ettercap documentation

Ettercap is a multipurpose sniffer/content filter for man in the middle attacks that supports active and passive dissection of many protocols, including ciphered ones, and includes many features for network and host analysis. 1 It has two main sniffing options, unified and bridged, and can be used to perform mitm attacks, as well as drop SSL and other packets. 1 Ertercap NG is a unified sniffing method that allows users to filter traffic coming from one to the other and vice versa. 2 It has two targets, MAC/IPs/PORTs, and a -R option, which can be used to reverse the matching of the target. 2 It also has a SSL mitm attack, which substitutes the real SSL certificate with its own, and options that make sense together can generally be combined. 2