Transcription

Instructions for DNP3 Over EthernetV1Created By:Edwin WrightDate:August 2014Reviewed By:Robert HolmDate:Sept 2015

2 DNP3 Over Ethernet Software InstructionsDNP 3.0 Over EthernetAim: To demonstrate the use of a Remote Telemetry Unit (RTU) in the transfer of control messagesover Ethernet using the DNP 3.0 protocol. The ScadaSoft DNP Demon Lite is used as a Master togenerate DNP3 messages sent to a DATRAN XL4 DNP3 RTU. These messages are viewed on theMaster and captured on the LAN segment by the Wireshark protocol analyzer for viewing andanalysis.Equipment on Server:DNP Master Simulator - ScadaSoft DNP Demon LiteDATRAN XL4 DNP3 RTUWireshark Protocol AnalyzerEthernet LANStudent Software Required:Screen capture software such as ScreenHunterMethodPart 1 - Configuration and Data CaptureLog onto the Electromeet lab environment in the usual mannerSelect Remote Lab 2Locate the DNP Demon Lite icon on the desktop . Open it by double clicking on the icon.The following screen will open :-DNP3 Software Instructions v1

3Click “Connect” and the following screen opens : -We will now prepare the Wireshark Protocol Analyzer to observe the DNP3 packets asthey traverse the network to and from the RTU. Open Wireshark by double-clicking on theicon as shown to the right.Next, we must start a ‘capture session’ with Wireshark, and then generate some DNP3 traffic across thenetwork. To start a capture session, simply click on the link for the Intel(R) 82579LM Gigabit NetworkConnection interface:’The screen will change and start displaying the data for packets as they are seen at the networkinterface. To get Wireshark to only display the DNP3 protocol packets (the ones we are interested in),simply enter dnp3 into the filter box as shown below and then press the ‘Apply’ button. The capturescreen should now go blank since there will be no dnp3 messages yet.DNP3 Software Instructions v1

4 DNP3 Over Ethernet Software InstructionsSwitch back to the DNP3 Demon Lite using the icon on the task bar at the foot of the screen andmaximise the DNP3 Demon window.Now click on the “Polling “ iconThe “Send Commands “window thenopensNow click on “ Reset Link” and observe the DNP3 command message ( shown in green) and theresponse message (shown in red) in the DNP Communications window as shown.DNP3 Software Instructions v1

5Swap back to Wireshark and you will see the two captured DNP3 messages. Select the “Reset ofRemote Link “ message. Expand all the “ “ tabs for the DNP message and rearrange the windowsso you can see all of the DNP details as well as the bytes in the bottom window. Capture this in onescreenshot and attach to your document as SCREENSHOT 1.Return to the DNP Demon and click on “ Time Synch” and similarly observe the messages inWireshark. Select the message “ DNP 3.0 Write” and expand the DNP , Application Layer and all theWrite Request Data Object tabs. Then rearrange the windows so you can capture the decoded frameas well as the data bytes. Take a screenshot attach this to your document as SCREENSHOT 2.Now return to the DNP Demon and click on “ Integrity Poll” . After a while it will generate severalmessages.Swap to Wireshark and select the message “ DNP 3.0 Read, Class 0123” Expand all the DNP ,Application Layer and the READ Request Data Objects tabs. Then rearrange the windows so you cancapture the decoded frame as well as the data bytes. Take a screenshot and attach this to yourdocument as SCREENSHOT 3.Now select the “DNP3.0 Confirm” message in Wireshark and expand the DNP3 and all theApplication Layer tabs. Then rearrange the windows so you can capture the decoded frame as well asthe data bytes. Take a screenshot and attach this to your document as SCREENSHOT 4.Now close down the lab session, simply exit Wireshark and “Quit without Saving”Then return to the DNP Demon and click on the “Disconnect “ buttonNow Log off the server (Do not save any files on server).DNP3 Software Instructions v1

2 DNP3 Over Ethernet Software Instructions DNP3 Software Instructions_v1 DNP 3.0 Over Ethernet Aim: To demonstrate the use of a Remote Telemetry Unit (RTU) in the transfer of control messages over Ethernet using the DNP 3.0