IEC 60870-5-104 module: Difference between revisions
m (→Overview) |
m (→Connections: link to common table columns page) |
||
| Line 21: | Line 21: | ||
Following information is available: | Following information is available: | ||
* IP and port of source and destination | * IP and port of source and destination (see [[Common table columns#IP|Common table columns - IP]]) | ||
* Traffic counters | * Traffic counters (see Common table columns - [[Common table columns#Packets|Packets]], [[Common table columns#Bytes|Bytes]], [[Common table columns#Packets/s|Packets/s]], [[Common table columns#Bit/s|Bit/s]]) | ||
* Counter about sequence numbers, loss and response times | * Counter about sequence numbers, loss and response times | ||
* All seen ASDU addresses per connection | * All seen ASDU addresses per connection | ||
| Line 28: | Line 28: | ||
* Telegram format counters | * Telegram format counters | ||
* Commonly used cause of transmission counters | * Commonly used cause of transmission counters | ||
* History graphs of traffic, sequence number analysis, response times, telegram format and cause of transmission. The graph can be switched by clicking on the small graph icon in the graph title. | * History graphs of traffic, sequence number analysis, response times, telegram format and cause of transmission. The graph can be switched by clicking on the small graph icon in the graph title. See [[Common table columns#Graph|Common table columns - Graph]]. | ||
* PCAP button allow for capturing this particular connection | * PCAP button allow for capturing this particular connection (see [[Common table columns#PCAP|Common table columns - PCAP]]). | ||
A live filtering with IP, names, ASDU address or type ID can be applied on the table. | A live filtering with IP, names, ASDU address or type ID can be applied on the table. | ||
Latest revision as of 15:48, 7 December 2023
The IEC 60870-5-104 module shows information about IEC 60870-5-104 traffic, sequence counter correctness and response times.
Overview
Values about packets, bytes, packets per second and bytes per second of IEC 60870-5-104 traffic are shown together with a graph over time. A PCAP button allows for capturing that traffic.
A sequence counter analysis is performed per Application Service Data Unit (ASDU). Several counters provide information about:
- Sequence number repeated: For two subsequent ASDUs the sequence number was exactly the same.
- Sequence number too high: Between two subsequent ASDUs the sequence number did not increase by 1 but with a higher value. This is an indication about a loss.
- Sequence number too low: Between two subsequent ASDUs the sequence number did not increase by 1. The latter ASDU had a lower value.
Please note that there may be several ASDUs in one packet.
A response time calculation is performed between Act and ActCon ASDUs and its min, average and max values are shown.
Connections
All IEC 60870-5-104 connections are shown.
Following information is available:
- IP and port of source and destination (see Common table columns - IP)
- Traffic counters (see Common table columns - Packets, Bytes, Packets/s, Bit/s)
- Counter about sequence numbers, loss and response times
- All seen ASDU addresses per connection
- All seen type IDs per connection
- Telegram format counters
- Commonly used cause of transmission counters
- History graphs of traffic, sequence number analysis, response times, telegram format and cause of transmission. The graph can be switched by clicking on the small graph icon in the graph title. See Common table columns - Graph.
- PCAP button allow for capturing this particular connection (see Common table columns - PCAP).
A live filtering with IP, names, ASDU address or type ID can be applied on the table.