A network administrator wants to deploy a device that will monitor traffic on the internal network and generate alerts when it detects suspicious activity or known attack signatures. Management is concerned about accidentally blocking legitimate business traffic, so the device must NOT interfere with or drop any packets. Which technology best meets this requirement?