Even if you can’t read a single packet, noting a surge in bandwidth utilisation is a signal in and of itself. But you probably can read the headers.