From: An improved content-based outlier detection method for ICS intrusion detection
Modbus | Payload | Other |
---|---|---|
Command address | Comm fun | Set point |
Response address | Response fun | Control scheme |
Command memory | Sub function | Solenoid state |
Response memory | Measurement | Gain |
Command memory count | Control mode | Reset |
Response memory count | Pump State | Dead band |
Command length | Manual pump setting | Rate |
Response length | Label | Cycle time |
Time | – | – |
Crc rate | – | – |