The Transmission Control Protocol is probably the most used protocol
nowadays. Since it's inception, the protocol has been widely
deployed and extended. Although there are tools like Wireshark that
are able to find problems in a given TCP connection, researchers
and operating system developers need a tool that will help them have a
better view of the Internet. Such tool must monitor traffic in a 24/7
basis and not only snippets of it.
By designing an anomaly detector are one step ahead of finding
internetworking problems and operating system bugs.