Motivation
It is increasingly important that networks be reliable and robust.
Network protocols are complex and difficult to design.
Existing network simulation tools focus on performance.
There is a big gap between implementation and the abstractions analyzed by model-checkers and theorem proving tools.