I am not sure that is reasonable. Just because they inspect packets, does not mean they can infer intent. If for example they found a packet that looked like a text message with the content "The OP is a go". How should they be required to respond to that?
Likewise, if they intercept packets that look like file headers and see a file named "Latest.Beiberific.POP.Song.Crap.alt.bin.mp3", but the content is someone pretending to be Tha Beebz, how should they react?
The only point I am making here, is that there is no way to automate the response to this in any reasonable fashion.