How to configure linux server to receive mirrored traffic?

Question

linux

Please help me find a good article on setting up a linux server designed to receive, process and log mirrored traffic. Interested only in http-traffic, parsing and warehousing requests. I would like to understand well how to configure iptables so that tcp-acks do not get out and the handler application receives packets not directed to it. Traffic profile: requests from one host to another, each request creates its own connection.

Answer 1

1) Install ntop-ng
2)

iptables -P INPUT DROP
iptables -A INPUT -i ingress-mirror-интерфейс -p tcp --dport 80 -p ACCEPT
iptables -A INPUT -d ip-сервера -p ACCEPT
iptables -A INPUT -i lo -d 127.0.0.0/8 -p ACCEPT

repeat for iptables6 if necessary
2) ?????
3) PROFIT