I have a question about one parameter and that's it.
When I'm doing DNS spoofing I have to use arp:remote
. Can someone explain to me what arp:remote
means?
I read the man page, but did not understand it so clearly. I'd be glad if someone helped me :)
Man page of ettercap - arp:remote
The parameter "remote" is optional and you have to specify it if you want to sniff remote ip address poisoning a gateway. Indeed if you specify a victim and the gw in the TARGETS, ettercap will sniff only connection between them, but to enable ettercap to sniff connections that pass thru the gw, you have to use this parameter.