Case study
lochinvar-native-modbus: mapping Knight boiler telemetry
lochinvar-native-modbus reconstructs the read-only Modbus register map exposed by Lochinvar Knight boilers through the SMART SYSTEM display's USB PC Connection port. Probe scripts and display comparisons identify telemetry for temperatures, firing rate, flame signal and counters; ESPHome and MQTT bridges publish readings to Home Assistant.
- Targets
- Protocol
- Category
- Independent reconstruction cases
- Relationship
- Independent reconstruction project
- Sources reviewed
- Evidence class
- C2 code & docs, no demo or download
- Stars
- 0
- Last commit
- 2026-11-04
- Language
- Go
GitHub data as of 2026-11-10
Evidence
- Observed
- Code, documentation and a demo observed; no download method found.
- Checked
- 2026-11-08
Requirements & limits
- Prerequisites: A boiler with the SMART SYSTEM display and USB PC Connection port, a USB cable, and an ESP32-S3 board or Linux Docker host.
- Prerequisites: Home Assistant is required; the MQTT route also needs a broker.
- Limits: Only read requests are implemented; lockout codes are not mapped, and some values remain guesses.
- License: No licence file in the repository.
Cite
BibTeX
@misc{lochinvar-native-modbus-case,
title = {{lochinvar-native-modbus: mapping Knight boiler telemetry}},
howpublished = {\url{https://github.com/KB1RMA/lochinvar-native-modbus}},
url = {https://github.com/KB1RMA/lochinvar-native-modbus},
urldate = {2026-11-06},
note = {Awesome REA entry: \url{https://awesomerea.org/resources/lochinvar-native-modbus-case/}}
}Plain text
lochinvar-native-modbus: mapping Knight boiler telemetry. https://github.com/KB1RMA/lochinvar-native-modbus (accessed 2026-11-06). Awesome REA entry: https://awesomerea.org/resources/lochinvar-native-modbus-case/
Useful? Star Awesome REA on GitHub2.4k
About this entry
The description was reviewed against primary sources.
Primary sources
- docs/reverse-engineering-log.md GitHub · KB1RMA/lochinvar-native-modbus · Revision 55c207a
- README.md GitHub · KB1RMA/lochinvar-native-modbus · Revision 55c207a
More in Protocols
- Cindy Band: a client for the Xiaomi Smart Band 8 BLE protocol · Case study
- hd60-macos: reconstructing Elgato HD60 USB control on macOS · Case study
- Lumalou Revival: reconstructing the lamp's encrypted BLE control · Case study
- openedu09: reconstructing WSEDU09 oscilloscope control · Case study
- Tonebook: decoding NanoCore preset SysEx commands · Case study
- Resonance: reconstructing Sony headphone control on Windows · Case study