Just to update - figured this one out, was my own fault for attemping the PoC in a vmware
environment, which did not treat layer 2/mac address stuff like I thought it did.
Once I put two and two together, and setup some mac spoofing, things all worked as
expected.