Detect high CPU events due to spanning tree recalculations, routing updates, SNMP overload, or DDoS-style traffic storms.