As long as the attacker response to Neighbor Unreachability Detection probes to the link-layer address, the packet to that destination will be redirected.