search

Portisch / RF-Bridge-EFM8BB1

Alternative Firmware for the Sonoff RF Bridge EFM8BB1 chip
289 stars 122 forks source link

NEO-4T remote emulation for a pellet stove #181

Open gregoriohc opened 3 years ago

gregoriohc commented 3 years ago

Latest firmware used?

Yes

Information

The device is what I'm trying to sniff data is a NEO-4T remote (4 buttons): http://www.tiemmeelettronica.com/es/producto/neo-4t/ I'm using a Sonoff RF Brifge version R2 with latest Tasmota + Portsich firmware.

Sniffed data

Button ON presses:

{"RfRaw":{"Data":"AA B1 04 01AE 00F0 02EE 30B6 38080808080808080808081A1A 55"}}
{"RfRaw":{"Data":"AA B1 03 0190 0280 30CA 28080808080808080818180909 55"}}
{"RfRaw":{"Data":"AA B1 04 019A 010E 02C6 30D4 38080808080808080808081A1A 55"}}
{"RfRaw":{"Data":"AA B1 04 01AE 0118 02D0 30CA 38080808080808080808081A1A 55"}}
{"RfRaw":{"Data":"AA B1 04 01A4 0118 02D0 30D4 38080808080808080808081A1A 55"}}
{"RfRaw":{"Data":"AA B1 04 01A4 010E 02C6 30CA 38080808080808080808081A1A 55"}}

Button OFF presses:

{"RfRaw":{"Data":"AA B1 02 01B8 30A2 18080808080808080808080808 55"}}
{"RfRaw":{"Data":"AA B1 03 0186 0276 30CA 28080808080808080808080818 55"}}
{"RfRaw":{"Data":"AA B1 02 01B8 30B6 18080808080808080808080808 55"}}
{"RfRaw":{"Data":"AA B1 02 01AE 30C0 18080808080808080808080808 55"}}
{"RfRaw":{"Data":"AA B1 02 01B8 30C0 18080808080808080808080808 55"}}
{"RfRaw":{"Data":"AA B1 02 01AE 30C0 18080808080808080808080808 55"}}
{"RfRaw":{"Data":"AA B1 02 01A4 30B6 18080808080808080808080808 55"}}

Button + (plus) presses:

{"RfRaw":{"Data":"AA B1 04 01B8 00E6 02F8 30A2 38080808080808080808081A08 55"}}
{"RfRaw":{"Data":"AA B1 04 01A4 0118 02D0 30C0 38080808080808080808081A08 55"}}
{"RfRaw":{"Data":"AA B1 04 01A4 0118 02D0 30C0 38080808080808080808081A08 55"}}
{"RfRaw":{"Data":"AA B1 04 01AE 010E 02C6 30C0 38080808080808080808081A08 55"}}
{"RfRaw":{"Data":"AA B1 04 01AE 0118 02D0 30CA 38080808080808080808081A08 55"}}
{"RfRaw":{"Data":"AA B1 04 01A4 0122 02C6 30B6 38080808080808080808081A08 55"}}

Button - (minus) presses:

{"RfRaw":{"Data":"AA B1 04 01AE 00FA 02EE 30AC 3808080808080808080808081A 55"}}
{"RfRaw":{"Data":"AA B1 03 0190 02B2 30D4 28080808080808080808080809 55"}}
{"RfRaw":{"Data":"AA B1 04 01AE 0118 02D0 30CA 3808080808080808080808081A 55"}}
{"RfRaw":{"Data":"AA B1 04 01AE 010E 02C6 30CA 3808080808080808080808081A 55"}}
{"RfRaw":{"Data":"AA B1 04 01A4 0118 02C6 30C0 3808080808080808080808081A 55"}}
{"RfRaw":{"Data":"AA B1 04 01A4 0118 02C6 30CA 3808080808080808080808081A 55"}}
{"RfRaw":{"Data":"AA B1 04 01A4 010E 02D0 30C0 3808080808080808080808081A 55"}}
{"RfRaw":{"Data":"AA B1 04 01A4 0118 02C6 30CA 3808080808080808080808081A 55"}}
{"RfRaw":{"Data":"AA B1 04 01A4 0118 02C6 30B6 3808080808080808080808081A 55"}}
{"RfRaw":{"Data":"AA B1 04 01A4 010E 02D0 30B6 3808080808080808080808081A 55"}}

Procedure

1) I'm converting B1 to B0 using https://bbconv.hrbl.pl/ 2) Send rfraw command through Tasmota console (ex.: rfraw AA B0 13 02 08 01AE 30C0 18080808080808080808080808 55) 3) I'm receiving back {"RfRaw":{"Data":"AAA055"}} but nothing happens in my stove

I've tested several B0 codes for the different buttons with no luck. Am I doing something wrong?

Thanks a lot!

sthorley commented 3 years ago

I don't own this product but I did have a frustrating experience like you describe so I'll try to help.

The first section defines the RF properties and you'll find it should almost always be constant. What you're looking for is the most frequently occurring values. So try doing it 20-50 times and see what appears in each section most. I'd suggest something like what I've posted below. As to sending the rfraw commands, you are doing that correctly (AAA055) is the equivalent of command sent. You just don't have the right codes yet (I tried 30+ times before I got it working).

Try converting this to B0: AA B1 04 01A4 0118 02D0 30C0 38080808080808080808081A1A 55

if that doesn't work try replacing the following: 0118 with 010E 02D0 with 02C6 01A4 with 01AE 30C0 with 30CA and all the combinations of these changes

Once you get the correct first section the command part is simple.