I've been using FreeBSD as my preferred platform for Network Security Monitoring (NSM) since 2000. In this presentation I'll discuss my latest thinking on using FreeBSD to identify normal, suspicious, and malicious traffic in enterprise networks. FreeBSD is a powerful platform for network traffic inspection and log analysis, and I'll share a few ways I use it in production environments.

slides