[Type text]

SENSEINDIA ELECTROMAGNETIC FLOW METER

SI-MAG 110 Serials Electromagnetic Flowmeter Converter

Communication Protocol (ModBus)
1. OVERVIEW ........................................................................................................................................... 2

PROTOCOL OVERVIEW 2

RS-485 WIRING 2

SERIAL COMMUNICATION PARAMETERS 2

2. MODBUS RTU PROTOCOL ............................................................................................................... 3

READ HOLDING REGISTERS (FUNCTION CODE 03) 3

READ INPUT REGISTERS (FUNCTION CODE 04) 4

SET SINGLE HOLDING REGISTERS (FUNCTION CODE 06) 5

WRITE HOLDING REGISTERS (FUNCTION CODE 16) 6

3. PARAMETERS ..................................................................................................................................... 7

DATA TYPE 7

REGISTER ADDRESS INSTRUCTIONS 8

INPUT REGISTER 8

HOLDING REGISTER 9

Page 1
[Type text]

SI-MAG110 Communication Protocol（ModBus）

Electromagnetic Flowmeter Converter Communication Protocol

(Ver 1.3)

1. Overview

Protocol Overview
SI-MAG110 Electromagnetic Flowmeter Converter Communication protocol is the standard
MODBUS-RTU mode.
 
 Communication interface：RS-485.
 
 Support standard Modbus-RTU ：Support functions codes 03, 04, 06, 16.
 
 Register length limit：Functions code 03 and 04 supports max 64 registers.
 
Register length limit：Functions code 16 support max 2 registers.

RS-485 Wiring
TX+ and TX- terminal are RS485 converter A+ and B-.

Serial Communication Parameters

The length of data bits：8
Parity check：None
Stop bits：1
Baud rate：600, 1200, 2400, 4800, 9600, 19200 bps
Address: 1 - 247。
Note: Communication address and baud rate can be changed via local adjustment.

Page 2
[Type text]

2. Modbus RTU Protocol

Read Holding Registers (Function Code 03)
Function 03 can access max 64 consecutive holding registers. The frame as follows:
Request frame:
Device Address 1 Byte 1-247

Function Code 1 Byte 3

Start Register Address 2 Bytes 4096 - 4167

Register Count 2 Bytes 1-64

CRC Check 2 Bytes XX XX

The correct response frame：

Device Address 1 Byte 1- 247

Function Code 1 Byte 3

*
Bytes Count 1 Byte N x2
*
Register Values N x 2 Bytes Data
CRC Check 2 Bytes XX XX
*
N = Register Count
Error response frame:
Device Address 1 Byte 1-247

Function Code 1 Byte 131

Error Code 1 Byte 1 or 2 or 3 or 4
CRC Check 2 Bytes XX XX

Example：
If you want to read the converter range, the register start address is 4101 (0x1005), assume the range
value is 424.00. The float format is 4 bytes IEEE-754. Then 424.0 should be 0x43, 0xD4, 0x00, 0x00.

Request Response
Domain name Data (Hex) Domain name Data (Hex)
Device Address 20 Device Address 20
Function Code 03 Function Code 03

Register Address High Byte 10 Bytes Count 04

Register Address Low Byte 05 Register (0x1005) Values High Byte 43
Register Count High Byte 00 Register(0x1005) Values Low Byte D4
Register Count Low Byte 02 Register(0x1006) Values High Byte 00

Page 3
[Type text]

CRC Check Code Byte0 D6 Register (0x1006) Values Low Byte 00

CRC Check Code Byte1 7B CRC Check Code Byte0 9E
CRC Check Code Byte1 8D

Read Input Registers (Function Code 04)

Function 04 can access max 64 consecutive holding registers. The frame as follows:

Request frame:
Device Address 1 Byte 1-247

Function Code 1 Byte 4

Start Register Address 2 Bytes 12288 - 12313

Register Count 2 Bytes 1- 64
CRC Check 2 Bytes XX XX

The correct response frame：

Device Address 1 Byte 1- 247

Function Code 1 Byte 4

Bytes Count 1 Byte N* x 2

*
Register Values N x 2 Bytes Data
CRC Check 2 Bytes XX XX
*
N = Register Count
Error response frame:
Device Address 1 Byte 1-247

Function Code 1 Byte 132

Error Code 1 Byte 1 or 2 or 3 or 4
CRC Check 2 Bytes XX XX

Example：

If you want to read the positive total flow and unit, the register start address is 12292 (0x3004), assume
the positive total flow value is 1234. The data format is long. Then 1234 should be 0x00,0x00,0x04,0xD2.
And assume total flow unit is 0.001L(unit code = 4), the flow unit is L/s (unit code = 3).

Request Response
Domain name Data (Hex) Domain name Data (Hex)
Device Address 20 Device Address 20
Function Code 04 Function Code 04

Register Address High Byte 30 Bytes Count 06

Page 4
[Type text]

SI-MAG110 Communication Protocol（ModBus）

Register Address Low Byte 04 Register(0x3004) Values High Byte 00

Register Count High Byte 00 Register(0x3004) Values Low Byte 00
Register Count Low Byte 03 Register Values (0x3005) 04
High Byte
CRC Check Code Byte0 F8 Register Values (0x3005) D2
Low Byte
CRC Check Code Byte1 7B Register Values (0x3006) 04
High Byte
Register Values (0x3006) 03
Low Byte
CRC Check Code Byte0 17
CRC Check Code Byte1 0A

Set Single Holding Registers (Function Code 06)

Request frame:
Device Address 1 Byte 1-247
Function Code 1 Byte 6

Start Register Address 2 Bytes

Register Values 2 Bytes Data

CRC Check 2 Bytes XX XX

The correct response frame：

Device Address 1 Byte 1-247
Function Code 1 Byte 6
Start Register Address 2 Bytes

Register Values 2 Bytes Data

CRC Check 2 Bytes XX XX

Error response frame:

Device Address 1 Byte 1-247

Function Code 1 Byte 134

Error Code 1 Byte 1 or 2 or 3 or 4
CRC Check 2 Bytes XX XX

Example：

Page 5
[Type text]

If you want to change the flow unit to m³/h (unit code = 2) , the register start address is 4100 (0x1004).

Request Response

Domain name Data (Hex) Domain name Data (Hex)

Device Address 20 Device Address 20
Function Code 6 Function Code 6

Start Register Address High Byte 10 Start Register Address High Byte 10
Start Register Address Low Byte 04 Start Register Address Low Byte 04

Register Values High Byte 00 Register Values High Byte 44

Register Values Low Byte 02 Register Values Low Byte 02

CRC Check Code Byte0 4B CRC Check Code Byte0 4B

CRC Check Code Byte1 BB CRC Check Code Byte1 BB

Write Holding Registers (Function Code 16)

SI-MAG110 support function code 16 to write max 2 holding registers for 4 bytes format data.

Request frame:
Device Address 1 Byte 1-247

Function Code 1 Byte 16

Start Register Address 2 Bytes

*
Register Count 2 Bytes N = 1-2
*
Byte Count 1 Byte N x2
*
Register Values N x 2 Bytes Data
CRC Check 2 Bytes XX XX
*
N = Register Count
The correct response frame：
Device Address 1 Byte 1-247
Function Code 1 Byte 16

Start Register Address 2 Bytes

Register Count 2 Bytes 1-2

CRC Check 2 Bytes XX XX

Error response frame:

Device Address 1 Byte 1-247

Page 6
[Type text]

SI-MAG110 Communication Protocol（ModBus）

Function Code 1 Byte 144

Error Code 1 Byte 1 or 2 or 3 or 4

CRC Check 2 Bytes XX XX

Example：

If you want to set the converter range to 424.00, the register start address is 4101 (0x1005). The
float format is 4 bytes IEEE-754. Then 424.0 should be 0x43, 0xD4, 0x00, 0x00.

Request Response

Domain name Data (Hex) Domain name Data (Hex)

Device Address 20 Device Address 20
Function Code 10 Function Code 10

Register Address High Byte 10 Register Address High Byte 10

Register Address Low Byte 05 Register Address Low Byte 05

Register Count High Byte 00 Register Count High Byte 00

Register Count Low Byte 02 Register Count Low Byte 02

Byte Count 04 CRC Check Code Byte0 53

Register(0x1005) Values High Byte 43 CRC Check Code Byte1 B8

Register(0x1005) Values Low Byte D4

Register(0x1006) Values High Byte 00

Register(0x1006) Values Low Byte 00

CRC Check Code Byte0 04

CRC Check Code Byte1 D0

3. SI-MAG110 Parameters

Data Type

1) Float Type (4 Bytes IEEE-754 Format Float)

Transmission sequence Data1 Data2 Data3 Data4

Bits sequence Bit31…Bit24 Bit23…Bit16 Bit15…Bit8 Bit7…Bit0

2) Integer Type (4 Bytes Signed Integer)

Transmission sequence Data1 Data2 Data3 Data4

Bits sequence Bit31…Bit24 Bit23…Bit16 Bit15…Bit8 Bit7…Bit0

3) Unsigned Integer Type (4 Bytes Unsigned Integer)

Page 7
[Type text]

SI-MAG110 Communication Protocol（ModBus）

Transmission sequence Data1 Data2 Data3 Data4

Bits sequence Bit31…Bit24 Bit23…Bit16 Bit15…Bit8 Bit7…Bit0

4) Short Type (2 Bytes Signed Integer)

Transmission sequence Data1 Data2

Bits sequence Bit15…Bit8 Bit7…Bit0

5) Unsigned short Type (2 Bytes Unsigned Integer)

Transmission sequence Data1 Data2

Bits sequence Bit15…Bit8 Bit7…Bit0

Register Address Instructions

Modbus register address coding is generally divided into two types: Modbus RTU standard protocol
addressing mode, PLC addressing mode (such as: Modicon company, GE companies).
SI-Mag 110 uses the Modbus RTU standard protocol addressing mode, register address begin from
0x0000. If the PC software uses the PLC addressing mode (register address begin from 0x0001), the input
register address should plus 1. This kind of equipment in the transmitting message before the register address
of minus 1, such as: access to the 0x0001 register, the sent message register address 0x0000.

Input Register
Note: SI-MAG-110 uses the Modbus RTU standard protocol addressing mode, register address begin
from 0x0000.

Parameter name Function Register Address Data Value Range

Code Type
Dec Hex
Differential Total Flow 04 12288 0x3000 Integer -999999999
- 999999999
Reverse Total Flow 04 12290 0x3002 Unsigned 0 - 999999999
Integer
Forward Total Flow 04 12292 0x3004 Unsigned 0 - 999999999
Integer
Unit 04 12294 0x3006 Unsigned High Byte：Total Unit
(Total unit and Flow unit) short 0 -- 0.001m³,
1 -- 0.01m³,
2 -- 0.1m³,
3 -- 1m³,
4 -- 0.001L,
5 -- 0.01L,
6 -- 0.1L,
7 -- 1L；
Low Byte：Flow Unit
0 -- m³/s,
[Type text]

SI-MAG110 Communication Protocol（ModBus）

1 -- m³/m,
2 -- m³/h,
3 -- L/s,
4 -- L/m,
5 -- L/h。
Flow 04 12295 0x3007 float ＼
Alarm Flag 04 12297 0x3009 Unsigned Bit0: Empty Pipe Alarm State
short Bit1: Excitation alarm State
Bit2: High Flow Limit Alarm
State
Bit3: Low Flow Limit Alarm
State
Bit4-Bit15: Reserve。
Bits define：
1 -- Alarm
0 – No Alarm
Flow rate 04 12298 0x300A float ＼
Flow percent 04 12300 0x300C float ＼
Empty Pipe Ratio 04 12302 0x300E float ＼
Reverse Total Overflow 04 12304 0x3010 Unsigned 0 - 65535
Count Integer
Forward Total Overflow 04 12306 0x3012 Unsigned 0 - 65535
Count Integer
Differential Total 04 12308 0x3014 Integer 0 - 65535
Overflow Count

Holding Register
Note: SI-MAG-110 uses the Modbus RTU standard protocol addressing mode, register address begin
from 0x0000.

Parameter name Funcion Register Address Data Value Range

Code Dec Hex Type
03,06,16 4096 0x1000 Unsigned 0 -- English,
Language
short
03,06,16 4097 0x1001 Unsigned 1-247
Slave MODBUS Address
short
03,06,16 4098 0x1002 Unsigned 600,1200,2400,4800,9600,192
Baud Rate
short 00
03,06,16 4099 0x1003 Unsigned 3,6,10,15,20,25,32,40,50,65,80
short ,
Sensor Size 100,125,150,200,250,300,350,
400,
450,500,600,700,800,900,1000

Page 9
[Type text]

SI-MAG110 Communication Protocol（ModBus）

,1200,
1400,1600,1800,2000,2200,24
00,2600,
2800,3000
03,06,16 4100 0x1004 Unsigned 0 -- m³/s,
short 1 -- m³/m,
2 -- m³/h,
Flow unit
3 -- L/s,
4 -- L/m,
5 -- L/h,
Flow Range 03,16 4101 0x1005 Float 0.00001 - 99999
Damping 03,16 4103 0x1007 Float 0.0～50.0S, damping
Flow 03,06,16 4105 0x1009 Unsigned 0 -- Forward
short 1 -- Reverse
Flow 03,16 4106 0x100A Float -9999 - 9999

Flow Cutoff 03,16 4108 0x100C Float 0 - 99

03,06,16 4110 0x100E Unsigned 0: Disable
Cut Disp Ena
short 1: Enable
03,06,16 4111 0x100F Unsigned 0 -- 0.001m³,
short 1 -- 0.01m³,
2,-- 0.1m³,
3 -- 1m³,
Total Unit
4 -- 0.001L,
5 -- 0.01L,
6 -- 0.1L,
7 -- 1L
03,06,16 4112 0x1010 Unsigned 0: Disable
Segma_N Ena
short 1: Enable
Analog Type 03,06,16 4113 0x1011 Unsigned 0 -- 0-10mA,
short 1 -- 4-20mA
03,06,16 4114 0x1012 Unsigned 0-- Frequency,
P/AH FC Sel. short 1 -- Pulse,
2 -- Upper limit alarm
03,06,16 4115 0x1013 Unsigned 0 -- 0.001m³,
short 1 -- 0.01m³,
2 -- 0.1m³,
3 -- 1m³,
Pulse unit
4 -- 0.001L,
5 -- 0.01L,
6 -- 0.1L,
7 -- 1L
Frequency Max 03,06,16 4116 0x1014 Unsigned 1 - 5000

Page 10
[Type text]

SI-MAG110 Communication Protocol（ModBus）

short
03,06,16 4117 0x1015 Unsigned 0: Disable
Mtsensor Ena
short 1: Enable

Mtsnsr Trip 03,16 4118 0x1016 Float 1 - 10000.0

03,06,16 4120 0x1018 Unsigned 0: Disable
Alm High Ena
short 1: Enable

Alm High Val 03,16 4121 0x1019 Float -200.0 - 200.0

03,06,16 4123 0x101B Unsigned 0: Disable
Alm Low Ena
short 1: Enable

Alm Low Val 03,16 4124 0x101C Float -200.0 - 200.0

03,06,16 4126 0x101E Unsigned 0: Disable
Sys Alm Ena
short 1: Enable
06,16 16391 0x101F Unsigned Total Flow Clear Password
Clr Sum Key
short (Default 6108)
03,16 4128 0x1020 Unsigned 0 – 999999
Sensor code 1
Integer
03,16 4130 0x1022 Unsigned 0 – 999999
Sensor code 2
Integer
03,06,16 4132 0x1024 Unsigned 0 -- Mode 1,
Excitation type short 1 -- Mode 2,
2 -- Mode 3
Sensor Fact coefficient 03,16 4133 0x1025 Float 0.0000 - 5.9999
Line CRC Ena 03,06,16 4135 0x1027 Unsigned 0: Disable
short 1: Enable
Flow correct point 1 03,16 4137 0x1029 Float -15.0 - 15.0
Flow correct point 2 03,16 4139 0x102B Float -15.0 - 15.0
Flow correct point 3 03,16 4141 0x102D Float -15.0 - 15.0
Flow correct point 4 03,16 4143 0x102F Float -15.0 - 15.0
Flow Correct Coefficient 03,16 4145 0x1031 Float 0.0000 - 1.9999
1
Flow Correct Coefficient 03,16 4147 0x1033 Float 0.0000 - 1.9999
2
Flow Correct Coefficient 03,16 4149 0x1035 Float 0.0000 - 1.9999
3
Flow Correct Coefficient 03,16 4151 0x1037 Float 0.0000 - 1.9999
4
Variation restrain enable 03,06,16 4153 0x1039 Unsigned 0: Disable
short 1: Enable
Variation restrain factor 03,06,16 4154 0x103A Unsigned 1 -- 0.01m/s,
Page 11
[Type text]

SI-MAG110 Communication Protocol（ModBus）

short 2 -- 0.02m/s,
3 -- 0.03m/s,
5 -- 0.05m/s,
8 -- 0.08m/s,
10 -- 0.10m/s,
20 -- 0.20m/s,
30 -- 0.30m/s,
50 -- 0.50m/s,
80 -- 0.80m/s
Variation restrain time 03,06,16 4155 0x103B Unsigned 400 - 2500
short
Flow Display Decpoint 03,06,16 4162 0x1042 Unsigned 1 -- 1 Decpoint ,
short 2 -- 2 Decpoint ,
3 -- 3 Decpoint,
4 -- 4 Decpoint ,
5 -- 5 Decpoint ,
0 -- 0 Decpoint ,
AL FC Select 03,06,16 4163 0x1043 Unsigned 0 -- Lower Alarm
short 1 -- Flow Firection

Page 12