It's been a while since I've used ettercap so bear with me. I recall reading that if you are sniffing on a gateway, when you discontinue the attack the network may be brought down and require you to restart the gateway to return everything to working order. Now I realize you explicitly mentioned a switch, but this little bit of information is a start.


