Skip to content
Skip to main content
First Response & Preservation Operational Explainer

What should be recorded from a router display or interface?

Capture identity, time, uptime, interfaces, addresses, connected clients, sessions and alerts before changing pages, filters or configuration.

Preserve current network state

Record make, model, firmware, serial, hostname, provider, gateway, DNS, wireless names and public and private addresses. Include client names, MAC and IP values, interface, lease times and connection status.

Capture VPN, remote management, forwarding, failed logins, firewall alerts and whether logs are sent elsewhere.

Record interface context

Preserve full page, account, menu path, time and whether data is current, historic or filtered. Do not apply, save or refresh settings while documenting navigation.

Device names and inferred locations remain technical labels, not personal attribution.

Key takeaway

Preserve the complete router display and its temporal scope before navigation or configuration changes the live record.

Reference: FRP-138First Response & Preservation