2001-03-10 16:04:21 +01:00
|
|
|
Ettercap is a network sniffer/interceptor/logger for switched LAN.
|
|
|
|
|
It uses ARP poisoning and the man-in-the-middle technique to sniff all
|
|
|
|
|
the connections between two host.
|
|
|
|
|
|
|
|
|
|
It's possible to sniff in three modes:
|
|
|
|
|
|
|
|
|
|
+ IP Based, the packets are filtered on IP source and dest
|
|
|
|
|
+ MAC Based, packets filtered on mac address, useful to sniff
|
|
|
|
|
connections through gateway
|
|
|
|
|
+ ARP based, uses arp poisoning to sniff in switched lan.
|
|
|
|
|
|
|
|
|
|
Ettercap also supports character injection and plugins.
|
|
|
|
|
|
2001-06-20 16:43:13 +02:00
|
|
|
WWW: http://ettercap.sourceforge.net/
|
|
|
|
|
|
2001-03-10 16:04:21 +01:00
|
|
|
- George Reid
|
|
|
|
|
greid@ukug.uk.freebsd.org
|
