It would be nice if you could set a threshold based on average bandwidth usage.

something like "if (inbound_mbps) > (average_inbound_mbps_last_5_min * 3)"

We just want to be able to detect traffic spikes above average, not just have a static threshold.