Many claim that IDS operates at Layer 3 and Layer 4 of OSI while IPS works at every level from Layer 2 to Layer 7. However, consider a HIDS, which compiles traffic data from several locations, so it is not only operating across packets but sourcing data from different streams. That can only be described as Layer 7 behavior.