Open CloCkWeRX opened 1 year ago
(Happy to provide tcpdumps or similar, I dont quite know enough about BLE to read the various attributes and see if they match up to known values like weight-in-kg)
Bit of googling, apparently this company makes the XMTZC05HM Mi Body Composition Scale 2; so I wonder if this is publishing attributes basically using the same components they have?
https://device.report/anhui-huami-information-technology/xmtzc05hm
The messages in the first log block all look the same, can you make another log while changing the weight, step off, step on.
It doesn't seem to yeild much difference.
Stepping on and off, and also pairing + stepping on / off.
➜ ~ bluetoothctl
Agent registered
AdvertisementMonitor path registered
[
[CHG] Device 01:B6:EC:CC:5D:AA ManufacturerData Key: 0x02ac
[CHG] Device 01:B6:EC:CC:5D:AA ManufacturerData Value:
aa 5d cc ec b6 01 01 .].....
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -92
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -81
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -95
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -85
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -69
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -95
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -80
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -93
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -80
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -89
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -80
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -94
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -81
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -91
[CHG] Device 01:B6:EC:CC:5D:AA RSSI: -82
[CHG] Device 01:B6:EC:CC:5D:AA ManufacturerData Key: 0x02ac
[CHG] Device 01:B6:EC:CC:5D:AA ManufacturerData Value:
aa 5d cc ec b6 01 00 .].....
[bluetooth]# pair 01:B6:EC:CC:5D:AA
Attempting to pair with 01:B6:EC:CC:5D:AA
[CHG] Device 01:B6:EC:CC:5D:AA Connected: yes
[CHG] Device 01:B6:EC:CC:5D:AA UUIDs: 00001800-0000-1000-8000-00805f9b34fb
[CHG] Device 01:B6:EC:CC:5D:AA UUIDs: 00001801-0000-1000-8000-00805f9b34fb
[CHG] Device 01:B6:EC:CC:5D:AA UUIDs: 0000fee0-0000-1000-8000-00805f9b34fb
[CHG] Device 01:B6:EC:CC:5D:AA UUIDs: 0000ffb0-0000-1000-8000-00805f9b34fb
[CHG] Device 01:B6:EC:CC:5D:AA UUIDs: f000ffc0-0451-4000-b000-000000000000
[CHG] Device 01:B6:EC:CC:5D:AA ServicesResolved: yes
[NEW] Primary Service (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service000a
00001801-0000-1000-8000-00805f9b34fb
Generic Attribute Profile
[NEW] Primary Service (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service000b
0000ffb0-0000-1000-8000-00805f9b34fb
Unknown
[NEW] Characteristic (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service000b/char000c
0000ffb1-0000-1000-8000-00805f9b34fb
Unknown
[NEW] Characteristic (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service000b/char000e
0000ffb2-0000-1000-8000-00805f9b34fb
Unknown
[NEW] Descriptor (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service000b/char000e/desc0010
00002902-0000-1000-8000-00805f9b34fb
Client Characteristic Configuration
[NEW] Primary Service (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service0011
0000fee0-0000-1000-8000-00805f9b34fb
Anhui Huami Information Technology Co., Ltd.
[NEW] Characteristic (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service0011/char0012
0000fee2-0000-1000-8000-00805f9b34fb
Anki, Inc.
[NEW] Characteristic (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service0011/char0014
0000fee1-0000-1000-8000-00805f9b34fb
Anhui Huami Information Technology Co., Ltd.
[NEW] Descriptor (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service0011/char0014/desc0016
00002902-0000-1000-8000-00805f9b34fb
Client Characteristic Configuration
[NEW] Characteristic (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service0011/char0017
0000fee3-0000-1000-8000-00805f9b34fb
Anki, Inc.
[NEW] Descriptor (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service0011/char0017/desc0019
00002902-0000-1000-8000-00805f9b34fb
Client Characteristic Configuration
[NEW] Primary Service (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service001a
f000ffc0-0451-4000-b000-000000000000
Vendor specific
[NEW] Characteristic (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service001a/char001b
f000ffc1-0451-4000-b000-000000000000
Vendor specific
[NEW] Descriptor (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service001a/char001b/desc001d
00002902-0000-1000-8000-00805f9b34fb
Client Characteristic Configuration
[NEW] Descriptor (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service001a/char001b/desc001e
00002901-0000-1000-8000-00805f9b34fb
Characteristic User Description
[NEW] Characteristic (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service001a/char001f
f000ffc2-0451-4000-b000-000000000000
Vendor specific
[NEW] Descriptor (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service001a/char001f/desc0021
00002902-0000-1000-8000-00805f9b34fb
Client Characteristic Configuration
[NEW] Descriptor (Handle 0x0000)
/org/bluez/hci0/dev_01_B6_EC_CC_5D_AA/service001a/char001f/desc0022
00002901-0000-1000-8000-00805f9b34fb
Characteristic User Description
[Smart Scale]#
[CHG] Device 01:B6:EC:CC:5D:AA ServicesResolved: no
[CHG] Device 01:B6:EC:CC:5D:AA Connected: no
Failed to pair: org.bluez.Error.AuthenticationCanceled
[CHG] Device 01:B6:EC:CC:5D:AA ManufacturerData Key: 0x02ac
[CHG] Device 01:B6:EC:CC:5D:AA ManufacturerData Value:
aa 5d cc ec b6 01 01 .].....
I suspect the phone app does a simple pairing which I don't quite know how to emulate before it broadcasts data on the various channels.
Edit Argh, bluetoothctl and submenus are a usability nightmare :/
I’m only interested in the passive data, like the logs from home assistant in your first post. BLE monitor is not capable of connecting to devices. Can you check the HA logs during stepping on/off?
Sensor Description
ALDI Visage Smart Bathroom Scale
Additional information
https://www.aldi.com.au/en/special-buys/special-buys-sat-28-january/saturday-detail-wk04/ps/p/smart-bathroom-scales-1/
BLE advertisements
Sensor claims to support not just weight, but a number of other factors - body weight, body fat %, body muscle %, body water %, Kcal, BMI, bone mass Unclear how much of that is calculated by the partner app; which asks for your height, age, etc; and how much comes from the sensor.
When I pair via bluetoothctl; I see (may have mangled the output with copy/pasting)
and