Get the Whitepaper called Pentesting in Local Networks Part 1. It discusses performing recon, ARP poisoning, traffic analysis techniques, and more.
You can download it from the following link: https://packetstormsecurity.com/files/download/102710/lanhacking.txt
Source: https://packetstormsecurity.com/files/102710/Pentesting-In-Local-Networks-Part-1.html