How best to mirror traffic from Network

Asked By Margarete S Bryson 100 points N/A Posted on - 01/04/2015

How best can I mirror traffic from the network interface to an Intrusion Detection System (IDs)? Am thinking of set up Suricate as the intrusion detection system on a dubian server, which will also function as the router. The IDs will only process packets destined for the host. Will this work? If this does not work, what other approach can I use in mirroring the traffic and sending the mirrored traffic to the IDs?

• Status: Open
• Question Views: 582
• Answer Count: 1
• Vote Up 0 Vote Down

• Answer Accepted: No
• Question Category: IDS

Answered By Kenry Fal 0 points N/A #189397

How best to mirror traffic from Network

Hello Margarete S Bryson,    There are 4 or 5 approaches t mirror traffic but you are already talking about best one. Yes,you can absolutely mirroring the traffic and can also transmit all this mirrored traffic to the Intrusion Detection System. You can use dubian server. Additionally it acts as a router device also. It break up the jammed network

About Kenry Fal

Questions
0

Answers
99

Best Answers
13

• Vote Up 0 Vote Down

• Posted on - 01/10/2015
• Question Category: IDS