/var/arpwatch/massagevendor fails with missing files duplicates.awk and missingcodes.txt. The latter file is in the original tarball, so it just needs to be added to the %files in tcpdump.spec. I don't know where duplicates.awk is supposed to come from. Background: The massagevendor script translates the latest oui.txt file from IEEE to the ethercodes.dat file used by arpwatch.
Checked the latest tarball (2.1a11) and it includes duplicates.awk.
This also affects rawhide tcpdump 3.6.2.
expect tcpdump-3.6.2-5 to have the files