Arpwatch false positives after update
-
Hello
Arpwatch used to work just fine for me. I use email notifications to track new MACs. But recently, I think after I updated to pfSense 2.7, it started reporting known MAC address with IP address changes as 'new station'. It used to only report 'new station' when it encountered a new MAC address. I tried clearing my arpwatch database. No help. So now I get several emails a day every day about the same MAC addresses over and over. Has the behavior changed or is it a bug?thanks
-
where can i find the source code for the package?
-
I switched back to using the ISC DHCP server. Now arpwatch is working properly again. It seems the new DHCP server was the problem.