ARIEC60870IEC 60870 evidence analyzer

Free Apache-2.0 • IEC-101 / IEC-103 / IEC-104 • Windows

IEC 60870 testing with clear evidence, raw protocol visibility, and PDF reports.

ARIEC60870 Evidence Analyzer is a free Windows desktop app for engineers who need to check IEC 60870-5-101, IEC 60870-5-103, or IEC 60870-5-104 communication in authorized lab, FAT/SAT, commissioning, or troubleshooting environments.

Download Windows ZIP Read quick start
CI status Pages deployment status Package build status License: Apache-2.0
v3.6.6One EXENo installerNative PDF evidence reportCI testedSBOM

What is it?

A focused IEC 60870 evidence analyzer for engineering work.

ARIEC60870 is designed for engineers who need practical communication evidence without building a full SCADA stack. It runs a controlled master/client session against one authorized endpoint, decodes the traffic, keeps raw frame details visible, and turns the session into a professional PDF report.

For FAT/SAT and commissioningCapture the behavior needed for review: startup, General Interrogation, values, events, diagnostics, and reportable findings.
For troubleshootingSeparate physical link, addressing, protocol state, data mapping, and reporting problems before escalating.
For readable handoverUse high-level evidence views for reviewers while retaining raw protocol detail for engineers.
For open-source workflowsApache-2.0 source, CI, release checks, checksums, SBOM, and provenance-friendly release packaging.

Main features

Everything centered around evidence you can actually review.

The application is intentionally practical: configure a protocol session, run it, review the evidence, inspect protocol details, and export the report.

01Setup workspaceConfigure IEC-101 serial, IEC-103 serial, or IEC-104 TCP/IP using project-approved communication settings.
02Operator EvidenceReview high-level evidence rows for session status, received values, events, GI behavior, and diagnostic notes.
03Value ViewerInspect decoded points with IOA or protocol-specific addressing, current values, quality flags, and readable names when mapping is loaded.
04Event LogTrack spontaneous events, class polling evidence, state changes, timestamps, and sequence observations in one workspace.
05Frame TraceKeep TX/RX frame visibility available for deeper engineering checks when high-level evidence is not enough.
06Diagnostics and findingsSurface communication and protocol findings such as incomplete GI behavior, addressing mismatch symptoms, or frame-level warnings.
07Mapping profilesLoad user-owned JSON mapping profiles so evidence can show approved project signal names without embedding a vendor database.
08Native PDF evidence reportExport a professional PDF evidence report generated directly by the built-in native PDF engine.
09Single ZIP releaseDownload one Windows ZIP, extract it, and run ARIEC60870.exe. No installer and no start batch file are required.

Protocol coverage

IEC-101, IEC-103, and IEC-104 workflows with one evidence model.

The goal is not to hide protocol details. The goal is to show them in a way that helps engineers explain what happened during a test session.

IEC 60870-5-101

Serial telecontrol workflow for RTU or gateway checks.

  • FT1.2 frame transparency.
  • General Interrogation evidence.
  • Type ID, COT, CA, IOA, value, quality, and timestamp review.

IEC 60870-5-103

Serial protection relay workflow for relay-side communication checks.

  • Reset link and FCB handling.
  • Class 1/Class 2 polling evidence.
  • FUN, INF, DPI, measurand, relay timestamp, and mapping support.

IEC 60870-5-104

TCP/IP client workflow for endpoint checks and session-level visibility.

  • STARTDT, STOPDT, TESTFR visibility.
  • I/S/U frame and sequence counter evidence.
  • Common ASDU decode and findings.

Product boundary

Focused scope keeps the app understandable and safe.

  • One active endpoint/session at a time.
  • Not a production SCADA system.
  • Not a gateway or production redundant master station.

How to use

Download, run, configure, review, export.

The first-run path is intentionally short so a normal Windows user does not need to choose between several launchers or build from source.

1. DownloadOpen GitHub Releases and download ARIEC60870-vX.Y.Z-win-x64.zip.
2. Extract and runExtract the ZIP to a local folder and double-click ARIEC60870.exe.
3. ConfigureOpen Setup and enter the approved COM/TCP endpoint settings, addresses, ASDU profile, and optional mapping profile.
4. Start a sessionRun the authorized test session, including General Interrogation when a startup snapshot is required.
5. Review evidenceCheck Operator Evidence, Value Viewer, Event Log, Frame Trace, Diagnostics, and Report workspace.
6. Export PDFRefresh the report preview and export the PDF for internal review or handover after checking sensitive data.

Use cases

Where ARIEC60870 helps most.

Use it when the question is not just “is the socket open?” but “what protocol evidence can we show?”

FAT preparationCheck endpoint behavior before formal testing, prepare evidence notes, and identify addressing or GI gaps early.
SAT and commissioning reviewRecord a focused session and export a concise evidence report for engineering discussion.
TroubleshootingCompare expected Type IDs, addresses, values, events, quality flags, and raw frame behavior.
Training and protocol learningShow engineers how IEC-101, IEC-103, and IEC-104 traffic maps into human-readable evidence.

Screenshots

Current workspace preview before you download.

The landing page now uses the latest application screenshots with stable public asset names. Click an image to enlarge it.

Evidence workspace

High-level evidence, session context, protocol details, and review notes in one workspace.

Value Viewer

Decoded points with addressing, values, quality, and readable labels when mapping is loaded.

Event Log

Timeline view for events, changes, communication status, and timestamped evidence.

Diagnostics

Findings and protocol symptoms separated from raw traffic so reviewers can act faster.

Report workspace

Prepare a clean evidence package before exporting the native PDF report.

Setup workspace

Protocol mode, endpoint settings, addressing, timing, and mapping profile in one dialog.

License and commercial use

Free Apache-2.0 source with clear boundaries.

ARIEC60870 is free and open source. It can be used in internal or commercial engineering environments subject to Apache-2.0 terms, organizational policy, customer/project rules, and safe authorized use.

Important boundaryARIEC60870 is an engineering evidence analyzer for authorized testing and troubleshooting. It is not a production SCADA system, not a protection device, not a gateway, not a production redundant master station, and not a replacement for approved FAT/SAT procedures.Read Apache-2.0 licenseRead licensing FAQ

FAQ

Common questions before downloading.

These short answers help users decide whether the tool fits their workflow.

Is it free?

Yes. The source code is Apache-2.0 and the public Windows release does not require a license key, subscription, or account.

Can it be used commercially?

The Apache-2.0 license is permissive, but users must follow the license terms, internal company policy, and project/customer rules.

Does it replace a test procedure?

No. It supports evidence review and troubleshooting. Formal acceptance still follows the approved project FAT/SAT procedure.

Does it include vendor databases?

No. Signal naming comes from user-owned JSON mapping profiles so project signal lists stay under user control.

Download

Get the latest Windows ZIP and run ARIEC60870.exe.

The release is optimized for normal users: one self-contained desktop executable, short first-run notes, documentation, neutral examples, checksums, SBOM, and provenance-friendly workflow outputs.

Download latest releaseDownload guide