So, here is summarized how the Boiler System Bus (BSB) / Local Process Bus (LPB) works.
Data is sent as telegrams, min. length is 11 Bytes.
First byte is always 0xDC.
2nd byte Sender (f.e. user control unit 0x8A)
3rd byte Receiver (f.e. "all devices" 0x7F, controller 0x80)
4rd byte length of telegram including CRC
5th byte command (query 0x76, reply 0x07 / change 0x03, confirm 0x04 / status 0x02)
6-9 "Parameter" / Adress
10-(length-2CRC) Data
Last two Bytes are 16-Bit CRC.
If there are any questions, please ask :)
Sascha