<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Topics tagged with sniffer]]></title><description><![CDATA[A list of topics that have been tagged with sniffer]]></description><link>http://64.23.185.212/forum/tags/sniffer</link><generator>RSS for Node</generator><lastBuildDate>Thu, 21 May 2026 08:24:51 GMT</lastBuildDate><atom:link href="http://64.23.185.212/forum/tags/sniffer.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 01 Apr 2025 08:17:17 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Can monitoring Modbus TCP PtP(Point to Point)]]></title><description><![CDATA[<p dir="auto">With IO Ninja, you can monitor Modbus TCP, analyze communications, and export data for further processing.</p>
<p dir="auto">However, there's no out-of-the-box integration with data acquisition services.</p>
<p dir="auto">If it's the monitor-and-analyze part you are interested in, then the roadmap is as follows.</p>
<p dir="auto">The first stage is to acquire the TCP conversation between Modbus Master and Modbus Slave. In IO Ninja, this can be done via two alternative approaches.</p>
<p dir="auto">(a) You can capture Ethernet packets using <a href="https://ioninja.com/hardware/ethernet-tap.html" rel="nofollow ugc">Ethernet Tap</a> or <a href="https://ioninja.com/plugins/pcap-sniffer.html" rel="nofollow ugc">Pcap Sniffer</a> (capturing via Pcap could require some trickery if the Modbus Master is not running on the same workstation as IO Ninja), then reconstruct TCP conversation by attaching <a href="https://ioninja.com/plugins/tcp-flow.html" rel="nofollow ugc">TCP Flow Analyzer</a>.</p>
<p dir="auto">(b) But a more straightforward approach would be to use IO Ninja as a man-in-the-middle and let it forward TCP traffic between the Master and Slave using <a href="https://ioninja.com/plugins/tcp-proxy.html" rel="nofollow ugc">TCP Proxy</a>. Whenever this man-in-the-middle approach is applicable (i.e., you are in control of the Master and can redirect it to IO Ninja), that should be your choice -- it's much more straightforward and reliable.</p>
<p dir="auto">After you set everything up for reconstruction of the raw TCP conversation between Master and Slave, you attach the <a href="https://ioninja.com/plugins/modbus.html" rel="nofollow ugc">Modbus Analyzer</a> to decode the raw bytes into human-readable Modbus frames.</p>
<p dir="auto">IO Ninja log is very powerful and should be more than enough to inspect and analyze the Modbus conversation.</p>
<p dir="auto">If you need to post-process it further, one option would be to create a <a href="https://ioninja.com/doc/developer-manual/logging-engine.html#converters" rel="nofollow ugc">Log Layer</a> to do the job (remember, IO Ninja is <a href="https://ioninja.com/doc/developer-manual/tutorials.html" rel="nofollow ugc">scriptable</a>!). However, for people who have never touched IO Ninja scripting before, a much more straightforward path would be to save the log as .njlog and use any scripting language of their choice to walk over it.</p>
<p dir="auto">The .njlog file format is <a href="https://ioninja.com/doc/developer-manual/logging-engine.html#log-files" rel="nofollow ugc">very simple</a> and all the relevant data structures &amp; constants are open-source and defined in scripts/api/log_RecordCode.jnc and scripts/api/log_RecordFile.jnc (included in IO Ninja packages).</p>
<p dir="auto">Hope this helps; feel free to follow up with any questions!</p>
]]></description><link>http://64.23.185.212/forum/topic/331/can-monitoring-modbus-tcp-ptp-point-to-point</link><guid isPermaLink="true">http://64.23.185.212/forum/topic/331/can-monitoring-modbus-tcp-ptp-point-to-point</guid><dc:creator><![CDATA[Vladimir]]></dc:creator><pubDate>Tue, 01 Apr 2025 08:17:17 GMT</pubDate></item></channel></rss>