How can I get arpwatch to run and monitor an interface with no IP address? I don't see any switches for such an option. Arpwatch errors out with "arpwatch: bad interface eth0: eth0: no IPv4 address assigned. This interface is on a SPAN port and has no IP address on it.
It appears that you are correct that this network application does not support stealth mode (i.e. no binding IPv4 Address) for the NIC to monitor.
The NST WUI does support a similar method for arp scanning/monitoring that you may want to consider using the Arp Scan Monitor…
From the NST Menu:
Network => Monitors => Arp Scan Monitor
Sign up for the SourceForge newsletter:
You seem to have CSS turned off.
Please don't fill out this field.