merbanan / rtl_433

Program to decode radio transmissions from devices on the ISM bands (and other frequencies)
GNU General Public License v2.0
6.19k stars 1.33k forks source link

Help with decoding RainPoint Temp and Humidity Sensor #1781

Closed kami83 closed 3 years ago

kami83 commented 3 years ago

Hi,

i am trying to decode the 433,9 Mhz Signal from a Temp and Humidity Sensor. RTL-433 doesn't recognize it. But i just try to analyse the messages with Universal Radio Hacker. I found some informations. When powering up the device it send this messages:

I am using a RTL-SDR and it is set to 1100 Samples/Symbol.

Channel1 selected: 55555554cccd2aacd5554aab552cb2aacaaaad2aacaaaaaab4d3332a [Pause: 81651 samples] d555555533334aab355552aad54b2caab2aaab4aab2aaaaaad34ccca8 [Pause: 75163 samples] d555555533334aab355552aad54b2caab2aaab4aab2aaaaaad34ccca8 [Pause: 109382 samples] 55555554cccd2aacd5554aab552cb2aacaaaad2aacaaaaaab4d3332a [Pause: 54216 samples] d555555533334aab355552aad54b2caab2aaab4aab2aaaaaad34ccca8 [Pause: 86489 samples] d555555533334aab355552aad54b2caab2aaab4aab2aaaaaad34ccca8 [Pause: 38664 samples]

Channel2 selected: 55555554cccd2aacd5554aab2b4cb2aacaaaad2aacaaaaaaaad3332a [Pause: 1173636 samples] d555555533334aab355552aacad32caab2aaab4aab2aaaaaaab4ccca8 [Pause: 1174290 samples] d555555533334aab355552aacad32caab2aaab4aab2aaaaaaab4ccca8 [Pause: 1177993 samples] 55555554cccd2aacd5554aab2b4cb2aacaaaad2aacaaaaaaaad3332a [Pause: 1175884 samples] d555555533334aab355552aacad32caab2aaab4aab2aaaaaaab4ccca8 [Pause: 1175899 samples] d555555533334aab355552aacad32caab2aaab4aab2aaaaaaab4ccca8 [Pause: 4091352 samples]

Channel3 selected: 55555554cccd2aacd5554aab534cb2aacaab532aacaaaaab32d3332a [Pause: 1174011 samples] d555555533334aab355552aad4d32caab2aad4caab2aaaaaccb4ccca8 [Pause: 1173961 samples] d555555533334aab355552aad4d32caab2aad4caab2aaaaaccb4ccca8 [Pause: 1177704 samples] 55555554cccd2aacd5554aab534cb2aacaab532aacaaaaab32d3332a [Pause: 1172168 samples] d555555533334aab355552aad4d32caab2aad4caab2aaaaaccb4ccca8 [Pause: 1174161 samples] d555555533334aab355552aad4d32caab2aad4caab2aaaaaccb4ccca8 [Pause: 3219330 samples]

Can someone help me to get it decode??

Thanks a lot.

cu kami

zuckschwerdt commented 3 years ago

Put the codes in a BitBench, choose v as format string and you can see that messages start with the same pattern but slightly shifted. Pick e.g. aaa9 as preamble align and 8h as format and you see all messages are nearly the same. Also it's always one or two "bits" the same, that is Manchester code. Toggle the MC on and you get the decoded data.

ab02ff81f240803020006d28
ab02ff811a40803020000d28
ab02ff81da4081d020014d28

You now need to capture data for a range of different known temp/hum values and find the fields in the data.

kami83 commented 3 years ago

Hi,

thanks a lot for the quick answer. There is another problem. I have got no reciever. So i just now that the Sensor is in a room with nearly 23,5 °C and there is no water. The description of the Sensor tells me that it is measuring humidity from 0-100% and Temps from -10°C - 50°C? Can you help me with this?

Thanks a lot.

cu kami

zuckschwerdt commented 3 years ago

Then put it in a freezer and record while you let it slowly warm up again. seeing a slow ramp up will point to the temperature field. Also we can see how negative values are handled (offset / sign bit / signed).

kami83 commented 3 years ago

Hi,

okay i put it in the freezer (-18°C) for a hour. After this i did a measure every 5 minutes. Here is the result.

55555554cccd2aacd5554aab552cb2aacaaaacab2caaaaaab4d3332a d555555533334aab355552aad54b2caab2aaab2acb2aaaaaad34ccca8

55555554cccd2aacd5554aab552cb2aacaaacb2aacaaaaaad2d3332a d555555533334aab355552aad54b2caab2aab2caab2aaaaab4b4ccca8

55555554cccd2aacd5554aab552cb2aaaaaab32aacaaaaaad2d3332a d555555533334aab355552aad54b2caaaaaaaccaab2aaaaab4b4ccca8

55555554cccd2aacd5554aab552cb2aaaaab532aacaaaaab2cd3332a d555555533334aab355552aad54b2caaaaaad4caab2aaaaacb34ccca8

55555554cccd2aacd5554aab552cb2aaaaab532aacaaaaab2cd3332a d555555533334aab355552aad54b2caaaaaad4caab2aaaaacb34ccca8

55555554cccd2aacd5554aab552cb2aaaaab532aacaaaaab2cd3332a d555555533334aab355552aad54b2caaaaaad4caab2aaaaacb34ccca8

55555554cccd2aacd5554aab552cb2aaaaaaad2aacaaaaaaccd3332a d555555533334aab355552aad54b2caaaaaaab4aab2aaaaab334ccca8

Thx a lot.

kami

zuckschwerdt commented 3 years ago

Something is visible in the BitBench, but it's not clear. You will need much more values. Perhaps place the sensors outside and record a whole day/night cycle. Do you record this automated? If not, run with -A and see if there is a -X suggestion. If the magic doesn't work capture a sample with -S unknown and upload here as zip.

kami83 commented 3 years ago

Hi, thanks a lot for the answer. You help me very good and i think i am on the right way. For now i used Universal Radio Hacker and capture every 5 mins by hand the signals. I can put the sensor in the garden and i can use rtl_433 to capture signals. But i have got a lot of RF433 Signals in my area. Can you tell me how to just use rtl_433 to capture the "right" signals?

Thanks a lot. Have a nice weekend.

BG kami

zuckschwerdt commented 3 years ago

Sure, find the right timing parameters (-A) for a rtl_433 flex decoder (the "-X ..."). Then use -R 0 -X ... to just run the flex decoder. This will print only the data from your sensor.

kami83 commented 3 years ago

Hi,

i think this is the right signal. I know that it should be ASK. Can you verify this? Did i catch the right signal? How would you log data now?

Thanks a lot.

BG kami

Detected OOK package 2021-08-29 10:51:44 Analyzing pulses... Total count: 286, width: 1358.16 ms (339540 S) Pulse width distribution: [ 0] count: 228, width: 512 us [496;560] ( 128 S) [ 1] count: 53, width: 1000 us [924;1052] ( 250 S) [ 2] count: 3, width: 676 us [672;684] ( 169 S) [ 3] count: 2, width: 513172 us [513160;513188] (128293 S) Gap width distribution: [ 0] count: 227, width: 464 us [436;512] ( 116 S) [ 1] count: 54, width: 956 us [924;1000] ( 239 S) [ 2] count: 4, width: 640 us [612;664] ( 160 S) Pulse period distribution: [ 0] count: 207, width: 976 us [964;1036] ( 244 S) [ 1] count: 43, width: 1456 us [1340;1484] ( 364 S) [ 2] count: 33, width: 1960 us [1948;2012] ( 490 S) [ 3] count: 2, width: 513788 us [513780;513800] (128447 S) Pulse timing distribution: [ 0] count: 457, width: 488 us [436;620] ( 122 S) [ 1] count: 107, width: 976 us [924;1052] ( 244 S) [ 2] count: 5, width: 672 us [664;684] ( 168 S) [ 3] count: 2, width: 513172 us [513160;513188] (128293 S) [ 4] count: 1, width: 100004 us [100004;100004] (25001 S) Level estimates [high, low]: 16068, 4095 RSSI: -0.1 dB SNR: 5.9 dB Noise: -6.0 dB Frequency offsets [F1, F2]: -6247, 0 (-23.8 kHz, +0.0 kHz) Guessing modulation: No clue... view at https://triq.org/pdv/#AAB01B050101E803D002A0D49486A480808080808080808080808080808155+AAB00D050301E803D002A0D49486A49155+AAB00E050101E803D002A0D49486A4908155+AAB012050101E803D002A0D49486A480808080809155+AAB015050101E803D002A0D49486A490808080808080808155+AAB016050101E803D002A0D49486A48080808080908080808155+AAB00E050201E803D002A0D49486A4809155+AAB012050101E803D002A0D49486A480808080809155+AAB016050101E803D002A0D49486A48080808080808080908155+AAB012050101E803D002A0D49486A480808080809155+AAB01B050101E803D002A0D49486A480808080808080808080808080908155+AAB00E050101E803D002A0D49486A4908155+AAB00D050301E803D002A0D49486A49155+AAB020050101E803D002A0D49486A48080A2B09080808080808080808080808080808155+AAB00D050301E803D002A0D49486A49155+AAB00E050101E803D002A0D49486A4908155+AAB012050101E803D002A0D49486A480808080809155+AAB015050101E803D002A0D49486A490808080808080808155+AAB016050101E803D002A0D49486A48080808080908080808155+AAB00E050201E803D002A0D49486A4809155+AAB012050101E803D002A0D49486A480808080809155+AAB016050101E803D002A0D49486A48080808080808080908155+AAB012050101E803D002A0D49486A480808080809155+AAB01B050101E803D002A0D49486A480808080808080808080808080908155+AAB00E050101E803D002A0D49486A4908155+AAB00D050301E803D002A0D49486A49155+AAB020050101E803D002A0D49486A48080A2B09080808080808080808080808080808155+AAB00D050301E803D002A0D49486A49155+AAB00E050101E803D002A0D49486A4908155+AAB012050101E803D002A0D49486A480808080809155+AAB015050101E803D002A0D49486A490808080808080808155+AAB016050101E803D002A0D49486A48080808080908080808155 Too many pulse groups (49 pulses missed in rfraw)

Detected OOK package 2021-08-29 10:51:46 Analyzing pulses... Total count: 286, width: 1358.26 ms (339565 S) Pulse width distribution: [ 0] count: 228, width: 512 us [496;556] ( 128 S) [ 1] count: 53, width: 1000 us [916;1052] ( 250 S) [ 2] count: 3, width: 676 us [672;688] ( 169 S) [ 3] count: 2, width: 513220 us [513172;513268] (128305 S) Gap width distribution: [ 0] count: 228, width: 464 us [436;576] ( 116 S) [ 1] count: 54, width: 956 us [940;1008] ( 239 S) [ 2] count: 3, width: 652 us [616;680] ( 163 S) Pulse period distribution: [ 0] count: 207, width: 976 us [968;1028] ( 244 S) [ 1] count: 43, width: 1460 us [1348;1524] ( 365 S) [ 2] count: 33, width: 1956 us [1948;2004] ( 489 S) [ 3] count: 2, width: 513816 us [513788;513844] (128454 S) Pulse timing distribution: [ 0] count: 456, width: 488 us [436;576] ( 122 S) [ 1] count: 107, width: 976 us [916;1052] ( 244 S) [ 2] count: 6, width: 664 us [616;688] ( 166 S) [ 3] count: 2, width: 513220 us [513172;513268] (128305 S) [ 4] count: 1, width: 100004 us [100004;100004] (25001 S) Level estimates [high, low]: 16064, 4036 RSSI: -0.1 dB SNR: 6.0 dB Noise: -6.1 dB Frequency offsets [F1, F2]: -5616, 0 (-21.4 kHz, +0.0 kHz) Guessing modulation: No clue... view at https://triq.org/pdv/#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 Too many pulse groups (49 pulses missed in rfraw)

Detected OOK package 2021-08-29 10:53:09 Analyzing pulses... Total count: 279, width: 1358.02 ms (339505 S) Pulse width distribution: [ 0] count: 60, width: 1016 us [924;1064] ( 254 S) [ 1] count: 214, width: 528 us [512;600] ( 132 S) [ 2] count: 3, width: 692 us [688;696] ( 173 S) [ 3] count: 2, width: 513364 us [513348;513384] (128341 S) Gap width distribution: [ 0] count: 214, width: 448 us [384;496] ( 112 S) [ 1] count: 60, width: 940 us [904;1000] ( 235 S) [ 2] count: 4, width: 616 us [564;660] ( 154 S) Pulse period distribution: [ 0] count: 44, width: 1456 us [1340;1520] ( 364 S) [ 1] count: 193, width: 976 us [968;1032] ( 244 S) [ 2] count: 39, width: 1956 us [1952;2008] ( 489 S) [ 3] count: 2, width: 513948 us [513948;513952] (128487 S) Pulse timing distribution: [ 0] count: 120, width: 976 us [904;1064] ( 244 S) [ 1] count: 430, width: 488 us [384;604] ( 122 S) [ 2] count: 5, width: 676 us [644;696] ( 169 S) [ 3] count: 2, width: 513364 us [513348;513384] (128341 S) [ 4] count: 1, width: 100004 us [100004;100004] (25001 S) Level estimates [high, low]: 15594, 159 RSSI: -0.2 dB SNR: 19.9 dB Noise: -20.1 dB Frequency offsets [F1, F2]: -6300, 0 (-24.0 kHz, +0.0 kHz) Guessing modulation: No clue... view at https://triq.org/pdv/#AAB01A050103D001E802A4D55486A4819191919191919191919191919055+AAB00D050303D001E802A4D55486A48055+AAB00E050103D001E802A4D55486A4819055+AAB012050103D001E802A4D55486A491919191918055+AAB015050103D001E802A4D55486A481919191919191919055+AAB016050103D001E802A4D55486A49191919191819191919055+AAB00E050203D001E802A4D55486A4918055+AAB012050103D001E802A4D55486A491919191918055+AAB014050103D001E802A4D55486A4919191919181919055+AAB00D050103D001E802A4D55486A48055+AAB012050103D001E802A4D55486A491919191918055+AAB019050103D001E802A4D55486A49191919191919191919191819055+AAB00D050103D001E802A4D55486A48055+AAB00E050103D001E802A4D55486A4819055+AAB00D050303D001E802A4D55486A48055+AAB020050103D001E802A4D55486A49191A2B18191919191919191919191919191919055+AAB00D050303D001E802A4D55486A48055+AAB00E050103D001E802A4D55486A4819055+AAB012050103D001E802A4D55486A491919191918055+AAB015050103D001E802A4D55486A481919191919191919055+AAB016050103D001E802A4D55486A49191919191819191919055+AAB00E050203D001E802A4D55486A4918055+AAB012050103D001E802A4D55486A491919191918055+AAB014050103D001E802A4D55486A4919191919181919055+AAB00D050103D001E802A4D55486A48055+AAB012050103D001E802A4D55486A491919191918055+AAB019050103D001E802A4D55486A49191919191919191919191819055+AAB00D050103D001E802A4D55486A48055+AAB00E050103D001E802A4D55486A4819055+AAB00D050303D001E802A4D55486A48055+AAB020050103D001E802A4D55486A49191A2B18191919191919191919191919191919055+AAB00D050103D001E802A4D55486A48055 Too many pulse groups (76 pulses missed in rfraw)

zuckschwerdt commented 3 years ago

That looks good. Those 500000 µs = 500 ms = 0.5 s beeps are throwing everything off. Never seen such a waste of power, it must drain the battery pretty quick. Also it might be forbidden to operate. Anyway this should work: rtl_433 -R 0 -X 'n=RainPoint,m=OOK_MC_ZEROBIT,s=500,l=500,r=1500' if not try this an decode the MC manually later: rtl_433 -R 0 -X 'n=RainPoint,m=OOK_PCM,s=500,l=500,r=1500'

kami83 commented 3 years ago

Okay thanks. I started it now. In 24 hours i will send you the log. Where can i upload it?

Here are the first results wirht OOK_MC_Zerobit. Is this okay?

BG kami

time : 2021-08-29 12:35:10 model : RainPoint count : 1 num_rows : 1 rows :

len : 3 data : 0 codes : {3}0


time : 2021-08-29 12:35:11 model : RainPoint count : 1 num_rows : 1 rows :

len : 1 data : 0 codes : {1}0


time : 2021-08-29 12:35:40 model : RainPoint count : 1 num_rows : 1 rows :

len : 126 data : 570449a2305bf416fd1f800003c3e090 codes : {126}570449a2305bf416fd1f800003c3e090


time : 2021-08-29 12:35:40 model : RainPoint count : 1 num_rows : 1 rows :

len : 126 data : 570449a2105bf416fd1f800003c3f3e8 codes : {126}570449a2105bf416fd1f800003c3f3e8


time : 2021-08-29 12:35:40 model : RainPoint count : 1 num_rows : 1 rows :

len : 126 data : 570449a2205bf416fd1f800003c3e9b8 codes : {126}570449a2205bf416fd1f800003c3e9b8


time : 2021-08-29 12:35:50 model : RainPoint count : 1 num_rows : 1 rows :

len : 1 data : 0 codes : {1}0


time : 2021-08-29 12:35:55 model : RainPoint count : 1 num_rows : 1 rows :

len : 91 data : 5716cba53239f588aa00868 codes : {91}5716cba53239f588aa00868


zuckschwerdt commented 3 years ago

The resulting codes (5716cba53239f588aa00868) look different than expected (ab02ff81f240802120006d28). Perhaps best if you take a cu8 sample (-S unknown) and upload here as zip so we can improve the flex decoder. After that upload a txt with a list of just the codes here, like this:

570449a2305bf416fd1f800003c3e090
570449a2105bf416fd1f800003c3f3e8
570449a2205bf416fd1f800003c3e9b8
kami83 commented 3 years ago

Okay. So is this command right?

rtl_433 -R 0 -X 'n=RainPoint,m=OOK_MC_ZEROBIT,s=500,l=500,r=1500' -S unknown

And another question: Is it right that the len is so short? I thought i need 500 ??

Cu kami

zuckschwerdt commented 3 years ago

Yes. Or just rtl_433 -S unknown then look for the saved .cu8 files.

"Pulse width distribution" above tells us that the bit length is around 500 µs. So for PCM or MC we give s and l as 500.

edit: if you mean the len : 91 output above, that's the bits read. It should be around 300 for PCM or 150 for MC.

kami83 commented 3 years ago

HI, good morning. I got now nearly 1200 files from 18:14 yesterday evening till tomorrow morning.

What to do now?

BG kami

zuckschwerdt commented 3 years ago

Oh, wait, did you run -S unknown over night? That was not my intention, I hope this didn't fill your disk space. It's the best case though, as we can now fine tune a decoder and re-run on all 1200 transmissions ;) It should be around 600MB? Keep the files for now and pick one good file: drop a few files on https://triq.org/pdv/ and use the one that looks neat. Zip it and upload here. I'll help you with a decoder, then you run that on all files.

kami83 commented 3 years ago

Hi,

first of all here is a zip file with only recording definitly from the Sensor and only different channels.

I will add some files from the overnight recording later.

Cu kami allthesame.zip

kami83 commented 3 years ago

Hi, so here is the second package of files. I hope this are files from the right sensor.

Just for explanation. First of all i did a recording from 29.08 - 30.08. overnight. Sensor was in the garden and the RTL-SDR was in the carport. The Sensor was on channel 1. I selected only the recordings with the size of 896 kb (overnight.zip), because i did a second recording only for a minute or so with the sensor in the house an only changing the channel from 1-3.

I hope this can help you to decode it.

Thanks a lot.

BG kami

overnight.zip

kami83 commented 3 years ago

Hi,

do you got all informations? Or can i do anything else?

BG kami

zuckschwerdt commented 3 years ago

OOK_MC_ZEROBIT won't work well because of the long pulse between packets.

Please run this rtl_433 -R 0 -X 'n=RainPoint,m=OOK_PCM,s=500,l=500,r=1500' *.cu8 > all-codes.txt on all your overnight files and then post a file of the output here. We then should have all the codes needed.

kami83 commented 3 years ago

Okay, did this. Here is the file.

all-codes.txt

zuckschwerdt commented 3 years ago

I would have expected a series of good codes like this (from allthesame.zip)

{2780}55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8
{2772}55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332afffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8
{2780}55555554cccd2aacd5554aab552cb2aacaaaad2aacaaaaaab4d3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555aa96595565555695565555555a6999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad54b2caab2aaab4aab2aaaaaad34ccca8
{2780}55555554cccd2aacd5554aab552cb2aacaaaad2aacaaaaaab4d3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555aa96595565555695565555555a6999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad54b2caab2aaab4aab2aaaaaad34ccca8
{2780}55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8
{2780}55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8
{2772}55555554cccd2aacd5554aab2b4cb2aacaaaad2aacaaaaaaaad3332afffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa55595a659556555569556555555556999957ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aacad32caab2aaab4aab2aaaaaaab4ccca8
{2780}55555554cccd2aacd5554aab2b4cb2aacaaaad2aacaaaaaaaad3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa55595a659556555569556555555556999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aacad32caab2aaab4aab2aaaaaaab4ccca8
{2771}55555554cccd2aacd5554aab2b4cb2aacaab532aacaaaaab5533332afffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa55595a659556555a99556555555aa9999957ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa55595a659556555a99556555555aa9999950
{2780}55555554cccd2aacd5554aab2b4cb2aacaab532aacaaaaab5533332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa55595a659556555a99556555555aa9999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aacad32caab2aad4caab2aaaaad54cccca8
{2780}55555554cccd2aacd5554aab534cb2aacaab532aacaaaaab32d3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555a9a659556555a99556555555996999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad4d32caab2aad4caab2aaaaaccb4ccca8
{2780}55555554cccd2aacd5554aab534cb2aacaab532aacaaaaab32d3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555a9a659556555a99556555555996999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad4d32caab2aad4caab2aaaaaccb4ccca8
{2772}55555554cccd2aacd5554aab534cb2aacaab532aacaaaaab32d3332afffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555a9a659556555a99556555555996999957ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad4d32caab2aad4caab2aaaaaccb4ccca8
{2780}55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8
{2779}55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555aa9659556555a99556555555a66999950

Broken apart that's

55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332a
daaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957
ed555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8
55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332a
aaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957f
555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8
55555554cccd2aacd5554aab552cb2aacaaaad2aacaaaaaab4d3332a
daaaaaaaa666695566aaaa555aa96595565555695565555555a6999957
ed555555533334aab355552aad54b2caab2aaab4aab2aaaaaad34ccca8
55555554cccd2aacd5554aab552cb2aacaaaad2aacaaaaaab4d3332a
daaaaaaaa666695566aaaa555aa96595565555695565555555a6999957
ed555555533334aab355552aad54b2caab2aaab4aab2aaaaaad34ccca8
55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332a
daaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957
ed555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8
55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332a
daaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957
ed555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8
55555554cccd2aacd5554aab2b4cb2aacaaaad2aacaaaaaaaad3332a
aaaaaaaa666695566aaaa55595a659556555569556555555556999957f
555555533334aab355552aacad32caab2aaab4aab2aaaaaaab4ccca8
55555554cccd2aacd5554aab2b4cb2aacaaaad2aacaaaaaaaad3332a
daaaaaaaa666695566aaaa55595a659556555569556555555556999957
ed555555533334aab355552aacad32caab2aaab4aab2aaaaaaab4ccca8
55555554cccd2aacd5554aab2b4cb2aacaab532aacaaaaab5533332a
aaaaaaaa666695566aaaa55595a659556555a99556555555aa9999957f
aaaaaaa666695566aaaa55595a659556555a99556555555aa9999950
55555554cccd2aacd5554aab2b4cb2aacaab532aacaaaaab5533332a
daaaaaaaa666695566aaaa55595a659556555a99556555555aa9999957
ed555555533334aab355552aacad32caab2aad4caab2aaaaad54cccca8
55555554cccd2aacd5554aab534cb2aacaab532aacaaaaab32d3332a
daaaaaaaa666695566aaaa555a9a659556555a99556555555996999957
ed555555533334aab355552aad4d32caab2aad4caab2aaaaaccb4ccca8
55555554cccd2aacd5554aab534cb2aacaab532aacaaaaab32d3332a
daaaaaaaa666695566aaaa555a9a659556555a99556555555996999957
ed555555533334aab355552aad4d32caab2aad4caab2aaaaaccb4ccca8
55555554cccd2aacd5554aab534cb2aacaab532aacaaaaab32d3332a
aaaaaaaa666695566aaaa555a9a659556555a99556555555996999957f
555555533334aab355552aad4d32caab2aad4caab2aaaaaccb4ccca8
55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332a
daaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957
ed555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8
55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332a
daaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957
daaaaaaaa666695566aaaa555aa9659556555a99556555555a66999950

BitBench here.

Duplicates removed that's just this

ab02ff81f24081d02001ad28
ab02ff81f24081d02001ad50
ab02ff81f240803020006d28
ab02ff81f240803020006d50
ab02ff811a40803020000d28
ab02ff811a40803020000d50
ab02ff811a4081d02001f528
ab02ff811a4081d02001f550
ab02ff81da4081d020014d28
ab02ff81da4081d020014d50

That's all we really got so far. There a nearly no codes in the overnight recording?

kami83 commented 3 years ago

Hmm okay, so i do a new recording. Maybe i can put the sensor near to the rtl-sdr but then it is on a table not in the earth?

Can i start the recording overnight with better parameters?

zuckschwerdt commented 3 years ago

The parameter (OOK PCM) should be good. Don't use -S. Watch the running output, you should be getting these lines every few minutes (note the three data sections and fff... between):

codes : {2780}55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8
kami83 commented 3 years ago

Hi, okay i started a new recording with rtl_433 -R 0 -X 'n=RainPoint,m=OOK_PCM,s=500,l=500,r=1500' > testcodes

I hope this will work.

Have a nice weekend.

BG kami

kami83 commented 3 years ago

Hi, so here is the next recording nearly 24 hours. I did not filtered it, because i dont want to remove importan data.

BG kami nextrecording.txt

kami83 commented 3 years ago

Hi,

does this looks better?

BG kami

kami83 commented 3 years ago

Hi,

did you got time to look at the file?

Thanks a lot.

BG kami

zuckschwerdt commented 3 years ago

It's hard to make anything of those codes. It seems you recorded at least 2 different devices, possibly more. If we filter for just the expected codes of ab... and then filter repeats out we get this sequence: BitBench

What temperature range is that? I don't see a ramp up or down. It's mostly just two codes alternating.

To get anywhere you really need to isolate that device and the record a slow run through a wide temperature range. Isolating is easy, remove the antenna from the receiver and put the sensor close (10-50 cm). Now you will receive only that sender. Also add ,bits>=100 to remove those invalid short codes. Getting a temperature range depends on what you can set up. Maybe put a ice-pack on top and let that sit for a day? Or maybe heat it up and put it in a plastic thermos-bag?

kami83 commented 3 years ago

Hi, okay i will do so. But if you want to know which messages are definitly only from this device you have to look in the allthesame.zip file.

Will this help you?

BG kami

zuckschwerdt commented 3 years ago

I can't know which codes are from the sensor, a guess is that they are MC coded and start with ab02..., at least the "allthesame" ones match that.

kami83 commented 3 years ago

Okay, i understand. I will try it with the short distance and the ice package.

merbanan commented 3 years ago

To really get somewhere with this we need an official receiver we can correlate messages with real readings. And we need to make sure the recorded signals are the signals from the transmitter. Without this it is really hard to figure out anything. We need every little bit of information you can dig out.

zuckschwerdt commented 3 years ago

@merbanan did you see the spectrogram? There is a solid half second carrier between repeats. Battery drain and jamming the band. This is not a good device ;) rainpoint

zuckschwerdt commented 3 years ago

Also the slight shift in frequency and the nasty harmonics suggest it's not planned this way but something running wild…

merbanan commented 3 years ago

Yeah I saw the bit decode:

55555554cccd2aacd5554aab552cb2aacaab532aacaaaaab4cd3332affffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdaaaaaaaa666695566aaaa555aa9659556555a99556555555a66999957fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed555555533334aab355552aad54b2caab2aad4caab2aaaaad334ccca8

Must be violating all kinds of transmission rules regarding the ISM bands. The duration is 1.6s, it takes 2.5% of the available channel capacity. Not good.

kami83 commented 3 years ago

I am not really sure, what you are talking about but i started now a new recording with rtl_433 -R 0 -X 'n=RainPoint,m=OOK_PCM,s=500,l=500,r=1500,bits>=100' > testcodes3 and an ice pack on the sensor with no antenna on the reciever and 50cm distance

merbanan commented 3 years ago

There is a static carrier transmitted between when the actual payload is sent. This is bad in a makes the device not compliant with the ISM band regulations. Someone must have inverted the logic somewhere when designing this thing. If they also messed up the filtering there will be overtones all over the spectrum.

kami83 commented 3 years ago

Mhh, but there is a check of the FCC on the internet for this device:

https://fcc.report/FCC-ID/2AWDBTCS005FRF

merbanan commented 3 years ago

I found this from the FCC documentation:

Signal Description, FSK.

That explains the strange mode of operation. The tested hardware had a FSK modulator chip that got swapped for an OOK/ASK modulation chip.

kami83 commented 3 years ago

mhh i think this not right, because there are two different version. the wifi version ist FSK and the BT version is ASK. I have got the BT version

kami83 commented 3 years ago

Hi, so here is my next record from this night. I hope it looks better. My sensor should be ASK. I normally sends every 5 Minutes the message like this:

PartA PartB PartB

If i restart the sensor it sends:

PartA PartB PartB

small break

PartA PartB PartB

Thanks a lot.

BG kami testcodes3.txt

zuckschwerdt commented 3 years ago

That data files really looks clean.

zuckschwerdt commented 3 years ago

Or more likely this BitBench formatting. If we assume inverted, and reverse bit order, then we can see values counting. Do you roughly know where the temp started and where it ended? Was there a crossing of zero degrees at 3:30 perhaps?

kami83 commented 3 years ago

HI,

cannot open the second link.

BG kami

merbanan commented 3 years ago

The requested URL's length exceeds the capacity limit for this server.

zuckschwerdt commented 3 years ago

Fixed by removing duplicate lines (noted with xn).

kami83 commented 3 years ago

hi, here are temperatures inside the room. But in the first hours of the recording there was a cold ice package on the sensor.

grafik

kami83 commented 3 years ago

Is this helpful?

Thanks a lot.

BG kami

kami83 commented 3 years ago

Hi, sorry i dont want to ask to much, but can someone use my informations and help me now to decode it?

Thanks a lot.

BG kami

zuckschwerdt commented 3 years ago

I have again updated the BitBench link above. Is the light blue field the temperature you expect?