File arpwatch-no-source-zero.dif of Package arpwatch.18007
--- arpwatch-2.1a11/arpwatch.c
+++ arpwatch-2.1a11/arpwatch.c
@@ -378,6 +378,12 @@
/* Source ip address */
BCOPY(SPA(ea), &sia, 4);
+ /* dhcp broadcasts source from 0.0.0.0 - ignore */
+ if (sia == 0) {
+ dosyslog(LOG_INFO, "0-source", sia, sea, sha);
+ return;
+ }
+
/* Watch for bogons */
if (isbogon(sia)) {
dosyslog(LOG_INFO, "bogon", sia, sea, sha);