Why does arpwatch report "new station" when an existing system adds or changes IP address?

Solution Verified - Updated -

Issue

  • I'm running arpwatch. When an existing system changes IP address, the message new station is reported. This isn't a new station, because arpwatch has seen this MAC address before.
  • I've noticed that "new station" message is sent not only when a new ethernet address is detected, but also when a new IP is detected.

Environment

  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • arpwatch

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.