How can session hijacking be detected in HTTP traffic

Question

I am analyzing HTTP traffic to detect potential session hijacking attacks. My concerns are:

• What are the common indicators of session hijacking in logs and network traffic?
• How can tools like Wireshark, Burp Suite, or IDS (Intrusion Detection Systems) help in detection?
• What server-side logging configurations can capture suspicious session behavior (e.g., multiple IPs using the same session ID)?

If there are automated ways to detect hijacked sessions and force reauthentication, I’d like to learn more about them.