refactor arp cache for analysis