Tobias Limmer, Falko Dressler: Flow-based TCP connection analysis. IPCCC 2009: 376-383