Ask Your Question

Revision history [back]

Is it ARP Spoofing?

1 despite i do nothing, arp request in every 2 minutes. or sometime arp storm happend.

2 It's very different between sender and target ip. it's different from the first number of ip. sender is me, xxx.yyy.xxx.yyy and target is yyy.zzz.yyy.zzz and i didn't see that ip with cmd command

i've looked up the relevant articles, but the sender of the arp and the target of arp had only the same triple number. like xxx.xxx.xxx.yyy and xxx.xxx.xxx.zzz

3 the source of each packet which request of strange ip is different from mine. router is different. ip is also different.

4 IO Graphics is strange. i turned on the internet page and did nothing, but the number of packets captured is very small, and sometimes it is recorded very much. like 5000 packets in 1 secs.

5 pop up blocked sound irregularly when i used to check packet with wireshark. i never heard like this sound(windows10 pop up block sound) before download and start this program. someone seems to be frolicking with a sound.

with these symptoms, is it ARP Spoofing? then what can i do to block and prevent it?