ADS-TEC RAP/RAC1000 User Manual - Manual (Page 210)

IT Infrastructure RAP/RAC1000
210
© ads-tec GmbH • Raiffeisenstr.14 • 70771 Leinfelden-Echterdingen
12.1 R
EMOTE
C
APTURE
G ENERAL
With Remote Capture, the traffic of any active device interface can be recorded and
analysed via the network by a Windows computer with Wireshark
(http://www.wireshark.org).
Note:
This feature is only designed for debugging. Since authentication is not possible, the
Capture Server may only be activated in case of need for a short time for diagnosis
purposes in order to minimize the security risk.
C
ONFIGURATION
The Remote Capture Service is activated under Diagnosis/Remote Capture and then listens
to inbound connections on the standard port 2002. Since authentication is not possible, the
IP address of the recording computer must explicitly be given (e.g. 192.168.253.168) in
order to minimize the security risk:
Another precaution is to establish only one connection at a time, i.e. the given computer
cannot make two records at the same time.
LAN-out normally works as switch. That means, if two devices talk with each other (e.g. on
Port 1 and Port 2), the packets are forwarded within the switch and hardware, i.e. they do
not reach the device systems and thus cannot be recorded. To make the whole traffic
between the ports transparent, if required, the option „Activate Hub Mode for LAN-out“ is
used. In the Hub mode all packets are forwarded to all ports and also to the device
system.
Normally, access violations are also logged (connection build-up of a wrong IP address or
second trial to establish a connection). Information on the connection (control/data
channel) and bugged ports are also recorded with detailed messages.