Jump to content

Recommended Posts

Hello, today i got a warning saying i was being under arp cache attack. This happened again to me last year in same month. Im guessing this is a false alarm but i wanna play it safe, Any professionals can help me with whats going on? [the warning popped up only once]

Edited by Potattoo
Grammar mistake

Share this post


Link to post
Share on other sites

Thanks for the anwser, but i'm afraid that i think my case is something more unique. This also happened the same day last year. 

Share this post


Link to post
Share on other sites

You can provide an advanced network protection log from time when the detection occurs and we'll tell you the MAC address of the device which is triggering the detection. Advanced logging can be enabled under Help and support -> Details for technical support. After reproducing the detection, disable logging and collect logs with ESET Log Collector. When done, provide the generated archive for perusal.

Share this post


Link to post
Share on other sites

I believe this is a false alarm since it went off after me turning wifi off and on. Also sorry man but i cant download the log collector, can you help me via this post?

Share this post


Link to post
Share on other sites
2 hours ago, Potattoo said:

the warning popped up only once

I wouldn't worry about it. If it was an actual ARP poisoning attack, you would be bombarded with like Eset alerts as the other poster with this issue stated.

Share this post


Link to post
Share on other sites

If you are still getting the notification, please provide logs as per the instructions above. Otherwise there's nothing to investigate.

Share this post


Link to post
Share on other sites

Im not getting the notifaction anymore, it just happened once yesterday and i just wanted to know if im safe or not

Share this post


Link to post
Share on other sites

i also checked my arp table and none of them have the same address. Just saying because a website i read told me if 2 of them have same physical address it was probably a ARP attack

Share this post


Link to post
Share on other sites
8 minutes ago, Potattoo said:

Sooo,,, Do you guys think im 100% safe? If not how can i stop this arp thing?

Make sure your router is safe , and your LAN network is also safe (meaning that devices are up-to-date and not infected) , scan your PC with ESET to make sure you don't have anything hidden in your PC

Other than that you should be fine.

Share this post


Link to post
Share on other sites

I already scanned my pc multiple times [it all came out clean], My windows etc. are up-to-date but, i dont know how to check if my router is safe

Edited by Potattoo
Missing word

Share this post


Link to post
Share on other sites

You have already received an answer above, there's basically nothing else to add. To have your router secured, upgrade the firmware, disable remote administration over WAN, use a strong password, disable services that you don't need, etc.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...