<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small">Actually, netcontrol is what I thought of as northbound APIs. I actually just wonder whether Bro has analyzer for openflow protocol or not (some refer them as southbound traffics). It not, I probably need to use wireshark to output the pcap and analyze them manually. </div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Oct 17, 2016 at 2:37 PM, Slagell, Adam J <span dir="ltr"><<a href="mailto:slagell@illinois.edu" target="_blank">slagell@illinois.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Have you looked at the netcontrol framework in Bro, developed by Johanna?<div><br><div><blockquote type="cite"><div><div class="h5"><div>On Oct 17, 2016, at 2:24 PM, Hui Lin (Hugo) <<a href="mailto:hlin33@illinois.edu" target="_blank">hlin33@illinois.edu</a>> wrote:</div><br class="m_-2385731506344845318Apple-interchange-newline"></div></div><div><div><div class="h5"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small">Hi </div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small">My understanding is that Bro has some northbound API to openflow switches or controllers. I am wondering whether any development branch has analyzer of openflow controllers. Just try to see whether I can use Bro to analyze some controller-to-switch traffics. </div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small">Best,</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small">Hui</div><br clear="all"><div><br></div>-- <br><div class="m_-2385731506344845318gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>Hui Lin<div>Ph.D. Candidate (<a href="http://hlin33.web.engr.illinois.edu/" target="_blank">http://hlin33.web.engr.<wbr>illinois.edu/</a>) </div><div>DEPEND (<a href="http://depend.csl.illinois.edu/" target="_blank">http://depend.csl.illinois.<wbr>edu/</a>)<br>ECE, Uni. of Illinois at Urbana-Champaign </div><div><br></div></div></div></div></div></div></div></div></div>
______________________________<wbr>_________________<br>bro-dev mailing list<br><a href="mailto:bro-dev@bro.org" target="_blank">bro-dev@bro.org</a><br><a href="http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev" target="_blank">http://mailman.icsi.berkeley.<wbr>edu/mailman/listinfo/bro-dev</a><br></div></blockquote></div><br><div>
<div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div>------<br><br>Adam J. Slagell<br>Chief Information Security Officer<br>Director, Cybersecurity Division<br>National Center for Supercomputing Applications<br>University of Illinois at Urbana-Champaign<br><a href="http://www.slagell.info" target="_blank">www.slagell.info</a><br><br>"Under the Illinois Freedom of Information Act (FOIA), any written communication to or from University employees regarding University business is a public record and may be subject to public disclosure." <br><br><br><br><br><br><br><br></div></div>
</div>
<br></div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>Hui Lin<div>Ph.D. Candidate (<a href="http://hlin33.web.engr.illinois.edu/" target="_blank">http://hlin33.web.engr.illinois.edu/</a>) </div><div>DEPEND (<a href="http://depend.csl.illinois.edu/" target="_blank">http://depend.csl.illinois.edu/</a>)<br>ECE, Uni. of Illinois at Urbana-Champaign </div><div><br></div></div></div></div></div></div>
</div>