Siemens Protocol Questions

Corsair

Lifetime Supporting Member
Join Date
Dec 2020
Location
Missouri
Posts
248
I need some clarification.

Do they have something called Fetch/Write that is different from Get/Put? How do they differ? Are they serial or Ethernet?

What's the proper name for the Ethernet protocol that hit the S7-300 and 400 processors? Is there a Siemens protocol document for it? Can you tell me how to get that document?

Thanks to all.
 
Yes there is a protocol that is called Fetch/Write.
It is used to communicate between old S5 PLCs or between old S5 PLCs and new S7 PLCs.
It is possible to use Fetch/Write between new S7 PLCs, but it is never done.

The protocol that is mostly used with S7-300/400 is called S7-Protocol. As far as I know there is no open document detailing the internals of the S7 Protocol. There is plenty of documentation on how to configure an S7 connection in an S7 PLC or by Simatic Net software on a PC though.

What are you intending to do, and to achieve what ?
 
I forgot to say that there are several other methods and protocols that can be used.
It is best if you describe what you want to achieve, then we can provide meaningful advice.
 
My HMI is written in C. I wrote a driver years ago that talks to S7-300, 400, and I've used it with an early 1200.

I had it using Snap7 for awhile but I quit going that route since I want to maintain source code compatibility with my Raspberry PI version. That's why I'm looking for an actual protocol document if one is available somewhere. I think originally I used some of the Snap7 documentation since I didn't have anything from Siemens - I'm not sure how I got it to work.

A project has come up where I have to match protocols with an existing system so I need to revisit the protocol. It looks like what I'm looking for is not available as an official Siemens thing. The assistance is still appreciated.
 
The protocol that is mostly used with S7-300/400 is called S7-Protocol. As far as I know there is no open document detailing the internals of the S7 Protocol.


Everything Jesper said is absolutely correct; it is a proprietary standard, but I'll add that folks have reverse engineered it. There is a Wireshark dissector for the S7 protocol (S7comm), which can help show you what is going on. There are also at least 2 open source libraries that can be used on PCs to access S7 data: Snap7 and libnodave. You could dig into the source code to learn the details.
 

Similar Topics

Dear guys, I have a software that sends data to PLC using modbus. I want to connect my software with siemens plc, how can i do that?
Replies
19
Views
4,685
I've got some minimal C code that I wrote some time ago to talk to Siemens PLCs. I used it with a 1200. At the time I only hit I, M, and Q...
Replies
5
Views
1,837
Hello, this is a brand new task for me. I recently bought a particulate sensor and it communicates with UART protocol or I2C protocol. It came...
Replies
12
Views
2,837
Spent the best part of the day trying to figure a problem with the Beijer Exter series no protocol mode. I got it sussed and so thought I would...
Replies
0
Views
3,314
hi, I am going to sniff the serial communication between an S5-115U plc and PC, and try to see which memory area are being accessed. However the...
Replies
6
Views
3,500
Back
Top Bottom