Which of the following tools can be used for passive OS fingerprinting?

Nmap is primarily an active scanner that sends specially crafted packets to a target and analyzes the responses to perform OS fingerprinting, which is not passive.

Tcpdump is a command-line packet sniffer that captures network traffic passively. By analyzing the captured packets, such as TCP window sizes, TTL values, and other subtle differences in TCP/IP stack implementations, an attacker can infer the operating system of the communicating hosts without sending active probes.

Traceroute (tracert) is an active network diagnostic tool that sends ICMP echo requests or UDP packets with increasing TTL values to map the path to a destination, not for passive OS fingerprinting.

Ping is an active network diagnostic tool that sends ICMP echo request packets to a host to test reachability and measure round-trip time, not for passive OS fingerprinting.