Changes

Jump to navigation Jump to search
no edit summary
==Reverse Engineering and Analysis==
=== Packet Structure ===
==== Sync Word ====0xAA     0xAA     0xAA     0xAA     0xA0     0x05     0xFF
==== Start and Stop Bits ====10101010 10101010 10101010 10101010 10100000 00000101 11111111  Sync Word (no start/stop bits)
==== Header ====PDU align syncword: 0xAAAAAAAAAAA005FF but I use one less 0xAA at the start 0xAA.AA.AA.AA.A0.05.FF
==== Type, Length and Sub Type ====0xAA     0xAA     0xAA     0xAA     0xAA     0xA        0x00         0xFF     |     0x2A
==== Payload ====10101010 10101010 10101010 10101010 10101010 1010   0 00000000 1 0 11111111 1 | 0 00101010 1       Sync Word (no start/stop bits)
====Start and Stop Bits==== ====Header==== ====Type, Length and Sub Type==== ====Data==== ==== Checksum ====
<br />
===Captured Meter Data===
!2
!3
|
!4
!5
!15
!16
|
!17
!18
|-
!
! colspan="3" |Not part of CRC calc
|
! colspan="13" |Data
|
! colspan="2" |
|-
!
!Type
!Length
|
!SubType
!Unknown<ref>test</ref>
!Unknown
!Unknown
!Unknown
!Unknown
|
!CRC
!Trailing
|<code>55</code>
|<code>0023</code>
!
|<code>30</code>
|<code>FFFFFFFFFFFF</code>
|<code>'''04384F'''</code>
|<code>7E80</code>
! rowspan="10" |
|<code>0896</code>
|<code>04</code>
|<code>55</code>
|<code>0023</code>
!
|<code>30</code>
|<code>FFFFFFFFFFFF</code>
|<code>55</code>
|<code>0023</code>
!
|<code>30</code>
|<code>FFFFFFFFFFFF</code>
|<code>55</code>
|<code>0023</code>
!
|<code>30</code>
|<code>FFFFFFFFFFFF</code>
|<code>55</code>
|<code>0023</code>
!
|<code>30</code>
|<code>FFFFFFFFFFFF</code>
|<code>55</code>
|<code>0023</code>
!
|<code>30</code>
|<code>FFFFFFFFFFFF</code>
|<code>55</code>
|<code>0023</code>
!
|<code>30</code>
|<code>FFFFFFFFFFFF</code>
|<code>55</code>
|<code>0023</code>
!
|<code>30</code>
|<code>FFFFFFFFFFFF</code>
|<code>55</code>
|<code>0023</code>
!
|<code>30</code>
|<code>FFFFFFFFFFFF</code>
|<code>55</code>
|<code>0023</code>
!
|<code>30</code>
|<code>FFFFFFFFFFFF</code>
|<code>04</code>
|}
<code>1) Header = 0x00FF2A</code>
<code>2) Packet Type = 0x55</code>
<code>3) Packet Length = 0x0023</code>
<code>4) Unknown Identifier #1 SubType = 0x30</code>
<code>5) Unknown = FFFFFFFFFFFF (Empty Data Slot = FFFFFFFFFFFF</code> ?)
<code>6) Unknown Identifier #2 = 0x50</code>
<code>7) Unknown Identifier #3 = CF8DD9E2 (Appears to either be location identifier or duplicate meter ID in some cases)</code>
<code>8) Unknown Identifier #4 = C0</code>
<code>9) Unknown Data #1 Counter = '''02''' (Increments some amount with each transmission and rolls over at 0xFF)</code>
<code>10) Uptime = 0x'''0001ECA3''' (Value in seconds since meter powered on, easy way to see last time there was an outage!)</code>
<code>11) Unknown Identifier #5 = 0xA483</code>
<code>12) Meter ID = 0xF0EE36DB</code>
<code>13) Unknown Identifier #6 = 0x0100</code>
<code>14) Unknown Data #2 = 0x2132</code>
<code>15) Unknown Data #3 = 0x'''042D19'''</code>
<code>16) Unknown Identifier #7 = 0x7E80</code>
<code>17) Checksum = 0xF154</code>
<code>18) Trailing byte = 0x04</code>
----

Navigation menu