Auto Discovery of the slave id of modbus device in a network

Question

How to determine whether device connected to the network is modbus device after getting valid ip range through broadcasting mechanism or How to Auto Discover the slave id of modbus device connected to the gateway ?

Answer 1

You can try using nmap:

here you can find the tutorial to use.

You can also use Metasploit-framework(msfconsole):

• Modbus Client Utility, you can read/write to modus device
• Modbus Version Scanner, to detect modbus service
• Modbus find unit ID, it only works under modbus TCP/IP, it send the request "0x04" to all the modbus ID(0-254) and check the response.