etterfilter
Multipurpose sniffer/interceptor/logger for switched LAN
Install
- All systems
-
curl cmd.cat/etterfilter.sh
- Debian
-
apt-get install ettercap-common
- Ubuntu
-
apt-get install ettercap-common
- Arch Linux
-
pacman -S ettercap
- Kali Linux
-
apt-get install ettercap-common
- Fedora
-
dnf install ettercap
- Windows (WSL2)
-
sudo apt-get update
sudo apt-get install ettercap-common
- OS X
-
brew install ettercap
- Raspbian
-
apt-get install ettercap-common
- Dockerfile
- dockerfile.run/etterfilter
ettercap-common
Multipurpose sniffer/interceptor/logger for switched LAN
Ettercap supports active and passive dissection of many protocols (even encrypted ones) and includes many feature for network and host analysis. Data injection in an established connection and filtering (substitute or drop a packet) on the fly is also possible, keeping the connection synchronized. Many sniffing modes are implemented, for a powerful and complete sniffing suite. It is possible to sniff in four modes: IP Based, MAC Based, ARP Based (full-duplex) and PublicARP Based (half-duplex). Ettercap also has the ability to detect a switched LAN, and to use OS fingerprints (active or passive) to find the geometry of the LAN. This package contains the Common support files, configuration files, plugins, and documentation. You must also install either ettercap-graphical or ettercap-text-only for the actual GUI-enabled or text-only ettercap executable, respectively.