ArpON - Protect yourself from MITM attacks.

ArpON (Arp handler inspectiON) is a portable handler daemon that make ARP secure in order to avoid the Man In The Middle through ARP Spoofing/Poisoning. It detects and blocks also Man In The Middle through ARP Spoofing/Poisoning for DHCP Spoofing, DNS Spoofing, WEB Spoofing, Session Hijacking and SSL/TLS Hijacking & co attacks.

This is possible using two kinds of anti ARP Poisoning tecniques: the first is based on SARPI or "Static Arp Inspection" the second on DARPI or "Dynamic Arp Inspection" approach. SARPI and DARPI protects both unidirectional, bidirectional and distributed attacks.

Here's a very quick example of it's usage, we will use SARPI.

arpon -n 10 -g -u 1 -s -i eth0

 
  ArpON "Arp handler inspection" version 1.90 (http://arpon.sourceforge.net)

  [00/02/2011 - 08:32:04 PST] Device: (eth0) MAC: 0:24:21:66:9:5a Inet4: 192.168.1.101 Netmask: 255.255.255.0

  [00/02/2011 - 08:32:04 PST] Device: (eth0) MAC: 0:24:21:66:9:5a Inet4: 192.168.1.101 Netmask: 255.255.255.0
  [00/02/2011 - 08:32:04 PST] SARPI Start...
  [00/02/2011 - 08:32:04 PST] SARPI protects these Arp Cache's entries:
  [00/02/2011 - 08:32:04 PST] 1)     192.168.1.1 ->  0:66:78:d6:92:c8
  [00/02/2011 - 08:32:04 PST] SARPI Arp Cache refresh timeout: 1 minute.
  [00/02/2011 - 08:32:04 PST] SARPI Realtime Protect actived!

-n 10 ~ Sets priority   
-g ~ Works in logging mode
-u 1 ~ Sets sarpi timeout to 1 minute 
-s ~ Manage arp cache statically

You can get ArpON with the apt-get command or visit here