To get this running you'll need perl version 4, patchlevel 19 or greater and tcpdump installed on your machine. arpmon does a popen() to tcpdump and collects data. It writes its pid by default to /home/arpmon/arpmon.pid, and dumps its data to /home/arpmon/addrs. Doing a kill -HUP `cat arpmon.pid` creates or updates the addrs file. A kill -QUIT `cat arpmon.pid` updates the addrs file and instructs the arpmon process to die. You can change these pathnames by editing paths.pl. ipreport will write a formatted report of the addrs files to stdout. Do an ipreport -h for the other options. nightly is a script I run from cron. TODO: ping option (write something in perl that does ICMP echo requests) Proxy arp detection. arpmon should make itself a daemon, not just run in the background. ARCHIVE Site: curiosity.cob.ohio-state.edu ~ftp/pub/arpmon/ -- mark maf+@osu.edu