紫外工控论坛

 找回密码
 立即注册

扫一扫,访问微社区

QQ登录

只需一步,快速开始

搜索
查看: 2158|回复: 3

[求助] 台达VFD-E变频器PLC2功能监控数据求助解密思路

[复制链接]
CPU 发表于 2011-12-19 18:35:02 | 显示全部楼层 |阅读模式

马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。

您需要 登录 才可以下载或查看,没有帐号?立即注册

x
想学习一下串口监听,谁能给个思路

台达VFD-E变频器PLC2功能监控数据

成功打开串口监视, 进程: 4060     WPLSoft.exe
COM1: 打开
COM1 Write(asc): 4(Bytes)ATZ
COM1 Write(asc): 9(Bytes):0111EE

COM1 Read(asc): 8(Bytes) :0111040
COM1 Read(asc): 8(Bytes) 1FF2011B
COM1 Read(asc): 3(Bytes) 9

COM1 Write(asc): 17(Bytes):01010C2D0001C4

COM1 Read(asc): 8(Bytes) :0101010
COM1 Read(asc): 5(Bytes) 1FC

COM1 Write(asc): 17(Bytes):01670010000583

COM1 Read(asc): 8(Bytes) :01670A0
COM1 Read(asc): 8(Bytes) 00110000
COM1 Read(asc): 8(Bytes) 00000070
COM1 Read(asc): 7(Bytes) 00076

COM1 Write(asc): 23(Bytes):0164010D0434333231BF //输入错误密码4321

COM1 Read(asc): 8(Bytes) :0164010
COM1 Read(asc): 8(Bytes) D04CFCEC
COM1 Read(asc): 7(Bytes) CCB55     //提示密码错误,禁止上载**********************************************************************
COM1 Write(asc): 4(Bytes)ATZ
COM1 Write(asc): 9(Bytes):0111EE

COM1 Read(asc): 8(Bytes) :0111040
COM1 Read(asc): 8(Bytes) 1FF2011B
COM1 Read(asc): 3(Bytes) 9

COM1 Write(asc): 17(Bytes):01010C2D0001C4

COM1 Read(asc): 8(Bytes) :0101010
COM1 Read(asc): 5(Bytes) 1FC

COM1 Write(asc): 17(Bytes):01670010000583

COM1 Read(asc): 8(Bytes) :01670A0
COM1 Read(asc): 8(Bytes) 00110000
COM1 Read(asc): 8(Bytes) 00000070
COM1 Read(asc): 7(Bytes) 00076

COM1 Write(asc): 23(Bytes):0164010D0431323334BF  //输入正确密码(1234)

COM1 Read(asc): 8(Bytes) :0164010
COM1 Read(asc): 8(Bytes) D0431323
COM1 Read(asc): 7(Bytes) 334BF  //返回(1234)可以上载

COM1 Write(asc): 17(Bytes):0103145F000188

COM1 Read(asc): 8(Bytes) :0103020
COM1 Read(asc): 7(Bytes) 030CA

COM1 Write(asc): 17(Bytes):0164011901017F

COM1 Read(asc): 8(Bytes) :0164011
COM1 Read(asc): 8(Bytes) 901017F
COM1 Read(asc): 1(Bytes)

COM1 Write(asc): 17(Bytes):010320000010CC

COM1 Read(asc): 8(Bytes) :010320E
COM1 Read(asc): 8(Bytes) 82B01CC2
COM1 Read(asc): 8(Bytes) 800F4800
COM1 Read(asc): 8(Bytes) 18012860
COM1 Read(asc): 8(Bytes) 0862800F
COM1 Read(asc): 8(Bytes) 48001801
COM1 Read(asc): 8(Bytes) 48600862
COM1 Read(asc): 8(Bytes) 80094801
COM1 Read(asc): 8(Bytes) 18000863
COM1 Read(asc): 3(Bytes) 1

COM1 Write(asc): 17(Bytes):010320100010BC

COM1 Read(asc): 8(Bytes) :0103200
COM1 Read(asc): 8(Bytes) 08628009
COM1 Read(asc): 8(Bytes) 48011800
COM1 Read(asc): 8(Bytes) 28600860
COM1 Read(asc): 8(Bytes) 05801583
COM1 Read(asc): 8(Bytes) 80112860
COM1 Read(asc): 8(Bytes) 08601822
COM1 Read(asc): 8(Bytes) 08000240
COM1 Read(asc): 8(Bytes) 26C01546
COM1 Read(asc): 3(Bytes) 9

COM1 Write(asc): 17(Bytes):010320200010AC

COM1 Read(asc): 8(Bytes) :0103200
COM1 Read(asc): 8(Bytes) 2CC01010
COM1 Read(asc): 8(Bytes) 08404800
COM1 Read(asc): 8(Bytes) 06801580
COM1 Read(asc): 8(Bytes) A5800C80
COM1 Read(asc): 8(Bytes) 02801583
COM1 Read(asc): 8(Bytes) 80100860
COM1 Read(asc): 8(Bytes) 08601822
COM1 Read(asc): 8(Bytes) 08005240
COM1 Read(asc): 3(Bytes) 7

COM1 Write(asc): 17(Bytes):0103203000109C

COM1 Read(asc): 8(Bytes) :0103200
COM1 Read(asc): 8(Bytes) AC838011
COM1 Read(asc): 8(Bytes) 48600860
COM1 Read(asc): 8(Bytes) 18220800
COM1 Read(asc): 8(Bytes) 10101840
COM1 Read(asc): 8(Bytes) 48001680
COM1 Read(asc): 8(Bytes) B580C580
COM1 Read(asc): 8(Bytes) 05801C83
COM1 Read(asc): 8(Bytes) 80102867
COM1 Read(asc): 3(Bytes) 1

COM1 Write(asc): 17(Bytes):0103204000108C

COM1 Read(asc): 8(Bytes) :0103200
COM1 Read(asc): 8(Bytes) 08601822
COM1 Read(asc): 8(Bytes) 08003240
COM1 Read(asc): 8(Bytes) CC804240
COM1 Read(asc): 8(Bytes) BC838011
COM1 Read(asc): 8(Bytes) 48600860
COM1 Read(asc): 8(Bytes) 18220800
COM1 Read(asc): 8(Bytes) F00FFFFF
COM1 Read(asc): 8(Bytes) FFFFFFFB
COM1 Read(asc): 3(Bytes) 8

COM1 Write(asc): 17(Bytes):01640119010080

COM1 Read(asc): 8(Bytes) :0164011
COM1 Read(asc): 8(Bytes) 9010080
COM1 Read(asc): 1(Bytes)

COM1 Write(asc): 27(Bytes):011013F8000204000B32376A

COM1 Read(asc): 8(Bytes) :011013F
COM1 Read(asc): 8(Bytes) 80002E2
COM1 Read(asc): 1(Bytes)

COM1 Write(asc): 17(Bytes):0164010C01008D

COM1 Read(asc): 8(Bytes) :0164010
COM1 Read(asc): 8(Bytes) C01008D
COM1 Read(asc): 1(Bytes)
冰糖 发表于 2011-12-20 21:02:07 | 显示全部楼层
你用串口调试助手把监听到的指令,一条一条发给plc,然后慢慢研究吧
 楼主| CPU 发表于 2011-12-21 10:40:27 | 显示全部楼层
哈哈,太轮廓了,能不能详细点,不如说用VB去怎么写个枚举的例子
冰糖 发表于 2011-12-21 11:19:08 | 显示全部楼层
vb枚举就简单了,
串口把
COM1 Write(asc): 4(Bytes)ATZ
COM1 Write(asc): 9(Bytes):0111EE



COM1 Write(asc): 17(Bytes):01010C2D0001C4



COM1 Write(asc): 17(Bytes):01670010000583



这些数据发出去

然后不停的替换下面一句中的密码
COM1 Write(asc): 23(Bytes):0164010D0431323334BF  //输入正确密码(1234)

读返回的值和

COM1 Read(asc): 8(Bytes) :0164010
COM1 Read(asc): 8(Bytes) D04CFCEC

比较,如果通过就把密码记下来就行了
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则


--------------------------------------------------------------------------------------------------------------------
本站是工控技术交流站点,论坛内容均为网络收集或会员所发表,并不代表本站立场,会员拥有该内容的所有权力及责任!
本站内容如有侵犯您的版权,请按下面方式联系本站管理员,我们将及时删除处理
管理员:冰糖 QQ:5483695(请直击主题), Mail:admin#ziwai.net(#改成@) 其它非本人.
拒绝任何人以任何形式在本论坛发表与中华人民共和国法律相抵触的言论!

QQ|Archiver|手机版|小黑屋|紫外工控论坛. ( 苏ICP备11032118号-1 )

GMT+8, 2024-5-12 23:56 , Processed in 0.406253 second(s), 17 queries .

Powered by Discuz! X3.4 Licensed

Copyright © 2001-2021, Tencent Cloud.

快速回复 返回顶部 返回列表