Using MRTG, Ntop, and SNMPC to collect flow data from your routers and switches to identify traffic/packet anomalies is an example of a reactive, signature-based IDS/IPS.
A tool that generates html pages is MRTG, Ntop is used to display summary of network usage of computers and SNMPC is a simple network management protocol.