Am I having an ARP Poisoning Attack?

[barneystinson19]

Hi again!
So its like this, My local network IP is 192.168.1.102 but when I traceroute to www.facebook.com (or any other website) first packet goes from 192.168.1.1 Also Firefox is keep saying "This connection is not reliable!" to all websites. So am I under an ARP Poisoning Attack? If I'm how can I block it? I'm not a network guy so please keep it simple Thanks!

[LoGiCaL__]

192.168.1.1 is your routers ip address. This is why it's the first response you see in the tracert. Just that alone wouldn't raise any suspicion of arp poisoning. If you are concerned about it you can get a packet analyzer such as wireshark and check the network traffic. If you are being arp poisoned you should see continuous packets being sent to your computer with your routers address not just a packet sent every so often. I would also suggest to keep the connections of your pc to a minimum while looking into this.

[barneystinson19]

How can I protect from it without any programs?

[limdis]

Without programs you need to monitor your network to ensure that any and all connections belong to you. ARP poisoning/spoofing/mitm can only work if access to your network is compromised.

[LoGiCaL__]

This article mentions a few preventative steps. The most effective probably being a static arp table.

http://toschprod.wordpress.com/2012/03/04/mitm-8-countermeasures/