When connected via a SPAN port, the packet capture appliance may receive and record all Ethernet/IP activity for all of the ports of the switch or router.
There are two general approaches to deploying packet capture appliances: centralized and decentralized.