A worm infects some vulnerable hosts, they organize into a P2P botnet with some botmaster and start exchanging C&C traffic. Experimenter wants to observe the evolution of the botnet and the amount of traffic that master receives. There are two classes of experiments here that need to be combined together: a. an experiment where worm spreads and infects vulnerable hosts b. an experiment where some hosts organize into P2P network and somehow elect a leader who then sends commands to them and they may send reports back