https://tsypuk.github.io/posts/2023/02/08/aws-vpc-traffic-mirroring-ids-suricata.html
AWS VPC traffic mirroring to IDS. Deep dive with Wireshark. - Engineer's Notes