Counterexamples in model checking - a survey