Skip to content

IEC 60870-5-104 module

The IEC 60870-5-104 module shows information about IEC 60870-5-104 traffic, sequence counter correctness and response times.

Values about packets, bytes, packets per second and bytes per second of IEC 60870-5-104 traffic are shown together with a graph over time. A PCAP button allows for capturing that traffic.

A sequence counter analysis is performed per Application Service Data Unit (ASDU). Several counters provide information about:

  • Sequence number repeated: For two subsequent ASDUs the sequence number was exactly the same.
  • Sequence number too high: Between two subsequent ASDUs the sequence number did not increase by 1 but with a higher value. This is an indication about a loss.
  • Sequence number too low: Between two subsequent ASDUs the sequence number did not increase by 1. The latter ASDU had a lower value.

Please note that there may be several ASDUs in one packet.

A response time calculation is performed between Act and ActCon ASDUs and its min, average and max values are shown.

All IEC 60870-5-104 connections are shown.

Following information is available:

  • IP and port of source and destination (see Common table columns - IP).
  • Traffic counters (see Common table columns - Packets, Bytes, Packets/s, Bit/s).
  • Counters about sequence numbers, loss and response times.
  • All seen ASDU addresses per connection. ASDU addresses are displayed in separate octet notation. The bit length of each octet can be configured on the module configuration page. There are two different display configurations possible at the same time.
  • All seen IOA addresses per connection. IOA addresses are displayed in separate octet notation. The bit length of each octet can be configured on the module configuration page.
  • All seen type IDs per connection.
  • Telegram format counters.
  • QDS and CP56 time validity counter.
  • Commonly used cause of transmission counters.
  • History graphs of traffic, sequence number analysis, response times, telegram format and cause of transmission. The graph can be switched by clicking on the small graph icon in the graph title. See Common table columns - Graph.
  • PCAP button allows for capturing this particular connection (see Common table columns - PCAP).

A live filtering with IP, names, ASDU address or type ID can be applied on the table.