Provided by: arpwatch_2.1a13-2_i386 bug


       arpsnmp - keep track of ethernet/ip address pairings


       arpsnmp [ -d ]
               [ -f datafile ]
               [ -s sendmail_path ]
               [ -m addr ]
               file [ ...  ]


       Arpsnmp  keeps  track  for  ethernet/ip  address  pairings.  It syslogs
       activity  and  reports  certain  changes  via  email.   Arpsnmp   reads
       information from a file (usually generated by snmpwalk(8)).

       The  -d  flag  is used enable debugging. This also inhibits mailing the
       reports.  Instead, they are sent to stderr.

       The -f flag is used to set the ethernet/ip address  database  filename.
       The default is arp.dat.

       (Debian)  The  -s  flag  is  used  to  specify the path to the sendmail
       program.  Any program that takes the option -odi  and  then  text  from
       stdin can be substituted. This is useful for redirecting reports to log
       files instead of mail.

       (Debian) The -m option is used to specify the e-mail address  to  which
       reports  will  be  sent.   By  default, reports are sent to root on the
       local machine.

       Note that an empty arp.dat file must be created before the  first  time
       you run arpsnmp.


       (See  the  arpwatch(1)  man  page  for  details  on the report messages
       generated by arpsnmp(1).)


       /var/lib/arpwatch - default directory
       arp.dat - ethernet/ip address database
       /usr/share/arpwatch/ethercodes.dat - vendor ethernet block list


       arpwatch(8), snmpwalk(8), arp(8)


       Craig Leres  of  the  Lawrence  Berkeley  National  Laboratory  Network
       Research Group, University of California, Berkeley, CA.

       The current version is available via anonymous ftp:



       Please send bug reports to

       Attempts  are made to suppress DECnet flip flops but they aren’t always