I would love to know when someone downloading from the internet eats up an entire pipe. This is just one of many things that could be done with QOS/Netflow alerts. Alerting on drops and high usage of a queue would also be prime examples.
| 69.30.37.62 to/from 5y6htj1.shawgrp.com (10.186.93.28) | 4.8 Mbytes | 3.316 K packets | 98.17% |