TOOL TUTORIAL · Network Monitoring & Asset Tracking
How to install and use Arpwatch
Arpwatch is a network monitoring tool that observes and logs ARP (Address Resolution Protocol) traffic on a local network. It helps in detecting ARP-related anomalies, such as IP address changes, new devices on the network, and potential ARP spoofing attacks. By keeping track of…
Quick install:
sudo apt install arpwatch
Installation steps
- Open a terminal on a Debian based system or Kali Linux
- Run sudo apt update to refresh the package list
- Run sudo apt install arpwatch to install the monitor
- Find your interface name with the ip a command
- Start watching with sudo arpwatch -i followed by that name