arpwatch fails to start if arp.dat is missing
Issue
- arpwatch fails to start if /var/arpwatch/arp.dat (RHEL5) or /var/lib/arpwatch/arp.dat (RHEL6) is missing
- Errors are found in /var/log/messages:
Nov 28 16:05:32 localhost kernel: device eth0 entered promiscuous mode Nov 28 16:05:32 localhost arpwatch: listening on eth0 Nov 28 16:05:32 localhost arpwatch: fopen(arp.dat): No such file or directory Nov 28 16:05:32 localhost kernel: device eth0 left promiscuous mode
Environment
- Red Hat Enterprise Linux 5, arpwatch-2.1a13-22.el5
- Red Hat Enterprise Linux 6, arpwatch-2.1a15-14.el6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
