A system and method for monitoring a network data processing system on a mobile platform. Current traffic in the network data processing system may be monitored by a processor unit while the mobile platform is moving. The current traffic is compared by the processor unit with a baseline of traffic in the network processing system to form a comparison. A determination is made as to whether an undesired event has occurred in the traffic based on the comparison. An action may be initiated responsive to a determination that an undesired event has occurred.