Troubleshooting
Practical checks for no response, GI gaps, command issues, mapping issues, and report findings.
Use this page to separate physical link problems, addressing problems, protocol state problems, mapping problems, and reporting problems before escalating to vendor or site teams.
No response
Start with transport and addressing before assuming the protocol decoder is wrong.
- IEC-101/103: check COM port, baud rate, parity, stop bits, RS-485 direction, and wiring.
- IEC-104: check IP address, TCP port, firewall, routing, and whether the endpoint accepts the client.
- Confirm link address and common address against the device configuration.
General Interrogation incomplete
GI gaps often come from addressing, device profile, polling policy, or expectation mismatch.
- Verify COT and common address in Frame Trace.
- Watch ACD/DFC and Class 1/Class 2 activity for serial links.
- Confirm the expected Type IDs or FUN/INF values exist in the device profile.
IEC-103 relay data missing
Relay serial communication often needs careful timing and polling review.
- Check reset link and FCB behavior.
- Watch class polling and event drain behavior.
- Compare FUN/INF values against the mapping profile and relay documentation.
IEC-104 session unstable
Look at TCP reachability first, then session control frames.
- Confirm STARTDT/STOPDT/TESTFR behavior.
- Review I/S/U frames and sequence counters.
- Check reconnect behavior and timing in the Event Log and Frame Trace.
Values appear without readable names
Protocol decode and friendly naming are separate.
- Load a project-owned JSON mapping profile.
- Check IOA or FUN/INF keys in the mapping file.
- Keep signal naming under user/project control instead of relying on a hidden database.
Report looks incomplete
The report reflects the evidence currently available in the session.
- Run the session long enough for GI and event drain.
- Check Diagnostics and Findings before exporting.
- Use Frame Trace when high-level evidence does not explain the issue.
Escalation package
What to collect before asking for help.
A good escalation package saves time because it separates project configuration mistakes from protocol or device behavior.
ConfigurationProtocol mode, serial/TCP parameters, link/common address, ASDU profile, expected points, and mapping profile version.
EvidenceOperator Evidence, Value Viewer, Event Log, Diagnostics, Findings, and relevant Frame Trace rows.
ReportExport a PDF after reviewing sensitive project data. Keep raw traces private unless the project allows sharing.
ARIEC60870IEC 60870 evidence analyzer