How can I set iptables to detect arp spoofing on linux?

closed as off-topic by Iszi, user45139, schroeder Oct 15 '15 at 17:57

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – Iszi, Community, schroeder
If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    Have you done any research on this? Are you sure that iptables can do what you expect it to? Do you want to detect or stop ARP spoofing? – schroeder Oct 15 '15 at 17:01
  • I Just wana to detect – user3806649 Oct 15 '15 at 17:11
  • I have googled but couldn't find any thing usefull. I find only this – user3806649 Oct 15 '15 at 17:14

You can't. The iptables command is an interface for the netfilter module of linux. Its used to block, redirect,... traffic not to detect MITM attacks. You can detect arp spoofing using a Network Intrusion Detection System (NIDS) like snort for example.

  • Are you sure that it's impossible ? – user3806649 Oct 15 '15 at 17:17

Not the answer you're looking for? Browse other questions tagged or ask your own question.