SEL311厂家报文分析(发送未计数).doc

1、 Meter0(DNP规约,ID=101)311L/链路复位链路层: Length=05h; CONTROL=C0h ; Destination=0065h; Source=00FEh“发(10 字节): 05 64 05 C0 65 00 FE 00 5D FE 收(10 字节): 05 64 05 00 FE 00 65 00 3E E0 /链路完好链路层: Length=05h; CONTROL=00h ; Destination=00FEh; Source=0065h/清 IIN信息中 BIT7=0 Restart（BIT7：为 1表示装置重新启动）链路层: Length=0Eh; C

2、ONTROL=C4h ; Destination=0065h; Source=00FEh“传输层: C0h (单帧 帧序号 0)应用层 Header: C0h FunctionCode=02h(Transfer:Write)写 对象头 ObjectHeader: Group=50h,Variation=01hObjectQualifier=00h “发(21 字节): 05 64 0E C4 65 00 FE 00 C9 7B C0 C0 02 50 01 00 07 07 00 2C 49 02：写C4: 发送不期待确认 00：限定字：对象前未置索引，变程段内有一个字节的起始和结束萦引00：

3、USERDATA收(17 字节): 05 64 0A 44 FE 00 65 00 7E 18 C1 C0 81 04 00 50 FC AC=C0h CON=0：不需要确认 链路层: Length=0Ah; CONTROL=44h ; Destination=00FEh; Source=0065h“传输层: C1h (单帧 帧序号 1)应用层:(4 字节): C0 81 04 00 AC=C0h FunctionCode=81h(Response:Response)内码 IIN=0004h (置 1的位有 bit2:有 Class2数据)/读 CLASS0数据 问全数据链路层: Length

4、=14h; CONTROL=C4h ; Destination=0065h; Source=00FEh“传输层: C0h (单帧 帧序号 0)应用层 Header: C0h FunctionCode=01h(Transfer:Read) 读ObjectHeader: Group=3Ch,Variation=01h,ObjectQualifier=06h “ 限定字：06 表示无变程段！ObjectHeader: Group=3Ch,Variation=02h,ObjectQualifier=06h “ObjectHeader: Group=3Ch,Variation=03h,ObjectQua

5、lifier=06h “ObjectHeader: Group=3Ch,Variation=04h,ObjectQualifier=06h “发(27 字节): 05 64 14 C4 65 00 FE 00 63 BF C0 C0 01 3C 01 06 3C 02 06 3C 03 06 3C 04 06 9C 09 收(292 字节):05 64 FF 44 FE 00 65 00 4A D6 41 E0 81 00 00 20 02 17 32 24 01 46 00 26 01 64 90 73 00 24 01 BD FF 24 01 5C 00 26 01 AC FF 25 01

6、 5E 0E 1D 00 24 01 D4 FF 25 01 D4 FF 24 01 3D 00 26 01 55 45 4B 00 24 01 9D FF 25 01 59 00 26 01 A7 FF 24 01 53 4B 81 00 25 01 9E FF 26 01 37 00 25 01 3B 00 24 01 A7 93 46 FF 24 01 64 00 25 01 9F FF 26 01 BA FF 24 01 D4 C1 91 FF 25 01 5E 00 25 01 BA FF 26 01 62 00 26 01 A0 B2 07 FF 24 01 61 00 25 01

7、 26 00 24 01 D4 FF 26 01 5E C5 70 00 26 01 9E FF 26 01 53 00 24 01 46 00 26 01 D4 D8 2C FF 24 01 A7 FF 24 01 31 00 24 01 A2 FF 26 01 4E EA F1 00 26 01 A0 FF 26 01 5E 00 24 01 59 00 25 01 9E D7 5D FF 26 01 E1 FF 25 01 46 00 26 01 46 00 25 01 D4 31 79 FF 24 01 DB FF 24 01 4E 00 25 01 63 00 24 01 BA D0

8、 02 FF 01 02 00 00 0C 01 01 01 01 01 01 81 01 01 01 BA 50 01 81 81 0A 02 00 00 20 01 01 01 01 01 01 01 01 64 F5 01 01 01 01 01 01 01 01 01 01 8D 7B 链路层: Length=FFh; CONTROL=44h ; Destination=00FEh; Source=0065h“传输层: 41h (多帧: 首帧 帧序号 1)应用层:(249 字节):E0 ： CON 为 1 表示期望接收到一个确认81 ： 对请求的响应00 00： 内码20 02： 不带

9、标志的 16位冻结模拟量输入17： 限定字：对象被前置一个字节的萦引，变程段内有一个字节数量值32 ： 个数 50个遥测，每个遥测有 4字节24 01 46 00 26 01 64 00 24 01 BD FF 24 01 5C 00 26 01 AC FF 25 01 5E 00 24 01 D4 FF 25 01 D4 FF 24 01 3D 00 26 01 55 00 24 01 9D FF 25 01 59 00 26 01 A7 FF 24 01 53 00 25 01 9E FF 26 01 37 00 25 01 3B 00 24 01 A7 FF 24 01 64 00 25

10、 01 9F FF 26 01 BA FF 24 01 D4 FF 25 01 5E 00 25 01 BA FF 26 01 62 00 26 01 A0 FF 24 01 61 00 25 01 26 00 24 01 D4 FF 26 01 5E 00 26 01 9E FF 26 01 53 00 24 01 46 00 26 01 D4 FF 24 01 A7 FF 24 01 31 00 24 01 A2 FF 26 01 4E 00 26 01 A0 FF 26 01 5E 00 24 01 59 00 25 01 9E FF 26 01 E1 FF 25 01 46 00 26

11、 01 46 00 25 01 D4 FF 24 01 DB FF 24 01 4E 00 25 01 63 00 24 01 BA FF 01 02 ： 带状态的二进制输入(YX)00 ： 限定字：对象前未置索引，变程段内有一个字节的起始和结束萦引00： 起始：0 0C ： 结束：12 13 个遥信01 01 01 01 01 01 81 01 01 01 01 81 81 0A 02： 带状态的二进制输入00： 限定字：对象前未置索引，变程段内有一个字节的起始和结束萦引00： 起始：020： 结束：32 33 个遥信01 01 01 01 01 01 01 01 01 01 01 01 0

12、1 01 01 01 01 01 收(292 字节):05 64 FF 44 FE 00 65 00 4A D6 02 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 2F 15 14 06 00 00 02 01 00 00 00 00 00 1E 04 00 00 93 2A 28 00 00 00 00 00 00 39 E7 00 00 D8 DC 01 00 F4 1B C3 32 00 00 88 2D 00 00 33 07 00 00 4F 46 00 00 28 23 29 F8 00 00 00 00 00 00 00 00 00

13、00 00 00 00 00 5B 2A 59 EE 00 00 3D 29 00 00 09 DC 00 00 00 00 00 00 00 00 61 36 00 00 00 00 00 00 00 00 D4 FF 0E 00 00 00 00 00 6A 79 6F 17 62 59 00 00 00 00 00 00 00 00 00 00 00 00 6F 2C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF FF 00

14、00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00 00 00 00 00 FF

15、FF 链路层: Length=FFh; CONTROL=44h ; Destination=00FEh; Source=0065h“传输层: 02h (多帧: 中间帧 帧序号 2)应用层:(249 字节):01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 14 06： 不带标志的 16位的二进制计数器00： 限定字：对象前未置索引，变程段内有一个字节的起始和结束萦引00： 起始：002： 结束：201 00 00 00 00 00 1E 04： 不带标志的 16位模拟量输入00： 限定字：对象前未置索引，变程段内有一个字节的起始和结束萦引00： 起始：0

16、 93： 结束：14700 00 00 00 00 00 39 E7 00 00 D8 DC 01 00 F4 1B 00 00 88 2D 00 00 33 07 00 00 4F 46 00 00 28 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5B 2A 00 00 3D 29 00 00 09 DC 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 D4 FF 0E 00 00 00 00 00 6F 17 62 59 00 00 00 00 00 00 00 00 00 00 00 00 0

17、0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0

18、0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 收(109 字节):05 64 5C 44 FE 00 65 00 1B A5 83 00 00 00 00 00 00 FF 7F FF 7F FF 7F FF 7F FF E6 7D 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 24 55 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 24 55 7F FF 7F FF 7F FF 7F FF 7F FF 7F

19、FF 7F FF 7F FF 24 55 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F 28 37 91 02 00 00 00 01 01 00 CD F3 链路层: Length=5Ch; CONTROL=44h ; Destination=00FEh; Source=0065h“传输层: 83h (多帧: 末帧 帧序号 3)应用层:(86 字节):00 00 00 00 00 00 FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7

20、F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F 28 02 16位模拟量输出状态00 限定字：对象前未置索引，变程段内有一个字节的起始和结束萦引00 起始：000 起始：001 01 00 所有应用层数据(584 字节):E0 81 00 00 20 02 17 32 24 01 46 00 26 01 64 00 24 01 BD FF 24 01 5C 00 26 01 A

21、C FF 25 01 5E 00 24 01 D4 FF 25 01 D4 FF 24 01 3D 00 26 01 55 00 24 01 9D FF 25 01 59 00 26 01 A7 FF 24 01 53 00 25 01 9E FF 26 01 37 00 25 01 3B 00 24 01 A7 FF 24 01 64 00 25 01 9F FF 26 01 BA FF 24 01 D4 FF 25 01 5E 00 25 01 BA FF 26 01 62 00 26 01 A0 FF 24 01 61 00 25 01 26 00 24 01 D4 FF 26 01 5

22、E 00 26 01 9E FF 26 01 53 00 24 01 46 00 26 01 D4 FF 24 01 A7 FF 24 01 31 00 24 01 A2 FF 26 01 4E 00 26 01 A0 FF 26 01 5E 00 24 01 59 00 25 01 9E FF 26 01 E1 FF 25 01 46 00 26 01 46 00 25 01 D4 FF 24 01 DB FF 24 01 4E 00 25 01 63 00 24 01 BA FF 01 02 00 00 0C 01 01 01 01 01 01 81 01 01 01 01 81 81 0

23、A 02 00 00 20 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 14 06 00 00 02 01 00 00 00 00 00 1E 04 00 00 93 00 00 00 00 00 00 39 E7 00 00 D8 DC 01 00 F4 1B 00 00 88 2D 00 00 33 07 00 00 4F 46 00 00 28 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5

24、B 2A 00 00 3D 29 00 00 09 DC 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 D4 FF 0E 00 00 00 00 00 6F 17 62 59 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0

25、0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F F

26、F 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F FF 7F 28 02 00 00 00 01 01 00应用层 Header=E0h FunctionCode=81h(Response:Response) IIN=0000h ObjectHeader:Group=20h,Variation=02h,ObjectQualifier=17h “(Group= 3

27、2,Variation= 2 每个 Object有 3字节 “7.12 16-BIT CHANGE EVENT WITHOUT TIME“)“SingleField类型: ObjectNum=32 (50) Object数据(200 字节):24 01 46 00 26 01 64 00 24 01 BD FF 24 01 5C 00 26 01 AC FF 25 01 5E 00 24 01 D4 FF 25 01 D4 FF 24 01 3D 00 26 01 55 00 24 01 9D FF 25 01 59 00 26 01 A7 FF 24 01 53 00 25 01 9E FF

28、 26 01 37 00 25 01 3B 00 24 01 A7 FF 24 01 64 00 25 01 9F FF 26 01 BA FF 24 01 D4 FF 25 01 5E 00 25 01 BA FF 26 01 62 00 26 01 A0 FF 24 01 61 00 25 01 26 00 24 01 D4 FF 26 01 5E 00 26 01 9E FF 26 01 53 00 24 01 46 00 26 01 D4 FF 24 01 A7 FF 24 01 31 00 24 01 A2 FF 26 01 4E 00 26 01 A0 FF 26 01 5E 00

29、 24 01 59 00 25 01 9E FF 26 01 E1 FF 25 01 46 00 26 01 46 00 25 01 D4 FF 24 01 DB FF 24 01 4E 00 25 01 63 00 24 01 BA FF ObjectHeader: Group=01h,Variation=02h,ObjectQualifier=00h “(Group= 1,Variation= 2 每个 Object有 1字节 “4.2 BINARY INPUT WITH STATUS“)“SubField类型: StartIndex=00 (0) StopIndex=0C (12) “(

30、Group= 10,Variation= 2 每个 Object有 1字节 “5.2 BINARY OUTPUT STATUS“)“SubField类型: StartIndex=00 (0) StopIndex=20 (32) “(Group= 20,Variation= 6 每个 Object有 2字节 “6.6 16-BIT COUNTER WITHOUT FLAG“)“SubField类型: StartIndex=00 (0) StopIndex=02 (2) “(Group= 30,Variation= 4 每个 Object有 2字节 “7.4 16-BIT ANALOG INPUT

31、 WITHOUT FLAG“)“SubField类型: StartIndex=00 (0) StopIndex=93 (147) “(Group= 40,Variation= 2 每个 Object有 3字节 “8.2 16-BIT ANALOG OUTPUT STATUS“)“SubField类型: StartIndex=00 (0) StopIndex=00 (0) ; Destination=0065h; Source=00FEh“传输层: C0h (单帧 帧序号 0)应用层 Header: C0h FunctionCode=00h(Transfer/Response:Confirm)

32、确认发(15 字节): 05 64 08 C4 65 00 FE 00 10 10 C0 C0 00 33 96 /读 CLASS123数据“链路层: Length=11h; CONTROL=C4h ; Destination=0065h; Source=00FEh“传输层=C0h (单帧 帧序号 0)应用层 Header=C0h FunctionCode=01h(Transfer:Read) ObjectHeader: Group=3Ch,Variation=02h,ObjectQualifier=06h “ 限定字：06 表示无变程段！ObjectHeader: Group=3Ch,Var

33、iation=03h,ObjectQualifier=06h “ObjectHeader: Group=3Ch,Variation=04h,ObjectQualifier=06h “发(24 字节): 05 64 11 C4 65 00 FE 00 EA 47 C0 C0 01 3C 02 06 3C 03 06 3C 04 06 9E 30收(17 字节): 05 64 0A 44 FE 00 65 00 7E 18 C1 C0 81 00 00 9A CB 链路层: Length=0Ah; CONTROL=44h ; Destination=00FEh; Source=0065h“传输层=C1h (单帧 帧序号 1)应用层:(4 字节): C0 81 00 00 应用 Header= C0h FunctionCode=81h(Response:Response) 内码 IIN=0000h 无数据任何数据需要读