Imaging Net Traffic - Logicube Falcon-NEO User Manual

8.
9.
10. Tap the Start icon to start the imaging task.
11. A progress bar will appear at the bottom of the screen showing the bytes
12. When finished, the status will show "COMPLETED". It is recommended to

3.1.3 Imaging Net Traffic

The Falcon-Neo can capture network traffic data using the Net Traffic to File
imaging mode. Network traffic that can be captured can include local network
activity, internet activity, and VOIP activity. The data is saved and stored to a
*.pcanpg file format which can be analyzed by various software such as
Wireshark.
1.
2.
3.
4.
5.
6.
Logicube Falcon -Neo User's Manual
®
Once the BitLocker encrypted partition has been unlocked,
you can proceed with the Partition to File image task or
change the mode to perform a Drive to File image task to
Image all other partitions that may be on the drive. Since
the encrypted partition has been unlocked, selecting the
whole source drive using Drive to File will image the
whole drive including the unlocked partition.
Tap the Settings icon and adjust the settings as needed (Case Info, File
Image Method Settings or Mirror Settings, HPA/DCO, Error Handling,
Hash/Verification Method, etc.) then tap the OK icon.
Tap the Destination icon and select the destination(s) to be used then
tap the OK icon.
processed, the rate (speed), elapsed time, and time remaining.
tap Reset Task to reset the task, so the drive bays properly reset and not
show as being used or assigned for other tasks.
Advanced networking knowledge is required for the
setup of capturing network traffic and data analysis.
Additional notes on Net Traffic Imaging can be
found in Chapter 11: Net
Select Imaging from the types of operation on the left side.
Tap the Mode icon and select Net Traffic to File then tap the OK icon.
Tap the Source icon and choose a network port to capture with (LAN1 or
LAN2).
Tap the Settings icon and choose the desired settings.
For more information on the Net Traffic
to File Settings, please see
Tap the Destination icon and select the destination(s) to be used then
tap the OK icon.
Tap the Start icon to start the imaging task.
Traffic.
Section 4.3.9.
QUICK START
19