> I was asking because I had this problem before (router with two cards > against one physical subnet) and arpwatch complained that the router kept > switching MACaddresses all the time. That sounds like a bug in arpwatch. A box can have multiple mac addresses. Its probably a tricky one to handle but arpwatch I guess should spot and cope with repeated transitions between the same set of addresses as one warning - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org