Wireshark · Display Filter Reference: IEC 60870-5-101/104 ASDU

Field name	Description	Type	Versions
iec104.apdu_invalid_len	Invalid ApduLen	Label	3.2.0 to 4.4.2
iec104.apdu_min_len	APDU less than bytes	Label	3.2.0 to 4.4.2
iec104.short_asdu		Label	3.2.0 to 4.4.2
iec60870_asdu.addr	Addr	Unsigned integer (16 bits)	3.2.0 to 4.4.2
iec60870_asdu.aid	Association ID (AID)	Unsigned integer (16 bits)	4.4.0 to 4.4.2
iec60870_asdu.asn	ASDU Segment Sequence Number (ASN)	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.asn.fin	Final segment (FIN)	Boolean	4.4.0 to 4.4.2
iec60870_asdu.asn.fir	First segment (FIR)	Boolean	4.4.0 to 4.4.2
iec60870_asdu.bcr	BCR	Signed integer (32 bits)	4.2.0 to 4.4.2
iec60870_asdu.bcr.ca	CA	Boolean	3.2.0 to 4.4.2
iec60870_asdu.bcr.count	Value	Signed integer (32 bits)	3.2.0 to 4.4.2
iec60870_asdu.bcr.cy	CY	Boolean	3.2.0 to 4.4.2
iec60870_asdu.bcr.iv	IV	Boolean	3.2.0 to 4.4.2
iec60870_asdu.bcr.sq	SQ	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.bitstring	Value	Unsigned integer (32 bits)	3.2.0 to 4.4.2
iec60870_asdu.causetx	CauseTx	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.challenge_data	Pseudo-random challenge data	Byte sequence	4.4.0 to 4.4.2
iec60870_asdu.cln	Challenge data length (CLN)	Unsigned integer (16 bits)	4.4.0 to 4.4.2
iec60870_asdu.coi	COI	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.coi.i	I	Boolean	4.2.0 to 4.4.2
iec60870_asdu.coi.r	R	Unsigned integer (8 bits)	4.2.0 to 4.4.2
iec60870_asdu.coi_i	I	Boolean	3.2.0 to 4.0.17
iec60870_asdu.coi_r	R	Unsigned integer (8 bits)	3.2.0 to 4.0.17
iec60870_asdu.cp24time	CP24Time	Time offset	3.4.0 to 4.4.2
iec60870_asdu.cp24time.iv	IV	Boolean	3.4.0 to 4.4.2
iec60870_asdu.cp24time.min	Min	Unsigned integer (8 bits)	3.4.0 to 4.4.2
iec60870_asdu.cp24time.ms	MS	Unsigned integer (16 bits)	3.4.0 to 4.4.2
iec60870_asdu.cp56time	CP56Time	Date and time	3.2.0 to 4.4.2
iec60870_asdu.cp56time.day	Day	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.cp56time.dow	DOW	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.cp56time.gen	GEN	Boolean	3.6.0 to 4.4.2
iec60870_asdu.cp56time.hour	Hour	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.cp56time.iv	IV	Boolean	3.2.0 to 4.4.2
iec60870_asdu.cp56time.min	Min	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.cp56time.month	Month	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.cp56time.ms	MS	Unsigned integer (16 bits)	3.2.0 to 4.4.2
iec60870_asdu.cp56time.su	SU	Boolean	3.2.0 to 4.4.2
iec60870_asdu.cp56time.year	Year	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.csq	Challenge sequence number (CSQ)	Unsigned integer (32 bits)	4.4.0 to 4.4.2
iec60870_asdu.dco	DCO	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.dco.on	ON/OFF	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.dco.qu	QU	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.dco.se	S/E	Boolean	3.2.0 to 4.4.2
iec60870_asdu.diq	DIQ	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.diq.bl	BL	Boolean	3.2.0 to 4.4.2
iec60870_asdu.diq.dpi	DPI	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.diq.iv	IV	Boolean	3.2.0 to 4.4.2
iec60870_asdu.diq.nt	NT	Boolean	3.2.0 to 4.4.2
iec60870_asdu.diq.sb	SB	Boolean	3.2.0 to 4.4.2
iec60870_asdu.eln	Error length (ELN)	Unsigned integer (16 bits)	4.4.0 to 4.4.2
iec60870_asdu.err	Error code (ERR)	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.error_text	Error text	Character string	4.4.0 to 4.4.2
iec60870_asdu.etm	Error time stamp (ETM)	Date and time	4.4.0 to 4.4.2
iec60870_asdu.etm.day	Day	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.etm.dow	DOW	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.etm.hour	Hour	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.etm.iv	IV	Boolean	4.4.0 to 4.4.2
iec60870_asdu.etm.min	Min	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.etm.month	Month	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.etm.ms	MS	Unsigned integer (16 bits)	4.4.0 to 4.4.2
iec60870_asdu.etm.su	SU	Boolean	4.4.0 to 4.4.2
iec60870_asdu.etm.year	Year	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.float	Value	Floating point (single-precision)	3.2.0 to 4.4.2
iec60870_asdu.frz	FRZ	Unsigned integer (8 bits)	3.6.0 to 4.0.17
iec60870_asdu.hal	MAC algorithm (HAL)	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.hln	MAC length (HLN)	Unsigned integer (16 bits)	4.4.0 to 4.4.2
iec60870_asdu.hmac	HMAC value	Byte sequence	4.4.0 to 4.4.2
iec60870_asdu.ioa	IOA	Unsigned integer (24 bits)	3.2.0 to 4.4.2
iec60870_asdu.ksq	Key change sequence number (KSQ)	Unsigned integer (32 bits)	4.4.0 to 4.4.2
iec60870_asdu.kst	Key status (KST)	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.kwa	Key wrap algorithm (KWA)	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.mal	MAC algorithm (MAL)	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.nega	Negative	Boolean	3.2.0 to 4.4.2
iec60870_asdu.normval	Value	Floating point (single-precision)	3.2.0 to 4.4.2
iec60870_asdu.numix	NumIx	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.oa	OA	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.qcc	QCC	Unsigned integer (8 bits)	3.6.0 to 4.4.2
iec60870_asdu.qcc.frz	FRZ	Unsigned integer (8 bits)	4.2.0 to 4.4.2
iec60870_asdu.qcc.rqt	RQT	Unsigned integer (8 bits)	4.2.0 to 4.4.2
iec60870_asdu.qds	QDS	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.qds.bl	BL	Boolean	3.2.0 to 4.4.2
iec60870_asdu.qds.iv	IV	Boolean	3.2.0 to 4.4.2
iec60870_asdu.qds.nt	NT	Boolean	3.2.0 to 4.4.2
iec60870_asdu.qds.ov	OV	Boolean	3.2.0 to 4.4.2
iec60870_asdu.qds.sb	SB	Boolean	3.2.0 to 4.4.2
iec60870_asdu.qoi	QOI	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.qos	QOS	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.qos.ql	QL	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.qos.se	S/E	Boolean	3.2.0 to 4.4.2
iec60870_asdu.qpm	QPM	Unsigned integer (8 bits)	3.4.0 to 4.4.2
iec60870_asdu.qpm.kpa	KPA	Unsigned integer (8 bits)	3.4.0 to 4.4.2
iec60870_asdu.qpm.lpc	LPC	Unsigned integer (8 bits)	3.4.0 to 4.4.2
iec60870_asdu.qpm.pop	POP	Unsigned integer (8 bits)	3.4.0 to 4.4.2
iec60870_asdu.qrp	QRP	Unsigned integer (8 bits)	3.4.0 to 4.4.2
iec60870_asdu.rawdata	Raw Data	Byte sequence	3.2.0 to 4.4.2
iec60870_asdu.rco	RCO	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.rco.qu	QU	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.rco.se	S/E	Boolean	3.2.0 to 4.4.2
iec60870_asdu.rco.up	UP/DOWN	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.reassembled.length	Reassembled ASDU length	Unsigned integer (32 bits)	4.4.0 to 4.4.2
iec60870_asdu.reassembled_in	Reassembled ASDU in frame	Frame number	4.4.0 to 4.4.2
iec60870_asdu.rqt	RQT	Unsigned integer (8 bits)	3.6.0 to 4.0.17
iec60870_asdu.rsc	Reason for challenge (RSC)	Unsigned integer (8 bits)	4.4.0 to 4.4.2
iec60870_asdu.scalval	Value	Signed integer (16 bits)	3.2.0 to 4.4.2
iec60870_asdu.sco	SCO	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.sco.on	ON/OFF	Boolean	3.2.0 to 4.4.2
iec60870_asdu.sco.qu	QU	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.sco.se	S/E	Boolean	3.2.0 to 4.4.2
iec60870_asdu.segment	ASDU Segment	Frame number	4.4.0 to 4.4.2
iec60870_asdu.segment.count	Segment count	Unsigned integer (32 bits)	4.4.0 to 4.4.2
iec60870_asdu.segment.error	Reassembly error	Frame number	4.4.0 to 4.4.2
iec60870_asdu.segment.multipletails	Multiple tail segments found	Boolean	4.4.0 to 4.4.2
iec60870_asdu.segment.overlap	Segment overlap	Boolean	4.4.0 to 4.4.2
iec60870_asdu.segment.overlap.conflict	Conflicting data in segment overlap	Boolean	4.4.0 to 4.4.2
iec60870_asdu.segment.toolongsegment	Segment too long	Boolean	4.4.0 to 4.4.2
iec60870_asdu.segment_data	ASDU segment data	Byte sequence	4.4.0 to 4.4.2
iec60870_asdu.segments	ASDU Segments	Label	4.4.0 to 4.4.2
iec60870_asdu.siq	SIQ	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.siq.bl	BL	Boolean	3.2.0 to 4.4.2
iec60870_asdu.siq.iv	IV	Boolean	3.2.0 to 4.4.2
iec60870_asdu.siq.nt	NT	Boolean	3.2.0 to 4.4.2
iec60870_asdu.siq.sb	SB	Boolean	3.2.0 to 4.4.2
iec60870_asdu.siq.spi	SPI	Boolean	3.2.0 to 4.4.2
iec60870_asdu.sq	SQ	Boolean	3.2.0 to 4.4.2
iec60870_asdu.start	START	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.test	Test	Boolean	3.2.0 to 4.4.2
iec60870_asdu.tsc	TSC	Unsigned integer (16 bits)	4.4.0 to 4.4.2
iec60870_asdu.typeid	TypeId	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.usr	User number (USR)	Unsigned integer (16 bits)	4.4.0 to 4.4.2
iec60870_asdu.vti	VTI	Unsigned integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.vti.t	T	Boolean	3.2.0 to 4.4.2
iec60870_asdu.vti.v	Value	Signed integer (8 bits)	3.2.0 to 4.4.2
iec60870_asdu.wkd	Wrapped key data	Byte sequence	4.4.0 to 4.4.2
iec60870_asdu.wkl	Wrapped key data length (CLN)	Unsigned integer (16 bits)	4.4.0 to 4.4.2