Protocol Data: Modbus

Ingrid

Modbus is a serial communication protocol originally developed for connecting industrial devices over RS-232 or RS-485. It is a standard in industrial automation and supports both serial (Modbus RTU) and network (Modbus TCP) communication. Modbus is widely used for monitoring and controlling industrial equipment, such as sensors, actuators, and PLCs, due to its simplicity and ease of implementation.

The Modbus output consists of the following files:

Modbus = The main file (modbus.jsonl) containing the common fields and a record_id.
Modbus Devices = The devices file (modbus_devices.jsonl) containing information on all Modbus devices found on a particular host relating to the first one via the record_id field. There might be multiple records with the same record_id.

Schema

Data available in Operational Technology Exposure Intelligence:

Field	Description
record_id String	An internal identifier for this exposure record.
uid Integer	The unit identifier (UID). This is used to address messages to a specific device. Though this is generally unused with Modbus TCP since each unit is assigned an IP address, some vendors may implement it to represent parts of a composite device. True Modbus unit IDs are between `1`-`247`. The Modbus TCP value is frequently `0` or `255`.
vendor_name String	The device vendor’s name.
product_code String	The product code for this device.
major_minor_revision String	Version data.
error String	Communication errors (if any) and context. See exception responses.

November 27, 2024: Published.