Page 1
Technica Engineering GmbH
Leopoldstr. 236
80807 München
User Manual
Version 0.6
May 2017
BroadR-Reach (100Base-T1) – Standard Ethernet
BR_SPY_mini
Page 2
Page 2 of 23
Page 3
Page 3 of 23
Index
1 Feature List ................................................................................................................... 4
2 Warranty and Safety Information ................................................................................... 5
3 Pinning .......................................................................................................................... 6
3.1 Power and BroadR-Reach (100Base-T1) connector................................................ 7
3.2 SubD 9 Trigger Connector ...................................................................................... 8
3.3 RJ45 Ethernet connectors ....................................................................................... 8
4 Status LEDs and Pushbutton ......................................................................................... 9
5 Configuration ................................................................................................................10
6 Use Cases ....................................................................................................................11
6.1 Dual Media Converter Mode (“0, 0”) .......................................................................11
6.2 Spy Mode Without Wrapper (“0, 1”) ........................................................................12
6.3 Spy Mode With Wrapper (“1, 0”) .............................................................................13
6.3.1 BRSPY mini LUA Dissector Installation Guide ................................................15
6.4 Frame Generator Mode (“1, 1”) ..............................................................................17
6.4.1 Frame Format .................................................................................................17
6.4.2 Status Reporter ...............................................................................................19
7 Trigger Functions ..........................................................................................................21
8 Frequently Asked Questions – FAQ ..............................................................................22
9 Contact .........................................................................................................................23
Page 4
Page 4 of 23
1 Feature List
The Technica Engineering BR_SPY_mini captures Automotive Ethernet Frames (BroadRReach / 100Base-T1) directly on the line without influence of the original network. The data
Frames can be enhanced with additional information: the exact timestamp and the bus port
the data was originally sent on. All data can be recorded on a PC or datalogger for detailed
offline analysis using standard RJ45 cables.
Timestamps are in 0.04 μs resolution and synchronous to all connected lines.
BR_SPY_mini can provide a Trigger Generator function at an extra cost, and should be or-
dered in advance before buying the product to be programmed properly at Technica Engineering side before delivery.
Features:
4 Ports BroadR-Reach (100Base-T1) Ethernet 100 MBit/s Fullduplex on a single un-
shielded twisted pair.
2 Ports Gigabit Ethernet 100/1000 BaseTX
6x Digital Trigger Input
6x Digital Trigger Output
Automotive Tyco MQS Connectors for BroadR-Reach (100Base-T1) and Power Sup-
ply
Robust stainless-steel case
DIP Switches for easy configuration
Selection of multiple UseCases:
o Two independent MediaConverters
o 2x SPY for listening on a BroadR-Reach (100Base-T1) Channel (with and without
hardware timestamp)
o A combination of one MediaConverter and one SPY
Power requirement: 8 to 16 Volt DC (nominal 12 Volt DC)
Power consumption: 4 to 7 Watt
Size: 110 x 108 x 28 mm
Weight: 0,4 kg
International Protection: IP 2 0
Operating Temperature: -20 to +80 °Celsius
Page 5
Page 5 of 23
2 Warranty and Safety Information
Before operating the device, read this manual thoroughly and retain it for
your reference.
Use the device only as described in this manual.
Use only in dry conditions.
Do not apply power to a damaged device.
Do not open the device. Otherwise warranty will be lost.
This device is designed for engineering purpose only.
Special care has to be taken for operation.
Do not use this device in a series production car.
As this device is likely to be used under rough conditions, warranty is limited
to 1 year.
Manufacturer liability for damage caused by using the device is excluded.
Page 6
Page 6 of 23
3 Pinning
The pinning of the ECU connectors is listed on the label on top of the device, detail information see below.
Page 7
Page 7 of 23
3.1 Power and BroadR-Reach (100Base-T1) connector
Connector color: Black
Power supply for the device is supplied by Pin 1 (12 Volt) and Pin 10 (Ground).
Warning: If you apply a voltage higher than 18 Volt, the device will be damaged!
The Tyco Electronics (TE) Micro Quad Lock System (MQS) is used.
Tyco, MQS Abdeckkappe, 2x9 Pol, black Part Number 1-967416-1
alternatively Part Number 1-1355350-1
Tyco, MQS Buchsengehäuse, 2x9 Pol Part Number 965778-1
alternatively Part Number 962108-2
Tyco crimp contact Part Number 928999-1
Note: You can use the official Tyco tool for these crimp contacts. A cheap variant is the
crimp tool for “PSK” contacts.
Pin
Function
Pin
Function
1
Battery +12 Volt Input
10
Power Ground
2
n.c.
11
n.c.
3
n.c.
12
n.c.
4
n.c.
13
n.c. 5 BroadR-Reach Port 1A, Negative
14
BroadR-Reach Port 1B, Negative
6
BroadR-Reach Port 1A , Positive
15
BroadR-Reach Port 1B , Positive
7
n.c.
16
n.c.
8
BroadR-Reach Port 2A, Negative
17
BroadR-Reach Port 2B, Negative
9
BroadR-Reach Port 2A , Positive
18
BroadR-Reach Port 2B , Positive
Table 1: Pinning information Tyco MQS connector
Page 8
Page 8 of 23
3.2 SubD 9 Trigger Connector
Standard SubD 9 Pos. female connector.
This connector is used for digital input and output trigger functions.
Pin
Function
1
Digital Trigger Input/Output 1
2
Digital Trigger Input/Output 2
3
Signal Ground Reference
4
Signal Ground Reference
5
Signal Ground Reference
6
Digital Trigger Input/Output 3
7
Digital Trigger Input/Output 4
8
Digital Trigger Input/Output 5
9
Digital Trigger Input/Output 6
Table 2: Pinning information Sub-D connector
Digital Trigger Output:
Digital Trigger Output Voltage is 3.3 Volt Level with a 4.7 KOhm Pull-up resistor.
Active LOW. Drive Strength 20 mA.
Digital Trigger Input:
Digital Trigger Voltage is 3.3 Volt Level with a 4.7 KOhm Pull-up resistor.
Active LOW
3.3 RJ45 Ethernet connectors
There are two RJ45 Standard Ethernet connectors of the front side for Gigabit Ethernet.
Depending on the selected Use Case they are forced to be 100 Mbit/s or Gigabit Ports.
Page 9
Page 9 of 23
4 Status LEDs and Pushbutton
The BR SPY mini has several status LEDs at the front side of the case.
The “Host” LED1 must be ON, and “Host” LED2 must toggle slowly (approx. 1 sec).
If “Host” LED2 does not toggle or “Host” LED1 is OFF, an error has been detected by the
Host.
The “FPGA” LED1 and LED2 show the setting of the DIP switches 3 and 4. When one of
these DIP switches is ON, the corresponding LED is ON.
Note: For the DIP switches: Switch ON Switch set to “up” position, when the device
stands flat on the table.
Switch OFF Switch set to “down” position, when the device
stands flat on the table.
The 4 BR Link LEDs 1A to 2B monitor the link status of the ports BR1A to BR2B. The LEDs
are lit when there is BroadR-Reach (100Base-T1) link detected. These LEDs are updated in
real time.
Note: There is an issue when P/N of the bus are swapped. The LED may be on in this case
on BroadR-Reach (100Base-T1) slave side, but there will be no data transmission possible.
Please ensure proper electric connection (positive with positive and vice versa).
The built-in LEDs in RJ45 connector shows the status of the gigabit ports. The left (orange
LED) is lit by a link-up. The right (yellow) will blink on data traffic.
Page 10
Page 10 of 23
5 Configuration
The BRSPY mini is configured by 8 DIP Switches on the front of the device.
DIP Switch 1: ON = BroadR-Reach Port 1A is set to Master Port 1B to slave.
OFF = BroadR-Reach Port 1B is set to Master Port 1A to slave.
DIP Switch 2: ON = BroadR-Reach Port 2A is set to Master Port 2B to slave.
OFF = BroadR-Reach Port 2B is set to Master Port 2A to slave.
DIP Switch 3 to 4: Use Case Selection.
DIP Switch 3 OFF, DIP Switch 4 OFF Dual Media Converter Mode
DIP Switch 3 OFF, DIP Switch 4 ON SPY Mode Without Wrapper
DIP Switch 3 ON, DIP Switch 4 OFF SPY Mode With Wrapper
DIP Switch 3 ON, DIP Switch 4 ON Frame Generator
DIP Switch 5 to 8: Frame Generator speed, burst and packet size selection
Note: DIP Switch 1 and DIP Switch 2 will configure Port 1A and Port 2A as Master or Slave
in the Media Converter mode. In this mode, ports 1B and 2B are not working.
Same is valid for port 1A Master/Slave setting in the Combination Mode and port 1B is not
working.
Page 11
Page 11 of 23
6 Use Cases
Four different Use Cases can be configured by DIP Switch 3 and 4 for the BRSPY mini. After
changing this switches, a hardware reset is required.
6.1 Dual Media Converter Mode (“0, 0”)
The simplest Use Case is the dual Media Converter, selected by setting the DIP switches 3
and 4 to OFF. The BR_SPY_mini will act like two completely independent Media Converters
from BroadR-Reach (100Base-T1) to Fast Ethernet (100Mbps) in Full Duplex Mode.
The two data streams of the two Media Converters are completely independent of each
other. Both data streams are full duplex and the RJ45 Ports are input/output. The PC can
send and receive data.
There are no buffers in this Use Case.
The RJ45 Ports work in Fast Ethernet (100 Mbit/s) Mode in this Use Case.
Note: in this mode, the ports 1B and 2B are inactive.
Page 12
Page 12 of 23
6.2 Spy Mode Without Wrapper (“0, 1”)
In this Use Case the RJ45 Ports work in Gigabit Mode. The copied data from the two 100
Mbit/s BroadR-Reach (100Base-T1) Ports are combined to one 200 Mbit/s stream and are
sent on one Gigabit link. To do a collision resolution the packets are buffered on the BroadRReach (100Base-T1) Port.
The signals received in BR1A and BR1B ports are combined in one stream and sent on GB1
port, while the signals received in BR2A and BR2B ports are combined in one stream and
sent on GB2 port. The PC is not able to send data. The RJ45 Ports are output only.
In this case, no header is added in the sent Ethernet frame, and the received frames on the
BroadR-Reach (100Base-T1) ports are forwarded directly to the corresponding Gigabit port,
as they have been received, without suffering any modification.
To activate this Use Case, the DIP Switch 3 must be set to OFF position, while DIP Switch 4
must be set to ON position.
In this case, the communication between two BroadR-Reach (100Base-T1) ports is possible.
BR1A and BR1B ports can send packets each other, as well as BR2A and BR2B with
minimal delay (< 2 µs), which makes this mode suitable for use with AVB / TSN devices.
Note: the exact same functionality is available at ports 2A, 2B and GB2.
Page 13
Page 13 of 23
6.3 Spy Mode With Wrapper (“1, 0”)
The user can select this mode configuring DIP Switch 3 to ON-up position- and DIP Switch 4
to OFF position -down position. In this case, the working mode is the same than in SPY without wrapper mode, but a header is added on the Ethernet frame sent out of the Gigabit ports
GB1 and GB2. The packet received in the BroadR-Reach (100Base-T1) port will be logged
through the corresponding Gigabit Port into an Ethernet RAW frame, the PDU of which will
be the exact Ethernet frame received (bit-by-bit including the original CRC). The following
picture shows the structure of an Ethernet BR_SPY_mini RAW frame, in this use case:
Table 3: Detail description of the BR_SPY_mini Header
Note: The data Frames are enhanced with additional information as an exact timestamp and
the bus port the data was originally sent on. Timestamps are in 0.04 μs resolution and synchronous to all connected BR (100Base-T1) lines.
With this feature the user can record the exact time when the first bytes of a frame were received on a BroadR-Reach (100Base-T1) port of the BR_SPY_mini. It is also possible to see
the complete frame including the preamble and the CRC in Wireshark. Normally this information is removed by your network interface.
Destination
MAC
(6 bytes)
Source
MAC
(6
bytes)
Ethernet
Type
(2 bytes)
Time
Stamp
(6
bytes)
Port
(1
byte)
Extra
(1
byte)
Length
(2
bytes)
Payload
(BR
packet)
CRC
(4
bytes)
Field Name
No. Of
Bytes
Value
Destination MAC Address
6
FF:FF:FF:FF:FF:FF
Source MAC Address
6
00:50:C2:E4:30:00
Ethernet Type
2
0x2182
Time Stamp
6
See the note below
Port
1
See the table below
Extra
1
0x00
Length
2
Length of the Ethernet BRSPY mini frame
Payload
X
Original BroadR-Reach packet with CRC
CRC
4
New calculated CRC of packet with new
BR_SPY_mini header
Ethernet BRSPY
mini Frame Header
Page 14
Page 14 of 23
Port
Value
BR 1A
0x00
BR 1B
0x01
BR 2A
0x02
BR 2B
0x03
Table 4: values of Port field within the BR_SPY_mini Header
The following image shows an example of a BroadR-Reach (100Base-T1) payload frame
encapsulated in a BR_SPY_mini RAW frame, with header:
Page 15
Page 15 of 23
6.3.1 BRSPY mini LUA Dissector Installation Guide
In order to dissect the BR_SPY_mini RAW Ethernet Frames generated on SPY With Wrapper mode, a LUA file for Wireshark is available on Technica Engineering website free of
charge. To install the LUA file in Wireshark, the user must follow the following steps:
1. Close Wireshark in case that the program is running on PC.
2. Download the .ZIP file that contains all the LUA files, through this website:
http://www.technica-engineering.de/wp-content/uploads/2017/01/BroadR-ReachSPY-Mini-Wireshark-Dissector.zip
3. Extract the downloaded ZIP file. This file should contain the following LUA file:
BR_SPY_Mini_ETH_wrapper_BR.lua
4. Copy or move the LUA file in Wireshark plugins folder. The path should be:
C:\Program Files\Wireshark\plugins\(Wireshark Version Number).
Note: Wireshark Version Number depends on the Wireshark version installed on
Page 16
Page 16 of 23
5. To copy or move the LUA files to the specified Wireshark plugins folder, Administrator
rights will be needed. In that case, the following window should appear. Press
Continue to proceed with the copy.
6. Run Wireshark.
Page 17
Page 17 of 23
6.4 Frame Generator Mode (“1, 1”)
In this case, the device works as a Frame Generator, sending Ethernet frames on GB1 with
Gigabit Speed and on all 4 BroadR-Reach (100Base-T1) ports with 100Mbit/s.
In order to select this mode, the DIP switches 3 and 4 must be ON (“11” Value). In addition,
the user can select different functionalities according with the set of DIP switches 5,6,7 and
8:
DIP Switch 5: When it is ON, it selects the Burst Mode. In this mode, the device
sends 4 packets with the minimum IFG (Interframe Gap). These sequence of packets
consists on a burst of mixed packets -a large frame and three small frames.
DIP Switch 6: This switch selects the Packets Size. When it is OFF, the size of the
frame will be 64 bytes, and when it is ON, the size will be 1500 bytes. The sizes don’t
include the preamble and CRC.
DIP Switches 7 and 8: This switches allows to select the FrameRate:
o DIP Switch 7 OFF, DIP Switch 8 OFF (“00”): 5 Mbits/s
o DIP Switch 7 OFF, DIP Switch 8 ON (“01”): 50 Mbits/s
o DIP Switch 7 ON, DIP Switch 8 OFF (“10”): 90 Mbits/s
o DIP Switch 7 ON, DIP Switch 8 ON (“11”): 98 Mbits/s
These rates are used in all BroadR-Reach (100Base-T1) ports, and in GB2. In Frame Generator mode, this port will work as Fast Ethernet port, sending status frames -see section
6.3.2.
In GB1, these values are multiplied by 10.
6.4.1 Frame Format
The following image shows the Frame Format transmitted on all BroadR-Reach ports and
GB port in Frame Generator Mode.
Page 18
Page 18 of 23
The frame format is fixed, and the only difference between the packets is the Stream ID field.
This Stream ID field shows the port number where the frame is being sent.
Stream ID
Value
Function
0
BR1A
1
BR1B
2
BR2A
3
BR2B
4
GB1 5 GB2
Table 5: Stream ID field on Frame Generator Mode
The following image shows an example with mixed frame sizes in Wireshark, in burst mode:
Page 19
Page 19 of 23
6.4.2 Status Reporter
On any of the BroadR-Reach and in GB1, the CRC and Continuous Counter fields are
checked and the result is reported each second in a Status Frame. This frame is transmitted
on GB2 with the following format:
In this port, the StreamID = 5, and the GB1 works as a Fast Ethernet port. The following image shows an example of a Status Frame in Wireshark:
Page 20
Page 20 of 23
The following table defines the content of the Status Frame Data. These fields are replicated
four times, one per BroadR-Reach port, giving information about the communication status in
every single port.
Field Size
(bytes)
Description
SequenceCounterLocked
2
Lowest Bit shows if the Sequence Counter Checker found at least
one valid pair and then was enabled. It is disabled while errors
occur.
SequenceErrorCounter
2
Counter for detected sequence errors after checker locked. This
counter is not reset.
IgnoredFrameCounter
2
Counter for frames, that were not in the right format to be
checked.
CRC_ErrorCounter
2
Counter for CRC errors in all received frames
ReceivedFrameCounter
2
Total of all received frames including malformed frames
MeasuredFramesPerSecond
2
Received Frames per second with valid preamble.
MeasuredBitsPerSecond
2
RX_DV High Time vs. Low Time
[MBits/s]
Table 6: Status Frame Data format
Page 21
Page 21 of 23
7 Trigger Functions
The Trigger Output signals detect when a frame is received in one of the BroadR-Reach
(100Base-T1) ports, this means, when the Data Valid rising edge is detected, and when a
frame is being transmitted on one of the Gigabit ports, as is shown in the following table:
Pin
Function
1
BR1A Data Valid
2
BR1B Data Valid
3
Signal Ground Reference
4
Signal Ground Reference
5
Signal Ground Reference
6
BR2A Data Valid
7
BR2B Data Valid
8
GB1 Data Enable
9
GB2 Data Enable
Table 7: description of Trigger Function outputs on Sub-D connector
Page 22
Page 22 of 23
8 Frequently Asked Questions – FAQ
Q: What is the delay time for Ethernet packets through the SPY?
A: The delay time depends on the UseCase that is set. For SPY Mode without wrapper the
delay of received BR (100Base-T1) packets to their output on the RJ45 ports is around
12µs. For Media Converter Mode, the delay is around 2.8µs. This delay is independent
of the Ethernet packet frame size.
Q: What is the delay time for Ethernet packets between two BroadR-Reach (100Base-T1)
ports?
A: For the Media Converter Mode, the delay between two BroadR-Reach ports is around
1.5µs. The delay is independent of the Ethernet packet frame size.
Q: Is AVB supported?
A: The SPY is especially built for testing AVB. For minimum delay the SPY must be set to
SPY UseCase. When using automotive AVB profile the time synchronization is not influ enced by the SPY.
There is no special handling of AVB frames as this is not necessary.
Q: The BR Link LED is lit but I have no valid BR Link. What is going wrong?
A: There is a bug in the used BR PHY. When the BR Plus and Minus lines are swapped
and the SPY Port is set to BR Slave then the Link LED is lit, but there is no data transmission possible. So please connect the BR lines correctly (postitive with positive, negative with negative).
Q: I am not able to see any packet in Wireshark in SPY -with or without wrapper- mode.
What is going wrong?
A: Some Ethernet Adapters must have the VLAN & Packet Priority option disabled. Please,
change this configuration, going to Ethernet Adapter Properties/Advanced/Packet Priority & VLAN. If this option is enabled, just disabled. Otherwise, it should be enabled.
For additional Technical support, please contact:
Page 23
Page 23 of 23
9 Contact
If you have any questions regarding this product, please feel free to contact us:
Technica Engineering GmbH
Leopoldstr. 236
80807 München
Germany
Technical support:
[email protected]
General information:
Most current user manuals and product information:
www.technica-engineering.de
Loading...