collect digital evidence for network forensics purpose

Propose a framework to collect digital evidence for network forensics purposes. Need to design detail framework, explain the methods and techniques used also provide results from experiment run with analysis. The person also must able to justify the methods use and provide some literature review in order to come out with the framework. notes: besides the above description, the framework also must cover 1. how the acquiring process done (technique & algorithm) - apply sniffer mechanism to sniff packet -- need to discuss further 2. how to create malware activity profile (technique & algorithm) 2. how the inference engine work (technique & algorithm) - to classify the traffic into evidence or not project scope: focus on malware Please provide proposal to discuss before we proceed. I need someone who is honest and expert in the field.