                          -- CONFUSION PLUGIN HOWTO --
			    
This plugin performs Port Stealing, a techinque useful to sniff in a switched
environment when ARP poisoning is not effective (for example where static mapped
ARPs are used).
The plugins floods the LAN (based on stormdelay flag) with ARP packets.
The dest MAC address is the same as the attacker's one (other NICs won't see those 
packets), the source MAC address will be one of the MACs in the initial host list.
This process "steals" the switch's port of victim hosts. 
Using low delays, packets destinated to other MAC addresses will be received by the
attacker, winning the race condition. 
When the attacker receives this kind of packets, it stops the flooding process
and performs an ARP request for the real destination of the packet. When it receives
the ARP reply it's sure that the victim has "taken back" his port, so the plugin can 
resend the packet to the destination as is.
Now the plugins restart the flooding process waiting for new packets.

N.B. Remember to use it ONLY in switched environments and make sure to send some
     network traffic to the switch to bind your MAC address to your port (otherwise
     other NICs will see flooding packets) before using it.
     
N.B. As many other plugins, it is effective only against hosts that are in the 
     initial Host List.


HOW TO USE IT:

- Build the host list with victim hosts
- Launch the plugin
- Launch another ettercap in normal IP sniff mode (or any other packet sniffer)
  to see redirected traffic

N.B. You will see each packet twice.

