Emerson Exchange 365

FlowBossS600+ Modbus Mapping

I'm working on extracting Modbus addresses from an S600+ Flow Computer's 'mbslave.txt' file provided by the client. Unfortunately, I lack the S600config software to open the corresponding '.cfg' file. Given my experience with flow computers and their software, I'm struggling to interpret the Modbus addresses in the 'mbslave.txt' file. I've attached both the 'mbslave.txt' and '.cfg' files for reference. Any guidance on extracting the necessary Modbus addresses would be greatly appreciated.

Thanks

https://drive.google.com/drive/folders/1sr35BYU8lXU0Epohy55le1TnFxrnb6JA?usp=drive_link

• FloBoss600+
• flow measurement

Moazzam Ali

• 20 Aug 2024 11:49 AM
• Cancel

3 Replies

• ian firth

  

  • 20 Aug 2024 12:03 PM

  the Modbus slave file is everything in the config possible and looks like the author just left it as that instead of a dedicated map. I have no idea of whom wrote the configs other than it is called ADIA_2Stream_v02 and written on config 3.2 around 10 years ago. If you have access to the running machine you should see under web server then reports the slave map and items assigned to this. if not you would need to have config600 software lite package at a minimum but that is a chargeable package and would need to contact your local sales office for this. The config may well though be password protected so you would need login details to be able to open it within the tool

  • Cancel
• Moazzam Ali

  

  • 20 Aug 2024 4:54 PM

  In reply to ian firth:

  Thank you for your suggestion. I have obtained the slave map report, which includes Coil Data Map and Register Data Map sections. I have the following questions:

  1. What is the purpose of Eventing Mode?
  2. How do Field, Bit, and Data relate in the Coil Data Map? I understand that items are mapped to specific bits within a 16-bit register (e.g., "SYS HOST" is mapped to Bit 5 of register 01004). Could you elaborate on the role of "Field" in this context?
  3. The Register Data Map indicates a security level of "Read/Write". Does this mean all registers can be both read from and written to by a Modbus Master?
  4. In the Register Data Map, registers 00058, 00060, and 00062 are associated with "BASETIME 1 PRD 1, 2, and 3". What does "BASETIME 1 PRD 1" represent?

  Please refer to the attached images. I appreciate any clarification you can provide.

  

  • Cancel
• ian firth

  

  • 21 Aug 2024 7:38 AM

  In reply to Moazzam Ali:

  1. eventing mode just means if a value is changed via modbus we add it to the event log

  2. Field is just the name of the field associated with alarm for example. ADC01 above Low Hi, under range are the ones enabled in the config and why not all are mapped

  

  3.Yes, If field security set to 9 in the actual configuration it is read only. Generally slave maps are all read only

  4. These are your basetime reports, You can have up to three different basetimes configured. ie 8am, midnight, 6 pm for when a day starts for example if you have an hourly report this would be basetime 1 period 1   and in your case STR01 PREV FWA VAR1  would be the flow weighted average of the previous hour, by default var1 is pressure, var 2 temperature  and basetime 1 prd 2 would most likely be previous day of the same variable, prd 3 will be weekly or monthly again of teh same variable

  • Cancel