example: Alert where current traffic = 1.5x higher/lower the historical traffic avg. for the last 15min
example2: Alert if traffic is 15% higher/lower the the avg. in the same 15minutes over the last 7 day's
external link: http://www.cert.org/flocon/2008/presentations/gong_flocon2008.pdf
