ARP Poison Routing instead of IP routing?

[Dean]

Has anyone set up WANem to use ARP Poison Routing? It would be super nice if it was built in, that way you could put WANem in the middle without touching the endpoint hosts at all.

Dean

[Dean]

OK cool, I see that the dsniff package (arpspoof) is included. Maybe it is default in Knoppix or maybe added by WANem developer? In any case it still would be nice if it was integrated into the web gui :-)

[Dean]

for the record, you can do this with the following process:

In the console of WanEm, type:

    exit2shell

where the two ip address' you wish to insert WANem into the middle of are a.a.a.a and b.b.b.b

type:

    arpspoof -t a.a.a.a b.b.b.b &
    arpspoof -t b.b.b.b a.a.a.a &

redirect to /dev/null does not seem to work, so you just have to type the subsequent commands over the top of the output from the previous one.

thats it, to stop the arpspoofing type:

    killall arpspoof

[M K Nambiar]

That is good informatiion. Thanks.

Regards,
M.K.Nambiar

[George Audigier]

Is it possible to use this command for more than two ip addresses? I would like to use it between three clients.

[George Audigier]

Further to deans comments it is possible to log the output to the background, and to use across multiple hosts as follows:

arpspoof -t a.a.a.A b.b.b.B & >AB.log &
arpspoof -t b.b.b.B a.a.a.A & >BA.log &

arpspoof -t a.a.a.A c.c.c.C & >AC.log &
arpspoof -t c.c.c.C a.a.a.A & >CA.log &

arpspoof -t b.b.b.B c.c.c.C & >BC.log &
arpspoof -t c.c.c.C b.b.b.B & >CB.log &  etc...