During MAC flooding, an attacker sends a large number of requests with different source MAC addresses to a switch. Once the switch has reached the maximum number of MAC addresses it can store, it starts sending all requests to all the IT systems in the network. As a consequence, the attacker may view the network traffic.