NETWORK / RTUEndpoint discovery
Finds RTU Unit IDs or confirmed TCP/TLS endpoints in a bounded subnet and reports network results as explicit IP:port pairs.
Network and RTU discovery, Auto Scan, Protocol Diagnostics, Health, and Raw Traffic.
Diagnostics observe the same native transaction stream as ordinary polling and writes. Start with the narrowest question; do not run an exhaustive scan when one known request can identify the fault.
NETWORK / RTUFinds RTU Unit IDs or confirmed TCP/TLS endpoints in a bounded subnet and reports network results as explicit IP:port pairs.
AUTO SCANQuick discovers practical readable ranges in all four address spaces. Exhaustive probes every single address and can issue 262,144 requests.
FC43 · MEI 0EReads paged device identification and preserves standard and vendor-specific objects.
FC08 / 11 / 12 / 17 / 22Runs safe specialist diagnostics, decodes returned fields, and retains attempts, latency and exact TX/RX frames. FC22 remains a confirmed write.
MEASUREExplains request lifecycle, latency distribution, throughput, retries, errors, connection state, and RTU utilization by source.
PROVEShows chronological frames, decoded fields, source attribution, timings, exceptions, filters, bounded recording, and export.
| Mode | Use when | Behavior | Cost / limitation |
|---|---|---|---|
| Quick | Unknown practical map | Adaptive block probes | May miss isolated readable addresses surrounded by illegal gaps |
| Exhaustive | Quick missed a known isolated address | Every address in all four spaces | Hours of traffic on a slow RTU link; use deliberately |
Stop unrelated views and reproduce with one address, one profile, and one expected value.
Decide whether the failure is connection, timeout/retry, Modbus exception, malformed response, TLS, or CRC-related.
Use Raw Traffic source attribution to inspect the exact request and response bytes.
Verify Unit ID, function, PDU address, quantity, byte count, exception code, and timing.
Capture only the interval needed to reproduce. Export a session when another person must inspect it without the device.
FC08 exposes safe serial-line diagnostic subfunctions, FC11/12 communication event state, FC17 server identification, and FC22 a masked holding-register write. Busloom excludes state-changing FC08 operations from this workbench. FC22 obeys the active profile's read-only policy and requires explicit write confirmation.