SCADA Protocols - Decode. Analyze. Master.

Modbus TCP Mitsubishi iQ-R: Step-by-Step Setup (GX Works3, RJ71EN71, RnENCPU)

A practical engineering guide to configure Modbus TCP on the Mitsubishi MELSEC iQ-R series — quick setup, GX Works3 parameters, MODBUS Device Assignment, function codes, exception codes, float/endian handling, polling timing, and field troubleshooting Quick Setup (5 Steps) If you just need it working fast, here’s the short path: Step Action 1 GX Works3 → Module Parameter →… Read More: Modbus TCP Mitsubishi iQ-R: Step-by-Step Setup (GX Works3, RJ71EN71, RnENCPU) »

How to Configure Modbus TCP on Schneider M340 (Unity Pro / EcoStruxure Control Expert)

The Schneider Modicon M340 PLC is one of the most widely deployed PLCs in Europe, the Middle East, and Africa for water treatment, building automation, energy management, and machine control. Modbus TCP is its default Ethernet protocol — the embedded CPU Ethernet port is a Modbus TCP server out of the box. This guide shows you how to… Read More: How to Configure Modbus TCP on Schneider M340 (Unity Pro… »

OPC UA NodeId Explained: Namespace Index, Identifier Types, and Format

Every node in an OPC UA address space — every variable, object, method, and data type — has a unique address called a NodeId. When you read a tag value, browse the address space, or call a method, you are using a NodeId. NodeIds are the OPC UA equivalent of register addresses in Modbus or class/instance/attribute paths in… Read More: OPC UA NodeId Explained: Namespace Index, Identifier Types, and Format »

PROFINET Port Numbers Explained: UDP 34962/34963/34964, Ethertype 0x8892, and Firewall Configuration

A complete reference for PROFINET ports — covering UDP 34962 (RT Unicast), UDP 34963 (RT Multicast), UDP 34964 (RPC Context Manager), UDP 49152, the Ethertype 0x8892 for cyclic I/O, MRP Ethertype 0x88E3, firewall rules, and Wireshark filters Introduction PROFINET ports are different from every other industrial protocol. Unlike Modbus (port 502), DNP3 (port 20000), or IEC 104 (port… Read More: PROFINET Port Numbers Explained: UDP 34962/34963/34964, Ethertype 0x8892, and Firewall… »

Modbus Exception Codes Explained: Complete Reference Guide

A practical reference for engineers covering every Modbus exception code (01, 02, 03, 04, 05, 06, 08, 0A, 0B) — what each code means, what causes it, how to fix it, and how to identify exception responses in Wireshark Introduction When a Modbus master sends a request to a slave, four things can happen: This article covers case… Read More: Modbus Exception Codes Explained: Complete Reference Guide »

OPC UA Port Number Explained: TCP 4840, Discovery, and Firewall Configuration

OPC UA uses TCP port 4840 by default. This single port carries everything OPC UA does — discovery, session establishment, reading tags, writing values, subscriptions, method calls, and historical data access. Unlike OPC Classic (which used DCOM with dynamic port allocation and was a firewall nightmare), OPC UA uses one well-known port that works cleanly through NAT, proxies,… Read More: OPC UA Port Number Explained: TCP 4840, Discovery, and Firewall… »

Top 10 Free Modbus Simulators

You’re building a SCADA master, configuring a PLC, or bringing up an HMI — but the field devices aren’t there yet. The meters, VFDs, sensors, and I/O modules are still on order, or they’re sitting at a site you can’t reach. A Modbus simulator fills the gap. It runs on your laptop and answers as if it were… Read More: Top 10 Free Modbus Simulators »

IEC 60870-5-104 Type IDs Explained: Complete Reference Guide

Every ASDU (Application Service Data Unit) in IEC 60870-5-104 contains a Type ID — a single byte that defines what kind of data the message carries. It tells the receiving station whether the message contains a single-point indication, a measured value, a command, a counter, or a system message. The Type ID is the first byte of every… Read More: IEC 60870-5-104 Type IDs Explained: Complete Reference Guide »

CIP Object Model Explained: Classes, Instances, Attributes, and Services

Every CIP device — whether it is an Allen-Bradley PLC, a variable frequency drive, a remote I/O module, or a safety controller — organizes its data using the same object model. Understanding this model is the key to configuring, programming, and troubleshooting any CIP-based device. CIP (Common Industrial Protocol) does not use register maps like Modbus. Instead, it… Read More: CIP Object Model Explained: Classes, Instances, Attributes, and Services »

Wireshark for EtherNet/IP: How to Capture and Decode CIP Traffic

EtherNet/IP (Ethernet Industrial Protocol) is the leading industrial Ethernet protocol in North America. It carries CIP (Common Industrial Protocol) messages over standard TCP/IP and UDP/IP. Wireshark fully decodes EtherNet/IP using two dissectors: EtherNet/IP uses two ports: This guide covers how to capture both traffic types, which display filters to use, how to decode CIP services and I/O connections,… Read More: Wireshark for EtherNet/IP: How to Capture and Decode CIP Traffic »