Using constant traffic to specific IP destinations for detecting spoofed MAC addresses in Local Area Networks

This paper addresses the issue of detecting spoofed MAC addresses in a Local Area Network using constant traffic to specific IP destinations, as a fingerprint of the authorized station. In the chapters that follow, the authors describe how to determine this fingerprint and then how can it be used by applications to monitor network traffic in order to determine if one network station is or is not who it claims to be.