ettercap

A network sniffer/interceptor/logger for ethernet LANs - console

Install

All systems
curl cmd.cat/ettercap.sh
Debian Debian
apt-get install ettercap
Ubuntu
apt-get install ettercap
Arch Arch Linux
pacman -S ettercap
image/svg+xml Kali Linux
apt-get install ettercap
Fedora
dnf install ettercap
Windows (WSL2)
sudo apt-get update sudo apt-get install ettercap
OS X
brew install ettercap
Raspbian
apt-get install ettercap

ettercap

A network sniffer/interceptor/logger for ethernet LANs - console

ettercap-graphical

Ettercap GUI-enabled executable

Ettercap supports active and passive dissection of many protocols (even encrypted ones) and includes many feature for network and host analysis. Data injection in an established connection and filtering (substitute or drop a packet) on the fly is also possible, keeping the connection synchronized. Many sniffing modes are implemented, for a powerful and complete sniffing suite. It is possible to sniff in four modes: IP Based, MAC Based, ARP Based (full-duplex) and PublicARP Based (half-duplex). Ettercap also has the ability to detect a switched LAN, and to use OS fingerprints (active or passive) to find the geometry of the LAN. This package contains the ettercap GUI-enabled executable.

ettercap-text-only

Ettercap console-mode executable

Ettercap supports active and passive dissection of many protocols (even encrypted ones) and includes many feature for network and host analysis. Data injection in an established connection and filtering (substitute or drop a packet) on the fly is also possible, keeping the connection synchronized. Many sniffing modes are implemented, for a powerful and complete sniffing suite. It is possible to sniff in four modes: IP Based, MAC Based, ARP Based (full-duplex) and PublicARP Based (half-duplex). Ettercap also has the ability to detect a switched LAN, and to use OS fingerprints (active or passive) to find the geometry of the LAN. This package contains the ettercap text-mode-only executable.

ettercap-gtk

A network sniffer/interceptor/logger for ethernet LANs - GTK frontend