“原理看懂了但实际项目里SD报文长什么样怎么用Wireshark抓CANoe里怎么配”这篇文章就是回答这些问题的。我们用一个完整的域控制器项目场景从零开始用Wireshark抓真实的SOME/IP-SD报文逐字节解析Offer/Find/Subscribe/SubscribeACK在Vector CANoe中配置SOME/IP测试环境跑通FindService→SubscribeEventGroup全流程10个核心步骤6个工程坑5个FAQ一、测试场景定义1.1 场景描述┌──────────────┐ ┌──────────────┐ │ ECU A │ │ ECU B │ │ (域控制器) │ │ (摄像头模块) │ │ 192.168.1.10 │ ◄──────► │ 192.168.1.20 │ │ │ SOME/IP │ │ │ 客户端角色 │ SDRPC │ 服务端角色 │ └──────────────┘ └──────────────┘业务流程ECU B摄像头启动后Offer “CameraService”ECU A域控启动后Find “CameraService”ECU A收到Offer后Subscribe “EventGroup 1”摄像头帧数据ECU B回复SubscribeACKECU B开始周期推送摄像头帧数据Notification1.2 网络配置参数值说明VLAN ID10车载以太网业务VLANPCP6最高优先级SOME/IP-SDECU A IP192.168.1.10域控制器ECU B IP192.168.1.20摄像头模块SD PortUDP 30490SOME/IP-SD固定端口RPC PortUDP 30491SOME/IP通信端口Multicast224.0.0.1SD广播地址二、Wireshark抓包实战逐字节解析SD报文2.1 Wireshark配置过滤器someip || someip-sd前提安装Wireshark 3.x内置SOME/IP协议解析器。如果解析器未自动识别在 Preferences → Protocols → SOME/IP 中手动添加端口映射30490→SOME/IP-SD30491→SOME/IP。2.2 Offer报文逐字节解析ECU B启动后发送的第一条Offer报文Frame 1: 98 bytes on wire Ethernet II, Src: 00:11:22:33:44:55, Dst: 01:00:5e:00:00:01 (Multicast) 802.1Q VLAN, ID: 10, PCP: 6 Internet Protocol Version 4, Src: 192.168.1.20, Dst: 224.0.0.1 User Datagram Protocol, Src Port: 30490, Dst Port: 30490 SOME/IP-SD Service ID: 0xffff (SOME/IP-SD) Method ID: 0x8100 Length: 82 Client ID: 0x0000 Session ID: 0x0001 Protocol Version: 0x01 Interface Version: 0x01 Message Type: 0x02 (NOTIFICATION) Return Code: 0x00 (E_OK) SD Header: Flags: 0xc0 (Reboot1, Unicast1) Entries Array Length: 24 Entry 0: Type: 0x01 (OfferService) Index 1st Options: 1 Index 2nd Options: 0 #1st Options: 1 #2nd Options: 0 Service ID: 0x1234 (CameraService) Instance ID: 0x0001 Major Version: 1 TTL: 0x00000003 (3 seconds) Options Array Length: 44 Option 0: Type: 0x04 (IPv4 Endpoint) Length: 12 IPv4 Address: 192.168.1.20 Protocol: UDP (0x11) Port: 30491关键字段解读字段值含义Service ID (SD)0xFFFFSD固定标识Method ID (SD)0x8100SD固定标识Entry Type0x01OfferServiceService ID0x1234CameraServiceInstance ID0x0001第1个实例Major Version1主版本1TTL33秒后过期需重新OfferIPv4 Endpoint192.168.1.20:30491服务的RPC地址2.3 Find报文解析ECU A启动后发送的Find报文SOME/IP-SD Entry 0: Type: 0x00 (FindService) Service ID: 0x1234 (CameraService) Instance ID: 0xffff (ANY) Major Version: 1 TTL: 0x00000003 (3 seconds)注意Find报文的Instance ID通常是0xFFFF任意实例表示只要有人提供CameraService不管哪个实例我都接受。2.4 Subscribe报文解析ECU A收到Offer后发送的SubscribeSOME/IP-SD Entry 0: Type: 0x06 (SubscribeEventgroup) Service ID: 0x1234 Instance ID: 0x0001 Major Version: 1 TTL: 0x00000003 (3 seconds) Eventgroup ID: 0x0001 (摄像头帧数据事件组) Counter: 0x00 Option 0: Type: 0x04 (IPv4 Endpoint) IPv4 Address: 192.168.1.10 Protocol: UDP (0x11) Port: 30492 ← ECU A的接收端口关键点Subscribe报文中Option里的IP和Port是客户端自己的接收地址不是服务端的。这是新手最容易搞混的地方。2.5 SubscribeACK报文解析SOME/IP-SD Entry 0: Type: 0x07 (SubscribeEventgroupACK) Service ID: 0x1234 Instance ID: 0x0001 Major Version: 1 TTL: 0x00000003 (3 seconds) Eventgroup ID: 0x0001 Counter: 0x00SubscribeACK的TTL应与Subscribe一致。如果TTL0表示拒绝订阅。三、Vector CANoe配置实战3.1 10个核心步骤步骤1加载ARXML数据库在CANoe的Communication Setup中加载包含SOME/IP服务定义的ARXML文件File → Open → Configuration → 右键Databases → Add Ethernet Database 选择CameraService.arxmlARXML中必须包含Service Interface定义、Method/Event/Field声明、EventGroup分组。步骤2配置以太网通道Configuration → Ethernet Hardware Settings: - Channel: 1 - Link Type: 100BASE-T1 - VLAN ID: 10 - PCP: 6步骤3配置IP地址CANoe Tools → TCP/IP Stack: - IP Address: 192.168.1.100 (CANoe作为测试节点) - Subnet Mask: 255.255.255.0 - Gateway: 192.168.1.1步骤4创建SOME/IP服务配置右键 Service Discovery → Add Service: - Service ID: 0x1234 - Instance ID: 0x0001 - Major Version: 1 - Minor Version: 0 - Transport: UDP - Port: 30491步骤5配置EventGroupService 0x1234 → EventGroups → Add: - EventGroup ID: 0x0001 - Events: CameraFrame (Event) - Cycle Time: 33ms (30fps)步骤6编写CAPL Mock服务端// 模拟ECU B提供CameraServicevariables{EthSocket g_sdSocket;EthSocket g_rpcSocket;}on start{// 创建SD Socket监听30490g_sdSocketEthOpenSocket(30490,ETH_UDP);EthSetSocketOption(g_sdSocket,ETH_OPT_ADD_MEMBERSHIP,224.0.0.1);// 创建RPC Socket监听30491g_rpcSocketEthOpenSocket(30491,ETH_UDP);// 开始Offer服务EthOfferService(0x1234,0x0001,1,0,3,192.168.1.20,30491);// 设置周期Offer定时器setTimer(cyclicOffer,1000);}on timer cyclicOffer{// 每秒重新OfferTTL3秒1秒刷新一次留2秒裕量EthOfferService(0x1234,0x0001,1,0,3,192.168.1.20,30491);setTimer(cyclicOffer,1000);}onEthReceiveData(g_sdSocket,longsourceIP,longsourcePort,byte data[],longlength){// 检查是否为Subscribeif(EthIsSOMEIPSDSubscribeEventgroup(data,length)){longserviceIdEthGetSOMEIPSDServiceID(data,length);longeventgroupIdEthGetSOMEIPSDEventgroupID(data,length);if(serviceId0x1234eventgroupId0x0001){// 回复SubscribeACKEthSubscribeEventgroupACK(0x1234,0x0001,0x0001,3);// 开始发送摄像头帧数据setTimer(cyclicCameraFrame,33);}}}on timer cyclicCameraFrame{// 发送Notification摄像头帧数据byte frameData[1392];// ... 填充帧数据 ...EthSendSOMEIPNotification(g_rpcSocket,0x1234,0x0001,0x8001,frameData,elcount(frameData));setTimer(cyclicCameraFrame,33);}步骤7编写CAPL测试客户端// 模拟ECU A作为客户端variables{msTimer g_findTimer;msTimer g_subscribeTimer;longg_serviceFound;}on start{g_serviceFound0;// 发送FindEthFindService(0x1234,0xFFFF,1,3);setTimer(g_findTimer,3000);}on timer g_findTimer{if(!g_serviceFound){testStepFail(CameraService not found within 3s);}}onEthSOMEIPSDOffer(longserviceId,longinstanceId,longmajorVersion,longminorVersion,longttl){if(serviceId0x1234instanceId0x0001){g_serviceFound1;testStepPass(CameraService found! Instance%d, TTL%d,instanceId,ttl);// 发送SubscribeEthSubscribeEventgroup(0x1234,0x0001,0x0001,3,192.168.1.10,30492);setTimer(g_subscribeTimer,2000);}}on timer g_subscribeTimer{testStepFail(SubscribeACK not received within 2s);}onEthSOMEIPSDSubscribeEventgroupACK(longserviceId,longinstanceId,longeventgroupId,longttl){if(serviceId0x1234eventgroupId0x0001){testStepPass(SubscribeEventgroupACK received! TTL%d,ttl);cancelTimer(g_subscribeTimer);}}onEthSOMEIPNotification(longserviceId,longmethodId,byte data[],longlength){if(serviceId0x1234methodId0x8001){testStepPass(Camera frame received! Size%d bytes,length);}}步骤8配置Trace窗口Trace窗口 → Filter → SOME/IP-SD: 仅显示Service ID0xFFFF的报文步骤9配置Statistics窗口Statistics → Add Counter: - SD Offer Count (Offer报文计数) - SD Find Count (Find报文计数) - SD Subscribe Count (Subscribe报文计数) - Notification Rate (Notification频率)步骤10执行测试Test Setup → Run All Test Cases3.2 测试用例集用例ID名称验证目标TC_SD_001Offer服务验证ECU B启动后3s内Offer CameraServiceTC_SD_002Find→Offer时序ECU A Find后1s内收到OfferTC_SD_003Subscribe→ACK时序Subscribe后500ms内收到ACKTC_SD_004Notification频率30fps±10%TC_SD_005TTL超时检测停止Offer后TTL1s内检测到离线TC_SD_006服务版本不兼容Major Version不匹配时拒绝TC_SD_007多实例路由同服务2个实例独立SubscribeTC_SD_008断网恢复网络恢复后SD自动收敛四、SD状态机详解4.1 服务端状态机4.2 客户端状态机五、Wireshark抓包分析技巧5.1 常用过滤器过滤器用途someip-sd仅看SD报文someip !someip-sd仅看RPC报文排除SDsomeip.service_id 0x1234看特定服务someip.message_type 0x02看Notificationudp.port 30490SD端口流量udp.port 30491RPC端口流量vlan.id 10仅看业务VLAN5.2 统计分析Statistics → I/O Graph: - Filter: someip-sd ip.src192.168.1.20 - Y Axis: Packets/s - 显示Offer周期稳定性5.3 导出报文File → Export Specified Packets: - Range: 1-500 - 导出为.pcapng供团队共享六、6个SD实战工程坑坑1SD周期不稳定导致Offer丢失现象CANoe Trace中间歇性出现3秒以上无Offer。根因ECU启动阶段CPU负载高SD定时器被抢占。解法在系统初始化完成后再启动SD或提高SD任务优先级。坑2Subscribe后收不到Notification现象SubscribeACK收到了但一直没有Notification。根因Subscribe报文中Option的IP/Port填错了——填了服务端的地址而不是客户端自己的。解法Option中的Endpoint必须是客户端自己的接收地址。坑3TTL0xFFFFFF导致服务永不释放现象ECU已下线但其他节点仍认为服务在线。根因TTL0xFFFFFF永久服务方停止后未发送TTL0的Stop Offer。解法生产环境TTL建议3-5秒服务停止时必须发送TTL0的Offer。坑4多VLAN环境下SD跨VLAN失败现象不同VLAN的ECU互相找不到对方的服务。根因SD广播默认不跨VLAN。解法在网关配置SD跨VLAN转发规则或使用Unicast SD。坑5IPv4/IPv6双栈Offer解析失败现象Wireshark能看到Offer但CANoe解析不出Endpoint。根因Offer报文中同时包含IPv4和IPv6 Option某些解析器只取第一个。解法确认ARXML中明确指定传输层为IPv4。坑6EventGroup ID冲突现象订阅了正确的Service但收到的事件数据不对应。根因同一Service下多个EventGroup ID重复定义。解法在ARXML中统一EventGroup ID命名空间确保全车唯一。七、FAQQ1SOME/IP-SD的Offer周期应该设多少A启动阶段建议100-300ms快速发现稳定阶段1-3s。TTL建议设为周期的3倍如周期1s则TTL3s确保网络抖动时不会误判离线。Q2Wireshark抓不到SOME/IP报文怎么办A(1)确认抓包网卡支持100BASE-T1普通网卡不支持车载以太网物理层(2)确认Wireshark版本≥3.x内置SOME/IP解析器(3)在Preferences→Protocols→SOME/IP中手动添加端口映射30490/30491。Q3CANoe中如何模拟多个ECU同时Offer服务A在CANoe的SOME/IP Configuration中为每个ECU创建独立的Service Instance。每个Instance使用不同的Instance ID和IP地址。用CAPL的EthOfferService()分别发起Offer。Q4SubscribeEventgroup和Subscribe有什么区别ASOME/IP-SD中只有SubscribeEventgroupEntry Type0x06没有单独的Subscribe Service。订阅是针对EventGroup的一个Service可以包含多个EventGroup客户端可以按需订阅特定的EventGroup。Q5如何测试SD的异常恢复能力A(1)强制停止服务方的SD Offer验证客户端是否在TTL1s内检测到离线(2)网络断开后恢复验证SD是否自动收敛(3)模拟网络拥塞注入大量背景流量验证SD报文是否被抢占。参考资料[1] AUTOSAR Foundation R23-11,SWS_SOMEIP — Specification of SOME/IP Transport Protocol[2] AUTOSAR Foundation R23-11,SWS_SOMEIP_SD — Specification of Service Discovery[3] Vector Informatik,CANoe Ethernet SOME/IP Manual— ETH-API and CAPL programming guide[4] Wireshark,SOME/IP Protocol Dissector— https://wiki.wireshark.org/SOMEIP[5] ISO 17215:2014,Road vehicles — Video communication interface for cameras (VCIC)本文同步发布于ATEMall 知乎专栏车载以太网协议实战系列ATEMall 公众号ATEMall 官网https://atemall-ai.com