IST-105-1 505ITM PROTOCOL MANUAL Rev-31022 PDF

QUALITROL 505ITM Series
QUALITROL 505ITM Series


Intelligent Transformer Monitor

Protocol Manual: DNP V3.00, Modbus & ASCII
Communications
Document ID: IST-105-1 ECN-31022
www.qualitrolcorp.com
Legal
Information in this document is subject to change without notice. This document is provided to purchasers of Qualitrol
products for use in the installation, operation and servicing of such products. No other use, nor any reproduction,
distribution or the making of any derivatives of this document is authorized, without the express prior written permission of
Qualitrol.
Qualitrol endeavors to ensure the accuracy and quality of its published materials; however, no warranty, expressed or
implied, is provided. Qualitrol disclaims any responsibility or liability for any direct or indirect damages resulting from the
use of the information in this manual or products described in it. Mention of any product or brand does not constitute an
endorsement by Qualitrol of that product or brand.
This document was originally composed in English and was subsequently translated into other languages. The fidelity of
subsequent translations cannot be guaranteed. In case of conflict between the English version and another language
version, the English version takes precedence.
©2010 QUALITROL Company LLC, an ISO 9001 system certified company. All rights reserved. Information subject to change without notice.
®
All trademarks are properties of their respective companies, as noted herein. IST-104-1.
505ITM Protocol Manual
Contents
Hardware Instructions.................................................................................... 1
OVERVIEW ................................................................................................................ 1
Communications for the Qualitrol 505ITM Series Transformer Monitor ............................ 1
General .............................................................................................................................. 1
About Qualitrol ................................................................................................................... 2
DNP 3.0 Communications .............................................................................. 3
Introduction .............................................................................................................. 3
DNP V3.0 Device Profile ........................................................................................... 3
DNP V3.0 Implementation Table.............................................................................. 6
DNP V3.0 Point List ................................................................................................ 14
Binary Input Points ............................................................................................................. 14
Binary Output Status Points ............................................................................................ 15
Counters .......................................................................................................................... 16
Analog Inputs .................................................................................................................. 16
Analog Output Status Points ........................................................................................... 18
Octet Strings .................................................................................................................... 19
Time and Date .................................................................................................................20
Modbus Protocol .......................................................................................... 21
General .................................................................................................................... 21
Function Codes Supported ................................................................................... 21
Modbus Register Map ............................................................................................ 21
Binary Parameters ........................................................................................................... 21
Analog Parameters .......................................................................................................... 22
String Parameters ........................................................................................................... 26
ASCII Protocol .............................................................................................. 35
505ITM Protocol Manual
General .................................................................................................................... 35

ASCII Framing......................................................................................................... 35
Packet Structures ................................................................................................... 35
Error Checking Calculation ................................................................................... 36
ASCII Register Map ................................................................................................ 37
Q ASCII Demo Application........................................................................... 51
Hardware Instructions
OVERVIEW
Communications for the Qualitrol 505ITM Series
Transformer Monitor
General
The 505ITM comes equipped with digital communication capabilities through a four-wire RS485 port
on the rear of the device. (See the 505ITM configuration form when ordering for the protocols
option). The hardware wiring and configuring the software for the port is explained in the 505ITM
Hardware/Software Manual IST-104-1.
The 505ITM must be configured for the proper communication protocol using the Qualitrol ITM
Manager Software package supplied with the unit (or downloaded from the Qualitrol Web Site
www.qualitrolcorp.com). Using the software package the user can configure the 505ITM for the
appropriate protocol, baud rates, data bits, etc. for their system requirements (see the communication
window below). Once the correct parameters have been entered and loaded into the 505ITM the unit
must have power cycled before these new values will take affect.
1 www.qualitrolcorp.com
About Qualitrol
Qualitrol has been a leader in supplying pressure, liquid level and temperature controls since 1945.
As an ISO 9001 System-certified company, we are committed to providing quality and reliability, both
in our products and in our service.
DNP 3.0 Communications
Introduction
The purpose of this document is to describe specific configuration and interoperability information for
an implementation of the Distributed Network Protocol (DNP), Version 3.0 using the DNP 3.0 Slave
Source Code Library. This document provides information on how to communicate via the DNP 3.0
protocol.
This implementation of DNP 3.0 is fully compliant with DNP 3.0 Subset Definition Level 3, and
contains significant functionality beyond Subset Level 3.
DNP V3.0 Device Profile

The following table provides a “Device Profile Document” in the standard format defined in the DNP
3.0 Subset Definitions Document. While it is referred to in the DNP 3.0 Subset Definitions as a
“Document,” it is in fact a table, and only a component of a total interoperability guide. The table, in
combination with the Implementation Table provided in Section 0 and the Point List Tables provided
in Section 0 should provide a complete configuration/interoperability guide for communicating with a
device implanting the DNP 3.0 Slave Source Code Library.
DNP V3.0
DEVICE PROFILE DOCUMENT
Vendor Name: Qualitrol
Device Name: 505ITM
Highest DNP Level Supported: Device Function:
For Requests:
For Responses:
Level 3
Level 3
 Master
 Slave
DNP V3.0
Notable objects, functions, and/or qualifiers supported in addition to the Highest DNP Levels
Supported (the complete list is described in the attached table):
For static (non-change-event) object requests, request qualifier codes 07 and 08 (limited quantity), and 17 and 28 (index) are
supported. Static object requests sent with qualifiers 07, or 08, will be responded with qualifiers 00 or 01.
16-bit, 32-bit and Floating Point Analog Change Events with Time may be requested.
Analog Input Deadbands, Object 34, variations 1 through 3, are supported.
Floating Point Analog Output Status and Output Block Objects 40 and 41 are supported.
Sequential file transfer, Object 70, variations 2 through 8, are supported.
Octet String and String Event Objects 110 and 111 are supported.
Virtual Terminal Output and Event Objects 112 and 113 are supported.
Device Attribute Object 0 is supported.
Data Set Objects 85-88 are supported.
Output Event Objects 11, 13, 42 and 43 are supported.
Activate Configuration
Secure Authentication
Maximum Data Link Frame Size (octets): Maximum Application Fragment Size (octets):
Transmitted: 292 Transmitted: Configurable up to 2048

Received 292 Received 2048
Maximum Data Link Re-tries: Maximum Application Layer Re-tries:
 None  None
 Fixed  Configurable
 Configurable from 0 to 65535
Requires Data Link Layer Confirmation:
 Never
 Always
 Sometimes
 Configurable as: Never, Only for multi-frame messages, or Always
Requires Application Layer Confirmation:
 Never
 Always
 When reporting Event Data (Slave devices only)
 When sending multi-fragment responses (Slave devices only)
 Sometimes
 Configurable as: “Only when reporting event data”, or “When reporting event data or
multi-fragment messages.”
DNP V3.0
Timeouts while waiting for:
Data Link Confirm:  None  Fixed at ____  Variable  Configurable.

Complete Appl. Fragment:  None  Fixed at ____  Variable  Configurable
Application Confirm:  None  Fixed at ____  Variable  Configurable.
Complete Appl. Response:  None  Fixed at ____  Variable  Configurable
Others: Transmission Delay, configurable

Select/Operate Arm Timeout, configurable
Need Time Interval, configurable
Application File Timeout, configurable
Unsolicited Notification Delay, configurable
Unsolicited Response Retry Delay, configurable
Unsolicited Offline Interval, configurable
Binary Change Event Scan Period, configurable
Double Bit Change Event Scan Period, configurable
Analog Change Event Scan Period, configurable
Counter Change Event Scan Period, configurable
Frozen Counter Change Event Scan Period, configurable
String Change Event Scan Period, configurable
Virtual Terminal Event Scan Period, configurable
Sends/Executes Control Operations:
WRITE Binary Outputs  Never  Always  Sometimes  Configurable

SELECT/OPERATE  Never  Always  Sometimes  Configurable
DIRECT OPERATE  Never  Always  Sometimes  Configurable
DIRECT OPERATE – NO ACK  Never  Always  Sometimes  Configurable
Count > 1  Never  Always  Sometimes  Configurable

Pulse On  Never  Always  Sometimes  Configurable
Pulse Off  Never  Always  Sometimes  Configurable
Latch On  Never  Always  Sometimes  Configurable
Latch Off  Never  Always  Sometimes  Configurable
Queue  Never  Always  Sometimes  Configurable

Clear Queue  Never  Always  Sometimes  Configurable
Attach explanation if 'Sometimes' or 'Configurable' was checked for any operation.

Reports Binary Input Change Events when no Reports time-tagged Binary Input Change Events
specific variation requested: when no specific variation requested:
 Never  Never
 Only time-tagged  Binary Input Change With Time
 Only non-time-tagged  Binary Input Change With Relative Time
 Configurable to send one or the  Configurable
other
DNP V3.0
Sends Unsolicited Responses: Sends Static Data in Unsolicited Responses:
 Never  Never
 Configurable  When Device Restarts


Only certain objects
Sometimes (attach explanation)
 When Status Flags Change
 ENABLE/DISABLE UNSOLICITED No other options are permitted.
Function codes supported
Default Counter Object/Variation: Counters Roll Over at:
 No Counters Reported  No Counters Reported

 Configurable  Configurable (attach explanation)
 Default Object  16 Bits
Default Variation:  32 Bits
 Point-by-point list attached  Other Value: _____
 Point-by-point list attached
Sends Multi-Fragment Responses:
 Yes
 No
 Configurable
Sequential File Transfer Support:
Append File Mode  Yes No

Custom Status Code Strings Yes  No
Permissions Field  Yes No
File Events Assigned to Class  Yes No
File Events Send Immediately  Yes No
Multiple Blocks in a Fragment Yes  No
Max Number of Files Open 1
DNP V3.0 Implementation Table

The following table identifies which object variations, function codes, and qualifiers the DNP 3.0 Slave
Source Code Library supports in both request messages and in response messages. For static (non-
change-event) objects, requests sent with qualifiers 00, 01, 06, 07, or 08, will be responded with
qualifiers 00 or 01. Requests sent with qualifiers 17 or 28 will be responded with qualifiers 17 or 28.
For change-event objects, qualifiers 17 or 28 are always responded.
In the table below, text shaded as 00, 01 (start stop) indicates Subset Level 3 functionality (beyond
Subset Level 2).
In the table below, text shaded as 07, 08 (limited qty) indicates functionality beyond Subset Level 3.
REQUEST RESPONSE
OBJECT
(Library will parse) (Library will respond with)
Object Variation Function Qualifier Codes Function Qualifier Codes
Description
Number Number Codes (dec) (hex) Codes (dec) (hex)
0 1-253 Device Attribute Specific 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
06 (no range, or all) 17, 28 (index –
07, 08 (limited qty) see note 1)
17, 27, 28 (index)
2 (write) 00, 01 (start-stop)
0 254 Device Attribute - Non-Specific All 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
Attributes Request 06 (no range, or all) 17, 28 (index –
17, 27, 28 (index)
0 255 Device Attribute – List of Attribute 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
Variations 06 (no range, or all) 17, 28 (index –
17, 27, 28 (index)
1 0 Binary Input – Any Variation 1 (read) 00, 01 (start-stop)
22 (assign class) 06 (no range, or all)
07, 08 (limited qty)
17, 27, 28 (index)
1 1 Binary Input 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
(default – 06 (no range, or all) 17, 28 (index –
see note 1) see note 2)
17, 27, 28 (index)
1 2 Binary Input with Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
2 0 Binary Input Change – Any Variation 1 (read) 06 (no range, or all)
2 1 Binary Input Change without Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
07, 08 (limited qty) 130 (unsol. resp)
2 2 Binary Input Change with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
2 3 Binary Input Change with Relative Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
(default – 07, 08 (limited qty) 130 (unsol. resp)
see note 1)
3 0 Double Bit Input – Any Variation 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
3 1 Double Bit Input 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
3 2 Double Bit Input with Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
4 0 Double Bit Input Change – Any 1 (read) 06 (no range, or all)
Variation 07, 08 (limited qty)
4 1 Double Bit Input Change without Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
4 2 Double Bit Input Change with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
4 3 Double Bit Input Change with Relative 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
(default – Time 07, 08 (limited qty) 130 (unsol. resp)
see note 1)
10 0 Binary Output – Any Variation 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
REQUEST RESPONSE
OBJECT
Description
10 1 Binary Output 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
1 (write 00, 01 (start-stop)
10 2 Binary Output Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
11 0 Binary Output Change – Any Variation 1 (read) 06 (no range, or all)
11 1 Binary Output Change without Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
see note 1)
11 2 Binary Output Change with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
12 0 Control Relay Output Block 22 (assign class) 00, 01 (start-stop)
06 (no range, or all)
17, 27, 28 (index)
12 1 Control Relay Output Block 3 (select) 17, 28 (index) 129 (response) echo of request
4 (operate)
5 (direct op)
6 (dir. op, noack)
12 2 Pattern Control Block 3 (select) 7 (limited quantity) 129 (response) echo of request
4 (operate)
5 (direct op)
6 (dir. op, noack)
12 3 Pattern Mask 3 (select) 00, 01 (start- 129 (response) echo of request
4 (operate) stop)
5 (direct op)
6 (dir. op, noack)
13 0 Binary Output Command Event – Any 1 (read) 06 (no range, or all)
13 1 Binary Output Command Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
Time 07, 08 (limited qty) 130 (unsol. resp)
13 2 Binary Output Command Event with 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
20 0 Binary Counter – Any Variation 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
7 (freeze) 00, 01 (start-stop)

8 (freeze noack) 06 (no range, or all)
9 (freeze clear) 07, 08 (limited qty)
10 (frz. cl. noack)
20 1 32-Bit Binary Counter (with Flag) 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
20 2 16-Bit Binary Counter (with Flag) 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
20 5 32-Bit Binary Counter without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
20 6 16-Bit Binary Counter without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
REQUEST RESPONSE
OBJECT
Description
21 0 Frozen Counter – Any Variation 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
21 1 32-Bit Frozen Counter (with Flag) 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
21 2 16-Bit Frozen Counter (with Flag) 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
21 5 32-Bit Frozen Counter with Time Of 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-
Freeze 06 (no range, or all) stop)
07, 08 (limited qty) 17, 28 (index –
17, 27, 28 (index) see note 1)
21 6 16-Bit Frozen Counter with Time Of 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-
Freeze 06 (no range, or all) stop)
07, 08 (limited qty) 17, 28 (index –
17, 27, 28 (index) see note 1)
21 9 32-Bit Frozen Counter without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
21 10 16-Bit Frozen Counter without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
22 0 Counter Change Event – Any Variation 1 (read) 06 (no range, or all)
22 1 32-Bit Counter Change Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
see note 1)
22 2 16-Bit Counter Change Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
22 5 32-Bit Counter Change Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
22 6 16-Bit Counter Change Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
23 0 Frozen Counter Event (Variation 0 is 1 (read) 06 (no range, or all)
used to request default variation) 07, 08 (limited qty)
23 1 32-Bit Frozen Counter Event 1 (read) 06 (no range, or all) 129 (response) 17,28 (index)
see note 1)
23 2 16-Bit Frozen Counter Event 1 (read) 06 (no range, or all) 129 (response) 17,28 (index)
23 5 32-Bit Frozen Counter Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
23 6 16-Bit Frozen Counter Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
30 0 Analog Input - Any Variation 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
30 1 32-Bit Analog Input 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
30 2 16-Bit Analog Input 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
REQUEST RESPONSE
OBJECT
Description
30 3 32-Bit Analog Input without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
30 4 16-Bit Analog Input without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
30 5 short floating point 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
30 6 long floating point 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
32 0 Analog Change Event – Any Variation 1 (read) 06 (no range, or all)
32 1 32-Bit Analog Change Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
see note 1)
32 2 16-Bit Analog Change Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
32 3 32-Bit Analog Change Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
32 4 16-Bit Analog Change Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
32 5 short floating point Analog Change 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Event without Time 07, 08 (limited qty) 130 (unsol. resp)
32 6 long floating point Analog Change 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Event without Time 07, 08 (limited qty) 130 (unsol. resp)
32 7 short floating point Analog Change 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Event with Time 07, 08 (limited qty) 130 (unsol. resp)
32 8 long floating point Analog Change 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Event with Time 07, 08 (limited qty) 130 (unsol. resp)
34 0 Analog Input Deadband (Variation 0 is 1 (read) 00, 01 (start-stop)
used to request default variation) 06 (no range, or all)
17, 27, 28 (index)
34 1 16 bit Analog Input Deadband 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
2 00, 01 (start-stop)
(write) 07, 08 (limited qty)
17, 27, 28 (index)
34 2 32 bit Analog Input Deadband 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
17, 27, 28 (index)
34 3 Short Floating Point Analog Input 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
Deadband 06 (no range, or all) 17, 28 (index –
17, 27, 28 (index)
17, 27, 28 (index)
40 0 Analog Output Status 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
REQUEST RESPONSE
OBJECT
Description
40 1 32-Bit Analog Output Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
40 2 16-Bit Analog Output Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
see note 1 see note 2)
17, 27, 28 (index)
40 3 short floating point Analog Output 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
Status 06 (no range, or all) 17, 28 (index –
17, 27, 28 (index)
40 4 long floating point Analog Output Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
41 0 Analog Output Block 22 (assign class) 00, 01 (start-stop)
17, 27, 28 (index)
41 1 32-Bit Analog Output Block 3 (select) 17, 28 (index) 129 (response) echo of request
4 (operate) 27 (index)
5 (direct op)
6 (dir. op, noack)
41 2 16-Bit Analog Output Block 3 (select) 17, 28 (index) 129 (response) echo of request
4 (operate) 27 (index)
5 (direct op)
6 (dir. op, noack)
41 3 short floating point Analog Output Block 3 (select) 17, 27, 28 (index) 129 (response) echo of request
4 (operate)
5 (direct op)
6 (dir. op, noack)
41 4 long floating point Analog Output Block 3 (select) 17, 27, 28 (index) 129 (response) echo of request
4 (operate)
5 (direct op)
6 (dir. op, noack)
42 0 Analog Output Event – Any Variation 1 (read) 06 (no range, or all)
42 1 32-Bit Analog Output Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
42 2 16-Bit Analog Output Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
see note 1
42 3 32-Bit Analog Output Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
42 4 16-Bit Analog Output Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
42 5 short floating point Analog Output Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
without Time 07, 08 (limited qty) 130 (unsol. resp)
42 6 long floating point Analog Output Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
42 7 short floating point Analog Output Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
with Time 07, 08 (limited qty) 130 (unsol. resp)
42 8 long floating point Analog Output Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
43 0 Analog Output Command Event – Any 1 (read) 06 (no range, or all)
43 1 32-Bit Analog Output Command Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
(default – without Time 07, 08 (limited qty) 130 (unsol. resp)
see note 1
REQUEST RESPONSE
OBJECT
Description
43 5 short floating point Analog Output 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Command Event without Time 07, 08 (limited qty) 130 (unsol. resp)
43 6 long floating point Analog Output 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Command Event without Time 07, 08 (limited qty) 130 (unsol. resp)
43 7 short floating point Analog Output 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Command Event with Time 07, 08 (limited qty) 130 (unsol. resp)
43 8 long floating point Analog Output 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Command Event with Time 07, 08 (limited qty) 130 (unsol. resp)
50 0 Time and Date
50 1 Time and Date 1 (read) 07, (limited qty = 1) 129 (response) 07 (limited qty = 1)
(default –
see note 1)
2 (write) 07 (limited qty = 1)
50 3 Time and Date Last Recorded Time 2 07 (limited qty)

(write)
51 1 Time and Date CTO 129 (response) 07 (limited qty)

130 (unsol. resp) (qty = 1)
51 2 Unsynchronized Time and Date CTO 129 (response) 07 (limited qty)
130 (unsol. resp) (qty = 1)
52 1 Time Delay Coarse 129 (response) 07 (limited qty)

(qty = 1)
52 2 Time Delay Fine 129 (response) 07 (limited qty)
(qty = 1)
60 0 Not Defined
60 1 Class 0 Data 1 (read) 06 (no range, or all)
20 (enbl. unsol.) 06 (no range, or all)
21 (dab. unsol.)
22 (assign class)

21 (dab. unsol.)
22 (assign class)
21 (dab. unsol.)
22 (assign class)
70 0 File Event – Any Variation 1 06 (no range, or all)
(read) 07, 08 (limited qty)
70 2 File Authentication 29 (authenticate) 5b (free-format) 129 (response) 5B (free-format)
70 3 File Command 25 (open) 5b (free-format)

27 (delete)
70 4 File Command Status 26 (close) 5b (free-format) 129 (response) 5B (free-format)
30 (abort) 130 (unsol. resp)
70 5 File Transfer 1 (read) 5b (free-format) 129 (response) 5B (free-format)
2 (write) 130 (unsol. resp)
70 6 File Transfer Status 129 (response) 5B (free-format)

130 (unsol. resp)
70 7 File Descriptor 28 (get file 5b (free-format) 129 (response) 5B (free-format)
info) 130 (unsol. resp)
REQUEST RESPONSE
OBJECT
Description
70 8 File Specification String 31(activate config) 5b (free-format)
80 1 Internal Indications 1 (read) 00, 01 (start-stop) 129 (response) 00, 01(start-stop)
2 (write) 00 (start-stop)
(see note 3) index=4 or 7
85 0 Data Set Prototype 1 00, 01 (start-stop)
(read) 06 (no range, or all)
17, 27, 28 (index
85 1 Data Set Prototype 1 00, 01 (start-stop) 129 (response) 5B (free-format)
17, 27, 28 (index
2 (write) 5b (free-format)
86 0 Data Set Descriptor 22 (assign class) 00, 01 (start-stop)

17, 27, 28 (index
86 1 Data Set Descriptor - Contents 1 00, 01 (start-stop) 129 (response) 5B (free-format)
17, 27, 28 (index
86 2 Data Set Descriptor – Characteristics 1 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
(read) 06 (no range, or all) 17, 28 (index –
17, 27, 28 (index
86 3 Data Set Descriptor – Point Index 1 00, 01 (start-stop) 129 (response) 5B (free-format)
Attributes (read) 06 (no range, or all)
17, 27, 28 (index
87 0 Data Set – Present Value 1 00, 01 (start-stop)

17, 27, 28 (index
87 1 Data Set – Present Value 1 00, 01 (start-stop) 129 (response) 5B (free-format)
17, 27, 28 (index
88 0 Data Set Event 1 06 (no range, or all)

(read) 07, 08 (limited qty)
88 1 Data Set Event - Snapshot 1 06 (no range, or all) 129 (response) 5B (free-format)
(read) 07, 08 (limited qty) 130 (unsol. resp)
91 1 Activate Status 129 (response) 07 (limited qty)
110 string Octet String Object 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
length 22 (assign class) 06 (no range, or all)
17, 27, 28 (index
2 (write) 00, 01 (start-stop)
17, 27, 28 (index)
111 string Octet String Event Object 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
length 07, 08 (limited qty) 130 (unsol. resp)
112 string Virtual Terminal Output Block 2 (write) 00, 01 (start-stop)
length 07, 08 (limited qty)
17, 27, 28 (index)
REQUEST RESPONSE
OBJECT
Description
113 string Virtual Terminal Event Data 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
length 07, 08 (limited qty) 130 (unsol. resp)
120 1 Authentication Challenge 32(auth challenge) 5b (free-format) 131 (challenge) 5b (free-format)
132(unsol. challenge
120 2 Authentication Reply 33 (auth reply) 5b (free-format) 129 (response) 5b (free-format)
120 3 Authentication Aggressive Mode 5b (free-format) 131 (challenge) 5b (free-format)
Request 132(unsol. challenge
120 4 Authentication Session Key Status 1 (read) 5b (free-format)
Request
120 5 Authentication Session Key Status 129 (response) 5b (free-format)
120 6 Authentication Session Key Change 129 (response) 5b (free-format)
120 7 Authentication Error 34(auth challenge) 5b (free-format) 129 (response) 5b (free-format)
No Object (function code only) 13 (cold restart)
No Object (function code only) 14 (warm restart)
No Object (function code only) 23 (delay meas.)
No Object (function code only) 24
(record current time)
Note 1: A Default variation refers to the variation responded when variation 0 is requested and/or in
class 0, 1, 2, or 3 scans. Default variations are configurable; however, default settings for the
configuration parameters are indicated in the table above.
Note 2: For static (non-change-event) objects, qualifiers 17 or 28 are only responded when a request
is sent with qualifiers 17 or 28, respectively. Otherwise, static object requests sent with qualifiers 00,
01, 06, 07, or 08, will be responded with qualifiers 00 or 01. (For change-event objects, qualifiers 17
or 28 are always responded.)
Note 3: Writes of Internal Indications are only supported for index 4 or 7 (Need Time IIN1-4 or
Restart IIN1-7)
DNP V3.0 Point List

The tables below identify all the default data points provided by the implementation of the DNP 3.0
Slave Source Code Library.
Binary Input Points

The default binary input event buffer size is set to allow 100 events.
BINARY INPUT; OBJ 1; VAR 0, 1, 2

POINT POINT VARIABLE DESCRIPTION
0 RELAY 1 ENABLED 1 = ENABLED; 0 = DISABLED
8 RELAY 1 ACTUATED 1 = ACTUATED; 0 = NOT ACTUATED
16 SYSTEM STATUS RELAY 1 = ACTUATED; 0 = NOT ACTUATED
17 HEATER STATUS 1 = ENABLED; 0 = DISABLED
18 RELAY 1 LATCHING FEATURE 1 = ENABLED; 0 = DISABLED
BINARY INPUT; OBJ 1; VAR 0, 1, 2
26 RELAY 1 AUTO/MANUAL 1 = MANUAL OPERATION; 0 = AUTOMATIC
42 INPUT MODULE 1 READ ERROR 1 = ERROR DURING READ; 0 = VALID READ
50 INPUT MODULE 1 SCALING FEATURE ENABLED 1 = ACTIVE; 0 = NOT ACTIVE
Binary Output Status Points

The following table lists the Binary Output Status Points (Object 10).
While Binary Output Status Points are included here for completeness, they are not often polled by
DNP 3.0 Masters. It is recommended that Binary Output Status points represent the most recent
DNP “commanded” value for the corresponding Control Relay Output Block point. Because many, if
not most, Control Relay Output Block points are controlled through pulse mechanisms, the value of
the output status may in fact be meaningless. Binary Output Status points are not recommended to
be included in class 0 polls.
As an alternative, it is recommended that “actual” status values of Control Relay Output Block points
be looped around and mapped as Binary Inputs. (The “actual” status value, as opposed to the
“commanded” status value, is the value of the actuated control. For example, a DNP control
command may be blocked through hardware or software mechanisms; in this case, the actual status
value would indicate the control failed because of the blocking. Looping Control Relay Output Block
actual status values as Binary Inputs has several advantages:
 it allows actual statuses to be included in class 0 polls,
 it allows change event reporting of the actual statuses, which is a more efficient and time-
accurate method of communicating control values,
 and it allows reporting of time-based information associated with controls, including any delays
before controls are actuated, and any durations if the controls are pulsed.
The default select/control buffer size is large enough to hold 10 of the largest select requests
possible.
BINARY OUTPUT; OBJ 10; VAR 0, 1, 2

8 INPUT MODULE MAX/MIN RESET PULSE/RESET (1)
BINARY OUTPUT; OBJ 10; VAR 0, 1, 2
19 INPUT MODULE 1 ENABLED 1 = ENABLED; 0 = DISABLED
Counters
The following table lists both Binary Counters (Object 20) and Frozen Counters (Object 21). When a
freeze function is performed on a Binary Counter point, the frozen value is available in the
corresponding Frozen Counter point. The default Binary Counter and Frozen Counter event buffer
sizes are set to 30.
BINARY COUNTER; OBJ 20; VAR 0, 1, 2, 3, 4, 5, 6

TRANSLIFE 1; TRANSFORMER LIFE TOTAL LIFE CONSUMPTION CALCULATED; TRANSLIFE
0 CONSUMPTION 1
3 TOTAL TRANSFORMER OPERATING HOURS CUMULATIVE TRANSFORMER OPERATING HOURS
Analog Inputs
The following table lists Analog Inputs (Object 30). It is important to note that 16-bit and 32-bit
variations of Analog Inputs, Analog Output Control Blocks, and Analog Output Statuses are
transmitted through DNP as signed numbers.
The “Default Deadband,” and the “Default Change Event Assigned Class” columns are used to
represent the absolute amount by which the point must change before an analog change event will be
generated, and once generated in which class poll (1, 2, 3, or none) will the change event be
reported.
The default analog input event buffer size is set 30.
ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

0 RELAY 1, SETPOINT 1 VALUE SETPOINT IN THE 1ST COLUMN OF THE MATRIX
8 RELAY 1, HYSTERESIS 1 VALUE HYSTERESIS IN THE 1ST COLUMN OF THE MATRIX
ALL MODULES BUT CT, WINDING TEMPERATURE IF THE MODULE IS A CT, WINDING TEMPERATURE
16 INPUT MODULE 1 PRESENT VALUE OR INPUT MODULE 1 PRESENT WINDING TEMP
17 INPUT MODULE 1 MINIMUM VALUE OR INPUT MODULE 1 MINIMUM WINDING TEMP
18 INPUT MODULE 1 MAXIMUM VALUE OR INPUT MODULE 1 MAXIMUM WINDING TEMP
19 0 OR INPUT MODULE 1 PRESENT CURRENT
20 0 OR INPUT MODULE 1 MAXIMUM CURRENT
69 RELAY 1, SETPOINT 2 VALUE SETPOINT IN THE 2ND COLUMN OF THE MATRIX
77 RELAY 1, HYSTERESIS 2 VALUE HYSTERESIS IN THE 2ND COLUMN OF THE MATRIX
85 RELAY 1, SETPOINT 3 VALUE SETPOINT IN THE 3RD COLUMN OF THE MATRIX
93 RELAY 1, HYSTERESIS 3 VALUE HYSTERESIS IN THE 3RD COLUMN OF THE MATRIX
101 RELAY 1, SETPOINT 4 VALUE SETPOINT IN THE 4TH COLUMN OF THE MATRIX
109 RELAY 1, HYSTERESIS 4 VALUE HYSTERESIS IN THE 4TH COLUMN OF THE MATRIX
117 TRANSLIFE 1 CONSUMED LIFE FOR LAST HOUR CALCULATED CONSUMED LIFE FOR LAST HOUR
118 TRANSLIFE 1 CONSUMED LIFE FOR LAST DAY CALCULATED CONSUMED LIFE FOR LAST DAY
119 TRANSLIFE 1 REMAINING TRANSFORMER LIFE (20 YEARS - CONSUMED LIFE)
120 TL1 CRITICAL WINDING TEMP SETPOINT 1 1ST CRITICAL SPT TO CALCULATE TIME TO REACH
121 TL1 CRITICAL WINDING TEMP SETPOINT 2 2ND CRITICAL SPT TO CALCULATE TIME TO REACH
122 TL1 CRITICAL WINDING TEMP SETPOINT 3 3RD CRITICAL SPT TO CALCULATE TIME TO REACH
CALCULATED TIME TO 1ST SPT FOR GIVEN
123 TL1 TIME TO CRITICAL SETPOINT 1 CONDITIONS
CALCULATED TIME TO 2ND SPT FOR GIVEN
CALCULATED TIME TO 3RD SPT FOR GIVEN
TEMP WHERE CONSUMED LIFE EQUALS OPERATING
306 LIFE CONSUMPTION UNITY TEMPERATURE LIFE
TRANSLIFE 1; TEMPERATURE PROFILE, 1ST
314 RANGE TOTAL WINDING TEMP TIME IN LOWEST TEMP RANGE
TRANSLIFE 1; TEMPERATURE PROFILE, 2ND
315 RANGE TOTAL WINDING TEMP TIME IN 2ND TEMP RANGE
TRANSLIFE 1; TEMPERATURE PROFILE, 3RD
316 RANGE TOTAL WINDING TEMP TIME IN 3RD TEMP RANGE
TRANSLIFE 1; TEMPERATURE PROFILE, 4TH
317 RANGE TOTAL WINDING TEMP TIME IN 4TH TEMP RANGE
325 RANGE TOTAL WINDING TEMP TIME IN HIGHEST TEMP RANGE
433 FIRMWARE REVISION FOR THIS 509ITM UNIT
434 TRANSFORMER LIFE SPAN EXPECTED TOTAL LIFE SPAN OF TRANSFORMER
475 RELAY 1, ACTUATION COUNTS ACTUATION COUNTER FOR RELAY 1

483 RELAY 1, RATE OF CHANGE TIME PERIOD RATE OF CHANGE TIME PERIOD FOR RELAY 1
Analog Output Status Points

The following table lists the Analog Output Status Points (Object 40).
While Analog Output Status Points are included here for completeness, they are not often polled by
DNP 3.0 Masters. It is recommended that Analog Output Status points represent the most recent
DNP “commanded” value for the corresponding Analog Output Control Block point. Analog Output
Status points are not recommended to be included in class 0 polls.
As an alternative, it is recommended that “actual” status values of Analog Output Control Block points
be looped around and mapped as Analog Inputs. (The “actual” status value, as opposed to the
“commanded’ status value, is the value of the actuated control.) For example, a DNP control
command may be blocked through hardware or software mechanisms; in this case, the actual status
value would indicate the control failed because of the blocking. Looping Analog Relay Output Block
actual status values as Analog Inputs has several advantages:
 it allows actual statuses to be included in class 0 polls,
 it allows change event reporting of the actual statuses, which is a more efficient method of
communicating control values,
 and, if analog change events with time variations are supported by the DNP master, it allows
reporting of time-based information associated with controls, including delays before the controls
are actuated.
The default select/control buffer size is large enough to hold 10 of the largest select requests
possible.
ANALOG OUTPUT; OBJ 40; VAR 0, 1, 2, 3, 4

64 TL1 CRITICAL WINDING TEMP SETPOINT 1 1ST CRITICAL SPT TO CALCULATE TIME TO REACH
65 TL1 CRITICAL WINDING TEMP SETPOINT 2 2ND CRITICAL SPT TO CALCULATE TIME TO REACH
66 TL1 CRITICAL WINDING TEMP SETPOINT 3 3RD CRITICAL SPT TO CALCULATE TIME TO REACH
Octet Strings
The default string event buffer size is set to allow 10 events.
OCTET STRING; OBJ 110; VAR STRING LENGTH
0 SERIAL NUMBER UP TO 12 CHARACTERS
1 MANUFACTURE DATE OF THE UNIT UP TO 8 CHARACTERS
2 SUBSTATION NAME UP TO 16 CHARACTERS
3 EQUIPMENT NAME UP TO 16 CHARACTERS
Time and Date

TIME AND DATE; OBJ 50; VAR 0, 1
0 TIME AND DATE
Modbus Protocol
General
Qualitrol supports the Modbus RTU transmission mode in which the message is
placed by the transmitting device into a frame that has a known beginning and
ending point. This allows the 505ITM unit to begin at the start of the message, read
the address portion and determine which device is addressed and to know when the
message is completed. Partial messages can be detected and errors can be set as
a result.
When addressing the 505ITM Modbus register map the registers are one for one
(e.g. to read register 10 request address register 10).
To assist with the development of the Modbus communication for the user, there is a
web site, http://www.win-tech.com/html/demos.htm that offers evaluation software for
most applications.
Function Codes Supported

03 Read Holding Registers
06 Preset Single Register
Modbus Register Map

Binary Parameters
REG # VARIABLE R/W DESCRIPTION
10 RELAY 1 ENABLED READ 1 = ENABLED; 0 = DISABLED
18 RELAY 1 ACTUATED READ 1 = ACTUATED; 0 = NOT ACTUATED
26 SYSTEM STATUS RELAY READ 1 = ACTUATED; 0 = NOT ACTUATED
27 HEATER STATUS READ 1 = ENABLED; 0 = DISABLED
28 RELAY 1 LATCHING FEATURE READ 1 = ENABLED; 0 = DISABLED
Binary Parameters
50 RELAY 1 ENABLED RD/WR 1 = ENABLED; 0 = DISABLED
58 INPUT MODULE MAX/MIN RESET RD/WR PULSE/RESET (1)
61 RELAY 1 AUTO/MANUAL RD/WR 1 = MANUAL OPERATION; 0 = AUTOMATIC
69 INPUT MODULE 1 ENABLED/DISABLED RD/WR 1 = ENABLED; 0 = DISABLED
77 INPUT MODULE 1 READ ERROR READ 1 = READ ERROR; 0 = VALID READ
85 INPUT MODULE 1 SCALING ENABLED READ 1 = SCALING ENABLED; 0 = DISABLED
Analog Parameters
Values in registers 100 thru 770 have different formatting depending on the accuracy required.
Those designated by (N) have no multiplier whereas those with 10X or 100X have been multiplied by
10 or 100 allowing for decimal place accuracy in an integer format (e.g. 12.34 would be read as 1234
for 100X).
100 RELAY 1, SETPOINT 1 VALUE RD/WR SETPOINT IN THE 1ST COLUMN OF THE MATRIX (10X)
HYSTERESIS IN THE 1ST COLUMN OF THE MATRIX
108 RELAY 1, HYSTERESIS 1 VALUE RD/WR (10X)
116 INPUT MODULE 1 PRESENT VALUE READ OR INPUT MODULE 1 PRESENT WINDING TEMP (10X)
117 INPUT MODULE 1 MINIMUM VALUE READ OR INPUT MODULE 1 MINIMUM WINDING TEMP (10X)
118 INPUT MODULE 1 MAXIMUM VALUE READ OR INPUT MODULE 1 MAXIMUM WINDING TEMP (10X)
119 0 READ OR INPUT MODULE 1 PRESENT CURRENT (10X)
120 0 READ OR INPUT MODULE 1 MAXIMUM CURRENT (10X)
CALCULATED CONSUMED LIFE FOR LAST HOUR
169 TRANSLIFE 1 CONSUMED LIFE FOR LAST HOUR READ (100X)
170 TRANSLIFE 1 CONSUMED LIFE FOR LAST DAY READ CALCULATED CONSUMED LIFE FOR LAST DAY (100X)
171 TRANSLIFE 1 REMAINING TRANSFORMER LIFE READ (20 YEARS - CONSUMED LIFE) (100X)
1ST CRITICAL SPT TO CALCULATE TIME TO REACH
172 TL1 CRITICAL WINDING TEMP SETPOINT 1 RD/WR (10X)
2ND CRITICAL SPT TO CALCULATE TIME TO REACH
3RD CRITICAL SPT TO CALCULATE TIME TO REACH
175 TL1 TIME TO CRITICAL SETPOINT 1 READ CONDITIONS (100X)
196 FIRMWARE REVISION FOR THIS 509ITM UNIT READ (100X)
240 RELAY 1 SETPOINT, 2nd COLUMN OF MATRIX RD/WR SETPOINT IN THE 2ND COLUMN OF THE MATRIX (10X)
HYSTERESIS IN THE 2ND COLUMN OF THE MATRIX
248 RELAY 1 HYSTERESIS, 2nd COLUMN OF MATRIX RD/WR (10X)
256 RELAY 1 SETPOINT, 3rd COLUMN OF MATRIX RD/WR SETPOINT IN THE 3RD COLUMN OF THE MATRIX (10X)
HYSTERESIS IN THE 3RD COLUMN OF THE MATRIX
264 RELAY 1 HYSTERESIS, 3rd COLUMN OF MATRIX RD/WR (10X)
265 RELAY 2 HYSTERESIS, 3rd COLUMN OF MATRIX RD/WR HYSTERESIS IN THE 3RD COLUMN OF THE MATRIX
(10X)
272 RELAY 1 SETPOINT, 4th COLUMN OF MATRIX RD/WR SETPOINT IN THE 4TH COLUMN OF THE MATRIX (10X)
HYSTERESIS IN THE 4TH COLUMN OF THE MATRIX
280 RELAY 1 HYSTERESIS, 4th COLUMN OF MATRIX RD/WR (10X)

450 LIFE CONSUMPTION UNITY TEMPERATURE READ LIFE (N)
454 INSTALLED DIGITAL SENSORS READ BIT 16 = FIBER MOD 1 INSTALLED; BIT 15 = MOD 2 (N)
455 PRESENT YEAR READ TODAY'S YEAR IN THE 509ITM UNIT (N)
456 PRESENT MONTH READ TODAY'S MONTH IN THE 509ITM UNIT (N)
457 PRESENT DATE READ TODAY'S DAY IN THE 509ITM UNIT (1 - 31) (N)
458 PRESENT HOUR READ PRESENT HOUR (0 - 23) (N)
459 PRESENT MINUTE READ PRESENT MINUTE (0 - 59) (N)
460 PRESENT SECOND READ PRESENT SECOND (0 - 59) (N)
MODULE NUMBER IF THERE IS AN AMBIENT SENSOR
462 AMBIENT TEMPERATURE MODULE NUMBER READ (N)
463 TRANSFORMER LIFE SPAN READ ENTERED TRANSFORMER LIFE SPAN IN YEARS
MINUTES FAN EXERCISER WILL RUN WHEN ACTIVE

465 COOLING EXERCISER RUN TIME READ (N)
DAYS BETWEEN EXERCISER RUN TIME BEING ACTIVE
466 COOLING EXERCISER CYCLE TIME READ (N)
HOUR TO BEGIN FAN EXERCISER IN MILITARY TIME
467 COOLING EXERCISER START TIME READ (N)
468 STARTING MONTH FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 12) (N)
469 STARTING DAY FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 31) (N)
470 ENDING MONTH FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 12) (N)
471 ENDING DAY FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 31) (N)
472 AMBIENT TEMPERATURE FORECAST SETPOINT READ RELAY FEATURE (N)
# OF HOURS TO EXCEED SETPOINT FOR ACTIVE
473 AMBIENT TEMPERATURE THRESHOLD HOURS READ FEATURE (N)
ROLLING PERIOD IN HOURS TO MEASURE
474 AMBIENT TEMPERATURE MEASUREMENT PERIOD READ THRESHOLD TEMP (N)
MODULE NUMBER MEASURING AMBIENT MODULE NUMBER IF THERE IS AN AMBIENT SENSOR
475 TEMPERATURE READ (N)
492 RELAY 1, ACTUATION COUNTS READ ACTUATION COUNTER FOR RELAY 1

500 RELAY 1, RATE OF CHANGE TIME PERIOD READ RATE OF CHANGE TIME PERIOD FOR RELAY 1
560 CURRENT LOOP 1 CONTROL SIGNAL READ VALUE OF SIGNAL CONTROLLING LOOP 1 (10X)
MINIMUM SCALING VALUE FOR CURRENT LOOP 1
564 CURRENT LOOP 1 MINIMUM SCALING RANGE READ (10X)
MINIMUM SCALING VALUE FOR CURRENT LOOP 2
565 CURRENT LOOP 2 MINIMUM SCALING RANGE READ (10X)
MAXIMUM SCALING VALUE FOR CURRENT LOOP 1
568 CURRENT LOOP 1 MAXIMUM SCALING RANGE READ (10X)
MAXIMUM SCALING VALUE FOR CURRENT LOOP 2
569 CURRENT LOOP 2 MAXIMUM SCALING RANGE READ (10X)
AMBIENT LOOKBACK FEATURE SETPOINT FOR RELAY

600 RELAY 1 AMBIENT SETPOINT VALUE RD/WR 1 (10X)
608 RELAY 1 SEASONAL SETPOINT VALUE RD/WR SEASONAL SETPOINT VALUE (10X)
632 RELAY 1 ACTUATION DELAY - HOURS VALUE RD/WR ACTUATION DELAY - HOURS (N)
640 RELAY 1 ACTUATION DELAY - MINUTES VALUE RD/WR ACTUATION DELAY - MINUTES (N)
648 RELAY 1 ACTUATION DELAY - SECONDS VALUE RD/WR ACTUATION DELAY - SECONDS (N)
691 TRANSLIFE 1 PRESENT CONSUMED LIFE RATE READ INSTANTANEOUS LIFE RATE (100X)
Analog Parameters
For Registers 702 thru 770 the parameters are 32 bits long with the even registers holding the low
word and the high registers holding the high word (e.g. 702 low word; 703 high word).

TRANSLIFE 1; TRANSFORMER LIFE TOTAL LIFE CONSUMPTION CALCULATED; TRANSLIFE 1
702 CONSUMPTION READ (N)
708 TOTAL TRANSFORMER OPERATING HOURS READ CUMULATIVE TRANSFORMER OPERATING HOURS (N)
LIFE 'A' VALUE FOR CALCULATING CONSUMED LIFE
742 TRANSLIFE VARIABLE 'A' VALUE READ (10X)
LIFE 'B' VALUE FOR CALCULATING CONSUMED LIFE
744 TRANSLIFE VARIABLE 'B' VALUE READ (10X)
TRANSLIFE 1; TEMPERATURE PROFILE, 1ST TOTAL WINDING TEMP TIME IN LOWEST TEMP RANGE
748 RANGE READ (N)
750 RANGE READ TOTAL WINDING TEMP TIME IN 2ND TEMP RANGE (N)
752 RANGE READ TOTAL WINDING TEMP TIME IN 3RD TEMP RANGE (N)
754 RANGE READ TOTAL WINDING TEMP TIME IN 4TH TEMP RANGE (N)
TRANSLIFE 1; TEMPERATURE PROFILE, 12TH TOTAL WINDING TEMP TIME IN HIGHEST TEMP RANGE
770 RANGE READ (N)
String Parameters
850 SERIAL NUMBER; 12 ASCII CHARACTERS READ SERIAL NUMBER[1] / SERIAL NUMBER[0]
851 SERIAL NUMBER CONTINUED READ SERIAL NUMBER[3] / SERIAL NUMBER [2]
856 MANUFACTURED DATE; 8 ASCII CHARACTERS READ MANUFACTURED DATE[1] / MANUFACTURED DATE [0]
857 MANUFACTURED DATE CONTINUED READ MANUFACTURED DATE[3] / MANUFACTURED DATE [2]
860 SUBSTATION NAME; 16 ASCII CHARACTERS READ SUBSTATION NAME[1] / SUBSTATION NAME[0]
861 SUBSTATION NAME CONTINUED READ SUBSTATION NAME[3] / SUBSTATION NAME[2]
868 EQUIPMENT NAME; 16 ASCII CHARACTERS READ EQUIPMENT NAME[1] / EQUIPMENT NAME[0]
869 EQUIPMENT NAME CONTINUED READ EQUIPMENT NAME[3] / EQUIPMENT NAME[2]
876 MODEL NUMBER; 8 ASCII CHARACTERS READ MODEL NUMBER[1] / MODEL NUMBER[0]
877 MODEL NUMBER CONTINUED READ MODEL NUMBER[3] / MODEL NUMBER[2]
Registers 900 thru 903 have the hex codes of the hardware types for the input modules. The types
are explained in the description side of the registers
900 INPUT MODULE 1 HARDWARE TYPE READ 00 = NONE; 01 = 4-20mA; 02 = 0-1mA; 03 = 0-10VDC;
901 INPUT MODULE 2 HARDWARE TYPE READ 04 = 0-100mVDC; 05 = CT, CURRENT; 06 = CT, TEMP;
902 INPUT MODULE 3 HARDWARE TYPE READ 07 = POTENTIOMETER; 08 = 100 OHM RTD; 09 = 10 OHM
903 INPUT MODULE 4 HARDWARE TYPE READ RTD; 0A = DRY SWITCH DETECTION; 0B = POWERED
SWITCH DETECTION; 0C = 100 OHM RTD WINDING
TEMP; 0D = 10 OHM RTD WINDING TEMP; 0E = LTC
RESISTOR BRIDGE; 0F = 0-140VAC; 10 = 0-320VAC;
11 = LTC 0-1mA; 12 = LTC 4-20mA; 13 = FIBER OPTIC
TEMP
Registers 908 thru 967 are packed numbers. For example: reading register 908 gives a decimal
number of 3122. Converting this to hex gives 0C32. Split the bytes in half and it would read 12 hours
and 32 minutes.

908 INPUT MODULE 1 MAXIMUM VALUE TIME & DATE READ HOURS BYTE / MINUTES BYTE
909 INPUT MODULE 1 MAXIMUM VALUE TIME & DATE READ SECONDS BYTE / MONTHS BYTE
910 INPUT MODULE 1 MAXIMUM VALUE TIME & DATE READ DAYS BYTE / YEARS BYTE
932 INPUT MODULE 1 MINIMUM VALUE TIME & DATE READ HOURS BYTE / MINUTES BYTE
933 INPUT MODULE 1 MINIMUM VALUE TIME & DATE READ SECONDS BYTE / MONTHS BYTE
934 INPUT MODULE 1 MINIMUM VALUE TIME & DATE READ DAYS BYTE / YEARS BYTE
INPUT MODULE 1 MAXIMUM CURRENT TIME &
956 DATE READ HOURS BYTE / MINUTES BYTE
957 DATE READ SECONDS BYTE / MONTHS BYTE
958 DATE READ DAYS BYTE / YEARS BYTE
String Parameters
1200 INPUT MODULE 1 NAME; 7 ASCII CHARACTERS READ INPUT MODULE 1 NAME[1] / INPUT MODULE 1 NAME[0]
1201 INPUT MODULE 1 NAME; CONTINUED READ INPUT MODULE 1 NAME[3] / INPUT MODULE 1 NAME[2]
1203 INPUT MODULE 1 NAME; CONTINUED READ INPUT MODULE 1 ZERO / INPUT MODULE 1 NAME[6]
Analog Parameters
Registers 1500 thru 1503; see appropriate scaling (e.g. N, 10X, 100X, 1000X)
IF INPUT MODULE A CT TYPE; HOLDS SENSOR VALUE
1500 INPUT MODULE 1; CT CLAMP-ON RATING VALUE READ (N)
String Parameters
Registers 1508 thru 1515.

INPUT MODULE 1 MEASUREMENT UNITS; 3 ASCII
1508 CHAR READ INPUT MODULE 1; UNITS[1] / UNITS[0]
INPUT MODULE 1 MEASUREMENT UNITS;
1509 CONTINUED READ INPUT MODULE 1; ZERO / UNITS[2]
Analog Parameters
INPUT MODULE 1 OIL TEMPERATURE ADDER IF CT INPUT MODULE; POINTER TO OIL TEMP
1524 POINTER READ MEASUREMENT (N)
1532 INPUT MODULE 1; COOLING STAGE 2 RELAY # READ IF CT ADVANCED CALCULATION; RELAY NUMBER (N)
1600 INPUT MODULE 1; CT RATIO PRIMARY # READ IF CT MODULE TYPE; HOLDS CT RATIO # (1000X)
1616 INPUT MODULE 1; CT RATIO SECONDARY # READ IF CT MODULE TYPE; HOLDS CT RATIO # (1000X)
1632 INPUT MODULE 1; SCALING OFFSET VALUE READ SCALING OFFSET CALIBRATION VALUE (1000X)
1648 INPUT MODULE 1; SCALING GAIN VALUE READ SCALING GAIN CALIBRATION VALUE (1000X)
For registers 1664 thru 1703 the parameters are 32 bits long with the even registers holding the low
word and the odd registers holding the high word (e.g. 1664 low word; 1665 high word). These
registers are for those applications where the input module values could be greater than 3200
(32,000 with multiplier).

SIMPLE CALCULATION WINDING RISE TEMPERATURE
2100 INPUT MODULE 1; WINDING RISE TEMPERATURE READ (100X)
2108 INPUT MODULE 1; CURRENT FACTOR READ SIMPLE CALCULATION CURRENT FACTOR (100X)
2116 INPUT MODULE 1; WINDING TIME CONSTANT READ SIMPLE CALCULATION WINDING TIME CONSTANT (N)
INPUT MODULE 1; OIL RISE TEMPERATURE;
2124 STAGE 1 READ COOLING STAGE 1 OIL RISE TEMPERATURE (100X)
INPUT MODULE 1; OIL RISE TIME CONSTANT;
2156 STAGE 1 READ COOLING STAGE 1 OIL RISE TIME CONSTANT (N)
COOLING STAGE 1 ADVANCED CURRENT FACTOR
2188 INPUT MODULE 1; CURRENT FACTOR; STAGE 1 READ (100X)
COOLING STAGE 1; ADVANCED WINDING RISE TEMP
2220 INPUT MODULE 1; WINDING RISE TEMP; STAGE 1 READ (100X)
2232 INPUT MODULE 4; WINDING RISE TEMP; STAGE 1 READ COOLING STAGE 1; ADVANCED WINDING RISE TEMP
(100X)
INPUT MODULE 1; WINDING CALC EXPONENT;
2252 STAGE 1 READ COOLING STAGE 1; ADVANCED CALC EXPONENT (10X)
INPUT MODULE 1; WINDING TIME CONSTANT;
2284 STAGE 1 READ COOLING STAGE 1; WINDING TIME CONSTANT (N)
ASCII Protocol
General
Qualitrol has developed it’s own ASCII protocol for those applications where the user would prefer to
write their own interface software. The ASCII protocol has a simpler structure than Modbus or DNP
and the flexibility to transmit integers or floating point variables.
ASCII Framing
In the ASCII mode all messages start with ‘the less than’ (<) character (ASCII 3C hex) and end with
‘the greater than’ (>) character (ASCII 3E hex). The allowable characters transmitted for all the other
fields are hexadecimal 0 – 9, A – F and the decimal ‘.’. These would be the ASCII characters of 30-
39, 41-46 and 2E. Networked devices monitor the network bus continuously for the ‘less than’
character. When one is received, each device decodes the address field to find out if it is the
addressed device.
Packet Structures
Send message to read a register (from the computer to the 505ITM):
1 byte Start message character ‘<’
2 bytes Length of message including start and stop message characters and the two Error
Checking bytes
2 bytes Address (from 0 to 255 / 0 to FF) of the 505ITM unit to be read
1 byte Read (0) / Write (1); this is a read so set to (0)
3 bytes Address of register to read or write to; See register map for valid register addresses
2 bytes Error Checking bytes of the message; see the Error Checking section for calculation
description
1 byte Stop message character ‘>’
i.e. To read Register 500 from the 505ITM unit with an address of 03, the message sent would
be: ‘<0C0301F4D5>’
Reply message to read a register (from the 505ITM back to the computer):
Checking bytes
2 bytes Address (from 0 to 255 / 0 to FF) of the 505ITM unit that was read
1 byte If the message was okay returns a (1), returning anything else means an error
occurred
N bytes Returned value; integer, hex number or floating point number (floating point numbers
may include a decimal point)
description
i.e. The return message from the 505ITM, address 03 for reading register 500 and returning a
value of 75.0 would be: ‘<100311F475.01C>’
Send message to write to a register (from the computer to the 505ITM):

Checking bytes
2 bytes Address (from 0 to 255 / 0 to FF) of the 505ITM unit that will be written to
1 byte Read (0) / Write (1); this is a write message so set to (1)
N bytes Sending value; integer or floating point number (floating point numbers may include a
decimal point)
description
i.e. To write a value of 75.0 to Register 500 to the 505ITM unit with an address of 03, the
message sent would be: ‘<100311F475.01C>’
Reply message to write to a register (from the 505ITM back to the computer):
Checking bytes
2 bytes Address (from 0 to 255 / 0 to FF) of the 505ITM unit that was read
1 byte If the message was correct will return a (1), returning anything else means an error
occurred
description
i.e. The return message from the 505ITM, address 03 for writing register 500 with a value of 75.0
would be: ‘<0C0311F4D4>’
Error Checking Calculation

The Error Checking for the ASCII string being sent or received is a running addition of the ASCII
characters, truncated to two bytes and then taking the twos compliment of the result. This includes all
the characters of the string (start and stop characters and the message) except for the Error
Checking bytes, which we are in the process of calculating.
For example: We want to read register 100, from a 505ITM with an address of 7. We have a starting
character ‘<’ which is an ASCII 3C. The length of the message is next with one byte for start, two
bytes for length, two bytes for the address, one byte for read, three bytes for the register, two bytes
for the error checking and one byte for the stop character, which totals twelve or 0C in hex. This
converts to two ASCII characters of 30 and 43. The address of the 505ITM comes next and it is a 07,
which converts to 30 and 37. The read byte (0) translates to a 30 ASCII. Next is the register
address, which is 100 or 064 in hex. This converts to 30, 36 and 34 in ASCII. We skip the error
checking bytes so that leaves just the stop message character ‘>’ which is 3E ASCII.
3C Start byte
30 Length of message (two characters)
43
30 Address of the 505ITM unit (two characters)
37
30 The read byte
30 The register address (three characters)
36
34
(In a message this is where the two Error Checking bytes will go)
3E Stop byte
__+_________
21E
This is truncated to just 1E. We then take the twos complement and get an E2. This converts to an
ASCII 45, 32. So the completed message is:
3C, 30, 43, 30, 37, 30, 30, 36, 34, 45, 32, 3E
This is displayed in the sent window of the Qualitrol ASCII Test Program as:
<0C070064E2>
ASCII Register Map

Binary Parameters
26 SYSTEM STATUS RELAY READ 1 = ACTUATED; 0 = NOT ACTUATED
27 HEATER STATUS READ 1 = ENABLED; 0 = DISABLED
Binary Parameters
58 INPUT MODULE MAX/MIN RESET RD/WR PULSE/RESET (1)
Analog Parameters
Values in Registers 100 thru 770 have different formatting depending on the accuracy required.
Those designated by (N) have no multiplier whereas those with 10X or 100X have been multiplied by
10 or 100 allowing for decimal place accuracy in an integer format (e.g. 12.34 would be read as 1234
for 100X).
108 RELAY 1, HYSTERESIS 1 VALUE RD/WR HYSTERESIS IN THE 1ST COLUMN OF THE MATRIX (10X)
169 TRANSLIFE 1 CONSUMED LIFE FOR LAST HOUR READ CALCULATED CONSUMED LIFE FOR LAST HOUR (100X)
170 TRANSLIFE 1 CONSUMED LIFE FOR LAST DAY READ CALCULATED CONSUMED LIFE FOR LAST DAY (100X)
171 TRANSLIFE 1 REMAINING TRANSFORMER LIFE READ (20 YEARS - CONSUMED LIFE) (100X)
1ST CRITICAL SPT TO CALCULATE TIME TO REACH
2ND CRITICAL SPT TO CALCULATE TIME TO REACH
3RD CRITICAL SPT TO CALCULATE TIME TO REACH
196 FIRMWARE REVISION FOR THIS 509ITM UNIT READ (100X)

450 LIFE CONSUMPTION UNITY TEMPERATURE READ LIFE (N)
454 INSTALLED DIGITAL SENSORS READ BIT 16 = FIBER MOD 1 INSTALLED; BIT 15 = MOD 2 (N)
455 PRESENT YEAR READ TODAY'S YEAR IN THE 509ITM UNIT (N)
456 PRESENT MONTH READ TODAY'S MONTH IN THE 509ITM UNIT (N)
457 PRESENT DATE READ TODAY'S DAY IN THE 509ITM UNIT (1 - 31) (N)
458 PRESENT HOUR READ PRESENT HOUR (0 - 23) (N)
459 PRESENT MINUTE READ PRESENT MINUTE (0 - 59) (N)
460 PRESENT SECOND READ PRESENT SECOND (0 - 59) (N)
MODULE NUMBER IF THERE IS AN AMBIENT SENSOR
462 AMBIENT TEMPERATURE MODULE NUMBER READ (N)
463 TRANSFORMER LIFE SPAN READ ENTERED TRANSFORMER LIFE SPAN IN YEARS
465 COOLING EXERCISER RUN TIME READ MINUTES FAN EXERCISER WILL RUN WHEN ACTIVE (N)
DAYS BETWEEN EXERCISER RUN TIME BEING ACTIVE
466 COOLING EXERCISER CYCLE TIME READ (N)
467 COOLING EXERCISER START TIME READ HOUR TO BEGIN FAN EXERCISER IN MILITARY TIME (N)
468 STARTING MONTH FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 12) (N)
469 STARTING DAY FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 31) (N)
470 ENDING MONTH FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 12) (N)
471 ENDING DAY FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 31) (N)
472 AMBIENT TEMPERATURE FORECAST SETPOINT READ RELAY FEATURE (N)
# OF HOURS TO EXCEED SETPOINT FOR ACTIVE
473 AMBIENT TEMPERATURE THRESHOLD HOURS READ FEATURE (N)
ROLLING PERIOD IN HOURS TO MEASURE THRESHOLD
474 AMBIENT TEMPERATURE MEASUREMENT PERIOD READ TEMP (N)
MODULE NUMBER MEASURING AMBIENT MODULE NUMBER IF THERE IS AN AMBIENT SENSOR
475 TEMPERATURE READ (N)

564 CURRENT LOOP 1 MINIMUM SCALING RANGE READ MINIMUM SCALING VALUE FOR CURRENT LOOP 1 (10X)
565 CURRENT LOOP 2 MINIMUM SCALING RANGE READ MINIMUM SCALING VALUE FOR CURRENT LOOP 2 (10X)
568 CURRENT LOOP 1 MAXIMUM SCALING RANGE READ MAXIMUM SCALING VALUE FOR CURRENT LOOP 1 (10X)
569 CURRENT LOOP 2 MAXIMUM SCALING RANGE READ MAXIMUM SCALING VALUE FOR CURRENT LOOP 2 (10X)
AMBIENT LOOKBACK FEATURE SETPOINT FOR RELAY 1

600 RELAY 1 AMBIENT SETPOINT VALUE RD/WR (10X)
691 TRANSLIFE 1 PRESENT CONSUMED LIFE RATE READ INSTANTANEOUS LIFE RATE (100X)
Analog Parameters
For Registers 702 thru 772 the parameters are 32 bits long with the even registers holding the low
word and the high registers holding the high word (e.g. 702 low word; 703 high word).

TRANSLIFE 1; TRANSFORMER LIFE TOTAL LIFE CONSUMPTION CALCULATED; TRANSLIFE 1
702 CONSUMPTION READ (N)
708 TOTAL TRANSFORMER OPERATING HOURS READ CUMULATIVE TRANSFORMER OPERATING HOURS (N)
LIFE 'A' VALUE FOR CALCULATING CONSUMED LIFE
742 TRANSLIFE VARIABLE 'A' VALUE READ (10X)
LIFE 'B' VALUE FOR CALCULATING CONSUMED LIFE
744 TRANSLIFE VARIABLE 'B' VALUE READ (10X)
TRANSLIFE 1; TEMPERATURE PROFILE, 1ST TOTAL WINDING TEMP TIME IN LOWEST TEMP RANGE
748 RANGE READ (N)
750 RANGE READ TOTAL WINDING TEMP TIME IN 2ND TEMP RANGE (N)
752 RANGE READ TOTAL WINDING TEMP TIME IN 3RD TEMP RANGE (N)
TRANSLIFE 1; TEMPERATURE PROFILE, 12TH TOTAL WINDING TEMP TIME IN HIGHEST TEMP RANGE
770 RANGE READ (N)
String Parameters
850 SERIAL NUMBER; 12 ASCII CHARACTERS READ SERIAL NUMBER[1] / SERIAL NUMBER[0]
856 MANUFACTURED DATE; 8 ASCII CHARACTERS READ MANUFACTURED DATE[1] / MANUFACTURED DATE [0]
860 SUBSTATION NAME; 16 ASCII CHARACTERS READ SUBSTATION NAME[1] / SUBSTATION NAME[0]
868 EQUIPMENT NAME; 16 ASCII CHARACTERS READ EQUIPMENT NAME[1] / EQUIPMENT NAME[0]
876 MODEL NUMBER; 8 ASCII CHARACTERS READ MODEL NUMBER[1] / MODEL NUMBER[0]
Registers 900 thru 903 have the hex codes of the hardware types for the input modules. The types
are explained in the description side of the registers
900 INPUT MODULE 1 HARDWARE TYPE READ 00 = NONE; 01 = 4-20mA; 02 = 0-1mA; 03 = 0-10VDC;
901 INPUT MODULE 2 HARDWARE TYPE READ 04 = 0-100mVDC; 05 = CT, CURRENT; 06 = CT, TEMP;
902 INPUT MODULE 3 HARDWARE TYPE READ 07 = POTENTIOMETER; 08 = 100 OHM RTD; 09 = 10 OHM
903 INPUT MODULE 4 HARDWARE TYPE READ RTD; 0A = DRY SWITCH DETECTION; 0B = POWERED
SWITCH DETECTION; 0C = 100 OHM RTD WINDING
TEMP; 0D = 10 OHM RTD WINDING TEMP; 0E = LTC
RESISTOR BRIDGE; 0F = 0-140VAC; 10 = 0-320VAC;
11 = LTC 0-1mA; 12 = LTC 4-20mA; 13 = FIBER OPTIC
TEMP
Registers 908 thru 967 are packed numbers. For example: reading register 908 gives a decimal
number of 3122. Converting this to hex gives 0C32. Split the bytes in half and it would read 12
hours and 32 minutes.

String Parameters
Analog Parameters
Registers 1500 thru 1503, see appropriate scaling (e.g. N, 10X, 100X, 1000X)
String Parameters
Registers 1508 thru 1515.
Analog Parameters
For registers 1664 thru 1702 the parameters are 32 bits long with the even registers holding the low
word and the odd registers holding the high word (e.g. 1664 low word; 1665 high word). These
registers are for those applications where the input module values could be greater than 3200
(32,000 with multiplier).

2234 INPUT MODULE 4; WINDING RISE TEMP; STAGE 3 READ COOLING STAGE 3; ADVANCED WINDING RISE TEMP
(100X)
Q ASCII Demo Application
Qualitrol has developed a program to assist the user with the development of an ASCII based software to
communicate with the 505ITM. This software allows the user to communicate with the 505ITM while showing
the actual ‘Sent’ and ‘Reply’ packets that are used to send the data. The Q ASCII demonstration program
runs on Windows NT, 95, 98 and 2000 and is named ‘qascii.exe’. The software can be copied onto the hard
drive or run directly from the floppy disk. Before using the program though, the 505ITM must be set to
communicate ASCII through the RS485 port at the rear of the unit. This is done by running the Qualitrol
Remote Software package and entering the communications section under the ‘Customer-Setup’. See the
Qualitrol 505ITM Manual (IST-104-1) for detailed instructions. Set the protocol to QASCII and take note of
the baud rate and address (change these values if so desired). Now exit out of the Remote program.
Momentarily remove power from the 505ITM. NOTE: Only upon powering up the 505ITM are new
communication values applied to the system.
Shown below is the Communications Configuration window in the Qualitrol Remotes Software. This is where
the 505ITM protocol type is set to communicate ASCII out the RS485 port.
Now connect your computer to the RS485 connection on the 505ITM and start the qascii.exe
program. Upon starting the program the following window should appear on your computer.
Set the communications port to match the connection on your computer and set the baud rate and
address to match what was entered in the Remote Software. Now click on the ‘Connect’ button. If a
communication error occurs, check your hardware connection and step through setting the protocol
again making sure the values match.
Comm Selects the communication port you are connected to.
Baud Indicates the baud rate that will be communicated at.
Address Indicates the address that the 505ITM is programmed for.
Connect Pressing this button will attempt to establish communications with the
505ITM.
Register This box holds the register address that you wish to read or write to.
Check the ASCII Register Map shown earlier in this manual for variable
locations.
Value This window will hold the return value on a read or will accept the value to
be written to the selected address.
Read/Write These radio buttons select whether you want to read a value from the
505ITM or write a value to the 505ITM.
Read/Write Clicking on this button specifies whether a read or write is performed.
Packets-Sent This shows the actual packet structure sent to the 505ITM.
Packets-Reply This shows the actual structure of the packet received from the 505ITM.
Exit Clicking on the exit button will remove the user from the program.
QUALITROL® Field Services
QUALITROL® provides on-site commissioning/ start-up and comprehensive maintenance contracts to all customers
worldwide. To further improve reliability, an extended warranty is available on selected products commissioned by
QUALITROL®.
QUALITROL® Educational Services
®
QUALITROL professional training (designed to achieve hands-on performance based objectives) prepares operations,
maintenance, and engineering personnel to install, test, configure, operate and maintain QUALITROL® products.
QUALITROL® Accelerated Delivery
®
QUALITROL provides accelerated delivery on many products and services including replacements, spare parts and
repairs.
About Qualitrol:
Qualitrol manufactures substation and transformer monitoring and protection devices used by electric utilities and
manufacturing companies. It is the global leader in sales and installations of transformer asset protection equipment, fault
recorders and fault locators. Established in 1945, Qualitrol produces thousands of different types of products on demand,
each customized to customers' unique requirements.
©2008 QUALITROL Company LLC, an ISO 9001 system certified company. All rights reserved. Information subject to change without notice.
®
All trademarks are properties of their respective companies, as noted herein. IST-099-1.

IST-105-1 505ITM PROTOCOL MANUAL Rev-31022 PDF

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

IST-105-1 505ITM PROTOCOL MANUAL Rev-31022 PDF

Hochgeladen von

Copyright:

Verfügbare Formate

QUALITROL 505ITM Series

QUALITROL 505ITM Series

Intelligent Transformer Monitor

General .................................................................................................................... 35

DNP V3.0 Device Profile

Transmitted: 292 Transmitted: Configurable up to 2048

Data Link Confirm:  None  Fixed at ____  Variable  Configurable.

Others: Transmission Delay, configurable

Sends/Executes Control Operations:

WRITE Binary Outputs  Never  Always  Sometimes  Configurable

Count > 1  Never  Always  Sometimes  Configurable

Queue  Never  Always  Sometimes  Configurable

Attach explanation if 'Sometimes' or 'Configurable' was checked for any operation.

 No Counters Reported  No Counters Reported

Sequential File Transfer Support:

Append File Mode  Yes No

DNP V3.0 Implementation Table

7 (freeze) 00, 01 (start-stop)

2 (write) 07 (limited qty = 1)

50 3 Time and Date Last Recorded Time 2 07 (limited qty)

51 1 Time and Date CTO 129 (response) 07 (limited qty)

52 1 Time Delay Coarse 129 (response) 07 (limited qty)

20 (enbl. unsol.) 06 (no range, or all)

70 2 File Authentication 29 (authenticate) 5b (free-format) 129 (response) 5B (free-format)

70 3 File Command 25 (open) 5b (free-format)

70 6 File Transfer Status 129 (response) 5B (free-format)

86 0 Data Set Descriptor 22 (assign class) 00, 01 (start-stop)

87 0 Data Set – Present Value 1 00, 01 (start-stop)

88 0 Data Set Event 1 06 (no range, or all)

91 1 Activate Status 129 (response) 07 (limited qty)

DNP V3.0 Point List

Binary Input Points

BINARY INPUT; OBJ 1; VAR 0, 1, 2

Binary Output Status Points

BINARY OUTPUT; OBJ 10; VAR 0, 1, 2

BINARY COUNTER; OBJ 20; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

475 RELAY 1, ACTUATION COUNTS ACTUATION COUNTER FOR RELAY 1

Analog Output Status Points

ANALOG OUTPUT; OBJ 40; VAR 0, 1, 2, 3, 4

OCTET STRING; OBJ 110; VAR STRING LENGTH

Time and Date

Function Codes Supported

Modbus Register Map

TEMP WHERE CONSUMED LIFE EQUALS OPERATING

MINUTES FAN EXERCISER WILL RUN WHEN ACTIVE

492 RELAY 1, ACTUATION COUNTS READ ACTUATION COUNTER FOR RELAY 1

AMBIENT LOOKBACK FEATURE SETPOINT FOR RELAY

REG # VARIABLE R/W DESCRIPTION

REG # VARIABLE R/W DESCRIPTION

REG # VARIABLE R/W DESCRIPTION

REG # VARIABLE R/W DESCRIPTION

REG # VARIABLE R/W DESCRIPTION

Send message to write to a register (from the computer to the 505ITM):

Error Checking Calculation

ASCII Register Map

TEMP WHERE CONSUMED LIFE EQUALS OPERATING

492 RELAY 1, ACTUATION COUNTS READ ACTUATION COUNTER FOR RELAY 1

AMBIENT LOOKBACK FEATURE SETPOINT FOR RELAY 1

REG # VARIABLE R/W DESCRIPTION

REG # VARIABLE R/W DESCRIPTION

REG # VARIABLE R/W DESCRIPTION

SIMPLE CALCULATION WINDING RISE TEMPERATURE