This project investigates different approaches to network anomaly detection methods. The focus is on flow level anomalies or anomalies in more aggregated information. We have also developed a methodology to annotate traces and verify the correctness of these annotations. We are currently working on a methodology to comparing anomaly detection methods that use different types of approaches and information for the anomaly detection.