Martin, a Certified Ethical Hacker (CEH), is conducting a penetration test on a large enterprise network. He suspects that sensitive information might be leaking out of the network. Martin decides…

Raw sniffing places a network interface into promiscuous mode, allowing it to capture all packets on the network segment regardless of destination MAC address. This passive technique gives Martin a comprehensive view of all data flowing across the network, including unencrypted credentials, session tokens, and other sensitive information, without actively disrupting network operations. It is the foundational sniffing technique used in ethical hacking to detect data leakage.

MAC Flooding is an active attack that overwhelms a switch's CAM table to force it into hub-like behavior, which is a network disruption technique rather than a direct sniffing methodology for capturing comprehensive network data.

ARP Poisoning is a man-in-the-middle attack technique that manipulates ARP caches to redirect traffic, making it an active attack vector rather than a passive sniffing technique for observing existing data flows.

DNS Poisoning corrupts DNS cache entries to redirect users to malicious sites, which is a spoofing/redirection attack and not a method for capturing or analyzing data already flowing across the network.