import time
import netsyslog
import syslog
from scapy.all import *

arp_table = {}
def arp_inspection(pkt):
    global arp_table
    op = pkt.getlayer(ARP).op
    src = pkt.getlayer(Ether).src
    if op == 1:
        arp_table[src] = time.time()
    if op == 2:
	dst = pkt.getlayer(Ether).dst
        if dst in arp_table:
            time_arp_req = arp_table.pop(dst, None)
        if int(time.time() - time_arp_req) > 5:
            print "Alert! Attack from %s" % src
        else:
            print "Alert! Attack from %s" % src
def send_syslogd():
       loggers = netsyslog.Logger()
       loggers.add_host("google.ru")
       loggers.log(syslog.LOG_USER, syslog.LOG_NOTICE, "Alert! Attack from" %src, pid=True)
send_syslogd()
sniff(filter='arp', prn=arp_inspection)