File arpwatch-no-source-zero.dif of Package arpwatch
--- a/arpwatch.c +++ b/arpwatch.c @@ -481,6 +481,16 @@ process_ether(u_char *u, const struct pc if (toskip(sia)) return; + /* dhcp broadcasts source from 0.0.0.0 - ignore */ + if (sia == 0) { + static u_char old_sea[6]; + if (memcmp(old_sea, sea, 6)) { + dosyslog(LOG_INFO, "0-source", sia, sea, sha); + memcpy(old_sea, sea, 6); + } + return; + } + /* Watch for bogons */ if (isbogon(sia)) { if (!quiet)