At which two traffic layers do most commercial IDSes generate signatures?

At which two traffic layers do most commercial IDSes generate signatures? Correct Answer Transport layer and Network layer

Most commercial IDSes generate signatures at the network and transport layers. These signatures are used to ensure that no malicious operation is contained in the traffic. Nemean generates signature at application and session layer.

Related Questions

“Semantics-aware” signatures automatically generated by Nemean are based on traffic at which two layers?