A security engineer is deploying a network-based intrusion detection sensor to monitor traffic on a heavily utilized 10 Gbps link between the DMZ and the internal network. During a security incident, the team must guarantee that every packet — including malformed frames and traffic during peak saturation — is captured without impacting production flow or dropping frames. Which method of connecting the sensor to the monitored link best meets these requirements?