Ask Your Question

How to find specific databyte in CIP PCCC protocol?

asked 2022-06-21 13:39:38 +0000

wshvw gravatar image

Hi, I need to check if some network slave has generated an error by analysing a WireShark .pcapng logfile. I need to find if the first byte of a PCCC command data unequals value 0x10. Is this possible?

edit retag flag offensive close merge delete


Do you have a capture file you could share on a public file share and add a link to it here?

Chuckc gravatar imageChuckc ( 2022-06-21 21:04:05 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2022-06-23 01:36:54 +0000

Chuckc gravatar image

S4x15 - Digital Bond's S4 conference 2015
Capture file MicroLogix56.pcap 10M MicroLogix has cip.pccc fields.

The first byte of PCCC Command Data is cip.pccc.cmd.code.
Display filter: cip.pccc.cmd.code != 0x10

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2022-06-21 13:39:38 +0000

Seen: 167 times

Last updated: Jun 23