Hi all
Arpwatch not working properly (bug) on Debian 10.0 (Buster) For complete : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931544 [1] I have tested arpwatch on - Debian 8.11 (Jessie) 2.1a15-1.3, wors fine - Debian 9.9 (Strech) 2.1a15-2+b1, works fine - Debian 10.0 (Buster) 2.1a15-7 Bug (fail to start) On new debian (10.0 / buster) there is 2 bugs : 1) File " /VAR/LIB/ARPWATCH/ARP.DAT " is not created [Fix it with] touch /var/lib/arpwatch/arp.dat chown arpwatch:arpwatch /var/lib/arpwatch/arp.dat 2) /etc/init.d/arpwatch status display "service is running" but it's not running [Fixed Partial] In " /lib/systemd/system/arpwatch.service " (only in debian 10.x) Replace: ExecStart=/bin/true With: ExecStart=/usr/sbin/arpwatch This works partially, because " /etc/init.d/arpwatch start " works ... But igniore Configuration in " /etc/default/arpwatch " (Params ARGS / RUNAS) NB: " -u arpwatch -N -p " is default arguments ps ax | grep arpwatch 1431 ? S 0:00 /usr/sbin/arpwatch Instead of: ExecStart=/usr/sbin/arpwatch I have try : ExecStart=/usr/sbin/arpwatch -u arpwatch -N -p After restart: /etc/init.d/arpwatch restart ps ax | grep arpwatch 1575 ? S 0:00 /usr/sbin/arpwatch -u arpwatch -N -p This is a temporary solution while waiting for a real fix.... Regards Links: ------ [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931544