Say you're having a basic LAN-infrastructure (a Router, a Firewall, a switch connected with multiple access points, a server and multiple clients). I want to be able to detect malicious traffic flowing through the network by studying the packets content.
I can for example set the clients network adapters in promiscous mode (e.g. running Wireshark). But this puts extra load on the clients and doesn't show you the whole picture.
How would I be able to get a general overview of the traffic flowing through my devices? Is there a system available that for example can collect all the different important logs my devices are generating without being overwhelmed by duplicate or irrelevant information?