# CoAP

**URL:** https://community.zeek.org/t/coap/5389
**Category:** Zeek
**Created:** [July 16, 2018, 3:30pm UTC](https://community.zeek.org/t/coap/5389 "2018-07-16T15:30:09Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![erik\_clark](https://avatars.discourse-cdn.com/v4/letter/e/ba8739/32.png) [@erik\_clark](https://community.zeek.org/u/erik_clark)
#### Post date: [July 16, 2018, 3:30pm UTC](https://community.zeek.org/t/coap/5389/1 "2018-07-16T15:30:09Z")

</div>

Does anyone know if there is a Bro plugin for CoAP traffic detection and identification? We have the MQTT plugin for IoT bits, but we would like to support CoAP as well. Thanks!

---

<div class="post-metadata">

### Author: ![johanna](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@johanna](https://community.zeek.org/u/johanna)
#### Post date: [August 13, 2018, 1:07am UTC](https://community.zeek.org/t/coap/5389/2 "2018-08-13T01:07:51Z")

</div>

Just to chime in - I have not heard of anyone creating a CoAP analyzer for  
Bro.

Johanna

---

<div class="post-metadata">

### Author: ![erik\_clark](https://avatars.discourse-cdn.com/v4/letter/e/ba8739/32.png) [@erik\_clark](https://community.zeek.org/u/erik_clark)
#### Post date: [August 13, 2018, 9:42am UTC](https://community.zeek.org/t/coap/5389/3 "2018-08-13T09:42:37Z")

</div>

Seth (may) be looking at making the analyzer. You can find a packet generator here: [https://github.com/mcollina/coap-packet](https://github.com/mcollina/coap-packet). With the increase in number of IoT things on the network, or things acting like IoT devices (phones,  
soap dispensers, Fatema has examples on her network), having visibility into this is pretty important.

---

<div class="post-metadata">

### Author: ![seth](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/seth/32/642_2.png) [@seth](https://community.zeek.org/u/seth)
#### Post date: [August 23, 2018, 2:56pm UTC](https://community.zeek.org/t/coap/5389/4 "2018-08-23T14:56:48Z")

</div>

I’d put extra emphasis on the _may_. 🙂 I haven’t had time to dig into it yet, but thanks for the pointers to the packet generator and the protocol on the whole.

.Seth

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:45pm UTC](https://community.zeek.org/t/coap/5389/5 "2022-05-06T15:45:56Z")

</div>


