answered question
Advantages:
  • the sensors can be secured well as they "only" observe traffic
  • you can detect scans better - on the basis of signatures... You can "filter" traffic (actually, we will show later that this is not always the case)


Disadvantages: