Arpwatch - monitor mac addresses change Arpwatch is a computer software open source program. It monitors the ARP activity over the network and detects ARP spoofing. It also maintains the database of Ethernet/IP address pairings. Arpwatch gives a list of noticed pairing IP and MAC addresses. Techniques to monitor Ethernet Activity using Arpwatch Tool in Linux is illustrated in this tutorial with examples. Networking Linux Security
