To do ARP spoofing, the NIC must be kept in promiscuous mode, so detecting machines in promiscuous mode with no valid reason is an important defense against ARP spoofing.
The NIC must be kept in promiscuous mode. This was to do ARP spoofing. Detecting machines in promiscuous mode with no valid reason is an important defense against ARP spoofing.