amusing story. well, I think so. Quite a few years ago I worked on a project which gathered netflow records and produced nice reports, which was going to be part of an ISPs measurement and monitoring systems. Because we needed to eat our own dogfood, we set it up on the Cambridge office which was also a significant PoP. There had been frequent complaints that network was slow, with people in our London office complaing about access to services.
After only two days of running we had some great stats and graphs, which showed interesting traffic patterns, clearly P2P, with traffic starting as people arrived at work, climbing to a steady plateau as the network saturated - often over 100M - and then falling towards going home time. After a little more analysis we became sure it was mostly due to one source. We quickly tracked the offender down to someone in network ops who was running a torrent client without setting bandwidth limits! A quiet word was had. Complaints about network speed stopped.
