Eavesdropping passively captures network traffic to intercept sensitive data — passwords, tokens, session cookies from unencrypted communications.
Passive attack — doesn't modify traffic. Protection: encrypt everything (TLS, VPN). On shared networks (Wi-Fi), eavesdropping is trivial with Wireshark. Modern switched networks reduce eavesdropping vs. old hub networks.