%% You should probably cite draft-fu-ipfix-tcp-tracking instead of this I-D. @techreport{fu-dots-ipfix-tcp-tracking-00, number = {draft-fu-dots-ipfix-tcp-tracking-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-fu-dots-ipfix-tcp-tracking/00/}, author = {Tianfu Fu and Chong Zhou and Hui Zheng}, title = {{IP Flow Information Export (IPFIX) Information Elements Extension for TCP Connection Tracking}}, pagetotal = 12, year = 2017, month = mar, day = 13, abstract = {This document proposes several new TCP connection related Information Elements (IEs) for the IP Flow Information Export (IPFIX) protocol. The new Information Elements can be used to export certain characteristics regarding a TCP connection. Through massive gathering of such characteristics, it can help build an image of the TCP traffics passing through a network. The image will facilitate the detection of anomaly TCP traffic, especially attacks targeting at TCP.}, }