Testing Method Testing of live traffic - real networks Parallel Testing More than 1 sensor - testing for correlation Tools: stick, snot, IDS-informer - your custom made! Test with packet archives