Difference between revisions of "MT174"

From RECESSIM, A Reverse Engineering Community
Jump to navigation Jump to search
(Created page with "=== ISKRA MT174 === thumb|ISKRA MT174 ISKRA MT174 (230/400V, rated 85A) mostly used in Saxonia this seems to have some noticable semaphores wich can be...")
 
 
(4 intermediate revisions by the same user not shown)
Line 1: Line 1:
=== ISKRA MT174 ===
+
===ISKRA MT174===
 
[[File:ISKRAMT174.png|thumb|ISKRA MT174]]
 
[[File:ISKRAMT174.png|thumb|ISKRA MT174]]
 
ISKRA MT174 (230/400V, rated 85A) mostly used in Saxonia
 
ISKRA MT174 (230/400V, rated 85A) mostly used in Saxonia
 
this seems to have some noticable semaphores wich can be visualy inspected:
 
this seems to have some noticable semaphores wich can be visualy inspected:
 
+
KD = lid/cover open (there must be a switch somewhere)
KD = lid/cover open (there must be a switch somewhere)
+
BAT = internal battery low
BAT = internal battery low
+
DÜ = transmission mode
DÜ = transmission mode
+
FF = "Fatal" counter (?)
FF = "Fatal" counter (?)
+
SET = counter in program mode  
SET = counter in program mode  
 
 
The IR-Interface is claimed to be IEC 62056-21 mode C (asynchron, half-duplex, 300 - 19.200 baud, 7bit, even parity, 1stop (1_7D_1P_E_1S) and it is bidirectional. So one can also send something over that interface. There's an optional RS485 wire interface on some models.  
 
The IR-Interface is claimed to be IEC 62056-21 mode C (asynchron, half-duplex, 300 - 19.200 baud, 7bit, even parity, 1stop (1_7D_1P_E_1S) and it is bidirectional. So one can also send something over that interface. There's an optional RS485 wire interface on some models.  
  
The "Fatal counter" is a hex value 8bit flag register:
+
The "Fatal counter" is a hex value 8bit flag register:  
0 = Firmware error
+
0 = Firmware error
1 = Counter parameter checksum error
+
1 = Counter parameter checksum error
2 = energy/maximum checksum error
+
2 = energy/maximum checksum error
3 = not used
+
3 = not used
4 = not used
+
4 = not used
5 = not used
+
5 = not used
6 = maintenance warning level (?)
+
6 = maintenance warning level (?)
7 = not used  
+
7 = not used
 +
[https://www.youtube.com/watch?v=tKAOW3Ykq9A EMP test]
  
 
[https://www.youtube.com/watch?v=fOnKzUN7SzU Tampering / manipulation log video]
 
[https://www.youtube.com/watch?v=fOnKzUN7SzU Tampering / manipulation log video]
 +
 +
[https://www.youtube.com/watch?v=SEQTSzwD-t4 Explaining basic concepts]
  
 
[[File:ISKRA LOG.png|thumb|FIFO logbook P.98.1 for 74 "possible misuse type events"]]
 
[[File:ISKRA LOG.png|thumb|FIFO logbook P.98.1 for 74 "possible misuse type events"]]
  
[https://discord.com/channels/753408060986490891/876193109535502366/1213046873162649661 Manual (short)]
+
[https://www.avu-netz.de/downloads/messwesen/anleitung_mt174_1_kurzanleitung.pdf Manual (short)]
  
 
[https://www.manualslib.de/manual/417563/Iskraemeco-Mt174.html?page=33#manual Manual]
 
[https://www.manualslib.de/manual/417563/Iskraemeco-Mt174.html?page=33#manual Manual]

Latest revision as of 21:23, 8 March 2024

ISKRA MT174

ISKRA MT174

ISKRA MT174 (230/400V, rated 85A) mostly used in Saxonia this seems to have some noticable semaphores wich can be visualy inspected:

KD = lid/cover open (there must be a switch somewhere)
BAT = internal battery low
DÜ = transmission mode
FF = "Fatal" counter (?)
SET = counter in program mode 

The IR-Interface is claimed to be IEC 62056-21 mode C (asynchron, half-duplex, 300 - 19.200 baud, 7bit, even parity, 1stop (1_7D_1P_E_1S) and it is bidirectional. So one can also send something over that interface. There's an optional RS485 wire interface on some models.

The "Fatal counter" is a hex value 8bit flag register:

0 = Firmware error
1 = Counter parameter checksum error
2 = energy/maximum checksum error
3 = not used
4 = not used
5 = not used
6 = maintenance warning level (?)
7 = not used

EMP test

Tampering / manipulation log video

Explaining basic concepts

FIFO logbook P.98.1 for 74 "possible misuse type events"

Manual (short)

Manual