Network-Based Intrusion Detection System
A NIDS watches traffic flowing across a network segment, usually from a tap or mirror port on a switch. It looks for attack signatures and anomalies in packets moving between many hosts at once. It gives defenders broad visibility into what is crossing the wire without touching individual endpoints.