YouTip

# Linux arpwatch Command [ Linux Command Manual](#) The Linux arpwatch command is used to monitor ARP records on the network. ARP (Address Resolution Protocol) is a protocol used to resolve IP addresses to the hardware addresses of network devices. arpwatch can monitor ARP packets in a local network and record them, while also reporting any detected changes via email. ### Syntax arpwatch **Parameters**: * -d Enable debug mode. * -f Set the file to store ARP records, default is /var/arpwatch/arp.dat. * -i Specify the interface to monitor ARP, default interface is eth0. * -r Read ARP records from a specified file instead of monitoring from the network. * -n Specify additional local networks * -u Specify user and user group * -e Send email to specified user, not the default root user * -s Specify username as the return address, not the default user root ### Examples Monitor ARP information on network interface eth0 arpwatch -i eth0 Monitor ARP information and record relevant information to a corresponding file # arpwatch -i eth0 -f a.log //Record information to a.log [ Linux Command Manual](#)