arpspoof

arpspoof [-i interface] [-c own|host|both] [-t target] [-r] host

arpspoof forges ARP replies to intercept network packets. It sends fake ARP responses to redirect traffic through the attacker's machine, enabling man-in-the-middle attacks for network analysis and security testing.

-i interface

Network interface to use

Which hardware address to use when restoring the ARP configuration on cleanup (default: own)

Target IP address to poison (poisons all hosts if omitted). May be repeated to specify multiple targets

Poison both host and target to capture traffic in both directions (only valid in conjunction with -t)

IP address of the host to impersonate (usually the gateway)

This is a penetration testing tool that can disrupt network traffic. Only use on networks you own or have explicit authorization to test. Requires root privileges and IP forwarding enabled for traffic to flow.

arpspoof is part of the dsniff package, a collection of network auditing tools for penetration testing and security analysis.

dsniff(8), tcpdump(8), ettercap(8)

Source code · Homepage