Host-based IDS look for local system configurations and behaviour, while network-based IDS look for network connections and looks for anomalies and common signatures.
MikroTik References Expand … [1] [2] [3] [4] [5] [6] link to the protocols relevant from tech ref