Monitoring Your Home Network with Security Onion
This is the runbook behind my home-network monitoring setup: a cheap tap switch, Security Onion as the sensor, and a router that turns what it sees into blocks. What this is: how I watch the traffic on my home LAN and act on it. One $28 smart switch mirrors the internet link. Security Onion runs Zeek, Suricata, and a search store. A small script polls the store and pushes what it finds to the router, which enforces it. I use TP-Link for the tap, Security Onion for detection, and a GL.iNet router running OpenWrt for the blocking. Substitute your own equivalents where they differ. ...