Creation of Wireshark Traces

What is Wireshark, and why is it useful?

Wireshark is a free program that makes it possible to record Ethernet frames. This can be helpful during troubleshooting.

Install “tcpdump”

sudo apt install tcpdump

Create a capture - you have to stop it via [CTRL] + C

sudo tcpdump -i eth0 -w /tmp/mycapture.pcap

Copy the file to another host for examination via Wireshark

You download and install the program https://www.wireshark.org/
You start a recording via an Ethernet interface connected to the field bus from the start of the installation until the error occurs.
1. Select the interface you want to capture.
2. You can see how Wireshark is capturing the Ethernet traffic live.
Then stop recording and save this recording as a file.
1. Stop recording
2. Select where you would like to save the file.
3. The resulting compressed capture file here is about 136 KB big.