arpwatch on dual-homed PC

psychobyte · 01-20-2006, 02:17 PM

Hi,

I know that you can specify an interface with the -i switch on arpwatch. Is it possible to have arpwatch listen on 2 interfaces at once. I didn't see anything in the man pages about this.

Thanks

bulliver · 01-20-2006, 03:18 PM

Which distro are you using?

I have Gentoo here, and it seems you need to start the program once for each interface. ie:

Code:

IFACES="eth0 eth1"
for IFACE in ${IFACES}
do
        DATAFILE=/var/lib/arpwatch/${IFACE}.dat
        arpwatch -i $IFACE -f /var/lib/arpwatch/$IFACE.dat
done