Thanks for the additional information. The Omega and Calex 5611 low-speed modules output up to 510 Hz (for <500C) and 1100 Hz (for up to 1000C), and the mfrs indicate that these are for use on "normal" PLC inputs, so from the above, I'm interpreting that the normal scan time can be interrupted to read these devices adequately?
I ordered the cable from the source suggested by Ron_Beaufort and hope to be able to actually extract the program running in our machines. However, a daunting realization occurred to me. Since these are OEM machines, it may well be the case that the PLC code is only accessible with a password. I'm not an advocate of inappropriately exploiting others' IP; however, this OEM went out of business and left its customers high and dry. The least they could have done was provide the access credentials and said "good luck with that". If this turns out to be the case, would there anyway to access the code on an A-B ML 1000 via brute force?
Worst case, the control scheme on these machines doesn't seem to be horribly complicated. The system runs two timed cycles, while handling two temperature inputs and a few contact inputs and outputs of three motor/fan contacts, a steam solenoid valve contact, activation of an external refrigeration unit, and couple of indicator lights. It would not be impossible just to reprogram a new controller from scratch, but we would prefer to avoid going down that path.
I ordered the cable from the source suggested by Ron_Beaufort and hope to be able to actually extract the program running in our machines. However, a daunting realization occurred to me. Since these are OEM machines, it may well be the case that the PLC code is only accessible with a password. I'm not an advocate of inappropriately exploiting others' IP; however, this OEM went out of business and left its customers high and dry. The least they could have done was provide the access credentials and said "good luck with that". If this turns out to be the case, would there anyway to access the code on an A-B ML 1000 via brute force?
Worst case, the control scheme on these machines doesn't seem to be horribly complicated. The system runs two timed cycles, while handling two temperature inputs and a few contact inputs and outputs of three motor/fan contacts, a steam solenoid valve contact, activation of an external refrigeration unit, and couple of indicator lights. It would not be impossible just to reprogram a new controller from scratch, but we would prefer to avoid going down that path.