格林
我聽到了花開的聲音,也看到了花落的結(jié)局.
級別: 工控俠客
精華主題: 0
發(fā)帖數(shù)量: 105 個(gè)
工控威望: 3356 點(diǎn)
下載積分: 1527 分
在線時(shí)間: 31(小時(shí))
注冊時(shí)間: 2011-06-08
最后登錄: 2024-11-05
查看格林的 主題 / 回貼
樓主  發(fā)表于: 5天前
單位上有一臺西門子S7-200SMART裝了一個(gè)4G遠(yuǎn)程模塊，我在485總線上捕獲了一段數(shù)據(jù)流，看格式應(yīng)該是PPI協(xié)議，遠(yuǎn)程主站向PLC發(fā)起命令，然后PLC應(yīng)答。
由于本人對PPI通信協(xié)議不夠了解，請高手幫忙解析一下具體的報(bào)文內(nèi)容是什么，萬分感謝。


命令：68 33 33 68 02 00 6C 32 01 00 00 00 00 00 26 00 00 04 03 12 0A 10 02 00 03 00 00 81 00 00 00 12 0A 10 02 00 02 00 00 82 00 00 00 12 0A 10 02 00 C8 00 01 84 00 00 00 AD 16
應(yīng)答：E5
命令：10 02 00 5C 5E 16
應(yīng)答：68 EB EB 68 00 02 08 32 03 00 00 00 00 00 02 00 DA 00 00 04 03 FF 04 00 18 63 91 01 00 FF 04 00 10 2D 00 FF 04 06 40 A9 00 00 08 41 00 63 91 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3E E5 1D 82 43 78 44 B4 3F CC CC CD 43 DC 00 00 43 7A 00 00 00 00 00 00 00 00 00 00 3C 23 D7 0A 40 40 00 00 00 00 00 00 00 00 00 00 3E E6 66 66 42 A4 9B A7 00 00 00 00 00 00 00 00 41 10 00 00 3C 23 D7 0A 00 00 00 00 43 AF 00 00 43 BE 00 00 43 48 00 00 43 16 00 00 3F 33 33 33 3F 0C CC CD 3E DC 28 F6 CA 16

命令：68 1B 1B 68 02 00 6C 32 01 00 00 00 00 00 0E 00 00 04 01 12 0A 10 02 00 2C 00 01 84 00 06 E0 79 16
應(yīng)答：E5
命令：10 02 00 5C 5E 16
應(yīng)答：68 41 41 68 00 02 08 32 03 00 00 00 00 00 02 00 30 00 00 04 01 FF 04 01 60 3F 0C C7 DF BF 05 5F 8A 00 78 00 00 00 05 00 00 00 05 00 00 01 2C 00 00 01 2C 00 00 43 5F 62 38 00 00 00 00 42 B1 AA 4E 42 85 C1 5C 5F 16

命令：68 33 33 68 02 00 6C 32 01 00 00 00 00 00 26 00 00 04 03 12 0A 10 02 00 03 00 00 81 00 00 00 12 0A 10 02 00 02 00 00 82 00 00 00 12 0A 10 02 00 C8 00 01 84 00 00 00 AD 16
應(yīng)答：E5 （收到）
命令：10 02 00 5C 5E 16 （請立即執(zhí)行）
應(yīng)答：68 EB EB 68 00 02 08 32 03 00 00 00 00 00 02 00 DA 00 00 04 03 FF 04 00 18 63 91 01 00 FF 04 00 10 2D 00 FF 04 06 40 A9 00 00 08 41 00 63 91 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3E E8 56 68 43 7C EC 65 3F CC CC CD 43 DC 00 00 43 7A 00 00 00 00 00 00 00 00 00 00 3C 23 D7 0A 40 40 00 00 00 00 00 00 00 00 00 00 3E E6 66 66 42 A4 7F DF 00 00 00 00 00 00 00 00 41 10 00 00 3C 23 D7 0A 00 00 00 00 43 AF 00 00 43 BE 00 00 43 48 00 00 43 16 00 00 3F 33 33 33 3F 0C CC CD 3E DC 28 F6 65 16 （已執(zhí)行……）

命令：68 1B 1B 68 02 00 6C 32 01 00 00 00 00 00 0E 00 00 04 01 12 0A 10 02 00 2C 00 01 84 00 06 E0 79 16 （命令內(nèi)容是什么？？？）
應(yīng)答：E5 （收到）
命令：10 02 00 5C 5E 16 （請立即執(zhí)行）
應(yīng)答：68 41 41 68 00 02 08 32 03 00 00 00 00 00 02 00 30 00 00 04 01 FF 04 01 60 3F 06 88 0B BF 06 88 0B 00 78 00 00 00 05 00 00 00 05 00 00 01 2C 00 00 01 2C 00 00 43 5F 62 38 00 00 00 00 42 B1 4D B6 42 86 0B 6F 5A 16 （已執(zhí)行……）

命令：68 33 33 68 02 00 6C 32 01 00 00 00 00 00 26 00 00 04 03 12 0A 10 02 00 03 00 00 81 00 00 00 12 0A 10 02 00 02 00 00 82 00 00 00 12 0A 10 02 00 C8 00 01 84 00 00 00 AD 16 （命令內(nèi)容是什么？？？）
應(yīng)答：E5 （收到）
命令：10 02 00 5C 5E 16 （請立即執(zhí)行）
應(yīng)答：68 EB EB 68 00 02 08 32 03 00 00 00 00 00 02 00 DA 00 00 04 03 FF 04 00 18 63 91 01 00 FF 04 00 10 2D 00 FF 04 06 40 A9 00 00 08 41 00 63 91 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3E E7 4C EC 43 7B 17 DE 3F CC CC CD 43 DC 00 00 43 7A 00 00 00 00 00 00 00 00 00 00 3C 23 D7 0A 40 40 00 00 00 00 00 00 00 00 00 00 3E E6 66 66 42 A4 92 64 00 00 00 00 00 00 00 00 41 10 00 00 3C 23 D7 0A 00 00 00 00 43 AF 00 00 43 BE 00 00 43 48 00 00 43 16 00 00 3F 33 33 33 3F 0C CC CD 3E DC 28 F6 19 16（已執(zhí)行……）