title: Detect ARP Spoofing using traceroute
body: <p>I'm making application that can detact arp spoofing :]</p>
  
  <p>My idea is that if there is attacker in subnet, and he tried to MITM using arp poisoning, then I exec traceroute to default gateway(or changed arp cache entry, whatever).</p>
  
  <p>Cuz all my packets go through attacker's PC, so traceroute will show up some sign.</p>
  
  <p>Is there any problem in my idea? Is it proper? or not?</p>