How to get siemens s7 1200 PLC IP address through wireshark?

Thomas_v2 said:

If you've captured the LLDP multicast, then there you should also find the IP address of the S7 in the wireshark capture.

Open the Wireshark tree:
Link Layer Discovery Protocol
-> Management Address
--> Management Address: x.x.x.x

Click to expand...

mk42 said:

Unfortunately, a lot of the communication you'll see from a 1200 is layer 2, which means it doesn't include an IP address. Profinet IO, LLDP, and much more. These communicate via MAC address, which is what you were seeing.

If you need to use wireshark for this, you may want to look for ARP packets. ARP (Address Resolution Protocol) ties an IP address to a MAC address. If you cycle power on the 1200, you should see an ARP packet broadcast out, telling the network that IP address W.X.Y.Z is at such and such MAC address.

If you don't actually need to use wireshark, I'd suggest utilizing a tool like Proneta. It can scan the local network for PN devices. It then gives you a nice topology view with what is connected to what, and a table with all the devices, device names, and IP addresses. It utilizes DCP (Discovery and Configuration Protocol), which is part of Profinet.

https://support.industry.siemens.com/cs/us/en/view/67460624

Click to expand...

ashu2shreya said:

I am new to wireshark, din't get how to do whatever you told.Can you please tell me step wise procedure, How exactly it should do?

Click to expand...