Is There a Red Flag in Network Monitoring?

You can look for sudden spikes of upload traffic. A paranoid friend of mine has logs on the d n s server that services is local land, and's like, hay, who's looking up this host name that i don't understand? But i think that's pretty paranoid for your open beasty redder, or any baste machines. An so need a fire wall that's going to, you know, you're trusting it to protect your network.