Orbi Log capturing ARP attacks from an internal device (TP-Link HS200)

ARP attacks, hmm.  I have looked at two months of Orbi logs and find only three "ARP Attacks", one from my own desktop and two from Spectrum's gateway.

If these persist, it might be useful to turn on the Orbi debug capture (on the debug page) and then use a packet analyzer (such as Wireshark) to find the actual ARP packets.  I do not know how many ARP entries Orbi needs to declare an "attack".  Typically, my LAN captures show gazillions of ARP requests.  Every device seems to be asking "Who has <ip>?" all the time.