Description

Arpwatch is a free, open-source, Unix-based network monitoring application that is used to track and log IP address-to-MAC address mappings of devices on a local area network. It works by monitoring Address Resolution Protocol (ARP) traffic on a network and keeping records of which IP addresses are associated with which MAC addresses. It can also detect changes in the network, such as when a new device connects to the network or an existing device is disconnected. Arpwatch can be used to track unauthorized access to a network, detect suspicious activity, and determine which devices are connected to the network in real time. Arpwatch is generally used in conjunction with other network monitoring and security applications such as Snort and Tripwire. It is also used to generate audit logs and statistics about the traffic on a network. The software is available for a variety of platforms, including Linux, BSD, and Solaris operating systems.

Categories

Network and administration applications OS and utilities Security and privacy applications