Here you will find the patch file (tbit-update.patch) to update tbit-1.0 
( http://www.icir.org/tbit/tbit-1.0.tar.gz ) to include TBIT tests 
for "Misbehaviors in TCP SACK Generation" paper.

Please copy the patch file and extracted tbit-1.0 into same directory
and apply the patch using: 
patch -i tbit-update.patch

You can run the TBIT tests for "Misbehaviors in TCP SACK Generation" paper
using the example command:
./tbit -w 30000 -d -m 1460 -t SackRcvr1 128.5.32.29 (IP address of tested machine)

TBIT tests included in the paper (please see the details of the tests in the 
paper) are as follows:

SackRcvr1 (Test A)
SackRcvr2 (Test B)
SackRcvr3 (Test C)
SackRcvr4 (Test D)
SackRcvr5 (Test E)
SackRcvr55 (Test F)

For Test G, please run SackRcvr7 and SackRcvr8 back to back using different
port numbers. 

In our TBIT extension, we do not have functions to verify the results of the
tests. Instead, we capture the packets using tcpdump or wireshark to confirm
the results. 

For Test A and Test F, Linux systems do not have big enough receiver window
to accept 1460 bytes PDUs. In order to run those tests on a Linux machine,
first you need to change the tcpPayloadSize variable (in sack_rcvr.c file) 
from 1460 to 600 bytes in the appropriate tests.