The -d flag is used enable debugging. This also inhibits mailing the reports. Instead, they are sent to stderr.
The -f flag is used to set the ethernet/ip address database filename. The default is arp.dat.
Note that an empty arp.dat file must be created before the first time you run arpsnmp.
If the -e flag is used, arpsnmp sends e-mail messages to username rather than the default (root). If a single `-' character is given for the username, sending of e-mail is suppressed, but logging via syslog is still done as usual. (This can be useful during initial runs, to collect data without being flooded with messages about new stations.)
If the -s flag is used, arpsnmp sends e-mail messages with username as the return address, rather than the default (root).
/var/arpwatch - default directory arp.dat - ethernet/ip address database ethercodes.dat - vendor ethernet block list
The current version is available via anonymous ftp:
Attempts are made to suppress DECnet flip flops but they aren't always successful.