I set up a home network using a switch and 3 computers, all having the newest Ubuntu.
I want to perform an arpspoofing along with MITM such that the attacker can see messages sent between client and a server.
On server, I set up a
nc server, like this:
nc -l 4444 on client I connect to server:
nc 192.168.0.2 4444 and everything works great. There's no gateway address on machines, only IP and mask.
However, when I do ARP spoofing, messages can't be sent. I'm sending and nothing's happening. When I stop
arpsoof, messages can be sent.
On attacker, I do:
sudo arpspoof -i eth0 -t 192.168.0.1 192.168.0.2
sudo arpspoof -i eth0 -t 192.168.0.2 192.168.0.1
sysctl -w net.ipv4.ip_forward=1
And it does not work. I can't see messages between client and server, and I can't even send messages from client to server when I start arpsoof.
When I run Wireshark on the attacker, I saw only ARP requests being sent. The interface name is OK.
What can be wrong here?