Off - line NIDS deals with stored data .
Off - line NIDS passes it through some processes to decide if it is an attack or not .
Off - line NIDS deals with stored data and passes it through some processes to decide if it is an attack or not .