Skip to Content

Register Login

Industry Online Support

Technical Forum

Navigation

Softnet protocol

Created by: cliff-wp at: 4/12/2007 12:33 AM (5 Replies)

Rating (0)

Thanks 0

6 Entries

4/12/2007 12:33 AM	Rate (0)
cliff-wp Posts: 6 Rating: (0)	Hello, i'm trying to comunicate from a pc to a s7-300 with a 343-lean. I've used a standard OPC server, and it works fine. But now i've the necessity to write my own driver for comunicate, and i'm searching the documentation of the protocol for opening a session, and reading/writing values from db in the memory of the plc. I've searching in many forum and documentation, but unfortunately i've found none, only then reference at a document that must contain this protocol. It was c79000-g8972-c116 appendix C, but i've not found that. Can someone help me ? Best regards (sorry for my english)
cliff-wp Posts: 6 Rating: (0)
Suggestion To thank Quote Answer

4/12/2007 10:30 AM	Rate (0)
J_Bell Posts: 5822 Rating: (412)	Hello, if you look for Fetch / Write on ISO Transport, ISO on TCP or TCP Protocol, this is what you are looking for: Best regards J_Bell Attachment S7_Fetch_Write.pdf (730 Downloads)
J_Bell Posts: 5822 Rating: (412)
Suggestion To thank Quote Answer

4/12/2007 9:01 PM	Rate (0)
cliff-wp Posts: 6 Rating: (0)	Thx for the info, but is not what i'm searching. For more detail i use a 3152dp + a 343-lean (6gk7 343 1cx10 0xe0) Whit a sniffer i see the protocol that use a standard opc to communicate, is a thing like that ; send -> 03 00 00 1F 02 F0 80 32 01 00 00 02 6B 00 0E 00 00 04 01 12 0A 10 02 00 02 00 00 83 00 01 70 where : 03 00 is the header (a stated of rfc 1006) 00 1F is the size of the packet F0 80 32 01 00 00 ??? 02 6B is a counter increased every send 00 0E 00 00 04 01 12 0A 10 02 00 ?? 02 = number of byte requested 00 = numer of db (if present) 84 = identifies the type, in this case a merker 00 = ?? 01 70 identifies the address (46*8 = 368 = 0170 in hex) receive <- 03 00 00 1B 02 F0 80 32 03 00 00 02 6B 00 02 00 06 00 00 04 01 FF 04 00 10 00 00 the sistem works fine, for completing i'm searching the documentation of the field unknown.... I assume that this protocol is profinet IO, but at present i've not found the detail explained...
cliff-wp Posts: 6 Rating: (0)
Suggestion To thank Quote Answer

4/12/2007 11:22 PM	Rate (0)
Dec Gold Expert Joined: 5/19/2006 Last visit: 12/3/2024 Posts: 549 Rating: (107)	cliff, You are having difficulties debugginga documented protocol like RFC-1006 . I am not sure how you willdebug an undocumented/proprietary protocol like S7 . cliff-wp F0 80 32 01 00 00 ??? ... 0xF0:CO DataTPDU(RFC-1006) 0x80: EOT End of telegram (RFC-1006) //Start of S7 Protocol 0x32: - Undocumented cliff-wp I assume that this protocol is profinet IO, but at present i've not found the detail explained... This is a plain S7 Protocol on top of RFC-1006. Please follow J_Bell advices; will save you some time. Dec
	Last edited by: Dec at: 12.04.2007 23:25
Suggestion To thank Quote Answer

4/13/2007 7:46 AM	Rate (0)
cliff-wp Posts: 6 Rating: (0)	in my little explanation i non mentionate the header rfc1006, (find in any document on internet) these byte are clearly decoded with a protocol analyzer, of course. in next day i try do decode the rest of telegram, and aso use the protocol indicate by I_Bell. thx for the info...
cliff-wp Posts: 6 Rating: (0)
Suggestion To thank Quote Answer

4/16/2007 10:02 PM	Rate (0)
cliff-wp Posts: 6 Rating: (0)	the s7-protocol is described in the documentation of libnodave, a freeware package for communicate, utilizing fetch/write and s7_protocol. bye
cliff-wp Posts: 6 Rating: (0)
Suggestion To thank Quote Answer

|

Share this page:

Share this page on...

Follow us on