Potattoo 0 Posted May 20, 2020 Share Posted May 20, 2020 (edited) Hello, today i got a warning saying i was being under arp cache attack. This happened again to me last year in same month. Im guessing this is a false alarm but i wanna play it safe, Any professionals can help me with whats going on? [the warning popped up only once] Edited May 20, 2020 by Potattoo Grammar mistake Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 20, 2020 Author Share Posted May 20, 2020 Hell, it was even in the same day. [well not the same day,but 3 day difference] Link to comment Share on other sites More sharing options...
Administrators Marcos 4,932 Posted May 20, 2020 Administrators Share Posted May 20, 2020 Please refer to https://forum.eset.com/topic/23637-getting-arp-cache-poisoning-attack-messages-all-day/ Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 20, 2020 Author Share Posted May 20, 2020 Thanks for the anwser, but i'm afraid that i think my case is something more unique. This also happened the same day last year. Link to comment Share on other sites More sharing options...
Administrators Marcos 4,932 Posted May 20, 2020 Administrators Share Posted May 20, 2020 You can provide an advanced network protection log from time when the detection occurs and we'll tell you the MAC address of the device which is triggering the detection. Advanced logging can be enabled under Help and support -> Details for technical support. After reproducing the detection, disable logging and collect logs with ESET Log Collector. When done, provide the generated archive for perusal. Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 20, 2020 Author Share Posted May 20, 2020 I believe this is a false alarm since it went off after me turning wifi off and on. Also sorry man but i cant download the log collector, can you help me via this post? Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 20, 2020 Author Share Posted May 20, 2020 Hello? Quote Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 20, 2020 Author Share Posted May 20, 2020 I would like a anwser please Link to comment Share on other sites More sharing options...
itman 1,630 Posted May 20, 2020 Share Posted May 20, 2020 2 hours ago, Potattoo said: the warning popped up only once I wouldn't worry about it. If it was an actual ARP poisoning attack, you would be bombarded with like Eset alerts as the other poster with this issue stated. Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 21, 2020 Author Share Posted May 21, 2020 Sooo,we are 99% sure im safe? Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 21, 2020 Author Share Posted May 21, 2020 if im not 99% safe,how do i get rid of this? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,932 Posted May 21, 2020 Administrators Share Posted May 21, 2020 If you are still getting the notification, please provide logs as per the instructions above. Otherwise there's nothing to investigate. Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 21, 2020 Author Share Posted May 21, 2020 Im not getting the notifaction anymore, it just happened once yesterday and i just wanted to know if im safe or not Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 21, 2020 Author Share Posted May 21, 2020 i also checked my arp table and none of them have the same address. Just saying because a website i read told me if 2 of them have same physical address it was probably a ARP attack Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 21, 2020 Author Share Posted May 21, 2020 Sooo,,, Do you guys think im 100% safe? If not how can i stop this arp thing? Link to comment Share on other sites More sharing options...
Most Valued Members Nightowl 198 Posted May 21, 2020 Most Valued Members Share Posted May 21, 2020 8 minutes ago, Potattoo said: Sooo,,, Do you guys think im 100% safe? If not how can i stop this arp thing? Make sure your router is safe , and your LAN network is also safe (meaning that devices are up-to-date and not infected) , scan your PC with ESET to make sure you don't have anything hidden in your PC Other than that you should be fine. Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 21, 2020 Author Share Posted May 21, 2020 (edited) I already scanned my pc multiple times [it all came out clean], My windows etc. are up-to-date but, i dont know how to check if my router is safe Edited May 21, 2020 by Potattoo Missing word Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 21, 2020 Author Share Posted May 21, 2020 May i get a anwser please? im a bit of anxious person so a fast anwser would really help Link to comment Share on other sites More sharing options...
Administrators Marcos 4,932 Posted May 21, 2020 Administrators Share Posted May 21, 2020 You have already received an answer above, there's basically nothing else to add. To have your router secured, upgrade the firmware, disable remote administration over WAN, use a strong password, disable services that you don't need, etc. Link to comment Share on other sites More sharing options...
Potattoo 0 Posted May 21, 2020 Author Share Posted May 21, 2020 Aight, thanks a lot man. i really like the eset staff eset best anti-virus! Link to comment Share on other sites More sharing options...
Recommended Posts