I've got the same problem with arpwatch (I don't remember the version of arpwatch and libcap - it's far from here :) ) Everythink looks fine in log's, but arpwatch doen't work and he is generating ~98% CPU load. It's crazy... -- ------------ pozdr. Paweł Gołaszewski