Rievtech xLogic ELC Series User Manual page 165

Server software get the data like this:
00 09 00 00 00 4c 01 8b 49 14 78 2d 4d 65 73 73 65 6e 67 65 72 20 73 74 61 74 69 6f 6e 31 01 01 01
02 01 0d 0b 08 00 80 00 88 00 00 00 00 0c 08 00 00 00 00 00 80 00 88 16 01 02 17 08 01 c2 00 00 02
26 00 00 07 01 04 0d 08 00 00 00 00 00 00 01 c2
Description:
00 09 00 00 00 4c : MODBUS TCP data prefixed by six bytes
01 ：x-Messenger address(the default is 01)
8b : Upload code(fixed, if GPRS Data upload used)
49 :length field =number of bytes following
14 :length field = number of bytes of Identification string
78 2d 4d 65 73 73 65 6e 67 65 72 20 73 74 61 74 69 6f 6e 31 : x-Messenger station1(Identification
String)
01 01 01
01 : type code (01 means the digital inputs)
01 : length field = number of bytes of the digital inputs
01 : status of the digital inputs(I3=1,I4=0,I5=0,I6=0)
02 01 0d
02 : type code (02 means the digital outputs)
01 : length field = number of bytes of the digital outputs
0d : status of the digital outputs (Q1=1,Q2=0,Q3=1,Q4=1)
0b 08 00 80 00 88 00 00 00 00
0b : type code (0b means the Analog Input)
08 :length field = number of bytes
of the analog inputs
00 80 00 88 00 00 00 00 : analog inputs value (AI1= 00 80 , AI2 = 00 88, AI3= 00 00,AI4= 00 00)
0c 08 00 00 00 00 00 80 00 88
165