ICSTrace: A Malicious IP Traceback Model for Attacking Data of the Industrial Control System

Table 1

S7 protocol function code and the corresponding function.

Code	Function
0x00	System functions
0x04	Read
0x05	Write
0x1a	Request download
0x1b	Download block
0x1c	Download end
0x1d	Download start
0x1e	Upload
0x1f	Upload end
0x28	PLC control
0x29	PLC stop
0xf0	Communication setup