Same here. After upgrading libpcap0.8 to 1.5.2-1 (AMD64) arpwatch started to consume CPU like crazy.
I tried to manually execute it with the debug flag, but it won't start
properly. It will enter in
the infinite loop before writing something to stderr.
Looking at ltrace output it hangs in a call to pcap_loop()
[...]
qsort(0x02711e70, 1, 8, 0x00403780)
= <void>
qsort(0x02711e90, 1, 8, 0x00403780)
= <void>
qsort(0x02711eb0, 1, 8, 0x00403780)
= <void>
qsort(0x02711ed0, 1, 8, 0x00403780)
= <void>
qsort(0x02711ef0, 1, 8, 0x00403780)
= <void>
qsort(0x02711f10, 1, 8, 0x00403780)
= <void>
qsort(0x02711f30, 1, 8, 0x00403780)
= <void>
qsort(0x02711f50, 1, 8, 0x00403780)
= <void>
qsort(0x02711f70, 1, 8, 0x00403780)
= <void>
qsort(0x02711f90, 1, 8, 0x00403780)
= <void>
sigset(2, 0x402a20, 8, 0x403780, 0)
= 0
sigset(15, 0x402a20, 0x7fff3fe18e20, -1, 0x7fff3fe18f40)
= 0
sigset(1, 0x402a20, 0x7fff3fe18e20, -1, 0x7fff3fe18f40)
= 0
sigset(3, 0x4029e0, 0x7fff3fe18e20, -1, 0x7fff3fe18f40)
= 0
sigset(14, 0x4029e0, 0x7fff3fe18e20, -1, 0x7fff3fe18f40)
= 0
alarm(900)
= 0
pcap_loop(0x2703010, 0, 0x4034d0, 0, 0x7fff3fe18f40^C <unfinished ...>
Downgrading libpcap0.8 to 1.4.0-2 "fixes" the issue.
signature.asc
Description: OpenPGP digital signature
