Simulate on your real network traffic.

1 · Capture traffic

Plug a laptop into a mirror (SPAN) port on the OT or line switch, then run:

A few minutes, up to 500 MB, is enough.

sudo timeout 15m tcpdump -i eth1 -s 0 -C 400 -W 1 -w plant.pcap

Replace eth1 with your interface. List interfaces with ip link (Linux) or ifconfig (macOS).

Passive: nothing is sent to your devices. Stop anytime.

2 · Send it to us

Get your quote first, so we know which organization the capture belongs to.

A short capture can miss flows that run rarely, such as backups, historian syncs and vendor sessions. The model flags them, and we can run a longer capture with you.