- each transaction must be monitored and analyzed - the solution has to correlate traffic generated by a user with its true EURT measure - any kind of metrics has to be suppored by its pcap, so the system has to be able to extract automatically the pcap related to the…