# CIP Protocol and IA Logix Driver **URL:** \ **Category:** Ignition\ **Created:** [July 1, 2025, 12:56pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985 "2025-07-01T12:56:43Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![nicholas.gutt](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nicholas.gutt/32/25670_2.png) [@nicholas.gutt](https://forum.inductiveautomation.com/u/nicholas.gutt)\ **Post date:** [July 1, 2025, 12:56pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985/1 "2025-07-01T12:56:43Z")
Working with support on a device connection issue. Gateway has 44 devices. 6 are AB controllers and are latent. All 6 are IA Logix drivers, firmware 31+. Gateway version is 8.1.17 We have figured out with IAs help gateway is not receiving CIP responses from one device we are focusing on. 100% request/response packets can be seen at the device. 95% of responses are MISSING at gateway. The chain of network hardware is long and contains big iron switches/firewalls. Using Wireshark, recording from both gateway and device endpoints missing packets can be observed by examining the CIP sequence #s. I am looking to understand the communication on a packet level. I found the document: [https://support.inductiveautomation.com/hc/en-us/articles/26305379355021-Understanding-Allen-Bradley#h\_01HWNKB0WHYS5P5HAS9Y632ZD6](https://support.inductiveautomation.com/hc/en-us/articles/26305379355021-Understanding-Allen-Bradley#h_01HWNKB0WHYS5P5HAS9Y632ZD6) We are using post processing on Wireshark traces to determine how many response packets are not arriving at gateway for groups of devices. I would like to understand how ignition Logix connections work better. My questions: Using IA Logix Driver in v8.1.17 For a single device, what is the range of possible CIP Sequence values? How is the cip.seq (CIP Sequence) number generated? How often does the cip.seq reset? What does the gateway do if responses do not arrive? Ask Again? New cip.seq? I am willing to read on my own if there is an online resource someone can point me at. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [July 1, 2025, 1:04pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985/2 "2025-07-01T13:04:49Z")
It's a 2 byte sequence number that increments with every "connected" request and eventually rolls over. A new sequence number is always used. If a response doesn't arrive the corresponding request fails. Nothing is retried, sequence is not reused. ---
**Author:** ![nicholas.gutt](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nicholas.gutt/32/25670_2.png) [@nicholas.gutt](https://forum.inductiveautomation.com/u/nicholas.gutt)\ **Post date:** [July 1, 2025, 1:24pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985/3 "2025-07-01T13:24:20Z")
Amazing, very much appreciate your help! ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [July 1, 2025, 1:26pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985/4 "2025-07-01T13:26:42Z")
If you aren't an ODVA member then unfortunately you can't access the EtherNet/IP spec... the Wireshark decoder actually does a pretty good job breaking down the generic upper layers of the protocol. It only turns to opaque data once you're looking and vendor-specific CIP services. For the most part. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [July 1, 2025, 1:54pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985/5 "2025-07-01T13:54:22Z")
> [@Kevin.Herron](#): > > sequence is not reused This is not strictly true--there can be repeats for connection keep-alive, which the recipient is required to discard after resetting the connection timeout. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [July 1, 2025, 1:58pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985/6 "2025-07-01T13:58:59Z")
They aren't reused by the Logix driver. ---
**Author:** ![nicholas.gutt](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nicholas.gutt/32/25670_2.png) [@nicholas.gutt](https://forum.inductiveautomation.com/u/nicholas.gutt)\ **Post date:** [July 1, 2025, 3:40pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985/7 "2025-07-01T15:40:16Z")
Many thanks for the info. We are taking synchronized traces from within our network. I expect today we will identify root cause. The image shows a source device, destination gateway packet. There are 2 cip.seq values on a single packet. Can you guys share what a single packet with multiple cip.seq values means? ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/4/8/48931c74668cdd1d9864cebc486fe867f4ee385d.png) ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [July 1, 2025, 3:54pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985/8 "2025-07-01T15:54:20Z")
I would expect that to be due to the concurrency setting in the driver. The nested packets would belong to different concurrent connection buffers. Your infra is simply merging TCP traffic into larger packets, which should not hurt anything. (It does suggest that your infra is messing with the low-latency status of the TCP channel.) ---
**Author:** ![nicholas.gutt](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nicholas.gutt/32/25670_2.png) [@nicholas.gutt](https://forum.inductiveautomation.com/u/nicholas.gutt)\ **Post date:** [July 1, 2025, 4:27pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985/9 "2025-07-01T16:27:52Z")
Root Cause: Damaged fiber connection. Connection had redundancy, shut down damaged fiber. Devices are now very performant! I VERY much appreciate everyone who helped us resolve the problem. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [July 1, 2025, 4:50pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985/10 "2025-07-01T16:50:20Z")
Thanks for the update. Saw this when it hit support yesterday and was curious what the root cause was going to be. ---
**Author:** ![nicholas.gutt](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nicholas.gutt/32/25670_2.png) [@nicholas.gutt](https://forum.inductiveautomation.com/u/nicholas.gutt)\ **Post date:** [July 1, 2025, 5:38pm UTC](https://forum.inductiveautomation.com/t/cip-protocol-and-ia-logix-driver/107985/11 "2025-07-01T17:38:11Z")
You are welcome. I have not interacted with support a lot, but the experience was world class. The collaboration was essential to resolve our problem and get our teams aligned.