File arpwatch-no-source-zero.dif of Package arpwatch
--- arpwatch-2.1a11/arpwatch.c +++ arpwatch-2.1a11/arpwatch.c @@ -378,6 +378,12 @@ /* Source ip address */ BCOPY(SPA(ea), &sia, 4); + /* dhcp broadcasts source from 0.0.0.0 - ignore */ + if (sia == 0) { + dosyslog(LOG_INFO, "0-source", sia, sea, sha); + return; + } + /* Watch for bogons */ if (isbogon(sia)) { dosyslog(LOG_INFO, "bogon", sia, sea, sha);