> But arp is not tcp so I don't know if tcpdump will work.

Not a problem.  The name tcpdump is misleading (probably historical);
it actually dumps pretty much anything the network layer in question
can handle (ethernet, in your case).  You may need to use tcpdump -e to
get it to print the MAC addresses.

/~\ The ASCII    der Mouse
\ / Ribbon Campaign
 X  Against HTML        mouse@rodents.montreal.qc.ca
/ \ Email!      7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B