Indexing a Modbus over TCP packet with Logstash

Elastic Stack Logstash
1

I am trying to index a pcap capture witch composed by a Modbus/TCP encapsulation.
So before writing my own modbus.conf file to parse all field, I want to know is there something like that ? I am looking for a simply pcap parser witch I can complete with decoded Modbus PDU ?

Than I will use the result in ElastickSearch to make some query.

Thank you for your answer.

2

Hi nba,

I am looking to do something similar. Did you get it working? Any pointer you can share?

Thank you,

jhk