Packet sniffers operate by capturing data packets—the small units of data that are transmitted over a network. Once captured, these packets can be analyzed to extract information such as email content, sender and receiver addresses, and other metadata. Packet sniffing tools work by putting the network interface card (NIC) into promiscuous mode, allowing it to intercept and log traffic.