Protecting your network against Ettercap
By now you might be wondering if there's a way to protect your network against the ARP poisoning attacks we've seen in this chapter.
The most common and straightforward defense is to define static ARP entries for important addresses on the network. You could do this on the router, if it has support for static ARP entries, and/or directly on each machine connected to the network.
Defining static ARP entries on a router running Tomato firmware
Most operating systems will display the ARP table with the arp -a command.
To turn a dynamic ARP entry for your router into a static entry in Windows, open a Command Prompt as Administrator and type in the following command, but replace [Router IP] and [Router MAC] with the IP and MAC address of your router:
C:\> netsh -c "interface ipv4" add neighbors "Wireless Network Connection" "[Router IP]" "[Router MAC]"
The Wireless Network Connection argument might need...
