Carbonat - 2011-09-22

I understand that there may not be an "official" or publicly available description/specification of the communications protocol used for communications with S7 controllers.

However, I wonder how libnodave was implemented in the first time. By looking at the code it seems that some details were taken by reverse engineering the protocol, but I do not think that the whole thing could be done without at least a draft protocol specification.

I am very interested in any hints or pointers towards the actual protocol specification or even a draft document. I would appreciate if anyone in this community could help me on this.

Thanks!