Rapid advancements in the field of computer networking and information storage has spread through many aspects of business and, thus have prompted an expansion in improvements to prevent powerful attacks on computers through the networks. Intrusion Detection Systems (IDS) have turned into a necessary way to guarantee the security of managing computer systems. IDS look to identify intrusions before networks can be influenced by malicious activities. It is achieved by logging the legitimate values on the network beforehand and scanning for any attempt in changing the values. The aim of this paper is to make a light-weight Network Intrusion Detection System (NIDS) to keep running at an ideal spot with the least system prerequisites. It guards against man-in-the-middle attacks on network systems. At the point when an attacker is found spoofing the Address Resolution Protocols (ARPs), defensive ARPs are manually created and sent to 'depoison' the victim using their unique logged L2 addresses. Given the increasing complexity of the current system environment, an everincreasing number of hosts are becoming vulnerable to attack vectors, and therefore methodological, productive and mechanized intrusion detection methodologies need to be carefully examined.