Today is...
Tuesday, September 17, 2019
Welcome to, the global online
community of automation professionals.
Featured Video...
Featured Video
Watch an animation of a conveyor stacking operation demonstrating the use of a move on a gear command.
Our Advertisers
Help keep our servers running...
Patronize our advertisers!
Visit our Post Archive
Are there headerless exception messages?
Should a Modbus TCP client expect exception messages that consist of only the PDU and have no MBAP header?

I am writing a Modbus TCP client program and use the Pymodslave simulator. Pymodslave uses unit id 01. If I send a message with a different unit id, for example FF, Pymodslave responds with an exception message that consists of the PDU only and has no MBAP header.

Raw request data:
00 00 00 00 00 06 FF 03 00 A0 00 01
Raw response data:
83 04

My question is: Should my client program handle such a PDU-only message with no MBAP header, or is this a quirk of Pymodslave? I cannot find any mentioning of transmitting only the PDU in
- Modbus_Application_Protocol_V1_1b3.pdf
- Modbus_Messaging_Implementation_Guide_V1_0b.pdf
or any other source I found so far.

Here is a little more context.

If the unit id is what Pymodslave expects then it always sends a full ADU. Here are two examples:

If I change the unit id byte in the request from FF to 01 then the messages are:
Request: 00 00 00 00 00 06 FF 03 00 A0 00 01
Response (success): 00 00 00 00 00 05 01 03 02 00 00

If I use the correct unit id and an invalid register number (FFFF) then the exception response has an MBAP header:
Request: 00 00 00 00 00 06 01 03 FF FF 00 01
Response (exception): 00 00 00 00 00 03 01 83 02