Security Onion - IDS build

[Sunil Singh <spsfirst () HOTMAIL COM>]

We at ISU are looking for replacing our IDS. At this point of time, we are developing concept, so looking for input and 
suggestions into building Security Onion. Few things I am looking for help :


  *   Cost breakdown of hardware for a medium to large University.
     *   Storage cost may be the biggest as we plan to do full packet capture. How many days of data are you keeping ?
     *   Sensor cost
  *   Sites to reference outside regular Security onion site/ Github. I am looking for more help on Bro.
  *   Benefits Institution has seen and what different things they are doing. Example -  IPV6 packet capture, 
Monitoring.

Thanks.


Sunil Singh
Director Information Security
Iowa State University.