A Route Management Program (2030) of the end user device may detect these surreptitious attacks by detecting either changes to the ARP table itself, or by detecting a plurality of responses to the initial ARP request from the end user device. If an attack is detected, the route management program takes an action as described above.
The packet redirect detector functions as described above to detect surreptitiously redirected packets from opaque parts of the IP-based network, and if detected, takes a defined action as described above.