Have been polling the ModBus on a Sunamp heat battery (phase change material, for domestic hot water), with the hope of reading data from 3 internal temp sensors. Unfortunately Sunamp do not want end users to have this information.
Using ModPoll, we began with RTU and then moved on to ASCii
Unfortunately no response to any combination of baud, parity, bits over all 247 addresses. Believe this totalled some 40k enquiries.
Four other known ModBus devices have all responded positively to same interrogation.
Is there any further methods we can try?
Or to put it another way, if you were designing this product, what hurdles could you put in place so the ModBus would not be reverse engineered?
Using ModPoll, we began with RTU and then moved on to ASCii
Unfortunately no response to any combination of baud, parity, bits over all 247 addresses. Believe this totalled some 40k enquiries.
Four other known ModBus devices have all responded positively to same interrogation.
Is there any further methods we can try?
Or to put it another way, if you were designing this product, what hurdles could you put in place so the ModBus would not be reverse engineered?