Common themes: Tools Lie
	• passive taps can drop, reorder and duplicate packets • so can kernels/NICs for active measurements • tools may not be robust to unexpected data • Internet checksums are weak • unknown network gear: L2 switches, passive caches • tools pretend to be atomic when they aren't • tools can't tell corrupt data (garbage in, garbage out)
					9