arp sniff.py

#!/usr/bin/env python

# See rfc5227

from scapy.all import *
import scapy.all

def arp_dump(pkt):
#    print pkt.summary()
    if pkt[ARP].hwdst='ff:ff:ff:ff:ff:ff' and pkt[ARP].psrc == pkt[ARP].pdst:
        print('gratuitous ARP')
        return

    if pkt[ARP].op==1: # opcode: request
        if pkt[ARP].psrc=='0.0.0.0':  # source IP used for ARP Probe
            print('ARP Probe from: ' + pkt[ARP].hwsrc)
        

# Look for ARP packets (type 0x0806)
#print(scapy.all.sniff(iface='en0', filter="arp", prn=arp_dump, , store=0, count=10))
print (scapy.all.sniff(iface='en0', filter="arp", prn=arp_dump))