EEBUS Log Analyzer

Protocol linter and visual debugger for SPINE & SHIP

About

Find EEBUS protocol bugs before your customers do. Like ESLint for JavaScript or golangci-lint for Go, EEBUS Log Analyzer validates your SPINE & SHIP implementation against 1,500+ rules derived from the protocol specifications.

But it goes further than a linter: see message flows in an interactive timeline, track device state changes over time, and debug interoperability issues with visual tools that show you exactly what went wrong.

Why developers use it:

Catch spec violations early - Protocol rules are automatically checked against every message
Understand what happened - Timeline visualization shows request/reply pairs and state changes
Integrate into CI/CD - Export reports in SARIF or JUnit XML for automated validation
Debug faster - Payload explorer with inline explanations and anomaly highlighting
Collaborate - Share filter presets with your team to focus on the same issues

Current version: v1.0.0-RC1 2026-01-16

See It In Action

EEBUS Log Analyzer showing timeline view with message inspection

Interactive timeline with real-time message inspection and anomaly detection

Download

macOS

Apple Silicon • 18 MB

Key Features

Protocol Linting

Click to enlarge

Automatic anomaly detection across message flow

Anomaly Detection

1,500+ validation rules for SPINE & SHIP protocol compliance with browsable rule catalog and spec references.

UseCase Detection

Identify active UseCases (EVCC, LPC, OPEV, OSCEV, etc.) from capabilities and traffic.

State Reconstruction

Track device state changes with automatic diff detection and reference resolution.

CI/CD Reports

SARIF for GitHub Actions and VS Code, JUnit XML for CI pipelines, Markdown for documentation.

Visual Debugging

Click to enlarge

Payload explorer with field explanations

Interactive Timeline

Swimlane visualization with device columns, message pairing, and request/reply connector lines.

State Timeline Graphs

Interactive charts for numeric state values over time with synchronized hover.

Payload Explorer

Hierarchical payload viewer with inline field explanations and anomaly highlighting.

Device Model Browser

Explore entity hierarchies, features, subscriptions, and bindings.

Fast Navigation

Click to enlarge

Quick Filters with shareable presets

Quick Filters

Save filter combinations as one-click presets. Built-in templates for common scenarios like 'Errors Only'.

Filter Sharing

Copy filters as shareable strings. Paste and validate filters from colleagues with automatic compatibility checks.

Smart Filtering

Filter by message type, function, device, UseCase, severity, session, and errors.

Time Window

Histogram minimap for navigating large logs. Drag to select time ranges.

Platform & Setup

Click to enlarge

Multi-log tabs with data visualization

Multi-Log Library

Manage multiple log files with tabs, custom titles, search, and per-tab filter settings.

MCP Server

AI-assisted debugging via Model Context Protocol. Works with Claude, Cursor, and other MCP clients.

Cross-Platform

Native apps for macOS, Windows, Linux. Or run as a web server.

Guided Tour

Interactive walkthrough for first-time users with panel toggles and explanations.

Utilities

Log Format Tester

Validate your log format before importing. See exactly what gets parsed (Shift+T).

Session Focus

Focus on specific communication sessions with automatic time window filtering.

Keyboard Navigation

Arrow keys, Tab cycling, shortcuts (?, G, Shift+G) for efficient navigation.

Contextual Help

Help popovers throughout the interface explaining features and concepts.

Quick Start

1. Desktop App (Recommended)
  Download for your platform, launch, and click 'Open File' to select a log
2. Web Server Mode
  Run eebus-analyzer-cli --server
  Open http://localhost:33080 and drag-drop a log file

License

Free for evaluation, personal & academic use. Commercial use requires a license.
Contact for commercial licensing

Version History

v1.0.x 1 release

v1.0.0-RC1 2026-01-16

Added

Connection status banner with auto-reconnect when backend becomes unavailable (web mode only)
In-app changelog viewer showing what's new in each release (About dialog)
Quick filters for common scenarios: "Errors Only", "Protocol Issues", "UseCase Compliance"
Filter sharing to export and import filter configurations
LPC Implementation Guideline validation rules for timing and sequencing requirements

Changed

40+ UseCase definitions verified and corrected against official EEBUS specifications (EVCC, LPC, LPP, MPC, MGCP, CEVC, and many more)
Anomaly messages now show actual constraint values (e.g., regex patterns) instead of generic text

Fixed

Device address validation (DAC-002) now correctly aligns with SPINE specification
False positives for address mismatch when destination is unknown
False positives for HVAC client actor entity type validation
False positives for measurement value checks when valueState indicates unavailability
False positives for unanswered requests when ackRequest is not set

v0.9.x 3 releases

v0.9.2 2026-01-13

Fixed

Scenario badges now correctly appear on value data items (e.g., limit values) in addition to description data
JSON payload fields now display in their original protocol order instead of alphabetically sorted
Notes filter count now updates immediately after adding or removing message notes
Database error when opening log files analyzed with older versions

v0.9.1 2026-01-12

Added

Redesigned Data Graphs view with expand/collapse mode per device pair, horizontal chart layout when expanded, and auto-expand for single device pair
Optional feature support in UseCase timeline charts showing scenario-specific data flows
Scenario badges now appear on array item rows for clearer visual association with data

Fixed

Payload explorer selection now persists when switching between log tabs, views, and inspector tabs
Data Graphs view scrolling and chart sizing now work correctly with consistent card widths
Data Graphs labels now show proper names instead of "ID 0 [unknown]" for multi-entity devices
Chart legend labels and device name pills truncate properly instead of overflowing

v0.9.0 2026-01-11

Added

SmartEnergyManagementPs XSD restriction validation (SEMPS-001 to SEMPS-009) detecting forbidden fields in power sequence data per SPINE Resource Specification
Discovery address XSD restriction validation (DSC-013, DSC-014) detecting forbidden device field in entity/feature addresses
More anomaly checks now show the exact location in the payload where they reference to
SHIP protocol explanations in PayloadExplorer with connection state visualization, message type documentation, field descriptions, and error code meanings
SHIP 1.1.0 RC1 support with key material exchange states and certificate lifecycle management documentation
SPINE specification support from 1.0.0 through 1.4.0 Beta 2 with version annotations showing when types were introduced
Message notes for annotating individual messages with filtering and note indicator dots
Entity filtering in sidebar with device-grouped entity type selection and exclude support
Log Format Tester modal (`Shift+T`) for validating log lines before importing
Anomaly type exclusion filter with red pill badges to hide specific anomaly types
Scenario detection anomalies: USC-025 (unannounced scenario data) and USC-026 (hollow announced scenario)
Scenario badges in PayloadExplorer showing which UseCase scenarios each data item belongs to
NID v1.0.0 UseCase definition for device identification
Highlight/Filter toggle replacing the "Only" button for clearer anomaly filtering modes
Device filtering for anomalies to focus analysis on issues affecting specific devices
Enhanced filter help popovers explaining filter logic (OR within sections, AND between sections, exclude precedence)
MCP entity filtering, notes filtering, and `exclude_type` parameter for message and anomaly queries
Increased maximum upload size from 1GB to 2GB

Changed

Filter sidebar reordered to follow SPINE hierarchy: Device Pairs, Protocol, UseCases, Entities, Classifiers, Functions, Anomalies, Notes
Guided tour enhanced with Help menu explanation and detailed descriptions for each step

Fixed

White flash on page reload now uses correct theme background immediately
Dark overlay flash in light mode during filter changes
Filter sidebar visibility (toolbar/minimap toggles) now persists across page reloads
SHIP message selection now persists when switching tabs or reloading
Message pairing for logs where reply appears before request due to async logging
Filter restoration no longer applies stale values from previous log files
Filter state properly cleared when deleting a log file
Import progress now transitions smoothly when analysis completes
Anomaly UseCase filter now independent from message UseCase filter
Device pair filtering for anomalies now shows correct results
UseCase "referenced" badge now only shows for the most specific matching entity path
Scrolling in filter sidebar, inspector, and payload explorer at small window heights
Empty log files now display gracefully instead of invalid data
Timestamp ordering issues for logs with mixed timezone formats
Python byte literal log parsing with ISO 8601 timestamp formats
CSV format direction detection (`in`/`out` markers)
Device address format validation (DAC-002) now checks wire payload instead of database columns
UseCase same-entity dependency validation now correctly respects actor field
Layout shift when filter reset button appears

v0.8.x 1 release

v0.8.0 2026-01-06

Added

Support for multi-line JSON log format (pretty-printed logs now parse correctly)
Address enrichment in PayloadExplorer showing entity types, feature roles, and active UseCases
Scenario enrichment displaying names and mandatory status (M) instead of just IDs
UseCase short name badges in inspector UseCases tab for quick correlation with timeline
Full UseCase name tooltips throughout the interface
Feature access validation (FAC-001, FAC-002) detecting cross-layer access and wrong actor errors
UseCase mandatory dependency validation (USC-022, USC-023) for SHALL/SHOULD dependencies
Duplicate identificationType validation (EVCC-026) for EVCC v1.1.0

Fixed

Reduced false positives for ELEMENTS usage in filters (now correctly allows delete and partial read contexts)
Reduced false positives for multi-zone HVAC systems in UseCase entity alignment validation
Message counter sequences now tracked per-connection, avoiding false positives for devices with per-peer counters
Heartbeat counter sequences now tracked per entity:feature, fixing false positives for multi-entity devices
CEM actor now recognized as valid for OPEV client role per specification
Anomaly catalog now groups UseCase rules by version (e.g., EVCC v1.0.1 vs v1.1.0 RC1)
External links in About dialog now open in system browser on desktop
Improved contrast for danger elements, mandatory badges, and function filter tags in dark mode
Long function names now truncate with tooltip in message bubbles instead of overflowing
Anomaly counts now update correctly when hiding device pairs in filters
Update notification no longer shows after installing the update
Payload enrichment text now uses distinct purple color for better visibility
Related request field now correctly populated in API responses

v0.7.x 2 releases

v0.7.1 2026-01-02

Added

Support for structured JSON log format (slog-style)
Field writeability validation (WRT-002, WRT-003) to detect writes to read-only fields
New anomaly rules with specification references for LPC, LPP, MPC, and MGCP UseCases

Fixed

Selected message now preserved when switching between tabs
Reduced false positives for "message counter out of order" anomalies in logs with async logging
SHIP message device addresses now correctly resolved in protocol view
Anomaly marker positions correctly aligned for all log types
Device inference improved for logs where both devices are on localhost
Drag-and-drop reliability improved on desktop app
Import progress now visible in library list view

v0.7.0 2025-12-27

Added

Multi-log library with tabbed interface for working with multiple log files simultaneously
Per-tab state isolation: filters, time window, and view settings persist independently per tab
Custom log titles and descriptions for easier identification (`E` shortcut or header button)
Library search to filter logs by title, filename, description, or date (`/` shortcut)
Table list view as alternative to card grid in library (`V` shortcut to toggle)
Reprocess feature to re-run analysis without re-parsing (useful after updates)
Library guided tour for first-time users
Keyboard shortcuts for tab navigation (`Ctrl+T`, `Ctrl+W`, `Ctrl+1-9`, `Ctrl+Shift+[/]`)
Keyboard navigation for library view and dropdown menus
Message selection history with back/forward navigation (`Alt+Arrow` keys)
Discovery message navigation links in Device tab to jump to entity discovery messages
Duplicate and rapid-fire request detection (BND-004, BND-005, SRN-003 anomalies)
10 new MCP tools: `list_logs`, `select_log`, `explain_function`, `explain_error`, `explain_reference_chain`, `explain_type`, `get_reported_usecases`, `get_anomaly_catalog`, `get_subscriptions_bindings`, `get_connection_mappings`
Linux desktop builds with dual WebKit support (GTK 4.0 for Ubuntu 22.04/Debian 12, GTK 4.1 for Ubuntu 24.04+/Fedora/Arch)
Opt-in crash reporting for improved stability (disabled by default, enable in Settings)

Changed

Default ports changed from 8080/8081 to 33080/33081 to avoid conflicts with common dev tools

Fixed

Anomaly highlighting now works for heartbeat, result error, and response anomalies in PayloadExplorer
Heartbeat anomalies now correctly detected in logs that capture session start
Anomaly marker positioning for logs with millisecond-precision timestamps
Memory usage and performance improved for log files with large amount of anomalies
macOS desktop app now properly notarized (eliminates security warnings)

v0.6.x 1 release

v0.6.0 2025-12-23

Added

Guided tour for first-time users with panel toggle and keyboard explanations
Contextual help popovers throughout the interface
Keyboard navigation: arrow keys for messages, Tab for panels, shortcuts (?, G, Shift+G)
Anomaly catalog browser showing all 1507 validation rules with descriptions and spec references
SPINE protocol version display in session overview
UseCase version display in inspector
Automatic daily update check with header notification
Configurable message limit in settings
Swap device order button in timeline column headers
Truncation indicator when time window exceeds 10,000 messages
Missing field markers in payload explorer
30+ new anomaly checks: message ordering (MCNT-006), address symmetry (ADDR-007), UseCase consistency (USC-020 to USC-024), data completeness (PRD-001 to PRD-005), feature role validation (ROLE-003 to ROLE-012)
License validation with evaluation badge for unlicensed users
Session focus to filter messages by individual connection sessions

Changed

Session focus integrated into device pairs filter for unified filtering
Improved UI styling with better light theme contrast and message bubble appearance

Fixed

Message pairing for logs with identical timestamps
Reverse chronological log handling
Anomaly marker clustering causing infinite loops
Anomaly-affected fields not highlighting in payload explorer

v0.5.x 3 releases

v0.5.2 2025-12-16

Added

Linux ARM64 desktop build support

Fixed

Time range picker showing inverted dates (end before start) for logs not in chronological order
Timeline messages not loading for certain log files (logs with all messages at same timestamp)

v0.5.1 2025-12-16

Added

Time range selection modal for precise start/end time entry (click the time display)
Bidirectional cross-filtering between message filters and anomaly filters
JSON field order validation (ORD-001) to detect non-standard field ordering
UseCase ID badges in payload and reference views for quick context
Improved log format detection with support for more timestamp patterns

Changed

Default time window increased from 5 to 15 minutes for better overview
Improved visual contrast for badges with solid backgrounds
Consistent styling between Source and Explorer views in Payload Explorer

Fixed

Stale histogram data after uploading a new log file
State diff display for write messages now shows correct before/after states
Time window resize no longer snaps back unexpectedly
Short logs (under 5 minutes) now display correctly without minimap issues
Nested content in state diffs now fully highlighted when parent is added/removed
ScaledNumberType values compared semantically (10.0 equals 10)
Light theme: paired message borders now visible
Linux desktop: crash on window close prevented

v0.5.0 2025-12-15

Added

Native desktop application (macOS, Windows, Linux) with native file dialogs
Settings modal for default time window and theme preference (desktop: also MCP server)
Payload Explorer with field explanations, UseCase context, and inline anomaly highlighting
Collapsible side panels for Graphs, Device Model, and Anomalies
Window position and size persistence (desktop app)
Custom data directory support with `--data-dir` flag for server mode
Affected paths in anomalies showing exactly which fields have issues

Changed

Improved button icons for fullscreen toggle and device swap buttons
Better responsive behavior with auto-hide inspector on narrow windows
More accurate state reconstruction respecting session boundaries

Fixed

Default time window now correctly uses user settings instead of hardcoded 5 minutes
Clicking inside the minimap time window now scrolls the timeline properly

v0.4.x 1 release

v0.4.0 2025-12-13

Added

CSV log format support (auto-detected)
Persistent filters, time window, and inspector width across sessions
Anomaly type filter with severity and category options
Anomaly summary modal for quick issue overview
Scroll-to-message button in inspector
Resizable inspector panel (remembers your width)
Click anywhere in minimap to jump to that point
Bucket time size indicator in histogram
Version update check in About dialog
Website link in About dialog

Changed

Improved message pair highlighting on hover
Consolidated message counter gaps into single anomalies
Extended license to include academic use

Fixed

Temporal filtering issues
Grid layout problems
Subscription handling
Various bug fixes

v0.3.x 1 release

v0.3.0 2025-12-01

Added

macOS code signing and notarization
SARIF export for GitHub Code Scanning and VS Code
JUnit XML export for CI/CD pipelines
Session detection with boundary markers
Duplicate message removal
OHPCF time field validation

Changed

Improved message counter gap detection
More stable MCP server connections

v0.2.x 1 release

v0.2.0 2025-11-15

Added

Collapsible toolbar with filter summary bar
Support for full SHIP message log format
Support for Python byte literal log format
Performance profiling with --pprof flag
System theme preference support

Fixed

Various crash fixes and UI improvements

v0.1.x 1 release

v0.1.0 2025-11-01

Added

~1140 protocol validation rules
UseCase detection (EVCC, EVSECC, LPC, LPP, MPC, etc.)
State reconstruction and timeline
Interactive timeline with device pair columns
Color-coded messages and connector lines
Inspector panel with payload viewer
Entity/feature hierarchy browser
MCP server support