ROC Plus Protocol. Specification Manual. Form A6127. Flow Computer Division. Part Number D301180X0012 January 2007

Similar documents
Fisher ROC Plus Serial Driver Help Kepware Technologies

Fisher ROC Plus Ethernet Driver Help Kepware, Inc.

ROC Protocol Specifications Manual (for Emerson FB1000 and FB2000 Series Flow Computers)

ULTRASONIC SERIAL I/O INTERFACE

Emerson Process ROC Protocol Enhanced Master Driver v3.0

Fisher ROC Plus Serial Driver Help Kepware, Inc.

Fisher ROC Serial Driver Help Kepware Technologies

V-Cone Metering Program

MI-2667 Annubar Flow Calculation Program

FloBoss 107 Firmware. Operating System. Remote Automation Solutions. D301235X012 October 2013

FloBoss 107 Flow Manager Instruction Manual

FloBoss TM 107/107E Flow Manager Overview

Rotork Pakscan Driver for DeltaV Programmable Serial Interface Card

V-Cone Metering Program (for the ROC800-Series) User Manual

Fisher ROC Plus Serial Driver Kepware, Inc.

FloBoss 103 and 104 Firmware

Gas Chromatograph Software Interface User Manual (for FloBoss 107)

March 21, Re: Life Cycle Change Notification FloBoss 407 and ROC 300 Series. ROC 300 and 407 Customers,

AUTO-ADJUST TURBO-METER PROGRAM (For ROC300-Series and FloBoss 407) User Manual

ROC Plus Ethernet Driver

ROCLINK 800 Configuration Software User Manual (for FloBoss 107)

This document is for information purposes only and is subject to change without notice.

Bristol BSAP. Bristol Standard Asynchronous/Synchronous Protocol. Product Data Document 454ds-6a August 31, Page 1. Features.

ROCLINK 800 Configuration Software

Robert Shaw Reeltape Model 185A Programmable Serial Interface Card Series 2

This document is for information purposes only and is subject to change without notice.

ROC827 Remote Operations Controller Instruction Manual

HART INTERFACE PROGRAMS. User Manual

Gas Control Manager Program User Manual (for FloBoss 107)

DS800 Development Suite Quick Start Guide for the FloBoss 107

ROC800-Series Remote Operations Controller Instruction Manual

TI NITP Driver Programmable Serial Interface Card

FOUNDATION Fieldbus Interface Software (for the ROC800-Series) User Manual

HART Field Device Specification Fisher FIELDVUE DVC2000 Digital Valve

Limitorque DDC-100 Programmable Serial Interface Card Series 2

STEAM/WATER THERMODYNAMICS APPLICATION PROGRAM User Manual

VERIS H8035 and H8036

Virtual RS3 I/O Driver For Series 2 Simplex Programmable Serial Interface Card

MSA AUER M-292 Programmable Serial Interface Card Series 2

ETC II Modbus Communications Protocol Reference Guide

Square D Sy/Max Driver Programmable Serial Interface Card

GAS CHROMATOGRAPH USER PROGRAM (For ROC809) User Manual

AMS HART Pass-Through Reference Guide

Enron Modbus I/O Driver (Series 2) Programmable Serial Interface Card

Foxboro 762C/743CB Controllers Programmable Serial Interface Card

Rice Lake Weigh Scale Application Programmable Serial Interface Card

Modbus TCP/IP Option Instruction Manual

FLOBOSS 103 AND 104 FLOW MANAGERS

ROC809 Remote Operations Controller

V-Cone Metering Program User Manual (for ROC800-Series)

YSI 2700 SELECT Programmable Serial Interface Card Series 2

GE MDS, LLC. NETio Series. Protocol Communications Supplement. March 2013 Part No A01, Rev. C

ROC Plus Communication Driver for JMobile

ABB Gas Chromatograph 3100 Programmable Serial Interface Card Series 2

BIET EtherNet Interface

ISO5167 Flow Calculation Program

Equimeter Auto-Adjust Program (For FloBoss 107 Flow Managers) User Manual

Enron Modbus Driver PTC Inc. All Rights Reserved.

W600/W900 Modbus. Instruction Manual

MODBUS Protocol for MiCOM P30 Series

ROC800L Field Conversion Guide

Rice Lake Weigh Scale Application Programmable Serial Interface Card

PM130 Powermeters Reference Guide Modbus Communications Protocol

Draeger Polytron IR 334 Programmable Serial Interface Card Series 2

INTELLIS. Modbus Direct Network Monitor

HDV100A3 Command Response Protocol

TOP Server Configuration Guide: Fisher ROC Plus Ethernet Device

DeltaV Connect Solution for Siemens TELEPERM M Systems

AMS ValveLink Software Quick-Start Guide

Using the MODBUS Protocol with Athena Series C (1ZC, 16C, 18C, and 25C) Controllers

LineGuard Specification Sheet Issued 8/24/10 VA Revision 0. Valve Automation

Gas Chromatograph Interface Program User Manual (for ROC800-Series Remote Operations Controllers)

Model IR4000M. HART Field Device Specification Multi-Point Monitor. Instruction Manual 07-08

Modbus ASCII Serial Device Driver Help 2009 Kepware Technologies

PC180 MODBUS COMMUNICATION MANUAL INJECTION MANAGEMENT SYSTEM

AutroSafe Fire Safety System Programmable Serial Interface Card Series 2

DNP3 Communications Protocol

DTSX3000 Communications(Modbus) Guide

IEC Master Driver Help Kepware Technologies

Tejas V Master Protocol

Fisher ROC Serial Driver PTC Inc. All Rights Reserved.

IOD-5101 and IOD-5201 PLC I/O Interface (PIO) Subsystem GE Genius USERS MANUAL. December 21, 2007

IFC 100 Supplementary instructions

Programmable Serial Interface Card Driver Bell-Ennium 7785-P2005 Magnetic Plate Stirrer

CP30/G30/MC31 Firmware Service Update Version 2993 (19 Aug 2013) Release Notes

Smart Commissioning. White Paper January 2019

Programmable Serial Interface Card Driver Advanced Instruments 3250

Foxboro HTG Driver Programmable Serial Interface Card Series 2

FloBoss S600+ Field Upgrade Guide

Real Time Clock with Temperature Sensor and RS485/Modbus Comunications

We Serve the Customer First. Spartan Pocket FloBoss User s Manual Document Version 2.0. Grande Prairie Av

VersaChart MODBUS RTU Communication Protocol Partlow-West Company 2 Campion Road New Hartford NY 13413

ROC800L - Liquid Flow Measurement Computer Measurement and Control for Hydrocarbon and Petrochemical Liquids

APPLICATION NOTES - PIGNONE P6008 RTU CUSTOM PROTOCOL

HART Field Device Specification Fisher FIELDVUE DVC5000 Digital Valve Controllers

ProfessionalPLUS Station Software Suite

FloBoss 107 ROCNOC User Manual

Ovation Process Historian

Operator Station Software Suite

Solar Eclipse Scheduler. Release 9.0

Transcription:

Form A6127 Part Number D301180X0012 January 2007 ROC Plus Protocol Specification Manual Flow Computer Division Website: www.emersonprocess.com/flow

Revision Tracking Sheet January 2007 This manual is periodically altered to incorporate new or updated information. The date revision level of each page is indicated at the bottom of the page opposite the page number. A major change in the content of the manual also changes the date of the manual, which appears on the front cover. Listed below is the date revision level of each page. Page Revision Internal Version All January 2007 --- All 18-May-2004 205 All 10-Apr-2003 182 All 12/02 165 ROCLINK is a mark of one of the Emerson Process Management companies. The Emerson logo is a trademark and service mark of Emerson Electric Co. All other marks are the property of their respective owners. This product may be covered under pending patent applications. Fisher Controls International, LLC. 2002-2007. All rights reserved. Printed in the U.S.A. While this information is presented in good faith and believed to be accurate, Fisher Controls does not guarantee satisfactory results from reliance upon such information. Nothing contained herein is to be construed as a warranty or guarantee, express or implied, regarding the performance, merchantability, fitness or any other matter with respect to the products, nor as a recommendation to use any product or process in conflict with any patent. Fisher Controls reserves the right, without notice, to alter or improve the designs or specifications of the products described herein. ii Revised: Jan 2007

Table of Contents Section 1 Introduction... 1 Introduction... 1 Manual Organization... 1 General Protocol Message Format... 1 Broadcast... 3 Calculating Data Offsets... 3 Section 2 Opcodes... 4 Opcode Overview... 4 Summary of Opcodes... 4 Opcode 6, System Configuration... 5 Opcode 7, Read Real-Time Clock... 10 Opcode 8, Set Real-Time Clock... 11 Opcode 10, Read Configurable Opcode Point Data... 12 Opcode 11, Write Configurable Opcode Point Data... 13 Opcode 17, Login Request... 14 Opcode 24, Store and Forward... 15 Opcode 50, Request I/O Point Position... 16 Opcode 100, Access User Defined Information... 21 Opcode 105, Request Today and Yesterday s Min/Max Values... 21 Opcode 108, Request History Tag and Periodic Index... 23 Opcode 118, Request Alarm Data... 24 Opcode 119, Request Event Data... 27 Opcode 135, Request Single History Point Data For Multiple Time Periods... 30 Opcode 136, Request Multiple History Point Data For Multiple Time Periods... 32 Opcode 137, Request History Index for a Day... 34 Opcode 138, Request Daily and Periodic History for a Day... 35 Opcode 139, History Information/Data... 36 Opcode 166, Set Single Point s... 37 Opcode 167, Request Single Point s... 38 Opcode 180, Request s... 39 Opcode 181, Write s... 40 Opcode 203, Generic File Transfer... 41 Opcode 224, SRBX Signal... 43 Opcode 225, Acknowledge SRBX... 44 Opcode 255, Error Indicator... 45 Section 3 Point Types... 48 Point Type 85: HART Point Type... 50 Point Type 91: System Variables:... 63 Point Type 92: Logon s... 68 Point Type 95: Communication Ports... 70 Point Type 96: FST s... 75 Point Type 97: FST Register Tags... 78 Point Type 98: Soft Point s... 79 Point Type 99: Configurable Opcode Table... 81 Point Type 100: Power Control s... 83 Point Type 101: Discrete Inputs... 86 Point Type 102: Discrete Outputs... 88 Point Type 103: Analog Inputs... 91 Point Type 104: Analog Outputs... 94 Point Type 105: Pulse Inputs... 96 Point Type 106: RTD... 99 Point Type 107: Thermocouple... 102 Point Type 108: Multi-Variable Sensor... 104 Point Type 109: System Analog Inputs... 110 Revised: Jan 2007 iii

Point Type 110: PID Control s... 115 Point Type 111: Sampler/Odorizer s... 121 Point Type 112: Station s... 122 Point Type 113: Orifice Meter Run Configuration... 127 Point Type 114: Orifice Meter Run Values... 131 Point Type 115: Turbine Meter Run Configuration... 134 Point Type 116: Turbine Meter Run Values... 140 Point Type 117: Modbus Configuration s... 143 Point Type 118: Modbus Register to TLP Mapping... 146 Point Type 119: Modbus Event, Alarm, and History Table... 155 Point Type 120: Modbus Master Modem Configuration... 162 Point Type 121: Modbus Master Table... 163 Point Type 122: DS800 Configuration... 171 Point Type 123: Security Group Configuration... 173 Point Type 124: History Segment Configuration... 175 Point Type 125: History Segment 0 Point Configuration... 177 Point Type 126: History Segment 1 Point Configuration... 179 Point Type 127: History Segment 2 Point Configuration... 181 Point Type 128: History Segment 3 Point Configuration... 183 Point Type 129: History Segment 4 Point Configuration... 185 Point Type 130: History Segment 5 Point Configuration... 187 Point Type 131: History Segment 6 Point Configuration... 189 Point Type 132: History Segment 7 Point Configuration... 191 Point Type 133: History Segment 8 Point Configuration... 193 Point Type 134: History Segment 9 Point Configuration... 195 Point Type 135: History Segment 10 Point Configuration... 197 Point Type 136: ROC Clock... 199 Point Type 137: Internet Configuration s... 200 Point Type 138: User C++ Host s... 202 Point Type 139: Smart I/O Module Information... 203 Point Type 140: Alternating Current Input / Output... 205 Point Type 141: Advanced Pulse Module... 212 Section 4 CRC-16 Code and Example... 220 Section 5 Numerical Representation Including IEEE Floating Point Format... 221 Section 6 Spontaneous Report-By-Exception (SRBX) Example... 222 Section 7 ROC-to-ROC Communications... 223 iv Revised: Jan 2007

TABLE 1: SUMMARY OF OPCODES... 4 TABLE 2: OPCODE 6, SYSTEM CONFIGURATION... 5 TABLE 3: OPCODE 7, READ REAL-TIME CLOCK... 10 TABLE 4: OPCODE 8, SET REAL-TIME CLOCK... 11 TABLE 5:OPCODE 10, READ CONFIGURABLE OPCODE POINT DATA... 12 TABLE 6: OPCODE 11, WRITE CONFIGURABLE OPCODE POINT DATA... 13 TABLE 7: OPCODE 17, LOGIN REQUEST... 14 TABLE 8: OPCODE 24, STORE AND FORWARD... 15 TABLE 9: COMPATIBILITY MODE... 16 TABLE 10: OPCODE 50, REQUEST I/O POINT POSITION... 20 TABLE 11: OPCODE 100, ACCESS USER DEFINED INFORMATION... 21 TABLE 12: OPCODE 105, REQUEST TODAY AND YESTERDAY S MINIMUM AND MAXIMUM VALUES... 22 TABLE 13: OPCODE 108, REQUEST HISTORY TAG AND PERIODIC INDEX... 23 TABLE 14: OPCODE 118, REQUEST ALARM DATA... 24 TABLE 15: OPCODE 119, REQUEST EVENT DATA... 27 TABLE 16: OPCODE 135, REQUEST HISTORY POINT DATA... 31 TABLE 17: OPCODE 136, REQUEST HISTORY INDEX DATA... 32 TABLE 18: OPCODE 137, REQUEST HISTORY INDEX FOR A DAY... 34 TABLE 19: OPCODE 138, REQUEST DAILY AND PERIODIC HISTORY FOR A DAY... 35 TABLE 20: OPCODE 139, HISTORY INFORMATION/DATA... 36 TABLE 21: OPCODE 166, SET SINGLE POINT PARAMETERS... 37 TABLE 22: OPCODE 167, REQUEST SINGLE POINT PARAMETERS... 38 TABLE 23: OPCODE 180, REQUEST PARAMETERS... 39 TABLE 24: OPCODE 181, WRITE PARAMETERS... 40 TABLE 25: OPCODE 203, GENERIC FILE TRANSFER... 41 TABLE 26, OPCODE 224, SRBX SIGNAL... 43 TABLE 27: OPCODE 225, ACKNOWLEDGE SRBX... 44 TABLE 28: OPCODE 255, ERROR INDICATOR... 45 TABLE 29: ROC809 ERROR CODES... 45 TABLE 30: VALID ERROR CODES FOR A GIVEN OPCODE... 47 TABLE 31: POINT TYPE 85, HART... 50 TABLE 32: POINT TYPE 91, SYSTEM VARIABLES... 63 TABLE 33: POINT TYPE 92, LOGON PARAMETERS... 68 TABLE 34: POINT TYPE 95, COMMUNICATION PORTS... 70 TABLE 35: POINT TYPE 96, FST PARAMETERS... 75 TABLE 36: POINT TYPE 97, FST REGISTER TAGS... 78 TABLE 37: POINT TYPE 98, SOFT POINT PARAMETERS... 79 TABLE 38: POINT TYPE 99, CONFIGURABLE OPCODE... 81 TABLE 39: POINT TYPE 100, POWER CONTROL PARAMETERS... 83 TABLE 40: POINT TYPE 101, DISCRETE INPUTS... 86 TABLE 41: POINT TYPE 102, DISCRETE OUTPUTS... 88 TABLE 42: POINT TYPE 103, ANALOG INPUTS... 91 TABLE 43: POINT TYPE 104, ANALOG OUTPUTS... 94 TABLE 44: POINT TYPE 105, PULSE INPUTS... 96 TABLE 45: POINT TYPE 106, RTD... 99 TABLE 46: POINT TYPE 107, THERMOCOUPLE... 102 TABLE 47: POINT TYPE 108, MULTI-VARIABLE SENSOR... 104 TABLE 48: POINT TYPE 109, SYSTEM ANALOG INPUTS... 110 TABLE 49: POINT TYPE 110, PID CONTROL PARAMETERS... 115 TABLE 50: POINT TYPE 111, SAMPLER/ODORIZER PARAMETERS... 121 TABLE 51: POINT TYPE 112, STATION PARAMETERS... 122 TABLE 52: POINT TYPE 113, ORIFICE METER RUN CONFIGURATION... 127 TABLE 53: POINT TYPE 114, ORIFICE METER RUN VALUES... 131 TABLE 54: POINT TYPE 115, TURBINE METER RUN CONFIGURATION... 134 TABLE 55: POINT TYPE 116, TURBINE METER RUN VALUES... 140 TABLE 56: POINT TYPE 117, MODBUS CONFIGURATION PARAMETERS... 143 Revised: Jan 2007 v

TABLE 57: POINT TYPE 118, MODBUS REGISTER TO TLP MAPPING... 146 TABLE 58: POINT TYPE 119, MODBUS EVENT, ALARM, AND HISTORY TABLE... 155 TABLE 59: POINT TYPE 120, MODBUS MASTER MODEM CONFIGURATION... 162 TABLE 60: POINT TYPE 121, MODBUS MASTER TABLE... 163 TABLE 61: POINT TYPE 122, DS800 CONFIGURATION... 171 TABLE 62: POINT TYPE 123, SECURITY GROUP CONFIGURATION... 173 TABLE 63: POINT TYPE 124, HISTORY SEGMENT CONFIGURATION... 175 TABLE 64: POINT TYPE 125, HISTORY SEGMENT 0 POINT CONFIGURATION... 177 TABLE 65: POINT TYPE 126, HISTORY SEGMENT 1 POINT CONFIGURATION... 179 TABLE 66: POINT TYPE 127, HISTORY SEGMENT 2 POINT CONFIGURATION... 181 TABLE 67: POINT TYPE 128, HISTORY SEGMENT 3 POINT CONFIGURATION... 183 TABLE 68: POINT TYPE 129, HISTORY SEGMENT 4 POINT CONFIGURATION... 185 TABLE 69: POINT TYPE 130, HISTORY SEGMENT 5 POINT CONFIGURATION... 187 TABLE 70: POINT TYPE 131, HISTORY SEGMENT 6 POINT CONFIGURATION... 189 TABLE 71: POINT TYPE 132, HISTORY SEGMENT 7 POINT CONFIGURATION... 191 TABLE 72: POINT TYPE 133, HISTORY SEGMENT 8 POINT CONFIGURATION... 193 TABLE 73: POINT TYPE 134, HISTORY SEGMENT 9 POINT CONFIGURATION... 195 TABLE 74: POINT TYPE 135, HISTORY SEGMENT 10 POINT CONFIGURATION... 197 TABLE 75: POINT TYPE 136, ROC CLOCK... 199 TABLE 76: POINT TYPE 137, INTERNET CONFIGURATION PARAMETERS... 200 TABLE 77: POINT TYPE 138, USER C++ HOST PARAMETERS... 202 TABLE 78: POINT TYPE 139, SMART I/O MODULE INFORMATION... 203 TABLE 79: POINT TYPE 140, ALTERNATING CURRENT INPUT / OUTPUT... 205 TABLE 80: POINT TYPE 141, ADVANCED PULSE MODULE... 212 TABLE 81: ROC COMMUNICATIONS EXAMPLE... 223 vi Revised: Jan 2007

Introduction SECTION 1 INTRODUCTION This manual provides the information required for understanding the ROC Plus Protocol and the implementation within the ROC800-Series controller. It is written for personnel needing to implement a ROC Plus Protocol driver or as a reference for understanding the ROC809 controller. This manual provides a description for each of the opcodes for accessing data within the Remote Operations Controller (ROC) and a definition for the data, or database parameters. To configure the ROC, you must be familiar with the structure of the database. The database is broken into individual parameters and each database parameter is uniquely accessible by point type, parameter and logical numbers. See Section 3 for detailed information. Manual Organization This manual is organized according to the following major sections: Section 1 Introduction: Describes this manual and provides a summary of the general protocol message format. Section 2 Opcode: Lists each opcode available in the ROC Plus Protocol. Section 3 Lists for Point Types: Describes the ROC point types, parameters and their associated data types. Section 4 CRC-16 Code and Example: Provides information concerning the cyclical redundancy check used by the ROC Plus protocol. Section 5 IEEE Floating-Point Format provides information about the binary representation of ing-point numbers. Section 6 Spontaneous Report-by-Exception Example provides an example of SRBX in a ROC800-Series. Section 7 ROC-to-ROC Communications provides information detailing store and forward options in the ROC. General Protocol Message Format The various ROC and host protocol message formats are shown in Figure 1. The ROC Plus Protocol is a request/response protocol. In other words a request is made using an opcode and is then responded to by the device. (There are a few exceptions where the opcode is not responded to by the device; 1 is a broadcast message and one is store and forward.) In general, a message contains the following fields, in order from left to right: Destination Address of the destination device. Source Address of the source device. Opcode Defines the operation code action to be performed. of bytes Number of bytes in the data byte field. This consists of path, desired opcode, number of data bytes for the desired message, and the desired message. Data bytes States the length of the data portion of the message. CRC Cyclic redundancy check used to confirm validity of message transmission. Note: Ethernet communications will ignore the CRC since TCP/IP protocol already does error checking. Note: The CRC must still be sent over Ethernet communications. Revised: Jan 2007 1

In the source and destination fields, the unit and group provides a method to uniquely identify a particular device. The Group and Units are configurable for the device and typically for the host as well. Group Typically a group is a location or a grouping of a certain region of devices. Unit (or Address) The unit, along with the group, uniquely identifies a particular device. Note: Group: 240; Unit (address) 240: is the default and is used to allow all messages to be responded to Group: X; Unit 0: is used for broadcasting within a group. In the CRC field, the LSByte and MSByte sections have the following meanings: LSB This is the least significant byte of the CRC. MSB This is the most significant byte of the CRC. General Message Format Host A Polling ROC B for Data/Action: Destination (B) Source (A) Opcode Data Length Unit Group Unit Group of bytes M Data Bytes CRC d1 d2 d3 - - - - dm LSB MSB General Message Format ROC B Responding to Host A : Destination (A) Source (B) Opcode Data Length Unit Group Unit Group of bytes n Data Bytes CRC d1 d2 d3 - - - - dn LSB MSB Figure 1. General Message Format Messages are of variable length. The first six bytes of the message are used for the header information. The header information includes the destination, source, opcode, and data length. The header is followed by the data bytes and a 2 byte CRC. The CRC is calculated on the header information and the data bytes. The total length of a message is equal to the number of data bytes plus eight overhead bytes (6-byte header and a 2 byte CRC). The minimum message length is eight bytes if the number of data bytes is zero. Figure 2 contains examples of the messages exchanged if the host requests the current time and date from ROC 13 of Group 5. Host Request to ROC: ROC Address Host Address Op Code Data Length Unit Group Unit Group of bytes LSB CRC MSB 13 5 1 0 7 0 l M ROC Response to Host: Host Address ROC Address Op Code Data Length unit group unit group of bytes 8 Data Bytes CRC d1 D2 d3 - - - - dn. LS B MSB 1 0 13 5 7 8 sec Min hr day mo. yr. lyr. dwk. X 1 X 2 Where X 1 and X 2 are dependant on the date and time values. Figure 2. Request/Response Example 2 Revised: Jan 2007

Certain opcodes only send or set data and do not receive data back from the ROC800-Series. For example, Opcode 8 requests the ROC to set the time and date. The host transmits data bytes defining the new time and date. The ROC resets the time and date and sends back an acknowledgment in which the opcode is repeated, but no data bytes are transmitted back. All acknowledgments are 8-byte messages that repeat the opcode received but do not transmit any data bytes. Broadcast Version 1.10 and higher of firmware supports broadcasting of messages (opcodes). A broadcast message is an opcode that is sent to a Unit of 0. In this case, all devices (ROCs) with the Group matching the request will accept the opcode and process it (regardless of the unit that the unit may have). The ROC will not respond to the request. Example: A scenario may exist that you would want to synchronize several ROCs to the same date and time. If the ROCs were connected to the same radio link and configured for the same Group; a host would be able to send an Opcode 8, Set Real-Time Clock, request to Unit 0 that would set all of the ROCs configured in this group to the same date and time. Calculating Data Offsets A data byte offset is the offset (zero-based) from the beginning of a transmit or receive buffer (message) for the data items that comprise the opcode data. The offset of the first data item is always 6 to allow for the header information (bytes 0-5). Certain data offset values are determined based on the ROC s configuration. The data byte offset for each item may be calculated. To calculate the next data offset value, add the previous offset value to the length of the previous data item. Offset = Previous Offset + Length of Previous Data Item Revised: Jan 2007 3

SECTION 2 OPCODES Opcode Overview Table 1: Summary of Opcodes contains a summary of the Opcodes and a brief description of each Opcode. The tables in this section provide detailed descriptions of the various Opcodes and their uses. For each Opcode, a brief description of the data bytes is provided. In the following tables, a. in the Data byte(s) column or the Description of Data column is used to indicate a repetition of the proceeding item for the necessary number of times. Summary of Opcodes Table 1 contains a summary of the opcodes and a brief description of each opcode. The tables in Section 2 provide detailed descriptions of the various opcodes used. For each opcode, a brief description of the data bytes is provided. In some cases, the number of data bytes for a given opcode varies. Table 1: Summary of Opcodes Summary of Opcodes Communication Description Opcode 6 Send ROC configuration. 7 Send current time and date. 8 Set new time and date. 10 Send data from configurable opcode tables. 11 Set data in configurable opcode tables. 17 Set operator identification. 24 Store and forward. 50 Request IO point position array. 100 Read user defined point information (Command 11) 105 Send history point definition, min/max data, and current values for specified history point. 108 Send tag and current history period for specified history points. 118 Send specified number of alarms starting at specified alarm index. 119 Send specified number of events starting at specified event index. 135 Request history point data. 136 Request history index data. 137 Request history index for a day. 138 Request daily and periodic history for a day. 166 Set specified contiguous block of parameters. 167 Send specified contiguous block of parameters. 180 Send specified parameters. 181 Set specified parameters. 203 File transfer to and from ROC. 224 Send Report-by-Exception (SRBX) message to host. 225 Acknowledge Report-by-Exception message from ROC800-Series. 255 Error messages transmitted by ROC800-Series in response to a request with invalid parameters or format. 4 Revised: Jan 2007

Opcode 6, System Configuration Function: Opcode 6, System Configuration, provides the current system configuration for the unit. Note: This opcode follows a similar, but slightly different format compared to previous products. Version Introduced: 1.00 Version Updated: 1.20 (Added offset 103, Point Type 138) Version Updated: 2.00 (Defined offset 10, Logical Compatibility Mode) Version Updated: 2.xx (Added additional Point Types, offsets 103 220, Defined offset 11, Opcode 6 Revision) Note: Items may be added to the end in future version of the firmware. Table 2: Opcode 6, System Configuration Communi- Host Request to ROC ROC Response to Host cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data Opcode 6: System Configuration 6 No data bytes 6 1 The system mode the unit is currently operating in. 0 = Firmware Update Mode Extremely limited functionality is available. 1 = Run Mode 7 2 Comm Port or Port Number that this request arrived on. This is not defined if the above value (offset 6) is 0. 9 1 Security Access Mode for the port the request was received on. 10 1 Logical Compatibility Status Version 2.00 See [Point Type 91,Logical 0, 50]: 0 = 16 points per slot (160 bytes total) Compatibility Mode is 0 & 9 module slots max 1 = 16 points per slot (240 bytes total) Compatibility Mode is 0 & 14 module slots max. NOTE: The 15 th module slot can not be used. 2 = 8 points per slot (224 bytes total) Compatibility Mode is 1 & 27 module slots max. See Opcode 50, Request I/O Point Position and Table 9: Compatibility Mode for more information. 11 1 Opcode 6 Revision (Version 2.xx) 0 = Original 1 = Extended for Additional Point Types (offset 104-220) 12 12 Reserved for Future Use [Zero s returned] 24 1 Type of ROC 1 = ROCPAC ROC 300 series 2 = FloBoss 407 3 = FlashPAC ROC 300 series 4 = FloBoss 503 5 = FloBoss 504 6 = ROC800 (827/809) X = FB100 25 1 Contains the number of logical for point type 60 26 1 Contains the number of logical for point type 61 27 1 Contains the number of logical for point type 62 28 1 Contains the number of logical for point type 63 29 1 Contains the number of logical for point type 64 30 1 Contains the number of logical for point type 65 31 1 Contains the number of logical for point type 66 32 1 Contains the number of logical for point type 67 33 1 Contains the number of logical for point type 68 34 1 Contains the number of logical for point type 69 Revised: Jan 2007 5

Communi- Host Request to ROC ROC Response to Host cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data 35 1 Contains the number of logical for point type 70 36 1 Contains the number of logical for point type 71 37 1 Contains the number of logical for point type 72 38 1 Contains the number of logical for point type 73 39 1 Contains the number of logical for point type 74 40 1 Contains the number of logical for point type 75 41 1 Contains the number of logical for point type 76 42 1 Contains the number of logical for point type 77 43 1 Contains the number of logical for point type 78 44 1 Contains the number of logical for point type 79 45 1 Contains the number of logical for point type 80 46 1 Contains the number of logical for point type 81 47 1 Contains the number of logical for point type 82 48 1 Contains the number of logical for point type 83 49 1 Contains the number of logical for point type 84 50 1 Contains the number of logical for point type 85 51 1 Contains the number of logical for point type 86 52 1 Contains the number of logical for point type 87 53 1 Contains the number of logical for point type 88 54 1 Contains the number of logical for point type 89 55 1 Contains the number of logical for point type 90 56 1 Contains the number of logical for point type 91 57 1 Contains the number of logical for point type 92 58 1 Contains the number of logical for point type 93 59 1 Contains the number of logical for point type 94 60 1 Contains the number of logical for point type 95 61 1 Contains the number of logical for point type 96 62 1 Contains the number of logical for point type 97 63 1 Contains the number of logical for point type 98 64 1 Contains the number of logical for point type 99 65 1 Contains the number of logical for point type 100 66 1 Contains the number of logical for point type 101 67 1 Contains the number of logical for point type 102 68 1 Contains the number of logical for point type 103 69 1 Contains the number of logical for point type 104 70 1 Contains the number of logical for point type 105 71 1 Contains the number of logical for point type 106 72 1 Contains the number of logical for point type 107 73 1 Contains the number of logical for point type 108 74 1 Contains the number of logical for point type 109 75 1 Contains the number of logical for point type 110 76 1 Contains the number of logical for point type 111 77 1 Contains the number of logical for point type 112 78 1 Contains the number of logical for point type 113 79 1 Contains the number of logical for point type 114 80 1 Contains the number of logical for point type 115 81 1 Contains the number of logical for point type 116 82 1 Contains the number of logical for point type 117 83 1 Contains the number of logical for point type 118 84 1 Contains the number of logical for point type 119 6 Revised: Jan 2007

Communi- Host Request to ROC ROC Response to Host cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data 85 1 Contains the number of logical for point type 120 Opcode 6 Revision 1 Additions 86 1 Contains the number of logical for point type 121 87 1 Contains the number of logical for point type 122 88 1 Contains the number of logical for point type 123 89 1 Contains the number of logical for point type 124 90 1 Contains the number of logical for point type 125 91 1 Contains the number of logical for point type 126 92 1 Contains the number of logical for point type 127 93 1 Contains the number of logical for point type 128 94 1 Contains the number of logical for point type 129 95 1 Contains the number of logical for point type 130 96 1 Contains the number of logical for point type 131 97 1 Contains the number of logical for point type 132 98 1 Contains the number of logical for point type 133 99 1 Contains the number of logical for point type 134 100 1 Contains the number of logical for point type 135 101 1 Contains the number of logical for point type 136 102 1 Contains the number of logical for point type 137 103 1 Contains the number of logical for point type 138 104 1 Contains the number of logical for point type 139 105 1 Contains the number of logical for point type 140 106 1 Contains the number of logical for point type 141 107 1 Contains the number of logical for point type 142 108 1 Contains the number of logical for point type 143 109 1 Contains the number of logical for point type 144 110 1 Contains the number of logical for point type 145 111 1 Contains the number of logical for point type 146 112 1 Contains the number of logical for point type 147 113 1 Contains the number of logical for point type 148 114 1 Contains the number of logical for point type 149 115 1 Contains the number of logical for point type 150 116 1 Contains the number of logical for point type 151 117 1 Contains the number of logical for point type 152 118 1 Contains the number of logical for point type 153 119 1 Contains the number of logical for point type 154 120 1 Contains the number of logical for point type 155 121 1 Contains the number of logical for point type 156 122 1 Contains the number of logical for point type 157 123 1 Contains the number of logical for point type 158 124 1 Contains the number of logical for point type 159 125 1 Contains the number of logical for point type 160 126 1 Contains the number of logical for point type 161 127 1 Contains the number of logical for point type 162 128 1 Contains the number of logical for point type 163 129 1 Contains the number of logical for point type 164 130 1 Contains the number of logical for point type 165 131 1 Contains the number of logical for point type 166 132 1 Contains the number of logical for point type 167 133 1 Contains the number of logical for point type 168 Revised: Jan 2007 7

Communi- Host Request to ROC ROC Response to Host cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data 134 1 Contains the number of logical for point type 169 135 1 Contains the number of logical for point type 170 136 1 Contains the number of logical for point type 171 137 1 Contains the number of logical for point type 172 138 1 Contains the number of logical for point type 173 139 1 Contains the number of logical for point type 174 140 1 Contains the number of logical for point type 175 141 1 Contains the number of logical for point type 176 142 1 Contains the number of logical for point type 177 143 1 Contains the number of logical for point type 178 144 1 Contains the number of logical for point type 179 145 1 Contains the number of logical for point type 180 146 1 Contains the number of logical for point type 181 147 1 Contains the number of logical for point type 182 148 1 Contains the number of logical for point type 183 149 1 Contains the number of logical for point type 184 150 1 Contains the number of logical for point type 185 151 1 Contains the number of logical for point type 186 152 1 Contains the number of logical for point type 187 153 1 Contains the number of logical for point type 188 154 1 Contains the number of logical for point type 189 155 1 Contains the number of logical for point type 190 156 1 Contains the number of logical for point type 191 157 1 Contains the number of logical for point type 192 158 1 Contains the number of logical for point type 193 159 1 Contains the number of logical for point type 194 160 1 Contains the number of logical for point type 195 161 1 Contains the number of logical for point type 196 162 1 Contains the number of logical for point type 197 163 1 Contains the number of logical for point type 198 164 1 Contains the number of logical for point type 199 165 1 Contains the number of logical for point type 200 166 1 Contains the number of logical for point type 201 167 1 Contains the number of logical for point type 202 168 1 Contains the number of logical for point type 203 169 1 Contains the number of logical for point type 204 170 1 Contains the number of logical for point type 205 171 1 Contains the number of logical for point type 206 172 1 Contains the number of logical for point type 207 173 1 Contains the number of logical for point type 208 174 1 Contains the number of logical for point type 209 175 1 Contains the number of logical for point type 210 176 1 Contains the number of logical for point type 211 177 1 Contains the number of logical for point type 212 178 1 Contains the number of logical for point type 213 179 1 Contains the number of logical for point type 214 180 1 Contains the number of logical for point type 215 181 1 Contains the number of logical for point type 216 182 1 Contains the number of logical for point type 217 183 1 Contains the number of logical for point type 218 8 Revised: Jan 2007

Communi- Host Request to ROC ROC Response to Host cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data 184 1 Contains the number of logical for point type 219 185 1 Contains the number of logical for point type 220 186 1 Contains the number of logical for point type 221 187 1 Contains the number of logical for point type 222 188 1 Contains the number of logical for point type 223 189 1 Contains the number of logical for point type 224 190 1 Contains the number of logical for point type 225 191 1 Contains the number of logical for point type 226 192 1 Contains the number of logical for point type 227 193 1 Contains the number of logical for point type 228 194 1 Contains the number of logical for point type 229 195 1 Contains the number of logical for point type 230 196 1 Contains the number of logical for point type 231 197 1 Contains the number of logical for point type 232 198 1 Contains the number of logical for point type 233 199 1 Contains the number of logical for point type 234 200 1 Contains the number of logical for point type 235 201 1 Contains the number of logical for point type 236 202 1 Contains the number of logical for point type 237 203 1 Contains the number of logical for point type 238 204 1 Contains the number of logical for point type 239 205 1 Contains the number of logical for point type 240 206 1 Contains the number of logical for point type 241 207 1 Contains the number of logical for point type 242 208 1 Contains the number of logical for point type 243 209 1 Contains the number of logical for point type 244 210 1 Contains the number of logical for point type 245 211 1 Contains the number of logical for point type 246 212 1 Contains the number of logical for point type 247 213 1 Contains the number of logical for point type 248 214 1 Contains the number of logical for point type 249 215 1 Contains the number of logical for point type 250 216 1 Contains the number of logical for point type 251 217 1 Contains the number of logical for point type 252 218 1 Contains the number of logical for point type 253 219 1 Contains the number of logical for point type 254 220 1 Contains the number of logical for point type 255 Revised: Jan 2007 9

Opcode 7, Read Real-Time Clock Function: Returns the current time, date, and the day of week. Note: The time and date can also be read by using, and specifying Point Type 136, ROC Clock, Opcode 167, Request Single Point s can be used to read the time and date by specifying Point Type 136: ROC Clock. Version Introduced: 1.00 Table 3: Opcode 7, Read Real-Time Clock Opcode 7 Communi- Host Request to ROC ROC Response to Host Cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data Opcode 7: Send Current Time and Date No data bytes. 6 1 Current second [UINT8] 7 1 Current minute [UINT8] 8 1 Current hour [UINT8] 9 1 Current day [UINT8] 10 1 Current month [UINT8] 11 2 Current year [UINT16] 13 1 Current day of week [UINT8] 1=Sunday 7=Saturday 10 Revised: Jan 2007

Opcode 8, Set Real-Time Clock Function: Opcode 8 sets the real-time clock. This opcode provides the only method available to set the date and time within the ROC. Note: The current day of the week is calculated by the ROC. Note: When the clock is set with opcode 8, the microseconds in the unit will be set to zero. Version Introduced: 1.00 Table 4: Opcode 8, Set Real-Time Clock Opcode 8 Communi- Host Request to ROC ROC Response to Host Cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data Opcode 8: Set 6 1 Current seconds [UINT8] No data bytes. Current Time 7 1 Current minutes [UINT8] Time and date are set and acknowledgment sent back. and Date 8 1 Current hour [UINT8] 9 1 Current day [UINT8] 10 1 Current month [UINT8] 11 2 Current year [UINT16] Revised: Jan 2007 11

Opcode 10, Read Configurable Opcode Point Data Function: Opcode 10 reads data defined by Point Type 99: Configurable Opcode. The starting table location plus the number of table locations must be less than or equal to 44. Version Introduced: 1.00 Table 5:Opcode 10, Read Configurable Opcode Point Data Opcode 10 Communi- Host Request to ROC ROC Response to Host Cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data Opcode 10: Send Data from Configurable Opcode Tables 6 1 Table Number (0-15) 6 1 Table Number (0-15) 7 1 Starting Table Location (0-43) 7 1 Starting Table Location (0-43) 8 1 Number of Table Locations (1-44) 8 1 Number of Table Locations (1-44) 9 4 Table Version Number [] 13 x Data 12 Revised: Jan 2007

Opcode 11, Write Configurable Opcode Point Data Function: Opcode 11 writes data defined by Point Type 99: Configurable Opcode. The start. The starting table location plus the number of table locations must be less than or equal to 44. Version Introduced: 1.00 Table 6: Opcode 11, Write Configurable Opcode Point Data Opcode 11 Communi- Host Request to ROC ROC Response to Host cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data Opcode 11: 6 1 Table Number (0-15) No data bytes. Set Data in 7 1 Starting Table Location (0-43) Acknowledgment sent back. Configurable 8 1 Number of Table Locations (1-44) Opcode Tables 9 x Data Revised: Jan 2007 13

Opcode 17, Login Request Function: This opcode is used to attempt a login for the communications port through which communications are occurring. If a valid operator identifier and password are sent with the request, further opcode requests are accepted and the operator identification is logged with an event indicating the operator responsible for the change. The ROC provides default operator identification for each communications port. Once the operator identification is set, it remains valid until: Subsequent Opcode 17 requests. ROC is initialized by a restart (warm start or cold start). Firmware is upgraded. Timeout occurs. Version Introduced: 1.00 Table 7: Opcode 17, Login Request Opcode 17 Communi- Host Request to ROC ROC Response to Host cation Data Description of Data Data Description of Data Opcode Offset Length Offset Length Opcode 17: 6 3 Operator ID [AC3] Acknowledgment sent back without data. Set Operator ID 9 2 Password [UINT16] NOTE: Access Level only sent if Security Mode (95, x, 44) is set to 2 where x = the logical of the port the request is being made on. 11 1 Access Level [UINT8] 14 Revised: Jan 2007

Opcode 24, Store and Forward Function: Opcode 24 defines the requested store and forward action. Refer to the example shown in ROC-to-ROC Communications, Table 81. Version Introduced: 1.00 Table 8: Opcode 24, Store and Forward Opcode 24 Communi- Host Request to ROC ROC Response to Host Cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data Opcode 24: Store and Forward 6 1 Host Address No acknowledgment sent back. 7 1 Host Group 8 1 1 st Destination Address 9 1 1 st Destination Group 10 1 2 nd Destination Address 11 1 2 nd Destination Group 12 1 3 rd Destination Address 13 1 3 rd Destination Group 14 1 4 th Destination Address 15 1 4 th Destination Group 16 1 The desired Opcode 17 1 The number of data bytes for the desired Opcode 18 x Opcode data Revised: Jan 2007 15

Opcode 50, Request I/O Point Position Function: Opcode 50 is used to request either the type or the logical number of all the I/O points in the ROC, returned in the order of their physical location in the ROC. The system (diagnostic) inputs are also included. Version Introduced: 1.00 Version Updated: 2.00 In version 2.0, with the addition of the 827 and expanded backplanes, the 255 byte limit has been reached and requests for higher modules slots would not be valid. As a result, the number of points per module has changed from 16 to 8. In order to provide a mechanism to be backwards compatible (with the 16 points per module addressing), a backwards compatibility mode is available (and set by default). See Point Type 91, 49. In backwards compatibility mode, an 809 (or an 827 with one expanded backplane) will be returned the same as version 1.XX (16 points per module). If it is an 827 with 2 expanded backplanes, then it still can be returned with 16 points/module, but the byte length is expanded to allow for all of the information to be returned with one request/response pair. If it is set to 8 points/module, regardless of the backplane style or number of expanded backplanes, all the information for 27 slots are returned (even if there aren t modules in these slots and even if the expanded backplanes don t exist). The following table summarizes the behavior of Opcode 50 based on Point Type 91, 49 (logical 0) and the backplanes used. This table can be used in conjunction with Opcode 6 to determine the byte length for the response of any Opcode 50 request. Compatibility Mode: Point Type 91, Logical 0, 49, Value = 0 Logical Compatibility Status: (Opcode 6 Offset 10 Response) Enhanced Mode: Point Type 91, Logical 0, 49, Value = 1 Logical Compatibility Status: (Opcode 6 Offset 10 Response) ROC809 Backplane 0 2 ROC827 with 0 expanded backplanes ROC827 with 1 expanded backplanes ROC827 with 2 expanded backplanes ROC827 with 3 expanded backplanes ROC827 with 4 expanded backplanes 0 2 0 2 1 2 1 2 1 2 Table 9: Compatibility Mode 16 Revised: Jan 2007

Enumeration: The type indicates the type of I/O point as follows: Description Type Number Undefined 0 HART 85 Discrete Input 101 Discrete Output 102 Analog Input 103 Analog Output 104 Pulse Input 105 RTD 106 Thermocouple 107 MVS 108 System Analog Input 109 The logical number indicates the logical offset of this point within points of the same type. The first I/O point of a given type will have a logical number of 0; the second will have a logical number of 1, etc. Note: This logical number is not used as the Logical/Location component of the TLP (type, logical/location, parameter) reference. For I/O points, the physical location is used. The CPU Module (Module 0) is the only module that can not be removed. The CPU Module currently has 5 points associated with it (Point Type 109: System Analog Inputs). The other modules can contain anywhere from 0 to 8 points. The I/O point type and logical numbers can only be requested using Opcode 50, Request I/O Point Position. Two requests must be performed to retrieve both the point types and logical numbers. The ROC800 unit s layout consists of a power supply and CPU module in the left most column. Depending on configuration, up to 9 columns of modules can be added. This is shown in Figure 3, Physical Layout Modules. Revised: Jan 2007 17

Figure 3: Physical Layout - Modules Module 25 Module 22 Module 19 Module 16 Module 13 Module 10 Module 7 Module 4 Module 1 Power Supply Module 26 Module 23 Module 20 Module 17 Module 14 Module 11 Module 8 Module 5 Module 2 CPU Module (Module 0) Module 27 Module 24 Module 21 Module 18 Module 15 Module 12 Module 9 Module 6 Module 3 ROC827 3 Slots ROC809 ROC827 W/ 1 Expanded 9 Slots 9 Slots ROC827 W/ 2 Expanded 15 Slots ROC827 W/ 3 Expanded 21 Slots ROC827 W/ 4 Expanded 27 Slots 18 Revised: Jan 2007

There are 3 possible responses to Opcode 50 based on how many expanded backplanes are connected and the logical compatibility mode [Point Type 91, Logical 0, 49]. These correspond to the Logical Compatibility Status reported in offset 10 of Opcode 6. See Opcode 6, System Configuration for more information. Logical Compatibility Status = 0: Compatibility Mode with 809 or 827 with 0 1 expanded backplane [Point Type 91, Logical 0, 49] = 0 & connected to either an ROC809 or ROC827 with 0 or 1 expanded backplane. Each module has 16 points allocated to it and the response is the same for versions 1.XX and 2.00. Since there are 10 modules (0 [CPU Module] 9 [Slot 9]) and 16 points per module, there are 160 physical position points addressable in the ROC800-Series. I/O Point: Physical Location 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 159 Module - Point 0-1 0-2 0-3 0-4 0-5 0-6 0-7 0-8 0-9 0-10 0-11 0-12 0-13 0-14 0-15 0-16 1-1 9-16 Point Type 109 109 109 109 109 0 0 0 0 0 0 0 0 0 0 0 X 16 X 159 Logical Number 0 1 2 3 4 0 0 0 0 0 0 0 0 0 0 0 Y 16 Y 159 Notes: Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Where: Physical Location = (Module Number * 16) + Point Number on Module - 1 X = I/O Point Types 101 109; 0 represents module not present Y = 0 Maximum number of logical for the given I/O Point Type Logical Compatibility Status = 1: Compatibility Mode with 827 and 2-4 expanded backplanes [Point Type 91, Logical 0, 49] = 0 & ROC827 with 2 4 expanded backplanes Note: Slots 15 27 will NOT be supported in this mode. In this configuration, each module has 16 points allocated to it. The most modules that can be addresses is 15 (0 [CPU Module] 14 [Slot 14]) and 16 points per module, there are 240 physical position points addressable in this configuration. I/O Point: Physical Location 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 239 Module - Point 0-1 0-2 0-3 0-4 0-5 0-6 0-7 0-8 0-9 0-10 0-11 0-12 0-13 0-14 0-15 0-16 1-1 14-16 Point Type 109 109 109 109 109 0 0 0 0 0 0 0 0 0 0 0 X 16 X 239 Logical Number 0 1 2 3 4 0 0 0 0 0 0 0 0 0 0 0 Y 16 Y 239 Notes: Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Where: Physical Location = (Module Number * 16) + Point Number on Module - 1 X = I/O Point Types 101 109; 0 represents module not present Y = 0 Maximum number of logical for the given I/O Point Type Logical Compatibility Status = 2: Compatibility Mode is set to 2.00 with any ROC800-Series based products (809/827 and any number of expanded backplanes): Revised: Jan 2007 19

[Point Type 91, Logical 0, 49] = 1 & connected to an ROC809 or ROC827 with 0 4 expanded backplanes In this configuration, each module has 8 points allocated to it. All 28 slots (0 [CPU Module] 27 [Slot 27]) are returned using 8 points per module. As a result, there are 224 physical position points addressable in this configuration. I/O Point: Physical Location 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 223 Module - Point 0-1 0-2 0-3 0-4 0-5 0-6 0-7 0-8 1-1 1-2 1-3 1-4 1-5 1-6 1-7 1-8 2-1 27-16 Point Type 109 109 109 109 109 0 0 0 0 0 0 0 0 0 0 0 X 16 X 223 Logical Number 0 1 2 3 4 0 0 0 0 0 0 0 0 0 0 0 Y 16 Y 223 Notes: Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Where: Physical Location = (Module Number * 8) + Point Number on Module - 1 X = I/O Point Types 101 109; 0 represents module not present Y = 0 Maximum number of logical for the given I/O Point Type Table 10: Opcode 50, Request I/O Point Position Opcode 50 Communi- Host Request to ROC ROC Response to Host Cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data Opcode 50: Send I/O Point Type or Logical Number associated with the Point Type. 6 1 Which I/O data to send (0 = I/O Point Type, 1 = I/O Logical Number) 6 160 240 224 I/O Point Types or Logical Numbers See Opcode 6 (offset 10) for length of response 20 Revised: Jan 2007

Opcode 100, Access User Defined Information Function: Opcode 100 is used to read user defined point type information. Version Introduced: 1.20 (Command 11) Table 11: Opcode 100, Access User Defined Information Opcode 100 Communi- Host Request to ROC ROC Response to Host Cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data Get Point Type 6 1 Command (11) 6 1 Command (11) Information 7 1 Start Point (0 255) 7 1 Start Point (0 255) Retrieve 8 1 Points (0 245) 8 1 Points (0 245) information 9 1 Type of Point Type about point 0 7 User Program types. 253 User Defined 254 ROC Point Type 255 No Point Type (Above repeated as necessary) Opcode 105, Request Today and Yesterday s Min/Max Values Function: Opcode 105 retrieves the occurrence of today s and yesterday s minimum and maximum values. The history point is specified by segment and point number. Version Introduced: 1.00 Enumeration: Historical Archival Method: 128 Archived every hour (Average). 129 Archived every hour (Accumulated). 130 Archived every hour (Current). 134 Archived every hour (Totalize). 67 Timestamp logged with FST-controlled timestamp. Timestamp is a TIME [UINT32] representing the number of seconds elapsed since 12:00 a.m. Jan. 1, 1970. Use FST command WTM Write current Time to History. 65 Database value logged when directed by the FST command WDB Write Results Register Value to History. 0 Not defined. Revised: Jan 2007 21

Table 12: Opcode 105, Request Today and Yesterday s Minimum and Maximum Values Opcode 105 Communi- Host Request to ROC ROC Response to Host cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data Opcode 105: Send History Point Definition, Min and Max Data, and Current Value for Specified History Point 6 1 History Segment (0 10) 6 1 History Segment (0 10) 7 1 History point number 7 1 Historical point number 8 1 Historical Archival Method Type 9 1 Point type 10 1 Point/Logic number 11 1 number 12 4 Current value [] 16 4 Minimum value since contract hour [] 20 4 Maximum value since contract hour [] 24 5 Time of minimum value occurrence Note: This is a UINT32 (4 bytes) and contains the number of seconds since 12:00AM Jan 1, 1970. Seconds, minutes, hour, day, and month 29 5 Time of maximum value occurrence. Note: This is a UINT32 (4 bytes) and contains the number of seconds since 12:00AM Jan 1, 1970. Seconds, minutes, hour, day, and month 34 4 Minimum value yesterday [] 38 4 Maximum value yesterday [] 42 5 Time of yesterday s min value occurrence. Note: This is a UINT32 (4 bytes) and contains the number of seconds since 12:00AM Jan 1, 1970. Seconds, minutes, hour, day and month 47 5 Time of yesterday s max value occurrence. Note: This is a UINT32 (4 bytes) and contains the number of seconds since 12:00AM Jan 1, 1970. Seconds, minutes, hour, day, and month 52 4 Value during last completed period [] 22 Revised: Jan 2007

Opcode 108, Request History Tag and Periodic Index Function: Opcode 108 sends the tag and history period for specified history points, up to a maximum of 20 history points at a time. All points are all within a single segment. Version Introduced: 1.00 Table 13: Opcode 108, Request History Tag and Periodic Index Opcode 108 Communi- Host Request to ROC ROC Response to Host cation Data Description of Data Data Description of Data Opcode Offset Length Offset Length Opcode 108: Send Tag and Current History Period for Specified History Point(s) 6 1 History Segment (0 10) 6 1 History Segment (0 10) 7 1 of historical points specified 7 1 of historical points specified 8 1 Historical point (0 199) 8 2 Periodic Index (common among all history points in segment). (above repeated as necessary 20 maximum) (repeated as necessary) 1 History point 10 Tag [AC10] Revised: Jan 2007 23

Opcode 118, Request Alarm Data Function: Opcode 118 is used to request alarm data from the Alarm Log in the ROC. Version Introduced: 1.00 Table 14: Opcode 118, Request Alarm Data Opcode 118 Communi- Host Request to ROC ROC Response to Host cation Data Data Opcode Offset Length Description of Data Offset Length Description of Data Opcode 118: Send Specified Number of Alarms Starting With Specified Alarm index. 6 1 of alarms requested (max 10) 6 1 Number of alarms being sent *SEE NOTE BELOW 7 2 Starting Alarm Log index 7 2 Starting Alarm Log index 9 2 Current Alarm Log index 11 23 Alarm Data. (above repeated as necessary) *NOTE: If no alarms are requested, then no Alarm Data will be returned. Alarm Data The alarm log stores the last 450 alarm entries. Each alarm consists of 23 bytes and has the following general format: Description Type Time Alarm-specific Data Byte: 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 Alarm Type The alarm type (byte 0) is a packed one-byte field that also includes information identifying if the alarm indicates a set or clear condition, and if the alarm is an SRBX alarm. Alarm Type Byte Breakdown Description SRBX Condition Type Bit: 7 6 5 4 3 2 1 0 SRBX (most significant bit): Indicates whether the alarm was an SRBX alarm. An SRBX allows the ROC809 to notify a host about certain alarm conditions. The host may be notified when an alarm is either set or cleared. Section 15.2.4.2 covers SRBX in more detail. 0 - No SRBX 1 - SRBX issued Condition (bit 6): Indicates if the alarm is being set or cleared. 0 - Cleared 1 - Set Type (bits 5-0): Identifies what type of alarm is stored. See Alarm-specific Data for byte usage (5-22) of each type. 0 - No Alarm 1 - Alarm 2 - FST Alarm 3 - User Text Alarm 4 - User Value Alarm 24 Revised: Jan 2007