MODBUS interface description

• General description
• FC3 functions
• FC16 functions
• FC23 functions
• Exception code description
• S7 compatibility

Introduction

This document describes the protocol used by the MODBUS server of the module.
The OPEN MODBUS protocol is based on the widely known MODBUS protocol.
OPEN MODBUS is an open protocol and is not manufacturer dependent.
It is mainly used to connect PLC and I/O devices.

Why a MODBUS Server on the MSX-E modules?

Thanks to the MODBUS server, it is possible to manage an MSX-E module with e.g.: a Siemens S7 PLC.
The S7 PLC can start acquisitions and read data from the MSX-E module!

Technical details

Please note that only MODBUS over TCP is standardized. Nonetheless in this present
version the server implements OPEN MODBUS/TCP class 0 and one function of the class 2 even on UDP sockets.

The MODBUS/TCP class 0 defines two types of query: FC3 and FC16.

• FC3 functions read register content from the memory of the remote system
  
• FC16 functions write new register content on the memory of the remote system
  

• FC23 functions read/write registers content from/to the memory of the remote system
  

Characteristics of this communication channel as the standardisation document describes it are:

• The default port used by the server is 512 in both UDP/IP and TCP/IP. You can change this via the web server.
• Data are sent in network order, i.e. big endian (Motorola formata). Use the standard C functions
  atons/atonl and ntohs/ntohl to convert values bigger than 1 bytes.
• Datastructures used to describe parameters that are embedded in on-wire frames must be packed.
  How to do that is compiler-dependant.

The ADDI-DATA MSX-E Modbus server offers the following extension to the standard:

• It is possible to configure the server to accept data sent in little endian (Intel format) (native order)
• In this case, the default port used is 215. You can change this via the web server.

As answer to query a client may receive an acknowledgement (named standard response onward) or an exception.
If an exception or an error occured, you can use the GetLastCommandStatus command to get the real error number (from the remote server).
Real error numbers are described for each command in the "Returns" field.

The chapter below describes the available functions and their parameters.
It also contains the precise description of all frames implied in a given action.

Functions in this group are used to read values on the module.

For new application(s) or automate communication it is recommended to use the function GetLastCommandStatusEx.

Description

Return the result of the last remote function call

Parameters:

[Response frame layout] ReturnValue: The return value of the remote function.

• 0 Always means success
• -100 means you should check Syserrno;
• for other values, check the documentation of the function

[Response frame layout] Syserrno: the value of the libc errno after the call to the remote function

[Response frame layout] Errstr: A nul-terminated string describing the error code Syserrno

Query frame layout

Response frame layout

Exception frame layout

Description

Return the result of the last remote function call

Parameters:

[Response frame layout] ReturnValue: The return value of the remote function.

• 0 Always means success
• -100 means you should check Syserrno;
• for other values, check the documentation of the function

[Response frame layout] Syserrno: the value of the libc errno after the call to the remote function

[Response frame layout] Errstr: A nul-terminated string describing the error code Syserrno

Query frame layout

Response frame layout

Exception frame layout

For new application(s) or automate communication it is recommended to use the function MXCommon__GetModuleTypeEx.

Description

Returns the type of the MSX-E Module

Parameters:

[Response frame layout] str: A 200-characters string

Query frame layout

Response frame layout

Exception frame layout

Description

Returns the type of the MSX-E Module

Parameters:

[Response frame layout] str: A 200-characters string

Query frame layout

Response frame layout

Exception frame layout

For new application(s) or automate communication it is recommended to use the function MXCommon__GetTimeEx.

Description

Get the time on the module

Parameters:

[Response frame layout] tv_sec: Number of seconds since the Epoch

[Response frame layout] tv_usec: Number of microseconds since the begin of the second

Query frame layout

Response frame layout

Exception frame layout

Description

Get the time on the module

Parameters:

[Response frame layout] tv_sec: Number of seconds since the Epoch

[Response frame layout] tv_usec: Number of microseconds since the begin of the second

Query frame layout

Response frame layout

Exception frame layout

For new application(s) or automate communication it is recommended to use the function MXCommon__TestCustomerIDEx.

Description

Permit to test the Customer ID (if the module has the right customer Key )

Parameters:

[Response frame layout] bValueArray: non crypted value array [16 bytes of random data]

[Response frame layout] bCryptedValueArray: Crypted value array [16 bytes of the crypted random data]

Query frame layout

Response frame layout

Exception frame layout

Description

Permit to test the Customer ID (if the module has the right customer Key )

Parameters:

[Response frame layout] bValueArray: non crypted value array [16 bytes of random data]

[Response frame layout] bCryptedValueArray: Crypted value array [16 bytes of the crypted random data]

Query frame layout

Response frame layout

Exception frame layout

Description

Read measured value on all modules.

Parameters:

[Response frame layout] ulValues : Array that contain the measured values.

• ulValues [0] : Module 0 value
• ulValues [1] : Module 1 value
• ulValues [2] : Module 2 value
• ulValues [3] : Module 3 value

  [Response frame layout] ulTimeStampLows : 32 bit low part of time stamp (us) array

  • ulTimeStampLows [0] : Module 0 time stamp (us)
  • ulTimeStampLows [1] : Module 1 time stamp (us)
  • ulTimeStampLows [2] : Module 2 time stamp (us)
  • ulTimeStampLows [3] : Module 3 time stamp (us)

    [Response frame layout] ulTimeStampHighs : 32 bit high part of time stamp (s) array

    • ulTimeStampHighs [0] : Module 0 time stamp (s)
    • ulTimeStampHighs [1] : Module 1 time stamp (s)
    • ulTimeStampHighs [2] : Module 2 time stamp (s)
    • ulTimeStampHighs [3] : Module 3 time stamp (s)

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Reference number (=register)	2	16-bit integer	4000	0xA00F	0x0FA0
      word count	2	16-bit integer	24	0x1800	0x0018

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	51	0x3300	0x0033
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Byte count	1	8-bit integer	48	0x30	0x30
      ulValues	16	32-bit integer array	See the description above	0x????????[4]	0x????????[4]
      ulTimeStampLows	16	32-bit integer array	See the description above	0x????????[4]	0x????????[4]
      ulTimeStampHighs	16	32-bit integer array	See the description above	0x????????[4]	0x????????[4]

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x83	0x83	0x83
      Exception code	1	8-bit integer	See corresponding chapter	??	??

      Function MSXE17xx__MFIncCounterRead32BitsValue0

      Description

      Read measured value on the module 0.

      Parameters:

      [Response frame layout] ulValue : Measured value.

      [Response frame layout] ulTimeStampLow : 32 bit low part of time stamp (us)

      [Response frame layout] ulTimeStampHigh : 32 bit high part of time stamp (s)

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Reference number (=register)	2	16-bit integer	4050	0xD20F	0x0FD2
      word count	2	16-bit integer	6	0x0600	0x0006

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	15	0x0F00	0x000F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Byte count	1	8-bit integer	12	0x0C	0x0C
      ulValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulTimeStampLow	4	32-bit integer	See the description above	0x????????	0x????????
      ulTimeStampHigh	4	32-bit integer	See the description above	0x????????	0x????????

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x83	0x83	0x83
      Exception code	1	8-bit integer	See corresponding chapter	??	??

      Function MSXE17xx__MFIncCounterRead32BitsValue1

      Description

      Read measured value on the module 1.

      Parameters:

      [Response frame layout] ulValue : Measured value.

      [Response frame layout] ulTimeStampLow : 32 bit low part of time stamp (us)

      [Response frame layout] ulTimeStampHigh : 32 bit high part of time stamp (s)

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Reference number (=register)	2	16-bit integer	4100	0x0410	0x1004
      word count	2	16-bit integer	6	0x0600	0x0006

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	15	0x0F00	0x000F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Byte count	1	8-bit integer	12	0x0C	0x0C
      ulValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulTimeStampLow	4	32-bit integer	See the description above	0x????????	0x????????
      ulTimeStampHigh	4	32-bit integer	See the description above	0x????????	0x????????

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x83	0x83	0x83
      Exception code	1	8-bit integer	See corresponding chapter	??	??

      Function MSXE17xx__MFIncCounterRead32BitsValue2

      Description

      Read measured value on the module 2.

      Parameters:

      [Response frame layout] ulValue : Measured value.

      [Response frame layout] ulTimeStampLow : 32 bit low part of time stamp (us)

      [Response frame layout] ulTimeStampHigh : 32 bit high part of time stamp (s)

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Reference number (=register)	2	16-bit integer	4150	0x3610	0x1036
      word count	2	16-bit integer	6	0x0600	0x0006

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	15	0x0F00	0x000F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Byte count	1	8-bit integer	12	0x0C	0x0C
      ulValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulTimeStampLow	4	32-bit integer	See the description above	0x????????	0x????????
      ulTimeStampHigh	4	32-bit integer	See the description above	0x????????	0x????????

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x83	0x83	0x83
      Exception code	1	8-bit integer	See corresponding chapter	??	??

      Function MSXE17xx__MFIncCounterRead32BitsValue3

      Description

      Read measured value on the module 3.

      Parameters:

      [Response frame layout] ulValue : Measured value.

      [Response frame layout] ulTimeStampLow : 32 bit low part of time stamp (us)

      [Response frame layout] ulTimeStampHigh : 32 bit high part of time stamp (s)

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Reference number (=register)	2	16-bit integer	4200	0x6810	0x1068
      word count	2	16-bit integer	6	0x0600	0x0006

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	15	0x0F00	0x000F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Byte count	1	8-bit integer	12	0x0C	0x0C
      ulValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulTimeStampLow	4	32-bit integer	See the description above	0x????????	0x????????
      ulTimeStampHigh	4	32-bit integer	See the description above	0x????????	0x????????

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x83	0x83	0x83
      Exception code	1	8-bit integer	See corresponding chapter	??	??

      Function MSXE17xx__DigitalIOReadAllChannelsValue

      Description

      Read all the digital I/O channel value. If channel is configured as output, then this function return the status of the output

      Parameters:

      [Response frame layout]ulChannelsValue : Channels value

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        • 0 : No error.
        • -1 : Means an system error occured
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Reference number (=register)	2	16-bit integer	7000	0x581B	0x1B58
      word count	2	16-bit integer	2	0x0200	0x0002

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	7	0x0700	0x0007
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Byte count	1	8-bit integer	4	0x04	0x04
      ulChannelsValue	4	32-bit integer	See the description above	0x????????	0x????????

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x83	0x83	0x83
      Exception code	1	8-bit integer	See corresponding chapter	??	??

      Function MSXE17xx__DigitalIOTestShortCircuit

      Description

      Parameters:

      [Response frame layout]ulValue : short circuit status: from 0 to 0xffff, one bit for each output

      • 0 : no short circuit
      • 1 : short circuit

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : Means an system error occured
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Reference number (=register)	2	16-bit integer	7050	0x8A1B	0x1B8A
      word count	2	16-bit integer	2	0x0200	0x0002

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	7	0x0700	0x0007
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Byte count	1	8-bit integer	4	0x04	0x04
      ulValue	4	32-bit integer	See the description above	0x????????	0x????????

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x83	0x83	0x83
      Exception code	1	8-bit integer	See corresponding chapter	??	??

      Function MSXE17xx__IOWatchdogGetStatusAndValue

      Description

      Get watchdog current status and value information

      Parameters:

      [Response frame layout]ulStatus : Channels value

      • BIN XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXX0: is stopped
      • BIN XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXX1: is running
      • BIN XXXXXXXX XXXXXXXX XXXXXXXX XXXXXX0X: is not run down
      • BIN XXXXXXXX XXXXXXXX XXXXXXXX XXXXXX1X: is run down

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : Means an system error occured
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Reference number (=register)	2	16-bit integer	8000	0x401F	0x1F40
      word count	2	16-bit integer	6	0x0600	0x0006

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	15	0x0F00	0x000F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Byte count	1	8-bit integer	12	0x0C	0x0C
      ulStatus	4	32-bit integer	See the description above	0x????????	0x????????
      ulValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulInfo	4	32-bit integer	See the description above	0x????????	0x????????

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x83	0x83	0x83
      Exception code	1	8-bit integer	See corresponding chapter	??	??

      Function MSXE170x__DigitalIOReadAllChannelsValue

      Description

      Read all the digital I/O channel value. If channel is configured as output, then this function return the status of the output

      For new application(s) or automat communication is it recommended tu use the function MSXE17xx__DigitalIOReadAllChannelsValue.

      Parameters:

      [Response frame layout]ChannelsValue:Channels value

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Reference number (=register)	2	16-bit integer	100	0x6400	0x0064
      word count	2	16-bit integer	2	0x0200	0x0002

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	8	0x0800	0x0008
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x03	0x03	0x03
      Byte count	2	16-bit integer	4	0x0400	0x0004
      ChannelsValue	4	32-bit integer	See the description above	0x????????	0x????????

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x83	0x83	0x83
      Exception code	1	8-bit integer	See corresponding chapter	??	??

      FC16 (write multiple register) Functions

      Top

      Functions in this group are used to set value on the module.

      MXCommon__SetHardwareTriggerFilterTime	Register: 100
      MXCommon__SetHardwareTriggerFilterTimeEx	Register: 11000
      MXCommon__InitAndStartSynchroTimer	Register: 101
      MXCommon__InitAndStartSynchroTimerEx	Register: 11050
      MXCommon__StopAndReleaseSynchroTimer	Register: 102
      MXCommon__StopAndReleaseSynchroTimerEx	Register: 11100
      MXCommon__Reboot	Register: 103
      MXCommon__RebootEx	Register: 11150
      MXCommon__SetCustomerKey	Register: 104
      MXCommon__SetCustomerKeyEx	Register: 11200
      MXCommon__SetFilterChannels	Register: 105
      MXCommon__SetFilterChannelsEx	Register: 11250
      MSXE17xx__MFCommonSetInputsFilter	Register: 6000
      MSXE17xx__MFCommonReferenceVoltageActivation	Register: 6050
      MSXE17xx__MFCommonSetFIFO0Level	Register: 6100
      MSXE17xx__MFCommonEnableDisableTriggerGate	Register: 6150
      MSXE17xx__MFIncCounterInit	Register: 4300
      MSXE17xx__MFIncCounterRelease	Register: 4350
      MSXE17xx__MFIncCounterClear	Register: 4400
      MSXE17xx__MFIncCounterWrite32BitValue	Register: 4450
      MSXE17xx__MFIncCounterInitAndEnableCompareLogic	Register: 4500
      MSXE17xx__MFIncCounterDisableAndReleaseCompareLogic	Register: 4550
      MSXE17xx__MFIncCounterInitHardwareTrigger	Register: 4600
      MSXE17xx__MFIncCounterReleaseHardwareTrigger	Register: 4650
      MSXE17xx__MFIncCounterInitIndex	Register: 4700
      MSXE17xx__MFIncCounterReleaseIndex	Register: 4750
      MSXE17xx__MFIncCounterInitAndEnableLatch	Register: 4800
      MSXE17xx__MFIncCounterDisableAndReleaseLatch	Register: 4850
      MSXE17xx__MFIncCounterInitAndEnableClear	Register: 4900
      MSXE17xx__MFIncCounterDisableAndReleaseClear	Register: 4950
      MSXE17xx__MFIncCounterInitAndEnableFrequencyMeasurement	Register: 5000
      MSXE17xx__MFIncCounterDisableAndReleaseFrequencyMeasurement	Register: 5050
      MSXE17xx__DigitalIOWriteAllChannelsValue	Register: 7100
      MSXE17xx__DigitalIORearmShortCircuit	Register: 7150
      MSXE17xx__DigitalIOInitPort	Register: 7200
      MSXE17xx__IOWatchdogInitAndStart	Register: 8050
      MSXE17xx__IOWatchdogStopAndRelease	Register: 8100
      MSXE170x__MFIncCounterInit	Register: 1
      MSXE170x__MFIncCounterRelease	Register: 2
      MSXE170x__MFIncCounterClear	Register: 3
      MSXE170x__MFIncCounterInitAndEnableLatchRegister	Register: 4
      MSXE170x__MFIncCounterDisableAndReleaseLatchRegister	Register: 5
      MSXE170x__MFIncCounterWrite32BitValue	Register: 6
      MSXE170x__MFIncCounterSetFIFO0Level	Register: 8
      MSXE170x__DigitalIOWriteAllChannelsValue	Register: 7

      Function MXCommon__SetHardwareTriggerFilterTime

      For new application(s) or automate communication it is recommended to use the function MXCommon__SetHardwareTriggerFilterTimeEx.

      Description

      Sets the filter time for the hardware trigger input in 250ns step (max value : 65535 ).

      On the MSX-E3011 system, the step of the hardware trigger filter is 622ns.

      Parameters

      • [Query frame layout] ulFilterTime Filter time for the hardware trigger input in 250ns step (max value : 65535 ).
        • 0: disable the filter
        • 1: filter of 250ns
        • 2: filter of 500ns
        • ...
        • 65535: filter of 16ms
      • [Query frame layout] ulOption Reserved. Set to 0

      Returns

      Possible return value on the remote system (read them with GetLastCommandStatus).

      • 0 The remote function performed OK
      • -1 Internal system error occurred. See value of syserrno

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	16	0x1000	0x0010
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	100	0x6400	0x0064
      word count	2	16-bit integer	4	0x0400	0x0004
      byte count	2	16-bit integer	8	0x0800	0x0008
      ulFilterTime	4	32-bit integer	See the description above	0x????????	0x????????
      Reserved	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	100	0x6400	0x0064
      word count	2	16-bit integer	4	0x0400	0x0004

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MXCommon__SetHardwareTriggerFilterTimeEx

      Description

      Sets the filter time for the hardware trigger input in 250ns step (max value : 65535 ).

      On the MSX-E3011 system, the step of the hardware trigger filter is 622ns.

      Parameters

      • [Query frame layout] ulFilterTime Filter time for the hardware trigger input in 250ns step (max value : 65535 ).
        • 0: disable the filter
        • 1: filter of 250ns
        • 2: filter of 500ns
        • ...
        • 65535: filter of 16ms
      • [Query frame layout] ulOption Reserved. Set to 0

      Returns

      Possible return value on the remote system (read them with GetLastCommandStatusEx).

      • 0 The remote function performed OK
      • -1 Internal system error occurred. See value of syserrno

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	15	0x0F00	0x000F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11000	0xF82A	0x2AF8
      word count	2	16-bit integer	4	0x0400	0x0004
      byte count	1	8-bit integer	8	0x08	0x08
      ulFilterTime	4	32-bit integer	See the description above	0x????????	0x????????
      Reserved	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11000	0xF82A	0x2AF8
      word count	2	16-bit integer	4	0x0400	0x0004

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MXCommon__InitAndStartSynchroTimer

      For new application(s) or automate communication it is recommended to use the function MXCommon__InitAndStartSynchroTimerEx.

      Description

      Init and start the synchronisation timer of the module (not already available on all module)

      Parameters:

      [Query frame layout] ulTimeBase: Time base of the timer (0 for us, 1 for ms, 2 for s)

      [Query frame layout] ulReloadValue: Timer reload value (0 to 0xFFFF), minimum reload time is 5 us

      [Query frame layout] ulNbrOfCycle: Number of timer cycle
      

      • 0: continuous
      • > 0: defined number of cycle

      [Query frame layout] ulGenerateTriggerMode:
      

      • 0: Wait the time overflow to set the synchronisation trigger
      • 1: Set the synchronisation trigger by the start of the timer and after each time overflow

      [Query frame layout] ulOption01:Define the source of the trigger

      • 0 : Trigger disabled
        
      • 1 : Enable the hardware figital input trigger

      [Query frame layout] ulOption02:Define the edge of the hardware trigger who generates a trigger action

      • 1 : rising edge (Only if hardware trigger selected)
      • 2 : falling edge (Only if hardware trigger selected)
      • 3 : Both front (Only if hardware trigger selected)

      [Query frame layout] ulOption03:Define the number of trigger events before the action occur

      • 1 : all trigger event start the action
      • max value : 65535

      [Query frame layout] ulOption04: Reserved

      Returns:

      Possible return value on the remote system (read them with GetLastCommandStatus)
      • 0 : means the remote function performed OK
      • -1: means an system error occured
      • -2: not available time base
      • -3: timer reload value can not be greater than 65535
      • -4: minimum time reload is 5 us
      • -5: Number of cycle can not be greater than 65535
      • -6: Generate trigger mode error
      • -100: Init timer error
      • -101: Start timer error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	40	0x2800	0x0028
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	101	0x6500	0x0065
      word count	2	16-bit integer	16	0x1000	0x0010
      byte count	2	16-bit integer	32	0x2000	0x0020
      ulTimeBase	4	32-bit integer	See the description above	0x????????	0x????????
      ulReloadValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulNbrOfCycle	4	32-bit integer	See the description above	0x????????	0x????????
      ulGenerateTriggerMode	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption03	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption04	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	101	0x6500	0x0065
      word count	2	16-bit integer	16	0x1000	0x0010

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MXCommon__InitAndStartSynchroTimerEx

      Description

      Init and start the synchronisation timer of the module (not already available on all module)

      Parameters:

      [Query frame layout] ulTimeBase: Time base of the timer (0 for us, 1 for ms, 2 for s)

      [Query frame layout] ulReloadValue: Timer reload value (0 to 0xFFFF), minimum reload time is 5 us

      [Query frame layout] ulNbrOfCycle: Number of timer cycle
      

      • 0: continuous
      • > 0: defined number of cycle

      [Query frame layout] ulGenerateTriggerMode:
      

      • 0: Wait the time overflow to set the synchronisation trigger
      • 1: Set the synchronisation trigger by the start of the timer and after each time overflow

      [Query frame layout] ulOption01:Define the source of the trigger

      • 0 : Trigger disabled
        
      • 1 : Enable the hardware figital input trigger

      [Query frame layout] ulOption02:Define the edge of the hardware trigger who generates a trigger action

      • 1 : rising edge (Only if hardware trigger selected)
      • 2 : falling edge (Only if hardware trigger selected)
      • 3 : Both front (Only if hardware trigger selected)

      [Query frame layout] ulOption03:Define the number of trigger events before the action occur

      • 1 : all trigger event start the action
      • max value : 65535

      [Query frame layout] ulOption04: Reserved

      Returns:

      Possible return value on the remote system (read them with GetLastCommandStatusEx)
      • 0 : means the remote function performed OK
      • -1: means an system error occured
      • -2: not available time base
      • -3: timer reload value can not be greater than 65535
      • -4: minimum time reload is 5 us
      • -5: Number of cycle can not be greater than 65535
      • -6: Generate trigger mode error
      • -100: Init timer error
      • -101: Start timer error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	39	0x2700	0x0027
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11050	0x2A2B	0x2B2A
      word count	2	16-bit integer	16	0x1000	0x0010
      byte count	1	8-bit integer	32	0x20	0x20
      ulTimeBase	4	32-bit integer	See the description above	0x????????	0x????????
      ulReloadValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulNbrOfCycle	4	32-bit integer	See the description above	0x????????	0x????????
      ulGenerateTriggerMode	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption03	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption04	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11050	0x2A2B	0x2B2A
      word count	2	16-bit integer	16	0x1000	0x0010

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MXCommon__StopAndReleaseSynchroTimer

      For new application(s) or automate communication it is recommended to use the function MXCommon__StopAndReleaseSynchroTimerEx.

      Description

      stop the synchronisation timer (not already available on all module)

      Parameters:

      [Query frame layout] ulOption01 : Reserved

      Returns:

      Possible return value on the remote system (read them with GetLastCommandStatus)
      • 0 : means the remote function performed OK
      • -1: means an system error occured
      • -100: Start/Stop timer error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	12	0x0C00	0x000C
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	102	0x6600	0x0066
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	2	16-bit integer	4	0x0400	0x0004
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	102	0x6600	0x0066
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MXCommon__StopAndReleaseSynchroTimerEx

      Description

      stop the synchronisation timer (not already available on all module)

      Parameters:

      [Query frame layout] ulOption01 : Reserved

      Returns:

      Possible return value on the remote system (read them with GetLastCommandStatusEx)
      • 0 : means the remote function performed OK
      • -1: means an system error occured
      • -100: Start/Stop timer error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	11	0x0B00	0x000B
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11100	0x5C2B	0x2B5C
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	1	8-bit integer	4	0x04	0x04
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11100	0x5C2B	0x2B5C
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MXCommon__Reboot

      For new application(s) or automate communication it is recommended to use the function MXCommon__RebootEx.

      Description

      Ask the MSX-E module to reboot

      Parameters:

      [Query frame layout] Dummy : Reserved

      Returns:

      Possible return value on the remote system (read them with GetLastCommandStatus)
      • 0 : means the remote function performed OK
      • -1: means an system error occured (probably EPERM)

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	12	0x0C00	0x000C
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	103	0x6700	0x0067
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	2	16-bit integer	4	0x0400	0x0004
      Dummy	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	103	0x6700	0x0067
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MXCommon__RebootEx

      Description

      Ask the MSX-E module to reboot

      Parameters:

      [Query frame layout] Dummy : Reserved

      Returns:

      Possible return value on the remote system (read them with GetLastCommandStatusEx)
      • 0 : means the remote function performed OK
      • -1: means an system error occured (probably EPERM)

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	11	0x0B00	0x000B
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11150	0x8E2B	0x2B8E
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	1	8-bit integer	4	0x04	0x04
      Dummy	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11150	0x8E2B	0x2B8E
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MXCommon__SetCustomerKey

      For new application(s) or automate communication it is recommended to use the function MXCommon__SetCustomerKeyEx.

      Description

      Permit to set the Customer key

      Parameters:

      [Query frame layout] bKey : Customer key (only writable on the module) [32 bytes containing a AES key]

      [Query frame layout] bPublicKey : IV (Initialisation vector) for the AES cryptography [16 bytes containing a AES key]

      Returns:

      Possible return value on the remote system (read them with GetLastCommandStatus)
      • 0 : means the remote function performed OK
      • -1: means an system error occured (probably EPERM)

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	56	0x3800	0x0038
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	104	0x6800	0x0068
      word count	2	16-bit integer	24	0x1800	0x0018
      byte count	2	16-bit integer	48	0x3000	0x0030
      bKey	32	8-bit integer array	See the description above	0x??[32]	0x??[32]
      bPublicKey	16	8-bit integer array	See the description above	0x??[16]	0x??[16]

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	104	0x6800	0x0068
      word count	2	16-bit integer	24	0x1800	0x0018

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MXCommon__SetCustomerKeyEx

      Description

      Permit to set the Customer key

      Parameters:

      [Query frame layout] bKey : Customer key (only writable on the module) [32 bytes containing a AES key]

      [Query frame layout] bPublicKey : IV (Initialisation vector) for the AES cryptography [16 bytes containing a AES key]

      Returns:

      Possible return value on the remote system (read them with GetLastCommandStatusEx)
      • 0 : means the remote function performed OK
      • -1: means an system error occured (probably EPERM)

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	55	0x3700	0x0037
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11200	0xC02B	0x2BC0
      word count	2	16-bit integer	24	0x1800	0x0018
      byte count	1	8-bit integer	48	0x30	0x30
      bKey	32	8-bit integer array	See the description above	0x??[32]	0x??[32]
      bPublicKey	16	8-bit integer array	See the description above	0x??[16]	0x??[16]

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11200	0xC02B	0x2BC0
      word count	2	16-bit integer	24	0x1800	0x0018

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MXCommon__SetFilterChannels

      For new application(s) or automate communication it is recommended to use the function MXCommon__SetFilterChannelsEx.

      Description

      Permit to set a filter per channel

      Parameters:

      [Query frame layout] ChannelList : Each index of the array is representing a channel. To set a filter on a channel, enter the filter ID. By default the value ist 0 (No filter).

      Returns:

      Possible return value on the remote system (read them with GetLastCommandStatus)
      • 0 : means the remote function performed OK
      • -1: means a system error occurred (probably EPERM)

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	24	0x1800	0x0018
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	105	0x6900	0x0069
      word count	2	16-bit integer	8	0x0800	0x0008
      byte count	2	16-bit integer	16	0x1000	0x0010
      ChannelList	16	8-bit integer array	See the description above	0x??[16]	0x??[16]

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	105	0x6900	0x0069
      word count	2	16-bit integer	8	0x0800	0x0008

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MXCommon__SetFilterChannelsEx

      Description

      Permit to set a filter per channel

      Parameters:

      [Query frame layout] ChannelList : Each index of the array is representing a channel. To set a filter on a channel, enter the filter ID. By default the value ist 0 (No filter).

      Returns:

      Possible return value on the remote system (read them with GetLastCommandStatusEx)
      • 0 : means the remote function performed OK
      • -1: means a system error occurred (probably EPERM)

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	23	0x1700	0x0017
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11250	0xF22B	0x2BF2
      word count	2	16-bit integer	8	0x0800	0x0008
      byte count	1	8-bit integer	16	0x10	0x10
      ChannelList	16	8-bit integer array	See the description above	0x??[16]	0x??[16]

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	11250	0xF22B	0x2BF2
      word count	2	16-bit integer	8	0x0800	0x0008

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFCommonSetInputsFilter

      Description

      Set a filter to the input of a multifunction sub module.

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3)

      [Query frame layout] ulInputAFilterValue : Filter value for input A (0 to 262143).

      • 0: Filter nicht benutzt
      • 1: 100 ns
      • 2: 200 ns
      • 3: 300 ns ...
      • 262143 : 26,2143 ms

      [Query frame layout] ulInputBFilterValue : Filter value for input B (0 to 262143).

      • 0: Filter nicht benutzt
      • 1: 100 ns
      • 2: 200 ns
      • 3: 300 ns ...
      • 262143 : 26,2143 ms

      [Query frame layout] ulInputCFilterValue : Filter value for input C (0 to 262143).

      • 0: Filter nicht benutzt
      • 1: 100 ns
      • 2: 200 ns
      • 3: 300 ns ...
      • 262143 : 26,2143 ms

      [Query frame layout] ulInputDFilterValue : Filter value for input D (0 to 262143).

      • 0: Filter nicht benutzt
      • 1: 100 ns
      • 2: 200 ns
      • 3: 300 ns ...
      • 262143 : 26,2143 ms

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : Means an system error occured
        • -2 : Multifunction sub module index selection error
        • -3 : Input A filter value selection error
        • -4 : Input B filter value selection error
        • -5 : Input C filter value selection error
        • -6 : Input D filter value selection error
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	27	0x1B00	0x001B
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	6000	0x7017	0x1770
      word count	2	16-bit integer	10	0x0A00	0x000A
      byte count	1	8-bit integer	20	0x14	0x14
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulInputAFilterValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulInputBFilterValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulInputCFilterValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulInputDFilterValue	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	6000	0x7017	0x1770
      word count	2	16-bit integer	10	0x0A00	0x000A

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFCommonReferenceVoltageActivation

      Description

      Permit to activate the reference voltage to pin D-

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3)

      [Query frame layout] ulActivationFlag : Filter value for input A (0 to 262143).

      • 0: normal mode from D- (Default mode)
      • 1: activate the reference voltage to pin D-

      [Query frame layout] ulOption01 : Reserved. Set it to 0.

      [Query frame layout] ulOption02 : Reserved. Set it to 0.

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : Means an system error occured
        • -2 : Multifunction sub module index selection error
          
        • -3 : Activation flag selection error
          
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	23	0x1700	0x0017
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	6050	0xA217	0x17A2
      word count	2	16-bit integer	8	0x0800	0x0008
      byte count	1	8-bit integer	16	0x10	0x10
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulActivationFlag	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	6050	0xA217	0x17A2
      word count	2	16-bit integer	8	0x0800	0x0008

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFCommonSetFIFO0Level

      Description

      Define the number of data bloc in the first FIFO before transmit the datas

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3)

      [Query frame layout] ulFIFOLevel : Define the FIFO level (1 to 200).

      [Query frame layout] ulTimeOutTimeBase : Define a Time out : permit to receive the data from the FIFO before the FIFO level is reached.
      Time base of the timer (0: disabled, 1 for us, 2 for ms, 3 for s)

      [Query frame layout] ulReloadValue : Time out reload value (1 to 0xFFFF)

      [Query frame layout] ulOption01 : Reserved. Set it to 0.

      [Query frame layout] ulOption02 : Reserved. Set it to 0.

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : Means an system error occured
        • -2 : Multifunction sub module index selection error
        • -3 : FIFO level value is wrong
        • -4 : Time out time base selection error
        • -5 : Time out value can not be null, if a time base is selected
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	31	0x1F00	0x001F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	6100	0xD417	0x17D4
      word count	2	16-bit integer	12	0x0C00	0x000C
      byte count	1	8-bit integer	24	0x18	0x18
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulFIFOLevel	4	32-bit integer	See the description above	0x????????	0x????????
      ulTimeOutTimeBase	4	32-bit integer	See the description above	0x????????	0x????????
      ulReloadValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	6100	0xD417	0x17D4
      word count	2	16-bit integer	12	0x0C00	0x000C

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFCommonEnableDisableTriggerGate

      Description

      Define the number of data bloc in the first FIFO before transmit the datas

      Parameters:

      [Query frame layout] ulTriggerConfiguration : Trigger configuration:

      • Bit 0: Hardware trigger
      • 0 : Disable hardware trigger gate
      • 1 : Enable hardware trigger gate

      [Query frame layout] ulOption01 : Reserved. Set it to 0.

      [Query frame layout] ulOption02 : Reserved. Set it to 0.

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : Means an system error occured
        • -2 : ulTriggerConfiguration parameter is wrong
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	19	0x1300	0x0013
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	6150	0x0618	0x1806
      word count	2	16-bit integer	6	0x0600	0x0006
      byte count	1	8-bit integer	12	0x0C	0x0C
      ulTriggerConfiguration	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	6150	0x0618	0x1806
      word count	2	16-bit integer	6	0x0600	0x0006

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterInit

      Description

      Initialise the counter
      [Query frame layout]
      • ulMFModuleIndex : index of the multifunction sub module (0 to 3).
        [Query frame layout]
      • ulCounterMode : Set the counter mode : either
        
        • MSXE170X_COUNTER_QUADRUPLE_MODE (0x4)
          
        • MSXE170X_COUNTER_DOUBLE_MODE (0x2)
          
        • MSXE170X_COUNTER_SIMPLE_MODE (0x1)
          
        • MSXE170X_COUNTER_DIRECT_MODE (0x0)
        [Query frame layout]
      • ulCounterOption : Set the counter option
        if in QUADRUPLE/DOUBLE/SIMPLE mode : either
        
        • MSXE170X_COUNTER_HYSTERESIS_ON (0x1)
          
        • MSXE170X_COUNTER_HYSTERESIS_OFF (0x0)
          
        if in DIRECT mode :
        
        • MSXE170X_COUNTER_INCREMENT (0x0)
          
        • MSXE170X_COUNTER_DECREMENT (0x1)
        [Query frame layout]
      • ulOption01 : Set it to 0 [Query frame layout]
      • ulOption02 : Set it to 0 [Query frame layout]
      • ulOption03 : Set it to 0 [Query frame layout]
      • ulOption04 : Set it to 0
      [Response frame layout]
    • Possible return value on the remote system (read them with GetLastCommandStatusEx):
      
      • 0: means the remote function performed OK
      • -1: means an system error occured
      • -2: Multifunction sub module index selection error
      • -3: Counter mode selection error
      • -4: Counter option selection error
      • -5: Multifunction sub module is not a incremental counter
      • -100: Init counter kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	35	0x2300	0x0023
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4300	0xCC10	0x10CC
      word count	2	16-bit integer	14	0x0E00	0x000E
      byte count	1	8-bit integer	28	0x1C	0x1C
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulCounterMode	4	32-bit integer	See the description above	0x????????	0x????????
      ulCounterOption	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption03	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption04	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4300	0xCC10	0x10CC
      word count	2	16-bit integer	14	0x0E00	0x000E

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterRelease

      Description

      Release the counter
      [Query frame layout]
      • ulMFModuleIndex : index of the multifunction sub module (0 to 3).
        
      [Response frame layout]
    • Possible return value on the remote system (read them with GetLastCommandStatusEx):
      
      • 0: means the remote function performed OK
        
      • -1: means an system error occured
        
      • -2: Multifunction sub module index selection error
        

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	11	0x0B00	0x000B
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4350	0xFE10	0x10FE
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	1	8-bit integer	4	0x04	0x04
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4350	0xFE10	0x10FE
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterClear

      Description

      Clear the 32 bits counter
      [Query frame layout]
      • ulMFModuleIndex : index of the multifunction sub module (0 to 3).
        
      [Response frame layout]
    • Possible return value on the remote system (read them with GetLastCommandStatusEx):
      • 0: means the remote function performed OK
      • -1: means an system error occured
      • -2: Multifunction sub module index selection error
      • -3: Multifunction sub module is not a incremental counter
      • -4: Incremental counter not initialised
      • -100: Kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	11	0x0B00	0x000B
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4400	0x3011	0x1130
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	1	8-bit integer	4	0x04	0x04
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4400	0x3011	0x1130
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterWrite32BitValue

      Description

      write a 32 bits counter value
      [Query frame layout]
      • ulMFModuleIndex : index of the multifunction sub module (0 to 3).
        [Query frame layout]
      • ulCounterValue : Counter value
      [Response frame layout]
    • Possible return value on the remote system (read them with GetLastCommandStatusEx):
      
      • 0: means the remote function performed OK
      • -1: means an system error occured
      • -2: Multifunction sub module index selection error
      • -3: Counter value error
      • -4: Multifunction sub module is not a incremental counter
      • -5: Incremental counter not initialised
      • -100: Kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	15	0x0F00	0x000F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4450	0x6211	0x1162
      word count	2	16-bit integer	4	0x0400	0x0004
      byte count	1	8-bit integer	8	0x08	0x08
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulCounterValue	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4450	0x6211	0x1162
      word count	2	16-bit integer	4	0x0400	0x0004

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterInitAndEnableCompareLogic

      Description

      Init and enable a counter compare value

      For each latch the data server send a 5 DWORD frame with following informations:
      

      • DWORD 0 : Time stamp micro s
      • DWORD 1 : Time stamp s
      • DWORD 2 :
        • D1-D0 : Sub module index (0 to 3)
        • D31-D16 : Sub module functionality (0)
        • or value of the digital inputs when ulLatchDigValue is enabled
      • DWORD 3 : Event mask

        • D31-D0 :
          0: Compare
          1: Frequency measurement
          2: Hardware trigger latch occur
          3: Synchro input latch occur
          4: Index input latch occur

      • DWORD 4 :
        • D31-D0: Counter value (DWORD)

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3).

      [Query frame layout] ulValue / ulValueLow : compare value (double). ulValueLow

      [Query frame layout] ulMode : compare mode
      

      • 0: condition true when counter equals compare value
      • 1: condition true when counter equals a multiple of the compare value

      [Query frame layout] ulSynchroTrigger
      

      • 0 : no synchro trigger
      • 1 : generates a synchro trigger when condition is true

      [Query frame layout] ulLatchDigValue : Parallel latch of the digital inputs
      

      • 0: The value of the digital inputs are not latched.
      • 1: The Value of the digital inputs are latched and stored in the upper 16 Bits of the data package for source counter.

      [Query frame layout] ulOption02 : set it to 0

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Compare value error
        • -4: Compare mode error
        • -5: Synchro trigger error
        • -6: Multifunction sub module is not a incremental counter
        • -7: Incremental counter not initialised
        • -8: Compare logic already initialised
        • -100: Init and enable counter compare kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	31	0x1F00	0x001F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4500	0x9411	0x1194
      word count	2	16-bit integer	12	0x0C00	0x000C
      byte count	1	8-bit integer	24	0x18	0x18
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulMode	4	32-bit integer	See the description above	0x????????	0x????????
      ulSynchroTrigger	4	32-bit integer	See the description above	0x????????	0x????????
      ulLatchDigValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4500	0x9411	0x1194
      word count	2	16-bit integer	12	0x0C00	0x000C

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterDisableAndReleaseCompareLogic

      Description

      Disable and Release a counter compare value

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3).

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -5: Compare logic not initialised
        • -100: Disable counter compare value kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	11	0x0B00	0x000B
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4550	0xC611	0x11C6
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	1	8-bit integer	4	0x04	0x04
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4550	0xC611	0x11C6
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterInitHardwareTrigger

      Description

      Init the hardware trigger configuration

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3).

      [Query frame layout] ulEdgeSelection : Front selection
      

      • 01 : rising front
      • 10 : falling front
      • 11 : Both front

      [Query frame layout] ulCount :Define the number of trigger events before the action occur
      

      • 1 : all trigger event start the action
      • max value : 65535

      [Query frame layout] ulOption01 : set it to 0

      [Query frame layout] ulOption02 : set it to 0

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Trigger edge selection error
        • -5: Trigger count selection error
        • -6: Incremental counter not initialised
        • -7: Hardware trigger already initialised
        • -100: Init hardware trigger kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	27	0x1B00	0x001B
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4600	0xF811	0x11F8
      word count	2	16-bit integer	10	0x0A00	0x000A
      byte count	1	8-bit integer	20	0x14	0x14
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulEdgeSelection	4	32-bit integer	See the description above	0x????????	0x????????
      ulCount	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4600	0xF811	0x11F8
      word count	2	16-bit integer	10	0x0A00	0x000A

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterReleaseHardwareTrigger

      Description

      Release the hardware trigger

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3).

      [Query frame layout] ulOption01 : set it to 0

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -5: Hardware trigger not initialised
        • -6: Hardware trigger used and can not released
        • -100: Release hardware trigger kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	15	0x0F00	0x000F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4650	0x2A12	0x122A
      word count	2	16-bit integer	4	0x0400	0x0004
      byte count	1	8-bit integer	8	0x08	0x08
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4650	0x2A12	0x122A
      word count	2	16-bit integer	4	0x0400	0x0004

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterInitIndex

      Description

      Init the index configuration

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3).

      [Query frame layout] ulEdgeSelection : Front selection

      • 01 : rising front
      • 10 : falling front
      • 11 : Both front

      [Query frame layout] ulOption01 : set it to 0

      [Query frame layout] ulOption02 : set it to 0

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Index edge selection error
        • -5: Incremental counter not initialised
        • -6: Index already initialised

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	23	0x1700	0x0017
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4700	0x5C12	0x125C
      word count	2	16-bit integer	8	0x0800	0x0008
      byte count	1	8-bit integer	16	0x10	0x10
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulEdgeSelection	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4700	0x5C12	0x125C
      word count	2	16-bit integer	8	0x0800	0x0008

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterReleaseIndex

      Description

      Release the index

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3).

      [Query frame layout] ulOption01 : set it to 0

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -5: Index not initialised
        • -6: Index used and can not released
        • -100: Release Index kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	15	0x0F00	0x000F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4750	0x8E12	0x128E
      word count	2	16-bit integer	4	0x0400	0x0004
      byte count	1	8-bit integer	8	0x08	0x08
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4750	0x8E12	0x128E
      word count	2	16-bit integer	4	0x0400	0x0004

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterInitAndEnableLatch

      Description

      Init and enable a counter latch logic

      For each latch the data server send a 5 DWORD frame with following informations:
      

      • DWORD 0 : Time stamp micro s
      • DWORD 1 : Time stamp s
      • DWORD 2 :
        • D1-D0 : Sub module index (0 to 3)
        • D31-D16 : Sub module functionality (0)
        • or value of the digital inputs when ulLatchDigValue is enabled
      • DWORD 3 : Event mask

        • D31-D0 :
          0: Compare
          1: Frequency measurement
          2: Hardware trigger latch occur
          3: Synchro input latch occur
          4: Index input latch occur

      • DWORD 4 :
        • D31-D0: Counter value (DWORD)

      Parameters:

      [Query frame layout] ulMFModuleIndex : Index of the multifunction sub module (0 to 3).

      [Query frame layout] ulLatchSource : Latch source.
      

      • 0: Index input
      • 1: Hardware trigger
      • 2: Synchro input

      [Query frame layout] ulCondition : Previously condition for accept the latch source
      

      • 0: No previously condition required
      • 1: Index input condition required (Only if index input not selected selected for the latch source)
      • 2: Hardware trigger condition required (Only if hardware trigger not selected selected for the latch source)
      • 3: Synchro input condition required (Only if synchro input not selected selected for the latch source)

      [Query frame layout] ulAutoMode : Action mode
      

      • 0: Do not use auto mode (action is done only once)
      • 1: Use auto mode (action is done continously)

      [Query frame layout] ulLatchDigValue : Parallel latch of the digital inputs
      

      • 0: The value of the digital inputs are not latched.
      • 1: The Value of the digital inputs are latched and stored in the upper 16 Bits of the data package for source counter.

      [Query frame layout] ulOption02 : set it to 0

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -5: Latch logic already initialised
        • -6: Latch source selection error
        • -7: Previously condition selection error
        • -8: Auto mode selection error
        • -9: Hardware trigger not initialised. Refer to MSXE17xx__MFIncCounterInitHardwareTrigger
        • -10: Index input not initialised. Refer to MSXE17xx__MFIncCounterInitIndex
        • -100: Init and enable counter latch kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	31	0x1F00	0x001F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4800	0xC012	0x12C0
      word count	2	16-bit integer	12	0x0C00	0x000C
      byte count	1	8-bit integer	24	0x18	0x18
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulLatchSource	4	32-bit integer	See the description above	0x????????	0x????????
      ulCondition	4	32-bit integer	See the description above	0x????????	0x????????
      ulAutoMode	4	32-bit integer	See the description above	0x????????	0x????????
      ulLatchDigValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4800	0xC012	0x12C0
      word count	2	16-bit integer	12	0x0C00	0x000C

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterDisableAndReleaseLatch

      Description

      Disable and Release a counter latch logic

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3).

      [Query frame layout] ulLatchSource : Latch source to disable and release.
      

      • 0: Index input
      • 1: Hardware trigger
      • 2: Synchro input

      [Query frame layout] ulOption01 : set it to 0

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -5: Latch logic not initialised
        • -6: Latch source selection error
        • -100: Disable and release counter latch register kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	19	0x1300	0x0013
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4850	0xF212	0x12F2
      word count	2	16-bit integer	6	0x0600	0x0006
      byte count	1	8-bit integer	12	0x0C	0x0C
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulLatchSource	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4850	0xF212	0x12F2
      word count	2	16-bit integer	6	0x0600	0x0006

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterInitAndEnableClear

      Description

      Init and enable a counter clear logic

      Parameters:

      [Query frame layout] ulMFModuleIndex : Index of the multifunction sub module (0 to 3).

      [Query frame layout] ulClearSource : Clear source.
      

      • 0: Index input
      • 1: Hardware trigger
      • 2: Synchro input

      [Query frame layout] ulCondition : Previously condition for accept the clear source
      

      • 0: No previously condition required
      • 1: Index input condition required (Only if index input not selected selected for the clear source)
      • 2: Hardware trigger condition required (Only if hardware trigger not selected selected for the clear source)
      • 3: Synchro input condition required (Only if synchro input not selected selected for the clear source)

      [Query frame layout] ulAutoMode : Action mode
      

      • 0: Do not use auto mode (action is done only once)
      • 1: Use auto mode (action is done continously)

      [Query frame layout] ulOption01 : set it to 0

      [Query frame layout] ulOption02 : set it to 0

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -5: Clear logic already initialised
        • -6: Clear source selection error
        • -7: Previously condition selection error
        • -8: Auto mode selection error
        • -9: Hardware trigger not initialised. Refer to MSXE17xx__MFIncCounterInitHardwareTrigger
        • -10: Index input not initialised. Refer to MSXE17xx__MFIncCounterInitIndex
        • -100: Init and enable counter clear kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	31	0x1F00	0x001F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4900	0x2413	0x1324
      word count	2	16-bit integer	12	0x0C00	0x000C
      byte count	1	8-bit integer	24	0x18	0x18
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulClearSource	4	32-bit integer	See the description above	0x????????	0x????????
      ulCondition	4	32-bit integer	See the description above	0x????????	0x????????
      ulAutoMode	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4900	0x2413	0x1324
      word count	2	16-bit integer	12	0x0C00	0x000C

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterDisableAndReleaseClear

      Description

      Disable and Release a counter clear logic

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3).

      [Query frame layout] ulClearSource : Clear source to disable and release.
      

      • 0: Index input
      • 1: Hardware trigger
      • 2: Synchro input

      [Query frame layout] ulOption01 : set it to 0

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not a incremental counter.
        • -4: Incremental counter not initialised
        • -5: Clear logic not initialised
        • -6: Clear source selection error
        • -100: Disable and release counter clear register kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	19	0x1300	0x0013
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4950	0x5613	0x1356
      word count	2	16-bit integer	6	0x0600	0x0006
      byte count	1	8-bit integer	12	0x0C	0x0C
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulClearSource	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4950	0x5613	0x1356
      word count	2	16-bit integer	6	0x0600	0x0006

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterInitAndEnableFrequencyMeasurement

      Description

      Init and enable frequency measurement

      For each latch the data server send a 5 DWORD frame with following informations:
      

      • DWORD 0 : Time stamp micro s
      • DWORD 1 : Time stamp s
      • DWORD 2 : Counter index
        • D1-D0 : Sub module index (0 to 3)
        • D31-D16 : Sub module functionality (0)
        • or value of the digital inputs when ulLatchDigValue is enabled
      • DWORD 3 : Event mask

        • D31-D0 :
          0: Compare
          1: Frequency measurement
          2: Hardware trigger latch occur
          3: Synchro input latch occur
          4: Index input latch occur

      • DWORD 4 :
        • D31-D0: Counter value (DWORD)

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3).

      [Query frame layout] ulTimingInterval : Timing interval from 1 to 0xFFFF, one step correspond to 100 ns.
      

      • 1: Time interval = 100 ns
      • 2: Time interval = 200 ns
      • ...

      [Query frame layout] ulOption01 : set the measure mode
      

      • 0: One shot, the frequency measure is done at each call of this function
      • 1: Triggered mode, this function has to be called only once (to initialize the measure). The synchro trigger is used to trigger the measure. The synchro trigger cycle time should be > frequency time interval

      [Query frame layout] ulOption02 : set the measure time base
      

      • 0: 100 ns
      • 1: 100 us

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Timing interval selection error
        • -4: Multifunction sub module is not an incremental counter
        • -5: Incremental counter not initialised
        • -6: Frequency measurement already initialised and started
        • -7: Frequency measurement wrong mode paramter
        • -8: Frequency measurement wrong time base parameter
        • -100: Init and enable frequency measurement kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	23	0x1700	0x0017
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	5000	0x8813	0x1388
      word count	2	16-bit integer	8	0x0800	0x0008
      byte count	1	8-bit integer	16	0x10	0x10
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulTimingInterval	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	5000	0x8813	0x1388
      word count	2	16-bit integer	8	0x0800	0x0008

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__MFIncCounterDisableAndReleaseFrequencyMeasurement

      Description

      Disable and release frequency measurement

      Parameters:

      [Query frame layout] ulMFModuleIndex : index of the multifunction sub module (0 to 3).

      [Query frame layout] ulOption01 : set it to 0

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -2: Multifunction sub module index selection error
        • -3: Multifunction sub module is not an incremental counter
        • -4: Incremental counter not initialised
        • -5: Frequency measurement not initialised
        • -100: Init and enable frequency measurement kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	15	0x0F00	0x000F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	5050	0xBA13	0x13BA
      word count	2	16-bit integer	4	0x0400	0x0004
      byte count	1	8-bit integer	8	0x08	0x08
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	5050	0xBA13	0x13BA
      word count	2	16-bit integer	4	0x0400	0x0004

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__DigitalIOWriteAllChannelsValue

      Description

      Write all digital i/o channels value. if the channel is define as input, nothing append on this channel.

      Parameters:

      [Query frame layout]ulValue : Channels value

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0: means the remote function performed OK
        • -1: means an system error occured
        • -100: Write digital I/O kernel function error

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	11	0x0B00	0x000B
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	7100	0xBC1B	0x1BBC
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	1	8-bit integer	4	0x04	0x04
      ulValue	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	7100	0xBC1B	0x1BBC
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__DigitalIORearmShortCircuit

      Description

      Rearm digital outputs after a short circuit happened.

      Parameters:

      [Query frame layout] ulOption : Reserved. Set to 0.

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : means an system error occured
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	11	0x0B00	0x000B
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	7150	0xEE1B	0x1BEE
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	1	8-bit integer	4	0x04	0x04
      ulOption	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	7150	0xEE1B	0x1BEE
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__DigitalIOInitPort

      Description

      Initialise a digital i/o port (2 channels).

      Parameters:

      [Query frame layout] ulPort : Index of the digital i/o port (0 to 7).

      [Query frame layout] ulPortConfiguration : Define the port configuration

      • 0 : input
      • 1 : output

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        
        • 0 : No error.
        • -1 : means an system error occured
        • -2: Digital i/o port selection error
        • -3: Port configuration selection error
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	15	0x0F00	0x000F
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	7200	0x201C	0x1C20
      word count	2	16-bit integer	4	0x0400	0x0004
      byte count	1	8-bit integer	8	0x08	0x08
      ulPort	4	32-bit integer	See the description above	0x????????	0x????????
      ulPortConfiguration	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	7200	0x201C	0x1C20
      word count	2	16-bit integer	4	0x0400	0x0004

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__IOWatchdogInitAndStart

      Description

      Init and start the digital output IO watchdog.

      Parameters:

      [Query frame layout] ulTimeBase : Time base of the watchdog delay (0 for mus, 1 for ms, 2 for s)

      [Query frame layout] ulTimeValue : Time base of the watchdog delay (0 to 0xFFFF).

      [Query frame layout] ulOption01 : Reserved. Set to 0.

      [Query frame layout] ulOption02 : Reserved. Set to 0.

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        • 0 : No error.
        • -1 : Means an system error occured
        • -2:: Time base selection error
        • -3:: Time value selection error
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	23	0x1700	0x0017
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	8050	0x721F	0x1F72
      word count	2	16-bit integer	8	0x0800	0x0008
      byte count	1	8-bit integer	16	0x10	0x10
      ulTimeBase	4	32-bit integer	See the description above	0x????????	0x????????
      ulTimeValue	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption1	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption2	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	8050	0x721F	0x1F72
      word count	2	16-bit integer	8	0x0800	0x0008

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE17xx__IOWatchdogStopAndRelease

      Description

      Stop and release the digital output watchdog.

      Parameters:

      [Query frame layout] ulOption : Reserved. Set to 0.

      Returns:

      • Possible return value on the remote system (read them with GetLastCommandStatusEx):
        • 0 : No error.
        • -1 : Means an system error occured
        • -100 : Kernel function error (see syserrno).

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	11	0x0B00	0x000B
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	8100	0xA41F	0x1FA4
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	1	8-bit integer	4	0x04	0x04
      ulOption	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	8100	0xA41F	0x1FA4
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE170x__MFIncCounterInit

      Description

      Initialise the counter

      For new application(s) or automat communication is it recommended tu use the function MSXE17xx__MFIncCounterInit.

      [Query frame layout]
      • ulMFModuleIndex : index of the multifunction sub module (0 to 3).
        [Query frame layout]
      • ulCounterMode : Set the counter mode : either
        
        • MSXE170X_COUNTER_QUADRUPLE_MODE (0x4)
          
        • MSXE170X_COUNTER_DOUBLE_MODE (0x2)
          
        • MSXE170X_COUNTER_SIMPLE_MODE (0x1)
          
        • MSXE170X_COUNTER_DIRECT_MODE (0x0)
        [Query frame layout]
      • ulCounterOption : Set the counter option
        if in QUADRUPLE/DOUBLE/SIMPLE mode : either
        
        • MSXE170X_COUNTER_HYSTERESIS_ON (0x1)
          
        • MSXE170X_COUNTER_HYSTERESIS_OFF (0x0)
          
        if in DIRECT mode :
        
        • MSXE170X_COUNTER_INCREMENT (0x0)
          
        • MSXE170X_COUNTER_DECREMENT (0x1)
        [Query frame layout]
      • ulOption01 : Set it to 0 [Query frame layout]
      • ulOption02 : Set it to 0 [Query frame layout]
      • ulOption03 : Set it to 0 [Query frame layout]
      • ulOption04 : Set it to 0
      [Response frame layout]
    • Possible return value on the remote system:
      
      • 0: means the remote function performed OK
        
      • -1: means an system error occured
        
      • -2: Multifunction sub module index selection error
        
      • -3: Counter mode selection error
        
      • -4: Counter option selection error
        
      • -5: Counter filter selection error
        
      • -100: Init counter kernel function error
        

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	36	0x2400	0x0024
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	1	0x0100	0x0001
      word count	2	16-bit integer	14	0x0E00	0x000E
      byte count	2	16-bit integer	28	0x1C00	0x001C
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulCounterMode	4	32-bit integer	See the description above	0x????????	0x????????
      ulCounterOption	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption03	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption04	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	1	0x0100	0x0001
      word count	2	16-bit integer	14	0x0E00	0x000E

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE170x__MFIncCounterRelease

      Description

      Release the counter

      For new application(s) or automat communication is it recommended tu use the function MSXE17xx__MFIncCounterRelease.

      [Query frame layout]
      • ulMFModuleIndex : index of the multifunction sub module (0 to 3).
        
      [Response frame layout]
    • Possible return value on the remote system:
      
      • 0: means the remote function performed OK
        
      • -1: means an system error occured
        
      • -2: Multifunction sub module index selection error
        

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	12	0x0C00	0x000C
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	2	0x0200	0x0002
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	2	16-bit integer	4	0x0400	0x0004
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	2	0x0200	0x0002
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE170x__MFIncCounterClear

      Description

      Clear the 32 bits counter

      For new application(s) or automat communication is it recommended tu use the function MSXE17xx__MFIncCounterClear.

      [Query frame layout]
      • ulMFModuleIndex : index of the multifunction sub module (0 to 3).
        
      [Response frame layout]
    • Possible return value on the remote system:
      
      • 0: means the remote function performed OK
        
      • -1: means an system error occured
        
      • -2: Multifunction sub module index selection error
        
      • -100: Write counter value kernel function error
        

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	12	0x0C00	0x000C
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	3	0x0300	0x0003
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	2	16-bit integer	4	0x0400	0x0004
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	3	0x0300	0x0003
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE170x__MFIncCounterInitAndEnableLatchRegister

      Description

      Init and enable a counter latch register

      For new application(s) or automat communication is it recommended tu use the function MSXE17xx__MFIncCounterInitAndEnableLatch.

      [Query frame layout]
      • ulMFModuleIndex : index of the multifunction sub module (0 to 3).
        [Query frame layout]
      • ulLatchRegister : 0: First Latch Register used with trigger input, 1: Second Lath Register used with synchro input [Query frame layout]
      • ulHardwareTriggerEdgeSelection : not used for the synchro input
        
        • 01 : rising front (Only if trigger input selected)
          
        • 10 : falling front (Only if trigger input selected)
          
        • 11 : Both front (Only if trigger input selected)
          
        [Query frame layout]
      • ulHardwareTriggerCount : not used for the synchro input
        Define the number of trigger events before the action occur
        1 : all trigger event start the action
        max value : 65535 [Query frame layout]
      • ulOption01 : set it to 0
      [Response frame layout]
    • Possible return value on the remote system:
      
      • 0: means the remote function performed OK
        
      • -1: means an system error occured
        
      • -2: Multifunction sub module index selection error
        
      • -3: Latch register selection error
        
      • -4: Trigger edge selection error
        
      • -5: Trigger count selection error
        
      • -100: Init and enable counter latch register kernel function error
        

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	28	0x1C00	0x001C
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4	0x0400	0x0004
      word count	2	16-bit integer	10	0x0A00	0x000A
      byte count	2	16-bit integer	20	0x1400	0x0014
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulLatchRegister	4	32-bit integer	See the description above	0x????????	0x????????
      ulHardwareTriggerEdgeSelection	4	32-bit integer	See the description above	0x????????	0x????????
      ulHardwareTriggerCount	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	4	0x0400	0x0004
      word count	2	16-bit integer	10	0x0A00	0x000A

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE170x__MFIncCounterDisableAndReleaseLatchRegister

      Description

      Disable and Release a counter latch register

      For new application(s) or automat communication is it recommended tu use the function MSXE17xx__MFIncCounterDisableAndReleaseLatch.

      [Query frame layout]
      • ulMFModuleIndex : index of the multifunction sub module (0 to 3).
        [Query frame layout]
      • ulLatchRegister : 0: First Lath Register used with 24 V input, 1: Second Lath Register used with synchro input [Query frame layout]
      • ulOption01 : set it to 0
      [Response frame layout]
    • Possible return value on the remote system:
      
      • 0: means the remote function performed OK
        
      • -1: means an system error occured
        
      • -2: Multifunction sub module index selection error
        
      • -3: Latch register selection error
        
      • -100: Disable and release counter latchd register kernel function error
        

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	20	0x1400	0x0014
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	5	0x0500	0x0005
      word count	2	16-bit integer	6	0x0600	0x0006
      byte count	2	16-bit integer	12	0x0C00	0x000C
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulLatchRegister	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	5	0x0500	0x0005
      word count	2	16-bit integer	6	0x0600	0x0006

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE170x__MFIncCounterWrite32BitValue

      Description

      write a 32 bits counter value

      For new application(s) or automat communication is it recommended tu use the function MSXE17xx__MFIncCounterWrite32BitValue.

      [Query frame layout]
      • ulMFModuleIndex : index of the multifunction sub module (0 to 3).
        [Query frame layout]
      • ulCounterValue : Counter value
      [Response frame layout]
    • Possible return value on the remote system:
      
      • 0: means the remote function performed OK
        
      • -1: means an system error occured
        
      • -2: Multifunction sub module index selection error
        
      • -3: Counter value error
        
      • -100: Write counter value kernel function error
        

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	16	0x1000	0x0010
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	6	0x0600	0x0006
      word count	2	16-bit integer	4	0x0400	0x0004
      byte count	2	16-bit integer	8	0x0800	0x0008
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulCounterValue	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	6	0x0600	0x0006
      word count	2	16-bit integer	4	0x0400	0x0004

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE170x__MFIncCounterSetFIFO0Level

      Description

      Define the number of data bloc in the first FIFO before transmit the datas.

      For new application(s) or automat communication is it recommended tu use the function MSXE17xx__MFCommonSetFIFO0Level.

      [Query frame layout]
      • ulMFModuleIndex : index of the multifunction sub module (0 to 3).
        [Query frame layout]
      • ulFIFOLevel : Define the FIFO level (1 to 200) [Query frame layout]
      • ulOption01 : Define a Time out : permit to receive the data from the FIFO before the FIFO level is reached
        D31-D16 : Time base: 1:us, 2:ms, 3:s
        D15-D0 : Time value
        if this value is 0, then no time out used
        [Query frame layout]
      • ulOption02 : set it to 0
      [Response frame layout]
    • Possible return value on the remote system:
      
      • 0: means the remote function performed OK
        
      • -1: means an system error occured
        
      • -2: Multifunction sub module index selection error
        
      • -3: FIFO level value is wrong
        
      • -4: Time out time base selection error
        
      • -5: Time out value can not be null, if a time base is selected
        

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	24	0x1800	0x0018
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	8	0x0800	0x0008
      word count	2	16-bit integer	8	0x0800	0x0008
      byte count	2	16-bit integer	16	0x1000	0x0010
      ulMFModuleIndex	4	32-bit integer	See the description above	0x????????	0x????????
      ulFIFOLevel	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption01	4	32-bit integer	See the description above	0x????????	0x????????
      ulOption02	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	8	0x0800	0x0008
      word count	2	16-bit integer	8	0x0800	0x0008

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      Function MSXE170x__DigitalIOWriteAllChannelsValue

      Description

      Write all digital i/o channels value. if the channel is define as input, nothing append on this channel.

      For new application(s) or automat communication is it recommended tu use the function MSXE17xx__DigitalIOWriteAllChannelsValue.

      [Query frame layout]
      • ulValue : Channels value
      [Response frame layout]
    • Possible return value on the remote system:
      
      • 0: means the remote function performed OK
        
      • -1: means an system error occured
        
      • -100: Write digital I/O kernel function error
        

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	12	0x0C00	0x000C
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	7	0x0700	0x0007
      word count	2	16-bit integer	2	0x0200	0x0002
      byte count	2	16-bit integer	4	0x0400	0x0004
      ulValue	4	32-bit integer	See the description above	0x????????	0x????????

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	6	0x0600	0x0006
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x10	0x10	0x10
      Reference number (=register)	2	16-bit integer	7	0x0700	0x0007
      word count	2	16-bit integer	2	0x0200	0x0002

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Intel)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x90	0x90	0x90
      Exception code	1	8-bit integer	See corresponding chapter	0x??	0x??

      FC23 (read/write registers) Functions

      Top

      Functions in this group are used to read/write values on the module.
      This functions permits to call a write (FC16) and then a read(FC3) function in one command.
      

      Query frame layout

      Field	Size (Bytes)	Type	Value	little endian (Motorola)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	Depends to the FC16 function called	?	?
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x17	0x17	0x17
      Reference number for read (=register)	2	16-bit integer	FC3 reference	?	?
      Word count for read	2	16-bit integer	See the corresponding FC3 function	?	?
      Reference number for write (=register)	2	16-bit integer	FC16 reference	?	?
      Word count for write	2	16-bit integer	See the corresponding FC16 function	?	?
      Byte count	1	8-bit integer	(= 2xWord count for write)	?	?
      Register values	?	?	See the corresponding FC16 function	?	?

      Response frame layout

      Field	Size (Bytes)	Type	Value	little endian (Motorola)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	Depends to the FC3 function called	?	?
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x17	0x17	0x17
      Byte count	1	8-bit integer	(= 2x word count for read)	?	?
      Register values	?	?	See the corresponding FC3 function	?	?

      Exception frame layout

      Field	Size (Bytes)	Type	Value	little endian (Motorola)	big endian (Motorola)
      transaction identifier	2	16-bit integer	User defined - copied by server - usually 0	0x0000	0x0000
      protocol identifier	2	16-bit integer	0	0x0000	0x0000
      length	2	16-bit integer	3	0x0300	0x0003
      unit identifier	1	8-bit integer	0 or 1	0x00 or 0x01	0x00 or 0x01
      MODBUS Function code	1	8-bit integer	0x97	0x97	0x97
      Exception code	1	8-bit integer	See corresponding chapter	??	??

      Exception code description

      Top

      Name	Value	Description
      MODBUS_ILLEGAL_FUNCTION	0x1	function code is not allowable action for the slave
      MODBUS_ILLEGAL_DATA_ADDRESS	0x2	data address received in query is not allowable
      MODBUS_ILLEGAL_DATA_VALUE	0x3	incorrect value int the query data field or the length is incorrect
      MODBUS_ILLEGAL_DATA_RESPONSE_LENGTH	0x4	the request as framed would generate a response whose size exceeds the available MODBUS datasize.
      MODBUS_ACKNOWLEDGE	0x5	specialized use in conjunction with programming commands
      MODBUS_DSLAVE_DEVICE_BUSY	0x6	specialized use in conjunction with programming commands
      MODBUS_NEGATIVE_ACKNOWLEDGE	0x07	specialized use in conjunction with programming commands
      MODBUS_MEMORY_PARITY_ERROR	0x08	the extended file area failed to pass a consistency check
      MODBUS_REMOTE_EXECUTION_ERROR	0x09	the remote function performed incorrectly (use function GetLastCommandStatus to know why)
      MODBUS_GATEWAY_PATH_UNAVAILABLE	0x0A	used with modbus plus gateway
      MODBUS_GATEWAY_TARGET_DEVICE_FAILED_TO_RESPOND	0x0B	used with modbus plus gateway

      Siemens Step 7 compatibility information (AWL/SDF code)

      Top

      Due to limitations of the S7 platform, some names of function and parameter have been shortened in the AWL and S7 code. This table summarizes the changes against the standard version as described above.

      Function/Parameter	Renamed as
      MXCommon__GetModuleType	GetModuleType
      MXCommon__GetTime	GetTime
      MXCommon__TestCustomerID	TestCustomerID
      MSXE17xx__MFIncCounterRead32BitsValueAll	17xx_MFIncCtrRead32All
      MSXE17xx__MFIncCounterRead32BitsValue0	17xx_MFIncCtrRead32v0
      MSXE17xx__MFIncCounterRead32BitsValue1	17xx_MFIncCtrRead32v1
      MSXE17xx__MFIncCounterRead32BitsValue2	17xx_MFIncCtrRead32v2
      MSXE17xx__MFIncCounterRead32BitsValue3	17xx_MFIncCtrRead32v3
      MSXE17xx__DigitalIOReadAllChannelsValue	17xx_DigIOReadAll
      MSXE17xx__DigitalIOTestShortCircuit	17xx_DigIOTestShortC
      MSXE17xx__IOWatchdogGetStatusAndValue	17xx_IOWatchdogGet
      MSXE170x__DigitalIOReadAllChannelsValue	not available
      MXCommon__SetHardwareTriggerFilterTime	SetHwTrigFiltTime
      MXCommon__InitAndStartSynchroTimer	InitStartSyncTimer
      MXCommon__StopAndReleaseSynchroTimer	StopRelSyncTimer
      MXCommon__Reboot	Reboot
      MXCommon__SetCustomerKey	SetCustomerKey
      MXCommon__SetFilterChannels	SetFilterChannels
      MSXE17xx__MFCommonSetInputsFilter	17xx_MFCSetInputFilter
      MSXE17xx__MFCommonReferenceVoltageActivation	17xx_MFCRefVoltActiv
      MSXE17xx__MFCommonSetFIFO0Level	17xx_MFCSetFIFO0Level
      MSXE17xx__MFCommonEnableDisableTriggerGate	17xx_MFEDTriggerGate
      MSXE17xx__MFIncCounterInit	17xx_MFIncCntInit
      MSXE17xx__MFIncCounterRelease	17xx_MFIncCntRelease
      MSXE17xx__MFIncCounterClear	17xx_MFIncCntClear
      MSXE17xx__MFIncCounterWrite32BitValue	17xx_MFIncCntWrite32
      MSXE17xx__MFIncCounterInitAndEnableCompareLogic	17xx_MFIncCntInitCL
      MSXE17xx__MFIncCounterDisableAndReleaseCompareLogic	17xx_MFIncCntReleaseCL
      MSXE17xx__MFIncCounterInitHardwareTrigger	17xx_MFIncCntInitHT
      MSXE17xx__MFIncCounterReleaseHardwareTrigger	17xx_MFIncCntReleaseHT
      MSXE17xx__MFIncCounterInitIndex	17xx_MFIncCntInitIdx
      MSXE17xx__MFIncCounterReleaseIndex	17xx_MFIncCntRelIdx
      MSXE17xx__MFIncCounterInitAndEnableLatch	17xx_MFIncCntInitLch
      MSXE17xx__MFIncCounterDisableAndReleaseLatch	17xx_MFIncCntRelLch
      MSXE17xx__MFIncCounterInitAndEnableClear	17xx_MFIncCntInitClr
      MSXE17xx__MFIncCounterDisableAndReleaseClear	17xx_MFIncCntRelClr
      MSXE17xx__MFIncCounterInitAndEnableFrequencyMeasurement	17xx_MFIncCntIEFreMes
      MSXE17xx__MFIncCounterDisableAndReleaseFrequencyMeasurement	17xx_MFIncCntDRFreMes
      MSXE17xx__DigitalIOWriteAllChannelsValue	17xx_DigIOWriteAll
      MSXE17xx__DigitalIORearmShortCircuit	17xx_DigIORearm
      MSXE17xx__DigitalIOInitPort	17xx_DigIOInitPort
      MSXE17xx__IOWatchdogInitAndStart	17xx_IOWatchdogStart
      MSXE17xx__IOWatchdogStopAndRelease	17xx_IOWatchdogStop
      MSXE170x__MFIncCounterInit	not available
      MSXE170x__MFIncCounterRelease	not available
      MSXE170x__MFIncCounterClear	not available
      MSXE170x__MFIncCounterInitAndEnableLatchRegister	not available
      MSXE170x__MFIncCounterDisableAndReleaseLatchRegister	not available
      MSXE170x__MFIncCounterWrite32BitValue	not available
      MSXE170x__MFIncCounterSetFIFO0Level	not available
      MSXE170x__DigitalIOWriteAllChannelsValue	not available