What should be recorded from a router display or interface?¶

A router display or management interface may show volatile information about current connections, alerts and configuration.

Avoid this assumption: Recording the model and Wi-Fi name is enough. The evidential value may lie in the device time, uptime, interfaces, connected clients, addresses, sessions and warnings.

Capture the entire visible page or display first, including the router identity, date, time, time zone and logged-in account.

Record the make, model, firmware version, hostname, serial number and provider where visible.

Preserve interface names, public and private IP addresses, gateway details, DNS settings and wireless network names.

Capture connected-device names, MAC addresses, assigned IP addresses, connection type and last-seen or lease times where shown.

Record active VPN, remote-management, port-forwarding, firewall or security alerts.

Preserve uptime, restart notices, failed-login warnings and any indication that logs are being forwarded elsewhere.

Do not change tabs, filters or settings before preserving the original display.

If navigation is necessary, record every page change and avoid saving, applying or refreshing configuration.

Do not assume device names or locations identify the person using them.

Where the interface is complex or the system is operationally important, seek network-specialist support.

Record the visible page title, menu path and whether the information appears current, historic, filtered or incomplete. Preserve any warning that applying changes will restart the device or interrupt service.

Record any visible export, backup or log-retention option.

Operational takeaway¶

Preserve router identity, time, interfaces, addresses, connected clients, sessions and alerts exactly as shown before navigating or changing any setting.