Eicken. Promela++: A language for constructing correct and efficient protocolsEstimation of receiver round trip times in multicast communicationsSolving problems in the presence of process crashes and lossy links