arpwatch

Daemon that tracks MAC↔IP pairings and emails on changes.

$ sudo systemctl status arpwatch
$ sudo arpwatch -i eth0