This example is based on the PLC bus protocol analysis function of BCNet-FX-S to realize the detection of HMI touch screen data points and analyze the current PLC important point table information in combination with the touch screen panel information.
BCNet-FX-S is used for Mitsubishi FX1S/1N/2N/3S/3G/3GA/3GC/3U/3UC series, Huichuan, Shihlin AX, Hogawa and other PLC Ethernet data acquisition, which is very convenient to build production management system. The module integrates WiFi function and supports AP mode, STA mode and AP+STA mode, which is very convenient for building WiFi network and PLC programming and data acquisition directly through WiFi.
BCNet-FX-S adopts industrial grade design, rail mount with communication cable. BCNet-FX-S supports most SCADA software in the industrial control field and supports Mitsubishi MC Ethernet protocol and ModbusTCP master-slave communication mode.
Hardware connection
1, as shown in the original system for the touch screen connected to the FX programming port, now does not change the original system based on the addition of the BCNet-FX-S module to achieve the Ethernet data acquisition, PLC programming and data exchange between different PLC functions.
Detection of touch screen and FX point table
1、There are 4 variables on the current touch screen, “number of qualified products”, “number of defective products”, “total number of pieces” and “start to put material “, the connected device is FX2N-32MR.
2, run “BCDeviceV1031.exe”, search to BCNet-FX-S module, click “Device Operation Diagnosis”.
3, in the device operation diagnosis, you can check the current serial bus (PLC) and expansion bus (HMI) operating status, click the “point table detection” button.
4,Enter “BCNet888” in the pop-up authority authentication window to enter the S7 bus analysis interface, as shown below.
①The touch screen panel can be seen from the selection of unsigned integer 32-bit data, providing “unsigned integer 32-bit”, “signed integer 32-bit” and other types of analysis, here select “unsigned integer 32-bit “.
② site information prompt for “HMI read PLC”, indicating that the current touch screen is through the module for communication, that is, through the BCNet-FX-S transit mode for communication.
(③ can be seen that the current data stream “18”, “12885” and “12903” correspond to “D650~651 “, “D600~601” and “D100~101”, through the touch panel information, we can know that “D650~651” corresponds to “Number of defective products”, “D600~601” corresponds to “Number of qualified products”, “D100~101 “D100~101” corresponds to the “total number of pieces”.
④ The current list can be exported to an Excel file for further editing and processing.
5,The “Start Discharge” button of the touch screen can be set, and the BCDevice tool can detect the current behavior of setting “Y10” of the HMI to the PLC, and analyze the “Start Discharge “The corresponding point is “Y10”.
Through the PLC bus protocol analysis function of BCNet-FX-S, the data flow of the current FX programming port can be analyzed to detect the current read behavior and write behavior of the touch screen, and combined with the panel information of the touch screen, the important point table information of the PLC can be derived; in the case that the PLC program encryption and the touch screen program encryption cannot know the PLC point table information, the important point table information of the PLC can be detected through this module, which provides convenience and economy for the implementation of the information collection program.