http://csie.nqu.edu.tw/smallko/sdn/arpspoof_behavior.htm
[Topology]
h1 ----------- s1--------h3
|
h2
h1 is at the port 1 of s1, h2 is at theport 2 of s1, and h3 is at the port 3 of s1.
description: when h1 talks to h3, the trafficwill be directed to h2 first. In h2, we will run tcpdumpto monitor the traffic. And then redirect traffic to h3.
p.s. You have to make sure that the contentof h2 in /proc/sys/net/ipv4/ip_forwardis “1”.
[Execution]
Dr. Chih-Heng Ke
Department of Computer Science and InformationEngineering, National Quemoy University, Kinmen, Taiwan
Email: smallko@gmail.com