add new method
detect using "monotonically increasing" of TCP Timestamp
generate larger trace set by
1. cut long trace
2. shift receiving time