added something about inline vs stub IDS host topology