IP address sniffing and spoofing
Sniffing and spoofing are two related processes that can work hand in hand when analyzing and exploiting a network. Sniffing involves monitoring all data packets going through the local area network (LAN), while spoofing involves introducing fake traffic in the network to present to someone else.
Many tools are used for sniffing and spoofing. In this section, we will look at two of the most commonly used by attackers: Wireshark and macchanger.
Wireshark
Wireshark (https://www.wireshark.org/) is an open source tool and one of the most common network analyzers that can be used to see what is happening in a network. Its network monitoring capabilities allow you to see details about all traffic passing through, such as time, source, destination, protocol, length, and more. By default, Wireshark is installed in Kali Linux; you can use the Wireshark
command in a Terminal to launch the Wireshark GUI. The following screenshot shows an example of Wireshark...