Package: arpwatch Version: 2.1a15-2+b1 Severity: important Arpwatch seems to start before the networking is really ready. In this case, we are listening on a bridge interface, so that might have something to do with it.
This might be a problem with systemd/networking/bridging/etc. Feel free to pass the bug along to whoever is really at fault. Here's a clip from a system journal log: May 08 15:17:45 myhost kernel: r8169 0000:02:00.0: firmware: direct-loading firmware rtl_nic/rtl8168g-2.fw May 08 15:17:45 myhost kernel: r8169 0000:02:00.0 eth0: link down May 08 15:17:45 myhost kernel: r8169 0000:02:00.0 eth0: link down May 08 15:17:45 myhost systemd[1]: Reloading. May 08 15:17:45 myhost cron[585]: (CRON) INFO (Running @reboot jobs) May 08 15:17:45 myhost arpwatch[705]: bad interface br0: SIOCGIFADDR: br0: No such device - assuming unconfigured interface May 08 15:17:45 myhost arpwatch[598]: Starting Ethernet/FDDI station monitor daemon: (chown arpwatch /var/lib/arpwatch/br0.dat) arpwatch-br0. May 08 15:17:45 myhost arpwatch[711]: pcap open br0: br0: No such device exists (SIOCGIFHWADDR: No such device) May 08 15:17:45 myhost systemd-udevd[720]: Could not generate persistent MAC address for br0: No such file or directory May 08 15:17:45 myhost kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. May 08 15:17:45 myhost ifup[543]: Waiting for a max of 5 seconds for eth0 to become available. May 08 15:17:45 myhost kernel: br0: port 1(eth0) entered blocking state May 08 15:17:45 myhost kernel: br0: port 1(eth0) entered disabled state May 08 15:17:45 myhost kernel: device eth0 entered promiscuous mode May 08 15:17:45 myhost ifup[543]: Waiting for br0 to get ready (MAXWAIT is 2 seconds). -- System Information: Debian Release: 9.0 APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages arpwatch depends on: ii adduser 3.115 ii libc6 2.24-9 ii libpcap0.8 1.8.1-3 arpwatch recommends no packages. arpwatch suggests no packages. -- Configuration Files: /etc/arpwatch.conf changed [not included] /etc/default/arpwatch changed [not included] -- no debconf information
