How do you distinguish between Layer 3/4 attacks such as SYN floods and UDP amplification versus Layer 7 attacks such as HTTP GET floods at bet365?