"# Modbus\u5b9e\u7528\u5c0f\u5de5\u5177\u5408\u96c6\uff1aRTU\/TCP\u89e3\u6790\u5668\u3001\u4e32\u53e3\u626b\u63cf\u5668\u4e0e\u547d\u4ee4\u884c\u6d4b\u8bd5\u6280\u5de7\n\n> 2026-06-26 | 2026-06-26\n> https:\/\/www.modbus.cn\/en\/43941.html\n\n**Modbus\u8c03\u8bd5\u5de5\u5177**\n\n---\n\n## Modbus \u8c03\u8bd5\u4e2d\u7684\"\u745e\u58eb\u519b\u5200\"\n\n\u5728\u65e5\u5e38\u7684 Modbus \u8bbe\u5907\u8c03\u8bd5\u4e2d\uff0c\u5e76\u975e\u6bcf\u6b21\u90fd\u9700\u8981\u6253\u5f00 Wireshark \u6293\u5305\u6216\u8005\u5199 Python \u811a\u672c\u3002\u6709\u65f6\u5019\u4f60\u53ea\u9700\u8981\u5feb\u901f\u9a8c\u8bc1\u4e00\u4e2a\u529f\u80fd\u2014\u2014\u89e3\u7801\u4e00\u4e32\u5341\u516d\u8fdb\u5236\u62a5\u6587\u3001\u626b\u63cf\u4e00\u4e2a\u672a\u77e5\u8bbe\u5907\u7684\u5bc4\u5b58\u5668\u8303\u56f4\u3001\u6216\u8005\u5728\u547d\u4ee4\u884c\u91cc\u6d4b\u8bd5\u4e00\u4e2a\u8bfb\u5199\u8bf7\u6c42\u3002\u672c\u6587\u6c47\u603b\u4e86 modbus.org \u63a8\u8350\u7684\u90a3\u4e9b\u6700\u8f7b\u91cf\u3001\u6700\u5b9e\u7528\u7684 Modbus \u5c0f\u5de5\u5177\u3002\n\n## Modbus RTU\/TCP \u62a5\u6587\u5728\u7ebf\u89e3\u6790\u5668\n\n\u5f53\u4f60\u4ece\u4e32\u53e3\u52a9\u624b\u6536\u5230\u4e00\u4e32 Modbus \u62a5\u6587\uff0c\u6216\u8005\u5728\u4ee3\u7801\u91cc\u8c03\u8bd5\u65f6\u6253\u5370\u4e86\u4e00\u6bb5 Modbus \u4e8c\u8fdb\u5236\u6570\u636e\uff0c\u4f60\u9700\u8981\u5feb\u901f\u77e5\u9053\u8fd9\u6bb5\u6570\u636e\u662f\u4ec0\u4e48\u610f\u601d\u3002\u5728\u7ebf Modbus \u62a5\u6587\u89e3\u6790\u5668\u662f\u6700\u5feb\u7684\u89e3\u51b3\u65b9\u6848\u2014\u2014\u4e0d\u9700\u8981\u5b89\u88c5\u4efb\u4f55\u8f6f\u4ef6\uff0c\u6d4f\u89c8\u5668\u6253\u5f00\u5373\u53ef\u4f7f\u7528\u3002\n\n### \u5728\u7ebf Modbus RTU Parser\n\n**\u63a8\u8350\u5de5\u5177**\uff1aCAS Modbus RTU Parser\uff08Chipkin Automation Systems \u63d0\u4f9b\uff09\n\n\u8bbf\u95ee\uff1a[store.chipkin.com\/products\/tools#modbus-rtu-parser](https:\/\/store.chipkin.com\/products\/tools#modbus-rtu-parser)\n\n\u8fd9\u662f\u4e00\u4e2a\u7eaf\u7f51\u9875\u5de5\u5177\u3002\u4f60\u53ea\u9700\u7c98\u8d34\u4e00\u4e32\u5341\u516d\u8fdb\u5236 Modbus RTU \u62a5\u6587\uff1a\n\n```\n`01 03 00 00 00 0A C5 CD`\n```\n\n\u70b9\u51fb\u89e3\u6790\u540e\uff0c\u5de5\u5177\u4f1a\u81ea\u52a8\u5c55\u793a\uff1a\n\n- \u4ece\u7ad9\u5730\u5740\uff08Slave ID\uff09= 1\n- \u529f\u80fd\u7801 = 03\uff08Read Holding Registers\uff09\n- \u8d77\u59cb\u5730\u5740 = 0\n- \u8bf7\u6c42\u6570\u91cf = 10 \u4e2a\u5bc4\u5b58\u5668\n- CRC \u6821\u9a8c = 0xCDC5\uff08\u5e76\u9a8c\u8bc1\u662f\u5426\u6b63\u786e \u2713\uff09\n\n### \u5728\u7ebf Modbus TCP Parser\n\n\u8bbf\u95ee\uff1a[store.chipkin.com\/products\/tools#modbus-tcp-parser](https:\/\/store.chipkin.com\/products\/tools#modbus-tcp-parser)\n\n\u4e0e RTU \u7248\u672c\u7c7b\u4f3c\uff0c\u4f46\u589e\u52a0\u4e86 MBAP \u5934\u7684\u89e3\u6790\uff1aTransaction ID\u3001Protocol ID\u3001Length \u548c Unit ID\u3002\u7c98\u8d34\u5982\u4e0b TCP \u62a5\u6587\u5373\u53ef\uff1a\n\n```\n`00 01 00 00 00 06 01 03 00 00 00 0A`\n```\n\n\u89e3\u6790\u7ed3\u679c\uff1a\u4e8b\u52a1 ID=1\uff0c\u534f\u8bae=Modbus\uff0c\u4ece\u7ad9=1\uff0c\u529f\u80fd\u7801=03\uff0c\u8d77\u59cb\u5730\u5740=0\uff0c\u6570\u91cf=10\u3002\n\n## Modbus \u8bbe\u5907\u5730\u5740\u7a7a\u95f4\u626b\u63cf\u5de5\u5177\n\n### CAS Modbus Scanner\n\n\u4e0b\u8f7d\u5730\u5740\uff1a[store.chipkin.com\/products\/tools\/cas-modbus-scanner](https:\/\/store.chipkin.com\/products\/tools\/cas-modbus-scanner)\n\n\u5f53\u4f60\u62ff\u5230\u4e00\u4e2a\u6ca1\u6709\u5b8c\u6574\u5bc4\u5b58\u5668\u6620\u5c04\u624b\u518c\u7684 Modbus \u8bbe\u5907\u65f6\uff0c\u6700\u76f4\u63a5\u7684\u65b9\u6cd5\u5c31\u662f\"\u626b\u63cf\"\u2014\u2014\u7528 Modbus Scanner \u904d\u5386\u8bbe\u5907\u7684\u5730\u5740\u7a7a\u95f4\uff0c\u8bb0\u5f55\u4e0b\u54ea\u4e9b\u5730\u5740\u8fd4\u56de\u4e86\u6709\u6548\u6570\u636e\u3002\n\n**\u4f7f\u7528\u65b9\u6cd5**\uff1a\n\n- \u8bbe\u7f6e\u8fde\u63a5\u65b9\u5f0f\uff08TCP \u8f93\u5165 IP:Port\uff0cRTU \u9009\u62e9\u4e32\u53e3\uff09\n- \u9009\u62e9\u8981\u626b\u63cf\u7684\u5730\u5740\u8303\u56f4\uff08\u5efa\u8bae\u5148\u5c0f\u8303\u56f4 0-100 \u8bd5\u63a2\uff09\n- \u9009\u62e9\u8981\u626b\u63cf\u7684\u6570\u636e\u7c7b\u578b\uff1a\u7ebf\u5708\u3001\u79bb\u6563\u8f93\u5165\u3001\u4fdd\u6301\u5bc4\u5b58\u5668\u3001\u8f93\u5165\u5bc4\u5b58\u5668\n- \u70b9\u51fb Start Scan\uff0c\u89c2\u5bdf\u7ed3\u679c\n- \u5bf9\u8fd4\u56de\u6709\u6548\u6570\u636e\u7684\u5730\u5740\u505a\u597d\u8bb0\u5f55\n- \u7ed3\u5408\u8bbe\u5907\u5b9e\u7269\uff08\u6539\u53d8\u7269\u7406\u91cf\u3001\u89c2\u5bdf\u5bf9\u5e94\u5bc4\u5b58\u5668\u53d8\u5316\uff09\u8fdb\u884c\u9a8c\u8bc1\n\n**\u626b\u63cf\u6280\u5de7**\uff1a\n\n- \u5148\u626b\u63cf\u4fdd\u6301\u5bc4\u5b58\u5668\uff084xxxx\uff09\uff0c\u56e0\u4e3a\u5927\u591a\u6570\u8bbe\u5907\u7684\u914d\u7f6e\u548c\u6d4b\u91cf\u6570\u636e\u90fd\u5728\u8fd9\u91cc\n- \u5982\u679c\u67d0\u4e2a\u5730\u5740\u8fd4\u56de\u5f02\u5e38\u7801 02\uff08\u975e\u6cd5\u6570\u636e\u5730\u5740\uff09\uff0c\u8bf4\u660e\u8be5\u5730\u5740\u65e0\u6548\n- \u5982\u679c\u8fd4\u56de 0 \u4f46\u65e0\u5f02\u5e38\uff0c\u9700\u8981\u5224\u65ad\u662f\u771f\u7684\u503c=0 \u8fd8\u662f\u8bbe\u5907\u5bf9\u8be5\u5730\u5740\u6ca1\u6709\u5b9e\u73b0\uff08\u4ec5\u9760\u626b\u63cf\u65e0\u6cd5\u533a\u5206\uff09\n- \u6539\u53d8\u7269\u7406\u6fc0\u52b1\uff08\u5982\u5347\u6e29\u3001\u65cb\u8f6c\u7f16\u7801\u5668\uff09\u540e\u590d\u626b\uff0c\u89c2\u5bdf\u54ea\u4e9b\u5730\u5740\u503c\u53d1\u751f\u53d8\u5316\n\n## \u547d\u4ee4\u884c\u534f\u8bae\u6d4b\u8bd5\uff1amodbus-cli \u6280\u5de7\n\n\u9664\u4e86\u4e13\u7528\u5de5\u5177\u5916\uff0c\u5f88\u591a\u901a\u7528\u7684\u547d\u4ee4\u884c\u5de5\u5177\u4e5f\u53ef\u4ee5\u7528\u4e8e Modbus \u6d4b\u8bd5\uff1a\n\n### \u7528 Netcat \u6d4b\u8bd5 TCP \u8fde\u901a\u6027\n\n```\n# \u6d4b\u8bd5 Modbus TCP \u8bbe\u5907\u662f\u5426\u5728\u7ebf\nnc -zv 192.168.1.100 502\n\n# \u5982\u679c\u8f93\u51fa \"Connection to 192.168.1.100 502 port [tcp\/*] succeeded!\" \u8bf4\u660e\u5728\u7ebf\n```\n\n### \u7528 Python \u4e00\u884c\u547d\u4ee4\u6d4b\u8bd5\n\n```\n# \u5b89\u88c5 pymodbus \u540e\uff0c\u4e00\u884c\u6d4b\u8bd5\u8bfb\u53d6\u4fdd\u6301\u5bc4\u5b58\u5668\npython3 -c \"\nfrom pymodbus.client import ModbusTcpClient\nc = ModbusTcpClient('192.168.1.100')\nc.connect()\nrr = c.read_holding_registers(0, 5, slave=1)\nprint('Values:', rr.registers if not rr.isError() else rr)\nc.close()\n\"\n```\n\n### \u7528 xxd \u5206\u6790\u4e8c\u8fdb\u5236 Modbus \u6570\u636e\n\n```\n# \u5982\u679c\u4f60\u6709\u4e00\u6bb5 Modbus \u4e8c\u8fdb\u5236\u6570\u636e\u6587\u4ef6\uff0c\u53ef\u4ee5\u7528 xxd \u67e5\u770b\nxxd modbus_dump.bin\n\n# \u6216\u8005\u7528 hexdump \u683c\u5f0f\u5316\u663e\u793a\nhexdump -C modbus_dump.bin | head -20\n```\n\n## Modbus \u534f\u8bae\u51fd\u6570\u5feb\u901f\u53c2\u8003\n\n\u8c03\u8bd5\u65f6\u7ecf\u5e38\u9700\u8981\u67e5\u529f\u80fd\u7801\u5bf9\u5e94\u8868\uff0c\u4ee5\u4e0b\u662f\u5e38\u7528\u529f\u80fd\u7801\u901f\u67e5\uff1a\n\n\u529f\u80fd\u7801\u540d\u79f0\u6570\u636e\u7c7b\u578b\u64cd\u4f5c\n\n01 (0x01)Read Coils\u7ebf\u5708\uff080xxxx\uff09\u8bfb 1-bit\n02 (0x02)Read Discrete Inputs\u79bb\u6563\u8f93\u5165\uff081xxxx\uff09\u8bfb 1-bit\n03 (0x03)Read Holding Registers\u4fdd\u6301\u5bc4\u5b58\u5668\uff084xxxx\uff09\u8bfb 16-bit\n04 (0x04)Read Input Registers\u8f93\u5165\u5bc4\u5b58\u5668\uff083xxxx\uff09\u8bfb 16-bit\n05 (0x05)Write Single Coil\u7ebf\u5708\u5199 1-bit\n06 (0x06)Write Single Register\u4fdd\u6301\u5bc4\u5b58\u5668\u5199 16-bit\n15 (0x0F)Write Multiple Coils\u7ebf\u5708\u5199\u591a 1-bit\n16 (0x10)Write Multiple Registers\u4fdd\u6301\u5bc4\u5b58\u5668\u5199\u591a 16-bit\n23 (0x17)Read\/Write Multiple Registers\u4fdd\u6301\u5bc4\u5b58\u5668\u8bfb\u5199\u7ec4\u5408\n\n### Modbus \u5f02\u5e38\u7801\u901f\u67e5\n\n\u5f02\u5e38\u7801\u542b\u4e49\u5e38\u89c1\u539f\u56e0\n\n01\u975e\u6cd5\u529f\u80fd\u7801\u8bbe\u5907\u4e0d\u652f\u6301\u8be5\u529f\u80fd\u7801\n02\u975e\u6cd5\u6570\u636e\u5730\u5740\u8bf7\u6c42\u7684\u5730\u5740\u8303\u56f4\u8d85\u51fa\u8bbe\u5907\u53ef\u7528\u8303\u56f4\n03\u975e\u6cd5\u6570\u636e\u503c\u5199\u5165\u7684\u503c\u8d85\u51fa\u5141\u8bb8\u8303\u56f4\n04\u4ece\u7ad9\u8bbe\u5907\u6545\u969c\u8bbe\u5907\u5185\u90e8\u9519\u8bef\uff0c\u65e0\u6cd5\u5904\u7406\u8bf7\u6c42\n05\u786e\u8ba4\uff08ACK\uff09\u8bf7\u6c42\u5df2\u63a5\u53d7\u4f46\u9700\u8981\u8f83\u957f\u65f6\u95f4\u5904\u7406\n06\u4ece\u7ad9\u8bbe\u5907\u5fd9\u8bbe\u5907\u6b63\u5fd9\uff0c\u7a0d\u540e\u91cd\u8bd5\n\n## \u603b\u7ed3\n\nModbus \u8c03\u8bd5\u4e0d\u9700\u8981\u6bcf\u6b21\u90fd\u7528\u91cd\u578b\u5de5\u5177\u3002\u5728\u7ebf\u89e3\u6790\u5668\u9002\u5408\u5feb\u901f\u89e3\u7801\u62a5\u6587\u3001\u626b\u63cf\u5668\u9002\u5408\u9006\u5411\u672a\u77e5\u8bbe\u5907\u7684\u5bc4\u5b58\u5668\u6620\u5c04\u3001\u547d\u4ee4\u884c\u5de5\u5177\u9002\u5408\u81ea\u52a8\u5316\u6d4b\u8bd5\u3002\u638c\u63e1\u8fd9\u4e9b\"\u5c0f\u5de5\u5177\"\u80fd\u8ba9\u4f60\u7684 Modbus \u8c03\u8bd5\u6548\u7387\u7ffb\u500d\u2014\u2014\u9047\u5230\u95ee\u9898\u5148\u7528\u6700\u8f7b\u91cf\u7684\u5de5\u5177\u5b9a\u4f4d\uff0c\u53ea\u6709\u5f53\u9700\u8981\u6df1\u5165\u5206\u6790\u65f6\u624d\u52a8\u7528 Wireshark \u7b49\u91cd\u578b\u5de5\u5177\u3002\n\n---\n*modbus.cn*\n"