With the rapid development of wireless network and mobile computing,the security of network becomes more important.As one of wireless mobile network,mobile Ad hoc network has new vulnerabilities that do not exist in a fixed wired network,and is susceptible to attacks.This paper introduces some methods which used in intrusion detection system and provides a new model of system based on multi-layer integrated distributed technology,especially recommend the protocol analyzing method in this system.