$ sudo geany /etc/arpwatch.conf
# /etc/arpwatch.conf: Debian-specific way to watch multiple interfaces. # Format of this configuration file is: # #<dev1> <arpwatch options for dev1> #<dev2> <arpwatch options for dev2> #... #<devN> <arpwatch options for devN> # # You can set global options for all interfaces by editing # /etc/default/arpwatch #eth0 -m root+eth0 eth1 -m root+eth1
$ sudo geany /etc/arpwatch.conf $ sudo /etc/init.d/arpwatch start Starting Ethernet/FDDI station monitor daemon: (creating /var/lib/arpwatch/eth1.dat) (chown arpwatch /var/lib/arpwatch/eth1.dat) arpwatch-eth1. $ ps aux | grep arp arpwatch 4807 0.1 0.2 9072 5564 ? S 20:57 0:00 /usr/sbin/arpwatch -i eth1 -f eth1.dat -m root+eth1 -u arpwatch -N -p