diff --git a/arp-scan-1.9.7.tar.gz b/arp-scan-1.9.7.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..946c147fecf4d213b26d7cb313d01654433ca5df
Binary files /dev/null and b/arp-scan-1.9.7.tar.gz differ
diff --git a/arp-scan.spec b/arp-scan.spec
new file mode 100644
index 0000000000000000000000000000000000000000..d7fd9373521b826389c5f0f912444acee828006f
--- /dev/null
+++ b/arp-scan.spec
@@ -0,0 +1,52 @@
+Name:           arp-scan
+Version:        1.9.7
+Release:        3
+Summary:        Scanning and fingerprinting tool
+
+# Includes getopt, which is LGPLv2+, but the whole is GPLv2+.
+License:        GPLv2+
+URL:            http://www.nta-monitor.com/tools/arp-scan/
+Source0:        http://www.nta-monitor.com/tools/arp-scan/download/%{name}-%{version}.tar.gz
+# source code moved to github at https://github.com/royhills/arp-scan
+BuildRequires:  libpcap-devel
+BuildRequires:  gcc
+BuildRequires:  perl-generators
+BuildRequires:  automake autoconf
+Requires:       perl(LWP::Simple)
+
+
+%description
+arp-scan is a command-line tool that uses the ARP protocol to discover and
+fingerprint IP hosts on the local network.
+
+%prep
+%setup -q
+
+%build
+autoreconf --install
+#install to sbindir
+%configure --bindir=%{_sbindir}
+make %{?_smp_mflags}
+
+
+%install
+rm -rf $RPM_BUILD_ROOT
+make install DESTDIR=$RPM_BUILD_ROOT
+
+#fix permissions for -debuginfo package
+chmod 0644 $RPM_BUILD_DIR/%{name}-%{version}/mt19937ar.c
+
+#fix permissions for files in sbindir
+chmod 0755 $RPM_BUILD_ROOT%{_sbindir}/*
+
+
+%files
+%doc AUTHORS ChangeLog COPYING README TODO 
+%{_sbindir}/*
+%{_datadir}/arp-scan
+%{_mandir}/man?/*
+
+
+%changelog
+* Mon Apr 08 2024 Yu Peng <yupeng@kylinos.cn> - 1.9.7-3
+- Package init.