What Is the Protocol Test Harness?
The Communication Protocol Test Harness (PTH) is a Windows-based testing and simulation application developed by Triangle MicroWorks, Inc. — the same company behind the SCADA Data Gateway. It is a dedicated tool for engineers who need to test, simulate, and analyze DNP3, IEC 60870-5 (-101, -102, -103, -104), and Modbus devices and communication channels.
Current version: 3.17 (with continuous updates through 3.24+), available for both 32-bit and 64-bit Windows.
With over 25 years of development history, Triangle MicroWorks describes it as “the industry’s most reliable simulation tool for SCADA protocol testing and conformance test preparation.” It is used by IED manufacturers, SCADA vendors, system integrators, utility commissioning engineers, and conformance test laboratories across more than 50 countries.
Who Uses the Protocol Test Harness?
- IED and RTU manufacturers validating DNP3 or IEC 60870-5 implementations before shipping
- SCADA software vendors testing master station implementations against simulated outstations
- System integrators verifying communication during commissioning
- Utility engineers performing site acceptance testing of RTUs and IEDs
- Conformance test laboratories running official DNP3 and Modbus certification procedures
- Protocol developers automating regression test suites via scripting
Supported Protocols
DNP3
- DNP3 LAN/WAN — over TCP/IP (IPv4 and IPv6)
- DNP3 Serial — over RS-232/RS-485
- Both Master and Outstation simulation
- DNP3 Secure Authentication (SAv2 and SAv5) per IEC 62351-5
IEC 60870-5
- IEC 60870-5-101 — serial balanced and unbalanced
- IEC 60870-5-102 — accumulator/meter reading
- IEC 60870-5-103 — protection equipment companion standard
- IEC 60870-5-104 — TCP/IP transport
- Both Master/Controlling and Controlled/Outstation simulation
- IEC 60870-5 Secure Authentication per IEC 62351
- TLS encryption for IEC 60870-5-104
Modbus
- Modbus TCP/IP and Modbus Serial RTU/ASCII
- Both Master and Server/Slave simulation
- Function code 22 (Mask Write Register), dual register (32-bit) support
- Modbus conformance test procedures
Core Features
Device Simulation
Master/Controlling Station simulation:
- Configure periodic polling intervals, class polls, general interrogation
- Send reads, writes, Direct Operate (DO) and Select-Before-Operate (SBO) commands
- Execute time synchronization sequences
- Test unsolicited response handling from outstations
Outstation/Server simulation:
- Create a complete simulated database covering all protocol data types: binary inputs, binary outputs, analog inputs, analog outputs, counters
- Configure initial values, quality flags, and timestamps per data point
- Generate spontaneous events and change events on demand
- Simulate communication failures and bad-quality data conditions
- Respond to master polls with exact protocol-compliant behavior
The core value: when testing a new DNP3 master station software, you don’t need a real RTU connected — the Test Harness acts as the outstation, providing exactly the responses you configure and verifying that the master handles them correctly.
Protocol Analyzer — Built-in Frame Decoder
- Full frame capture of all transmitted and received frames in real time
- Field-level decoding — every protocol field labeled: function codes, addresses, data types, quality descriptors, timestamps, application layer details
- Real-time and capture buffers — monitor live traffic or analyze recorded sessions offline
- Extensive filtering — by function code, address range, direction, or message type
- Customized display — configurable colors, fonts, and indentation per message type for readability
- Octet view — optional raw hex byte display alongside decoded fields
- Passive monitor mode — connect to a live serial or TCP/IP channel and capture all traffic without transmitting a single byte — completely non-intrusive monitoring of operational SCADA systems
Conformance Testing
DNP3 Conformance Testing
The Test Harness executes the official DNP3 IED Certification Procedure test sequences published by the DNP Users Group Technical Committee:
- Supports Subset Levels 1, 2, and 3 (Version 3.2.1, January 2023)
- Tests cover: data types, controls, time synchronization, integrity polls, event reporting, file transfer, secure authentication
- Section 9 (Network) and Section 10 (Output Control Events) outstation tests
- MESA-DER DNP3 Outstation Conformance Tests for distributed energy resource applications
- Increasingly automated — newer versions require less manual tester interaction
Modbus Conformance Testing
- Automated Modbus conformance test scripts per the Modbus Organization specifications
- Tests standard function codes, exception responses, and protocol edge cases
- Configurable for both Master and Server/Slave conformance verification
Why conformance testing matters: DNP3 certification from the DNP Users Group requires passing official conformance procedures — not just communication success, but exact compliance with all protocol edge cases and error conditions that interoperability depends on. The Protocol Test Harness is the reference tool for both certification preparation and formal conformance testing.
Custom Functional Testing — Three Scripting Languages
Beyond official conformance procedures, full custom test automation is supported:
.NET (C# / VB.NET): Full programmatic access to all protocol functions and data structures via Triangle MicroWorks’ .NET protocol libraries. Write complete test applications.
Python (IronPython): Rapid script development with Python syntax. Access all simulation and testing functions. Ideal for iterative test development and maintenance.
Tcl/Tk: The most established scripting interface with an extensive built-in command library. Direct protocol control commands: mdnprecordtime, mdnptimesync, tmwchannel, tmwloadworkspace. Access session keys for DNP3 and IEC 101/104 Secure Authentication. Load workspace configurations from script.
GUI command sequences (no scripting required): define ordered command steps with configurable parameters, conditional branching on device responses, execute as complete automated sequence.
DNP3 Secure Authentication Testing
- Test SAv2 and SAv5 implementations on both master and outstation
- Challenge-response sequence testing
- Key management procedure and user key change validation
- Session key access from Tcl command window for advanced scripting
- Verify expired users are handled correctly per SA specification
OPC Client Integration
- Connect to OPC DA servers to read and write data within test scenarios
- Bridge OPC-based SCADA data with field protocol testing
- Both 32-bit and 64-bit OPC client support (updated per version)
DNP Forge Integration
- Import DNP3 binary configuration files created by Triangle MicroWorks’ DNP Forge tool
- Auto-configure a DNP3 master or outstation directly from the device profile document
- Eliminates manual re-entry of configuration parameters from device profiles
Typical Use Cases
FAT Preparation by IED Manufacturer
A protection relay manufacturer prepares their DNP3 outstation for factory acceptance. The Test Harness simulates the master station, systematically exercising every data type and protocol scenario. Before the customer arrives, the official Subset Level 2 conformance procedures are run internally — fixing non-conformances before the formal test.
SCADA Software Evaluation
A utility evaluates a new SCADA master station software. The Test Harness simulates 50 RTUs with realistic event rates and data profiles. Polling behavior, event handling, time synchronization, and command processing are all tested and documented against the simulated outstations before any real hardware connection.
Live Communication Debugging on Site
A commissioning engineer connects the Test Harness in passive monitor mode to a live serial link between an RTU and SCADA. The built-in analyzer decodes both sides of the exchange, immediately revealing that the RTU is sending timestamps in the wrong format — a configuration error resolved in minutes rather than hours.
Automated Regression Test Suite
A device vendor runs Tcl/Tk scripts automatically overnight after every firmware build. Thousands of protocol message sequences are executed, all device responses verified programmatically. Any regression from expected behavior triggers an alert before the firmware reaches code review.
Protocol Test Harness vs. AXON Test 5
Both tools are used for DNP3 and IEC 60870-5 testing in power automation. Key differences:
| Feature | Protocol Test Harness (TMW) | AXON Test 5 (Axon Group) |
|---|---|---|
| DNP3 master/outstation | ✅ Full | ✅ Full |
| IEC 60870-5-104 | ✅ | ✅ |
| IEC 60870-5-101 serial | ✅ | ✅ |
| IEC 60870-5-102/103 | ✅ | Limited |
| Modbus | ✅ | ✅ |
| Official DNP3 conformance tests | ✅ Built-in (Levels 1–3) | ❌ |
| Official Modbus conformance tests | ✅ Built-in | ❌ |
| Python / .NET scripting | ✅ | ❌ |
| AutoTest FAT/SAT report generation | Limited | ✅ |
| Protocol analyzer | ✅ Full decode | ✅ |
| Passive monitor mode | ✅ | ✅ |
| DNP3 Secure Authentication testing | ✅ SAv2 + SAv5 | Limited |
| OPC client integration | ✅ | ❌ |
| IPv6 support | ✅ | Limited |
| Free evaluation | ✅ | ✅ 45 days |
| Primary strength | Conformance + deep protocol testing | FAT/SAT automation + reports |
Choose Protocol Test Harness when: Official DNP3 or Modbus conformance procedures are required, IEC 60870-5-102/103 is needed, or Python/.NET scripted automation with deep protocol access is the priority.
Choose AXON Test 5 when: Your focus is structured FAT/SAT automation with automated test reports across DNP3, IEC 60870-5-104, and Modbus — without the need for official conformance procedures.
System Requirements
| Component | Requirement |
|---|---|
| OS | Windows 7/10/11 (32-bit or 64-bit) |
| RAM | 2 GB minimum |
| Storage | 500 MB |
| Serial interfaces | COM ports or USB-serial adapters for serial protocols |
| Network | Ethernet adapter for TCP/IP protocols |
| Additional | WinPCap or NPCAP for passive monitor mode |
Frequently Asked Questions
Does it support IEC 60870-5-102 (energy metering)? Yes — one of the few testing tools that handles this less common variant used in accumulator and meter reading applications.
Can it monitor a live SCADA link without disrupting it? Yes. Passive monitor mode captures and decodes all traffic on a serial or TCP/IP channel without transmitting any data — completely non-intrusive.
Can I use it to prepare for formal DNP3 certification? Yes. The Test Harness implements the official DNP3 IED Certification Procedure test sequences used by conformance test laboratories. Running these internally before submission helps identify and correct non-conformances in advance.
How does it differ from the SCADA Data Gateway? The Protocol Test Harness is an engineering test tool for simulation, analysis, and conformance testing during development, FAT, and commissioning. The SCADA Data Gateway is a production platform for continuous protocol translation in live systems. They serve different purposes and are often used together in a complete project workflow.
Is there a free evaluation? Yes — a free evaluation download is available from the Triangle MicroWorks website.
Summary
The Triangle MicroWorks Protocol Test Harness is the reference tool for DNP3, IEC 60870-5, and Modbus protocol testing — backed by 25+ years of power utility protocol expertise. Its combination of complete master and outstation simulation, passive non-intrusive monitoring, field-level protocol analysis, official conformance test procedures, and multi-language scripting (Python, .NET, Tcl/Tk) automation makes it the go-to choice for anyone who needs to go beyond basic connectivity verification to certified protocol compliance.
For licensing assistance, contact our team via Telegram: t.me/DoCrackMe
Related articles: SCADA Data Gateway — Multi-Protocol Translation for Power Utilities | AXON Test 5 — Protocol Simulator for FAT/SAT Testing | DNP3 vs IEC 60870-5-104 — Protocol Selection Guide for Utilities



