1. A method of using a computer to detect data traffic of a mobile device, the computer performing the steps of: collecting usage data from the mobile device for a time period; setting threshold values based on a mobile device data plan and an amount of data used by the mobile device within the time period and on historical usage data of the mobile device; comparing the usage data against the threshold values; identifying an anomaly if a statistic of the usage data exceeds a corresponding threshold of the threshold values; generating a graphical user interface including at least one statistic of the usage data; overlaying at least one statistic of the existing usage data or predicted data or both onto the at least one statistic of the usage data; updating the threshold values based on a running average of each statistic of the usage data.