I have been using ettercap to sniff traffic passing from my front modem/router from my linuxbox gateway and ip_forward=1 enabled.I had to change network card because even after formatting the machine it couldn't see its mac address anymore like disappeared . How can i go on to use ettercap without destroying my nics ?Is forwarding enabled bad for it?How can i proxy someone's else connections (MITM) without forwarding enabled ? Does static arp tables prevent ettercap from poisoning my mac addresses ?I registered at ettercap forum site last week and i'm still waiting registration confirm from administrator ...