Process Bus Insight is a receive-only IEC 61850 Process Bus analyzer for Windows. This guide helps you run the portable package and start a safe observation workflow.
Recommended setup:
- Windows 10 or Windows 11 x64.
- A physical Ethernet adapter connected to a TAP, mirror port, or isolated test network.
- Npcap installed with normal raw packet capture support.
- Local admin rights if your Windows/Npcap policy requires elevated capture access.
Avoid these adapters for serious timing interpretation:
- Loopback adapters.
- Wi-Fi / Wi-Fi Direct.
- Hyper-V, VMware, VPN, or virtual bridge adapters.
- Unverified USB Ethernet adapters when timing evidence matters.
- Open the GitHub Releases page.
- Download the latest
ProcessBusInsight-vX.Y.Z-win-x64-portable.zip. - Download
SHA256SUMS.txtif you want to verify file integrity. - Extract the ZIP to a local folder such as:
C:\Tools\ProcessBusInsight
Open the extracted folder and run:
ProcessBusInsight.exe
The default release package publishes the app as a self-contained single EXE at the package root. The package also includes Quick Start PDF and User Manual PDF documents for offline field use.
- Select the physical Ethernet adapter connected to the Process Bus traffic.
- Start capture.
- Confirm traffic appears in the event log.
- Review SV stream discovery.
- Review GOOSE publishers and event changes.
- Review PTP timing context if present.
- Load SCL when available and compare expected-vs-observed objects.
- Copy evidence only after confirming adapter and capture-path confidence.
For a useful FAT/SAT troubleshooting screenshot or copied finding, include:
- Selected adapter raw device name.
- SV stream APPID, svID, VLAN, source MAC, and stream status.
- GOOSE publisher/control block and stNum/sqNum state when relevant.
- PTP transport/domain/grandmaster context when relevant.
- Missing sample / sequence / arrival timing status.
- Timing confidence label and timestamp source wording.
- Expected SCL fields and observed fields when SCL is loaded.
Arrival timing shown by the app is based on host/Npcap software timestamps. Treat it as screening evidence. Do not use it as certification-grade jitter proof unless the capture path is validated with hardware timestamping, TAP, or trusted timing equipment.