Software that performs packet sniffing and network traffic analysis to identify suspicious activity and record relevant information.
Sources:
NIST SP 800-86
under Network Intrusion Detection System