SHARE
TWEET

Orvibo AllOne Information

Grayda Aug 12th, 2014 3,013 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Orvibo AllOne Protocol information.
  2.  
  3. Overview: This thing is extremely similar to the Orvibo S10 socket in the way it operates. Even the data that is sent back is mostly the same. See http://pastebin.com/LfUhsbcS for more info.
  4.  
  5. Note: Due to the similarities of code, I won't go over everything here. See the paste above for info.
  6.  
  7. NB: All commands start with "hd" in hex, then two bytes to show the packet length, then two command code bytes (e.g. "ir" to start learning mode, "rs" to reset etc.)
  8.  
  9. Discovery
  10. ---------
  11. Discovers all sockets where the IP address & MAC address are unknown
  12. --------------------------------------------------------------------
  13.  
  14. Send: 68 64 00 06 71 61
  15.  
  16. 68 64 = Magic word
  17. 00 06 = Packet length (6 bytes)
  18. 71 61 = Command ID
  19.  
  20. Receive: 68 64 00 29 71 61 00 ac cf 23 2a 5f fa 20 20 20 20 20 20 fa 5f 2a 23 cf ac 20 20 20 20 20 20 49 52 44 30 30 35 b5 8a 94 d7
  21.  
  22. 68 64 = Magic Word
  23. 00 29 = Packet length (41 bytes)
  24. 71 61 = Command ID
  25. ac cf 23 2a 5f fa = MAC address
  26. 20 20 20 20 20 20 = MAC address padding (to bring the total up to 12 bytes)
  27. fa 5f 2a 23 cf ac = MAC address, little endian
  28. 20 20 20 20 20 20 = MAC address padding, little endian
  29. 49 52 44 30 30 35 = The string "IRD005" in hex (hardware identifier, perhaps?)
  30. b5 8a 94 = Time since manufacture (?)
  31. d7 = ??
  32.  
  33. Learning mode
  34. -------------
  35. Enters learning mode
  36. --------------------
  37.  
  38. Send: 68 64 00 18 6c 73 AC CF 23 2A 5F FA 20 20 20 20 20 20 01 00 00 00 00 00
  39.  
  40. 68 64 = Magic Word
  41. 00 18 = Packet length (41 bytes)
  42. 6C 73 = Command ID (Learning mode)
  43. ac cf 23 2a 5f fa = MAC address
  44. 20 20 20 20 20 20 = MAC address padding (to bring the total up to 12 bytes)
  45. 01 00 00 00 00 00 = Unknown
  46.  
  47. Receive: 68 64 00 18 6c 73 AC CF 23 2A 5F FA 20 20 20 20 20 20 01 00 00 00 00 00
  48.  
  49. 68 64 = Magic Word
  50. 00 18 = Packet length (41 bytes)
  51. 6C 73 = Command ID (Learning mode)
  52. ac cf 23 2a 5f fa = MAC address
  53. 20 20 20 20 20 20 = MAC address padding (to bring the total up to 12 bytes)
  54. 01 00 00 00 00 00 = Unknown
  55.  
  56. Blasting IR
  57. -----------
  58. Blasts IR from the AllOne
  59. -------------------------
  60.  
  61. Send: 68 64 01 9E 69 63 AC CF 23 2A 5F FA 20 20 20 20 20 20 65 00 00 00 73 8C 84 01 00 00 00 00 84 01 00 00 00 00 00 00 00 00 74 01 FE 22 96 11 20 02 47 02 1D 02 26 02 37 02 22 02 13 02 47 02 1D 02 25 02 35 02 24 02 13 02 9D 06 38 02 22 02 13 02 9D 06 38 02 8F 06 20 02 8F 06 2B 02 86 06 83 02 45 06 1F 02 8F 06 12 02 48 02 1F 02 8F 06 2B 02 85 06 37 02 22 02 2B 02 30 02 1D 02 26 02 35 02 91 06 20 02 23 02 35 02 24 02 13 02 47 02 20 02 23 02 37 02 8F 06 1F 02 91 06 2B 02 86 06 38 02 22 02 13 02 9D 06 38 02 8F 06 21 02 8F 06 2B 02 11 9C 28 23 C8 08 1E 02 FF FF F6 77 01 00 24 23 C7 08 1E 02 FF FF 04 78 01 00 0E 23 E0 08 1F 02 FF FF 05 78 01 00 10 23 C5 08 38 02 FF FF 08 78 01 00 2A 23 C6 08 21 02 FF FF 0B 78 01 00 11 23 E0 08 20 02 FF FF 03 78 01 00 2A 23 C7 08 1D 02 FF FF FF 77 01 00 28 23 C7 08 1D 02 FF FF 0B 78 01 00 29 23 C7 08 1E 02 FF FF 0E 78 01 00 27 23 C9 08 20 02 FF FF 0C 78 01 00 2A 23 C7 08 20 02 FF FF 0F 78 01 00 29 23 C8 08 1D 02 FF FF 11 78 01 00 2B 23 C5 08 20 02 FF FF 0E 78 01 00 27 23 C6 08 1D 02 FF FF 07 78 01 00 2C 23 C5 08 20 02 FF FF 0F 78 01 00 28 23 C6 08 22 02 FF FF 11 78 01 00 28 23 C6 08 21 02 FF FF 0D 78 01 00 2C 23 C5 08 1D 02 FF FF 0A 78 01 00 24 23 C7 08 1F 02 FF FF 08 78 01 00 2A 23 C7 08 1E 02 00 00
  62.  
  63. 68 64 = Magic Word
  64. 01 9E = Length of packet (414 bytes)
  65. 69 63 = Command ID (blast IR)
  66. AC CF 23 2A 5F FA = MAC Address
  67. 20 20 20 20 20 20 = MAC Address padding
  68. 65 00 00 00 = Unknown
  69. 73 8C = Two randomness bytes. AO refuses to blast twice if these bytes are the same as before, so set this to something random
  70. 84 01 = Length of IR (little endian?)
  71. 00 00 ... 1E 02 00 00 = The raw IR data
  72.  
  73. Receive: 68 64 00 19 69 63 ac cf 23 2a 5f fa 20 20 20 20 20 20 02 00 00 00 00 2b 86
  74.  
  75. 68 64 = Magic Word
  76. 00 19 = Packet length
  77. 69 63 = Command ID
  78. AC CF 23 2A 5F FA = MAC Address
  79. 20 20 20 20 20 20 = MAC Address padding
  80. 02 00 00 00 00 2B 2A = Unknown
  81.  
  82. ======================================================
  83.             RAW packets from IR presses!
  84. ======================================================
  85.  
  86. This is the data I get back when I press buttons on the remote and the AllOne lets me know what it's found
  87.  
  88. =========================================================
  89. Changhong GK23J7-C3 remote press. Power button, short tap
  90. =========================================================
  91. 000000009800000000000000000088001a23851132022902210221023902200231022802220221023902200231027f063a021f0231027f063a02f505ba028d0632027d063a028d0622028d0631022b0220028e0631022a0221028d0630022b022102210239028e0621022202380220022f022b0221028d0630022c0220028d062f0282063a021f022e0282063a028d0621028e0616020000
  92.  
  93. ========================================================
  94. Changhong GK23J7-C3 remote press. Power button, 1 second
  95. ========================================================
  96. 0000000000010000000000000000f0000b2394112102220238022002320229022002220239021f023202290220028e063202290220028e0632027e0639028e0621028d0631027e063a023e067002220239028d062102220239028d06210222024502140232027e063a021f02320229022002220239028e062102220239028d0621028e063202290220028e0632027e063a028d0622021c9c1a23bc083902ffffed7701001e23b4083d02fffff07701001c23b9083902fffff07701001923ba083a02fffff87701001a23b9083902ffffee7701001c23b8083902ffffeb7701001c23b8083902fffff07701001823bb083a02ffffe77701001d23b90838020000
  97.  
  98. =========================================================
  99. Changhong GK23J7-C3 remote press. Power button, 2 seconds
  100. =========================================================
  101. 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
RAW Paste Data
Top