SORBA RESPA MONITORING SYSTEM
System Reference & Configuration Guide
NB Industries — ICT & Systems Engineering
Last Updated: March 2026
1. System Architecture
Data flows from mining machinery through the following pipeline:
RESPA Advisor+ 2.0 → CAN Bus → Senquip ORB-C1-G (4G LTE) → SenquipConnect → MQTT (8883) → Sorba Edge Server → InfluxDB → Grafana Dashboards
| Component |
Details |
| Senquip ORB Model |
ORB-C1-G (4G LTE CAT-M1) |
| ORB Serial |
RR2EW78BF |
| RESPA Model |
Advisor+ 2.0 (Firmware v2.0.3) |
| Sorba Platform |
Sorba Edge (SDE) — Trial License |
| Database |
InfluxDB — sorba_sde |
| Measurement |
Respa.RR2EW78BF.data |
| Dashboard |
Grafana (Sorba-bundled) |
| CAN Protocol |
J1939 — PGN 63649 (filter status) |
2. Server Configuration
2.1 Network
| Parameter |
Value |
| Hostname |
sorba |
| Internal IP |
192.168.1.206/23 |
| External IP (WARP) |
43.245.171.129 |
| CloudflareWARP Interface |
100.96.0.1/32 |
| DNS Domain |
sorba.nbindustries.com.au (pending DNS A record) |
| Search Domain |
nbi.local |
2.2 Service Ports
| Port |
Service |
Access |
| 443 |
Grafana Dashboard (via nginx) |
External via port forward |
| 8883 |
MQTT TLS (Mosquitto) |
External via port forward |
| 1883 |
MQTT (Mosquitto) |
Internal only |
| 8080 |
Grafana Direct |
Localhost only (iptables) |
| 8086 |
InfluxDB |
Localhost only |
| 8096 |
Sorba Core API |
Localhost only |
| 8095 |
Sorba Service |
Localhost only |
| 3050 |
Sorba Service |
Localhost only |
| 8074 |
Sorba Service |
Localhost only |
| 5556 |
Sorba Service |
Localhost only |
| 3019 |
Sorba Service |
Localhost only |
| 9006 |
Sorba Service |
Localhost only |
| 8089 |
Sorba Service |
Localhost only |
| 20241 |
Cloudflared Metrics |
Localhost only |
2.3 Cloudflare Configuration
| Component |
Details |
| WARP Client Tunnel |
Sorba_VM — Device management & outbound traffic |
| Cloudflared Tunnel |
sorba-office — Tunnel ID: 2651e5ab-81b2-4afe-9597-be431574a647 |
| Zero Trust Team |
nbindustries.cloudflareaccess.com |
| WARP Split Tunnel Excludes |
198.41.192.0/24, 198.41.200.0/24 (Cloudflare edge IPs) |
| CIDR Route |
192.168.1.206/32 via sorba-office (for SSH via WARP) |
3. Login Credentials
3.1 Sorba Platform
| Service | Username | Notes |
| Sorba UI | bradley.houghton@nbindustries.com.au | https://192.168.1.206 — Workspace, tags, data logging |
3.2 Grafana — System / API
| Service | Username | Notes |
| Grafana Super Admin | sorba_admin | API & admin access — all orgs |
| Grafana Admin | bradley.houghton@nbindustries.com.au | Personal admin login — not recorded here |
| SSH | bradley | ssh bradley@192.168.1.206 |
| InfluxDB | (no auth) | Database: sorba_sde |
| MQTT | See Sorba certs | /opt/sdc/certificate_manager/certs/NBI/ |
3.3 Grafana — Customer Viewer Logins
These are the logins given to customers. Each is restricted to their org only.
| Org | Site | Login | Notes |
| Org 2 | NBI | nbi_viewer | NBI fleet dashboards |
| Org 3 | BMA | bma_viewer | BMA fleet dashboards |
| Org 4 | Glencore | glencore_viewer | Glencore dashboards |
| Org 5 | Goonyella Riverside | goonyella_user | Goonyella dashboards |
| Org 6 | Peak Downs | peakdowns_user | Peak Downs dashboards |
| Org 7 | Caval Ridge | cavalridge_user | Caval Ridge dashboards |
| Org 8 | Saraji | saraji_user | Saraji dashboards |
| Org 9 | Hay Point | haypoint_user | Hay Point dashboards |
4. Grafana Organisations & Dashboards
| Org ID |
Org Name |
Dashboards |
| 1 |
Main Org. |
RESPA Advisor - RR2EW78BF |
| 2 |
NBI |
RESPA Advisor, NBI Fleet Overview, NBI Master Operations |
| 3 |
BMA |
BMA Fleet Overview |
| 4 |
Spare |
Spare Fleet Overview |
| 5 |
Goonyella Riverside |
Goonyella Riverside Fleet Overview |
| 6 |
Peak Downs |
Peak Downs Fleet Overview |
| 7 |
Caval Ridge |
Caval Ridge Fleet Overview |
| 8 |
Saraji |
Saraji Fleet Overview |
| 9 |
Hay Point |
Hay Point Fleet Overview |
Note: nbi_admin is added to all orgs as Admin. Customer-specific logins are restricted to their org only.
5. RESPA Dashboard Panel Layout
5.1 Alarm Status Row
| Panel |
ID |
Data Source |
Thresholds |
| Pressure Alarm |
61 |
CAN.pressure_alarm |
0=Normal (green), 1+=Alarm (red) |
| CO2 Alarm |
62 |
CAN.co2_alarm |
0=Normal (green), 1+=Alarm (red) |
| Dust Alarm |
63 |
CAN.dust_alarm |
0=Normal (green), 1+=Alarm (red) |
| PFX Status |
64 |
CAN.pfx_status |
0=Disconnected, 1=Connected |
| Inlet Valve |
65 |
CAN.inlet_valve |
Value mapping |
| Outlet Valve |
66 |
CAN.outlet_valve |
Value mapping |
| Tamper (Light) |
67 |
DAS_Tag_Group.light |
0-49 lux=SEALED (green), 50+=TAMPER (red) |
5.2 Live Measurements
| Panel |
ID |
Data Source |
| CO2 Concentration |
1 |
CAN.co2_ppm (gauge) |
| Dust Concentration |
2 |
CAN.dust_ugm3 (gauge) |
| Speed |
3 |
DAS_Tag_Group.gps_speed (stat) |
| Temperature |
4 |
DAS_Tag_Group.ambient (stat) |
5.3 Device Health
| Panel |
ID |
Data Source |
Thresholds |
| Cellular Signal (RSSI) |
81 |
DAS_Tag_Group.gsm_rssi |
<-100 red, -100 to -85 orange, -85 to -70 yellow, >-70 green |
| Light Level (Tamper) |
82 |
DAS_Tag_Group.light |
<50 green, 50-200 yellow, >200 red |
| GPS Fix |
83 |
DAS_Tag_Group.gps_fix |
0=No Fix (red), 1=2D (yellow), 2=GPS (green) |
| Satellites |
84 |
DAS_Tag_Group.gps_nsat |
<4 red, 4-8 yellow, >8 green |
| GPS Accuracy (HDOP) |
85 |
DAS_Tag_Group.gps_hdop |
<5 green, 5-10 yellow, >10 red |
| ORB Battery Voltage |
86 |
DAS_Tag_Group.vsys |
<3.3V red, 3.3-3.7V orange, >3.7V green |
| Cellular Signal Trend |
87 |
DAS_Tag_Group.gsm_rssi |
Timeseries chart |
| Light Level Trend |
88 |
DAS_Tag_Group.light |
Timeseries chart |
6. Decoded Data Fields
6.1 Base64 Status Fields (cp8-cp13)
| Field |
Description |
Example Decoded Value |
| cp8 / cp8_code |
PFX Connection Status |
Disconnected (code 0) |
| cp9 / cp9_code |
Pressure Alarm Text |
Low Pressure Alarm (code 0) |
| cp10 / cp10_code |
CO2/Dust Status |
Normal (code 1) |
| cp11 / cp11_code |
CO2/Dust Status |
Normal (code 0) |
| cp12 / cp12_code |
Valve State |
Opened (code 0) |
| cp13 / cp13_code |
Valve State |
Opened (code 1) |
6.2 Key Numeric Fields
| Field |
Description |
Unit |
| CAN.co2_ppm |
CO2 concentration |
ppm |
| CAN.dust_ugm3 |
Dust concentration |
µg/m³ |
| CAN.diff_pressure |
Differential pressure |
Pa or inWC |
| CAN.target_pressure |
Target pressure setpoint |
Pa or inWC |
| CAN.high_press_threshold |
High pressure alarm threshold |
Pa or inWC |
| CAN.low_press_threshold |
Low pressure alarm threshold |
Pa or inWC |
| CAN.high_co2_threshold |
High CO2 alarm threshold |
ppm |
| CAN.high_dust_threshold |
High dust alarm threshold |
µg/m³ |
| DAS_Tag_Group.vin |
Vehicle supply voltage |
V (12-28V typical) |
| DAS_Tag_Group.vsys |
ORB internal LiPo battery |
V (3.7-4.2V typical) |
| DAS_Tag_Group.vsys2 |
ORB secondary voltage |
V |
| DAS_Tag_Group.gsm_rssi |
Cellular signal strength |
dBm |
| DAS_Tag_Group.light |
Light sensor (tamper) |
lux |
| DAS_Tag_Group.ambient |
Internal ORB temperature |
°C |
| DAS_Tag_Group.gps_lat |
GPS Latitude |
° |
| DAS_Tag_Group.gps_lon |
GPS Longitude |
° |
| DAS_Tag_Group.gps_speed |
GPS Speed |
km/h |
| DAS_Tag_Group.gps_altitude |
GPS Altitude |
m |
| DAS_Tag_Group.gps_hdop |
GPS Horizontal Dilution of Precision |
|
| DAS_Tag_Group.gps_nsat |
GPS Satellite count |
|
| DAS_Tag_Group.gps_fix |
GPS Fix status (0/1/2) |
|
| DAS_Tag_Group.gps_cog |
GPS Course over ground |
° |
7. Useful Commands
7.1 Data Pipeline
| Task |
Command |
| Latest data point |
influx -execute 'SELECT * FROM "Respa.RR2EW78BF.data" ORDER BY time DESC LIMIT 1' -database 'sorba_sde' |
| Check light sensor |
influx -execute 'SELECT last("DAS_Tag_Group.light") FROM "Respa.RR2EW78BF.data" WHERE time > now() - 5m' -database 'sorba_sde' |
| List all fields |
influx -execute 'SHOW FIELD KEYS FROM "Respa.RR2EW78BF.data"' -database 'sorba_sde' |
| Check CAN fields |
influx -execute 'SHOW FIELD KEYS FROM "Respa.RR2EW78BF.data"' -database 'sorba_sde' | grep -i "CAN" |
7.2 Service Management
| Task |
Command |
| Sorba services status |
sudo supervisorctl status |
| Restart cloudflared |
sudo systemctl restart cloudflared |
| WARP status |
warp-cli status |
| WARP connect/disconnect |
warp-cli connect / warp-cli disconnect |
| Cloudflared logs |
sudo journalctl -u cloudflared --since "1 hour ago" --no-pager |
| Nginx reload |
sudo nginx -t && sudo systemctl reload nginx |
| Disk usage |
df -h / |
| Journal cleanup |
sudo journalctl --vacuum-size=200M |
7.3 Grafana API
| Task |
Command |
| List orgs |
curl -sk -u sorba_admin:'sbrQp10.' https://192.168.1.206/dashboard/api/orgs |
| List dashboards (org 2) |
curl -sk -u sorba_admin:'sbrQp10.' -H 'X-Grafana-Org-Id: 2' 'https://192.168.1.206/dashboard/api/search?query=' |
| Get dashboard JSON |
curl -sk -u sorba_admin:'sbrQp10.' https://192.168.1.206/dashboard/api/dashboards/uid/respa-rr2ew78bf |
| List org users |
curl -sk -u sorba_admin:'sbrQp10.' https://192.168.1.206/dashboard/api/orgs/2/users |
8. Firewall & Port Forwarding
8.1 Router Port Forwards
| External Port |
Internal IP |
Internal Port |
Protocol |
Service |
| 443 |
192.168.1.206 |
443 |
TCP |
Sorba Dashboard (HTTPS) |
| 8883 |
192.168.1.206 |
8883 |
TCP |
MQTT TLS (Senquip) |
8.2 iptables Rules (Localhost Only)
The following ports are restricted to localhost only via iptables: 8096, 8095, 3050, 8080, 8074, 5556, 3019, 9006, 8089. External access to these services is through nginx reverse proxy on port 443.
9. Outstanding Items
| Item |
Priority |
Status |
| Sorba production license |
High |
Contact Sorba for permanent license (trial resets every 2 hours) |
| DNS A record for sorba.nbindustries.com.au |
High |
Request sent to DNS contractor → point to 43.245.171.129 |
| PGN 63649 filter data decoding |
Medium |
Waiting for cab test with filter installed |
| WARP SSH from home |
Medium |
CIDR route set — install WARP client on home PC |
| Nginx hostname update |
Low |
Add sorba.nbindustries.com.au to nginx server_name after DNS |
| Disk space investigation |
Low |
25GB in /usr/share (vision_service ML venvs) — investigate if removable |
| SSH brute force mitigation |
Low |
Frequent kex_exchange_identification errors from external IPs |
10. MQTT Certificate Paths
| File |
Path |
| CA Certificate |
/opt/sdc/certificate_manager/certs/NBI/ca.crt |
| CA Key |
/opt/sdc/certificate_manager/certs/NBI/ca.key |
| Client Certificate |
/opt/sdc/certificate_manager/certs/NBI/client.crt |
| Client CSR |
/opt/sdc/certificate_manager/certs/NBI/client.csr |
| Client Key |
/opt/sdc/certificate_manager/certs/NBI/client.key |