Well, I certainly don't recommend having someone watching the monitoring all the time, but you may consider putting together a weekly NetFlow report showing the top talkers, and have that report emailed to key staff.
If this is happening EXTREMELY intermittently (like once every few months) then it will definitely be more challenging to dig into and resolve.