JP3548911B2 - Protocol analyzer, trigger detection device, recording medium and board on which program for trigger detection is recorded - Google Patents

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a protocol analyzer, a trigger detection device, a recording medium on which a program for trigger detection is recorded, and a board. More specifically, a frame flowing through a network using a protocol analyzer meets predetermined trigger detection conditions. The present invention relates to a protocol analyzer, a trigger detection device, a recording medium on which a program for trigger detection is recorded, and a board for determining whether or not to perform the determination.
[0002]
[Prior art]
Generally, a plurality of terminals are connected to a network, and a control device and a controlled device are connected to exchange data and communicate frames and messages.
Particularly, in the field of factory automation (FA), remote I / O communication may be performed when using a programmable controller. In this case, a master station is provided on the programmable controller side and a slave station is provided on the I / O device (device) side, and data and messages are exchanged, for example, on a network called a device net.
However, even if a wrong frame is output on the device side, the frame transmission timing is wrong, or even if a normal frame is transmitted, if data is lost due to noise on the way, a communication error occurs between the programmable controller and the device.
Therefore, there is a device called a protocol analyzer as a device for collecting and analyzing frames flowing on the network in order to pursue a cause of a network-related problem or to accurately grasp the state of the network.
[0003]
For example, the network includes a network called a device net using a protocol called a CAN protocol.
The device net is a distributed network applied to factory automation and the like. Various communication devices and control devices are connected to the network, and input information (messages) and various communication for the various communication devices and control devices are connected to the transmission path. Output information (messages) and the like from devices and control devices flow as frames.
Here, the protocol analyzer monitors messages flowing through the network without imposing a load on the network, while satisfying user needs such as not to miss frames and to set complicated trigger detection conditions.
The basic functions of the protocol analyzer are the following two points.
(1) Frame collection function
(2) Frame display function
The frame collection function is a function of collecting frames flowing on a network, and selectively stores the frames in a memory based on a preset trigger condition. When selecting a frame, a method is adopted in which only frames passed by a filtering function described later are collected.
[0004]
The frame display function is a function of displaying collected frames in a format that can be understood by the user, and performs processing such as displaying time information indicating the interval between frames in a time series via a monitor screen. In some cases, the collected frame information is processed and displayed. For example, the occupation ratio of each type of frame in all collected frames is used.
[0005]
In addition to the above basic functions, there are the following functions.
(3) Filtering function
The filtering function is a function of selectively collecting only specified frames without collecting frames other than the analysis target frames set in advance. By using this function, limited resources, that is, memory capacity can be used effectively. For example, an address number is assigned to a node or a slave, focusing on a specific address number, selectively collecting only frames including that address number, and unnecessarily collecting memory by buffering unnecessary frames. Unnecessary consumption can be prevented.
[0006]
In addition to the above basic functions, there are the following functions.
(4) Trigger detection function
As described above, the protocol analyzer is used for analyzing the failure of the network and grasping the state. In this case, there is a demand to control the timing of collecting the frames according to the conditions set in advance. For example, there is a request to start collection when a specific frame is detected, or to collect frames by first-in first-out (FIFO) at all times, and stop the collection when a specific frame is detected.
[0007]
Here, the "function of detecting that the set condition is met" is called a trigger detection function, and such a condition for controlling the timing of collection is called a trigger detection condition.
The trigger detection function has the following user needs.
(1) Do not drop the frame
(2) I want to set complicated trigger detection conditions
(3) Want to easily set trigger detection conditions
[0008]
Each of these needs is described below.
(1) Do not drop the frame
In the trigger detection processing, it is determined whether or not a set condition is met each time a frame flows on the network. That is, each time a frame flows, the trigger detection is determined for each frame.
Each determination must be completed before the next frame flows to catch up. In other words, the trigger detection processing as frame detection needs to output a determination result at least within a certain time until the next frame comes. If it takes time for the trigger detection process and the next frame flows on the network before the judgment is completed, the frame may be missed because the trigger detection process for this frame cannot be performed. In view of the original purpose of the protocol analyzer, which is to analyze the network, dropping a frame on the network is a fatal flaw.
[0009]
(2) I want to set complicated trigger detection conditions
In analyzing a network, there is a need to narrow down conditions for collecting frames as much as possible and to collect only necessary ones. For example, it is desired that trigger detection be performed by combining a plurality of conditions, in addition to a single condition such as starting collection when a specific bit pattern is detected.
[0010]
For example, a frame including a bit pattern of 1101 frequently flows through the network, and this is not abnormal alone. However, when a frame of a bit pattern of 1110 flows after this 1101, there may be a case where it is considered abnormal. I do. In this case, it is convenient if a combination of the two conditions of “a frame of a bit pattern of 1110 flows after a bit pattern frame of 1101” can be used as a trigger condition.
[0011]
Further, when I / O data (input / output data) having a meaning as an application is included in a frame, it is sometimes convenient to be able to set conditions for the I / O data.
[0012]
By the way, in order to guarantee that (1) “the frame is not dropped”, the following expression must always be satisfied.
[0013]
T Frame Interval> T Detect + T Overhead
[0014]
here,
T Frame Interval = time until next frame reception
T Detect = processing time of trigger detection judgment of received frame
T Overhead = time from reception of frame to start of trigger detection determination process + next frame after trigger detection determination process ends
Time to complete preparation for receiving a frame
[0015]
By the way, as a matter of course, as the trigger detection conditions become more complicated, the processing time T Detect increases. Therefore, the request of (1) "to not drop a frame" and the request of (2) "to set a complicated trigger detection condition" are mutually contradictory requests.
[0016]
(3) Want to easily set trigger detection conditions
It is desirable that the trigger detection condition can be set easily. In particular, in order to satisfy the requirement of (2) “I want to set a complicated trigger detection condition”, it is desirable that the condition can be set as easily as possible and easily.
[0017]
The above is the description of the protocol analyzer and the trigger detection used in the protocol analyzer. Next, a conventional trigger detection method will be described.
[0018]
As described above, in the trigger detection process, it is necessary to acquire a message flowing through the network in real time and determine whether or not the message matches a detection condition set by the user. At the same time, in order to prevent a message from being missed, it is necessary to complete the current reception process before receiving the next message and prepare for the next reception.
[0019]
That is, the trigger detection process must be completed within a limited time.
[0020]
Therefore, conventionally, only a simple detection method can be realized due to the time constraint.
[0021]
As a specific method of trigger detection, a method called Mask & Match is adopted. Mask & Match is a method of masking a part of a received message with a mask value specified by a user and evaluating whether or not the masked value matches the Match value.
[0022]
Now, this will be described with reference to FIG. 12. The received data (a) is masked with a mask value (b) to obtain a value (c) after the mask, and whether this value matches the match value (d)? Find out.
[0023]
For example, in the first data, the received data (a) is “0011” and the mask value (b) is “0011”, so the value (c) after the mask is “0011”.
[0024]
Note that the value (c) after the mask is obtained as a multiplied value of the same-order bits of “0011” of the received data (a) and “0011” of the mask value (b).
[0025]
Here, in the first data, the value (c) after Mask is “0011”, and the Match value (d) is also “0011”. Therefore, the first data reception is a trigger detection.
[0026]
FIG. 13 is a flowchart showing an outline of a conventional message receiving process. This process is, for example, a process when a CAN frame flows on a network called a device net using a protocol called a CAN protocol.
As described later, the CAN frame includes a 19-bit CAN header field, a 64-bit DATA field, and a 25-bit CAN trailer field.
[0027]
In FIG. 13, when the message receiving process is started (step 100), a received message process 1 for transferring the CAN frame to an internal buffer (not shown) is performed (step 102).
[0028]
Next, it is checked whether or not to execute trigger detection (step 104). This is, for example, whether or not the trigger detection button is pressed on a personal computer screen (not shown) to enter a trigger detection mode. If trigger detection is not executed in the trigger non-detection mode (NO in step 104). The process proceeds to step 108, but if trigger detection is to be performed in the trigger detection mode (YES in step 104), trigger detection processing is performed (step 106). That is, the processing of Mask & Match is performed.
[0029]
Next, in step 108, processing 2 for the received message is performed, and the message receiving processing for one frame is completed (step 110). In the received message process 2 in step 108, if it is determined that the trigger is detected in the Mask & Match process in step 106, a capturing process (capturing a received frame) and the like are performed thereafter.
[0030]
Next, details of the trigger detection processing in step 106 by Mask & Match will be described with reference to the flowchart of FIG.
[0031]
In this process, when trigger detection is started (step 120), expected data is obtained from the data storage address (step 122). Acquiring expected data means that even if data collection is started, a filter is provided such that only data having a preset address value is collected. Therefore, only data that has passed this filter is extracted. As described above, for example, since an address number is assigned to a node or a slave, attention is paid to a specific address number, and only frames including the address number are selectively collected. .
[0032]
Next, a mask value is obtained from the internal memory (step 124), and the received data is masked with the mask value (step 126).
[0033]
Next, a Match value is acquired from the internal memory (Step 128), and it is checked whether or not the masked data matches the Match value (Step 130).
[0034]
Here, if the masked data does not match the Match value (NO in step 130), the trigger detection ends (step 134).
[0035]
On the other hand, if the data after masking matches the Match value (YES in step 130), processing for the matching is performed (step 132), and the trigger detection ends (step 134).
[0036]
Note that the processing in the case of a match in step 132 means starting data collection by trigger detection, ending data collection that has been performed so far, or performing processing of collecting only matched data.
[0037]
[Problems to be solved by the invention]
By the way, as described above, the user's need for trigger detection is not limited to a single Mask & Match, but also allows more complicated trigger detection conditions to be set, and allows the trigger detection conditions to be easily set. It is to be.
[0038]
For example, in the example of FIG. 12, the first data is that the received data (a) is “0011”, the mask value (b) is “0011”, and the value after masking (c) is “0011”. And the Match value (d) is also “0011”. Therefore, the condition for trigger detection is satisfied.
[0039]
By the way, the second data is that the received data (a) is “1011”, the mask value (b) is “0011”, the value after the mask (c) is “0011”, and the mask value (b) is ) Is also “0011”. Therefore, the condition for trigger detection is also satisfied.
[0040]
That is, it is determined that the trigger detection condition is satisfied even when the same Mask value (b) and the same Match value (d) are used, although the received data (a) is different.
[0041]
Therefore, in the trigger detection condition of FIG. 12, it is unknown whether the first data matches the trigger condition or the second data matches the trigger condition.
[0042]
Therefore, there is a need to be able to set complicated trigger detection conditions.
[0043]
In the past, this need was met with a general-purpose program that could set various conditions. However, if a general-purpose program that can set various conditions is to be satisfied, redundant processing such as branch processing is performed in addition to a part of pure trigger detection processing such as Mask & Match, which will be described later. There was a problem that it did not fit within.
[0044]
For example, if two types of Mask & Match can be set, and the first Mask & Match is set to 1 and the second Mask & Match is set to 2, the following setting conditions are possible.
(1) Only setting 1
(2) Only setting 2
(3) Setting 1 AND setting 2
(4) Other than setting 1
(5) Other than setting 2
(6) Other than setting 1 AND setting 2
(7) Setting 1 AND Other than setting 2
(8) Other than setting 1 AND Other than setting 2
(9) Other than setting 1 OR setting 2
(10) Setting 1 OR Other than setting 2
(11) Other than setting 1 OR Other than setting 2
[0045]
Here, among the above setting conditions,
Only setting 1 in (1)
Only setting 2 of (2),
(3) setting 1 AND setting 2,
When a trigger detection process is performed using a general-purpose program in which the three setting conditions can be set, the processing procedure is as shown in the flowchart of FIG.
[0046]
That is, when the trigger detection is started (Step 140), the process of Mask & Match of Setting 1 is performed (Step 142), and then the process of Mask & Match of Setting 2 is performed (Step 144).
[0047]
By the way, the detection processing program shown in FIG. 15 is provided with versatility so that it can correspond to any of the setting conditions (1), (2), and (3), and includes a program surrounded by a dotted line 170. .
That is, first, the setting content of the trigger setting condition is checked, and first, it is checked whether or not the trigger setting condition is only the setting 1 (step 146). If the trigger setting condition is not only setting 1 (NO in step 146), the process proceeds to step 148. If the trigger setting condition is only setting 1 (YES in step 146), setting 1 is evaluated (step 146). Step 152). That is, whether or not the data after the masking by the mask value of the setting 1 matches the Match value of the setting 1 is evaluated.
[0048]
Next, when it is determined in step 146 that the setting is not only the setting 1, and the process proceeds to the step 148, it is checked whether or not the trigger setting condition is only the setting 2 (step 148). If the trigger setting condition is not only setting 2 (NO in step 148), the process proceeds to step 150, but if the trigger setting condition is only setting 2 (YES in step 148), setting 2 is evaluated (step 148). Step 154). That is, whether or not the data after the masking by the mask value of the setting 2 matches the Match value of the setting 2 is evaluated.
[0049]
Next, when it is determined in step 148 that the setting is not only the setting 2 and the process proceeds to step 150, it is checked whether or not the trigger setting condition is the setting 3 “setting 1 AND setting 2” (step 150). Here, if the trigger setting condition is not “setting 1 AND setting 2” of setting 3 (NO in step 150), the process proceeds to step 158. If the trigger setting condition is “setting 1 AND setting 2” of setting 3, (YES in step 150), “setting 1 AND setting 2” is evaluated (step 156). That is, it is evaluated whether or not the data after masking by the mask value of the setting 1 matches the Match value of the setting 1 and whether the data after masking by the mask value of the setting 2 matches the Match value of the setting 2. It is.
[0050]
Then, in the subsequent step 158, it is checked whether or not the evaluation result is true. If the evaluation result is not true (NO in step 158), the trigger detection is terminated (step 162), but if the evaluation result is true (step 162). (YES in 158), the processing at the time of trigger detection is performed (step 160), and the trigger detection is terminated (step 162).
[0051]
The above is the processing procedure of the trigger detection processing when three setting conditions can be set.
[0052]
By the way, in the above processing, the processing enclosed by the dotted line 170 is performed in addition to the processing of Mask & Match of the settings 1 and 2 (the processing of steps 142 and 144). Processing.
[0053]
For example, when the setting condition is setting 3 “setting 1 AND setting 2”, processing other than step 156 among the processings surrounded by the dotted line 170 is unnecessary processing.
[0054]
That is, the trigger setting conditions are required to be complicated, but in this case, redundant unnecessary processing increases, and the processing time is prolonged, and there is a possibility that the processing may be missed.
Further, if the trigger setting conditions are complicated, there is a problem that the notation of the program becomes difficult.
[0055]
Therefore, the present invention
(1) Even if the setting contents are complicated, high-speed processing can be performed and there is no loss
(2) To provide a protocol analyzer, a trigger detection device, a recording medium on which a program for trigger detection is recorded, and a board, in which a program can be created in a simple notation even if the setting contents become complicated. With the goal.
[0056]
[Means for Solving the Problems]
In order to achieve the above object, the present invention provides
Frames including header and data fields are communicatedIn a protocol analyzer that is connected to the network and captures necessary frames among frames flowing through the network based on predetermined trigger detection conditions,
The result of compiling a trigger detection instruction in which each of the trigger detection conditions set by the selective combination of the use of Mask & Match, the designation of the ID, and the use of the data field is written in a language suitable for the logical notation is stored.Memory and
A receiving process for receiving the frame flowing through the network; andRead and execute the compiled trigger detection instructionAccordingly, a determination process of determining whether or not the received frame has been detected as a trigger is performed, and a trigger detection process performed when the result of the determination process is a trigger detection.A trigger detection determination unit,
Based on the trigger detection processing of the trigger detection determination unitA storage unit for storing the captured frame;
It is characterized by having.
[0057]
Here, the network is a network in which a programmable controller and various devices (control devices) are connected via a transmission line to transmit and receive data. In the embodiment, a network 10 called a device net is shown in FIG. I have.
[0058]
A frame refers to a transmission unit of data transmitted on a network. In the embodiment, a frame called a CAN frame is shown in FIG.
[0059]
Explaining trigger detection, as described in the background of the related art section, there are cases where it is necessary to collect and analyze frames flowing on the network in order to pursue the cause of network problems or to accurately grasp the state of the network. is there. In this case, a trigger detection condition is used to distinguish whether a frame is output from a specific node or has a specific bit pattern. That is, the trigger detection condition is a determination condition for distinguishing and determining a frame not to be collected from other frames. In collecting frames, trigger detection conditions are set in advance, and in the embodiment in which trigger detection processing is performed based on the set conditions, the trigger detection device 20 shown in FIG. 1 performs trigger detection processing.
[0060]
Further, the protocol analyzer of the present invention further has an application execution unit for setting a trigger detection condition,
The application execution unit sets a plurality of trigger detection conditions by selectively combining use of Mask & Match, designation of an ID, and use of a data field by a user.
The above language is a ladder language, and each of the set trigger detection conditions is described in a ladder language, and the above trigger detection command is set.
It is characterized by the following.
[0061]
In the embodiment, a trigger condition setting screen (dialog box) of FIG. 7 is called, and a trigger detection condition in a ladder language is set by an operation on a personal computer. Then, when the “OK” button is clicked, the ladder mnemonic is converted by the application execution unit 21 (personal computer) and downloaded to the shared memory 41.
[0062]
Then, when there is an instruction to start monitoring from the application execution unit 21 (personal computer), a trigger detection condition described by a mnemonic is called from the shared memory 41 and compiled. The compiled trigger detection condition is converted to binary and stored in the first RAM 44.
[0063]
The application execution unit,
The trigger detection determination unit manages network monitoring start and network monitoring end,
It is also possible to read out and display the captured frame stored in the storage unit.
[0064]
Also,The application execution unit,
When setting the above trigger detection conditions, provide a dialog box,
It is also possible to configure so that a selective combination of use of Mask & Match, designation of ID, and use of data field can be set on the dialog box.
[0067]
Further, the trigger detection device of the present invention is a trigger detection device that determines whether or not a frame including a header and a data field flowing through a network meets a predetermined trigger detection condition set in advance.
The trigger detection conditions are set by a selective combination of the use of Mask & Match, the designation of an ID, and the use of a data field, and each of the set trigger detection conditions is set by a command word suitable for a logical notation. Trigger detection instruction setting means for performing
Trigger detection instruction compiling means for compiling the trigger detection instruction set by the trigger detection instruction setting means,
A memory for storing the trigger detection command compiled by the trigger detection command compiling means, a reception process for receiving the frame flowing through the network, and the frame subjected to the reception process based on the trigger detection command for the memory are preset. A trigger detection determining unit that performs a determination process of determining whether the predetermined trigger detection condition is satisfied, and a trigger detection process that is performed when a result of the determination process matches the condition;
A storage unit for storing a frame captured based on the trigger detection processing of the trigger detection determination unit,
It is characterized by having.
[0068]
In the present invention, the trigger detection condition is set by the trigger detection command setting means with a command word suitable for the logical notation of trigger detection, and the trigger detection command set by the trigger detection command setting means is compiled by the trigger detection command compilation means.
[0069]
That is, each time a trigger is detected, the trigger detection condition is set with a command word suitable for the logical notation of the trigger detection, and the set trigger detection command is compiled.
[0070]
In other words, the program is compiled each time the trigger detection instruction is processed, so that only those steps that require processing steps are required in comparison with a conventional program having general versatility. As a result, the processing time can be saved, and even if a complicated trigger condition is set as compared with the related art, there is no possibility that a frame is missed.
[0071]
Further, the board of the present invention is a board that determines whether or not a frame including a header and a data field flowing through a network matches a predetermined trigger detection condition set in advance,
A host interface that connects to the host and includes shared memory;
A net interface for capturing the frame flowing through the network,
Reading and compiling a trigger detection command indicating the trigger detection condition set by a selective combination of the use of Mask & Match, the designation of an ID, and the use of a data field by a command suitable for a logical notation from the shared memory; Conversion means for converting to binary instructions;
A memory for storing the trigger detection instruction converted by the conversion means,
Executing a trigger detection instruction stored in the memory, and determining whether or not the frame captured from the net interface meets a predetermined trigger detection condition set in advance;
A frame collection unit that collects frames that meet a predetermined trigger detection condition based on the determination result of the determination unit;
It is characterized by having.
[0072]
In the embodiment, the board corresponds to an extension board connected to an extension bus of a personal computer in the application execution unit 21 shown in FIG. The net interface is the net interface (net I / F) 24 in FIG. The trigger detection command compiling means and the determination means correspond to the MPU 42. The memory is the first RAM 44, and the frame collection unit is the shared memory 41.
[0073]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of a protocol analyzer, a trigger detection device, a recording medium on which a program for trigger detection is recorded, and a board according to the present invention will be described with reference to the drawings.
[0074]
FIG. 1 shows a network configuration to which a trigger detection device according to the present embodiment is applied.
[0075]
In the present embodiment, the network 10 is configured by a network called a device net (DeviceNet) using a protocol called a CAN protocol.
[0076]
The device net is a distributed network applied to factory automation and the like. Various communication devices and control devices are connected to the network, and input information (messages) and various communication for the various communication devices and control devices are connected to the transmission path. Output information (messages) and the like from devices and control devices flow as frames.
[0077]
That is, for example, the communication device 12-1 (Slave 1), the communication device 12-2 (Slave 2), the communication device 13 (Scanner),... Are connected to the network 10 via the transmission line 11. Is connected to the trigger detection device 20 according to the present embodiment. Specifically, the communication device 12-1 (Slave1) and the communication device 12-2 (Slave2) are a programmable controller, a device, a remote I / O, and the like.
[0078]
Here, the trigger detection device 20 monitors a message flowing through the network without applying a load to the network 10 while satisfying user needs such as not to drop a frame and to set a complicated trigger detection condition. Can be configured from an analyzer. Since the function of the protocol analyzer and the like have already been described, duplicate description will be omitted.
[0079]
FIG. 2 shows a system configuration of the trigger detection device 20. The trigger detection device 20 includes an application execution unit 21 and a trigger detection execution board 23 connected to the application execution unit 21 via the host interface 22. , The trigger detection execution board 23 is connected to the transmission path 11 via the net interface 24.
[0080]
Here, the application execution unit 21 includes a personal computer or the like, sets trigger detection conditions for trigger detection, transmits a user's instruction to the trigger detection execution board 23, and transmits the execution result of the trigger detection execution board 23 to the user. Tell
[0081]
The application execution unit 21 specifically performs processing such as setting a trigger condition, setting a capture filter, executing a network monitoring start instruction, executing a network monitoring end instruction, and displaying captured data (collected data). However, these details will be described later.
[0082]
The trigger detection execution board 23 is a board that performs trigger detection and the like under the instruction of the application execution unit 21 and is mounted on a bus slot (expansion bus slot) (not shown) of the application execution unit 21 via the host interface 22.
The board 23 is connected to an expansion bus called a PCI bus (an expansion bus standard proposed by Intel Corporation) or an ISA bus (an expansion bus standard proposed by IBM Corporation). Hereinafter, such a bus is referred to as an extension bus.
[0083]
The trigger detection execution board 23 specifically includes a process of compiling a trigger condition set by the application execution unit 21, network monitoring, trigger detection, fetch of a specific frame, and the like based on an instruction from the application execution unit 21. The details of which will be described later.
[0084]
Next, the configuration of the trigger detection execution board 23 will be described with reference to FIG.
[0085]
The trigger detection execution board 23 includes an extension bus interface (extension bus I / F) 40, a shared memory 41, an MPU 42, a ROM 43, a first RAM 44, a second RAM 45, a CAN control unit 46, a transceiver 47, a net interface (net I / F) 24.
[0086]
Here, the extension bus interface (extension bus I / F) 40 is attached to an extension bus bus slot (not shown) of the application execution unit 21, and interfaces between the application execution unit 21 and the trigger detection execution board 23.
[0087]
The shared memory 41 serves as a shared memory between the application execution unit 21 and the trigger detection execution board 23, and writes a trigger detection command set by the application execution unit 21 or buffers data collected by the trigger detection execution board 23. And so on.
[0088]
The host interface 22 shown in FIG. 2 is constituted by the extension bus interface (extension bus I / F) 40 and the shared memory 41.
[0089]
The MPU 42 controls the whole of the trigger detection execution board 23. The MPU 42 compiles the trigger detection command written in the shared memory 41 under the instruction of the application execution unit 21 and stores it in the first RAM 44. Under the instruction of 21, network monitoring, trigger detection, and processing for capturing a specific frame are performed.
[0090]
The ROM 43 stores a system program executed by the MPU 42.
[0091]
The first RAM 44 stores the compiled trigger detection instruction when the MPU 42 compiles the trigger detection instruction written in the shared memory 41 by the application execution unit 21.
[0092]
The second RAM 45 is a memory in which data collected for trigger detection is temporarily stored. When the data is stored in the second RAM 45, trigger detection of the stored data is performed. When loading the data into the second RAM 45, a filtering process is performed based on the address of the data and the like, thereby preventing the buffer of the shared memory 41 from being filled with useless information. Note that only one data is taken into the second RAM 45, necessary data is stored in a buffer of the shared memory, and unnecessary data is discarded as it is. Note that the RAMs 44 and 45 may be composed of one RAM and divided into two areas.
[0093]
The CAN control unit 46 extracts a CAN frame from input data converted into digital data.
[0094]
The transceiver 47 generates a voltage on the transmission line 11 based on a signal from the CAN control unit 46.
[0095]
The net interface (net I / F) 24 interfaces the transmission line 11 and the trigger detection execution board 23.
[0096]
Next, a message format of a device net flowing through the transmission path 11 of the network 10 shown in FIG. 1 will be described.
[0097]
The device net uses the frame structure of the CAN protocol, and gives 11 bits (CAN Identifier Bits) and a data field in the frame header to have a meaning as a device net.
[0098]
FIG. 4 shows a CAN frame configuration. The CAN frame 30 is composed of a 19-bit CAN HEADER (31), a 0- to 64-bit DATA FIELD (32), and a 25-bit CAN TRAILER (33). Have been.
[0099]
FIG. 5 shows details of the CAN HEADER 31 shown in FIG. 4, but includes a 1-bit Start of Frame (31-1), an 11-bit CAN Identifier (31-2), and a 1-bit RTR Bit. (31-3) and 6-bit Control (31-4).
[0100]
By the way, in the CAN frame configuration as described above, the reception interval of the CAN frame becomes minimum when the inter-frame space between the CAN frames is the minimum 3 bits, and when the DATA FIELD (32) of the CAN frame 30 is 0 bit.
[0101]
At this time, the bit length is as follows.
[0102]
CAN HEADER + DATA FIELD + CAN TRAILER
+ Inter frame space
= 19 + 0 + 25 + 3
= 47 (bits)
[0103]
Therefore, when using the fastest communication speed of 500 Kbps on the device net,
47 ÷ 500,000 = 0.000094 (sec)
Becomes
94 μsec is the minimum reception interval.
[0104]
The longest processing time of the trigger detection processing must satisfy the following expression.
[0105]
Minimum reception interval (94 μsec)> reception processing + reception data transfer processing + trigger detection processing
[0106]
Under the configuration of the present embodiment as described above and the conditions as described above, in the present embodiment, trigger detection is performed as follows.
[0107]
First, an outline of trigger detection in the present embodiment will be described with reference to the flowchart of FIG.
[0108]
By the way, the difference between the processing of FIG. 6 according to the present embodiment and the processing of the conventional example shown in FIG. 15 is that the processing within the dotted line 170 in FIG. The processing of steps 214 and 216, which is the processing of the application execution unit 21, has been added to the previous stage of FIG.
[0109]
Therefore, Step 200 (same as Step 140 in FIG. 15), Step 202 (Same as Step 142 in FIG. 15), Step 204 (Same as Step 144 in FIG. 15), Step 208 (Same as Step 158 in FIG. 15), The description of the processing of step 210 (same as step 160 in FIG. 15) and step 212 (same as step 162 in FIG. 15) will be omitted from the description of FIG. 15, and redundant description will be omitted.
[0110]
In FIG. 6, the processing of steps 214 and 216 is processing performed by the application execution unit 21 composed of a personal computer or the like, and the processing of steps 200 to 212 is processing performed by the trigger detection execution board 23.
[0111]
First, the process of step 214 performed by the application execution unit 21 is a process in which a user sets a trigger detection command based on a program on a recording medium on which a program for trigger detection is recorded. Specifically, a dialog box shown in FIG. 8 to be described later is provided to the user, and is set on this dialog box.
In FIG. 8, two types of condition settings, setting 1 and setting 2, can be set. In each setting, it is possible to specify Mask & Match of the CAN ID and Matching of the data field. In FIG. 8, “multiple designation” is selected.
Here, by adopting a language suitable for the logical notation of trigger detection, it is possible to express a complicated trigger setting by a simple notation method. For example, there is a ladder language as such a language.
[0112]
Next, the trigger detection command written in the simple language set in step 214 is downloaded to the shared memory 41 (constituting the host interface 22) of the trigger detection execution board 23 (step 216). For example, if the trigger detection command is written in ladder language in step 214, it is written in ladder mnemonic.
[0113]
The MPU 42 of the trigger detection execution board 23 compiles this, converts it into a binary instruction, and stores it in the first RAM 44.
[0114]
The trigger detection execution board 23 detects a trigger based on the trigger detection command stored in the first RAM 44 (Step 206).
[0115]
As described above, the trigger detection instruction set in step 214 can adopt a simple language suitable for the logical notation of advanced trigger detection, and can express complicated trigger settings in a simple notation. ing.
[0116]
That is, each time a new trigger is detected, the most suitable trigger detection condition is set and compiled. For example, in FIG. 15, if a trigger is detected under the detection condition of setting 3, a program including only the processing of step 156 is created within the dotted line 170. Accordingly, there is no redundant processing with a branch as in the processing of the dotted line 170 in FIG. 15, and a complicated trigger detection processing can be performed in a short time.
[0117]
FIG. 7 shows a notation example in which a simple language is used for the logical notation of trigger detection in setting the trigger command set in step 214 of FIG. 6, and trigger detection is performed by setting two types of Mask & Match. The setting contents in the case are shown.
In FIG. 7, (a) shows ladder notation, and (b) shows mnemonic notation.
[0118]
That is, “setting 1” is “when the condition of Trigger 1 (Mask & Match) is matched and the data of the second byte of the data frame is 0x41 or 0x40”.
[0119]
“Setting 2” is “when the condition (Mask & Match) of Trigger 2 matches”.
[0120]
Here, when either of the conditions of “Setting 1” or “Setting 2” is satisfied, it is determined that the trigger is detected.
[0121]
In the present embodiment, these setting conditions are described in a language suitable for the logical notation of trigger detection.
[0122]
Next, the operation of the trigger detection device 20 according to the present embodiment will be described separately for the operation in the application execution unit 21 and the operation in the trigger detection execution board 23.
[0123]
Operation in application execution unit 21
(1) Trigger setting
(A) In this process, first, a trigger setting screen (dialog box) is provided to the user. FIG. 8 shows an example of a screen when a trigger is set using this screen.
[0124]
This screen is an example of a screen when the screen is set under the setting conditions of FIG.
[0125]
“Setting 1” is “when the condition of Trigger 1 (Mask & Match) is matched and the data of the data frame (data field) is the setting value”.
[0126]
“Setting 2” is “when the condition (Mask & Match) of Trigger 2 matches”.
[0127]
Here, when either of the conditions of “Setting 1” or “Setting 2” is satisfied (OR), it is determined that the trigger is detected.
[0128]
Although the above setting example is “setting 1 OR setting 2”, combinations of setting 1 and setting 2 include the following.
(1) Only setting 1
(2) Only setting 2
(3) Setting 1 AND setting 2
(4) Setting 1 OR setting 2
(5) Other than setting 1
(6) Other than setting 2
(7) Other than setting 1 AND setting 2
(8) Setting 1 AND Other than setting 2
(9) Other than setting 1 AND Other than setting 2
(10) Other than setting 1 OR setting 2
(11) Setting 1 OR Other than setting 2
(12) Other than setting 1 OR Other than setting 2
(13) Other than setting 1 THEN setting 2
(14) Setting 1 Other than THEN setting 2
(15) Other than setting 1 Other than THEN setting 2
[0129]
Here, "setting 1 THEN setting 2" means that when a message matching setting 1 is detected, a message matching setting 2 is waited for thereafter. Then, when a message matching the condition of setting 2 is received, it is determined that the trigger condition is satisfied.
[0130]
(B) Next, the setting contents set by the user on the screen of FIG. 8 are downloaded to the shared memory 41 of the host interface 22.
[0131]
In this process, when a trigger condition is set on the screen in FIG. It is performed by being downloaded to.
[0132]
(C) Next, via the host interface 22, the MPU 42 is instructed to compile the trigger detection setting written in the shared memory 41 and store it in the first RAM 44.
[0133]
(2) Capture filter setting
(A) In this process, first, a capture filter setting screen (dialog box) is provided to the user. FIG. 9 shows an example of a screen for setting a capture filter. The capture filter is not provided for trigger detection of all the captured frames, but is provided in advance to narrow down the frames for trigger detection. For example, only frames having specific addresses are passed. (B) The setting contents set on the screen by the user are written to the shared memory 41 of the host interface 22 by ladder mnemonic. As described above, only the data that has passed through this filter is stored in the second RAM 45.
[0134]
(3) Network monitoring start command
(B) Provide a button for starting network monitoring to the user on the screen.
(B) When the user presses the button, the user instructs the MPU 42 via the host interface 22 to start network monitoring.
[0135]
(4) Network monitoring end command
(B) A button for ending network monitoring is provided to the user on the screen.
(B) When the user presses the button, the user instructs the MPU 42 via the host interface 22 to end network monitoring.
[0136]
(5) Capture data display
Upon receiving the network monitoring end notification from the trigger detection execution board 23, the trigger detection execution board 23 reads the capture data written in the shared memory 41 of the host interface 22, and provides the user with the screen. FIG. 10 shows a display example at this time.
[0137]
Operation in the trigger detection execution board 23
(1) Trigger setting
(A) A compile instruction of a trigger detection instruction is received from the application execution unit 21.
(B) As a result, the ladder mnemonic trigger detection instruction written in the shared memory 41 of the host interface 22 is read, and an instruction set executable by the MPU 42 is generated (compile processing).
(C) Next, the instruction is converted into a binary instruction and written into the first RAM 44.
[0138]
(2) Network monitoring, trigger detection, frame capture
(A) A network monitoring start command is received from the application execution unit 21. (B) Start network monitoring.
(C) Perform trigger detection processing in accordance with the settings. The following settings are possible. These settings are specified by the user in the application execution unit 21.
[0139]
・ Setting example 1 Frame capture starts after detecting a frame that matches the trigger condition. The fetched frame is buffered in the shared memory 41. When the shared memory 41 becomes full, the frame fetching process is terminated, and the application execution unit 21 is notified of the end of monitoring.
[0140]
Setting Example 2 Frame acquisition to the shared memory 41 is started immediately upon receiving a network monitoring command from the application execution unit 21 and is stopped when a frame matching the trigger condition is detected. Perform
[0141]
In the setting example 2, if the buffer becomes full before the trigger condition is matched, the capture is continued by the FIFO (First In First Out) in a format in which the latest data remains. finish.
[0142]
In the present embodiment, there are the following three cases that cause the network monitoring to end.
(1) In the case of receiving a network monitoring end command from the application execution unit 21 (2) In the case of the setting 1, the frame acquisition is started after detecting a frame that matches the trigger condition, and the shared memory 41 becomes full. When it becomes
(3) In the case of the above setting example 2, when a frame matching the trigger condition is detected.
[0143]
(D) In the case of the setting 2, when capturing a frame, the application executing unit 21 selectively captures only the frame that matches the filter condition set in the shared memory 41 of the host interface 22 and stores the frame in the buffer. I do. As the storage buffer, the shared memory 41 of the host interface 22 is used.
[0144]
FIG. 11 is a flowchart showing the message reception processing and the processing time in the trigger detection execution board 23.
[0145]
In this process, when the message receiving process starts (step 220), a receiving process such as data transfer is performed (step 222).
[0146]
Next, the process of Mask & Match of setting 1 is performed (step 224), and subsequently, the process of Mask & Match of setting 2 is performed (step 226).
[0147]
Subsequently, a trigger detection command is executed based on the trigger detection command stored in the first RAM 44 (step 228).
[0148]
Subsequently, it is checked whether or not a trigger is detected (step 230). If the trigger is not detected (NO in step 230), the process proceeds to step 234. If the trigger is detected (YES in step 230), the process at the time of trigger detection is performed. Is performed (step 232).
[0149]
Then, in the following step 234, reception processing such as message capture is performed, and the trigger detection ends (step 236).
[0150]
By the way, as described above, this processing needs to be performed within 94 μsec. However, when the operation clock of the MPU 42 is 16 Mhz, the execution processing time of the trigger detection instruction in step 228 is about 4 μsec. This is because, as described above, for example, in FIG. 15, when trigger detection is performed under the trigger detection condition of setting 3, only the process of step 156 within the dotted line 170 needs to be performed.
[0151]
Accordingly, there is an effect that a complicated detection condition can be set without dropping a frame.
[0152]
As described above, in the present embodiment, the trigger detection condition is set each time by the application execution unit 21, and the set trigger detection condition is written in the shared memory 41 of the host interface 22. Next, upon receiving the compile instruction of the trigger instruction from the application execution unit 21, the trigger detection execution board 23 reads the trigger instruction written in the shared memory 41 of the host interface 22, and generates an instruction set executable by the MPU 42 ( (Compile processing), and the data is written in the first RAM 44.
[0153]
Therefore, flexible trigger detection conditions can be set according to the trigger detection mode at each time, and redundant processing when a general-purpose logic is employed as in the conventional example shown in FIG. 15 is eliminated. Therefore, complicated trigger conditions can be set.
[0154]
In addition, since the trigger detection command can be expressed in a simple notation, the compiling process can be easily performed.
[0155]
Further, since there is no branch instruction as shown by a dotted line 170 in FIG. 15, the judgment processing can be performed at high speed even under complicated conditions.
[0156]
【The invention's effect】
As described above, according to the present invention, in a trigger detection device that determines whether a frame flowing in a network meets a predetermined trigger detection condition set in advance, the trigger detection condition is suitable for a logical expression of trigger detection. Trigger detection command setting means for setting by a command word, and trigger detection command compilation means for compiling the trigger detection command set by the trigger detection command setting means, wherein the trigger compiled by the trigger detection command compilation means Based on the detection command, it is determined whether or not a frame flowing through the network meets a predetermined trigger detection condition, so that a flexible trigger detection condition can be set according to a trigger detection mode at each time. Thus, complicated trigger conditions can be set.
Further, in the related art, even if a complicated detection condition that may be missed is set, high-speed processing is performed, so that there is no missing.
[Brief description of the drawings]
FIG. 1 is a diagram showing a network configuration to which a trigger detection device according to the present invention is applied.
FIG. 2 is a diagram showing a system configuration of a trigger detection device 20 shown in FIG.
FIG. 3 is a block diagram showing a configuration of a trigger detection execution board 23 shown in FIG. 2;
FIG. 4 is a diagram showing a CAN frame configuration.
FIG. 5 is a diagram showing details of a CAN HEADER 31 shown in FIG. 4;
FIG. 6 is a diagram illustrating an outline of a trigger detection device according to the embodiment.
FIG. 7 is a diagram showing setting contents when trigger detection is performed by setting two types of Mask & Match when setting a trigger instruction set in step 214 of FIG. 6;
FIG. 8 is a screen example when a trigger setting screen (dialog) is provided to a user.
FIG. 9 is a screen example when a capture filter setting screen (dialog) is provided to a user.
FIG. 10 is a display example in a case where a network monitoring end notification is received from the trigger detection execution board 23, the capture data written in the shared memory 41 of the host interface 22 is read by the trigger detection execution board 23, and the captured data is provided to the user on the screen.
FIG. 11 is a flowchart showing a processing procedure and a processing time in the trigger detection execution board 23;
FIG. 12 is an explanatory diagram when trigger detection is performed by Mask & Match.
FIG. 13 is a flowchart showing an outline of a conventional message receiving process.
FIG. 14 is a flowchart showing a processing procedure when a trigger is detected by Mask & Match.
FIG. 15 shows a case where a general-purpose program is used to satisfy the user's needs. In addition to a Mask & Match portion that is a pure trigger detection process, redundant processes such as a branch process are included (for example, a process within a dotted line 170 in FIG. 15). FIG. 4 is an explanatory diagram for explaining that the receiving process does not fit within the minimum receiving interval.
[Explanation of symbols]
10 Network
11 Transmission line
12-1, 12-2 Communication device
13 Communication device
20 Trigger detection device
21 Application execution unit
22 Host interface
23 Trigger detection execution board
24 Net Interface
40 Expansion bus interface (extension bus I / F)
41 Shared memory
42 MPU
43 ROM
44 First RAM
45 Second RAM
46 CAN control unit
47 transceiver

Claims (6)

In a protocol analyzer which is connected to a network in which frames including a header and a data field are communicated and captures necessary frames among frames flowing through the network based on predetermined trigger detection conditions,
A memory for storing a result of compiling a trigger detection instruction in which each of the trigger detection conditions set by the selective combination of the use of Mask & Match, the designation of the ID, and the use of the data field is written in a language suitable for the logical notation ; ,
A receiving process of receiving the frame flowing through the network; a reading process of reading out the compiled trigger detection command from the memory to execute the command; and a determining process of determining whether or not the received frame has been detected as a trigger. A trigger detection processing unit that performs processing when a trigger is detected when the result is trigger detection ;
A storage unit for storing a frame captured based on the trigger detection processing of the trigger detection determination unit ,
A protocol analyzer, comprising: The protocol analyzer further has an application execution unit for setting a trigger detection condition,
The application execution unit sets a plurality of trigger detection conditions by selectively combining use of Mask & Match, designation of an ID, and use of a data field by a user.
The protocol analyzer according to claim 1, wherein the language is a ladder language, and each of the set trigger detection conditions is described in a ladder language and the trigger detection command is set . The application execution unit,
The trigger detection determination unit manages network monitoring start and network monitoring end,
The protocol analyzer according to claim 2, wherein the captured frame stored in the storage unit is read out and displayed . Above Symbol application execution unit,
When setting the above trigger detection conditions, provide a dialog box,
In the dialog box, it is possible to set a selective combination of use of Mask & Match, designation of ID, and use of data field.
The protocol analyzer according to claim 2, wherein: In a trigger detection device that determines whether a frame including a header and a data field flowing through a network matches a predetermined trigger detection condition set in advance,
The trigger detection conditions are set by a selective combination of the use of Mask & Match, the designation of an ID, and the use of a data field, and each of the set trigger detection conditions is set by a command word suitable for a logical notation. Trigger detection instruction setting means for performing
Trigger detection instruction compiling means for compiling the trigger detection instruction set by the trigger detection instruction setting means,
A memory for storing the trigger detection command compiled by the trigger detection command compiling means , a reception process for receiving the frame flowing through the network, and the frame subjected to the reception process based on the trigger detection command for the memory are preset. A trigger detection determining unit that performs a determination process of determining whether the predetermined trigger detection condition is satisfied, and a trigger detection process that is performed when a result of the determination process matches the condition;
A storage unit for storing a frame captured based on the trigger detection processing of the trigger detection determination unit,
A trigger detection device comprising: A board for determining whether a frame including a header and a data field flowing through a network matches a predetermined trigger detection condition set in advance,
A host interface that connects to the host and includes shared memory;
And the net interface to capture the frame through the network,
The trigger detection instruction shown by instruction words Mask & Match use the ID of the specification and selective combining by set the trigger detection condition of use of the data fields for the logical representation compile reads from the shared memory, Conversion means for converting to binary instructions;
A memory for storing the trigger detection instruction converted by the conversion means ,
Executing a trigger detection instruction stored in the memory, and determining whether or not the frame captured from the net interface meets a predetermined trigger detection condition set in advance; and
A frame collection unit that collects frames that match a predetermined trigger detection condition based on the determination result of the determination unit;
A board comprising:

Images