there is a few programs to detect arp poisoning i.e. ethereal can detect the huge amount of traffic flow there's a window app winarpwatch http://www.arp-sk.org/files/related/warpwatch.zip that is a windows clone of the nix program arpwatch that basically checks to see if your arp cache has changed