentsTags:ARP arp-spoofing arpsnmp arpwatch libpcap Security
ArpWatch is an opensource tool that monitors ethernet or FDDI network activity in the network and maintains a database of IP Address to MAC address mappings. Arpwatch notify via email if there is a change. Arpwacth is most commonly used to detect ARP Spoofing security issues in the network. Arpwatch can run on most of the Linux distributions,UNIX and Sun Solaris.

