arpwatch.sh is not part of arpwatch 2.1.a11, but a part of its FreeBSD port. arpwatch.sh is installed into /usr/local/etc/rc.d and starts arpwatch at boot time. It runs as many arpwatches as specified by variable ${arpwatch_interfaces} in rc.conf. The problem is that all this arpwatch processes try to use the same /usr/local/arpwatch/arp.dat. At shutdown time there exists a race condition between them: each arpwatch process dumps his data into arp.dat, and there remains table of the last exited one. Fix: Let each arpwatch use his own arp.${iface}.dat: How-To-Repeat: Set ${arpwatch_interfaces} to a list of interfaces, more than 1. Run arpwatch, look at your mail, write down 'new stations'. killall arpwatches, start arpwatch.sh again. Look at your mail. Some 'new stations' will appear again.
Responsible Changed From-To: freebsd-ports-bugs->brian over to maintainer
Responsible Changed From-To: brian->freebsd-ports-bugs Port maintainer was reset
Responsible Changed From-To: freebsd-ports-bugs->krion I'll handle it.
State Changed From-To: open->closed Committed, thanks!