I'm wondering why ARP table in my laptop returns to its initial state when arpspoof
tool attack is stoppped.
Is there any option for the attacker to modify the victims ARP table until the default gateway sends a new ARP response with its legitimate MAC-IP pair even if the attack tool is stopped?
Thank you.