<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Have you looked at the netcontrol framework in Bro, developed by Johanna?<div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Oct 17, 2016, at 2:24 PM, Hui Lin (Hugo) &lt;<a href="mailto:hlin33@illinois.edu" class="">hlin33@illinois.edu</a>&gt; wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div dir="ltr" class=""><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small">Hi&nbsp;</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small"><br class=""></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small">My understanding is that Bro has some northbound API to openflow&nbsp;switches or controllers. I am wondering whether any development branch has analyzer of openflow controllers. Just try to see whether I can use Bro to analyze some controller-to-switch traffics.&nbsp;</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small"><br class=""></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small">Best,</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small"><br class=""></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small">Hui</div><br clear="all" class=""><div class=""><br class=""></div>-- <br class=""><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class="">Hui Lin<div class="">Ph.D. Candidate (<a href="http://hlin33.web.engr.illinois.edu/" target="_blank" class="">http://hlin33.web.engr.illinois.edu/</a>)&nbsp;</div><div class="">DEPEND (<a href="http://depend.csl.illinois.edu/" target="_blank" class="">http://depend.csl.illinois.edu/</a>)<br class="">ECE, Uni. of Illinois at Urbana-Champaign&nbsp;</div><div class=""><br class=""></div></div></div></div></div></div></div>
_______________________________________________<br class="">bro-dev mailing list<br class=""><a href="mailto:bro-dev@bro.org" class="">bro-dev@bro.org</a><br class="">http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev<br class=""></div></blockquote></div><br class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">------<br class=""><br class="">Adam J. Slagell<br class="">Chief Information Security Officer<br class="">Director, Cybersecurity&nbsp;Division<br class="">National Center for&nbsp;Supercomputing Applications<br class="">University of Illinois at Urbana-Champaign<br class=""><a href="http://www.slagell.info" class="">www.slagell.info</a><br class=""><br class="">"Under the Illinois Freedom of&nbsp;Information Act (FOIA), any&nbsp;written communication to or&nbsp;from University employees&nbsp;regarding University business is&nbsp;a public record and may be&nbsp;subject to public disclosure."&nbsp;<br class=""><br class=""><br class=""><br class=""><br class=""><br class=""><br class=""><br class=""></div></div>
</div>
<br class=""></div></body></html>