Both of those captures simply show the same request packet over and over (no responses). The packet is
01 03 10 00 00 66 20 C1
which is a request to slave address 1 to read 102 holding registers starting at address 0x1000.
Now while a CRC value of 0x20C1 is the correct CRC for the packet, I believe the ordering of the two bytes in the packet are incorrect, as Modbus specifies the CRC shall be encoded low-byte first (the manual you provided for the controller also states exactly that).
So it seems there is a bug in this software and the firmware of the controller where they are both incorrectly encoding the CRC into the packet.
I recommend contacting Mebay regarding this mistake.
01 03 10 00 00 66 20 C1
which is a request to slave address 1 to read 102 holding registers starting at address 0x1000.
Now while a CRC value of 0x20C1 is the correct CRC for the packet, I believe the ordering of the two bytes in the packet are incorrect, as Modbus specifies the CRC shall be encoded low-byte first (the manual you provided for the controller also states exactly that).
So it seems there is a bug in this software and the firmware of the controller where they are both incorrectly encoding the CRC into the packet.
I recommend contacting Mebay regarding this mistake.

