4 ms·
Ideally you use a mirror port so that all traffic being routed also gets sent to the SecurityOnion services for automated analysis, reporting, and alerts (depen
by andrewstuart2 10y ago
Ideally you use a mirror port so that all traffic being routed also gets sent to the SecurityOnion services for automated analysis, reporting, and alerts (depending on how SO is configured).
- awqrre 10y agoWould it be efficient to create iptables rules to mirror traffic on a router that doesn't have a mirroring port?