Arpwatch keeps track of Ethernet and IP address pairings. It logs activity to syslog and reports certain changes via e-mail.