How to Simulate Modbus Devices for Testing: 10 Free Tools Compared

You are developing a SCADA system, configuring a PLC, or building an HMI — but the field devices are not available yet. The energy meters, VFDs, temperature sensors, and I/O modules are still on order, or they are installed at a remote site you cannot access. A Modbus simulator solves this. It runs on your computer and pretends… Read More »

Zakaria El Intissar

IEC 60870-5-104 Type IDs Explained: Complete Reference Guide

Every ASDU (Application Service Data Unit) in IEC 60870-5-104 contains a Type ID — a single byte that defines what kind of data the message carries. It tells the receiving station whether the message contains a single-point indication, a measured value, a command, a counter, or a system message. The Type ID is the first byte of every… Read More »

Zakaria El Intissar

CIP Object Model Explained: Classes, Instances, Attributes, and Services

Every CIP device — whether it is an Allen-Bradley PLC, a variable frequency drive, a remote I/O module, or a safety controller — organizes its data using the same object model. Understanding this model is the key to configuring, programming, and troubleshooting any CIP-based device. CIP (Common Industrial Protocol) does not use register maps like Modbus. Instead, it… Read More »

Zakaria El Intissar

Wireshark for EtherNet/IP: How to Capture and Decode CIP Traffic

EtherNet/IP (Ethernet Industrial Protocol) is the leading industrial Ethernet protocol in North America. It carries CIP (Common Industrial Protocol) messages over standard TCP/IP and UDP/IP. Wireshark fully decodes EtherNet/IP using two dissectors: EtherNet/IP uses two ports: This guide covers how to capture both traffic types, which display filters to use, how to decode CIP services and I/O connections,… Read More »

Zakaria El Intissar

Wireshark for Modbus RTU: How to Capture and Decode Serial RS-485 Traffic

Wireshark is known as an Ethernet protocol analyzer. But it can also capture Modbus RTU traffic over RS-485 serial links — using a free extension called WiresharkSerialAdapter. This is not a built-in feature. Wireshark does not natively capture from COM ports. You need a USB-to-RS-485 adapter connected to the bus as a passive listener, plus the WiresharkSerialAdapter extension… Read More »

Zakaria El Intissar

How to Decrypt Encrypted Industrial Protocol Traffic in Wireshark

Industrial protocols are moving to TLS encryption. Modbus/TCP Security uses port 802. IEC 60870-5-104 over TLS uses port 19998. IEC 61850 MMS over TLS uses port 3782. OPC UA encrypts at the application layer. When encryption is enabled, Wireshark shows “Application Data” instead of decoded protocol fields. You can see that packets are flowing, but you cannot read… Read More »

Zakaria El Intissar

PROFINET Conformance Classes Explained: CC-A, CC-B, CC-C (IRT), and CC-D (TSN)

PROFINET is one protocol — not three. But it comes in four conformance classes that define what a device can do, how fast it communicates, and what network infrastructure it needs. Engineers often confuse PROFINET RT, PROFINET IRT, and PROFINET IO as separate protocols. They are not. They are all part of PROFINET IO, defined in IEC 61158… Read More »

Zakaria El Intissar

How to Configure PROFINET in TIA Portal (Step-by-Step Guide)

PROFINET is the default communication protocol on every Siemens S7-1200 and S7-1500 PLC. The PROFINET interface is built into the CPU — no extra modules needed. But setting up a PROFINET network in TIA Portal involves several steps that must happen in the right order. You need to install the GSD file, add the IO-Device to the network,… Read More »

Zakaria El Intissar

PROFINET vs EtherNet/IP: Complete Comparison for Industrial Engineers

PROFINET and EtherNet/IP are the two largest Industrial Ethernet protocols in the world. Together they account for over 60% of all new industrial Ethernet nodes installed each year. Both run on standard Ethernet hardware — same cables, same connectors, same switches. But the similarity ends at the physical layer. Above Layer 2, they use completely different protocol stacks,… Read More »

Zakaria El Intissar