Skip to main content

Table 6 Extracted features specific for x104 from Layer 7

From: Comparison of approaches for intrusion detection in substations using the IEC 60870-5-104 protocol

Field

Description

OSI Layer

x104apci_apdulen

According to above there are packets with fixed length and with variable length containing ASDU. Fixed length packets contain control information and have the size of 4 Bytes.

 

x104apci_rx

Number of the last packet the sender received.

L7

x104apci_tx

Send Sequence number of the transmitted frame. This value gets increased by one for every frame which gets sent to a specific IP address.

 

x104asdu _typeid

Type IDs are described in Table 2.

 

x104asdu _causetx

Cause of Transmission values are described in Table 1