Protecting the university network and flagging attacks — in real time