I'm looking to do some packet sniffing on some of my IoT devices to see how much they are phoning home, and to see some the ports I can block to keep them from doing so.
They are a mix of wireless and wired devices so a simple promiscuous mode Wireshark isn't sufficient. I'm running a Netgear router at the moment so I can't run the sniff from there either.
Is my best option a MITM attack using ARP poisoning? I don't want to go through all the effort to try to setup some sort of proxy to sniff.
I'd like to do this from Linux. Is Ettercap the best tool for this these days?