As far as I know,
IDS sniffs network traffic, and if intrusion is detected, reports it.
And IPS sniffs network traffic, and if intrusion is detected, rejects it, and reports why it was blocked. Am I right?
And I read that some IPS can even be configured not to drop packets, just to report them.
Apart from the ability to analyze the intrusion and take action myself, is there any other good reason to choose IDS over IPS? Maybe the price tag?