How can I detect that a suspicious host has been detached to a LAN network ?
I'm not sure what kind of "suspicious" you mean. But here's a few points:
Does any of these answer your question?
How to detect that a foreign host has been connected to my network, and how to prevent him from gaining access?
Preferred way to do this would be to implement 802.1X access control:
View all community news »