arpsnmp

Ethernet/FDDI station activity monitor

Install

All systems
curl cmd.cat/arpsnmp.sh
Debian Debian
apt-get install arpwatch
Ubuntu
apt-get install arpwatch
Alpine
apk add arpwatch
Arch Arch Linux
pacman -S arpwatch
image/svg+xml Kali Linux
apt-get install arpwatch
Fedora
dnf install arpwatch
Windows (WSL2)
sudo apt-get update sudo apt-get install arpwatch
Raspbian
apt-get install arpwatch
Dockerfile
dockerfile.run/arpsnmp
Docker
docker run cmd.cat/arpsnmp arpsnmp powered by Commando

arpwatch

Ethernet/FDDI station activity monitor

Arpwatch maintains a database of Ethernet MAC addresses seen on the network, with their associated IP pairs. Alerts the system administrator via e-mail if any change happens, such as new station/activity, flip-flops, changed and re-used old addresses. If you want to maintain a list authorized MAC addresses manually, take a look at the arpalert package which may fit your needs better.