Tutorial by Irongeek
Preview:
Ettercap is sort of the Swiss army knife of ARP poisoning and network sniffing. Ettercap can be
extended by using filters
and plug-ins, making it able to do all sorts of neat network tasks. Using
filters is what I plan to show in this tutorial. The easiest way to run Ettercap is from the Auditor or
Knoppix boot CDs. The version I will be running in this tutorial is Ettercap NG-0.7.3.
Download Link: https://www.ihteam.net/papers/ettercap-filter.pdf