dealing with rouge dhcp server / arp poisining

Windows script
https://gallery.technet.microsoft.com/Check-for-Rogue-DHCP-Server-35e8c73d

linux
https://superuser.com/questions/750359/check-if-a-dhcp-server-existing-in-my-network-using-bash


arpwatch
https://www.cyberciti.biz/faq/how-to-detect-arp-spoofing-under-unix-or-linux/

sharp
http://seclist.us/sharp-a-tool-to-detect-any-arp-spoofingmitm-incident.html