Arpwatch false positives after update
-
Hello
Arpwatch used to work just fine for me. I use email notifications to track new MACs. But recently, I think after I updated to pfSense 2.7, it started reporting known MAC address with IP address changes as 'new station'. It used to only report 'new station' when it encountered a new MAC address. I tried clearing my arpwatch database. No help. So now I get several emails a day every day about the same MAC addresses over and over. Has the behavior changed or is it a bug?thanks
-
where can i find the source code for the package?
-
I switched back to using the ISC DHCP server. Now arpwatch is working properly again. It seems the new DHCP server was the problem.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.