Can anyone point me in the right direction for tutorials etc on reverse engineering RS484 connected battery management system?I have a large 12V lithium battery module which has an internal BMS and its official diagnostic program running on an old XP laptop which uses an RS485-USB dongle to connect the two.I have RealTerm running on the XP laptop snooping on the RS485 connection and can see oodles of traffic going to and fro between the two.  The trafic consists of lots of bytes of data some of which is ASCii plain text which clearlu identifies itself as relating to the battery/diagnostic app (it has the manufacturers name etc in it).I would like some help in deciphering the traffic as it must represent the battery's internal voltages and temperatures etc that are displayed in the Diagnostic app on the laptop.Ultimately, I want to build a very basic PIC-based (as this is what I already know - I appreciate it may be time to move on to Arduino or similar) 'master' BMS to monitor several battery modules and control the charging and/or trigger alarms should something go out of whack in any of the battery modules.Regards, MW.
How to monitor/reverse engineer RS485-connected display device traffic?
decryption;python;dynamic analysis;encodings;protocol