Arpspoofing behavior: Implementation in SDN




h1 ----------- s1--------h3



h1 is at the port 1 of s1, h2 is at the port 2 of s1, and h3 is at the port 3 of s1.


description: when h1 talks to h3, the traffic will be directed to h2 first. In h2, we will run tcpdump to monitor the traffic. And then redirect traffic to h3.


p.s. You have to make sure that the content of h2 in /proc/sys/net/ipv4/ip_forward is “1”.











Dr. Chih-Heng Ke

Department of Computer Science and Information Engineering, National Quemoy University, Kinmen, Taiwan