1. A system comprising: a plurality of routers configured to route network traffic, each of the routers further configured to generate flow records pertain to the traffic flow through the respective router; a flow collector in communication with the plurality of routers and receiving the flow records therefrom; and a flow classifier configured to analyze the flow records from each of the plurality of routers and to identify an anomaly in traffic flow within the network.