Has anyone used Netflow Analyzer as a tool for detecting intrusions? if so, how did you configure it and what are you looking for.