DFM will be able to see that your backbone might exceed it traffic limits in case of such an event.
IMHO the tools that hit the network with SNMP polls on all interfaces and keep track of the results so it can tell you the ports that have started to exceed their "normal" traffic use quite a bit of bandwith and cpu and are a high price to pay for this type of info.
And if the virus doesn't cause are real flood you won't find it with these tools.
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...