Design and Implementation of ARP Spoofing Detection System Based on WinPcap

ARP spoofing seriously threatened the safety of switched network. Considering the characteristics of switched network environment, a method of ARP spoofing detection system was proposed based on WinPcap. Using port mirroring and monitor software, cooperating with the WinPcap driver, we developed the detection system. It could capture and analyze the ARP packets in switched network. Because the method doesn't request any host response, it can be more effective to reduce influence over network during detection than other methods, and can effectively detect ARP spoofing in switched network at the same time.