Arpwatch
Posted on 10 November 2011
From: LBNL's Network Research GroupArpwatch is a tool that monitors ethernet activity and keeps a database of ethernet/ip address pairings. It also reports certain changes via email. Arpwatch uses libpcap, a system-independent interface for user-level packet capture.