ArpON: watching your ARP cache

ArpON is a very practical daemon, where tools like Arpwatch only let you see the problems, ArpON lets you block them (notably ARP cache poisoning attempts).

To do this it can use two protocols, SARPI (Static ARP Inspection) and DARPI (Dynamic ARP Inspection).

It perfectly replaces the arp, arping and arpscan tools, detects and blocks spoofing or poisoning attempts and because it runs in user space, remains very portable. Currently compatible with OpenBSD, FreeBSD, Debian, Gentoo, Slackware and even Mac OSX.

For now I have not finished testing it, but this little gem could be a perfect alternative to arpwatch. You will find its man page here and can download it here.