diff --git a/doc/tardiba.txt b/doc/tardiba.txt
index 75e2d1c..33baec1 100644
--- a/doc/tardiba.txt
+++ b/doc/tardiba.txt
@@ -164,4 +164,10 @@ certain log files, system status and stats (cpu usage, ram etc), monitoring
 pg sessions because the internal pg monitor sucks, we need a good policy on 
 killing iddle sessions and runaway processes. 
 
+- monitoring network traffic is a good meassurement as well. From one side it
+  helps to find possible network related bottlenecks on the other it also
+  provides valuable information for intrusion detection. 
+
+  Possible tools:
+	- sancp (prelude aware!)