Imaging To Or From A Network; Imaging Net Traffic - Logicube Falcon-NEO User Manual

filters. Output formats include L01, LX01, Directory Tree, and Zip Archive. An MFT report
can be generated which will list files that can potentially be restored or recovered.
1.
2.
3.
4.
5.
6.
7.
8.

3.1.4 Imaging To or From a Network

A network repository or location must be set for the Falcon-NEO to be able to image to
or from a network repository/location. Depending on the type of repository added (for
example CIFS or iSCSI), the repository will appear as a Source, Destination, or both.

3.1.5 Imaging Net Traffic

The Falcon-Neo can capture network traffic data using the Net Traffic to File imaging
mode. Network traffic that can be captured can include local network activity, internet
activity, and VOIP activity. The data is saved and stored to a *.pcanpg file format which
can be analyzed by various software such as Wireshark.
®
-Neo User's Manual
Logicube Falcon
Select Imaging from the types of operation on the left side.
Tap the Mode icon and select File to File then tap the OK icon.
Tap the Source icon and select the Source then tap the OK icon.
Tap the Settings icon and choose the desired settings.
For details on the different settings
in File to File mode, please see
Section 4.3.8
Tap the Destination icon and select the destination(s) to be used then tap the
OK icon.
Tap the Start icon to start the imaging task.
A progress bar will appear at the bottom of the screen showing the bytes
processed, the rate (speed), elapsed time, and time remaining.
When finished, the status will show "COMPLETED". It is recommended to tap
Reset Task to reset the task, so the drive bays properly reset and not show as
being used or assigned for other tasks.
For details on how to add a
network repository/location, please
see Section 5.9 of this manual.
Advanced networking knowledge is required for the
setup of capturing network traffic and data analysis.
When performing a Net Traffic to File imaging task, it
is highly recommended not to use the network port
used as the Source (LAN1 or LAN2) for any other
imaging task or for remote access to the Falcon-NEO.
Additional notes on Net Traffic Imaging can be found
in Chapter 11: Net
of this manual.
Traffic.
QUICK START
21