Due to the reversal of networking to incorporate software-defined networking (SDN) as the new foundation of a fog-cloud IoT ecosystem, Address Resolution Protocol (ARP) spoofing is a serious threat to network availability and data integrity. This paper proposes the DP-SPOOF, a scalable and microservice-driven DP framework aimed at finding and eliminating the ARP spoofing attack within the elastic fog-cloud SDN setting. The architecture proposed is a multi-tier architecture which consists of a purpose-driven hierarchy of Citizen Fog, Master Fog, and Cloud, system, all integrated with SDN-based flow control and microservices using Docker. This architecture enables real-time verification of traffic and dynamic scheduling of tasks, and sourcing of spoofing attacks at very little cost of delay and computation resources. The efficiency of using the framework in case of network traffic attack is confirmed by simulations....