Reasonable is subjective, I believe all hosts should use an NIDS and a HIDS if they don't I in my opinion consider them amateur. Regarding resource utilization sampling connections periodically would not take much.