How MAC Address Table Flooding Works

When Mac Flooding occurs, the switch treats the frame as an unknown unicast and begins to flood all incoming traffic out all ports on the same VLAN without referencing the MAC table

This condition now allows a threat actor to capture all of the frames sent from one host to another on the local LAN or local VLAN