> I want a function to be called, whenever an ARP entry gets added or deleted. using the NETLINK_ROUTE protocol you can snoop all the neighbour table updates that go on in the kernel. i think you need to have CONFIG_ARPD enabled in the kernel to generate these messages unprompted (but i am not sure). otherwise RTN_NEWNEIGH is only generated in response to RTM_GETNEIGH. kind regards anupam -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/