ICS/OT Packet Analysis Tools
Want to learn more about ICS/OT packet analyzers?
Here's a quick intro to three of the tools you might use to capture and analyze packets.
1. Wireshark
Free
Fairly easy to use
Born from the IT world
Has tremendous community support
Very effective for building asset registers
Supports all major ICS/OT protocols (and then some)
Incredible capabilities for capturing and reading packets
Dissectors (a.k.a. parsers) translate data into a readable format
2. OT PCAP Analyzer (OPA)
Free as well!
Built specifically for OT
Designed to build asset registers
Also designed for finding anomalous traffic
I will definitely need more time to take a better look!
3. Network Miner
Honorable mention
Extracts files from packet captures!!!
Includes basic functionality to enumerate hosts