Project

General

Profile

Actions

Messages » History » Revision 206

« Previous | Revision 206/351 (diff) | Next »
Alessio Valeri, 08/12/2025 08:27 PM


Messages

Observing the traffic on the bus we can see there are different units. These are the address found on the 12 bus :

ADDRESS UNIT
41 Hi-Mit remote controller
47 Hi-Mit remote controller
50 Hi-Mit remote controlleR IDU ?
57 Hi-Mit remote controller
63 Hi-Mit remote controller
34
35
146
242
243

REQUESTS / REPLIES ANALYSIS

Here I try to report any communication pattern I can find :

41 - 146 interaction

Messages exchanged between Hi-mit interface and outdoor unit
WIP

47 - 242 interaction

|47|0|10|202|160|1|1|108|0|12|
ACK from 242
|242|0|48|1|1|1|1|108|62|0|31|129|129|27|0|0|0|0|0|0|0|22|0|0|0|0|0|0|0|20|60|50|7|24|25|129|129|0|100|3|0|0|8|0|4|0|0|7|
ACK from 47

50 - 35 interaction

|50|0|9|1|1|1|0|240|248|
ACK from 35
|35|0|36|1|0|1|1|255|0|40|32|0|0|0|2|0|3|34|128|31|0|31|128|18|170|0|0|0|41|41|1|3|241|208|0|106|
ACK from 50
|50|0|28|1|1|1|0|255|24|32|0|7|24|33|129|34|30|30|0|0|25|0|62|0|6|0|2|100|
ACK from 35
|35|0|14|1|0|1|1|254|16|32|16|32|0|241|
ACK from 50
|50|0|32|1|1|1|0|159|31|129|129|20|60|0|7|129|31|26|100|3|0|0|0|0|0|0|0|0|0|2|0|111|
ACK from 35

63 - 243 interaction

|63|1|9|202|160|1|0|0|99|
ACK from 243
|243|1|48|1|0|0|255|192|6|0|0|2|0|0|0|0|0|0|0|0|0|66|34|18|178|0|0|60|20|31|0|9|31|0|145|0|0|0|0|33|0|24|0|30|0|0|0|92|
|63|1|9|202|160|1|0|1|98|
ACK from 243
|243|1|48|1|0|0|255|193|6|0|0|0|0|26|0|0|0|0|7|0|0|0|129|0|0|0|31|0|0|100|31|0|0|0|0|3|129|0|0|0|0|0|129|0|0|0|0|243|

DEVICE DISCOVERY

When the Hi-mit interface is looking for devices on H-LINK bus the following messages are sent: (This messages were logged with no device connected on H-LINK bus)

SRC CTRL LEN DSW1 ADDR CRC
41 0 9 202 160 255 255 241 146
SRC CTRL LEN DSW1 ADDR CRC
57 3 10 202 160 255 255 0 0 99

AUTODISCOVERY ??

From time to time these messages appears on the bus, they are not always grouped together and they are not acknowledged, maybe they are used to report their presence ?

|35|0|10|1|0|1|255|15|20|238| <- UPDATE: VALUE 15 & 20 CHANGE OVER TIME, ARE THEY TEMPERATURE ?
|50|0|9|1|1|1|255|241|6|
|41|0|9|202|160|255|255|241|146|

|35|0|28|1|0|1|255|242|3|34|128|31|0|31|128|18|170|0|0|0|41|41|1|3|241|208|0|171| -> This is a status update but it seems no one requests or acknowledge

ALL MESSAGES

Here are reported all the messages captured :

Note: DSW8 ADDR field is the binary encoded value +1
Example:

In the image above DSW8 ADDR is equal to 8+1 = 9

DSW1 field is thebynary encoded value set on the Hi-mit interface

ADDRESS 41 ( HI-MIT INTERFACE )

SRC CTRL LEN DSW1 ADDR CRC
41 0 9 202 160 255 255 241 146
SRC CTRL LEN DSW1 ADDR DSW8 ADDR CRC
41 0 9 202 160 1 1 97 2
SRC CTRL LEN DSW1 ADDR CRC
41 0 48 202 160 1 1 107 62 31 8 255 11 12 45 24 0 0 26 28 28 28 28 28 28 28 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 211
SRC CTRL LEN DSW1 ADDR CRC
41 0 48 202 160 1 1 107 62 0 8 0 11 12 45 24 0 0 26 28 28 28 28 28 28 28 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 51

ADDRESS 146 ( PCB1 BOARD ? )

Messages coming from 146 seems to be associated with the master controller status.

The following message is sent when the MASTER CONTROLLER CYCLE 1 water temp is changed to 9°C :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR CYCLE1 WATER TEMP SET TEMP CRC
146 0 12 1 1 1 0 99 62 3 9 90

The following message is sent when the MASTER CONTROLLER CYCLE 2 water set temp is changed to 17°C :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR CYCLE2 WATER TEMP SET TEMP CRC
146 0 12 1 1 1 0 99 62 4 17 69

The following message is sent when the MASTER CONTROLLER DHW water set temp is changed to 46°C :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR POOL WATER TEMP SET TEMP CRC
146 0 12 1 1 1 0 99 62 5 46 123

The following message is sent when the MASTER CONTROLLER POOL water set temp is changed to 27°C :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR POOL WATER TEMP SET TEMP CRC
146 0 12 1 1 1 0 99 62 6 27 77

The following message is sent when the MASTER CONTROLLER POOL OR DHW is changed to DISABLED :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR POOL WATER TEMP SET TEMP CRC
146 0 12 1 1 1 0 99 62 7 0 87

ALSO THE FOLLOWING MESSAGE:
|146|0|43|1|1|1|0|96|62|0|0|73|119|185|131|9|0|0|16|2|64|1|0|24|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|50|

The following message is sent when the MASTER CONTROLLER POOL is changed to ENABLED :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR POOL WATER TEMP SET TEMP CRC
146 0 12 1 1 1 0 99 62 7 162 145

ALSO THE FOLLOWING MESSAGE:
|146|0|43|1|1|1|0|96|62|0|0|73|119|185|131|9|0|0|16|130|64|1|0|24|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|178|

The following message is sent when the MASTER CONTROLLER DHW is changed to ENABLED :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR POOL WATER TEMP SET TEMP CRC
146 0 12 1 1 1 0 99 62 7 22 65

ALSO THE FOLLOWING MESSAGE:
|146|0|43|1|1|1|0|96|62|0|0|73|119|185|131|9|0|0|16|34|64|1|0|24|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|18|

The following message is sent when the MASTER CONTROLLER CYCLE 1 - ROOM1 set temperature is changed to 22°C :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR ROOM1 SET TEMP CRC
146 0 12 1 1 1 0 99 62 10 22 76

I messaggi con intestazione |146|0|12|1|1|1|0| 99 |62| sembrano essere generati quando vengono effettuate modifiche sul master controller interno. Il primo byte successivo sembra indicare l'id del parametro modificato ed il byte successivo contiene il valore modificato.

Inviato quando seleziono la modalità HEAT

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR MODE ? CRC
146 0 30 1 1 1 0 99 62 1 64 3 20 4 20 11 22 12 22 13 22 14 22 15 22 16 22 17 22 24
SRC CTRL LEN DSW8 ADDR - DSW8 ADDR CRC
146 0 12 1 1 1 0 99 62 22 128 198

Inviato quando seleziono la modalità COLD

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR MODE ? CRC
146 0 30 1 1 1 0 99 62 1 8 3 13 4 16 11 28 12 28 13 28 14 28 15 28 16 28 17 28 71
SRC CTRL LEN DSW8 ADDR - DSW8 ADDR CRC
146 0 12 1 1 1 0 99 62 22 160 230

Inviato quando seleziono la modalità AUTO

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR MODE ? CRC
146 0 28 1 1 1 0 99 62 1 4 3 28 11 0 12 0 13 0 14 0 15 0 16 0 17 0 80

Il seguente messaggio di 48 Byte sembra essere un aggiornamento di stato periodico

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR - - MODE PUMP?? WATER SET TEMP CYCLE1 WATER SET TEMP CYCLE2 DHW SET TEMP POOL SET TEMP ERROR CODE ? ROOM 1 SET TEMP ROOM ENABLE UNK1 UNK2 CRC
146 0 48 1 1 1 0 97 62 0 8 0 11 12 45 24 0 0 0 26 28 28 28 28 28 28 28 0 0 0 0 160 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 242

MODE: 4/5(AUTO), 8/9(COOL), 64/65(HEAT)
PUMP: 16 ENABLED ?
ROOM ENABLE: 1(ROOM 1),
UNK1: SEEN VALUES: 0,128
UNK2: SEEN VALUES: 32,160,224 ( 32 BOTH OFF, 160 WP ECO MODE HEAT IS ON, 224 WHEN WP ECO MODEL COOL&HEAT IS ON )
ERROR CODE: SEEN VALUES: A1,A5

ADDRESS 50 ( HI-MIT INTERFACE IDU )

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR CRC
50 0 9 1 1 1 0 240 248
SRC CTRL LEN DSW8 ADDR - DSW8 ADDR CRC
50 0 9 1 1 1 255 241 6
SRC CTRL LEN DSW8 ADDR - DSW8 ADDR - - - MODE PUMP ? WATER SET TEMP ? IDU GAS TEMPERATURE - IDU LIQUID TEMPERATURE WATER OUT PHEX TEMP NOT SURE WATER INLET TEMP CRC
50 0 28 1 1 1 0 255 24 32 0 22 24 16 129 20 11 12 0 0 22 0 62 0 6 0 2 122

MODE is 32 when CYCLE 1 is OFF, when COOL MODE on CYCLE1 is enabled it changes to 9.
PUMP ? becomes 1 when cooling is enabled. Change to 17 when water pump is running. <- EDIT: NOT 100% SURE (PUMP SEEMS TO RUN EVEN WHEN PUMP=1 , MAYBE 1->CYCLE 1 ENABLED AND 17-> CYCLE1&ROOM1 ENABLED)
WATER SET TEMP IS SET WHEN CYCLE 1 IS ENABLED

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR TEMP? CRC
50 0 32 1 1 1 0 159 30 129 129 20 60 0 7 129 30 26 100 3 0 0 0 0 0 0 0 0 0 2 0 111

ADDRESS 35 (UNKNOWN)

SRC CTRL LEN DSW8 ADDR DSW8 ADDR CRC
35 0 10 1 0 1 255 15 20 238
SRC CTRL LEN DSW8 ADDR DSW8 ADDR CRC
35 0 14 1 0 1 1 254 16 32 16 32 0 241
SRC CTRL LEN DSW8 ADDR DSW8 ADDR EVAP GAS TEMP DISCHARGER TEMPERATURE IDU LIQUID TEMP FREQUENCE CURRENT EVO% CRC
35 0 28 1 0 1 255 242 3 22 128 25 0 51 128 17 110 0 0 0 41 41 1 3 241 208 0 114
SRC CTRL LEN DSW8 ADDR DSW8 ADDR OUTDOOR TEMP EVAP GAS TEMP DISCHARGER TEMPERATURE IDU LIQUID TEMP FREQUENCE CURRENT EVO% CRC
35 0 36 1 0 1 1 255 0 40 32 0 0 0 2 0 3 20 128 22 0 42 128 14 100 0 0 0 41 41 1 3 241 208 0 178

Message similar to the previous one with added 8 byte.

|35|240|8|9|224|9|255|231| -> SENT WHEN THERE IS NO COMMUNICATION WITH OUDOOR UNIT ? LOOKS LIKE A DISCOVERY MESSAGE

ADDRESS 47 ( HI-MIT INTERFACE )

Unit 47 seems to send only this request that 242 replies to

SRC CTRL LEN - DSW1 ADDR DSW8 ADDR ? ? ? CRC
47 0 10 202 160 1 1 108 0 12

ADDRESS 57 ( HI-MIT INTERFACE )

This message is seen during device discovery

SRC CTRL LEN - DSW1 ADDR ? ? ? ? CRC
57 3 10 202 160 255 255 0 0 99

ADDRESS 63 ( HI-MIT INTERFACE )

Unit 63 seems to only send request that 243 replies to. No other messages are captured at this time.

SRC CTRL LEN - DSW1 ADDR DSW8 ADDR ? ? CRC
63 1 9 202 160 1 0 0 99
SRC CTRL LEN - DSW1 ADDR DSW8 ADDR ? ? CRC
63 1 9 202 160 1 0 1 98

ADDRESS 242 (UNKNOWN)

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR WATER TEMP ROOM1 TEMP ? ROOM1 SET TEMP WATER PUMP SPEED WATER FLOW (1 digit) CRC
242 0 48 1 1 1 1 108 62 0 7 129 129 27 0 0 0 0 0 0 0 22 0 0 0 0 0 0 0 20 60 50 20 24 12 129 129 0 14 3 14 0 24 2 4 1 1 111

ADDRESS 243 (UNKNOWN)

Unit 243 seems to reply to 63 requests.

SRC CTRL LEN DSW8 ADDR FREQUENCY TARGET FREQUENCY OUTDOOR TEMP DISCHARGER TEMP FREQUENCE EVAP GAS TEMP CRC
243 1 48 1 0 0 255 192 6 0 0 2 0 0 0 0 0 0 0 0 0 64 30 17 159 0 0 60 20 30 0 1 30 0 145 0 0 0 0 34 0 24 0 29 0 0 0 68
SRC CTRL LEN DSW8 ADDR FREQUENCE WATER PUMP SPEED? WATER FLOW? CRC
243 1 48 1 0 0 255 193 6 0 0 0 0 26 0 0 0 0 7 0 0 0 129 0 0 0 29 0 0 100 29 0 0 0 0 3 129 0 0 0 0 0 129 0 0 0 0 243

Updated by Alessio Valeri 5 months ago · 206 revisions

Redmine Appliance - Powered by TurnKey Linux