DDoS protection

@gregraven, you mention running up bandwidth charges. What is the best way to realize you have a situation before it goes on too long and runs into money? Would enabling analytics give me all the tools I need?