Simply graphing netflow data would also have immediately pointed out an error.