These cookies ensure basic functionalities and security features of the website, anonymously. Necessary cookies are absolutely essential for the website to function properly. Still worried about your packet captures? Read five ways to securely analyze BACnet data. Click Edit from the top menu bar and select → Fix Errors. Finally, you’ll want to fix Cyclic Redundancy Check (CRC) errors, which were created from modifying the packets.It doesn’t matter what numbers you substitute in for your IP and MAC addresses, as long as it doesn’t identify your network and devices and you keep track of the original addresses. (For example, A1:B2:C3:) Select Replace All. (For example, D0:D9:4F:) In Replace With, enter the numbers that you would like to substitute in. In Find What, enter the portion of the MAC addresses that you would like to replace.(For example, 10.36.) Select Replace All. (For example, 128.36.) In Replace With, enter the numbers that you would like to substitute in. In Find What, enter the portion of the IP addresses that you would like to replace.pcap file you saved, and open it in WireEdit. For full screenshots of this, visit our support forum. Save this for your future reference, or use it to map out how you would like to replace numbers in your IP and MAC addresses. Do the same for IPv4, navigating to Statistics → Endpoints → IPv4, and copy-pasting the data into a document. With the filtered file still open in Wireshark, navigate to Statistics → Endpoints → Ethernet, select Copy in the bottom left hand corner, and paste into a secure document.Export the specified packets (all those displayed) as.In the Filter bar in the top left side, filter “bacnet || bacapp”. Creating an account is free, and will give you access to all sorts of support articles. Read our instructions below, or check out the post on our support forum for a step-by-step guide with screenshots. Then, you can dig into pcaps, troubleshoot, and solve problems with ease.

Changing the IP and MAC addresses will get rid of any identifying information. If your IT department doesn’t like you pulling pcaps to analyze BACnet health, your best bet is to anonymize the files. You need to get a packet capture (pcap) and upload it into Visual BACnet, but the IT department’s dead-set against it: they won’t let you upload unless you scrub the files of confidential information, so they can’t be traced back to the building. Your OT network’s acting funny, and you have no idea why.

Wireshark mac address to ip address