Protocol Data: Ethernet IP – Bitsight Knowledge Base

Ethernet IP is an industrial network protocol that uses standard ethernet to facilitate real-time data exchanges between industrial control systems. It is commonly employed in applications particularly in manufacturing and process industries involving programmable logic controllers (PLC), variable frequency drives (VFD), and other automation systems. Ethernet/IP is based on the Common Industrial Protocol (CIP) and is managed by Open DeviceNet Vendors Association (ODVA).

Schema

Data available in Operational Technology Exposure Intelligence:

Field	Description
command Integer	The command sent to the device (list identity).
command_length Integer	The byte length of the item data payload.
command_status Integer	The command status code.
device_type String	Either a description of the device type (if known) or the numerical type identifier.
object_ip String	The logical object’s IP address decoded from the `socket_addr` response. This is typically a different IP than the source of this response and is often part of a private non-routable subnet.
item_count Integer	The number of items.
options Integer	The options from the response. It should be zero to be a compliant device.
product_code Integer	The vendor assigned code identifying the product within the device type.
product_name String	The product name.
product_name_length Integer	The byte length of the product name.
revision_major Integer	The major revision number of the product.
revision_minor Integer	The major revision number of the product.
sender_context Integer	The sender context is set to an arbitrary set of bytes when a command is sent and the device echoes the bytes back in response.
serial String	The device serial number. This can be used along with vendor_id to form a unique identifier for each device on a CIP network.
session Integer	The session handle for use when a session has been established. The list identity command is typically `0`.
state Integer	The status of the object. Values: `0` = Non-existent `1` = Self-testing `2` = Standby `3` = Operational `4` = Major recoverable fault `5` = Major unrecoverable fault `255` = Default
type_id Integer	The response type ID, which should be 12 for list identity request (99).

November 27, 2024: Published.

Schema

Related articles