FlowTraq uses flow reports on your network to detect DDOS attacks, botnets, spam relays, zero-day worms, scanning reconnaissance, and password guessing attempts. It also offers you an ability to perform historical investigations into all traffic. You can now pay for FlowTraq by how much or how little you use it.
Send your NetFlow or sFlow® updates of your network traffic to FlowTraq and it will build a behavioral fingerprint which it uses to find anomalous communications and alert you to them. The bigger your network, the more updates are received. You pay per update, not per license.