ECU & Network Analysis on Highest Level

Analyzing ECUs and Networks with CANalyzer

CANalyzer is the comprehensive software tool with intuitive operation for analysis and stimulation of network communication. Use CANalyzer to check whether and what type of communication is occurring on the network. In addition to sending or recording data, interactive ECU diagnosis is also possible. For every application it offers powerful basic functions for beginners as well as extensive detailed functions for experienced users.


  • Intuitive operation
  • Easy observation, analysis and supplemention of the data traffic
  • Flexible analysis capabilities by configurable function blocks, e.g. Filter, Interactive Generator or Replay
  • Seamless logging of bus data and replay for offline analysis
  • Flexible programmable with CAPL, e.g. for extensive analysis tasks

Application Areas

Screenshots of some CANalyzer analysis windows
Intelligent CANalyzer analysis windows

As a CANalyzer user you can analyze the network communication of ECUs or entire systems at your work desk or right in the vehicle. These intelligent analysis windows support you:

  1. Trace Window for listing all network activities such as messages or error frames. For each message there is the possibility of displaying the individual signal values.
  2. Graphics Window for graphical online display for values transmitted in messages and diagnostic requests, such as rpm or temperature values, over a time axis.
  3. Statistics Window for displaying useful network and node statistics, e.g. bus load on node and frame levels, burst counter/duration, counter/rate for frames and errors, controller states.
  4. Data Window for displaying preselected data, eg. numeric or bar graph data.

Further CANalyzer windows and blocks:

  • Measurement setup for graphic representation and parameterization of function blocks and evaluation functions
  • Scope window for offline display of measurements of the network levels, logged with option .Scope
  • Interactive Generator for stimulating the networks and for easy sending of modified signals
  • Logging/Replay for logging and later analysis or replay of measurements
  • Triggers and filters to make specific reactions to network events and to reduce the volume of displayed or logged data
  • Write window for system messages and user-specific outputs from CAPL programs
Show more
Screenshot of CANalyzer diagnostics console

Using the Diagnostic Feature Set contained in CANalyzer, you can analyze diagnostic communication in accordance with the KWP2000 or UDS standard. Here, CANalyzer can be used as the diagnostic tester for ECU diagnostics; parameterization is via ODX or CANdelaStudio description files. In addition, a complete OBD-II Tester is already integrated in CANalyzer.


With this Application Note you get a detailed introduction into working with diagnostics in CANoe and CANalyzer. It presents the basic technical aspects and possibilities with the Diagnostic Feature Set, complements the help file of CANalyzer and may be used as a tutorial.

Show more
Screenshot of CANalyzer´s logging worklow
Logging workflow with CANalyzer

Use CANalyzer to log data and replay them for post-measurement analysis. The import/export functions allow time-independent processing of the logged bus communication.

Logging workflow with CANalyzer:

  • Logging is performed via special logging blocks in the measurement setup (1). You can also log directly from the Graphic Window (2) and Data Window (3).
  • The logged data can be played back into the system for offline analysis (4).


Show more
Screenshot CANalyzer Measurement Setup
Activation of the transmitting branch in the Measurement Setup Window to perform the desired stimulation.

With CANalyzer, you can observe, analyze and influence the data traffic of ECUs. Through preconfigured user interfaces, you send simple messages and signal values to your system. Based on this capability, stimulation with CANalyzer has several objectives:

  • Reproducible stimulation of your System Under Test (SUT)
  • Extension of test scenarios for analysis
  • Determination of control parameters
Show more

The 3 Most Common Examples of Use:

> ... with tips for users

> ... briefly & concisely


Show more

Highlights Version 15

Analysis Features

  • A time offset for offline source files can now be specified
  • Contents of different logging files can be read in sequentially
  • In the global logging configuration various attributes for header comments can be defined 
  • In the Graphic Window it is now possible to add a signal above selected signals, groups or common axis 

Security Features

  • Replay of secured PDUs is possible including automatic adjustment of security parameters
  • Back end status display in status bar shows if connection is available
  • Optimized search in Security Configuration Dialog to find security profiles easier

Diagnostics Features

  • Import and export of Variant Coding Data in the Variant Coding Window

Option Ethernet 

  • New Protocol Monitor shows a graphical representation of connections for communication and application layer protocols 

Special Function

Analyzing Despite of Security

The principle of the Security Manager - with and without access to OEM-specific backends
The principle of the Security Manager - with and without access to OEM-specific backends

Analyzing of Security-Protected ECUs and Networks

Security mechanisms in the ECU secure the vehicle and its functions against manipulation and unauthorized access. However, for analyzing and diagnostic purposes, it must be possible for an authorized individual to participate in vehicle communication during development and later operation.

With the Security Manager, Vector offers a uniform solution that is used identically for many Vector tools. In addition to CANalyzer also CANoe, CANape, vFlashIndigo and CANoe.DiVa use the Security Manager.


Supported Use Cases

  • Communication: SecOC − with only a focus on analysis
  • Diagnostics: Authentication
  • Diagnostics: Variant Coding
  • TLS: Simulation of Client and Server
  • TLS: TLS Observer using Master Secret
  • TLS: DoIP over TLS


  • IPsec: IKEv2 support for certificate based peer authentication, dead peer detection, IKE fragmentation and IKE rekeying
  • IPsec: Import of StrongSwan IPsec configurations
  • IPsec: Full control of the Security Policy Database

Training Class: Security with CANoe.Ethernet and Security Manager

This new course of the VectorAcademy starts with an overview of automotive security mechanisms and their implementation with the TLS, DTLS and IPsec protocols. The focus is the practical application of the Security Manager in CANoe.Ethernet for measuring, simulating and troubleshooting security-protected communication.

CANalyzer Options for Automotive

CANalyzer Basic Option

The CANalyzer basic version is a comfortable tool for analyzing CAN networks. The CANalyzer multibus concept allows to operate CAN, LIN, Ethernet, FlexRay, and MOST simultaneously, provided the corresponding option is applied.


  • Diagnostics support for CAN/CAN FD
  • CAN/CAN FD supported by CANoe options Scope and AMD/XCP
  • AUTOSAR support for CAN/CAN FD


  • Simulation, analysis and test of CAN/CAN FD systems
  • Easy integration of CAN FD specific functions as an extension to CAN
  • ECU functional and integration tests
  • Network integration tests
  • Gateway operation: simultaneous stimulation and analysis of CAN, LIN, Ethernet, FlexRay and MOST networks


Go to web page CAN/CAN FD technology


Show more

Option Car2X

Option Car2x is especially suitable for analysis of ECUs, which exchange information with other vehicles or the traffic infrastructure based on V2X application messages. Domain-specific measurement windows enable the effective analysis of communication across all protocol levels. Standards and protocols from the regions of China, the EU and the US released by GB/T (China), ETSI (EU) and IEEE (US) are supported. For the wireless standard, you can choose whether communication is to occur over WLAN IEEE 802.11p or 3GPP C-V2X PC5, where there are hardware solutions for both versions.

Show more

Option Ethernet

With the Ethernet option, you can expand CANalyzer to include support for Ethernet networks. The exclusive use of Ethernet interfaces prevents unwanted interference of the real-time Ethernet system by Windows or other applications. When using the VN5600 interface hardware family, it is also possible to monitor point-to-point connections, thus avoiding changes in the topology for measurement.

Show more

Option FlexRay

CANalyzer.FlexRay gives you an universal tool for analyzing distributed real-time systems. It covers all applications from simple network analysis to focused troubleshooting of complex problems. The multibus approach enables simultaneous operation of the CAN, LIN, MOST, Ethernet and FlexRay network systems.

The basic functions that are provided give you a wide variety of possible uses. They include:

  • Listing the bus data traffic (Tracing)
  • Graphic and text displays of signal values
  • Interactive sending of pre-defined PDUs and frames
  • Statistics on nodes and messages with the Cluster Monitor
  • Logging messages for later replay or offline evaluation
  • Well-organized display of cycle multiplexing, in-cycle repetition and PDUs in the analysis windows


Go to web page FlexRay technology

Show more

Option LIN

The CANalyzer Option LIN provides sophisticated analysis capabilities to monitor LIN networks. All network states and protocol errors are notified and interpreted in a simple way. The LIN communication can be logged in different file formats to perform offline analysis.


  • LIN support of CANalyzer Option Scope
  • LIN Statistics Monitor with useful network and node statistics
  • LIN diagnostics interpretation according to ODX or CANdela files

Analysis Features

  • Network analysis according to LDF Interpretation of LIN2.0,LIN2.1, LIN2.2 configuration commands
  • Interpretation of diagnostics according to ODX/CANdela files
  • Detailed error and event detection
  • Numerical and graphical visualization of signals
  • Configurable display panels
  • Network Management Window
  • Network and node statistics with LIN Statistics Monitor
  • Logging, replay, filter and trigger blocks

Node Simulation
A Master (or Slave node) can be easily simulated according to LDF. You can control a Master’s scheduler either interactively using the LIN Interactive Master block or by programming a CAPL script.

Trace Window for LIN
The Trace window for LIN not only displays LIN frames, errors and events, but also shows all relevant LIN timings.

Go to the LIN technology web page

Show more

Option MOST

CANalyzer.MOST is for analyzing the MOST bus with the familiar "look and feel" of the Vector tools. You can analyze all MOST channels. In addition, you can simultaneously include CAN networks in the analysis (multibus functionality).

The tool supports you in interactive analysis of MOST communication, in which you can analyze – very flexibly and dynamically – either the real system or pre-recorded log files with the help of various representation forms.

Furthermore, CANalyzer.MOST frees you of many routine tasks that you can describe in analysis scripts, and which can then be repeatedly executed by CANalyzer.MOST. They deliver reliable and reproducible analysis results.


  • Extensive disassembly of MOST messages in Trace Window
  • Chronological view of events in multi-bus systems (due to global synchronized clock)
  • Various ways to stimulate or stress MOST systems
  • Access to the Electrical Control Line (ECL)
  • Spy for Isochronous Channels: Streaming of the data to the PC, enabling a recording to hard disc and visualization with media players like VLC


Application Areas

  • Interactive and scripted analyses of MOST communication
  • Gateway Development: The pure MOST variant of CANalyzer.MOST may be combined in any desired way with CAN, LIN, FlexRay and Ethernet variants. Analyses can cover all bus systems relevant for your gateway ECU and are based on a single, synchronized global clock.

CANalyzer.MOST Features

The following table offers an overview of the features supported by CANalyzer.MOST:

MOST Feature
Control Channel
Asynchronous Channel (MDP)
        Raw packets
        MOST High Protocol (MHP)
Ethernet Channel (MEP)
System States (Light, Lock, System Lock, ...)
Audio/Synchronous Channels
        Allocation Table
        S/PDIF In/Out
        Streaming to PC
        Isochronous Channels
        Bus Load Control Channel
        Bus Load Asynchronous Channel
        Bus Load Ethernet Channel
        Unlock Generator
        ECL Stimulation Sequences
        Control Channel, Asynchronous Channel,
        Ethernet, System States
        Synchronous Channels
Hardware Interface

1 With VN2640 as interface  
2 Does not contain all channels, detailed information at the author of the format


  • MOST25 only with existing VN2610
  • MOST50 with OptoLyzer MOCCA compact 50e
  • MOST150 coax with VN2640 + MOST150 C-O Converter (K2L) or OptoLyzer MOCCA compact 150c (K2L)


Go to web page MOST technology

Show more

CANalyzer Options for Higher Application Protocols

Option J1939

CANalyzer.J1939 can be used wherever J1939 networks are developed, diagnosed, and tested. Networks can also be simulated to a limited extent. CANalyzer.J1939 can be used to monitor and debug other J1939 networks, since the SAE J1939 specification is the basis for NMEA 2000, ISO 11783, ISO 11992 (Truck & Trailer), FMS (Fleet Management System) and GB/T 27930 networks. In combination with the J1587 Option it offers a uniform approach to systems that extend across bus boundaries with a common time base.

Show more

Option J1587

The seamless integration of J1587 in CANoe/CANalyzer lets the user interact with these networks in a very simple, quick and reliable way. This includes protocol-specific representation in the Trace window. Moreover, by combining this option with other options, such as J1939 or LIN, entire systems can be analyzed or simulated with a single tool. This allows chronologically interrelated processes to be acquired and evaluated beyond bus boundaries.

Show more

Option CANopen

CANalyzer's powerful functionality together with the functional expansions for CANopen gives the user a tool that can be used both in the development of CANopen systems as well as their startup and maintenance. CANalyzer.CANopen makes high-performance, CANopen-specific functions for analysis and configuration available to the developer. This is a prerequisite for reliable and efficient interaction with CANopen networks.

Show more

CANalyzer Option for Measurement

Option Scope

Screenshot of option .Scope for CANalyzer
Option .Scope for CANalyzer

CANalyzer.Scope is an integrated oscilloscope solution achieved by combining a powerful 4-channel USB scope hardware with a standard Vector network interface. Up to 2 CAN FD or FlexRay networks or 4 LIN/sensor/IO signals can be simultaneously analyzed. The USB scope device is hardware synchronized with the network interfaces, so that all scope measurements have the same time base as CANalyzer.

Use Cases

  • Triggering of dedicated messages and their analysis for the networks CAN/CAN FD, FlexRay, LIN and A429
  • Trigger and measure different waveform of external signals (I/O)
  • Detect and trigger protocol errors, e.g. CAN Error Frames
  • ECU conformance testing according to OEM specifications
  • Proof of network design concepts (bus topology, cables, resistors)
  • Trace EMC problems and other physical effects (reflections, ringing, crosstalk)


CANalyzer Integration

The Scope option is tightly integrated into CANalyzer as a separate analysis window. This Scope window is divided in multi views providing user interfaces for configuration, data aquisition and post processing tasks. The most important views are the graph view of physical layer bus signals and the trace view showing a full protocol decode of data link layer. Both views are fully time synchronized with each other and can also be synchronized with other CANalyzer analysis windows such as Trace and Graphics.

The Scope option also allows the easily analysis of the network at a bit-level using either the interactive eye diagram or automated serial bitmask features. Both methods can be used in automated physical layers tests and are well-proven methods to quickly find network issues caused by adversely chosen network topologies, unfavourable cable charcteristics , EMC problems or incorrect network termination.

Scope Hardware Features

  • USB 3.0 oscilloscope PS5444D-034 (PicoScope)
  • 512 MS scope buffer
  • 1 GS/s maximum sampling rate (1 channel)
  • 500 MS/s sampling rate for 2 channels (e.g. CAN_H, CAN_L)
  • 4 input channels (2 CAN/CAN FD/FlexRay or 4 LIN/Sensor/IO)
  • Bus connection via Vector „Scope Bus Probe 300 MHz“ with DSUB-connector
  • The scope channels Ext. and Gen. are connected with a „Scope Trigger Y-Cable“ to HW-SYNC-input of Vector‘s network interfaces.


Further Information:

Show more

CANalyzer Options for Aerospace

Option A429

CANalyzer .A429 Screenshot including some analysis windows and panels

CANalyzer.A429 is ideal for the analysis of ARINC 429 buses and of individual devices on up to 32 channels. Regardless of whether raw data or physical quantities are required – CANalyzer.A429 provides powerful analysis functions on all levels. Users reach their goals quickly and also get a clear overview in complex network constellations.

Overview of Advantages

  • Easy monitoring, analysis and stimulation of the data traffic
  • Just a single tool is needed to access ARINC 429, CAN and AFDX®
  • Detect and correct fault situations during development, in integration and in maintenance

Symbolic Representation

ARINC 429 words for a bus can be described in a database. This involves assigning readable names to the ARINC 429 labels, and the data contents of the ARINC 429 words are also defined in detail. This not only includes the bit position within the ARINC 429 word, but also the data type and display name. For an interpreted display of physical parameters, you can also enter the units and define a conversion formula. A Database Editor is included with the product.

Display of Messages

The Trace Window lists the momentary ARINC 429 bus traffic clearly. When databases are available, the representation is symbolic – conversion formulas are automatically used. The layout of columns is user configurable, and three preconfigurable column layouts are available for quick toggling of the display. Refined search functions ensure that the user can quickly find all relevant information, even in cases of intensive bus traffic.

More Information:


(AFDX® is an Airbus registered trademark)

Show more

Option AFDX

CANalyzer .AFDX Screenshot including some analysis windows

CANalyzer.AFDX can be used efficiently for all needs related to startup and maintenance of AFDX® networks. Regardless of whether raw frames or payload contents are needed – CANalyzer.AFDX offers powerful analysis functions on all levels. Users quickly reach their goals and always have a clear picture of even complex network topologies.

Overview of Advantages

  • Easy observation of the data traffic and comprehensive network analysis
  • Flexible configuration of the measurement setup
  • Analysis of multiple buses
  • Access to CAN, AFDX® and digital or analog I/O with the one and the same tool

Hardware Interfaces

CANalyzer.AFDX optionally utilizes the VN5610A as USB interface or TTTech's PCI/PCIe variant AFDXEnd System T.

Symbolic Display via Databases

The AFDX® communication is described in ICD format. The aircraft manufacturer generally provides its suppliers with relevant description files. To ensure that this information is also usable in CANalyzer.AFDX, a converter is supplied that converts the ICD files into DBC files. The user adds these DBC files to a CANalyzer.AFDX configuration, which then enables access to symbolic information.

Message Display

The current AFDX® message traffic is shown in the Trace window. If databases are available, the display is symbolic and is based on information from the converted ICD files. A virtual link is then no longer visualized numerically by its ID, but instead by its name. The display of columns is user configurable, and three pre-configurable column layouts are available for quick switchover. Refined search functions ensure that the user does not lose sight of key information among the large number of messages.

More Information:


(AFDX® is an Airbus registered trademark)

Show more

Basic CANalyzer Option

CANalyzer .CANaero Screenshot including some analysis windows and the Interactive Generator Block

CANalyzer.CAN covers most use cases for ARINC 825 from simple network analysis to focused troubleshooting of complex problems. The multi-bus approach lets you simultaneously operate multiple channels, different bus systems such as CAN (ARINC 825), A429 (ARINC 429), AFDX® (ARINC 664) and Ethernet.

Overview of Advantages

  • Easy observation of data traffic and comprehensive network analysis
  • Flexible configuration of the measurement setup
  • Time-synchronous analysis of multiple buses
  • Support of the protocol ARINC 825
  • Open interfaces and database concept offer optimal support for proprietary protocols as well

CANalyzer.CAN may be combined with other CANalyzer options such as A429, AFDX, Ethernet and CANopen.
It is intuitively operated based on a displayed block diagram that graphically depicts the data flow from the bus over the PC interface to the various evaluation windows on the screen and to the log file. The system is parameterized in this block diagram. In addition, it is possible to place and configure function blocks here, such as filter, generator or replay blocks.


Basic functions offer an abundance of capabilities such as:

  • Listing of bus data traffic (Tracing)
  • Graphic and textual display of signal values
  • Interactive sending of predefined messages
  • Sending of logged messages
  • Statistics on messages
  • Statistics on bus loading and bus disturbances
  • Logging of messages for replay or offline evaluation
  • Generation of bus disturbances


  • A simple, intuitive user control concept
  • The programmability with CAPL
  • The capability to freely place function blocks in the Data Flow Plan
  • Bus-specific adaptations of diverse function blocks
  • Time synchronization when multiple buses are used
  • Symbolic object-oriented monitoring of communication by interpreting the various message formats in a Trace Window. Communication services such as Normal Operation Data, Emergency Events or Node Services are interpreted differently according to the specific service and are symbolically displayed.
  • A database with messages according to specification. Application-specific data may be stored in this database. Symbolic names may be assigned to all data.
  • Support of standard database formats and profile database formats

More Information:


(AFDX® is an Airbus registered trademark)

Show more


The professional variant provides all functions and extensions without limitations. It supports all use cases from simple observation of the network traffic to complex analysis, stimulation and testing of heterogeneous systems.

Detailed information on the scope of functions in the "CANoe/CANalyzer Feature Matrix" (PDF).

Show more

The expert variant is ideal for all standard applications, and it provides all functions and extensions without limitation. However, this variant does not support creating and executing CAPL programs.

Detailed information on the scope of functions in the "CANoe/CANalyzer Feature Matrix" (PDF).

Show more

The fundamental variant is suitable for simple analysis, and it provides all interactive standard functions for this purpose. However, it does not offer programmability, diagnostic functions or user control panels.

Detailed information on the scope of functions in the "CANoe/CANalyzer Feature Matrix" (PDF).

Show more

Product Descriptions

 Please note these CANalyzer system requirements:
Intel Core i7 or comparable
≥ 3 GHz
≥ 4 cores
Intel compatible
2 GHz
2 cores
CANalyzer benefits from higher clock rates rather than higher number of cores.
Memory (RAM)
≥ 32 GB
8 GB
Hard disk space
Depending on the options used and the operating system components.
Screen resolution
Full HD
1280×1024 pixels
Operating system*
Windows 10 64 bit (≥ version 1803)
Windows 10 64 bit (≥ version 1803)
* Not virtualized. Running in a virtual machine is possible but not tested.
Operation with Vector hardware may be affected by virtualization, e.g., higher latencies may occur


Show more

Do you have technical questions and are looking for suitable answers? Our KnowledgeBase provides the most important!

Show more

CANalyzer is available in these languages:

  • English
  • German
  • Japanese
Show more


CANalyzer Basic Workshops

Vector offers many different opportunities for you to build your knowledge of CANalyzer and broadening it. We recommend our CANalyzer Basic Workshop as an entry-level course in CANalyzer. It is best to take this basic course before attending our advanced training course. However, you may register for any of the courses independently.


Go ahead and take a look at our training portal to see an overview of all CANalyzer trainings.

Related Products

Benefit From Further Vector Solutions:

The Use of CAPL

Tips and tricks for CANoe and CANalyzer users - for beginners to professionals.

Go to Page

Developing and testing ECUs and entire networks on highest level.

Go to Page
Engineering Services for Testing

Test experts advise you in detail in your projects and deliver directly applicable test solutions on...

Go to Page