On 2017-06-23, Indunil Jayasooriya <induni...@gmail.com> wrote: > Is there any way to get an MAC address of a PC that was connected to > OpenBSD PF box but now it is NOT connect to.
If the PF box was serving DHCP and the PC fetched its address that way, it will likely still be in the lease database, /var/db/dhcpd.leases. If this is something which might come up again in the future, you can run arpwatch (in ports), but it's no time machine.
