How to detect arp spoofing using iptable?

Question

How can I set iptables to detect arp spoofing on linux?

Have you done any research on this? Are you sure that iptables can do what you expect it to? Do you want to detect or stop ARP spoofing? — schroeder, Oct 15 '15 at 17:01
I have googled but couldn't find any thing usefull. I find only [this](https://kokikode.wordpress.com/2009/12/01/defense-against-arp-spoofing-in-linux/) — user3806649, Oct 15 '15 at 17:14

davidb · Answer 1 · 2015-10-15T17:08:37.487

1

You can't. The iptables command is an interface for the netfilter module of linux. Its used to block, redirect,... traffic not to detect MITM attacks. You can detect arp spoofing using a Network Intrusion Detection System (NIDS) like snort for example.

edited Oct 15 '15 at 17:08

answered Oct 15 '15 at 17:02

davidb

4,285
3
19
31

Are you sure that it's impossible ? – user3806649 Oct 15 '15 at 17:17

How to detect arp spoofing using iptable?

1 Answers1