import logging
logging.getLogger("scapy.runtime").setLevel(logging.ERROR)
from scapy.all import *

routerip = sys.argv[1]
macrouter = sys.argv[2]

def arp_monitor_callback(pkt):
        if ARP in pkt and pkt[ARP].op == 2:

                direhw = pkt.sprintf("%ARP.hwsrc%")
        ip = pkt.sprintf("%ARP.psrc%")

        if ip == routerip and direhw != macrouter:

            print "Detectado ataque ARP SPOOF\n"
            print "Direccion MAC atacante %s\n" % direhw

sniff(prn=arp_monitor_callback, filter="", store=0)