Findings on LSV2

This document is a collection of all the information that was discovered while developing this library.

Differences between different control versions

Some functions are only available on certain controls and/or versions of the software.

TNC

iTNC

CNCpilot

Tool Table

TNC:/table/tool.t

TNC:/TOOL.T

Pocket Table

TNC:/table/tool_p.tch

TNC:/TOOL_P.TCH

TNC:/table/ToolAllo.tch

R_RI: current tool (51)

no

yes

no

R_RI: error msg (27, 28)

no

yes

no

Information on the protocol based on reverse engineering and prior work

Each LSV2 telegram starts with a 32 bit length value followed by a command string consisting of exactly 4 characters. The length value does not include the command string, a telegram with only a command and no additional data will have a length value of 0x0000. If additional data has to be sent after the command string the value 0x00 is used as a separator. All values are transmitted with big-endian byte order.

File Info

By using the command R_FI followed by a valid file path, the control responds with information about this file. This includes the file size, the unix-date and the filename. The message also contains some additional bytes which purpose is not yet confirmed. These bytes are probably attributes and/or access rights.

Directory info

The command for reading the content of a directory seems to support an additional parameter. With 0x01 sent after the command, the control sends all entries at once and not one entry per packet. R_DI 0x01 -> all info at once and not in separate packets

The directory information has also not been completely decoded yet. It contains the full path of the folder and a lot of zero bytes. By comparing results from different controls and directories it was determined that there seem to be a list of four byte-keys. their purpose is not yet known. The first 4 bytes might have something to do with the size but it is always reported as 0xFF FF FF FF which would decode to 4,2 Gbyte. It might also be an indicator of the remaining free size of the disk.

Machine State

Based on discussion [here](https://github.com/tfischer73/Eclipse-Plugin-Heidenhain/issues/1)

Login with INSPECT:

> R_RI 0x0015 (21) -> you can read the X,Y,Z Axis.

Login with DN:

> R_RI 0x0018 (24) -> you can read the name of the current program in execution.

Login with DNC:

> R_RI 0x001A (26) -> you can read the current program status

The states of program can be:

Value

Meaning

0

Started

1

Stopped

2

Finished

3

Cancelled

4

Interrupted

5

Error

6

Error Cleared

7

Idle

8

Undefined

DNC login is only possible if the option is set on the control, without the option you get an error when trying to login with DNC.

Creating a log file - not implemented

By recording the communiction with Wireshark between the control and TNCremo the following sequence was accired.

>....R_ST
<....S_ST............
>....C_ST............
<....T_OK
>...%C_CC..operation.log;12.09.2020;00:00:00;.
<....T_OK
<....M_CC...d 0x00 0x1b 0x00 0x64
>....C_ST............
<....T_OK
>....R_FLTNC:\operation.log.
<....S_FLOperation Logbook Version 1.0.Sy..

To trigger the generation of the log file, the telegram C_CC with command 27 is used. The parameters contain the filename of the log file an the start-date and time for the log entries. This is to acknowledge with a T_OK. After some time another telegram is receive: M_CC with data 0x00 1b 00 64. This seems to be the signal that the log file was created successfully and is ready to be copied. Afterwards a regular file copy takes place.

File transfer

Transfer of files can happen in binary or ASCII mode. To enable binary mode, add 0x01 after the filename. In TNCremo you can find a list of file types for which binary mode is recommended. The functions pyLSV2.LSV2.recive_file() and pyLSV2.LSV2.send_file() can be configured with the parameter binary_mode.