moloch-cluster-cfn
Create a load-balanced, auto-scaled Moloch cluster in AWS using CloudFormation
This CloudFormation template will deploy an auto-scaled and load-balanced cluster of Moloch full packet capture instances, enhanced with Suricata, listening on UDP port 4789 (VXLAN). It also creates a VPC traffic mirroring target pointing to the load balancer. You can create filters and mirroring sessions to monitor traffic from your EC2 instances using a web interface.