On creating digital evidences in IP networks with NetTrack