Display Filter Reference: IEC 60870-5-104-Asdu

Protocol field name: 104asdu

Versions: 1.2.0 to 2.6.1

Back to Display Filter Reference

Field name Description Type Versions
104asdu.addr Addr Unsigned integer, 2 bytes 1.2.0 to 2.6.1
104asdu.bcr.ca CA Boolean 1.12.0 to 2.6.1
104asdu.bcr.count Binary Counter Signed integer, 4 bytes 1.12.0 to 2.6.1
104asdu.bcr.cy CY Boolean 1.12.0 to 2.6.1
104asdu.bcr.iv IV Boolean 1.12.0 to 2.6.1
104asdu.bcr.sq SQ Unsigned integer, 1 byte 1.12.0 to 2.6.1
104asdu.bitstring Value Unsigned integer, 4 bytes 1.6.0 to 2.6.1
104asdu.causetx CauseTx Unsigned integer, 1 byte 1.2.0 to 2.6.1
104asdu.coi COI Unsigned integer, 1 byte 1.12.0 to 2.6.1
104asdu.coi_i I Boolean 1.12.0 to 2.6.1
104asdu.coi_r R Unsigned integer, 1 byte 1.12.0 to 2.6.1
104asdu.cp56time CP56Time Date and time 1.10.0 to 2.6.1
104asdu.cp56time.day Day Unsigned integer, 1 byte 1.12.0 to 2.6.1
104asdu.cp56time.dow DOW Unsigned integer, 1 byte 1.12.0 to 2.6.1
104asdu.cp56time.hour Hour Unsigned integer, 1 byte 1.12.0 to 2.6.1
104asdu.cp56time.iv IV Boolean 1.12.0 to 2.6.1
104asdu.cp56time.min Min Unsigned integer, 1 byte 1.12.0 to 2.6.1
104asdu.cp56time.month Month Unsigned integer, 1 byte 1.12.0 to 2.6.1
104asdu.cp56time.ms MS Unsigned integer, 2 bytes 1.12.0 to 2.6.1
104asdu.cp56time.su SU Boolean 1.12.0 to 2.6.1
104asdu.cp56time.year Year Unsigned integer, 1 byte 1.12.0 to 2.6.1
104asdu.dco DCO Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.dco.on ON/OFF Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.dco.qu QU Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.dco.se S/E Boolean 1.10.0 to 2.6.1
104asdu.diq DIQ Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.diq.bl BL Boolean 1.10.0 to 2.6.1
104asdu.diq.dpi DPI Unsigned integer, 1 byte 1.10.3 to 2.6.1
104asdu.diq.iv IV Boolean 1.10.0 to 2.6.1
104asdu.diq.nt NT Boolean 1.10.0 to 2.6.1
104asdu.diq.sb SB Boolean 1.10.0 to 2.6.1
104asdu.diq.value Value Unsigned integer, 1 byte 1.10.0 to 1.10.2
104asdu.float Value Floating point (single-precision) 1.6.0 to 2.6.1
104asdu.ioa IOA Unsigned integer, 3 bytes 1.2.0 to 2.6.1
104asdu.nega Negative Boolean 1.2.0 to 2.6.1
104asdu.normval Value Floating point (single-precision) 1.6.0 to 2.6.1
104asdu.numix NumIx Unsigned integer, 1 byte 1.2.0 to 2.6.1
104asdu.oa OA Unsigned integer, 1 byte 1.2.0 to 2.6.1
104asdu.qds QDS Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.qds.bl BL Boolean 1.10.0 to 2.6.1
104asdu.qds.iv IV Boolean 1.10.0 to 2.6.1
104asdu.qds.nt NT Boolean 1.10.0 to 2.6.1
104asdu.qds.ov OV Boolean 1.10.0 to 2.6.1
104asdu.qds.sb SB Boolean 1.10.0 to 2.6.1
104asdu.qoi QOI Unsigned integer, 1 byte 1.12.0 to 2.6.1
104asdu.qos QOS Unsigned integer, 1 byte 1.10.3 to 2.6.1
104asdu.qos.ql QL Unsigned integer, 1 byte 1.10.3 to 2.6.1
104asdu.qos.se S/E Boolean 1.10.3 to 2.6.1
104asdu.qos_ql QOS Qualifier Unsigned integer, 1 byte 1.10.0 to 1.10.2
104asdu.qos_se QOS S/E Boolean 1.10.0 to 1.10.2
104asdu.rawdata Raw Data Sequence of bytes 2.4.0 to 2.6.1
104asdu.rco RCO Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.rco.qu QU Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.rco.se S/E Boolean 1.10.0 to 2.6.1
104asdu.rco.up UP/DOWN Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.scalval Value Signed integer, 2 bytes 1.10.3 to 2.6.1
104asdu.sco SCO Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.sco.on ON/OFF Boolean 1.10.0 to 2.6.1
104asdu.sco.qu QU Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.sco.se S/E Boolean 1.10.0 to 2.6.1
104asdu.siq SIQ Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.siq.bl BL Boolean 1.10.0 to 2.6.1
104asdu.siq.iv IV Boolean 1.10.0 to 2.6.1
104asdu.siq.nt NT Boolean 1.10.0 to 2.6.1
104asdu.siq.on SQ Boolean 1.10.0 to 1.10.2
104asdu.siq.sb SB Boolean 1.10.0 to 2.6.1
104asdu.siq.spi SPI Boolean 1.10.3 to 2.6.1
104asdu.sq SQ Boolean 1.2.0 to 2.6.1
104asdu.start START Unsigned integer, 1 byte 2.0.0 to 2.6.1
104asdu.test Test Boolean 1.2.0 to 2.6.1
104asdu.typeid TypeId Unsigned integer, 1 byte 1.2.0 to 2.6.1
104asdu.vti VTI Unsigned integer, 1 byte 1.10.0 to 2.6.1
104asdu.vti.ov VTI Transient Boolean 1.10.1 to 1.10.2
104asdu.vti.t T Boolean 1.10.3 to 2.6.1
104asdu.vti.v Value Signed integer, 1 byte 1.10.3 to 2.6.1
iec104.apdu_invalid_len Invalid ApduLen Label 2.4.0 to 2.6.1
iec104.apdu_min_len APDU less than bytes Label 1.12.0 to 2.6.1
iec104.asdu_asdunormval Object value Signed integer, 2 bytes 1.4.0 to 1.4.15
iec104.asdu_float Object value Floating point (single-precision) 1.4.0 to 1.4.15
iec104.short_asdu Label 1.12.0 to 2.6.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More