arpwatch doesn't work with current libpcap

Robert Kryczało laro w bro.net.eu.org
Nie, 24 Gru 2000, 02:48:58 CET


It seems that arpwatch is not working correctly with libpcap library
distributed via libpcap-cvs20001101-1.i586.rpm

Both, current arpwatch rpm (arpwatch-2.1a4-12) and some old release (taken
from backup) do not work with said library.
After starting, it shows up in the list of processes. Syslog output seems
correct:

Dec 23 22:30:47 boss arpwatch: listening on eth0

Given interface is entering promiscious mode.

The problem is that no real data is written into /var/lib/eth0.dat. It stays
empty. Neither that file contains data nor data is send via mail to root.
Others programs utylizing libpcap like tcpdump work fine.

Replacing libcap with an old one (libpcap-0.4-21) cures the problem.

Any suggestions? Can I ask the person, who compiled and packaged libpcap-cvs
(or somebody else capable of doing that) to recompile the latest snapshot or
stable version of libpcap.

TIA

Robert Kryczało





Więcej informacji o liście dyskusyjnej pld-devel-pl