Hi all

Arpwatch not working properly (bug) on Debian 10.0 (Buster)

For complete : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931544
[1]

I have tested arpwatch on 
- Debian 8.11 (Jessie) 2.1a15-1.3, wors fine
- Debian 9.9 (Strech) 2.1a15-2+b1, works fine
- Debian 10.0 (Buster) 2.1a15-7 Bug (fail to start)

On new debian (10.0 / buster) there is 2 bugs :

1) File " /VAR/LIB/ARPWATCH/ARP.DAT " is not created

[Fix it with]
touch /var/lib/arpwatch/arp.dat
chown arpwatch:arpwatch /var/lib/arpwatch/arp.dat

2) /etc/init.d/arpwatch status display "service is running" but it's not
running

[Fixed Partial]

In " /lib/systemd/system/arpwatch.service " (only in debian 10.x)

Replace:
 ExecStart=/bin/true
With:
 ExecStart=/usr/sbin/arpwatch

This works partially, because " /etc/init.d/arpwatch start " works ...
But igniore Configuration in " /etc/default/arpwatch " (Params ARGS /
RUNAS)

NB: " -u arpwatch -N -p " is default arguments

ps ax | grep arpwatch
1431 ? S 0:00 /usr/sbin/arpwatch 

Instead of: ExecStart=/usr/sbin/arpwatch
I have try : ExecStart=/usr/sbin/arpwatch -u arpwatch -N -p

After restart:
/etc/init.d/arpwatch restart
ps ax | grep arpwatch
1575 ? S 0:00 /usr/sbin/arpwatch -u arpwatch -N -p

This is a temporary solution while waiting for a real fix....

Regards 

Links:
------
[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931544

Reply via email to