Getting To The Ground Truth With Gravwell Packet Capture
In an operational technology (OT) environment, constant monitoring and visibility are essential. This white paper from Gravwell explores capturing and analyzing network packet data at scale in OT environments. Key topics include:
- Deploying network capture ingesters on nodes to stream packets from switches
- Accelerating Modbus message parameter analysis within the platform
- Using Gravwell's packet module to extract and enrich protocol data for faster querying
- Configuring ageout policies to keep critical data "hot" while archiving older packets
The paper also covers exporting packet captures for analysis in tools like Wireshark.
Learn how Gravwell's capabilities enhance OT network visibility.