Can be run on provider edge and is much more stable than old ettercap.
   Of course set probe as close to target at possible. Combined with
   sslstrip+ and dns2proxy forwarding with multiple routeable interfaces
   hsts bypass flat dangerous  let along getting hooked bEef.

   [1]https://www.bettercap.org/

References

   1. https://www.bettercap.org/