ITT600 SA Explorer Integrated Testing Tool User Manual ...

Grid Automation Products

ITT600 SA ExplorerIntegrated Testing ToolUser ManualITT600 SA Explorer Ver. 2.1

1/1

© Hitachi Energy 2021. All rights reserved.

EU Declaration of Conformity REC650

Document identity

1MRK 000 612-66 Revision C

Declaration We Hitachi Energy Sweden AB, SE-721 59 Västerås, Sweden, declare under our sole responsibility that the family of apparatus:

Bay Control Type: REC650, Ver. 1.0 acc. to Product Guide 1MRK 511211-BEN

to which this declaration relates is in conformity with the following relevant Union harmonization legislations:

Directives 2014/30/EU EMC Directive Official Journal of the EU (L96, 29/03/2014, p. 79-106)

2014/35/EU Low Voltage Directive Official Journal of the EU (L96, 29/03/2014, p. 357-374)

Application of the objects

The product is intended for use in the industrial environment and to protect high voltage or high-power apparatus, and thus normally used in a harsh electromagnetic environment near high voltage apparatus.

Harmonized Standards

References to the relevant harmonized standards or other technical specifications to which conformity is declared:

EN 60255-26: 2013 Electromagnetic compatibility requirements

EN 60255-27: 2014 Product safety requirements

Authorization Signed for and on behalf of:

Marko Kovacic (PM) Date

Document ID: 1MRK512006-UENIssued: November 2021

Product version: ITT600 SA Explorer Ver. 2.1.0

© 2004 - 2021 Hitachi Energy. All rights reserved

CopyrightThis document and parts thereof must not be reproduced or copied without written permission fromHitachi Energy, and the contents thereof must not be imparted to a third party, nor used for anyunauthorized purpose.

The software or hardware described in this document is furnished under a license and may be used,copied, or disclosed only in accordance with the terms of such license.

TrademarksHitachi Energy is a registered trademark of Hitachi Energy Group. All other brand or product namesmentioned in this document may be trademarks or registered trademarks of their respective holders.

WarrantyPlease inquire about the terms of guarantee from your nearest Hitachi Energy representative.

DisclaimerWe reserve the right to make technical changes or modify the contents of this document without priornotice.

The data, examples and diagrams in this manual are included solely for the concept or productdescription and are not to be deemed as a statement of guarantee properties. All personsresponsible for applying the equipment addressed in this manual must satisfy themselves that eachintended application is suitable and acceptable, including that any applicable safety or otheroperational requirements are complied with. In particular, any risks in applications where a systemfailure and/or product failure would create a risk for harm to property or persons (including but notlimited to personal injuries or death) shall be the sole responsibility of the person or entity, applyingthe equipment, and those so responsible are hereby requested to ensure that all measures are takento exclude or mitigate such risks.

This document has been carefully checked by Hitachi Energy but deviations cannot be completelyruled out. In case any errors are detected, the reader is kindly requested to notify the manufacturer.Other than under explicit contractual commitments in no event shall Hitachi Energy be responsible orliable for any loss or damage resulting from the use of this manual or the application of theequipment.

Important noticeExperience has shown that reliable operation of our products is assured, providing the informationand recommendations contained in these Operating Instructions are adhered to.

It is scarcely possible for the instructions to cover every eventuality that can occur when usingtechnical devices and systems. We would therefore request the user to notify us directly or our agentof any unusual observations or instances, in which these instructions provide no or insufficientinformation.

In addition to these instructions, any applicable local regulations and safety procedures must alwaysbe strictly observed both when connecting up and commissioning this equipment.

We expressly accept no responsibility or liability for any damage, which may result from operation ofthis equipment, even if no reference is made to the particular situation in the Operating Instructions.

ABB is a registered trademark of ABB Asea Brown Boveri Ltd. Manufactured by/for a Hitachi Energycompany.

Table of contents

Section 1 Introduction....................................................................................................51.1 Scope of the document......................................................................................................... 51.2 Abbreviations and definitions................................................................................................ 51.2.1 Abbreviations.......................................................................................................................51.2.2 Definitions............................................................................................................................61.3 References............................................................................................................................61.4 Overview............................................................................................................................... 7

Section 2 Configuration................................................................................................. 92.1 Network Interface Card settings............................................................................................92.1.1 IP Address...........................................................................................................................92.1.2 Virtual LAN (VLAN)............................................................................................................. 92.2 Software firewalls.................................................................................................................. 92.3 VPN clients..........................................................................................................................102.4 Changing OSI address parameters..................................................................................... 112.5 Debug and trace output configuration................................................................................. 112.6 Ethernet switch configuration.............................................................................................. 12

Section 3 Functionality................................................................................................ 133.1 ITT600 – Explore IEDs........................................................................................................133.1.1 Overview........................................................................................................................... 133.1.2 Keyboard shortcuts........................................................................................................... 133.1.3 File Menu...........................................................................................................................143.1.4 Edit menu.......................................................................................................................... 143.1.5 Tools menu........................................................................................................................153.1.6 ITT600 SA Explorer options.............................................................................................. 153.1.7 Help menu.........................................................................................................................183.1.8 Tree navigation panel........................................................................................................183.1.8.1 Tree View "By Subnetworks"........................................................................................193.1.8.2 Tree View “By Substation”........................................................................................203.1.9 Get Started Panel..............................................................................................................223.1.10 Main panel.........................................................................................................................223.1.10.1 Object properties....................................................................................................... 223.1.10.2 Dockable panes........................................................................................................... 233.1.10.3 Object details............................................................................................................... 243.1.11 Coloring rules.................................................................................................................... 253.1.12 Debug and logging information......................................................................................... 263.1.13 Working with IED configurations....................................................................................... 273.1.13.1 Working offline..............................................................................................................273.1.13.2 Working online............................................................................................................. 313.1.13.3 Dynamic Data Sets...................................................................................................... 453.1.13.4 Read VMD Specific Variables of an IED...................................................................... 50

1MRK512006-UEN Table of contents

ITT600 SA Explorer 1User Manual


3.1.13.5 Working with files (MMS file Transfer)..........................................................................513.1.13.6 Process Event List....................................................................................................... 523.1.13.7 Security Event List....................................................................................................... 543.1.13.8 Point Value List............................................................................................................ 563.1.13.9 Embedded FTP Client..................................................................................................583.1.13.10 Dynamically add IEDs to the configuration.................................................................. 593.1.14 Dynamically discovering IEDs...........................................................................................623.1.15 Exporting IEDs to an SCD file........................................................................................... 653.1.16 Quick Checker...................................................................................................................663.1.16.1 Checking IED status.....................................................................................................663.1.16.2 Checking network devices status.................................................................................663.1.16.3 Status indicators...........................................................................................................673.1.16.4 Operation..................................................................................................................... 673.1.17 IED Status View................................................................................................................ 693.1.17.1 Overview...................................................................................................................... 693.1.17.2 Functionality................................................................................................................. 693.1.18 IED simulation................................................................................................................... 723.1.18.1 Overview...................................................................................................................... 723.1.18.2 IED simulation options................................................................................................. 743.1.18.3 Start IED simulation..................................................................................................... 763.1.18.4 IED Status View........................................................................................................... 773.1.18.5 Stopping a simulated IED.............................................................................................783.2 ITT600 – Explore Ethernet.................................................................................................. 783.2.1 Overview........................................................................................................................... 783.2.2 Keyboard shortcuts........................................................................................................... 793.2.3 Toolbar...............................................................................................................................803.2.4 Capture window.................................................................................................................813.2.5 Packet information.............................................................................................................823.2.6 Status bar..........................................................................................................................823.2.7 Working with ITT600 – Explore Ethernet...........................................................................823.2.7.1 Working with capture files............................................................................................ 823.2.7.2 Capture network traffic................................................................................................. 823.2.7.3 Analyzing network packets...........................................................................................843.2.7.4 The different filters....................................................................................................... 883.2.7.5 Export captured packets to Excel.................................................................................923.2.7.6 Import captured packets from Excel.............................................................................933.2.7.7 Dump MMP PDUs........................................................................................................933.2.7.8 Options and default settings.........................................................................................933.2.8 Statistics............................................................................................................................943.2.9 Send capture file............................................................................................................... 953.2.10 Send a packet................................................................................................................... 963.2.11 Toggle relative/absolute time.............................................................................................963.2.12 Find in packet data............................................................................................................973.2.13 Protocol specific information............................................................................................. 983.2.13.1 MMS.............................................................................................................................983.2.13.2 GOOSE/RGOOSE/Tunneled RGOOSE.....................................................................100

Table of contents 1MRK512006-UEN

2 ITT600 SA ExplorerUser Manual


3.2.14 Replay protection............................................................................................................ 1013.3 ITT600 – Explore GOOSE.................................................................................................1023.3.1 Overview......................................................................................................................... 1023.3.1.1 Keyboard shortcuts.................................................................................................... 1023.3.1.2 Toolbar....................................................................................................................... 1033.3.1.3 Options Menu.............................................................................................................1033.3.2 Working with Explore GOOSE........................................................................................ 1043.3.2.1 Offline Mode...............................................................................................................1043.3.2.2 Online Mode...............................................................................................................1053.3.2.3 Discovered IEDs........................................................................................................ 1063.3.2.4 Display with loaded configuration...............................................................................1073.3.2.5 Display without loaded configuration..........................................................................1073.3.2.6 Simulated and real packets........................................................................................1083.3.2.7 Plots........................................................................................................................... 1083.3.2.8 Plot Information and functions....................................................................................1093.3.2.9 Go to the next value change...................................................................................... 1093.3.2.10 The Explore GOOSE plot toolbar............................................................................... 1103.3.2.11 Zooming......................................................................................................................1113.3.2.12 Data cursor and plots synchronization........................................................................1113.3.2.13 Saving and opening plots configuration......................................................................1113.3.2.14 Packet details............................................................................................................. 1123.3.2.15 Legend....................................................................................................................... 1123.4 ITT600 – Explore SV......................................................................................................... 1153.4.1 Overview..........................................................................................................................1153.4.1.1 Keyboard shortcuts.................................................................................................... 1163.4.1.2 Toolbar........................................................................................................................1163.4.1.3 Explore SV options.....................................................................................................1163.4.2 Working with Explore SV................................................................................................. 1173.4.2.1 Online mode............................................................................................................... 1173.4.2.2 Offline mode...............................................................................................................1273.5 ITT600 – Explore Models.................................................................................................. 1323.5.1 Overview......................................................................................................................... 1323.5.2 File Menu.........................................................................................................................1333.5.3 Help Menu.......................................................................................................................1333.5.4 Toolbar.............................................................................................................................1333.5.5 Model panels...................................................................................................................1343.5.6 Comparison panels......................................................................................................... 1343.5.7 Comparing SCL Files...................................................................................................... 1353.5.8 Comparing ITT600 – Explore IEDs Data with an SCL File..............................................1363.5.9 Comparison Filters.......................................................................................................... 1363.5.10 Comparison Results........................................................................................................1383.5.11 Export differences to .xsl File.......................................................................................... 1393.6 Software Update................................................................................................................139

Section 4 Limitations..................................................................................................141

Section 5 Appendix.................................................................................................... 143

1MRK512006-UEN Table of contents



5.1 Troubleshooting.................................................................................................................1435.2 ITT600 – Explore IEDs Default Address Parameters........................................................1435.2.1 Local Address..................................................................................................................1445.2.2 Remote Address..............................................................................................................1445.3 ITT600 – Explore Ethernet Supported Protocols...............................................................1445.4 IEC 61850 Edition 2 features............................................................................................ 1455.4.1 Local Remote Handling Feature......................................................................................1455.4.2 Mode Behavior Handling.................................................................................................1455.5 IEC 61850 Edition 2.1 features......................................................................................... 1465.5.1 GOOSE replay protection algorithm................................................................................146

Table of contents 1MRK512006-UEN



Section 1 IntroductionGUID-00225B13-CE90-42C1-B4A6-A81DF8425109 v1

1.1 Scope of the documentGUID-39918406-B98D-41B6-BBB3-ECFF624322F2 v1

This document is the user manual for the ITT600 SA Explorer. As such it describes the functionality,configuration and operation of the product packages.

This manual does not include an introduction to the IEC 61850 standard. References to IEC 61850and Substation automation can be found in Section "References".

1.2 Abbreviations and definitionsGUID-B773A44C-D68F-40BF-A46B-0E5D87475CF4 v1

1.2.1 AbbreviationsGUID-4066BB04-5B5F-42FF-BC2E-0C625D257019 v1

ACP Ethernet Capture File Format

ACSI Abstract Communication Service Interface

BRCB Buffered Report Control Block

CDC Common Data Classes, see

DA Data Attribute

DO Data Object

DS Data Set

FC Functional Constraint

FTP File Transfer Protocol

GI General Interrogation

GOOSE Generic Object Oriented Substation Event

GUI Graphical User Interface

IED Intelligent Electronic Device

ITT Integrated Testing Toolbox

LAN Local Area Network

LN Logical Node

MIB Management Information Base

MMS Manufacturing Message Specification

NIC Network Interface Card

NTP Network Time Protocol

OSI Open Systems Interconnection

PC Personal Computer

PDU Protocol Data Unit

RCB Report Control Block

RMS Root Mean Square

Table continues on next page

1MRK512006-UEN Section 1Introduction



RSTP Rapid Spanning Tree Protocol

SA Substation Automation

SCD Substation Configuration Description

SCL Substation Configuration Language

SNMP Simple Network Management Protocol

SNTP Simple Network Time Protocol

STP Spanning Tree Protocol

SV Sampled Values

TCP Transport Control Protocol

URCB Un-buffered Report Control Block

VLAN Virtual Local Area Network

VMD Virtual Manufacturing Device

VPN Virtual Private Network

XML Extensible Markup Language

1.2.2 DefinitionsGUID-DECE3B49-1A3B-48E4-BBDA-91761D52A581 v1

Tip icon indicates special advice. Examples:

• Recommendation for a system configuration that is not a strict requirement, buttypically is advantageous.

• Alternative method for performing a function.

Warning icon indicates important advice that has to be followed.

Packet An OSI layer 3 information unit transmitted in a frame

Frame An OSI layer 2 information unit transmitted as a whole

1.3 ReferencesGUID-F9137735-271B-4949-B6A4-3DBE0FDF0D01 v2

IEC 61850-1 Introduction and Overview

IEC 61850-7-3 Common Data Classes

IEC 61850-7-4 Compatible Logical Node Classes

IEC 61850-8-1 Mappings to MMS

IEC 61850-9-2 Sampled Values over ISO/IEC 8802-3

IEC 61850-90-4 Network Engineering Guidelines

IEC 62351-6 Power systems management and associated informationexchange – Data and communication security – Part 6:Security for IEC 61850

IEC 61869-9 Digital interface for instrument transformers

Substation Automation Handbook, Klaus-Peter Brand, Volker Lohmann, Wolfgang Wimmer, ABBSwitzerland Ltd, Utility Automation Systems (ISBN-13: 978-3857589515).

Section 1 1MRK512006-UENIntroduction



1.4 OverviewGUID-1CB5A64A-81BD-4E02-98F5-0F2335DE7E53 v1

Integrated testing tool ITT600 SA Explorer is designed for easy diagnosis and troubleshooting of IEC61850-based substation automation systems and applications.

It features convenient navigation, comprehensive presentation of application data, and support forsystem consistency check both on-line and off-line. This allows anybody to use the same tool toanalyze and debug substation automation applications regardless of their level of knowledge of IEC61850 communication.

The ITT600 SA Explorer tool offers facilities for exploring and analyzing the communicationconfiguration of the protection and control IEDs (Intelligent Electronic Devices) and IEC 61850communication in substation automation systems, including GOOSE messages. Its versatilefunctionality eliminates the need for multiple testing tools for different purposes, such as MMSbrowsers, and protocol and Ethernet analyzers.

The powerful features of ITT600 SA Explorer provide test engineers with access to any IEC 61850-compliant IED. The tool’s various functions allow efficient testing of the IED application and isolatethe root cause of system communication problems. This significantly reduces testing andcommissioning time.

ITT600 SA Explorer is easy to use, and does not require the skills of a data communicationspecialist. By translating the complex terminology of communication protocols into the standardizedIEC 61850 language, it makes the essential information available to all users.

ABB’s comprehensive suite of tools for engineering, integration and testing supports you throughoutthe complete lifecycle of protection and control IEDs and IEC 61850- based substation automationsystems. With many advanced features, the tools allow you to manage your installation efficiently inall situations from engineering and commissioning to operation and maintenance.

IEC202100001 V1 EN-US

Figure 1: ABB’s SA Tools landscape

The ITT600 SA Explorer can be divided in five main parts:

ITT600 – Explore IEDs enables the user to either browse SCL file contents or retrieving the IEC61850 related configuration from any compliant IED over the network. Its full-fledged IEC 61850client allows to do various operations on multiple IEDs in parallel. Additionally, it provides thefunctionality to simulate one IED of the loaded SCL file.

ITT600 – Explore Ethernet is an easy to use protocol analyzer that supports SA related protocols. Itis able to present the transmitted IEC 61850 data in a user readable form, without having a deepknowledge about the protocols. This functionality simplifies troubleshooting of communicationproblems significantly.

ITT600 – Explore Models enables the user to compare SCL related data. It does not matter whethertwo SCL compatible files or online data are compared. This functionality again simplifiestroubleshooting because every configuration can be compared against a reference.

1MRK512006-UEN Section 1Introduction



ITT600 – Explore GOOSE visualizes GOOSE data in an Oscilloscope style. Several individual DataAttributes sent in GOOSE frames can easily be compared and measured. This enables fasterdebugging and comprehension of distributed application logic using GOOSE.

ITT600 – Explore SV visualizes IEC 61850-9-2 LE data streams using a polar chart. Two differentdata streams can easily be visualized and compared at the same time. The Oscilloscope view showscurrent and voltage trends, allowing the user to inspect the content of each SV packet.

Figure 2 illustrates the wide variety of usages of ITT600 SA Explorer.

IEC202100002 V1 EN-US

Figure 2: The main use cases of ITT600 SA Explorer

Section 1 1MRK512006-UENIntroduction



Section 2 ConfigurationGUID-D7A51C5F-9201-4A5A-B082-568593D44D54 v2

To ensure its full functionality, ITT600 requires that some general settings are checked.

2.1 Network Interface Card settingsGUID-3084356B-7198-4D03-94F1-BE8B4C2335B7 v1

Usually no special settings have to be made to the Network Interface Card (NIC). However, somemodels with their specific drivers need to be adjusted so they do not block specific packets.

2.1.1 IP AddressGUID-55C40639-B6B0-4023-AAFE-89FE0E3CF0FE v1

To be able to browse an IED, the NIC of the PC has to be configured to be in the same network asthe IED. Usually this is done by configuring the same subnet mask and a similar IP address withinthe same subnet that the IED is using. See Figure 3.

IEC202100003 V1 EN-US

Figure 3: IP Addresses for an IED and ITT600 SA Explorer PC

The ITT600 SA Explorer PC should be in the same network as the IEDs, to be ableto connect them.

2.1.2 Virtual LAN (VLAN)GUID-D6433921-D0C7-4702-86CD-01A0E62BE72E v1

Depending on the settings of the NIC, it might happen that the VLAN tags in the packets arediscarded before the packet is passed to the capturing engine.

Refer to the vendor specific documentation on how to configure the NIC in a way that it istransparent.

2.2 Software firewallsGUID-AA27C13F-D29A-4002-B78E-913BD0519D2C v1

Software firewalls could also block specific packets. How to disable software based firewalls isdescribed in its own user manual.

1MRK512006-UEN Section 2Configuration



As a general rule, there is usually a Service that has to be stopped from the Windows Control Panel,or the firewall allows it to be disabled by a menu entry or an icon.

For correct MMS operation, port 102 also needs to be enabled. For MMS simulation,port 5007 also needs to be enabled.

It is not recommended to disable any firewall without informing the NetworkAdministrator in your organization in advance. The firewall should only be disabledduring testing sessions. It is not recommended to keep it disabled all the time. Aswell, if ITT600 SA Explorer is to be run on virtual machine, Windows Defenderservice may have to be turned off.

2.3 VPN clientsGUID-F486B797-2EF6-4317-80E4-00DDDEA30067 v1

Some VPN clients might also interfere the packets capturing process. Again, disabling the VPN clientcan solve this issue.

Some VPN clients can be disabled by changing the used item on a connection in the networkconnection properties. An example is shown in Figure 4.

It is not recommended to disable any VPN Software without informing the NetworkAdministrator in your organization in advance. The VPN Software should only bedisabled during testing sessions. It is not recommended to keep it disabled all thetime.

IEC202100004 V1 EN-US

Figure 4: Disabling a VPN client in the network connection properties

Section 2 1MRK512006-UENConfiguration



2.4 Changing OSI address parametersGUID-421D0FA2-B2F1-45E8-A09F-65BF6A34DB70 v1

Some IED might need special OSI address parameters to be able to connect to the device. Usuallythe remote address parameters are defined in the SCL, or can be configured in the Create ServerDialog.

For a list of default address parameters, see section "ITT600 – Explore IEDs Default AddressParameters" .

2.5 Debug and trace output configurationGUID-16D71AE2-D1A9-4AE3-9788-D01D48D6B2E6 v1

ITT600 SA Explorer logs error messages and additional information during operation. See "Debugand logging information" for more information.

The logging functionality of ITT600 SA Explorer can be configured in the Options dialog. User candefine the amount of information to be logged.

Changing the logger configuration could slow down the whole application and istherefore not recommend for in-experienced users.

IEC202100005 V1 EN-US

Figure 5: Define Log Level

1MRK512006-UEN Section 2Configuration



2.6 Ethernet switch configurationGUID-931BDBD7-C2CC-482D-818B-405DD905B465 v1

ITT600 SA Explorer needs no special environment for operation. However, since switched networksare used in IEC 61850 SA systems, some basic configuration has to be followed to be able tocapture network traffic between two endpoints.

Figure 6 shows a basic system setup in an abstract form. To capture the traffic between IED1 and theSCADA System, the Ethernet switch has to be configured in a way that it sends all traffic received onthe port where the SCADA System is connected to the port the ITT600 SA Explorer notebook isconnected. This is called Port Mirroring. Depending on the switch manufacturer, it can beconfigured in a different way.

IEC202100006 V1 EN-US

Figure 6: Basic SA system setup

Section 2 1MRK512006-UENConfiguration



Section 3 FunctionalityGUID-948C216E-AEAB-4AB6-90CE-A23A40ECB1F3 v1

This chapter describes the different software components that are bundled together in ITT600 SAExplorer.

3.1 ITT600 – Explore IEDsGUID-DE68F92C-2059-4993-8B8E-BA3F87726008 v1

3.1.1 OverviewGUID-E2A353A7-BBF2-4A58-8B67-2681E35F3E55 v1

ITT600 – Explore IEDs enables the user to browse and display the IEC 61850 related parts of IEDs.This can be done online over the network or offline with a SCL compliant configuration file (typically aSCD file describing the whole substation). Further it allows the user to simulate one IEC 61850 IED.

The main user interface of the ITT600 – Explore IEDs application, as shown in Figure 7 is dividedinto four main areas:

• Menus (yellow)• Tree Navigation (blue)• Get Started Panel and Main Panel(red)• Debug and Logging Information (green)

IEC202100007 V1 EN-US

Figure 7: ITT600 SA Explorer main user interface

Four main menus are available within ITT600 – Explore IEDs for performing high-level operationsand launching the other ITT600 parts. The following sections give an overview of the availablefunctions. How those features can be used, is described in section "Working with IED configurations".

3.1.2 Keyboard shortcutsGUID-2356779D-B4E6-43C4-9A47-5D96E14D31AB v1

ITT600 main window provides following keyboard shortcuts:

1MRK512006-UEN Section 3Functionality



Table 1: Synthesizer shortcuts

Accelerator Description

Ctrl + O Open SCL file

Ctrl + Shift + O Open recent SCL file

Ctrl + Shift + Z Clear tree

Ctrl + E Open Explore IEC61850 GOOSE

Ctrl + G Open Explore IEC61850-9-2 (LE)

Ctrl + S + V Open Compare IEC61850 Models

Ctrl + D Open Compare IEC61850 Models

Ctrl + Q Connect an IED without SCL

Ctrl + Shift + Q Connect recent IED without SCL

3.1.3 File MenuGUID-53BB6EA1-3E5D-4A73-A0EC-0BF1A55BF47C v1

The file menu provides access to the following operations (see Figure 8):

• Loading an IEDs configuration from a SCL compatible file• Opening a SCD file that has been opened in the past (the Open Recent sub-menu)• Inserting a recently added IED to navigation tree (the Open Recent IEDs sub-menu)• Exporting browsed IEDs to an SCD file (only available when no SCD file was loaded).• Exiting the program (the Exit menu item)

IEC202100008 V1 EN-US

Figure 8: ITT600 – Explore IEDs File menu

3.1.4 Edit menuGUID-AECB3E5F-0942-43BB-A819-DA9B78EB5818 v1

The edit menu essentially serves as an alternative to the context menu of the tree navigation paneland provides access to the following operations (see Figure 9):

• Adding an IED to the root of the navigation tree (the Add IED… menu item) with a user-providedname

• Auto-detecting IEDs on the network and adding them to the root of the navigation tree• Connecting all IEDs• Disconnecting all IEDs• Clearing the entire configuration (the Clear Tree menu item)

Section 3 1MRK512006-UENFunctionality



IEC202100009 V1 EN-US

Figure 9: ITT600 – Explore IEDs Edit menu

3.1.5 Tools menuGUID-B54CBB5C-ABED-4AFC-A582-8A907452A444 v1

The tools menu provides access to the following functions (see Figure 10):

• Launching of ITT600 – Explore Ethernet• Launching of ITT600 – Explore Models• Launching of ITT600 – Explore GOOSE• Launching of ITT600 – Explore SV• Options

IEC202100010 V1 EN-US

Figure 10: ITT600 – Explore IEDs Tools menu

3.1.6 ITT600 SA Explorer optionsGUID-A24CF3D5-15EB-4E7B-8CBB-0F91EF663E3A v2

The Options dialog allows the user to set different parameters related to operational behavior of thesoftware. The options dialog box contains six tabs where the user can set parameters on differentparts of ITT600 SA Explorer, namely:

• General• IED Simulation• Explore IEDs• Explore Ethernet• Explore GOOSE• Explore SV

General Options and Explore IEDs Options are elaborated in this part. Tool specific options aredescribed in their own dedicated sections.




General settings

GUID-ED809540-4A6F-4A09-B1AC-014CD857C3C8 V1 EN-US

Figure 11: General settings

The following parameters are tunable (see Figure 11):

• Network adapter: user can select available network adapters that are detected at the localcomputer. At least one network adapter should be selected to completely use all functionalitiesin ITT600 SA Explorer

• Language: User can set the preferred language• Files Directory: User can select the path to store ITT600 SA Explorer files• Display Local Time: User can choose to display local time (adjusted to local computer time) or

recorded (UTC) time• Display time in microseconds: user can choose the precision of time display• Display Customer Names of SCD File: Show the customer names in brackets after the logical

name (SCD file has to be reloaded to activate this setting)• Check for Updates at Startup: ITT600 will check if there is available new version at startup• Show Debug Log: Activating this parameter shows Debug and Logging Information in the overall

ITT600 SA Explorer window• Log File Path: User can define the path to store the log files• Logging Level: Select whether to do a minimum or complete verbose logging. Verbose logging

logs all the error, warning and informational logs.• Delete Log Files: Deletes the available log files.




Explore IEDs settings

GUID-01B6CEE5-67BB-428A-9A21-7AFCBF6675BF V1 EN-US

Figure 12: Explore IEDs

The following parameters are tunable (see Figure 12)

• Number of Event List Entries: User can define the number of event list entries and Prefer descattribute over ‘d’ or ‘dU’.

• View – Options: User are offered the possibilities to show the following information:• Show dynamic Dataset configuration• Expand Data Attribute list view• Include Data Attribute in tree view• Display logical Devices hierarchically

• MMS Client Timeout (ms): This setting can be used to set maximum time the user wants ITT600SA Explorer to wait for the reply from IED.

Depending on the load of the IED, it may need longer time to response to an MMSquery from ITT600 SA Explorer. When the time to wait for the IED’s responseexceeds the define timeout, ITT600 SA Explorer will send out the next MMS query.

• MMS File Transfer Wild Card: This setting enables user to define a filtering for all files to bedownloaded based on MMS query.

• Default TLS port: Default TLS port used to setup TLS connection.• MMS keepalive interval[sec]: Time interval after ITT will perform MMS 'status' or 'identify' service

query, depending which one is supported by an IED to keep MMS connection alive. It's disabledwhile set to 0.




• Default orIdent: Per default the orIdent is “ITT”, but it can be set to customer use.• Default BRCB ResvTms: Time in sec for BRCB reservation, see chapter "Working with Buffered

Reports".• Ignore Control Block states for commands: Allow to send commands despite Control Block state

(for testing purposes i.e. Trying to enable report without reservation)• Perform IED status checks on disconnect: Enable to perform status checking on disconnecting

from an IED, i.e test/test_blocked values.• Turn on replay analysis: Disable/enable Replay protection analysis. See "GOOSE replay

protection algorithm"• Time deviation[ms]: The time margin for timestamp check, see "GOOSE replay protection

algorithm"

3.1.7 Help menuGUID-2A613C02-88BA-47AA-BDBF-6B43FD1AF369 v1

The help menu provides access to the following operations (see Figure 13)

• Viewing the help file associated with the ITT600 - Explore IEDs• A legend of the used status colors (see also Figure 24)• Check whether software updates are available• Viewing the about screen

IEC202100013 V1 EN-US

Figure 13: ITT600 – Explore IEDs Help menu

For a detailed version overview click on the Assembly Versions button in the Aboutwindow.

3.1.8 Tree navigation panelGUID-E745F2AA-DDE7-46CD-890A-E47395447DD2 v1

The tree navigation panel provides a hierarchical view of an IED as defined in a SCD file or asdynamically generated from a connected IED.

It is separated in two different views:

• IEDs by Subnetwork- In this view, IEDs are sorted according the Sub- network they areconnected to. See Section "Tree View "By Subnetworks"".

• IEDs by Substation- In this view, the IEDs and LNs are sorted according to which part of aSubstation they belong to (usually a Bay). See Section "Tree View “By Substation”". This view isonly available if a SCD file was loaded. The substation layout related information cannot beretrieved from an IED online.

In general, this presentation provides a quick and easy way to navigate to specific objects within agiven configuration and is targeted primarily at users having some background knowledge of IEC61850 (see Section "References"). In brief, this navigation panel is useful when attempting to drill-down to a specific object within a configuration.

As an extra help to the user, a tooltip containing the functionality or the description of the element isgiven when the mouse pointer remains on a node. See Figure 14.




IEC202100014 V1 EN-US

Figure 14: Tool tips in the tree views

In addition to providing simple point-and-click navigation, the tree also exposes a large collection ofuser commands through its context-menus. To access the user commands available to a specificobject within a configuration, simply right-click on the object in the tree navigation panel.

Most of the ITT600 functionalities are accessible over content sensitive contextmenus.

At the top of the tree, there is a toolbar with following options:

• Navigate through previously selected tree nodes.• Group related tree nodes.• Change display options.• Search for tree elements containing specific text.

3.1.8.1 Tree View "By Subnetworks"GUID-46C1953F-8119-464F-9ADD-5E7DF039F017 v1

This view structures the IED’s according to the Subnetwork they are connected to. As a default, onlyIEC 61850 Networks (SCL type “8-MMS”) are displayed. By changing the Show only IEC 61850Networks state, all available Subnetworks will be shown. See Figure 15.

In case some of the IEDs are not linked to the Communication Section of an SCD file, those IEDs areshown in the “IEDs without reference to Communication Section” IED folder.

Depending on the node clicked and state of the underlying elements, the tree context menu maycontain following options:

• Adding a new IED to Subnetwork (the Add new IED to… menu item).• Removing the added IED from the navigation tree (the Remove… menu item).• Adding a SERVER to the added IED (the Add SERVER to… menu item).• Modifying a selected SERVER (the Edit SERVER… menu item).• Removing a selected SERVER from an IED (the Remove… menu item).• Clearing the entire configuration (the Clear Tree menu item).• Choosing naming style.




IEC202100225 V1 EN-US

Figure 15: Tree view by subnetworks

IEDs without a reference to the SCD communication section will be added to IEDsfolder called “IEDs without reference to Communication section”.

As default only IEC 61850 related networks (network name contains 8-MMS) areshown.

3.1.8.2 Tree View “By Substation”GUID-520A21A4-0914-43CF-8055-62671441DF56 v1

This view structures the IED’s according the Substation they are connected to. In case, some of theIEDs are not linked to the Substation Section of an SCD file, those IEDs will be shown in the IEDswithout reference to S/S section IED folder. See Figure 16.




IEC202100015 V1 EN-US

Figure 16: Tree view by substation (without and with customer names)

IEDs without a reference to the SCD substation section will be added to IEDs foldercalled IEDs without reference to S/S section.

In case an IED is referenced by more than one bay, the IED is shown in each bay. IEDs can beshown/hidden by the last button on the By substation toolbar.

A typical substation section can have the following subtree node structure:

• Substation level• Voltage level 1• Voltage level 2

• LN reference x• LN reference y• …• Bay 1• Bay 2

• Conducting equipment• LN reference• …

• IED




3.1.9 Get Started PanelGUID-2BA4625D-301E-4BF6-AB4B-F6EB34BE7353 v1

The Get Started panel is by default shown when ITT600 is started. This panel allows user to directlyaccess the recently opened documents, files or IEDs in ITT600. See Figure 17. Additionally, each ofthe block titles is a clickable shortcut to the relevant part of the SA Explorer.

IEC202100016 V1 EN-US

Figure 17: Get Started panel

3.1.10 Main panelGUID-AFC26924-D584-4103-9A59-BACCDBC3B845 v1

The Main panel displays information pertaining to the currently selected object in the configuration.Most object viewers are divided into two distinct areas as shown in Figure 18.

3.1.10.1 Object propertiesGUID-866CDF16-A86E-47D4-B7E3-A95EF44CF9FE v1

The header of the object properties area as shown in Figure 18 and Figure 19 provides the followinginformation about any selected object (from left to right):

• An icon followed by the type of object currently being examined• The name and path of the object being examined (where appropriate)• An icon indicating the connection status of the object being examined.

The remaining portion of the object properties area displays information describing the currentlyselected object and its child objects.




IEC202100017 V1 EN-US

Figure 18: The different areas of the ITT600 - Explore IEDs main viewer panel

IEC202100018 V1 EN-US

Figure 19: The header section of the object properties area

3.1.10.2 Dockable panesGUID-20AA81D7-F260-42F2-9CBE-DAC6FB941050 v1

All panels of the main window are dockable, user can arrange them according to his preferences (intabs, floating windows, unpinned panels, etc.). The layout is saved when ITT600 is closing. Mainpanel tabs can be rearranged to best display the required workspace. Dragging tabs to differentareas of the window will show an outline indicating where the window will be moved to. This includesplacing windows next to the edges of the main window, nesting inside of an existing window’s space,or adding the window as a tab in a new or existing list of tabs. See Figure 20.




IEC202100019 V1 EN-US

Figure 20: Moving a tab

Tabs and tab headers can also be right-clicked to bring up their context menu. This allows for closingtabs, switching them to floating windows, or turning on auto hiding when the cursor is no longer overthem. See Figure 21.

IEC202100020 V1 EN-US

Figure 21: Tab context menu

Double clicking an element on the tree will open a new tab for it. These tabs are not saved in layoutand will not be restored on next ITT600 run. See Figure 22.

IEC202100224 V1 EN-US

Figure 22: Main Panel Tabs

3.1.10.3 Object detailsGUID-E99170F1-A865-4AB0-8C03-42449EB33FED v1

The object details area varies depending on which type of object is currently being examined andprovides detailed information that relates to the selected object (an example can be seen on Figure23).




IEC202100021 V1 EN-US

Figure 23: Various object detail panels

3.1.11 Coloring rulesGUID-E0E8A859-B6E1-4BCA-9B15-91956C203FC6 v1

ITT600 – Explore IEDs uses different colors to show the state of IEDs contained in the tree view.

To get a list of the different colors, click on the Tree Navigation color Legend in the Help menu. SeeFigure 24 and Table 2.

GUID-D8C72DC4-4D6E-4686-9634-53D08F0C6D81 V1 EN-US

Figure 24: Legend of used colors in ITT600 – Explore Ethernet




Table 2: Detail legend of the used colors in ITT600 – Explore Ethernet

Online and in SCL Data is available online (from a connected IED) and fromthe loaded SCD file.

Only available in SCL The data is only available in the SCD file, but not in aconnected server.

Only available online The data is only available in the connected server, butnot in the SCD file.

Misconfigured Something in the configuration is wrong. This mighthappen if a value cannot be read from a server.

Invalid state Indicates a node that has an invalid state and is neitherconfigured in the SCL nor in the server (should notoccur).

Report enabled An enabled RCB (only RCBs that are enabled from ITT)

Report enabled by other client An enabled RCB instance by other client

Report was once enabled A RCB that was once enabled is colored differently.

Simulated The IED is currently simulated

Simulation not possible It is not possible to simulate a selected IED. This couldbe caused by an IP Address conflict in the network (e.g.another IED with the same IP Address is already online)

Undefined Any other state apart of the described states here

Unsupported must understand element It is used to indicate unknown Must Understand elementas defined in IEC 61850 Edition 2

3.1.12 Debug and logging informationGUID-F01F0FC6-AE90-41F3-9E97-A17F4C79FE7D v2

The bottom area of the ITT600 - Explore IEDs provides access to the debug log. To display debuginformation while the application is running simply check the Show debug log from the Tools –Options Main menu (See Figure and Figure). The log window can be cleared by clicking on the Clearlog list button.

ITT600 SA Explorer allows user to define the verbosity of the logging information. A description onhow to configure the output is provided in Section "Debug and trace output configuration".

All the information that is shown in the debug log is also saved as log files. Depending on theverbosity of the logging, the size of these files can get quite big. At start-up of ITT600 SA Explorerthe size of the log files is checked. In case the size of all files exceeds 100MB, the user will beprompted to delete the old files.

The log files can also be deleted manually by selecting the Delete old log files fromthe options menu.

GUID-309981AF-B201-49E5-ACC2-288471E5426F V1 EN-US

Figure 25: Debug information controls

The debug information window allows filtering of specific message types by filter options (Figure) oneach collumn and search logs containing specific text (custom complex filters are supported).




3.1.13 Working with IED configurationsGUID-D02002CF-954F-4F73-9767-747A6F218743 v1

There are two primary methods for working with IED configuration within the ITT600 – SA Explorer(see the following two sub-chapters):

• Browse an existing configuration by opening a SCD file Section "Working offline".• Dynamically discover a connected IEDs configuration Section "Working online".

3.1.13.1 Working offlineGUID-07E5AB4E-54A9-454B-A762-543C5C97F4B2 v1

Here is a simplified example of working with a SCD file. The sample SCD file used in this example isincluded with the installation and can be found in the following location:

[InstallDir] /Samples /SCD Files /DemoSysA.scd

Open an SCL fileGUID-344FF21D-D216-4196-8A25-5C564B203AD7 v1

To open an SCD file corresponding to the configuration you wish to work with, select Open SCDfile… from the File menu. If you have already opened a SCD file earlier, select the recently openedSCL you like to work with from the Open Recent list under the File menu. See Figure 26.

IEC202100025 V1 EN-US

Figure 26: ITT600 – Explore IEDs loading a SCD file

After selecting the SCD file, a busy mouse pointer will be shown and the file will be loaded.

Loading a SCD file can be time consuming. A busy mouse pointer is shown duringthe loading phase.

Signed and encrypted filesGUID-16C6E5A3-0FBD-4CB8-A538-610E0B473FEA v1

Signed files are partially supported - only non-encrypted files can be opened. If the file has asignature, ITT600 will log a warning in the notifications panel that the signature cannot be verified. Inthe case of encrypted files, a warning dialog will be shown that file is encrypted and cannot beopened and an error will be logged in notifications panel.

Explore an SCL fileGUID-2238E3EC-BCB5-4443-A59C-9AFDF4F722F1 v1

Once the SCL file is opened, you can expand the entire tree navigation panel by right-click on an IEDand selecting the Expand all nodes item. You can navigate to the various objects of interest bysimply selecting the object in the tree navigation pane. See Figure 27.

Depending on the selected tree view, the structure of the file will be shown either from acommunication point of view, or from a substation layout point of view.




IEC202100026 V1 EN-US

Figure 27: ITT600 – Expanding the Tree view

All nodes in the Tree represent IEC 61850 related data. The display will not differ between online andoffline values. See Section "Working online" for detailed description of different display options andvalues.

The Dataflow ViewGUID-62C8261F-790F-49D9-95EA-E0E4D722B5EB v1

The Dataflow view is a graphical representation of the Subnetwork tree combined with the Substationtree plus information about the data flow between IEDs.

The view is shown in a separate tab. See Figure 28.

GUID-7F19EC42-ACFA-4A02-89C2-CF1E8E2C8088 V1 EN-US

Figure 28: Data Flow view tab

RepresentationGUID-CABE6B7A-1005-4BEE-987E-BE6CBFF88BC7 v1

All IEDs from the selected Subnetwork are shown as green boxes, including information about theIED (see Figure 29):




• The IED Name (Bold)• The IED Type• The IP Address of the IED• The Description of the IED

IEC202100028 V1 EN-US

Figure 29: IED information

The IED information is taken from the loaded SCD file. In case the information ismissing or unattractive, it has to be changed in the SCD file accordingly.

Arrows between the IEDs show the data flow. An arrow ending at an IED shows the received data.An arrow starting at an IED shows the information sent by the IED. Color legend of the arrow isshown as follows:

• Green: GOOSE• Magenta: Buffered Reports• Yellow: Unbuffered reports• Blue: Sampled Values

FilteringGUID-7EA9E281-DB1F-41A0-80B0-5B5244FBCEDB v1

Depending on the applied filters, more or fewer communication service types are shown. Eachservice can be switched on and off using the buttons in the Toolbar. See Figure 30.

GUID-774BD6DD-752A-4E0D-9EF8-A9D3F81E0B49 V1 EN-US

Figure 30: Filters

The “String Based Filter” is using the data set names to apply its filter. The ‘*’ character is used aswild card. For example:

StatUrg* is showing all communication related to any DS where the name starts with “StatUrg”.

String Based Filter is using the DataSet Name for its filter criteria.

Vlan dropdown list is visible when it's more than one vlan in selected subnetwork. Vlans selected onfilter are highlighted.

ZoomingGUID-CEB25EE2-45FF-43D7-96EA-18315D131FC8 v1

The Diagram can be zoomed using the Toolbar Button or pressing Ctrl and moving the mouse wheel.

Moving elementsGUID-C30CD593-C7A3-4681-823F-2114FA4219B4 v1

Diagram elements such as IEDs or entire Bays can be moved by dragging and dropping the selectedelement on a new position.

IEDs can only be moved inside the Bay they belong to.

NavigationGUID-2A4DD15F-E7D1-450A-80F8-BF8ADC0E9850 v1

The diagram can be used to navigate in the Subnetworks tree.




Clicking on an IED changes the view in a way that only related IEDs are shown. All other IEDs aregreyed out. The clicked IED is selected in the Subnetworks tree.

Right clicking on a communication arrow, shows a context menu that can be used to select thechosen DS in the tree view. See Figure 31.

IEC202100030 V1 EN-US

Figure 31: Navigating to a DS

The DS is only selected in the Subnetworks tree, but the view does not automaticallychange to the object details.

Fault simulationGUID-D05DCFFA-2A44-4C31-8713-BEBE74935CE0 v1

The diagram can be used to visualize the impact of a failing IED.

An IED can be set as Failed, all dependent IEDs are marked as affected. Right click on an IED tosimulate a failure. See Figure 32.

IEC202100031 V1 EN-US

Figure 32: Simulate a failed IED

Right click on an IED to simulate it as failed.

The failed IED is show in red, all affected IEDs are shown in orange. See Figure 33.




IEC202100032 V1 EN-US

Figure 33: Failed and affected IEDs

Combination with Quick CheckerGUID-240E70AB-3238-443C-98CD-6DBC06720A01 v1

Quick checker results are also show in the diagram. The check has to be performed from within thequick checker control (see Section "Quick Checker").

Quick checker results are shown in the Dataflow diagram.

3.1.13.2 Working onlineGUID-70326EE0-B28F-4FBB-8A04-36FBBB41E07B v1

Connect to IEDs and SERVERsGUID-9C7FE3F8-2C78-456D-8F41-48F1834B94C1 v1

To connect to various IEDs and SERVERs, user can select from the following options:

• Select Connect All IEDs in... from the subnetwork context menu either with or without enablingreports (see Figure 34).

• To connect one IED and its Servers, select Connect... from IED context menu.• To connect a Server, select one of the Connect... options from a SERVER context menu (see

Figure 35).




IEC202100033 V1 EN-US

Figure 34: Connect to all IEDs and Enable Reports

IEC202100034 V1 EN-US

Figure 35: Connect to a SERVER of an IED

ITT600 – Explore IEDs will use the defined Address parameters for the connection. A descriptionhow to change the various address details can be found in Section "Dynamically add IEDs to theconfiguration".

To specify different address parameters or Authentication Password, select EditServer prior the connection attempt.




While the ITT600 - Explore IEDs connects to all IEDs a progress bar will be displayed – see Figure36.

IEC202100035 V1 EN-US

Figure 36: ITT600 progress bar

During the connection phase, all MMS variables are browsed, the type information and the actualvalues are retrieved. The time it will take depends on the configuration of the IED and the differentIED types.

No Reports are enabled. To obtain spontaneous data change from an IED, reportsneed to be enabled (see Section "Manually update values from an IED").

Connect SERVER as a specific clientGUID-0B8CED67-1885-4D8B-894C-9E1C20B7B549 v1

Connecting the SERVER as specific client will automatically enable all reports associated with thatclient (see section "Spontaneous update of values" for more information about reports).

IEC202100036 V1 EN-US

Figure 37: Connect as a specific client

Connect to an IED over TLSGUID-CFF8C282-44DC-4611-96CB-F2E130244929 v1

GUID-F0BD33C1-132B-4147-AF3E-06CD1C507E10 V1 EN-US

Figure 38: Configuring TLS connectionTo connect with IED over TLS proper configuration must be set on an IED. Selecting an IED in thenavigation tree will show TLS configuration panel:




User has to be aware about specific IED TLS required settings, certificates etc.

In the panel user should:

• Add required client certificates in correct order• Protocols: select correct supported protocols• TLS port (0 – default TLS port from ITT main options will be used)• Local IP: if required, IP address will be set on an NIC• Server Name: if required by an IED validation

Connection keep alive mechanismGUID-8D681848-4B8D-4328-9B07-1C82AEEB3A55 v1

ITT600 allows enabling the MMS keep alive mechanism for an IED after client inactivity closes theconnection. In the ITT600 main options -> Explore IEDs -> MMS Client Configuration section, keepalive interval can be set (with 0 as disabled). If enabled ITT600 will periodically perform an MMS'status' or 'identify' service query, depending on which one is supported by the IED. Each MMS keepalive query is logged in notifications panel. In case neither are supported, ITT600 will log a warning inthe notifications panel.

GUID-5446E9A1-7454-418D-AFF6-A932A35EAF38 V1 EN-US

Figure 39: MMS keep alive notifications

The Keep alive notifications are logged when Verbose logging level is set in ITT600main options

Explore a connected IEDGUID-E468E8B3-7D85-40FC-B7F3-54E5590A3DE6 v1

Once the IED (or SERVER) has been successfully connected, you can click on various objects toview more detailed information. For instance, click on the Pos Data object located under the SCSWI1logical node of the LD0 logical device. See Figure 40.

IEC202100037 V1 EN-US

Figure 40: Exploring an IED

Simulate this ServerGUID-6D5DCE98-84C3-4162-8A36-628AD4631F97 v1

In general, ITT600 SA Explorer provides the functionality to simulate one IED. For details, seesection "IED simulation".




Open Device Web InterfaceGUID-165F7C78-D667-428F-827F-5A68947E913E v1

The Open Device Web Interface context menu is used to automatically launch the connected deviceweb interface (for each server) in the local default web browser if the device has a web interface.

Change attributes of the IEDGUID-ABFB0CA4-D669-4F2A-8BB2-D8CADA90A66D v1

Depending on the functional constraint of the data attribute you click on, various modifications arepossible. If you double click a writeable data attribute, you can enter a new value for it, or pick onefrom the dropdown menu (if available).

Hitting the Enter key or the Write Button will write the value to the IED, the Escape key or the CancelButton will cancel your changes. See Figure 41.

IEC202100038 V1 EN-US

Figure 41: Changing a value of an IED

Depending on the type and FC of the data attribute you are attempting to change, various inputmethods will appear upon the second click of a given data attribute (provided the data attribute iswriteable).

Data with functional constraint CO (Control) cannot be written/edited as shown inFigure 43. To write CO values, a Control Dialog will be displayed as shown in Figure42. See "Commands".

IEC202100039 V1 EN-US

Figure 42: Changing different data types

Changing a value is not persistently saved in the IED. After restart of the IED yourchanges are lost. To save them persistently, you have to change the IEDconfiguration file and reload the IED. This task will be different for different IEDtypes.

It is up to the IEDs implementation whether to allow write operations or not. In casethe IED does not allow such operations, an error message is logged in the Debugoutput section (like objectAccessDenied). These messages are generated by theIED.

Editing Setting Group valuesGUID-77FC0D5D-18AC-4C00-908C-C6422021608E v1

Setting group values can be changed using IEC 61850 defined Services. The data and services areavailable in the Setting Group Control Block (SGCB). This control block is located in the LLN0. SeeFigure 43.




Editing of Setting group values is not supported by all IEDs.

IEC202100040 V1 EN-US

Figure 43: SGCB of an IED

Changing Active Setting GroupGUID-AC586A17-F24A-4105-9849-6AF2F923E340 v1

To change the active Setting group, the corresponding value (ActSG) of the SGCB has to bechanged. See the following figure.

IEC202100041 V1 EN-US

Figure 44: Changing the active setting group

Editing Setting Group valuesGUID-6DF1BBCF-CB71-4322-BC31-7732E745E971 v1

To edit individual values of a Setting group, this group has to be copied to the edit buffer. This isachieved by setting the EditSG value of the SGCB to the desired value. See Figure 45.




IEC202100042 V1 EN-US

Figure 45: Selecting the active Setting Group to be changed

Now individual values can be changed. See Figure 46.

IEC202100043 V1 EN-US

Figure 46: Changing Setting Group values

The three columns show the following values:

• Active SG: The value of the currently activated SG.• Editable SG: The current value of the SG being edited.• New Value: The new value that shall be assigned.

Changes to the values have to be confirmed with a Confirm Edit Setting Group Service. Thisensures that all values have been accepted by the IED and are switched over at once.

To finally write new Setting group values to an IED, the Confirm Edit SG ValuesButton needs to be pressed.

Simulated IEDs do not support editing SGCBs.

CommandsGUID-9C0AC901-97A1-41AF-9B53-CC06F8634774 v1

Depending on the Control Model of a CDC a different control dialog will be shown.

Select Before Operate commandGUID-6325439D-4397-432A-A58D-B854CCDF59DC v1

To operate a switch controlled by a real IED, a Select-Before-Operate (SBO) sequence has to besent to the device. This function is available from the Switch Control Dialog. See Figure 47.




IEC202100044 V1 EN-US

Figure 47: Switch Control (Select Before Operate) dialog

Basic viewGUID-FC9267F5-C1C4-4B61-B7DD-C2DDC162C429 v1

In the basic view, simple commands like Open and Close can be sent to the IED. Clicking on OpenSwitch or Close Switch will actually send a select (SBOw) command to the IED. After a positiveconfirmation an Execute dialog will pop up. By pressing Execute, operate (Oper) command is sent tothe IED.

Advanced viewGUID-B14E50C3-045D-4429-BC4C-5342E6202E20 v1

The advanced view lets the experienced user change additional parameters. See Figure 48.

IEC202100045 V1 EN-US

Figure 48: Advanced features of the SBO command dialog

IEC 61850 OrCat and OrIdent define the origin of the command. Default values are station controland ITT.

Setting the Test flag indicates a test command.

Removing the Synchro Check flag will bypass the synchrocheck functionality in the IED.




Overriding synchrocheck in a real station might cause severe damage to the primaryequipment of the station!Use this feature with extra caution!

Removing the Interlock Check flag will bypass the interlocking calculation in the IED (if supported bythe IED).

Overriding interlocking in a real station might cause severe damage to the primaryequipment of the station!Use this feature with extra caution!

Setting the Continue after neg. resp. causes the dialog to show the Execute sub dialog although theselection command was confirmed negative. By using this feature, the behavior of an IED can beverified despite the selected command was not accepted.

Direct commandsGUID-CD426116-E4DB-43C0-8A2E-BB336212F04F v1

The Direct Command dialog looks slightly different to the SBO Command Dialog. See Figure 49.

IEC202100046 V1 EN-US

Figure 49: Direct command dialog

In this dialog there are less options available. Depending on the data type of the control value(ctrlVal) the input box changes to a drop down list for Boolean values.

Issuing Commands without caution in a real station is dangerous!Use this feature with extra caution!

Manually update values from an IEDGUID-8BA4C006-1A46-4390-B150-919C6494832C v1

The values are not refreshed in the GUI automatically. To refresh the view, the values have to beread from the connected server. To do this, simply right click on the object you want to refresh andclick on the Refresh or Refresh all option in the context menu. See Figure 50.




GUID-B5A1DE68-E8FC-4FD7-8896-7FDC1C0BB86A V1 EN-US

Figure 50: Refreshing a value

Refreshing content of a SERVERGUID-35AE09B4-0657-48DF-AF7E-D3F3110A4AFD v1

It is also possible to refresh the whole content of a server with the Refresh this server’s contentscommand. See Figure 51. This command will re-read all values from the server, thus this commandmight take some time.

IEC202100048 V1 EN-US

Figure 51: Refreshing the whole SERVER

Spontaneous update of valuesGUID-496A94A4-D150-453B-AD7E-1B69A0AD405A v1

All spontaneous data changes in an IEC 61850 compliant IED are sent to clients in so-called reports.There are two different report types: buffered and unbuffered (for details see Section "References").With the ITT600 SA Explorer both types can be controlled.

The following three steps are necessary to set up the reporting:

• Configure the Report control block (RCB)• Enable the report• Start a general interrogation (optional)

An unbuffered report will be set up as follows: Select an URCB (rcb_A from the LLN0 of P2KA1C1 inthis example) and click the Reserve URCB button.




Enabling reports interferes with the SA system the IED is connected to. ITT600 –Explore IEDs acts as every other IEC 61850 client. For instance, if only three Clientscan enable reports (this is a setting of the IED), ITT600 – Explore IEDs will use oneof these client instances. In case there are already three clients that have enabledthe report, it will not be possible to enable it by ITT600 – Explore IED.

When reports are enabled, all spontaneous updates are also logged in the process event list (seeSection "Process Event List" for details).

Working with Unbuffered ReportsGUID-46EB6483-878C-42AD-9E8B-6135C4A69F13 v1

Unbuffered reports have to be reserved for most of the operations. See Figure 52.

The URCB has to be reserved for the following operations as shown in Figure 53.

To reserve the URCB, simply click on the Reserve command button.

If an RCB is already used by another client, it cannot be used with ITT600 – ExploreIEDs. In this case, the command buttons will be disabled (grey).

Select the trigger options in the Control Block Options and change them to your needs or simply usethe default settings.

The data_set_name should always be included in order to decode the report.

GUID-42316878-53A1-433E-BCE9-7DEFFFBE41F2 V1 EN-US

Figure 52: An Unbuffered Report Control Block




GUID-430374BD-DAC9-44D9-893C-F1D5FBFE24D3 V1 EN-US

Figure 53: Changing options of an URCB

Next, enable the URCB by clicking the Enable button.

The color of an enabled report will change. See Section "Coloring rules" for a detailed list of allavailable status colors. See Figure 54.

GUID-51E4B9A6-8458-4B7A-BB47-7B368D2038FE V1 EN-US

Figure 54: Enable the URCB

Finally, to update all values, click the Start General Interrogation button. To disable the report, clickDisable and Release.

Received reports are displayed in the process event list (see Section "Process EventList" - for a detailed description). They will be logged and automatically update thedata contained in the report if the received values differ from the values currentlystored in the internal data model.The object details will be updated automatically as well.




Working with Buffered ReportsGUID-03A51366-AB6B-4630-BD4B-7A428E9FF0D2 v1

Buffered reports are very similar to unbuffered ones. To find out more about the differences, seesection "References". See also Figure 55.

GUID-44047B4E-61B3-4D5B-AA38-E3BAA653475C V1 EN-US

Figure 55: A Buffered Report Control Block

If the IED is IEC61850 Ed. 2.1 and ReportSettings service resvTms is 'true', ITT600 allows to reservethe BRCB:

GUID-E46C86CD-E759-4204-AAA3-A832D38A0966 V1 EN-US

Figure 56: BRCB with reservation commands

The default time for BRCB reservation is set accourding to ITT600 main options -> Explore IEDs ->Command handling section. The ResvTms is how many seconds the BRCB will be reserved for afterdisconnecting the client.




The IED is keeping BRCB reserved after client disconnection when the client will notrelease it before, otherwise the BRCB can be reserved by another client. ResvTmsvalue 0 indicates that BRCB can be reserved, any positive value indicates that it isreserved by the client. For more information please refer to the IEc61850 Part 7-2(2010; Edition 2)

Enabling All Reports of a SERVERGUID-2B7D9C6E-C328-4018-849F-D9D1B9439C30 v1

There is a simple way to activate all reports of a connected SERVER. The context menu of aSERVER contains an entry Enable all possible RCBs nested within the Enable reports entry.

This function will also automatically issue a General Interrogation command to the connected server.See Figure 57.

IEC202100053 V1 EN-US

Figure 57: Enable all possible reports of a Server

Only one instance of each report is enabled (one report per different datasets). Toenable the same report more than once, this has to be done manually.

Disabling All Reports of a SERVERGUID-6E625A72-8971-4899-B273-4CF2196FB164 v1

To disable all reports of a connected SERVER, simply use the context menu of a SERVER - Disableall Reports. See Figure 58.




IEC202100054 V1 EN-US

Figure 58: Disable all possible reports of a Server

3.1.13.3 Dynamic Data SetsGUID-53E9E660-9D9C-4FC3-B9DC-4C896D4714E2 v1

Some IEDs offer the possibility to create dynamic datasets while you are connected to the IED.These datasets can be connected to URCBs and corresponding events can be generated.

If this functionality is available on an IED, a menu entry is visible in the context tree menu of theITT600 SA Explorer. See Figure 59.

IEC202100055 V1 EN-US

Figure 59: Create dynamic data sets

This functionality is only executable in online mode!You must be connected to an IED which supports this function.

This functionality only supports non persistent data sets!

Activating the menu item Create dynamic data sets.. opens the following window. See Figure 60.




IEC202100056 V1 EN-US

Figure 60: Dynamic data sets creation form

The window contains the following items:

• Data tree: selectable DO/CDC objects. CDC objects can be assigned to data sets.• Data filter: filter option for selecting different kind of CDC items (e.g. show all Pos items).• Arrow buttons: buttons for adding/deleting DS/DS entries to/from the internal configuration.• Predefined RCBs: tree view of predefined RCBs/configured DS with DS entries.• Write to IED buttons: buttons for applying the internal configuration to the IED• Selection of tree items. In the CDC tree view, multiple selection of tree items is possible. See

Figure 61.• Status of CDC Objects. CDC items which have been assigned to a DS are shown in green. See

Figure 62.• Status of RCB/DS/DS entries. Items added to the internal configuration, but not yet written to the

IED, are shown in green. Items already written to the IED are shown in black. Modified items areshown in blue. Removed items are shown in red with strikethrough.

Pre-configured, empty URCBs must exist on the IED to add DS and DS entries. SeeFigure 61 and Figure 62.Only one DS can be assigned to an URCB!




IEC202100057 V1 EN-US

Figure 61: CDC tree view with multiple selection

IEC202100222 V1 EN-US

Figure 62: CDC tree view: CDCs assigned to DS




IEC202100058 V1 EN-US

Figure 63: RCB tree view with new created DS entries

IEC202100059 V1 EN-US

Figure 64: Subnetwork tree view with new created data sets

Dynamic data sets are automatically named ITT- DynDSxxx to avoid duplicatenames.

The creation of a dynamic data set consists of two steps:

• Add the data set with entries to the ITT600 internal configuration• Write the internal configuration to the IED

The deletion of a dynamic data set consists of two steps:

• Delete the data set from the ITT600 internal configuration• Write the internal configuration to the IED

Adding Data Sets to the internal configurationGUID-46F47506-B8E1-46D3-A96A-22C5E9D393EF v1

Selecting items in the DO/CDC tree view and pressing one of the right arrow buttons adds the DSentries to the internal configuration.

Deleting Data Sets from the internal configurationGUID-FCF534CE-DCBB-4FE0-B95A-965217CBC13B v1

Selecting items in the RCB tree view and pressing one of the left arrow buttons deletes the DSentries from the internal configuration.

Writing Data Sets to the IEDGUID-350F3EF0-5322-4AF2-8FE7-345B957B4444 v1

There are two buttons which allow to write internal configuration to the IED. These button can befound above RCB tree view. See Figure 65.




IEC202100060 V1 EN-US

Figure 65: RCB tree view menu

Status of successfully enabled RCBs and written DSs is shown in black. See Figure 66.

IEC202100061 V1 EN-US

Figure 66: RCB tree view with a DS written to IED

After this operation, the updated URCBs must be enabled in the Subnetwork/Substation tree view!

Deleting Data Sets from the IEDGUID-44158C30-47F5-4296-AC7F-A87323BE6C68 v1

First delete the data set from the ITT600 internal configuration, then write the internal configuration tothe IED. See Figure 67.

IEC202100062 V1 EN-US

Figure 67: Deleting Data Sets from the IED




Export Data Sets to SCDGUID-1C5F4F62-3070-44C3-AEF1-25BE3DF42969 v1

New created data sets can be saved to an SCD file (see Section "Exporting IEDs to an SCD file").

Disconnecting from ServerGUID-85386C0C-DD13-46A9-882F-2F89DDF0F834 v1

When disconnecting, all created data sets will automatically be deleted.

3.1.13.4 Read VMD Specific Variables of an IEDGUID-F613CCB1-BC00-4B42-AB1E-EAF5B480317F v1

VMD specific variables are MMS variables that are not in the scope of IEC 61850 objects. SomeIEDs provide status information that is mapped to such variables.

To read those variables from an IED, select Read VMD Specific Variables from the Server’sContext Menu. See Figure 68.

IEC202100063 V1 EN-US

Figure 68: Read VMD specific variables of a Server

Not all IEDs might support VMD variables. It is vendor specific Information that is notin the IEC 61850 scope.

VMD specific variables are not updated automatically. To refresh those variables, fetch them againfrom the IED. See Figure 69.




IEC202100064 V1 EN-US

Figure 69: VMD specific variables display

3.1.13.5 Working with files (MMS file Transfer)GUID-1552959E-1FAC-495D-B5B1-2606FADC71A0 v1

Files contained in SERVER can be retrieved by ITT600 – Explore IEDs. It depends on the IEDwhether this service is supported. Furthermore, it also depends on the IED which files are availableover MMS file transfer.

Usually only disturbance recorder files, but no configuration files can be retrieved with MMS Filetransfer.

If an IED does not support MMS file transfer, it might support FTP protocol. SeeSection "Embedded FTP Client" for information how to use ftp within ITT600 -Explore IEDs.

An IED supporting MMS file transfer will show a specific user control when the MMS file transfernode is selected in the tree view. See Figure 70.

IEC202100065 V1 EN-US

Figure 70: MMS file transfer component




All possible file operations are available over a context menu, or the control buttons. See Figure 71.

IEC202100066 V1 EN-US

Figure 71: The MMS file transfer commands

The MMS file transfer node is only shown, if the IED supports MMS file transfer.

To get files from the IED, select a file and click the Download button or the Get file context menuentry.

Deleting files from the MMS Server might be limited. If the file delete service is not supported, theDelete button will be disabled.

Delete File is not supported by all IEDs or on some IEDs only the oldest file can bedeleted.

MMS File transfer is only supported from an IED to ITT600 SA Explorer. No files canbe uploaded to an IED.

3.1.13.6 Process Event ListGUID-CCDBFC79-3198-4193-85D7-653E9C7A8227 v1

Changes in process values (also called events) are received by IEC 61850 reports. The changes andcommands sent from ITT(with different background) are logged in the process event list as shown inFigure 72. To switch to the event list, select the Process Events tab.

Only changes will be logged in the Event List. The list will not be saved persistently when ITT600 –Explore IEDs is closed. However, it is possible to save the received values into a Microsoft Excel©spreadsheet.

It is also not the intention of this list to have long term storage for updated process values, it shouldrather support the user during troubleshooting sessions.

Only a value change will be logged. Value updates (with the same value) are notlogged.




GUID-3F2694BB-7DB1-4A32-81C2-0700947853FB V1 EN-US

Figure 72: The Process event list

Help on how to set up reporting is described in Section "Spontaneous update of values".

The list is divided in 12 columns and has a toolbar providing some additional functionality. Theexplanation of each column is presented in next table and Figure 73.

The list can be exported to an Excel file by pressing the button Export to Excel.

The list can be cleared by pressing the Clear List button.

The substation related information is only filled if the IED is connected to asubstation/voltage level.

The most recent event can be selected by pressing the button Show mostrecent event.

The substation related columns can be shown/hided by pressing the button Show/hide functional names.

The auto sizing of the columns can be enabled/disabled by pressing the button Toggle auto / manual column sizing.

By pressing the right mouse button in the event list tab, you can navigate to the

selected item in the active tree view.

The list is limited to 20000 entries! Once the limit is reached, new events will not bedisplayed in the list. However, the values are still updated.




Table 3: Event list column description

Column Name DescriptionNo. A sequential event number

Info Additional information about the event: Q = Bad qualityof the logged DOT = Time quality bad of the logged DO

Timestamp The timestamp of the DO (tagged in the IED)

Source IED The IED that sent this event

Substation The substation this DO belongs to

Voltage The voltage level this DO belongs to

Bay The bay this DO belongs to

Conducting equipment The conducting equipment this DO belongs to

IEC 61850 Path The IEC 61850 designation of the DA

Description A textual description of the DA. Taken from

• The “d” Attribute of the DO• The SCL desc of the DA (if available)• The SCL desc of the DO (if available)

Value The value of the DA

Client The associated client

IEC202100074 V1 EN-US

Figure 73: The Process event list details

3.1.13.7 Security Event ListGUID-9E395F7F-9F1D-49D1-A0C0-0F584C382E2A v1

The IEC 61850 LN GSAL is used to make security related activities available. In case reports withGSAL content is received, this information is presented in a specific list.

To view the captured security events, change to the tab Security Events. See Figure 74.

Only a value change will be logged. Value updates (with the same value) are notlogged.





The list is divided in several columns and has a toolbar providing some additional functionality. SeeFigure 75.

IEC202100075 V1 EN-US

Figure 74: Security events list tab

IEC202100076 V1 EN-US

Figure 75: Security events list content

Table 4 provides information that is contained in the security events list. The description of the toolbarbutton features can be found in section Process event list.

Table 4: Security Event list column description

Column Name DescriptionNo. A sequential security event number

Timestamp/Timestamp(local) The timestamp of the DO (tagged in the IED)/The sametimestamp displayed in user's local time(depends onoptions configuration)

IED The IED that has sent this event


Voltage level The voltage level this DO belongs to


Conducting equip- The conducting equipment this DO belongs to


Event Text The resolved security event text

addInfo The content of the DO attribute addInfo

User Name The resolved user name of the DO attribute addr

IP Address IP address of the source

Cnt The security event counter index





Column Name DescriptionSev The severity of the security event

Description A textual description of the DA. Taken from


3.1.13.8 Point Value ListGUID-92AA25BD-D83D-49BF-863D-1568D23A2344 v1

Process values are shown in the Point Value List Tab. Values are automatically updated. Only valueswhich belong to the selected Tree view object’s scope are displayed. To switch to the point value list,select the Point Value List tab.

Only updateable values will be displayed in the point value list. The list will not be saved persistentlywhen ITT600 - Explore IEDs is closed. However, it is possible to save the received values into aMicrosoft Excel © spreadsheet.

It is also not the intention of this list to have long term storage for updated process values, it shouldrather support the user during troubleshooting sessions.

Only updateable values are displayed i.e. values for which reporting has beenenabled.

IEC202100077 V1 EN-US

Figure 76: Point Value list


The list is divided into 14 columns and has a toolbar providing some additional functionality.




IEC202100078 V1 EN-US

Figure 77: Point Value list details

Table 5: Point Value list column description

Column Name DescriptionNo. A sequential security event number

Timestamp/Timestamp(local) The timestamp of the DO (tagged in the IED)/The sametimestamp displayed in user's local time(depends onoptions configuration)

IED The IED that has sent this event


Voltage level The voltage level this DO belongs to


Conducting equipment The conducting equipment this DO belongs to


Event Text The resolved security event text

addInfo The content of the DO attribute addInfo

User Name The resolved user name of the DO attribute addr

IP Address IP address of the source

Cnt The security event counter index

Sev The severity of the security event

Description A textual description of the DA. Taken from- The “d” Attribute of the DO


The list can be exported to an Excel file by pressing the button Export toExcel.




The substation related information is only filled if the IED is connected to asubstation/voltage level.

The substation related columns can be shown/hided by pressing the button Show/hide functional names.

The auto sizing of the columns can be enabled/disabled by pressing the button Toggle auto / manual column sizing.

By pressing the right mouse button in the point value list tab, you can navigate to the

selected item in the active tree view.

You can toggle on/off the refreshing of the Point value list by pressing this button.When the refreshing of the list is off, the values are no longer automatically updated.

3.1.13.9 Embedded FTP ClientGUID-56D9E689-8FA8-465B-A0BC-B498757C7513 v1

Obtaining files from an IED might also be possible using the FTP protocol. However, this functionalityis not part of IEC 61850 and is not mandatory for all IEDs.

When a Server node is selected in the Tree view, the FTP Client control is shown in the lower rightarea. See Figure 78. To connect a FTP server, a password is required. The username and passwordhas to be provided in the following connection dialog as seen in Figure 79. If the Username is leftblank, anonymous login will be used. After successful connection, all FTP commands are availablevia the command buttons, or the context menu. See Figure 80.

IEC202100080 V1 EN-US

Figure 78: FTP Client




IEC202100081 V1 EN-US

Figure 79: FTP Username and password

IEC202100082 V2 EN-US

Figure 80: FTP Client Post-Connection

The default directory where the files are saved locally is [installation dir]\ABB\ITTSAExplorer\Files\[IED Name].

The FTP server’s response is not standardized. It might happen that some Serverscannot be connected using this FTP client.

3.1.13.10 Dynamically add IEDs to the configurationGUID-BA4DBA19-9212-475A-914B-130F06C3F9D1 v2

The ITT600 - Explore IEDs also has the ability to dynamically generate the configuration of aconnected IED without having the corresponding SCD file for it.

Right-click on the tree navigation panel and select the Add IED… item. See Figure 81.




IEC202100083 V1 EN-US

Figure 81: Adding a new IED to the tree

Enter a meaningful name for the new IED and click OK. See Figure 82.

GUID-0EAD7460-E022-4CCB-85B0-0A07B73472F2 V1 EN-US

Figure 82: Adding an IED

To communicate with an IED, a SERVER has to be added. The add dialog contains section for serverinformation. See Figure 83.




GUID-0EAD7460-E022-4CCB-85B0-0A07B73472F2 V1 EN-US

Figure 83: Adding a Server to an IED

Enter the IP address of the IEDs main server, a Server name and click OK.

Additionally also detailed address parameters could be specified. Otherwise default parameters areused (see Section "ITT600 – Explore IEDs Default Address Parameters" for more details on theaddress parameters. See Section "Changing OSI address parameters" on how to change theaddress parameters).

To show the SERVER details, press the Addresses expander button. See Figure 84.




GUID-969760FA-1A00-4DC6-9E83-9BCAB5D94BC3 V1 EN-US

Figure 84: Server details

A Subnetwork is automatically generated, and the IED is added to the Subnetwork.To add an IED to an already existing Subnetwork, the Subnetwork has to be selectedbefore clicking the Add IED menu item.IEDs can only be added to a Subnetwork node.

See Section "Working online" for information pertaining to what can be done with a connected IED.

Dynamically added IEDs have a different icon ( ) than IEDs from an SCD file

( ).

3.1.14 Dynamically discovering IEDsGUID-E3C3AA89-413F-4FBE-A275-67EECC0C0DDF v1

The ITT600 - Explore IEDs allows dynamically detecting and adding IEDs from a LAN.

From the Edit menu select Autodetect IEDs....

A wizard will be started to guide you through the auto detection.

From the first of three wizard panes select the IP address scanning method. The followingalternatives are available to the user:




• Scanning an IP range: Scans the network between two specified IP addresses• Scanning a subnet (with a specific subnet mask). Note that this is currently restricted due to

performance and practical reasons to 255.255.x.y• Scanning the subnet of the computer the ITT600 - Explore IEDs software is running on. The

subnet is detected automatically. See Figure 85.

IEC202100089 V1 EN-US

Figure 85: Detect IEDs

Click next and wait for the following window to finish its activity. See Figure 86.

You can always cancel the scanning. Depending on the number of IP Addresses toscan, this might take some time!Canceling the scanning does not remove the discovered IEDs.




IEC202100090 V1 EN-US

Figure 86: Status of the detection

Click Next > for the final selection window.

All found IEDs are shown in the left list.

The user can now choose to add one or more of the detected IEDs to the IED list on the right side ofthe windows. See Figure 87 and Figure 88.

IEC202100091 V1 EN-US

Figure 87: Found IEDs




IEC202100092 V1 EN-US

Figure 88: Adding IEDs to the main window

The auto-detection pings all specified IP addresses. If an answer is received it will tryto open a MMS connection with this address. Since a lot of specific traffic isgenerated by the PC, an intrusion detection system or a network administrator mightbe alerted. It is not recommended to use this feature on corporate LANs withoutinforming your network administrator first.

3.1.15 Exporting IEDs to an SCD fileGUID-B947B5C7-642F-47E0-B0F7-0B710F7EE0F7 v1

Data from dynamically added IEDs can be exported to a SCD file. Once a file is opened in ITT600 –Explore IEDs, this menu item disappears. See Figure 89.

IEC202100093 V1 EN-US

Figure 89: Exporting IED data to an SCD file

Only dynamically added and browsed IEDs can be exported!

It is not possible to merge existing configuration files with browsed IED data. Once afile is opened, the Export menu item will disappear!




3.1.16 Quick CheckerGUID-ABE83298-31F2-4F7F-95FD-E810EC8A0BD7 v1

The Quick Checker functionality enables a fast overview of the communication on a particular IEC61850 network, both on the IEDs and as well on network devices. For checking the network devicesconfiguration, communication section in the SCD file must be filled.

It is shown in its own tab when a Subnetwork is selected in the tree view. See Figure 90 .

GUID-5AF66C91-E7DD-4BE9-8A41-F752CEEB9077 V1 EN-US

Figure 90: Quick checker tab shown for Subnetwork AA1WF1

3.1.16.1 Checking IED statusGUID-5076F8EB-7C8C-4176-B79B-90873F216276 v1

Available IEDs from the selected Subnetwork are listed in a tree structure including some commonattributes.

All selected IEDs are checked for defined mandatory values:

• Each logical device’s NamePlate includes the following data attributes:• Configuration Revision (configRev)• Description (d)• Software Revision (swRev)• Vendor (vendor)

• Each Report Control Block for its configuration revision

In case of inconsistencies to the expected values loaded from the SCD file, different statusInformation will be shown.

3.1.16.2 Checking network devices statusGUID-93B7B3EE-8674-4E89-912E-2CFDDB834B8F v1

In addition to checking IEDs, ITT600 SA Explorer provides a functionality to help user in discoveringfaulty network configuration. This function is able to detect configuration and wiring errors. This




functionality is made possible if all related network devices are modelled properly according to IEC61850-90-4 in the SCD file.

3.1.16.3 Status indicatorsGUID-7D9F910C-3531-4CDA-9D90-37CF6B83945C v1

To indicate the different status, individual icons are used. See Table 6.

Table 6: Icon legend and description

Icon type DescriptionThe values have not been checked, or are not up to date

The connection to the IED or Server could be established, all values are as defined in theSCD file

There are inconsistencies between the values loaded from SCL and the online values

It was not possible to connect the IED or Server

3.1.16.4 OperationGUID-E9475D0D-06F2-4853-93EF-7E671CCCBA73 v1

After opening the quick checker, all IEDs are marked with the Information Icon, which means thevalues have not yet been updated.

To run an initial check, click on the Run button of the toolbar.

All possible operations are available from the tool bar buttons. See Figure 91.

GUID-06FB4D16-5D24-42AF-B442-D45946503396 V1 EN-US

Figure 91: Quick checker toolbar

Another option is to run the check in a defined time interval (5 min).

If the time interval is selected, a countdown that indicates remaining time until the next check will betriggered. See Figure 92.

IEC202100100 V1 EN-US

Figure 92: Quick checker countdown

To reset the cyclical check, click the stop button. See Figure 93.




IEC202100101 V1 EN-US

Figure 93: Quick checker commands

This feature is useful during system setup or commissioning start, since it gives a quick overviewwhich IEDs are in service and whether the correct configuration is loaded.

The quick checker will first ping all specified IP addresses. If an answer is received itwill try to open an MMS connection with this address. Since a lot of specific traffic isgenerated by the PC, an intrusion detection system or a network administrator mightbe alerted. It is not recommended to use this feature on corporate LANs withoutinforming your network administrator first.

The quick checker results can be exported into a Microsoft Excel© spreadsheet. The Excelspreadsheet will contain two worksheets, one containing some general information and anothercontaining the actual results as shown in Figure 94.

IEC202100102 V1 EN-US

Figure 94: Quick checker commands




3.1.17 IED Status ViewGUID-84252B1E-E1B9-4969-9BA1-D2A58D27ABFD v1

3.1.17.1 OverviewGUID-050F9808-C64B-4005-951D-A5710B3268D6 v1

The IED Status view shows the complete IED status in respect to its testing configuration. It works forconnected IEDs but also for simulation of an IED (see section "IED Status View").

It is shown in its own tab when an IED or a sub node is selected in the tree view (see Figure 95).

IEC202100103 V1 EN-US

Figure 95: IED Status view

3.1.17.2 FunctionalityGUID-5E890B18-28E2-4561-AA77-FCB4BA83B86B v1

The user can choose from different functionality filters such as Blocking, LPHD.Sim, Substitution andIED Testing Status. According to the selected filter the corresponding attributes will be shown in thegrid.

IEC202100104 V1 EN-US

Figure 96: Functionality Filters

The user can the manually select certain attributes or use the Select All button.




IEC202100105 V1 EN-US

Figure 97: Select attributes

In the next step the user can select a new value and perform a bulk command to all selected items.The attributes will then change to the new value.

IEC202100106 V1 EN-US

Figure 98: Perform command

If the user wants to revert the changes, he can select all and press the Highlight Differences button.All rows that are different from initial value are highlighted and selected.

IEC202100107 V1 EN-US

Figure 99: Highlight differences




To highlight the initial value (value that was active when connecting to the device),select the column Initial Value from the grid field chooser.

User can then revert changes to its initial value.

IEC202100109 V1 EN-US

Figure 100: Revert changes

When disconnecting the IED, the user will be informed if there are still any active Blockings,Substitutions or Testing. User can then continue or abort and use Revert functionality to reset toinitial value.

IEC202100110 V1 EN-US

Figure 101: Disconnect IED




3.1.18 IED simulationGUID-DCC96ED0-2CFA-40CE-ABFE-BECE2D6ECC93 v1

3.1.18.1 OverviewGUID-491FFA3D-CECA-418D-86F7-7D09F71BB22E v1

ITT600 – Explore IEDs has the ability to simulate one IEC 61850 based IED.

Only the data communication part of an IED can be simulated. The application logicof the simulated IED is implemented according the IEC 61850 standard but might bedifferent to a real IED. This is especially the case for non-ABB IEDs.A test with a simulation helps when the focus of the test is on the datacommunication (e.g. Signal tests to SAS or protocol converters).

A test with a simulation never replaces the test with the real IED and the attachedprocess.

The configuration of the simulated IED is based on the loaded SCD file. All Data Attributes of the IEDcan be changed in order to simulate any possible value. In case the DA is also configured for IEC61850 reporting, the change of a value will automatically sent to a connected client. Depending on itsconfiguration, the updated value will also be sent via GOOSE communication service.

Since the GOOSE Sender is running on a PC in a non-deterministic environment, itcannot be guaranteed that the sender’s real time behavior will be the same as froman IED. But it is guaranteed that updated GOOSE information will be transmittedwithin the tmax frame.

A connected MMS client or GOOSE subscriber will not determine a communication difference to areal IED.

IEC202100111 V1 EN-US

Figure 102: Sending of changed value in simulated IED

When a simulated IED receives a command from a connected client, it executes the command andupdates the related value according to the command.




In case a command to operate a Circuit Breaker or Disconnector is received, the simulation willprocess the command and change the position of the switch object according the command value.See Figure 102 for command processing flow.

The SCD file used in ITT600 must contain a proper Substation Section includinglinks from Primary Equipment (e.g. CBR) to Logical Nodes of an IED (so calledLNode References).

The command is processed according the simulated IED behavior shown in Figure 103.

ITT600 allows several options for processing commands. These options can be setin the ITT600 SA Explorer Options Dialog.

IEC202100112 V1 EN-US

IEC202100113 V1 EN-US

IEC202100114 V1 EN-US

IEC202100115 V1 EN-US

Figure 103: Command processing




The result of a received command is visualized in Figure 103. It shows a SBO command received onthe SCSWI1.Pos. This command will result in the change of the assigned LNs to the command value– in this example it will close the CB. Also the position indication values of the XCBR that areassigned to the same CB are updated.

IEC202100116 V1 EN-US

Figure 104: Simulated IED behavior

Commands to other LN classes are handled in a similar way. The value of the command (usually thectlVal Data Attribute) is applied to the corresponding status value (e.g. the stVal Attribute).

3.1.18.2 IED simulation optionsGUID-BDEE0A12-2D6F-4E45-91F9-DFC46AA26AC0 v1

Before the IED simulation can be started, it is important to review the various options related to IEDsimulation in the ITT600 SA Explorer Options Dialog. See Figure 105.




GUID-E3A13D44-3D6D-46A2-88D8-5E05CCCFC138 V1 EN-US

Figure 105: IED simulation options

The following settings are possible in this option section:

• Launch delay (ms): this parameter defines the wait time until the simulated IED is launched.• Do not assign IP address of simulated IED: this option keeps the current IP address of the

machine and will not add the IED’s IP address to network interface card. This might lead to notbeing able to connect to a simulated IED.

• Do not remove IP address of simulated IED: usually when simulation of IED is stopped, therespective IP address is removed from the network interface card. This option allows to avoidthis removal.

• Automatically add missing Report Trigger Options (Ed.1 Server only)• Enable strict Ed. 2.1 RCB reservation: enable/disable if simulated IED should behave according

Ed. 2.1 for RCB reservation• Show IED simulator window: when the checkbox is enabled, a separate window that shows the

process of simulated IED is shown• Minimize IED simulator window: the simulated IED windows is hidden by default• Send simulated GOOSE (GOOSE Header Simulation Bit on): All GOOSE messages sent from a

Simulated IED will have the GOOSE Header Simulation Bit set to true.• Command handling: This section can be used to adapt the internal IED simulation logic.

Depending on this options, commands will be processed differently, to allow more possibilitiesduring system testing.




3.1.18.3 Start IED simulationGUID-0C8AE24F-9F21-48ED-9E8D-C8410F7FB201 v1

The simulation can only be activated for one IED at the time.

The IED simulation can be started by selecting Simulate this IED from the IEDs context menu asshow in Figure 106.

IEC202100118 V1 EN-US

Figure 106: Launching a simulated IED

The simulation can only be started if the simulated IEDs IP address is not reachableon the network. If the IED that shall be simulated is available, it has to bedisconnected first to avoid addressing conflicts.

When launching an IED, several steps are performed:

• The IP address of the simulated IED is assigned to the chosen network adapter.• A simulated IED is started as its own windows process.• MMS communication simulation is started.• GOOSE communication simulation is started.• All values are set initially to off, 0 or false.• All Quality Attributes are set initially to good.• Control Authority of the simulated IED is set to remote.

Your PC will send multicast frames. An Intrusion Detection System or a NetworkAdministrator might be alerted. You should not use ITT600 SA Explorer’s IEDsimulation on corporate LANs without informing your Network Administrator.

IED simulation tabGUID-5F55D96A-466F-40F3-86BA-D988C2705A54 v1

If the simulated IED is started, one can select the IED simulation tab to easily change simulatedvalues in the Point to Point Testing grid.




The substation or communication tree can be used to navigate to the different equipment. The Pointto Point Testing grid shows all simulated Primitive Data Attributes of the selected node in the tree(e.g. in the next figure all PDAs of the object QB1 are displayed in the grid).

IEC202100119 V1 EN-US

Figure 107: IED simulation Tab

FunctionalityGUID-93637927-138D-4CA4-918C-2A9ABA9878E6 v1

On the upper part of this tab, statistical information about the simulated IED is shown as in Figure107 this includes MMS and GOOSE communication statistic counters.

In the lower pane each simulated PDA can be changed (value, timestamp and quality) by clicking onthe magenta cells.

The columns on the right indicate if the PDA sends Goose and/or MMS (Client name is indicated inthe header).

Right click on a PDA offers navigation to the referenced item in the Main tree.

Grid usageGUID-2D543890-3E99-4CED-A5FC-34A508E26F55 v1

Use column chooser by clicking on the top left field of the grid to show more columns (e.g. PDA

quality, FC …). To export the grid view to Excel, press the button on top of the grid .

To show functional name columns press the following button: .

To disable the auto sizing of the columns press .

HMI aspect handling is provided by the following buttons:

3.1.18.4 IED Status ViewGUID-8817CBB3-C830-47FF-95ED-04486D2EFA80 v1

Similar as for the connected IEDs, the IED Status view can also be used for a simulated IED. Followthe description in chapter "IED Status View" on how to use the IED Status view.




IEC202100122 V1 EN-US

Figure 108: IED Status view for simulated IED

3.1.18.5 Stopping a simulated IEDGUID-B614455A-9854-49AF-BA30-D21ECC7F8AE7 v1

To stop an IED, click on the Stop Simulated IED context menu entry as shown in Figure 109.

IEC202100123 V1 EN-US

Figure 109: Stopping a simulated Device

Stopping the simulated IED removes the IP address of the simulated IED from theNetwork Adapter.

3.2 ITT600 – Explore EthernetGUID-FD63A412-C845-4DC1-B983-6EA93E4AC8B8 v1

3.2.1 OverviewGUID-8A97790A-9A96-437C-96FA-4E509ACCB32F v1

ITT600 – Explore Ethernet is a protocol analyzer that is focused on IEC 61850 and other SA Systemrelated protocols.

Network traffic can be captured online or it can be loaded from files providing a defined format (ACP,PCAP, PCAPNG). This format is also widely used with other network sniffing tools based onWinPCap (e.g. Wireshark).

This means that ITT600 - Explore Ethernet is compatible with capture files saved from other NetworkSniffers.




The ITT600 – Explore Ethernet Application User Interface is divided into three areas (see Figure110):

• Toolbar (blue)• Capture window (green)• Packet details: Packets stack, SA related details, Raw data and ASCII data, Status bar (red)

IEC202100124 V1 EN-US

Figure 110: Explore Ethernet main user interface areas

GUID-23FE5AEB-A6FC-4BD7-9542-F20BE5E965F0 V1 EN-US

Figure 111: Explore Ethernet grid layout customizationGrid layout is fully customizable. User can arrange columns visibility and their positions according tohis preferences. Layout is saved after window is closed and restored while reopening.

3.2.2 Keyboard shortcutsGUID-DA42978A-6118-499D-BF29-CBAF316B81AA v1

Explore Ethernet main window provides following keyboard shortcuts:




Table 7: Explore Ethernet


Ctrl + O Open capture file

Ctrl + Shift + O Open recent capture file

Ctrl + S Save (visible) packets to capture file

Ctrl + Shift + S Save all packets to capture file

Ctrl + F Find packet

Ctrl + R Start new capture/stop capturing Stop loading file

Ctrl + Shift + R Start capture with previous settings

Ctrl + P Print

Ctrl + Shift + P Preview print

3.2.3 ToolbarGUID-E6D81843-A052-4F7D-B4BF-45B2844CCC77 v1

Following Toolbar functionalities are accessible (see Figure 112):

• Start and stop a network capture.• Start capture with last wizard settings• Open capture file• Save all packets being captured or only those currently in the view of the capture window

through filter operations.• Save the captures together with the corresponding SCD file which describes the SA

environment the network capture was taken.• Export the contents of the capture window to an Excel file for further processing.• Import captures from an Excel file.• ZIP packets with SCD• Dump all MMS PDUs found in MMS frames into a text file for further processing.• Send captured file• Find packet• Clear all filters• Print• Print preview• Options




IEC202100125 V1 EN-US

Figure 112: ITT600 – Explore Ethernet Toolbar

3.2.4 Capture windowGUID-817653C2-219B-4333-BAFA-8F590D481006 v1

The capture window displays the captured (or read from file) network packets in a grid (see Figure113). The available columns can be selected through the Toolbar.

The full list of available columns is:

• Packet number• Source and destination server• Source and destination MAC address• Recording date and time• Source and destination IP• Full packet data size• Application, and transport layer of the packet• Details of the packets

Packets can be filtered using the fields just below each column header. More information aboutfiltering see Section "The different filters".

IEC202100126 V1 EN-US

Figure 113: ITT600 – Explore Ethernet display filters




3.2.5 Packet informationGUID-1515BE8B-228D-41A4-944C-BB41695146C1 v1

The packet information section displays the information about the selected packet in different views.

Depending on the selected packets protocol type, some elements will not be shown. See Section"Analyzing network packets" for detailed information.

3.2.6 Status barGUID-EE9D37D4-FA45-495B-9A33-C65083CBC8DE v1

The status bar contains information about the applications state:

• Mode (Running | Stopped)• Current capture filter• Capture source (File Name | NIC name)• Average packet size• Amount of captured bytes• Amount of captured packets

3.2.7 Working with ITT600 – Explore EthernetGUID-2F684BD6-C098-4EDF-BBF2-4194575A10FD v1

ITT600 – Explore Ethernet is tightly bound to its host Application ITT600 – Explore IEDs. ThusExplore Ethernet depends on the configuration previously loaded in Explore IEDs. An example ofboth cases – a matching configuration and one that does not match are shown in Section "AnalyzingMMS Packets without a loaded configuration" and Section "Analyzing MMS packets with a loadedSCL file" respectively.

3.2.7.1 Working with capture filesGUID-C3BE4F18-9E8D-44FD-A11D-9E5BB382E6CD v1

Click on the Open Capture. In the displayed standard file open dialog, select the file you want toopen.

ITT600 – Explore Ethernet uses the same capture file format as other ethernetprotocol analyzers (e.g. Wireshark, Packetyzer, Analyzer, etc.) thus the files arecompatible and a file that was captured with Ethereal can also be opened withITT600 – Explore Ethernet.

The last opened files can be accessed with the Open Recent list. Drag and drop a file from WindowsExplorer is also supported.

3.2.7.2 Capture network trafficGUID-2FC6DA2B-3EA6-4D9C-9600-A161F8B8B06B v1

The Capture WizardGUID-04A92334-03E7-4E75-BA02-DDEED0745BE8 v1

To start a capture select the appropriate button in the toolbar (See Section "Toolbar"). A wizard willguide you through the capture process (see Figure 114):




GUID-73C27B9F-D97D-4EAE-9C84-4405F15B587D V1 EN-US

Figure 114: Capture Settings Wizard

Network Interface Card selectionGUID-5B49049F-1957-4F29-9C2C-EB99BA3E63E5 v1

The NIC has to be selected. Choose the adapter from where you want to capture traffic.

If you deselect the Capture packets in promiscuous mode entry, only packets with the destinationor source address of the selected adapter will be captured.

To capture all packets seen by the NIC the Capture packets in promiscuous modehas to be checked! This setting changes the NIC working mode and affects otherExplore tools (GOOSE, SV) and also other applications (i.e wireshark) and viceversa – i.e to capture GOOSE packets promiscuous mode has to be enabled, whenWireshark will start capture and will disable this setting, packets won’t be captured inITT600.

Automatic capture file splittingGUID-705F725C-5B66-44F1-A403-9353DF7676D6 v1

To limit the memory usage of ITT600 – Explore Ethernet, a capture file can be specified. After thedefined limit is reached, a capture file will be generated automatically. A file will only be generated ifthe limit has reached. The old packets will be removed from the grid and will be available only in thefile.

If you specify a filename, the extension pcapng and a counter indicating how manyfiles have been created will automatically be added.A file will only be generated if the limit has reached.

The buffer size indicates the buffer of the underlying capture engine. If you realize packet losses,increasing the buffer might help.

Increase the buffer size in the wizard if packets are lost. Lost packets will beindicated in the Statistics dialog and in the status bar (see "Statistics").

Capture filtersGUID-0FA3D41C-9982-46F4-BC36-6A1C56490809 v1

Packets have to match the capture filter, to be shown in ITT600 – Explore Ethernet.




Capture filter block the packets in the capturing engine. Packets that do not matchthe capture filter, will never be shown in ITT600 – Explore Ethernet.

In the lower part of the window, you can define capture filters based on IP or MAC address. For moreinformation on how to define capture filters, see section "The different filters".

More specific capture filters can be defined and the Filter will be displayed in the WinPcap syntax.

Do not check/select any of the IEC 61850 related protocols capture filter, if allnetwork traffic should be captured!

The wizard enables users to define the duration of the capture timing.

Define a start time when the capture should be started or a time interval for how long the captureshould run.

The capture can also be stopped if certain situations occur:

• A defined number of packets received.• A defined amount of data received.• Ignore packets with a minimal size.

After pressing the Submit button, the capture will be started. New packets will be added to the gridand can be selected for further analysis.

Start capture without using the wizardGUID-6415E4D9-632B-40C6-B1DD-6A92CE2C3BD5 v1

It is also possible to start a capture without following the wizard. To do so, press the button inthe toolbar. Using this start method, the last wizard settings will be used.

Use the button to start a capture without the wizard, using the last definedsettings.

3.2.7.3 Analyzing network packetsGUID-B74500CB-F533-40BD-ADA3-DD4DCE6C7FD0 v1

During or after a capture operation, network packets can be analyzed by accessing single packetrows in the capture window (Figure 115). In the packet window, one or two tabs are displayeddepending on the application type of the packet. For packets other than IEC 61850 related protocols(A detailed list of supported protocols is defined in Section "ITT600 – Explore Ethernet SupportedProtocols") only the raw network data tab is displayed. It contains three resizable sections.

On the left side, packet properties are displayed in a property grid. The user can select to display thecontents in either alphabetical order or sorted by packet contents. The actual properties beingdisplayed depends on the packet type.

The middle section displays the packet contents in hexadecimal format and the right panel presentsthe ASCII representation of the hexadecimal data.

General ViewGUID-16F693A3-9C11-4830-9AB5-3816A188AA5E v1

Every packet can be shown in the general view as shown in Figure 115. The window is divided intofour sections:

• Section 1 - Selected packet.• Section 2 - Properties of the selected packet.• Section 3 - Hex display of the packet’s content.• Section 4 - ASCII display of the packet’s content.




GUID-AE55D5C1-D885-4D75-BBDD-FD3D1963A365 V1 EN-US

Figure 115: Display of a network packet

IEC 61850 Related Protocol ViewGUID-5C38C92F-5F11-48B8-8E9A-5399789948FE v1

For IEC 61850 relevant packets, a second tab Substation Automation related Protocol isdisplayed taking focus in front of the raw network data tab.

This tab also consists of four panels, but the information shown is protocol specific. See Figure 116.

GUID-1AA66FEC-1B0F-49B9-BB0B-E172CD31E183 V1 EN-US

Figure 116: Display of Substation Automation related protocol

The panels are:

• Section 1 - Selected packet.• Section 2 - SA properties of the selected packet.• Section 3 - Analyzed packet content (IEC 61850 style for MMS).• Section 4 - Printed packet information (MMS PDU or details).

A list of supported protocols can be found in Section "ITT600 – Explore EthernetSupported Protocols".




Analyzing MMS Packets without a loaded configurationGUID-0539F741-27D4-4A97-AB80-C8DCE053658F v1

To analyze MMS packets it is necessary to load the IED configuration in the ITT600– Explore IEDsprior starting the ITT600 – Explore Ethernet.

Otherwise it is not possible to decode all the data contained in the frame. This applies especially toreports.

Figure 117 shows an example of a MMS report without the loaded configuration. It is not possible toassign the received values to a data attribute.

It does not matter for ITT600 – Explore Ethernet, whether this configuration was loaded from a SCDfile or retrieved online.

To load a SCD file follow the steps defined in Section "Open an SCL file" or connect the IED asdescribed in Section "Connect to IEDs and SERVERs".

Without a loaded configuration it is not possible to decode reports correctly. Amessage will give you a hint on this.

Analyzing MMS packets with a loaded SCL fileGUID-881C4CBC-17D4-4C4E-B1EE-F4651879D5C8 v1

After the correct SCD file is loaded, the report data can be fully decoded. See Figure 117. Loading aSCD file enables also other additional features: the source and destination server names aredisplayed. As an addition the servers can also be highlighted in ITT600 – Explore IEDs. To switch onthis feature select Server Highlight in the Tools menu. See Figure 118.

ITT600 – Explore Ethernet tries to resolve the server names also based on MACAddress. After startup it sends out reverse ARP request for all defined Servers in theSCD, to generate a mapping table between MAC Address and Server Name. Sincea lot of specific traffic is generated by the PC some Intrusion Detection System or aNetwork Administrator might be alerted. It is not recommended to use this feature oncorporate LANs without informing your Administrator first.

IEC202100131 V1 EN-US

Figure 117: An MMS report without a loaded SCD file




IEC202100132 V1 EN-US

Figure 118: Decoding of all report values

IEC202100133 V1 EN-US

Figure 119: The “Server Highlight” feature

With each new selection of a packet, the servers will be marked in the Explore IEDs if found.

To enable the Trace Server Communication feature, it has to be selected in the Options dialog aswell (see Figure 134).

Enabling the trace all packets between a server and client (actually between two IP Addresses) willbe highlighted. An example is shown in Figure 120. It is also possible to show the functional namesand object description. This is done by enabling such features in the Option dialog. See Figure 121.




IEC202100134 V1 EN-US

Figure 120: The “Trace Server Communication” feature

GUID-11D1BF04-A2A5-4AE4-89B2-32CE49C20D93 V1 EN-US

Figure 121: Functional names option

GUID-1E154FC0-B936-415F-B7DF-9D2552C4E020 V1 EN-US

Figure 122: Object description option

3.2.7.4 The different filtersGUID-0FDBF555-C37B-41F1-9B0A-6E5ECDD729B5 v1

ITT600 – Explore Ethernet uses different filters. Depending on the desired operation one type or theother is more appropriate.

Capture filtersGUID-9E1EA841-E03C-4D39-BBBC-00B76E160785 v1

Capture filters are working very close to the hardware and are used by the capture engine. Thus,packets that are not matching the filter will not be shown.

A capture filter cannot be changed during a capture. To apply a new filter, a new capture has to bestarted.

The advantage of capture filters is that the amount of captured packets can be minimized.




Capture filters only apply on online captures.

If a capture filter is specified, only packets that match this filter will be captured andshown in the application.

Capture filters are available for IP addresses, MAC addresses and port numbers.

Examples:

The following example - Figure 123 - will capture all traffic from the three IP addresses, no matterwhether it is the source or destination address:

IEC202100136 V1 EN-US

Figure 123: Capture filter based on IP addresses

Values can always be separated by semicolons or commas.

Capture filters can be combined, see next example:

IEC202100137 V1 EN-US

Figure 124: Combined capture filter

In this example all packets with the source IP address of 10.140.20.152 and the specified source ordestination address are captured.

Values in the same field are always combined in an OR condition, whereas differentlines will be combined as AND condition. See Figure 125 for more details.

The complete filter will be shown on step two of the wizard:




GUID-6F1B278D-96CA-40D0-B8DB-C3F6535F873D V1 EN-US

Figure 125: Filter combinations

Used capture filters are shown in the status bar as shown in the following figure.

IEC202100139 V1 EN-US

Figure 126: Status bar showing used capture filters.

View FiltersGUID-5CA0044A-BEAC-4735-8E57-7014775F1C08 v1

View filters simply rearranges the already captured packets. No packets will be deleted or ignored.The packets that do not match the filter will not be displayed.

View filters can be changed even if a capture is in progress.

View filters can be applied on online capture and also on capture files.

Examples:

The following example shows how to set a view filter for MMS - Figure 127.

IEC202100140 V1 EN-US

Figure 127: Defining a new filter

It is also possible to define customized filters. Select Custom in one of the rows and define your ownfilter. See Figure 128 With a specified combination, as shown in Figure 129 only MMS packets with adata size larger than 70 bytes are displayed.




IEC202100141 V1 EN-US

Figure 128: Defining a custom filter

IEC202100142 V1 EN-US

Figure 129: Customized view filters

Custom view filter is very powerful. It can also be used to filter only for specific contents, which isuseful when applied to the Details column. The following filter - Figure 130 - will only show reports.




IEC202100143 V1 EN-US

Figure 130: Custom filter based on string values

Used View Filters are shown with a highlighted filter icon.

Applied view filters are indicated with a highlighted filter icon in the title row, see Figure 131.

IEC202100144 V1 EN-US

Figure 131: Indication of used filter

View filters can be reset by choosing Clear all filters from the toolbar, See Figure 132.

IEC202100145 V1 EN-US

Figure 132: Reset view filters from the toolbar menu

3.2.7.5 Export captured packets to ExcelGUID-20E61EFC-BE45-4697-8EB4-75DB93581210 v1

The captured packet data can be exported into a Microsoft Excel file (select menu File | Export toExcel) for further processing. The Excel file has the format as shown in Figure 133.

IEC202100146 V1 EN-US

Figure 133: Several packets in an exported Excel file




Raw packet data are hidden after the last column.

Export to Excel does not contain the related SCD file.

3.2.7.6 Import captured packets from ExcelGUID-B72C9BAB-994A-4E2A-A25C-C4332314A478 v1

Captured data can be reimported from Microsoft Excel file into the capture window. A suitable SCDfile must be loaded in the Explorer.

If columns in an exported Microsoft Excel files are moved or deleted, the reimportwill fail!

3.2.7.7 Dump MMP PDUsGUID-21CE8C46-32AB-44E2-895F-BD5ABEBE8E4D v1

This feature will save all MMS PDUs into a text file for further evaluation. Only MMS packets will becontained in the file.

This feature is helpful when a sequence of MMS packets have to be analyzed by an experienceduser.

3.2.7.8 Options and default settingsGUID-3FF46235-8E76-4367-B9A5-49D3F03B148D v1

Several default values can be set in the Options dialog. See Figure 134. User can set some viewoptions, define network adapter settings or select specific capture files (e.g. GOOSE, sampled valuesor MMS).




GUID-4DDDD982-FF49-4A2C-ACC6-558ACB384C8A V1 EN-US

Figure 134: Explore Ethernet Options Dialog

ITT600 – Explore Ethernet needs to be restarted, that the selected values in theOptions dialog become effective.

3.2.8 StatisticsGUID-846AEF2F-96ED-4A0D-A703-3B842F6F862E v1

ITT600 – Explore Ethernet provides some basic statistical information. General statistics shows thebasic counters:

• How many packets are received• How much data is received• Start / Stop times• How many packets are lost

In case packets are lost, increasing the buffer size will help.

It also gives an overview of all captured protocols and their percentage of the total. See Figure 135.




IEC202100148 V1 EN-US

Figure 135: Protocols statistics

All connections are also recorded in the Connections tab. See Figure 136.

IEC202100149 V1 EN-US

Figure 136: Connections statistics

3.2.9 Send capture fileGUID-35BE6C22-FBBB-4FD3-A527-1D2E4737E69C v2

ITT600 – Explore Ethernet allows a replay of a captured file. The action bar to this feature is shownin Figure 137.

GUID-3E6AD089-580A-480F-AB31-A61B37D3DDAF V1 EN-US

Figure 137: Sending an capture file bar

Select the appropriate adapter from the list and define how many times all packets should betransmitted. During sending a progress bar will inform the user about the progress staus.




FPS option allows user to set how many frames should be sent per second, howeverit is not guaranteed because of the Widnows OS limitations.Default value 0 will cause that packets will be sent out as fast as possible.

This function does not take the real time tags of the packet into account.

Packets with remote addresses are sent from your local NIC. An intrusion detectionsystem or a network administrator might be alerted. It is not recommended to usethis feature on corporate LANs without informing your Network Administrator first.

3.2.10 Send a packetGUID-A3D39845-BEC4-4861-95C4-D031F371002F v1

A single captured packet can as well be resent to the network. Right-click a packet and select “SendPacket” from the context menu (see Figure 138). An action bar including the packet number will showup (see Figure 139). Next, select the appropriate adapter from the list and define how many times thepacket should be transmitted.

A packet with remote addresses is sent from your local NIC. An intrusion detectionsystem or a network administrator might be alerted. It is not recommended to usethis feature on corporate LANs without informing your network administrator inadvance.

IEC202100151 V1 EN-US

Figure 138: Send Packet context menu

IEC202100152 V1 EN-US

Figure 139: “Send Packet” action bar

3.2.11 Toggle relative/absolute timeGUID-7DD293A5-027F-4AA2-B1DF-F3B2B3D0A4AB v1

When analyzing packet time stamps, it can be helpful to see relative time stamps. This option can beswitched on/off by the menu item in the context menu. See Figure 140 and Figure 141.




IEC202100153 V1 EN-US

Figure 140: Time stamps context menu

IEC202100154 V1 EN-US

Figure 141: Packet data with relative time stamps

3.2.12 Find in packet dataGUID-797AEA9D-F797-43ED-B2C3-29381C6B449D v1

Identifying packets with a specific content can be time consuming. The Find Packet bar will help inthis case.

The search mechanism uses the whole packet data (including MAC and IP addresses). There aretwo options: searching for ASCII based values or hexadecimal values. See Figure 142.

IEC202100155 V1 EN-US

Figure 142: “Find Packet Data” search bar

If Mark all options is selected, all packets matching search criteria are highlighted, clicking the FindNext/Prev button or pressing Enter key will select the packet that matches the search string, usercan also decide if search should be case sensitive.

The selection shown in Figure 143 highlights all packets containing the string RPT (all IEC 61850reports).

IEC202100156 V1 EN-US

Figure 143: Mark all matching packets




3.2.13 Protocol specific informationGUID-75122C9C-57C0-4C1D-B73C-57A9433AE662 v1

Analyzing different protocols still needs knowledge about the protocols itself. ITT600 – ExploreEthernet tries to display the information in a form that is easy to understand even for non-networkexperts.

It is not the scope of this manual to give an introduction in the various supported protocols.Nevertheless, some hints and basic protocol analysis techniques are shown in this chapter.

3.2.13.1 MMSGUID-A3BB797B-0AC2-4CFF-AAF5-62AE6B17A434 v1

MMS is used for IEC 61850 vertical communication between IEDs (Servers) and different clients(e.g. SCADA Systems).

It is a connection oriented client/server protocol that is embedded in a TCP/IP stream. Every clientrequest is answered by the server with a separate response. To find the response to a given request,every MMS message contains a so called “In-voke ID”. This is a unique ID (an integer number) foreach pair. Figure 144 shows an example of a request/response pair.

The Details column (see Section "Analyzing network packets") also shows the invoke ID. This makesit easy to find “matching pairs”.

IEC202100157 V1 EN-US

Figure 144: MMS request with Invoke ID

Every MMS message has an Invoke ID. This is identification for request / responsemessage pairs.

CommandsGUID-FAE4FF95-610E-4BFE-9B55-6640900620CB v1

IEC 61850 Commands are mapped to MMS write requests. They will be acknowledged by a positiveor negative command response. Figure 144 shows an example of a positive command response. Asdescribed in the former section, the only way to check, which command is acknowledged, is toanalyze the InvokeID.

A negative response will be followed by a so called “LastApplError” report. This report contains thereason why the command has failed (the AddCause field).

Since a report does not contain an Invoke ID, the LastApplError refers always to the last command.See Figure 145.




IEC202100158 V1 EN-US

Figure 145: LastApplError report

ReportsGUID-4D59F8EF-4365-4ECA-A64F-77F743806B79 v1

Reporting is the mechanism used in IEC 61850 to send spontaneous data from IEDs to clients.

All data that has to be sent to a client has to be configured in a DS. The DS itself is then referencedby a RCB. Clients have to enable the RCB with specific options to receive the data changes from anIED.

Segmentation and fragmentationGUID-D3CB2748-BA2E-4E49-988B-3F1842740C6E v1

MMS messages can be larger than the maximal Ethernet frame length, in that case the message hasto be segmented into several frames on TCP level and/or fragmented on the TPKT/COTP level fromOSI protocol. If packet is segmented on TCP level - Data packet will appear under TCP payload inPackets stack panel and additional information in Details column will be shown on the packets grid:

GUID-0DFEF55E-3F5C-452B-A293-F7FA96208AEF V1 EN-US

Figure 146: TCP segment

Fragments list in Data fragment for TCP segmentation show only TCP levelfragments. If MMS is fragmented on higher level, the fragments list will not contain it.MMS fragment may also be not segmented on TCP level.




IsSegmented property indicates if TCP packet is segmented on TCP level, howeverthe last segment does not contain segmentation flag, IsLast proeprty in Datafragment indicates if the fragment is the last one and IsAssembled indicates if allfragments are correctly assembled - depending on which level Data fragment isdisplayed

At the end, MMS message may be assembled from both tcp segments and OSI level TPKT/COTPfragments. MMS message, if segmented and/or fragmented will contain Fragments property with allthe packet fragments, see Figure 147.

GUID-747B9D58-F8F4-4950-A3C9-072CB8438DB0 V1 EN-US

Figure 147: Assembled segmented and fragmented MMS message

MMS message is displayed only on the last, correctly assembled packet

3.2.13.2 GOOSE/RGOOSE/Tunneled RGOOSEGUID-54F7B94E-A519-4682-9DED-7DFCDC9F8520 v1

GOOSE is a multicast service that is sent cyclically. During normal operation (no values arechanging) the frames are sent with the defined maximum time Tmax. As soon as a value changes thatis defined in the GCB’s referenced DS it will be sent with minimum time Tmin and the pattern repeats.

Each GOOSE frame contains header information and data (according the DS). When capturingGOOSE packets, some consistency checks are made by ITT600 – Explore Ethernet.

Various values of the GOOSE message are compared with the values loaded inITT600 – Explore IEDs (e.g. from an SCL File). Inconsistencies are shown in thedetailed view. This is a hint that the IED is not configured with the same SCD that isloaded. See Figure 148.




RGOOSE/Tunneled RGOOSE are GOOSE packets sent over UDP protocol withdestination port 102, GOOSE details are the same as in ethernet GOOSE.

The GOOSE Header contains a so called APPID. Depending on this number an IED decides whetherto process the frame or not. The APPID is show as hexadecimal value (as it is defined in the SCD filealso).

IEC202100161 V1 EN-US

Figure 148: GOOSE analyzer showing inconsistencies

3.2.14 Replay protectionGUID-4BCA5F6E-8338-48ED-A1D2-855B1E4DE1C7 v1

Explore Ethernet, if the Replay protection analysis is turned on, will display analysis result in thepacket details panel and in the details column on the packets grid as shown in following figure:

GUID-F61FCEF4-D72E-4D54-8B1E-9886870DD7CC V1 EN-US

Figure 149: GOOSE analyzer showing replayed packetReplayed GOOSE packets are shown in grid with additional information in packet details section.

For more details about GOOSE replay analysis see "GOOSE replay protectionalgorithm"




3.3 ITT600 – Explore GOOSEGUID-4C49D0EB-F8C5-4FFC-92B5-368A27C0CE3A v1

3.3.1 OverviewGUID-10FA5F84-286F-4329-B9A5-0E70B7B80E38 v1

ITT600 – Explore GOOSE shows GOOSE data contained in a capture file related to a common timeaxis. Individual signals can be compared at the same time, with an option to synchronize them.

Explore GOOSE captures GOOSE, RGOOSE and Tunneled RGOOSE packets

The Figure 150 of main window show following panels.

• Toolbar• Discovered IEDs tree• Plots• Packet details• Legend• Status bar

GUID-0C6C948D-5FCE-459F-80F7-21B11E2C452D V1 EN-US

Figure 150: ITT600 – Explore GOOSE main user interface

3.3.1.1 Keyboard shortcutsGUID-09DA9B74-0EFC-4CD7-9B4F-12C2916720CA v1

Explore GOOSE main window provides following keyboard shortcuts:

Table 8: Explore Goose




Ctrl + S Save plots

Alt + O Open plots





Ctrl + R Start new capture/stop capturing Stop loading file

F5 Refresh data with current loaded model

Ctrl + Shift + Z Clear

3.3.1.2 ToolbarGUID-F5FDECF5-C5CC-4E0B-B5CC-E623789D8D0C v1

The toolbar provides access to the basic functionality of Explore Goose (see Figure 151). It allowsthe user to:

• Open a capture file• Open a recently opened capture file• Open a plot file containing a previously saved configuration• Save the current plot configuration a file• Clear the current IED list and GOOSE signals• Refresh captured data to match a newly-loaded model• Access ITT600 Options• Select the Network Interface Card used for GOOSE capture• Start/stop an online capture• Toggle whether to keep already captured data after capture restart

IEC202100163 V1 EN-US

Figure 151: ITT600 – Explore GOOSE toolbar

3.3.1.3 Options MenuGUID-FB1E58CE-7526-4FCC-A0F1-CA351511561D v1

The Options menu provides access to the options dialog. See Figure 152.




IEC202100164 V1 EN-US

Figure 152: ITT600 – Explore GOOSE Options Dialog

3.3.2 Working with Explore GOOSEGUID-AEF6680A-7FB6-42BD-BBE7-21CF9017F77D v1

ITT600 - Explore GOOSE is using saved capture files including GOOSE frames for displaying thecontained values. Additionally, an online mode is available.

A capture file can be created with ITT600 – Explore Ethernet and is described in Section "Capturenetwork traffic" or external third-party tool which can export captured packets to any of pcapsupported capture file formats.

3.3.2.1 Offline ModeGUID-232206E8-C32F-4605-9748-E5CC67C63108 v1

Click on the Open Capture. In the displayed standard file open dialog, select the file you want toopen.

ITT600 – Explore IEC61850 GOOSE uses the same capture file format as otherethernet protocol analyzers (e.g. Wireshark, Packetyzer, Analyzer, etc.) thus the filesare compatible and a file that was captured with Ethereal can also be opened withITT600 – Explore IEC61850 GOOSE.

The last opened files can be accessed with the Open Recent list. Drag and drop a file from WindowsExplorer is also supported, see Figure 153.




IEC202100165 V1 EN-US

Figure 153: Opening a capture file

After the file has been parsed, a list containing all IEDs sending GOOSE traffic is generated.Selecting an IED will show all contained GOOSE DataSets taken from the GOOSE Control Blockreferences. This view will be different whether a configuration has been loaded in ITT600 – ExploreIEDs previously. See Section "Open an SCL file" or Section "Connect to IEDs and SERVERs".

ITT600 – Explore GOOSE use the current configuration loaded in ITT600 – ExploreIEDs.

3.3.2.2 Online ModeGUID-E6BB2CFB-BB2B-44F6-92FB-D795F6F69765 v1

The online mode captures traffic on the specified Network Interface Card and processes all receivedGOOSE frames. By default it enables promiscuous mode on the NIC. The list of IEDs is dynamicallyupdated when new IEDs sending GOOSE frames are detected on the network.

To start an online session, select the desired NIC in the dropdown, then press Start capture. SeeFigure 154.

IEC202100166 V1 EN-US

Figure 154: Start an online session from toolbar

IEC202100167 V1 EN-US

Figure 155: Selected Network Interface Card details

The details of the selected adapter are shown in a tool tip.

In case previously recorded data should be kept, check the Keep already captured data checkbox.




In case multiple sessions are combined (the Keep already captured data feature isswitched on), the data is connected with a straight line even though data changesmight have happened during the paused time.

Explore GOOSE by default starts capture with promiscuous Promiscuous modewhich may affect other tools and applications (i.e wireshark) if this mode was notenabled.

To stop an online capture, click on the Stop Toolbar Button.

3.3.2.3 Discovered IEDsGUID-8A649D05-80A9-45E2-A0C9-F112C8867B65 v1

The tree view allows navigating, selecting and searching for data attributes captured or loaded from afile:

GUID-73A6848E-085C-4CD8-8C77-EF011A284EBD V1 EN-US

Figure 156: Discovered IEDs tree

The tree view shows the following hierarchy of items:

• IED name• GCB (DataSet): goCBRef from captured packet and DataSet name• DataSet group• Data attribute and the number of packets

Data attribute level displays functional name and/or description according to Viewsettings in Explore Ethernet options

There are three types of DataSet groups:

• DataSet attributes: contains attributes from captured GOOSE packet which match the DataSetfrom a loaded model

• Not matched to DataSet: contains attributes from captured GOOSE packet which do not matchDataSet in the loaded model (i.e. wrong number attributes, wrong types)

• DataSet missing: contains attributes from captured GOOSE packet when the GCB cannot befound in the loaded model, or when there is no loaded model




Data attributes may end up not matching to missing DataSet group if:

• the goCBRef from the GOOSE packet is not found in the loaded model• model is not loaded• loaded model is different than the one in real/simulated IED

Some of the attributes (like Quality) will be displayed as gray, meaning this data type cannot beshown in the plot. See Figure 157.

IEC202100172 V1 EN-US

Figure 157: Quality data type colored grey

Quality values cannot be displayed as individual values. The quality information ispart of the related value.

Each attribute has an icon indicating the value type, see Figure 168

3.3.2.4 Display with loaded configurationGUID-DBF7EC44-1A8E-40DF-A508-FF8150793AC7 v1

When the matching configuration is loaded, a list of available IEDs and the contained GoCBs aredisplayed. The list of attributes is grouped by the GOOSE Control Block (basically its dataset) theyare contained in.

Every IED includes its description and all Data Set items are listed with the full IEC 61850 name asshown in Figure 158.

IEC202100169 V1 EN-US

Figure 158: GOOSE IED and attribute selection

3.3.2.5 Display without loaded configurationGUID-85044A5A-5A29-4491-B558-541FA81A387E v1

Without a loaded configuration, only basic Information found in the GOOSE frame can be used toidentify the individual IEDs and their attributes. Such an example is shown in Figure 159.

IEC202100170 V1 EN-US

Figure 159: GOOSE IED and attribute selection – without loaded configuration




3.3.2.6 Simulated and real packetsGUID-E03B366B-C8E2-404E-8EFC-7FDF8F575A28 v1

Goose packets from the same GCB are treated separately depending on the simulation bit on packetheader. The additional info is added to GCB name if GCB is simulated.

GUID-1440ADD3-4151-4B5E-84E9-125EFF4CB88F V1 EN-US

Figure 160: GOOSE packets grouped depending on simulation bit

3.3.2.7 PlotsGUID-588DAA43-DB2E-4F28-8B10-7F3BB3F028C6 v1

Plot can be opened with two time settings:

• Capture time• Frame time

Frame timeGUID-8191831C-C079-40EF-9EA2-532B86B13B8D v1

This time is set by the IED when change of one of the attribute triggers the GOOSE to be sent and iscontained in the header of the frame.

Frame time represents the time set by the IED and is included in the received frame.Capture time represents the time when the frame was recorded and is set by the PC.

Capture timeGUID-BEF3FB11-3B63-4119-80EF-A23A13AD6D97 v1

This time is assigned when the packet was captured on the selected network interface card.

Double clicking an attribute will open a plot using capture time by default. It can be also opened withthe context menu.

Capture time is the default one, to open plot with frame time use context menu of the attribute.




IEC202100168 V1 EN-US

Figure 161: Signals added to the plot

Only sequential data can be displayed in the plot. If the time interval between two data entries is toosmall, depending on the data time range and data density, two points may overlap. The data cursorwill show the closest next/previous data point with its time in the data point tooltip.

3.3.2.8 Plot Information and functionsGUID-1040BB8A-F435-4554-B5D5-D95F80108F34 v1

There are a lot of functions provided by the plot display. First thing that should be noted is that eachdot in the plot indicates that a value was received at that time. Since GOOSE is a cyclical service andthe values are resent even if they have not changed, this is indicated in Figure 162.

IEC202100180 V1 EN-US

Figure 162: Dots indicating reception time

3.3.2.9 Go to the next value changeGUID-7A74182B-AEB4-4F0B-9CBE-0E39316E3F15 v1

Sometimes it is cumbersome to find the next change of a specific value, especially if the plot iszoomed or a long time period is shown. For this reason, the plot toolbar and Overview Pane areavailable to enable easier navigation. The user can choose to navigate between. See Figure 163.




IEC202100181 V1 EN-US

Figure 163: Go to next or previous value change

3.3.2.10 The Explore GOOSE plot toolbarGUID-A7AF7B04-CB55-49A8-B9E7-2F029D17E4CE v1

The plot toolbar provides access to all major functions (see Figure 164):

IEC202100182 V1 EN-US

Figure 164: ITT600 - Explore GOOSE plot toolbar

• Pause: when online capture is on, updates of plot can be paused to zoom and analyze theGOOSE packet

• Copy image to clipboard: plot image is copied to the clipboard• Toggle overview pane: show/hide overview pane• Toggle data cursor: show/hide data cursor• Toggle plots synchronization: turn on/off synchronization of plots• Previous data point: navigates to previous data point• Next data point: navigates to next data point• Navigation mode: allows to switch between navigation modes:

• Data change – default mode, navigates between value and/or quality change of data point• Data point – navigates between data points




3.3.2.11 ZoomingGUID-CC237824-EBAD-4BB4-BF0A-8188ECD7F7D6 v1

It is possible to zoom in / out or define a zoom region by using the slider on the bottom of each plot,or using the Overview Pane tool. See Figure 165.

IEC202100183 V1 EN-US

Figure 165: ITT600 - Explore GOOSE overview pane

This tool also lets the user change the default mouse drag functionality between panning the plotview, or zooming to selection.

3.3.2.12 Data cursor and plots synchronizationGUID-A3DF90B5-492E-490C-93E3-ACB05DFAEFEF v1

The data cursor can be used to measure the time or the value at a specific point in the plot. SeeFigure 166.

IEC202100184 V1 EN-US

Figure 166: Data cursor switched on (plots are synchronized)

To compare the different signal, it is important that the plots are synchronized.

Plots should be synchronized to compare the different values.

3.3.2.13 Saving and opening plots configurationGUID-F03D0426-4F0A-4B6C-8D3D-2677DA458039 v1

Any plots configuration can be saved into a plot file. This file will contain the captured data, as well asthe opened plots configuration.

To save a configuration, use the Save Plots file menu entry or the toolbar button.

A configuration can be opened by using the Open Plots functionality. Since the file includes the plotdata, it can also be opened on another PC.




Plots configurations can be saved and reloaded.

3.3.2.14 Packet detailsGUID-8CC90003-CEE9-418A-B92D-0271C8336471 v1

By clicking on the packet marker on the plot, the Packet details panel will show decoded GOOSEpacket. In the title panel the capture time of the packet is additionally displayed:

GUID-BF591C2D-CC68-4B1C-A95C-C942F1BD6412 V1 EN-US

Figure 167: Packet details panel

The details section contains four categories:

• General: decoded packet values with GOOSE Pdu• Model check: details about compatibility with loaded model• Data set: listed DS attributes decoded from packet• Analysis: result of Replay protection analysis (if enabled)

3.3.2.15 LegendGUID-72347F24-1757-4033-BD79-FDF59FB56C2C v1

Legend is divided into four categories which defines the packet data point:

• Quality validity marker colors• Source shapes• Config Rev mismatch outline (if model is not loaded each packet is marked)• Analysis indicators

and Data attribute value types icon on the Discovered IEDs tree:




GUID-9270745C-5DBD-4F26-85F0-480EAD938EE3 V1 EN-US

Figure 168: Explore GOOSE plot legend

Config Rev missmatch outlineGUID-769F4029-2B4F-4BD6-81A2-548093DC438C v1

If the configuration revision check between the online data and the SCD fails, individual nodes gain apurple outline. Figure 169 shows a signal with a matching configuration revision, Figure 170 shows amismatch.

IEC202100173 V1 EN-US

Figure 169: No outline indicates that configuration revision check is fine

IEC202100174 V1 EN-US

Figure 170: Purple outline indicates configuration revision mismatch

Mismatches between the expected configuration revision from ITT600 – ExploreIEDs and the actual received value are indicated.

Quality informationGUID-6E98D636-7675-46C8-B8B3-18EA344BC996 v1

Quality information cannot be added as individual signals. The quality information is incorporated inthe related value. Bad quality of a signal (Invalid, Questionable or Reserved) is displayed as shownin Figure 171, Figure 172 and Figure 173.

IEC202100175 V1 EN-US

Figure 171: Invalid quality of signals is shown as yellow

IEC202100176 V1 EN-US

Figure 172: Questionable quality of signals is shown as brown




IEC202100177 V1 EN-US

Figure 173: Reserved quality of signals is shown as white

Quality information is incorporated in the related value.

Source informationGUID-099AAA70-1B7D-4E2F-8D9D-297112F8142D v1

The source information is incorporated in the related value. Source of a signal (Substituted, Test) isdisplayed as shown in Figure 174 and Figure 175.

IEC202100178 V1 EN-US

Figure 174: Substituted source of signals is shown as rhombical

IEC202100179 V1 EN-US

Figure 175: Test source of signals is shown as triangular

The source information is incorporated in the related value.

Analysis indicatorsGUID-05268423-7482-4639-83A3-844425F99CC4 v1

When the Replay analysis is turned on and the GOOSE packet analysis fails, the data point changesto either Replayed or Security failed marker, additionally if the next packet is not captured within TimeAllowed To Live (TAL) time, the TAL expired indicator is placed on the plot:

For more details about GOOSE replay analysis see "GOOSE replay protectionalgorithm".

GUID-93A2487F-C27A-407D-A919-B60B17709BFD V1 EN-US

Figure 176: Analysis indicator markers




3.4 ITT600 – Explore SVGUID-7BE7A99E-3EEF-4293-ABB2-D369B833EC33 v1

3.4.1 OverviewGUID-446B169F-DC51-4ED7-A828-4A5D6446560A v2

ITT600 – Explore SV shows SV data captured from live streams or read from a capture file. ExploreSV supports 61869-9, IEC 61850 9-2 and 9-2 LE standards. There are two ITT600 – Explore SVworking modes, namely online and offline working mode. Explore SV allows to analyse simulatedand not simulated streams separately.

• Online working mode : ITT600 – Explore SV captures packets from the user selected networkadapter and displays the current and voltage phasors of a given stream within a polar chart.During the packets capturing, a user is also able to log the received packets to the disk by usingthe logging functionality.

• Offline working mode : ITT600 - Explore SV allows to load packets from a capture file recordedduring online mode, from external third party packets sniffer or internal buffer captured duringonline working mode allowing for each available stream to display the voltage and current trendsand phasors. Moreover, it is possible to explore the content of each SV packet and display thecurrent and voltage phasors related to that given moment in time. Explore SV switches to offlinemode right after stopping the online capture.

Main Explore SV window is divided in three areas: (see Figure):

• Toolbar• Detected streams list• Streams view

GUID-7E3BF36C-9021-424A-BBD1-6B3457B3B185 V1 EN-US

Figure 177: ITT600 – Explore SV main user interface

Main window areas (panes) are dockable and it's layout is saved when the Explore SV window isclosed and restored when opened.

ITT600 – Explore SV is a resource intensive application. It is highly recommended toset the power management of the computer to full performance in order to achievesmooth operation of the tool. Furthermore, when the application is running on alaptop, it is highly recommended to run it with the AC power supply and not solely onbattery power.




3.4.1.1 Keyboard shortcutsGUID-BC826BB3-AF8B-4E11-8BA3-F83F2BABFEF7 v1

Explore SV main window provides following keyboard shortcuts:

Table 9: Shortcuts




Ctrl + R Start/stop capturing

Ctrl + Shift + R Start/stop recording

Left/Right Arrow Navigate between samples

Ctrl + Left/Right Arrow Go to first/last sample

3.4.1.2 ToolbarGUID-94A4E30E-1B95-4EE7-8A75-2E32D77D5998 v2

The toolbar allows to switch between online and offline modes:

GUID-54378319-2C90-406A-8873-C5D3BDD5B1CF V2 EN-US

Figure 178: Online mode

GUID-9473535C-60B2-448C-A9A6-856D3BA8AD79 V2 EN-US

Figure 179: Offline mode

The online mode allows to:

• Select NIC to be used for capture the streams• Start/Stop capture• Save the captured packets to file

The offline mode allows to:

• Open capture file• Open recent capture file

3.4.1.3 Explore SV optionsGUID-D41D9BA2-8EBD-43A7-9F81-1D1C64DC3BCC v2

The main Explore SV options are accessible from main ITT window menu (Tools -> Options) in theExplore SV section (see Figure 180):




IEC202100188 V1 EN-US

Figure 180: ITT600 – Explore SV Options

The following parameters can be customized in ITT600 – Explore SV:

• Enable Offline Analysis: when enabled, ITT600 – Explore SV activates the offline analysis part.This allows user to perform analysis of the SV packets in an offline mode after online capture isstopped. If option is disabled then user have possibility to analyze only last 1000 capturedsamples which is the minimal buffer size for online mode.

• Buffer size: to enable offline analysis, it is required to store some SV packets in the memory.Storing more SV packets enables an analysis to a more granular level and vice versa. Whenless packets are persisted, the quicker the software responds to input and vice versa.

The buffer size is set per SV stream, setting large buffer size will utilize more PCmemory.

• Log file destination: with this parameter, user can specify his/her preferred place to store the logfiles for the SV packets.

3.4.2 Working with Explore SVGUID-3E0C588E-DD63-4F0F-B95D-1ECA2651AC1B v2

ITT600 – Explore SV provides two different working modes: online mode and offline mode.

3.4.2.1 Online modeGUID-44713D76-9C99-4DFF-835A-D5315A625000 v2

The online mode listens on a selected NIC and processes all captured SV packets from selectedstreams and shows them in the stream view. The list of available streams is dynamically updatedwhen new SV packets belonging to never-seen-before streams are detected on the network.

To start an online session, first select the proper NIC and then click on the Start capture toolbarbutton. See Figure 181.




GUID-435B4ABE-5DBC-4E18-80A0-8E0464D0AEED V2 EN-US

Figure 181: ITT600 – Explore SV - starting online capture

While capturing, it is possible to enable recroding captured packets to file by pressing Start recordingtoolbar button. This operation writes each received SV packet to file(s).

Detected streams listGUID-28FB5AE3-5984-4989-B3FB-2E147E55EC2E v1

The list of detected streams allows user to select stream for capture, open stream to view values,align streams etc.

GUID-C2637C53-E488-44CB-89AD-1EAA16151DEC V1 EN-US

Figure 182: Detected streams in online mode

Each detected stream in the list consist of:

• Checkbox to select stream for capturing - the size of the buffer is taken from the main ExploreSV options, if 'offline analysis option' is enabled. If this option is disabled, Explore SV will useminimal buffer required to calculate online values. If stream is not selected for capturing, ifstream will be opened the values won't be calculated and updated. When sample rate is notdetermined, the checkbox is disabled.

Samples rate are determined by the smpCnt field in the SV packet which will arrivewith correct value (Sampling rates and publishing rates are described in 61869-9)

• Stream descriptor edit button:• green information icon: indicates that stream is matching to the definition found in the

loaded model (SCD file) or is 9-2 LE (contains four currents, four voltages and either oneASDU or eight ASDU's)

• Orange warning icon: indicates that there is no definition of the stream in loaded model oris not like 9-2 LE and user should edit the descriptor so the values will be correctlycalculated .

• Stream name:• Gray color: indicates that stream is not selected to be captured• Black color: indicates that stream is not opened and is being captured• Green color: indicates that stream is opened• Can contain additional information:




• [Simulated]: if stream has simulation bit set• [HSR Lane]: if stream is sent over HSR frames

• Stream frequency:• Black color: indicates that frequency is calculated from the captured samples• Red color: indicates that frequency cannot be calculated (i.e wrong measurement values)• Orange color: indicates that stream frequency was overriden in descriptor editor

• Show/Hide icon: allows to open/close the stream. It is also possible to use left mouse doubleclick.

• Icon indicating if stream is:• online (green checkmark icon): packets are captured from the NIC• offline (red exclamation icon): no new packtes were captured (i.e stream is not sent by

merging unit enymore)

Streams list context menu allows to:

• Open/close stream• Align stream with another stream• Close stream alignment

GUID-F30179F1-3B4A-4FAC-8B22-8E3A1B54CA13 V1 EN-US

Figure 183: Online mode context menu

Editing stream descriptorGUID-711D4B79-4077-4E42-B6C5-874CE0D8C416 v1

Explore SV allows to edit stream definition in case definition was not found in the loaded model, thereis no model loaded or if found stream definition is not correct (stream name matches but in fact userknows the stream has different definition).




GUID-749374DB-1D09-41F3-A430-112F917B3587 V2 EN-US

Figure 184: Stream descriptor editor

Editor allows to:

• Set the channel name• Set the channel type (current or voltage)• Set the channel phase• Override frequency

The most important for correct values calculations is the type of the channel. The standard definesthe scale used to recalculate the raw measurement values from the SV ASDU:

• 0.001 for currents• 0.01 for voltages

The neutral phase is omitted in frequency calculation. If stream is already opened - editor containsadditional button 'apply' - to save the changes and re-open stream. If stream is not opened, thechanges are applied immediately after editor is hidden.

Overriding frequency is useful when it cannot be calculated from the values (red color) but userknows which frequency should be used. The default frequency used in calculatin in case it is notoverriden and not calulated is 50Hz.

Stream viewGUID-94319334-8956-45F8-84DB-683296DB3B71 v2

The detected stream can be opened to view the values and calculated phasors. Views will beupdated if the stream is also selected for capture:




GUID-B19904B7-064C-46EE-A6CB-EB0F0C689B48 V2 EN-US

Figure 185: Stream view

The view consist of two sections:

• Phasors view• Channels view

Phasors viewGUID-F974C145-B1A2-44A5-B2E6-9D6F5BD3E4D1 v1

Displays calculated phasors in a polar chart using an absolute scaling system. There are twodifferent scales, i.e., one for the current and another one for the voltage. Each phasor is divided by its




own full-scale and the resulting value is used as phasor magnitude. User can adjust the values ofeach of the full-scale using the appropriate slider in the settings:

GUID-FC963B31-9E5E-4BD1-9AD0-26859B0C0E19 V2 EN-US

Figure 186: Phasors view settings

There are four line representations related to phasors quality:

• Good, displayed as solid line: all the values used for calculating this phasor were good quality.• Invalid, displayed as dashed line: at least one of the values used for calculating this phasor had

quality validity different than good• Warning, displayed as dotted line: at least one of the values used for calculating this phasor was

different than good and quality validity was good• Missing point, displayed as line dashed with double dots: at least one of the values which should

be used for calculating this phasor was missing.

Channels viewGUID-1D436AF9-8BFE-4DE0-A73D-A1943BF75007 v1

Channels view consits of stream name and additional information:

GUID-98368058-6EA8-4C70-8F75-F94ABFE2D5B2 V1 EN-US

Samples additional information:




GUID-81D983BB-B648-47EF-8835-ED510C2863D9 V1 EN-US

The S.Sync filed in this view is not a SmpSync value from sample, but the minium value from allsamples used to calculate the phasor. The number of samples used to calculate the phasor iscalculated as Samples Rate divided by Frequency (calculated/overriden/or default 50Hz).

Table with the channels values:

GUID-F07C623C-516F-4E4C-926F-15DFE5DCD474 V2 EN-US

Figure 187: Channels table

Channels table consists of:

• Checkbox to show/hide channel• Channel name• Values:

• Calculated RMS and angle• Instantaneous (raw) values

• Qualities• Settings, which allows to:

• Switch between RMS/angle and instantaneous (raw) values• Change precision of displayed values




GUID-CF2A1ED8-41F2-489F-89D9-B8E042DDDCC2 V2 EN-US

• Context menu: set/unset channel as reference

Multiple streams viewGUID-F99E2FEB-ACDC-4FB9-B592-2FF70015A2C6 v1

Explore SV allows to view multiple streams at once with the option to show them separately:

GUID-4585B882-7395-425C-B988-AC492C885705 V2 EN-US

Figure 188: Multiple streams opened

Align the streams together (two streams can be aligned, but is allowed to align multiple pairs) usingthe context menu 'align with' on the detected streams list:




GUID-116C00F1-FCFE-43C0-BD11-81C4B2A6BB6A V2 EN-US

Figure 189: Aligned streams

Aligned streams are placed next to each other and the top bar is shown indicating the alignment.Streams are aligned by frequency, sampled values and SmpCnt from the samples. If the values arenot matched, the phasors view will change the color indicating that streams are not synched:




GUID-A3760924-523A-43D3-9A60-EDDB711CF4BB V2 EN-US

Figure 190: Not synched streams

Ref FunctionGUID-671AFB0D-260C-41A5-A2C7-D9DA0C8D5D36 v2

Channels list allows to select the channel as a reference via the context menu:

GUID-4D844C8E-87BF-4379-BDB5-D3535DEC91A5 V2 EN-US

Figure 191: Use channel as reference

If a channel is set as a reference, its phase angle is set to 0°, and it is used as “a reference” forcalculating phase angle of the other channels.




If two streams are displayed in align mode, by setting a channel as reference, thephase angle of the reference channel is used as “a reference” for calculating thephase angles of channels of both streams. In this way, it is possible to compare theangle difference between the channels belonging to different streams. However, usercan select different channels to use as reference, one for each stream. In thisparticular case the channel reference is considered only for all the channelsbelonging to that stream.

Recording the SV PacketsGUID-7609B512-C5EB-448F-8445-4A4E1C736FAD v2

It is possible to record SV packets to file during online capture. To activate this function, click on the"Start Recording" button on the toolbar to start writing to file all the packets captured.

The maximum size of each logged file is fixed to ensure that the file size is not toolarge for further operation. During logging, when file size reach ~116MB, a new file iscreated as a container for the next recorded packets.

3.4.2.2 Offline modeGUID-B5D96546-784E-47DE-93FC-CB343596981E v2

Users have two possibilities to display SV data in offline mode:

• Run an online capture and open the captured stream after stopping - the detected streams list iscleared from streams which were not selected to be captured at all (or simply do not containsany captured packets). After stop of online capture, the Explore SV is switched to offline mode

• Load a capture file (open new or recently opened file).

The detected stream list is similar to online mode, but is lacking the offline/online icon indication andthe checkbox to select stream to be captured and contains option to save the stream packets to file.

Multiple streams can be opened to view, one in main window and others in separate windows:

GUID-83C21E30-6239-4949-A455-7F6FDBACEE27 V1 EN-US

Figure 192: Two streams opened in offline mode

Offline views contains trends view and details panel with statistics and selected sample details(multiple samples can belong to one packet - the sample is in fact the ASDU). The phasors arecalculated based on the selected sample.

The phasor view and channels view are described in online mode section.




Offline mode does not allow to align the streams.

TrendsGUID-760CFA9B-08FF-4F0F-A765-ECB1B4C0C9E1 v2

ITT600 – Explorer SV provides an integrated feature to show the trend of the voltage and current.Trend display shows at the same time both current and voltage values and qualities. If streamcontains only one type of channel - the second one is hidden. To navigate through the trend graph,navigation panel and zoom in/out function are provided. Left and right buttons of the navigation panelcan be used to access the samples. Besides that, when the play button is clicked, the cursor of theTrend display will be moved automatically and each sample will be shown sequentially. Additionally,based on the level of zoom currently used, the voltage and current trends are displayed ascontinuous lines or as a data points. This functionality allows the users to have a proper level ofdetails based on the required zoom.

User can move the axes or just click over any current/voltage point in the trend in order to display thedetailed information of the current SV packet and this is shown on the left section of the trend display– in the Analyzed 9-2 packet tab (see Figure 193). Additionally, the particular point selection in thetrend display will trigger the visualization of current and voltage phasors in a polar chart. Each pointin both the current and the voltage trends are calculated based on the data from the channels ofdata, i.e for 9-2 three channels for the 3 phases plus the neutral one. By clicking the checkbox in thechannels view it is possible to hide/show that channel in the trend and phasor views.

GUID-CD2B7FE8-BBD2-4A1D-A9A3-FD29760DEC23 V1 EN-US

Figure 193: ITT600 – Explore SV – Trend display and data analysis part

While the missing points are represented red dot style in the continuous line view; when the viewchanged to a data points, this missing points are shown as empty space (see Figure 194).

GUID-BFBEAD6C-1099-4D7B-A851-EB90307EF093 V1 EN-US

Figure 194: ITT600 – Explore SV – Missing points are shown in the trend displays

Bad channels are shown zigzag style fill udner trend line (see Figure 195).




GUID-4C685084-8EDE-4E1B-88F7-5098AB41D44F V1 EN-US

Figure 195: ITT600 – Explore SV – Bad channels are shown in the trend displays

The trend display update may decrease with the number of samples in stream.

Statistics analysisGUID-EFDE054C-5C2E-4AB8-84D6-21617C92D014 v2

ITT600 – Explore SV provides several functionalities to dig deeper into the quality of the packets.The statistical information is available only in the offline mode. The details panel allwos to view:

• Stream statistics• Packet details

In packet view user can evaluate in detail the content of each particular packet that is used toconstruct a point in the graph.




GUID-EF3927F0-14F3-47C1-9587-F530CB5964B2 V1 EN-US

Figure 196: Packet details view

In stream mode user can browse through statisctics which shows a summary of the collectedsamples including information such as quality, anomalies, missing points and ranges in which masterclock ID and stream sync values were changed.

Stream details view consist of statistics list with counter of entries inside each category (number ofranges)




GUID-DC504D82-C361-4469-AE69-5DA1BC76A82F V1 EN-US

Figure 197: Selected stream statistic with counter of its entries

After selecting any category user can see a list of entries. Each entry consist of amount ofconsecutive samples which fit to selected category and range of sample numbers in which thatsamples was captured. After selection of specific entry inside statistics category application willnavigate to the first sample from selected range.

Sample numbers used in showing range for statistics entries includes missingsamples so it could not necessarily match sample numbers in capture file, alsopackets can contain more then one ASDU and so the numebr of packets in capturefile will be different then number of samples.

Statistics are calculated per sample so in case when we'll have for example morethan one channel with test quality coming from one sample it will be still treated asone and will not cause any additional entries in statistics.

Saving stream to fileGUID-DE2B280F-6BEA-4191-A594-AA1389900495 v1

In offline mode user have posibility to save each stream to file by clicking "Save to file" icon localizednext to show/hide stream. It allows user to choose destination path and will save all packetsoriginated from selected stream to capture file




GUID-48A0B202-1316-4DE0-953C-1C08BA86F276 V1 EN-US

Figure 198: Save to file

3.5 ITT600 – Explore ModelsGUID-9C37E242-EE31-4E9B-B9E5-AE0EC8F0A51F v1

3.5.1 OverviewGUID-8362F944-574A-412F-8FF7-54E00F088A93 v1

ITT600 – Explore Models provides functionality to compare two different SCD files or even an IEDonline configuration with a SCD file.

The GUI can be divided into four main areas (See Figure 199):

• Main menu (red).• Toolbar (blue).• Comparison results (green).• Models to be compared (yellow).




IEC202100204 V1 EN-US

Figure 199: ITT600 - Explore Models main user interface

3.5.2 File MenuGUID-B1F12491-2EC3-4687-B792-028A01A672E4 v1

The file menu provides basic functionalities, namely (see Figure 200):

• Load the models.• Exit the application.

IEC202100205 V1 EN-US

Figure 200: ITT600 - Explore Models File menu

3.5.3 Help MenuGUID-F8AF6B3E-8CBB-45FC-8FD6-9F7D2741B418 v1

The Help menu provides Model Functionalities (see Figure 201).

IEC202100206 V1 EN-US

Figure 201: ITT600 - Explore Models Help menu

3.5.4 ToolbarGUID-FF20DFB5-BB73-463A-8997-7D95D1023CEC v1

Toolbar provides buttons to navigate through the compared model and comparison results, namely(see Figure 202):




•Load left and right model for comparison.

• Compare models.•

Move to next or previous difference.•

Export the differences to .xsl file.

IEC202100210 V1 EN-US

Figure 202: ITT600 – Explore Models Toolbar

3.5.5 Model panelsGUID-58D64BC5-CC0A-497D-A316-194B5FA4871C v1

The two model trees will display the structure of the IEC 61850 model contents (see Figure 203).

IEC202100211 V1 EN-US

Figure 203: ITT600 - Explore Models with loaded models

3.5.6 Comparison panelsGUID-71E42D74-7C6A-42B9-83D3-6445358B7FCD v1

The comparison panels will display the result of the model comparison in the left tree and details inthe right panel to the user (see Figure 204).




IEC202100212 V1 EN-US

Figure 204: Comparison result window

3.5.7 Comparing SCL FilesGUID-F0856E98-DA7D-4FE3-9AE9-AEAB27751648 v1

ITT600 - Explore Models compares SCD files by loading the files in its internal representation – themodel.

To compare two SCD files they have to be loaded to the models first. One way of doing it is selectingthe load function from the File Menu.

Another way is to right click in each of the model windows and selecting the Load SCL model contextmenu.

If you have already loaded an SCD file in the ITT600 – Explore IEDs prior startingITT600 – Explore Models, the left model (model 1) will always be taken from theExplore IEDs.

While ITT600 is loading SCL model it automatically corrects some formatting issuessuch as trailing spaces, prohibited signs etc. In that case when we open modelcomparison window with model already loaded, it looks in the same way as the oneloaded in ITT600. While loading second model to compare we use the samecorrections to avoid getting differences between the same files. However this cancause the situation when the displayed values will not match the actual ones in SCL.In case you want to compare raw/unmodified data as it is in SCL you need to reloadleft model as first step after opening comparison window or start it without modelloaded in ITT600.

After both models are loaded you have to select a node on each side (see Section "Comparing SCLFiles"). The “Compare” toolbar button becomes enabled. Clicking this button will show a dialog withfilters (for detailed explanations about the filters, see Section "Comparison Filters"). Click OK toproceed with the comparison.




When comparing two substation nodes, the tool will compare the two differentsubstation section elements.To compare all IEDs, select the all IEDs folder. To compare individual IED, select oneIED on each side. See Figure 205.

IEC202100213 V1 EN-US

Figure 205: One IED on each side is selected to be compared

3.5.8 Comparing ITT600 – Explore IEDs Data with an SCL FileGUID-7FBDA51D-530E-4446-A552-403E2889F94B v1

To compare the data contained in ITT600 – Explore IEDs with another SCD file, the data has to beloaded before starting ITT600 – Explore Models.

The left model of ITT600 – Explore Models will always contain the data from ITT600– Explore IEDs.

To compare online data from an IED with an SCD file, connect to the IED first (theconfiguration will be uploaded) and then start ITT600 – Explore Models. The leftmodel is automatically set to the model from ITT600 – Explore IEDs.

3.5.9 Comparison FiltersGUID-C9127608-6E5B-429A-A89C-A9F4E00FBE36 v1

Comparison filters (see Figure 206) are useful if two different configurations are compared, but therehave to be differences. For example, two typical (identical from the IEC 61850 configuration point ofview) IEDs are compared. They are the same but they must have different addresses. Thus, theaccess point addresses have to be excluded from the comparison.




IEC202100214 V1 EN-US

Figure 206: ITT600 - Explore Models comparison filters

The available filters are listed as follows:

• Functional constraint filters• Ignore differences in Status (FC = ST) values. Status values (positions, binary inputs etc.)

are not considered as differences. This is often desired if comparing online and SCLmodels.

• Ignore differences in analog (MX) values. The same as status values, but formeasurements.

• Ignore differences for different trigger options. Different trigger options (DataChange,QualityChange, etc.) will be ignored.

• Ignore differences in extended definitions (FC = EX).• Ignore differences in configuration (FC = CF) values.• Ignore differences in description (FC = DC) values.• Ignore differences in sample value (FC = SV) values.

• Other filters




• Ignore differences in access point addresses. Access point addresses (IP, MAC …addresses) are not checked.

• Ignore type differences when comparing enums to INTs. Online data type representationcan differ from SCL. Since it is not possible to receive everything contained in the SCLfrom an IED, data type differences will occur.

• Ignore short address differences. Different short addresses will not be taken into account.• Control Block Filters: provides comparison filters for various control block attributes

To compare online data from an IED with an SCD file, “Ignore type differences whencomparing enums to INTs” should be used.

3.5.10 Comparison ResultsGUID-004A614F-BF5B-457C-8A3A-6550D15AF725 v1

The results of the comparison are shown in a simple way:

• Bold font means: There is a difference on a node below.• Red font means: There is a difference on this node.• Orange font means: There is a difference in the data types.

Figure 207 shows an example that the IP address of the compared IEDs are different.

IEC202100215 V1 EN-US

Figure 207: An example of comparing two SCD files using ITT600 – Explore Model

Clicking on the red node will show more information about the difference (shown in Figure 207). Thisdetailed information cannot be displayed all the time, sometimes it will remain empty.

If something is missing in one model it will be shown in the result with a different icon:

• Only available in the right model• Only available in the left model• Available in both models, but there is a difference

Furthermore, different values will be shown in red color and different types are shown in orange.




Since ITT600 - Explore Models does not know which model is correct, it is up to the user to do furtherinvestigation. ITT600 – Explore Models clearly indicates that the two files are not identical.

3.5.11 Export differences to .xsl File.GUID-411C0A2D-0D33-4375-8624-211CC0696AEB v1

The comparison result can be exported via the export button into selected location.

To export the differences to .xsl file both models must be loaded and comparison hasto be completed.

The report consists of two pages, first contains the export information: Date when export was made,models used and the author of the report.

IEC202100219 V1 EN-US

Figure 208: An example of .xsl export information page

Second page is the comparison results, which displays node name, path, type and the differenceinformation.

IEC202100220 V1 EN-US

Figure 209: An example of .xsl export information page

3.6 Software UpdateGUID-19100515-E537-4C51-AC15-3AC12DAD1244 v1

It is possible to check for a new version of the ITT600 SA Explorer via the Check for Updates menuin the Help main menu (see Section "Help menu"). Simply click on the menu and a window willappear on whether an update is available or the software is up-to-date. See Figure 210.




IEC202100221 V1 EN-US

Figure 210: Check for Updates windows – no update is available




Section 4 LimitationsGUID-C476BC43-F0FE-42A4-BC9F-F6BD486BC93F v1

For limitations see the release notes.

1MRK512006-UEN Section 4Limitations



142

Section 5 AppendixGUID-BAC11DBC-9E74-4BDE-A223-FBF767F39C53 v1

5.1 TroubleshootingGUID-3BC5AC88-B156-4B51-8714-D7D02534881A v1

Problem Possible reasons and solutionsNo packets received Check whether you have enabled a firewall on the PC

and disable it.Check whether you have a running VPN client on the PCand disable it.Check the NIC settings.Some protocols, like i.e GOOSE requires thePromiscuous mdoe to be enabled on selected captureNIC.See section "Configuration"

Packets are only received in one direction Check whether you have a running VPN client on the PCand disable it.See section "Configuration"Check the properties of the network connection and theadapter.

No connection to IED possible Try to ping the IED first. If it responds to the ping but itbut it cannot be connected by Explore IEDs, check theOSI addresses. Windows (or third party) firewall mayblock the connection.

IED does not respond to ping. To be able to ping an IED the PC has to be in the samenetwork. This means both devices need the same subnetmask and a similar (not the same!) IP address.

Capturing packets from an IED is not possible. If you want to capture frames from an IED that are sentto a SCADA, you have to run the analyzer on theSCADA PC or connect the PC with the analyzer with ahub between the SCADA PC and the IED or enable portmirroring on the switch.

ITT600 – Explore Models shows lots of INT / enumerrors

Enable the “Ignore Type difference” flag in the “ExploreSCL” if you compare online data with an SCD file.

Only GOOSE frames are captured with ITT – ExploreEthernet

Port mirroring functionality in the switch is not enabled.Thus only broadcast / multicast frames are received.

No VLAN tags are contained in frames Some switches do not support VLANs.The NIC configuration cuts off the VLAN tags from theframes.See section "Configuration"

Changing of switch positions in the IED will not updatethe data in ITT600 – Explore IEDs.

Enable the RCB to get an automatic update of the datain the tree view, or update the data manually.See section "Manually update values from an IED" and"Spontaneous update of values"

No entries are logged in the process event list. Reporting is not set up. See section "Spontaneousupdate of values"

Reports cannot be enabled Are there free RCBs? Check how many clients arealready connected to the IED, and, if necessary,disconnect one of them.

5.2 ITT600 – Explore IEDs Default Address ParametersGUID-6E51B51D-11ED-428D-A06A-98D1A9041C23 v1

1MRK512006-UEN Section 5Appendix



5.2.1 Local AddressGUID-B0FCD8B3-92D3-463E-8819-7C9A96A990E7 v1

Description ValueOSI TSEL 00,01

OSI SSEL 00,01

OSI PSEL 00,00,00,01

OSI AP Title 1,3,9999,33

OSI AE Qualifier 33

5.2.2 Remote AddressGUID-2E24D13A-9351-4106-9AEF-069CAAF96EB0 v1

Description ValueOSI TSEL 00,01

OSI SSEL 00,01

OSI PSEL 00,00,00,01

OSI AP Title 1,3,9999,33

OSI AE Qualifier 23

5.3 ITT600 – Explore Ethernet Supported ProtocolsGUID-E87BCCB7-7F9F-42B8-B760-DE3E89E7BCE1 v1

Protocol Name DescriptionMMS Manufacturing Message Specification Communication

protocol for IEC 61850

(R)STP (Rapid) Spanning Tree Protocol.Protocol used by switches to determine alternate(redundant) routes

(R-)GOOSE (Routable) Generic Object Oriented Substation EventThe IEC 61850 “real time” protocol for bay tobay communication

NTP Network time protocol.Used for time synchronization of IEDs and clients.

IEEE1588 (PTP) - V1 and V2 Precise time protocol.Used for time synchronization of SV Servers.

SNMP Simple Network Management ProtocolDiagnostic information about network nodes.

(R-)SV (Routable) Sampled ValuesSampled Values according IEC 61850, IEC 61869

IEC60870-5-104 IEC SA Protocol for SCADA / NCC connections

PRP Parallel Redundancy ProtocolPartially supported, not all sub-types of supervisionpackets are decoded

DNP3.0 / TCP Distributed Network Protocol over TCP Protocol betweenRTUs and SCADA Systems

Modbus / TCP Modbus Protocol over TCP Protocol between RTUs /PLCs and SCADA Systems

ARP Address Resolution Protocol


Section 5 1MRK512006-UENAppendix



Protocol Name DescriptionICMP Internet Control Message Protocol

Partially supported, not all sub-types of packets aredecoded

IEEE 1344 IEEE Synchrophasers for Power Systems transmissionprotocol (superseded by IEEE C37)

LLCP Logical Link Control Protocol

HSR High-availability Seamless Redundancy

VLan Virtual Lan

SPA SPA-Bus ASCII-based protocol for serial communication

5.4 IEC 61850 Edition 2 featuresGUID-89D0E343-236D-49E2-B6F2-6223776D6D63 v1

5.4.1 Local Remote Handling FeatureGUID-BB571C0C-01B7-4590-9AA5-EF502BFAAF28 v1

The local / remote handling in IEC 61850 was focused on conventional bay level local/ remotefunctionality. IEC 61850 Edition 2 introduces some more data objects which allow a better modellingof station/network level’s local remote functionality and separation of the key used to set local modefrom the functions in local mode. Due to these additional data objects, the following two optional dataobjects have been introduced in all logical nodes that can send commands:

• LocKey: SPS, represents the (state of the) local / remote key which can be sent – for instancevia GOOSE – to all logical nodes to switch between local and remote state. The Loc attribute ismandatory on all controllable functions. The LocKey is an optional feature on LLN0. In addition,Loc is optional at LLN0 as well.The status change on LocKey always influences the Loc on the same LN (if there is one). Incase the LocKey is located on LLN0, the status change will influences the Loc on LLN0 and theLoc on all LNs related to the same RootLD and not having its own LocKey.

• LocSta: SPC, represents the station local state and thus switches between station and networkcenter command mode. It is possible to launch command from station level, and thus this statecan be switched via the communication from some station level client. The command to changethe LocSta always influences the LocSta status on the same LN. If it is located in LLN0, itsstatus will be used by other LNs related to same RootLD.

To decide if a command is allowed to be executed from control authority perspective, the status ofrelevant Loc and LocSta has to be taken into account.

Additional information can be found in IEC 61850 - 7.4 Edition 2 Annex B.

5.4.2 Mode Behavior HandlingGUID-F82F981C-E96A-4111-BE77-6D466A6DF9D4 v1

Unlike in IEC 61850, Mod and Behavior is now precisely described.

In IEC 61850, it is up to the vendor to decide on how an IED behaves in case the IED is set in TestMode or when the IED receives Data with quality Bit Test set. The only condition is that the behavioris described in the related documentation (PIXIT).

In IEC 61850 Edition 2, Mod and Behavior is clearly described how the IED has to behave in case aLN or LD is set into a certain Mod. This is one of the most significant improvement that is introducedin IEC 61850 Edition 2. As opposed to IEC 61850, IEC 61850 Edition 2 defines clearly that switchingbetween the modes should only happen as a result of an operator command to the data object Mod.




This feature was introduced to improve the testing capabilities in IEC 61850 systems. Several usecases for testing engineers, commissioning engineers and maintenance people could be seen.Details could be found in IEC 61850 - 7.4 Edition 2 Annex A.

5.5 IEC 61850 Edition 2.1 featuresGUID-BEC969DD-0CAF-4293-8171-BF33B77FBD9D v1

5.5.1 GOOSE replay protection algorithmGUID-4DD37DBD-8FBE-4608-9ED3-04533DF48D60 v1

Replay protection analysis is implemented for GOOSE/R-GOOSE with limited security checks in bothExplore GOOSE and Explore Ethernet.

Current version of ITT600 explorer is able to parse the PDU security extension but islimited to perform full security checks and verifications by the lack of KDC - KeyDistribution Center.

GOOSE replay protection is configured by following settings:

GUID-C9DB7B81-9998-4B08-B572-F21D080542CC V1 EN-US

Figure 211: Replay analysis options

• Time deviation [ms]: checks if difference between timestamp in received goose packet and localtime is in range of this value. Value 0 indicates that checking is disabled - any PDU timestamp iscorrect.

If time deviation is enabled, it is important that PC time clock where ITT is running issynchronised with IED time clock, otherwise the time deviations should be increasedor disabled so the analysis will not treat most of the packets as replayed.

Figure below shows the workflow of replay protection according to IEC 62351.




GUID-C0E70215-0C77-4481-9D51-194BD5465878 V1 EN-US

Figure 212: Goose replay state machine

For detailed description of the state machine please refer to the IEC 62351-6:2020.

The packets are analysed per GoCBRef and simulation bit pair - packets with thesame GoCBRef but different simulation bit are processed separately

Below is the simplified description of the replay protection analysis:

1. Wait for next packet2. Check the capture time:

If this is first analyzed packet or the TAL expired: values are reset to initial state (values of laststNum, last sqNum, expected timestamp of next packet)

3. Security Check:3.1. If any of the following is fulfilled:

a Model is not loaded in ITTb Packet is not matched to any GCB in loaded modelc Matched GCB has no security enabled (not expected by configuration)d Matched GCB has security enabled (expected by configuration) and packet

contains security extensione Presence of security extension in packet does not differ from previous packet

Security check passes and proceed to step 43.2. If security extension is expected by configuration and packet does not contains it: Security

check fails and proceed to step 13.3. If presence of security extension differ from previous packet: Security check fails and

proceed to step 14. If stNum increased check the packet frame time (timestamp in GOOSE Pdu):




4.1. If time deviation check is disabled or packet frame time is in range [Capture time - timedeviation; Capture time + time deviation]: time check passes, proceed to step 5

4.2. Time check fails: packet is replayed, proceed to step 15. If stNum equals 0: not replayed, update last values and proceed to step 16. If stNum is lower than last stNum or stNum is the same but sqNum does not increased: packet

is replayed, proceed to step 17. Not replayed, update last values and proceed to step 1

Reset to initial state means that analyser does not expect any value of stNum,sqNum or next packet within TAL time




149

Hitachi Energy Sweden ABGrid Automation ProductsSE-721 59 VästeråsPhone +46 (0) 10 738 00 00E-Mail:[email protected]

https://hitachienergy.com/substation-automationScan this QR code to visit our website

1/1

© Hitachi Energy 2021. All rights reserved.

EU Declaration of Conformity REC650

Document identity

1MRK 000 612-66 Revision C

Declaration We Hitachi Energy Sweden AB, SE-721 59 Västerås, Sweden, declare under our sole responsibility that the family of apparatus:

Bay Control Type: REC650, Ver. 1.0 acc. to Product Guide 1MRK 511211-BEN

to which this declaration relates is in conformity with the following relevant Union harmonization legislations:

Directives 2014/30/EU EMC Directive Official Journal of the EU (L96, 29/03/2014, p. 79-106)

2014/35/EU Low Voltage Directive Official Journal of the EU (L96, 29/03/2014, p. 357-374)

Application of the objects

The product is intended for use in the industrial environment and to protect high voltage or high-power apparatus, and thus normally used in a harsh electromagnetic environment near high voltage apparatus.

Harmonized Standards

References to the relevant harmonized standards or other technical specifications to which conformity is declared:

EN 60255-26: 2013 Electromagnetic compatibility requirements

EN 60255-27: 2014 Product safety requirements

Authorization Signed for and on behalf of:

Marko Kovacic (PM) Date

1MR

K512

006-

UEN

© 2004 - 2021 Hitachi Energy.All rights reserved

https://hitachienergy.com/substation-automation

ITT600 SA Explorer Integrated Testing Tool User Manual ...

Documents