Ask Your Question
0

Unable to capture packets when two BACnet devices communicate.

asked 2024-09-23 10:18:37 +0000

Hello Everyone, I'm currently facing challenges capturing BACnet traffic using Wireshark in my network setup. In the context of BACnet networking, we are utilizing the YABE (Yet Another BACnet Explorer) tool for device discovery and communication. When YABE sends a ReadProperty request to a BACnet device, Wireshark successfully captures the corresponding packet response. However, we are encountering an issue where no packets are captured when direct device-to-device requests are initiated.

This discrepancy raises concerns about the visibility of BACnet communications in our network setup, particularly regarding the effectiveness of packet capture tools like Wireshark. It suggests potential issues with network configuration, communication protocols, or device settings that prevent successful capture of inter-device communication.

We seek to identify the root cause of this issue to ensure comprehensive monitoring of BACnet traffic, facilitating effective troubleshooting and analysis within our network

Network Setup

  1. BACnet Devices: Connected via LAN cables to switch
  2. PC Running Wireshark: Connected to the same switch via a WiFi.

What I have tried:

  1. Wireshark Configuration: Selected the correct network interface. Enabled promiscuous mode. No capture filters applied; I've tried both with and without filters.

  2. Network Check: Ensured that both PC and BACnet are on the same subnet. Pinged the BACnet device from PC successfully. But unable to ping from one PC to the 2nd device which is connected to the 2nd PC.

The Problem:

Despite the above steps, I am unable to capture any BACnet packets in Wireshark.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2024-09-23 11:56:57 +0000

grahamb gravatar image

See the wiki page on Ethernet Capture setup, noting the issues when using a switch.

A Wireshark installation can only capture traffic that passes the capture point, so direct traffic between the two BACnet devices will NOT show up on your capture point.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2024-09-23 10:18:37 +0000

Seen: 14 times

Last updated: 5 hours ago