Use this concept to understand how PCAP files help capture, analyze, and identify network traffic and assets in operational technology environments using Cyber Vision Center.
A packet capture (PCAP) file is a file format that
-
records raw network traffic data captured from a network interface,
-
preserves the exact communication packets that are exchanged between various assets, and
-
enables network analysis and asset identification when imported into Cyber Vision Center.
PCAP file usage
To analyze traffic from your OT network, upload PCAP files to Cyber Vision Center. Use the Cyber Vision Classic UI to upload PCAP files.
When you import the file, Cyber Vision Center creates and identifies assets and associates them with their properties and communication patterns. You can then view these assets throughout the system, including on the main dashboard.