A production separator has one job that can fail in two opposite directions. If liquid escapes out of the top gas outlet, that is liquid carryover; if gas escapes out of the bottom liquid dump, that is gas blowby. Both come down to losing control of the liquid level, but at opposite ends of the vessel, and each damages very different downstream equipment. Understanding them as a matched pair is the fastest way to reason about separator upsets and to design the level and dump logic that prevents both.
Liquid Carryover & Gas Blowby in one line: Liquid carryover is when liquid droplets leave a separator through the gas outlet, usually because the liquid level is too high or the gas rate exceeds the vessel's separation capacity. Gas blowby is the opposite: gas breaks through the liquid dump valve when the liquid level drops too low, sending high-pressure gas into the downstream liquid system.
Carryover happens at the top of the separator when liquid droplets are not fully knocked out of the gas before it leaves. The two most common causes are a liquid level that has climbed too high, shrinking the gas space and the mist extractor's ability to work, and a gas rate that is simply too high for the vessel, so droplets are entrained faster than they can settle or coalesce. Foaming crude, slug flow from the well, and a fouled or damaged mist pad all make carryover worse by putting more liquid into the gas stream than the internals can catch.
The consequences show up downstream in the gas system. Liquid slugs hitting a compressor can cause severe mechanical damage, since compressors are built to move gas, not incompressible liquid. Carried-over liquid fouls dehydration units, contaminates glycol, floods fuel gas systems, and can trip or damage downstream equipment that assumed dry gas. Even mild, continuous carryover degrades product quality and steals liquid volume that should have been measured and sold as oil or condensate.
The defenses against carryover are a properly sized vessel, effective mist extraction, and tight high-level control. Operationally, the level must be held below the point where the gas space is compromised, and the vessel must not be run above its rated gas throughput. When rate or level pushes toward the limit, the correct responses are to shed gas rate, dump liquid faster, or route to a knockout, all of which depend on seeing the level and rate early.
Blowby is the mirror image and, in many operations, the more dangerous of the two. It happens when the liquid level in the separator falls low enough that the liquid dump valve, opening on a low level or stuck open, sends high-pressure gas straight through the liquid outlet instead of liquid. Because the separator is at high pressure and the downstream liquid system, such as a tank, a heater treater, or a lower-pressure vessel, is not, that gas breakthrough can over-pressure and rupture equipment that was never rated for separator pressure.
The usual trigger is losing liquid inventory faster than expected: a dump valve that fails open or leaks, a slug of gas arriving from the well, a level controller that opened the dump too far, or simply running the level too low with no margin. Once the interface reaches the dump nozzle, gas follows the path of least resistance and blows through. In a three-phase separator the same failure can also send oil out the water leg or water out the oil leg when the interface is lost, contaminating both streams.
This is exactly the scenario that low-level shutdown protection exists to catch. A low-low level should close the dump or trip the inlet before the interface reaches the outlet, and safety standards for surface facilities treat gas blowby into a lower-rated downstream vessel as a primary hazard to be protected against. The practical defenses are a reliable low-level trip, a dump valve that fails to a safe position, and enough retained liquid inventory that a brief upset does not immediately uncover the outlet.
Because carryover and blowby are opposite ends of the same level range, preventing them is fundamentally about keeping the liquid level inside a safe band and reacting before it leaves that band. The normal control level sits in the middle; a high alarm and high-high trip guard the carryover end, and a low alarm and low-low trip guard the blowby end. The dump valve modulates to hold the normal level, while the trips act as an independent layer that closes the dump or the inlet when the modulating control cannot keep up.
A cloud SCADA platform makes this protection visible and auditable across sites that are often unmanned. Merobix brings the separator level, the dump valve position, the inlet and gas rates, and the pressure into one live view, so an operator watching a level trend fall toward the low alarm can see the dump valve is still open and intervene before blowby occurs. The same view catches a level climbing toward the high alarm alongside a rising gas rate, the classic setup for carryover, and lets the operator shed rate or open the dump before liquid reaches the mist extractor.
The historized data is just as valuable for finding the near-misses that do not trip. Repeated brief low-level excursions point to a dump valve that is oversized, sticking, or leaking; repeated high-level events during production surges point to a vessel running near its capacity or to slugging wells that need a slug catcher. By trending level against valve position and flow over time, operators can tune the level band, size and stroke the dump valve correctly, and set alarm margins that give real reaction time rather than firing after the upset has already reached the outlet.
Liquid carryover is liquid leaving the separator through the top gas outlet, caused by too high a liquid level or too high a gas rate. Gas blowby is gas leaving through the bottom liquid dump, caused by the liquid level dropping too low so gas breaks through the dump valve. They are opposite failures at opposite ends of the vessel, and each threatens different downstream equipment.
The separator operates at high pressure, but the equipment downstream of the liquid dump, such as tanks and heater treaters, is usually rated much lower. If the liquid level drops to the dump nozzle, high-pressure gas blows straight through into that low-rated equipment and can over-pressure or rupture it. That is why a reliable low-level shutdown is a primary safety protection on separators.
SCADA holds the separator level inside a safe band using the dump valve, with high and low alarms and independent high-high and low-low trips guarding each end. A cloud platform lets operators watch level, dump valve position, and flow in real time so they can react before an upset reaches the gas outlet or the liquid dump, and the historized trends reveal sticking valves or slugging wells behind repeated excursions.
Merobix reads your field devices into a cloud SCADA - the real thing behind these terms, live in days from any browser.