IDS 4215, right place for a sniffing interface (DMZ or LAN)