Although it's possible to monitor bandwidth use pretty closely, none of the companies I've worked for ever did that unless we where having problems. All the "h

Although it's possible to monitor bandwidth use pretty closely, none of the companies I've worked for ever did that unless we where having problems. All the "hackers" have to do is copy the date in a matter that does not cause obvious problems. For example, as you said, do it slowly, or do it at night when "nobody's" using the network anyway.