How the frame is built
- The CRC-16/MODBUS starts at
FFFF, uses the polynomialA001(reversed8005), and is sent low byte first. - Addresses are 0-based on the wire. The holding register that a manual calls
40001is address0in the frame,40010is address9. - Modbus TCP has no CRC. It puts a 7-byte MBAP header in front instead: transaction ID, protocol ID
0000, length, and the unit ID.
Related
Modbus float converter
Turn the two registers you read into a float in all four byte orders.
Bit and number converter
Decode coils, status words and register values bit by bit.