XArp

The XArp application was designed for the sole purpose of detecting ARP attacks. As such it is a highly specialized application intended for users and administrators.

The detection mechanism is based on two techniques: inspection modules and discoverers. Inspection modules look at each ARP packet, check its correctness and validity in respect to databases they built up. Discoverers actively validate IP-MAC mappings and help to deect attackers actively.

XArp helps users to detect ARP attacks and keep their data private. Administrators can use XArp to monitor whole subnets for ARP attacks. Different security levels and fine tuning possibilities allow normal and power user to efficiently use XArp to detect ARP attacks.