Summarizing some recent discussions, I've put together a high-level design proposal for "broctld", the future BroControl daemon: https://www.bro.org/development/projects/broctld.html Feedback welcome. Robin -- Robin Sommer * ICSI/LBNL * robin at icir.org * www.icir.org/robin