They're not snooping, they're modifying the address dynamically to cause aliasing.