PACKET_MR_PROMISC is the exact setsockopt path libpcap uses under Wireshark and tcpdump, and the 2010 Firesheep tool showed just how much unencrypted session data was exposed to anyone on a shared Wi-Fi network sniffing in this mode. Understanding it also explains why switched networks limit what you can see without port mirroring or ARP spoofing.