DDoS is different from too much traffic. There is an unique pattern security analysts are able to identify in real time if the feed is actively monitored. There are quite a few good tutorials on Youtube, where the viewer is shown the active monitoring software identifying DDoS attacks as they come into the server…