Skip to Content

SiePortal

The integrated platform for your product selection, buying and support workflow - bringing together Industry Mall and Online Support.

SiePortalDeutsch

Search

Home
Support Support
{{(apiData.Support | filter:{'rank':1}:true)[0].title}} Support
- Menu temporary not available
- Menu temporary not available
- Menue temporary not available
- {{item.title}}

Products & Services
- Menu temporary not available
- Menue temporary not available
- {{item.title}}
Support Support
{{(apiData.Support | filter:{'rank':1}:true)[0].title}} Support
- Menu temporary not available
- Menue temporary not available
- {{item.title}}
MySiePortal MySiePortal
{{(apiData.MySiePortal | filter:{'rank':1}:true)[0].title}} MySiePortal
- Menu temporary not available
- Menue temporary not available
- {{item.title}}
Cart ({{apiData.CartCount}})

Navigation

Help on Wireshark

Created by: Marciano at: 6/8/2011 5:28 PM (7 Replies)

Rating (0)

Thanks 3

8 Entries

6/8/2011 5:28 PM	Rate (0)
Marciano Bronze Member Joined: 4/30/2007 Last visit: 3/9/2023 Posts: 231 Rating: (23)	Hello all, I need some help using the Wireshark to monitor telegrams in 3 existentISO-On-TCP connections with 3 different systems. I have my laptop connected on Port2 of the CP443-1EX20, please see layout/configuration on the picture attached. However I am not able to see my telegrams being send or receive, I only see a bunch of other traffic (like LLDP, HSRP, ARP protocols) Am I doing something wrong? I was expecting to see TCP /RFC1006 like protocols. Attachment Network.JPG (362 Downloads)

Suggestion To thank Quote Answer

6/8/2011 8:50 PM	Rate (0)
smiffy Platinum Expert Joined: 1/17/2007 Last visit: 3/10/2025 Posts: 1557 Rating: (540)	Have you tried capturing in promiscuous mode? Are all the nodes (PC, CP etc.) all on the same subnet?
	Programming today is the race between software engineers building bigger and better idiot proof programs, and the universe producing bigger and better idiots. So far, the universe is winning...
Suggestion To thank Quote Answer

6/9/2011 2:07 AM	Rate (0)
fritz Diamond Expert Joined: 10/7/2005 Last visit: 3/20/2025 Posts: 3042 Rating: (1061)	Hello Marciano the 443-1EX20 has an2 port switch in it (it isNOT a Hub) andI fearwill only sendoutthe ISO-on-TCPUnicast message via the port to which the partner stationis connected/reachable. You will need to either connect your Wireshark Laptop somewhere into that chain (e.g. via a hub or netwrok tab or switch with montioring port etc)or install Wireshark on the Partner PC and below is linkwhich shows all the options available to you: Wireshark Ethernet Capture setup I hope this helps
	Cheers fritz The advice and opinion given in this thread is that of the author and does not necessarily reflect the views of I S Systems Pty Limited. To find out how I S Systems can help you with your automation needs please visit www.issystems.com.au.
Suggestion To thank Quote Answer
This contribution was helpful to 2 thankful Users zeemens Mar_us1

6/9/2011 1:25 PM	Rate (0)
Mar_us1 Posts: 3 Rating: (0)	Yes, I just checked my Wireshark, the option is set to promiscous mode. A and all nodes are connected by the Scalance, in my drawingI miss the CPUport connected, as well others PN/IO
Mar_us1 Posts: 3 Rating: (0)
Suggestion To thank Quote Answer

6/9/2011 1:37 PM	Rate (0)
Mar_us1 Posts: 3 Rating: (0)	If the CP Port2 is a switch, than make sense not seeing my messages, I will look for the option you have mentioned Thanks
Mar_us1 Posts: 3 Rating: (0)
Suggestion To thank Quote Answer

6/9/2011 5:34 PM	Rate (0)
Krish Silver Member Joined: 5/24/2007 Last visit: 4/24/2024 Posts: 284 Rating: (27)	Hi Mar_us1 The reason for you not able to capture the packets using Wireshark is because the capturing device is in a different network than from the one in which the signal exchange is going on. There are3 solutions to this. 1. Put your capturing computer/laptop inside this network. Easiest way to do this is to put a simple switch(a simple one from themarket will do.)in between the switch and the PLC or the Station. Advantage is that you don´t disturbanything which is there. Disadvantge you need a switch..which is not always so easy. 2. Install Wire Shark in the partner station. Advantage you have perfect sniffing and so you miss nothing at all. Disadvantage, you will be slowly the service in the partner station as the sniffer runs in parallel to the running services and I would not to have a sniffer running parallel to an all-important HMI. 3. Reconfigure the X216 to have port mirroring . All Scalance switches beyond X200 series and firmware beyond 3.0.14 has this facility. You configure that all packets transferred in port1 (or which ever port is connected to the monitoring device)is mirrored to port 2 (or whichever port is connected to the sniffing device). You then connect your wiresharkrunning computer and you can see all the packets without disturbing anything. Disadvantage you have to know to configure the device and you have to do it during shutdown so that existing connection is not disturbed.one port is no longer available for other uses. (though you can...better not). Advantage, no effect of your sniffing on the actual process.Once configured sniffing is always available and so you can use it whenever you want. My favourite is Option 3. In fact we always design with one port free for sniffing so that diagnostics can always be done. Krish.

Suggestion To thank Quote Answer
This contribution was helpful to 1 thankful Users zeemens

6/9/2011 8:43 PM	Rate (0)
Marciano Bronze Member Joined: 4/30/2007 Last visit: 3/9/2023 Posts: 231 Rating: (23)	I have configured one Port of my Scalance Switch for Mirroring Now it is working Thanks you all Marciano P.S I must have done some confusion about users account here, Mar_us1 is me also

Suggestion To thank Quote Answer

6/9/2011 9:45 PM	Rate (0)
Krish Silver Member Joined: 5/24/2007 Last visit: 4/24/2024 Posts: 284 Rating: (27)	That´s good.... Marciano or Mar-us1.. Happy Sniffing Krish

Suggestion To thank Quote Answer

|

Share this page:

Share this page on...

Follow us on