This ARP Table will be
instantly changed according to the data it receives
(such as receiving ARP Reply as IP Address
192.168.1.1 containing MAC Address as AA-BB-CCDD-
EE-FF). The value in ARP Table will remain for
15 seconds, so the program used for conducting ARP
Spoof must send ARP Packet to deceive the victim
continually. The popular programs used for ARP
Spoof are arpspoof on Linux (Auditor Security Tools
and Back Track 3) and “Switch Sniffer”.
Besides, there
is “Win ARP Spoof” program which runs on
Windows.