It basically spoofs the MAC address of your default gateway and means all traffic goes through the server it is on, you see everything clear as day..... it even supports SSH and HTTPS so you can break into a session and
see the unencrypted traffic.

cool huh...