analyze_iec61850
Analyze IEC 61850 captures for protocol health. Get a compact worst-first OK/WARN/FAIL report per source for GOOSE, SV, or MMS.
Instructions
Analyze an IEC 61850 capture for protocol health and return a compact, worst-first OK/WARN/FAIL report per source. protocol is one of 'goose' (stNum/sqNum gaps, timeAllowedtoLive violations, state-change storms), 'sv' (smpCnt continuity, loss of time sync, confRev changes), or 'mms' (error/reject PDUs, unpaired requests, slow responses). Scans the whole capture but returns only a bounded summary, so it is safe on high-rate SV streams.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| filter | No | Optional display filter ANDed with the protocol filter to scope to one gocbRef/svID/host (e.g. goose.gocbRef contains "gcb01") | |
| protocol | Yes | IEC 61850 protocol to analyze | |
| file_path | Yes | Path to the .pcap or .pcapng file |