Do it on Snort preferably. A good IDS for case studies

Thank you Adnan for your answer, but I need to evaluate my new intrusion detection approach that I proposed.

OPNet is good for simulating different scenarios. You could compare two scenarios, one with your IDS running, and one with specific things detected by the IDS. OPNet can facilitate the comparison of the different scenario statistics.

Hi EL AJJOURI Mohssine, recently my students have done a project on "Implementing Snort as a IDS - Rule-based" on a virtual environment using GNS3. So if there could be anything common between OPNET and GNS3?