Ettercap was originally designed to be a packet sniffer and that function is still at the heart of the tool. Think of Ettercap as a packet sniffer with added functions. Those extra functions are now considered to be the main reason to use Ettercdap – for network attacks or penetration testing.