In Distributed or hybrid IDS

A$.$ Monitors network traffic for particular network segments or devices and analyzes network

B$.$ Combines information from a number of sensors$,$ often both host and network$-$based, in a central analyzer that is able to better identify and respond to intrusion activity. activity.