Omrom PLC devices use the protocol FINS that communicates over UDP or TCP to control machines on the network. The Nmap Scripting Engine can enumerate these devices and obtain additional information.
This recipe shows you how to enumerate Omrom PLC devices with Nmap.
Open your terminal and enter the following Nmap command:
$ nmap -Pn -sU -p9600 --script omrom-info <target>
The omrom-info
script will obtain device information, as shown next:
9600/udp open OMRON FINS | omron-info: | Controller Model: CJ2M-CPU32 02.01 | Controller Version: 02.01 | For System Use: | Program Area Size: 20 | IOM size: 23 | No. DM Words: 32768 | Timer/Counter: 8 | Expansion DM Size: 1 | No. of steps/transitions: 0 | Kind of Memory Card: 0 |_ Memory Card Size: 0