How can I get arpwatch to run and monitor an interface with no IP address? I don't see any switches for such an option. Arpwatch errors out with "arpwatch: bad interface eth0: eth0: no IPv4 address assigned. This interface is on a SPAN port and has no IP address on it.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
How can I get arpwatch to run and monitor an interface with no IP address? I don't see any switches for such an option. Arpwatch errors out with "arpwatch: bad interface eth0: eth0: no IPv4 address assigned. This interface is on a SPAN port and has no IP address on it.
rrhoads:
It appears that you are correct that this network application does not support stealth mode (i.e. no binding IPv4 Address) for the NIC to monitor.
The NST WUI does support a similar method for arp scanning/monitoring that you may want to consider using the Arp Scan Monitor…
From the NST Menu:
Network => Monitors => Arp Scan Monitor
-- RWH