Framing the problem We do not have a general model of layered protocol interactions Aggregate traffic has complex statistical models can be partially matched by synthetic traffic TCP traffic is the result of a complex control system potential for dueling control systems Especially for single stream traffic Synthetic traffic is not authentic