For what it's worth, opnsense has suratica as a service, I've spent a good amount of time configuring it and setting up alerting on drops. The only thing it's e

For what it's worth, opnsense has suratica as a service, I've spent a good amount of time configuring it and setting up alerting on drops. The only thing it's ever alerted me to is a few malicious domains (malvertising) and my scanner making calls to Google chat (surprisingly cloud print looks a lot like gchat?). But it happily updates it's ruleset daily, and consumes some 10-20% cpu power from my Intel c2d 3.2ghz cpu. One of these days it might pay off?