SCL-driven stream generation, COMTRADE replay, live and PCAP analysis, waveform, phasor, RMS, continuity diagnostics, and repeatable engineering evidence.
Download · Product site · Quick start · Documentation · Licensing
Caution
ARSVIN can capture and transmit raw Ethernet traffic. Use live features only on an isolated laboratory network, an authorized point-to-point test link, or another network for which you have explicit authority. ARSVIN is not a certified relay test set, calibrated merging unit, deterministic real-time platform, functional-safety system, production process-bus monitor, or IEC 61850 conformance certificate.
ARSVIN is a focused Windows suite for practical IEC 61850 Sampled Values work. It combines:
- ARSVIN Publisher for SCL-assisted stream configuration, manual and scenario-based generation, waveform shaping, COMTRADE replay, timing-health visibility, and transmitter-side evidence; and
- ArSubsv Subscriber for live or PCAP stream discovery, decoding, SCL-assisted binding, waveform, phasor, RMS, continuity diagnostics, and receiver-side evidence.
Publisher evidence shows what the selected computer generated. Subscriber evidence shows what the selected computer and network adapter received and decoded. Neither proves that another IED consumed, trusted, or acted on a multicast stream.
| ArSubsv stream monitor | ArSubsv live analysis |
|---|---|
![]() |
![]() |
These screenshots are captured from the project applications. Public artwork and interface assets are maintained under the project’s own branding and provenance controls.
Open or create configuration
↓
Review SCL-derived stream and dataset settings
↓
Select manual, scenario, waveform, or COMTRADE source
↓
Run preflight and dry-run checks
↓
Transmit only on an authorized test link
↓
Export PCAP, timing health, and Markdown evidence
Choose live adapter or PCAP file
↓
Discover Sampled Values streams
↓
Optionally bind observed traffic to SCL expectations
↓
Inspect counters, timing, decoded values, waveform, phasor, and RMS
↓
Record mismatches and receiver-side evidence
- SCL/SCD stream setup for APPID, destination MAC, VLAN,
svID, dataset,confRev,smpRate,smpMod, andnofASDU. - Laboratory-oriented IEC 61850-9-2LE-style 4I+4V publishing.
- Multi-ASDU packing with
nofASDU=1/2/4/8. - Up to three independent publisher slots.
- Manual values, ramps, state sequences, per-phase scenarios, waveform shaping, and COMTRADE replay.
- Intentional quality-bit modes for controlled behavior checks.
- Target/actual frame rate, jitter, late-frame, missed-schedule, and send-duration evidence.
- Generated PCAP and Markdown reports.
- Live capture through Npcap and offline classic-PCAP import.
- Stream discovery and SCL-assisted binding.
- APPID, VLAN,
svID,confRev,nofASDU, sample-rate, and payload-layout checks. smpCntcontinuity and stream-health diagnostics.- Decoded instantaneous values, oscilloscope waveform, phasor, and RMS views.
- Receiver-side Markdown evidence reports.
- Shared-engine foundation for evidence-aware profile classification and configuration-versus-wire comparison.
The engine separates:
Observed wire facts
Configured SCL expectations
Evidence-backed profile definitions
Explainable confidence
Strict or compatible mismatch findings
Sparse evidence does not produce a Confirmed profile result. Unknown or conflicting traffic remains visible. Named-profile support is added only when requirements and test evidence have documented provenance.
See SV Profile Infrastructure, Profile Detection Output Contract, and SV Standards and Evidence Research Gate.
| Area | Current status | Boundary |
|---|---|---|
| IEC 61850 Sampled Values APDU | Publisher and Subscriber implementation for engineering and laboratory use | Not certified conformance testing. |
| IEC 61850-9-2LE-style 4I+4V | Implemented laboratory workflow | Formal profile verification and broader device evidence remain pending. |
| Generic SCL-driven Layer-2 SV | Dataset-aware engine foundation | Unknown layouts remain visible and unsupported elements are diagnosed. |
| Evidence-aware profile detection | Engine infrastructure implemented | Named-profile definitions require verified source and device evidence. |
nofASDU |
UI workflows emphasize 1, 2, 4, and 8 |
Software and PC timing remain non-deterministic. |
| COMTRADE | ASCII, BINARY, BINARY32, and FLOAT32 analog replay | Scaling and channel mapping must be reviewed before live transmission. |
PTP / smpSynch |
Compatibility-oriented laboratory behavior | Not an IEC 61850-9-3 certified clock. |
| Windows timing | Best-effort scheduling with visible health metrics | Not deterministic real-time execution. |
| IED subscription proof | Not provided | Sampled Values multicast has no application-layer acknowledgement. |
Evidence language in this repository distinguishes implemented behavior, deterministic tests, simulator or loopback evidence, laboratory observations, and features that remain provisional or unverified.
Every tagged release builds Windows x64 artifacts with stable filenames:
| Artifact | Purpose |
|---|---|
ARSVIN-Publisher-win-x64.exe |
Self-contained single-file Publisher. |
ArSubsv-Subscriber-win-x64.exe |
Self-contained single-file Subscriber. |
ARSVIN-Suite-Setup-win-x64.exe |
Installer containing both applications, documentation, notices, and uninstaller. |
ARSVIN-win-x64-portable.zip |
Portable suite with both applications and required legal/documentation files. |
ARSVIN-SBOM.cdx.json |
CycloneDX 1.5 software bill of materials. |
SHA256SUMS.txt |
SHA-256 checksums for release verification. |
Tagged releases publish GitHub artifact attestations. Example verification:
gh attestation verify .\ARSVIN-Suite-Setup-win-x64.exe --repo masarray/arsvinThe binaries are currently unsigned, so Windows SmartScreen may display an unknown-publisher warning. Npcap is not silently installed or bundled; install it separately from its official source when live capture or transmission is required.
- Download
ARSVIN-Suite-Setup-win-x64.exefrom the latest release. - Install the suite.
- Install Npcap separately for live Ethernet workflows.
- Open ARSVIN Publisher or ArSubsv Subscriber.
- Begin with a dry run, synthetic sample, PCAP import, or authorized isolated test link.
- Download the portable Publisher, Subscriber, or suite ZIP.
- Run the selected application directly.
- Use elevated privileges only when required by the selected Npcap and network configuration.
See Quick Start, Safety Boundaries, and Known Limitations.
For users:
- Windows 10 or Windows 11, x64.
- Npcap for live capture or transmission.
- Administrator permission only when required by local driver or adapter configuration.
- An independent packet dissector or process-bus analyzer is recommended for verification.
For developers:
- .NET 8 SDK, feature band 8.0.4xx.
- PowerShell 7+ recommended.
- Visual Studio 2022, JetBrains Rider, or VS Code with C# tooling.
- Inno Setup 6.7.1 when reproducing the automated installer build.
git clone https://github.com/masarray/arsvin.git
cd arsvin
.\build.ps1The resolved dependency graph is committed through packages.lock.json, and validated automation restores in locked mode.
Build release artifacts except the installer:
.\scripts\publish-release.ps1 -Version 0.4.0Run tests with both coverage gates:
.\scripts\test-with-coverage.ps1 -MinimumWholeEngineLineCoverage 14.25 -MinimumLineCoverage 72.5The current baseline contains 88 deterministic tests. Whole-engine coverage is 14.61% across 16,582 instrumented lines, while protocol-core coverage is 72.76% across 2,390 lines. CI enforces floors of 14.25% and 72.5% respectively; these values are engineering regression evidence, not formal protocol conformance evidence.
src/ARSVIN.Engine/ Shared production engine
src/ARSVIN.Engine/AR.Iec61850/ IEC 61850, SCL, SV, MMS, capture, and diagnostics
src/ARSVIN.Engine/AR.Iec61850/SampledValues/Profiles/
Profile observation and comparison infrastructure
src/ARSVIN.Engine/AR.Iec61850.Transports.Npcap/
Npcap transport
src/ARSVIN/ Publisher application
src/ARSVIN.Subscriber/ ArSubsv Subscriber
tests/ARSVIN.Tests/ Deterministic regression tests
installer/ Windows installer definition
scripts/ Build, validation, packaging, and release automation
docs/ Engineering, safety, licensing, and provenance documentation
samples/ Synthetic and redistributable examples
site/ SEO-ready GitHub Pages product site
- Documentation index
- Quick start
- Architecture
- SV standards and evidence research gate
- SV conformance and interoperability matrix
- SV profile infrastructure
- Subscriber verification app
- COMTRADE replay
- Safety boundaries
- Build and release
- Licensing
- External IP and provenance review
- Public wording and claim review
Do not attach confidential station SCL/SCD files, credentials, production captures, customer names, restricted network plans, or proprietary support material to public issues. Follow SECURITY.md and SUPPORT.md.
Contributions require the project Contributor License Agreement, a DCO sign-off on every commit, documented provenance, and any required employer authorization. Read CONTRIBUTING.md.
The current main branch and current public release packages are licensed only under the GNU General Public License v3.0 or later (GPL-3.0-or-later). See LICENSE.
A separate negotiated commercial license is available for proprietary integration, OEM or white-label distribution, closed-source redistribution, private branches, support, training, and engineering services. COMMERCIAL-LICENSE.md is an invitation to discuss terms, not an executed license.
Revisions up to and including 9440f08b6909ef2dc93dd483cfdcb4e1e86077d0 were released under Apache-2.0 and remain available on archive/apache-2.0-final. Those historical grants apply only to those earlier revisions. See docs/LICENSING.md.
Third-party components retain their applicable licenses. See THIRD_PARTY_NOTICES.md. Names, logos, icons, and official-release branding are governed separately by TRADEMARK.md.
Copyright (C) 2026 Ari Sulistiono.


