Portisch / RF-Bridge-EFM8BB1

Alternative Firmware for the Sonoff RF Bridge EFM8BB1 chip
289 stars 122 forks source link

Some sniffing help appreciated. I'm now completely stuck. #230

Open ripvega opened 3 months ago

ripvega commented 3 months ago

Latest firmware used?

Be sure you tried the latest release or the newest binary of the firmware!

Not sure how to check the version but the file is RF-Bridge-EFM8BB1.

Information

What device you try to sniff data from? Description? Brand and type?

Foxdry remote. Model SY10-02A

This is a simple rf remote and I only need the codes from two of the buttons.

Sniffed data

Post your sniffed data by command 0xB1 or 0xA6.

I have the code from the up button, and this works: AAB04F060802DA01F40140008200D2139CD092B092B0B0B09292829292B0B0B082B0B082B0B0828282B082828282B08282B0B0B0B0B0B0B082B0B0B0B0C0C0C0C0B0C0C0C0C082C08282C0C08282C0C0828155

I have been relentlessly trying to get the 'down' button code without success. It seems that the code changes.

I have been sniffing using home assistant services and ESPhome: ESPHome: spa_rf_bridge_start_bucket_sniffing

This is how I got the 'up' button code.

The 'down' codes show up as per these examples:

[08:34:46][I][rf_bridge:209]: Raw Bucket Sniffing on [08:34:46][D][rf_bridge:037]: Action OK [08:34:53][I][rf_bridge:104]: Received RFBridge Bucket: AA B1 03 0276 00E6 1388 A081908190909081818181819090908190908190908181819081818181908181909090909090909081909090909090909090908190908190909081909081908181 55 [08:35:09][I][rf_bridge:209]: Raw Bucket Sniffing on [08:35:09][D][rf_bridge:037]: Action OK [08:35:15][I][rf_bridge:104]: Received RFBridge Bucket: AA B1 03 026C 00E6 1388 A081908190909081818181819090908190908190908181819081818181908181909090909090909081909090909090909090908190908190909081909081908181 55 [08:35:29][I][rf_bridge:209]: Raw Bucket Sniffing on [08:35:29][D][rf_bridge:037]: Action OK [08:35:34][I][rf_bridge:104]: Received RFBridge Bucket: AA B1 03 00B4 028A 0294 281818 55 [08:35:41][I][rf_bridge:209]: Raw Bucket Sniffing on [08:35:41][D][rf_bridge:037]: Action OK [08:35:49][I][rf_bridge:104]: Received RFBridge Bucket: AA B1 03 0230 0118 026C 281819 55

All of the above are from the same button press.

I've then run the codes through the BitBucket converter and used ESPHome: spa_rf_bridge_send_raw to test, without success.

I'd appreciate any help in understanding where to go from here.