I found a purported man-in-the-middle detector here. I think that the script looks for the mac address of the router and warns if it changes. But I don't know how. The script is basically
Code: Select all
while true; do sleep 5; awk '{if(x[$4]++) exit 1;}' /proc/net/arp || [print a warning] ; done