Help
  • Explore Community
  • Get Started
  • Ask the Community
  • How-To & Best Practices
  • Contact Support
Notifications
Login / Register
Community
Community
Notifications
close
  • Forums
  • Knowledge Center
  • Events & Webinars
  • Ideas
  • Blogs
Help
Help
  • Explore Community
  • Get Started
  • Ask the Community
  • How-To & Best Practices
  • Contact Support
Login / Register
Sustainability
Sustainability

Ask Me About Webinar: Data Center Assets - Modeling, Cooling, and CFD Simulation
Join our 30-minute expert session on July 10, 2025 (9:00 AM & 5:00 PM CET), to explore Digital Twins, cooling simulations, and IT infrastructure modeling. Learn how to boost resiliency and plan power capacity effectively. Register now to secure your spot!

Modbus RTU capturing in Wireshark

Building Automation Knowledge Base

Schneider Electric Building Automation Knowledge Base is a self-service resource to answer all your questions about EcoStruxure Building suite, Andover Continuum, Satchwell, TAC…

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • Home
  • Schneider Electric Community
  • Knowledge Center
  • Building Automation Knowledge Base
  • Modbus RTU capturing in Wireshark
Options
  • Bookmark
  • Subscribe
  • Email to a Friend
  • Printer Friendly Page
  • Report Inappropriate Content
Invite a Co-worker
Send a co-worker an invite to the portal.Just enter their email address and we'll connect them to register. After joining, they will belong to the same company.
You have entered an invalid email address. Please re-enter the email address.
This co-worker has already been invited to the Exchange portal. Please invite another co-worker.
Please enter email address
Send Invite Cancel
Invitation Sent
Your invitation was sent.Thanks for sharing Exchange with your co-worker.
Send New Invite Close

Related Forums

  • Intelligent Devices Forum

Previous Next
Contributors
  • David_Purser
    David_Purser
  • CraigEl
    CraigEl

Invite a Colleague

Found this content useful? Share it with a Colleague!

Invite a Colleague Invite
Back to Building Automation Knowledge Base
Options
  • Bookmark
  • Subscribe
  • Email to a Friend
  • Printer Friendly Page
  • Report Inappropriate Content
3 Likes
125 Views

Link copied. Please paste this link to share this article on your social media post.

Trying to translate this page to your language?
Select your language from the translate dropdown in the upper right. arrow
Translate to: English
  • (Français) French
  • (Deutsche) German
  • (Italiano) Italian
  • (Português) Portuguese
  • (Русский) Russian
  • (Español) Spanish

Modbus RTU capturing in Wireshark

Picard David_Purser Picard
‎2025-07-22 03:34 PM

on ‎2025-07-22 03:34 PM

Issue

Need to analyze Modbus RTU communication packets for SpaceLogic controllers.

Product Line

EcoStruxure Building Operation

Environment

  • Building Operation Automation Server
  • Building Operation Multi-purpose Controller (MPC)
  • Building Operation Room Controller (RPC)

Cause

MP and RP controllers do not support packet logging or viewing on their modbus serial ports. Additionally, RP controllers lack transmit/receive LEDs for Modbus, making diagnostics more difficult.

For differences between Automation Server and MP/RP controller Modbus operations, refer to the article: Modbus in the MP and RP Controller Introduction 

Resolution

Wireshark Installation

  1. Install the latest Wireshark application from: Wireshark • Go Deep | Download
  2. Click on the "download" icon and select your operating system
  3. Launch the downloaded setup file to install Wireshark. The default installation options can typically be used, unless the user has a specific reason to select others.

Modbus RTU capture extension for Wireshark

  1. The Github project can be found at: GitHub - jzhvymetal/WiresharkSerialAdapter: Wireshark Serial Adapter for Windows
  2. Navigate to the latest version and download WireSharkSerialAdapter.exe image_4.png
  3. With this file downloaded, navigate to the Wireshark application folder and locate the following subfolder. If it does not exist, create it.  Copy WireSharkSerialAdapter.exe into this folder. NOTE: This is not an executable to be launched by the user. Wireshark will execute it as an additional capture option.image_6.png

USB-to-RS485 communications adapter

  1. Install the USB-to-RS485 adapter to PC.
  2. Wire the RS-485 adapter to the SpaceLogic RS-485 port to be captured.
  3. Check Device Manager -> Ports to determine the COM port number it is using.

Wireshark Configuration

  1. Launch the Wireshark application. The initial start-up screen will list the available capture ports. This list will be different for each user’s computer, depending on its configuration. Below is an example of what this screen looks like: image_7.png
  2. In this list, Serial Port Adapter (WireSharkSerialAdapter.exe) should be an option. Click on the settings icon image_8.png to the left to bring up the setup options: image_9.png
  3. Launch Windows Device Manager to confirm the COM port assigned to the connected USB-485 adapter
  4. Select this COM port and set the baud rate, byte size, parity and stop bits of the Modbus RTU channel to be monitored.
  5. Use the Interframe settings shown in the screenshot above.
  6. Select User DLT 147 as the Wireshark DLT.
  7. Save these settings.
  8. Returning to the main screen, select Preferences from the Edit pull-down menu and navigate to Protocols: image_10.png
  9. Expand Protocols and select DLT_User. Click on Edit to add an entry to the Encapsulation Tables. Click the “+” button to add a DLT image_11.png
  10. Select User 0 (DLT = 147) and manually edit the Payload dissector to be mbrtu: image_12.png
  11. Click OK and return to the main screen

Wireshark Capturing

  1. With the COM port properly configured, a traffic capture is initiated by double-clicking the selected COM port. The content of the capture will depend on the connected devices. The following is an example of the active window panes: image_13.png
  2. The main pane is an overall summary of the Modbus RTU traffic, with a brief description of each message type. When a frame is selected in this pane, the lower-left pane contains a breakdown of the packet content by field-type, and the lower-right packet is the packet content in hexadecimal format.
  3. The selected frame number is displayed in the packet details frame on the lower left, as well as the contents of the Modbus message. In this example, the results of the Modbus Read Holding Request for 6 registers is shown.
  4. The Wireshark capture is stopped by clicking on the red square, second from the left
Labels (1)
Labels:
  • EcoStruxure Building Operation
Tags (1)
  • Find more articles tagged with:
  • DavidPurser25
Was this article helpful? Yes No
100% helpful (2/2)

Link copied. Please paste this link to share this article on your social media post.

To The Top!

Forums

  • APC UPS Data Center Backup Solutions
  • EcoStruxure IT
  • EcoStruxure Geo SCADA Expert
  • Metering & Power Quality
  • Schneider Electric Wiser

Knowledge Center

Events & webinars

Ideas

Blogs

Get Started

  • Ask the Community
  • Community Guidelines
  • Community User Guide
  • How-To & Best Practice
  • Experts Leaderboard
  • Contact Support
Brand-Logo
Subscribing is a smart move!
You can subscribe to this board after you log in or create your free account.
Forum-Icon

Create your free account or log in to subscribe to the board - and gain access to more than 10,000+ support articles along with insights from experts and peers.

Register today for FREE

Register Now

Already have an account? Login

Terms & Conditions Privacy Notice Change your Cookie Settings © 2025 Schneider Electric

This is a heading

With achievable small steps, users progress and continually feel satisfaction in task accomplishment.

Usetiful Onboarding Checklist remembers the progress of every user, allowing them to take bite-sized journeys and continue where they left.

of