Intrusion detection systems

Intrusion detection systems monitors file activity on a host or traffic on a network and report strange behaviour to an administrator .
IDS can be divided into two primary groups :
1-Host-Based .(It can detect both external and internal misuse which is not possible with network monitor and firewalls.
2-Network Based System.(Real-Time nature of the alarm and for evidence collection)