In this paper we explore trajectory clustering as a means for representing the normal behavior of vessels in a coastal surveillance scenario. Trajectory clustering however suffers from some drawbacks in this type of setting and we therefore propose a new approach, spline-based clustering, with a potential for solving the task of representing the normal course of events.