Project

General

Profile

Actions

Messages » History » Revision 237

« Previous | Revision 237/351 (diff) | Next »
Alessio Valeri, 08/13/2025 01:38 PM


Messages

Observing the traffic on the bus we can see there are different units. These are the address found on the 12 bus :

ADDRESS UNIT
41 Hi-Mit remote controller
47 Hi-Mit remote controller
50 Indoor Unit
57 Hi-Mit remote controller
63 Hi-Mit remote controller
34
35 Outodoor Unit
146 Indoor Unit
242
243

REQUESTS / REPLIES ANALYSIS

Here I try to report any communication pattern I can find :

41 - 146 interaction

Messages exchanged between Hi-mit interface and outdoor unit
WIP

47 - 242 interaction

|47|0|10|202|160|1|1|108|0|12|
ACK from 242
|242|0|48|1|1|1|1|108|62|0|31|129|129|27|0|0|0|0|0|0|0|22|0|0|0|0|0|0|0|20|60|50|7|24|25|129|129|0|100|3|0|0|8|0|4|0|0|7|
ACK from 47

50 - 35 interaction

|50|0|9|1|1|1|0|240|248|
ACK from 35
|35|0|36|1|0|1|1|255|0|40|32|0|0|0|2|0|3|34|128|31|0|31|128|18|170|0|0|0|41|41|1|3|241|208|0|106|
ACK from 50
|50|0|28|1|1|1|0|255|24|32|0|7|24|33|129|34|30|30|0|0|25|0|62|0|6|0|2|100|
ACK from 35
|35|0|14|1|0|1|1|254|16|32|16|32|0|241|
ACK from 50
|50|0|32|1|1|1|0|159|31|129|129|20|60|0|7|129|31|26|100|3|0|0|0|0|0|0|0|0|0|2|0|111|
ACK from 35

63 - 243 interaction

|63|1|9|202|160|1|0|0|99|
ACK from 243
|243|1|48|1|0|0|255|192|6|0|0|2|0|0|0|0|0|0|0|0|0|66|34|18|178|0|0|60|20|31|0|9|31|0|145|0|0|0|0|33|0|24|0|30|0|0|0|92|
|63|1|9|202|160|1|0|1|98|
ACK from 243
|243|1|48|1|0|0|255|193|6|0|0|0|0|26|0|0|0|0|7|0|0|0|129|0|0|0|31|0|0|100|31|0|0|0|0|3|129|0|0|0|0|0|129|0|0|0|0|243|

DEVICE DISCOVERY

When the Hi-mit interface is looking for devices on H-LINK bus the following messages are sent: (This messages were logged with no device connected on H-LINK bus)

SRC CTRL LEN DSW1 ADDR CRC
41 0 9 202 160 255 255 241 146
SRC CTRL LEN DSW1 ADDR CRC
57 3 10 202 160 255 255 0 0 99

AUTODISCOVERY ??

From time to time these messages appears on the bus, they are not always grouped together and they are not acknowledged, maybe they are used to report their presence ?

|35|0|10|1|0|1|255|15|20|238| <- UPDATE: VALUE 15 & 20 CHANGE OVER TIME, ARE THEY TEMPERATURE ?
|50|0|9|1|1|1|255|241|6|
|41|0|9|202|160|255|255|241|146|

|35|0|28|1|0|1|255|242|3|34|128|31|0|31|128|18|170|0|0|0|41|41|1|3|241|208|0|171| -> This is a status update but it seems no one requests or acknowledge

ALL MESSAGES

Here are reported all the messages captured :

Note: DSW8 ADDR field is the binary encoded value +1
Example:

In the image above DSW8 ADDR is equal to 8+1 = 9

DSW1 field is thebynary encoded value set on the Hi-mit interface

ADDRESS 41 ( HI-MIT INTERFACE )

SRC CTRL LEN DSW1 ADDR CRC
41 0 9 202 160 255 255 241 146
SRC CTRL LEN DSW1 ADDR DSW8 ADDR CRC
41 0 9 202 160 1 1 97 2
SRC CTRL LEN DSW1 ADDR CRC
41 0 48 202 160 1 1 107 62 31 8 255 11 12 45 24 0 0 26 28 28 28 28 28 28 28 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 211
SRC CTRL LEN DSW1 ADDR CRC
41 0 48 202 160 1 1 107 62 0 8 0 11 12 45 24 0 0 26 28 28 28 28 28 28 28 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 51

Address 146

Messages coming from 146 seems to be associated with the master controller status.

The following message is sent when there is a parameter change on MASTER CONTROLLER:

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR - - - PARAMETER ID SET VALUE CRC
146 0 12 1 1 1 0 99 62 x x xx

Multiple parameters can be concatenated in a request in the following way:

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR - - - PARAMETER ID x1 SET VALUE x1 PARAMETER ID x2 SET VALUE x2 PARAMETER ID xn SET VALUE xn CRC
146 0 10+(n*2) 1 1 1 0 99 62 xx xx xx xx xx xx xx

PARAMETERS ID

These are the parameters ID :

DESCRIPTION PARAMETER ID
MODE 1
UNKNOWN 2
CYCLE1 WATER TEMP 3
CYCLE2 WATER TEMP 4
DHW SET TEMP 5
POOL SET TEMP 6
DHW/POOL MODE 7
? 9
ROOM1 SET TEMP 10
UNKNOWN TEMP 11
UNKNOWN TEMP 12
UNKNOWN TEMP 13
UNKNOWN TEMP 14
UNKNOWN TEMP 15
UNKNOWN TEMP 16
UNKNOWN TEMP 17
UNKNOWN 21
WATER PUMP CONFIG? 22

MODE

This parameter sets the working mode of the unit: HEAT / COOL / AUTO
When there is a change of the working mode on the master controller also the following parameters are updated in a single request.
3,4,10,11,12,13,14,15,16,17

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR - - - MODE: VALUE CYCLE1 SET TEMP: VALUE CYCLE2 SET TEMP: VALUE ROOM1 SET TEMP: VALUE ROOM? SET TEMP: VALUE ROOM? SET TEMP: VALUE ROOM? SET TEMP: VALUE ROOM? SET TEMP: VALUE ROOM? SET TEMP: VALUE CRC
146 0 32 9 1 9 0 99 62 1 8 3 6 4 12 10 23 11 28 12 28 13 28 14 28 15 28 16

DHW/POOL MODE**: 0 -> OFF, 162 -> POOL ENABLED, 22 -> DHW ENABLED

EXAMPLE: The following message is sent when the MASTER CONTROLLER POOL water set temp is changed to 27°C :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR POOL WATER TEMP SET TEMP CRC
146 0 12 1 1 1 0 99 62 6 27 77

The following message is sent when the MASTER CONTROLLER POOL OR DHW is changed to DISABLED :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR POOL/DHW SET VALUE CRC
146 0 12 1 1 1 0 99 62 7 0 87

ALSO THE FOLLOWING MESSAGE:
|146|0|43|1|1|1|0|96|62|0|0|73|119|185|131|9|0|0|16|2|64|1|0|24|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|50|

The following message is sent when the MASTER CONTROLLER POOL is changed to ENABLED :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR POOL/DHW SET VALUE CRC
146 0 12 1 1 1 0 99 62 7 162 145

ALSO THE FOLLOWING MESSAGE:
|146|0|43|1|1|1|0|96|62|0|0|73|119|185|131|9|0|0|16|130|64|1|0|24|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|178|

The following message is sent when the MASTER CONTROLLER DHW is changed to ENABLED :

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR POOL/DHW SET VALUE CRC
146 0 12 1 1 1 0 99 62 7 22 65

ALSO THE FOLLOWING MESSAGE:
|146|0|43|1|1|1|0|96|62|0|0|73|119|185|131|9|0|0|16|34|64|1|0|24|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|18|

Inviato quando seleziono la modalità HEAT

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR MODE ? CRC
146 0 30 1 1 1 0 99 62 1 64 3 20 4 20 11 22 12 22 13 22 14 22 15 22 16 22 17 22 24
SRC CTRL LEN DSW8 ADDR - DSW8 ADDR CRC
146 0 12 1 1 1 0 99 62 22 128 198

Inviato quando seleziono la modalità COLD

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR MODE ? CRC
146 0 30 1 1 1 0 99 62 1 8 3 13 4 16 11 28 12 28 13 28 14 28 15 28 16 28 17 28 71
SRC CTRL LEN DSW8 ADDR - DSW8 ADDR CRC
146 0 12 1 1 1 0 99 62 22 160 230

Inviato quando seleziono la modalità AUTO

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR MODE ? CRC
146 0 28 1 1 1 0 99 62 1 4 3 28 11 0 12 0 13 0 14 0 15 0 16 0 17 0 80

STATUS UPDATE MESSAGE

The following 48Byte seems to be a periodic status update message

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR - - MODE PUMP?? WATER SET TEMP CYCLE1 WATER SET TEMP CYCLE2 DHW SET TEMP POOL SET TEMP ERROR CODE ? ROOM 1 SET TEMP ROOM ENABLE UNK1 UNK2 CRC
146 0 48 1 1 1 0 97 62 0 8 0 11 12 45 24 0 0 0 26 28 28 28 28 28 28 28 0 0 0 0 160 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 242

MODE : 4/5(AUTO), 8/9(COOL), 64/65(HEAT)
PUMP : 16 ENABLED ?
ROOM ENABLE : 1(ROOM 1),
UNK1 : SEEN VALUES: 0,128
UNK2 : SEEN VALUES: 32,160,224 ( SEE FOLLOWING TABLE )

7 6 5 4 3 2 1 0
WP ECO MODE HEAT WP ECO MODE COOL 1 0 0 0 0 0

ERROR CODE : SEEN VALUES: A1,A5

ADDRESS 50 ( HI-MIT INTERFACE IDU )

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR - - CRC
50 0 9 1 1 1 0 240 248
SRC CTRL LEN DSW8 ADDR - DSW8 ADDR - - CRC
50 0 9 1 1 1 255 241 6
SRC CTRL LEN DSW8 ADDR - DSW8 ADDR - - - MODE PUMP ? WATER SET TEMP ? IDU GAS TEMPERATURE - IDU LIQUID TEMPERATURE WATER OUT PHEX TEMP NOT SURE WATER INLET TEMP CRC
50 0 28 1 1 1 0 255 24 32 0 22 24 16 129 20 11 12 0 0 22 0 62 0 6 0 2 122

MODE is 32 when CYCLE 1 is OFF, when COOL MODE on CYCLE1 is enabled it changes to 9.
PUMP ? becomes 1 when cooling is enabled. Change to 17 when water pump is running. <- EDIT: NOT 100% SURE (PUMP SEEMS TO RUN EVEN WHEN PUMP=1 , MAYBE 1->CYCLE 1 ENABLED AND 17-> CYCLE1&ROOM1 ENABLED)
WATER SET TEMP IS SET WHEN CYCLE 1 IS ENABLED

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR TEMP? CRC
50 0 32 1 1 1 0 159 30 129 129 20 60 0 7 129 30 26 100 3 0 0 0 0 0 0 0 0 0 2 0 111

ADDRESS 35 (UNKNOWN)

SRC CTRL LEN DSW8 ADDR DSW8 ADDR CRC
35 0 10 1 0 1 255 15 20 238
SRC CTRL LEN DSW8 ADDR DSW8 ADDR CRC
35 0 14 1 0 1 1 254 16 32 16 32 0 241
SRC CTRL LEN DSW8 ADDR DSW8 ADDR EVAP GAS TEMP DISCHARGER TEMPERATURE IDU LIQUID TEMP FREQUENCE CURRENT EVO% CRC
35 0 28 1 0 1 255 242 3 22 128 25 0 51 128 17 110 0 0 0 41 41 1 3 241 208 0 114
SRC CTRL LEN DSW8 ADDR DSW8 ADDR OUTDOOR TEMP EVAP GAS TEMP DISCHARGER TEMPERATURE IDU LIQUID TEMP FREQUENCE CURRENT EVO% CRC
35 0 36 1 0 1 1 255 0 40 32 0 0 0 2 0 3 20 128 22 0 42 128 14 100 0 0 0 41 41 1 3 241 208 0 178

Message similar to the previous one with added 8 byte.

|35|240|8|9|224|9|255|231| -> SENT WHEN THERE IS NO COMMUNICATION WITH OUDOOR UNIT ? LOOKS LIKE A DISCOVERY MESSAGE

ADDRESS 47 ( HI-MIT INTERFACE )

Unit 47 seems to send only this request that 242 replies to

SRC CTRL LEN - DSW1 ADDR DSW8 ADDR ? ? ? CRC
47 0 10 202 160 1 1 108 0 12

ADDRESS 57 ( HI-MIT INTERFACE )

This message is seen during device discovery

SRC CTRL LEN - DSW1 ADDR ? ? ? ? CRC
57 3 10 202 160 255 255 0 0 99

ADDRESS 63 ( HI-MIT INTERFACE )

Unit 63 seems to only send request that 243 replies to. No other messages are captured at this time.

SRC CTRL LEN - DSW1 ADDR DSW8 ADDR ? ? CRC
63 1 9 202 160 1 0 0 99
SRC CTRL LEN - DSW1 ADDR DSW8 ADDR ? ? CRC
63 1 9 202 160 1 0 1 98

ADDRESS 242 (UNKNOWN)

SRC CTRL LEN DSW8 ADDR - DSW8 ADDR WATER TEMP ROOM1 TEMP ? ROOM1 SET TEMP WATER PUMP SPEED WATER FLOW (1 digit) CRC
242 0 48 1 1 1 1 108 62 0 7 129 129 27 0 0 0 0 0 0 0 22 0 0 0 0 0 0 0 20 60 50 20 24 12 129 129 0 14 3 14 0 24 2 4 1 1 111

ADDRESS 243 (UNKNOWN)

Unit 243 seems to reply to 63 requests.

SRC CTRL LEN DSW8 ADDR FREQUENCY TARGET FREQUENCY OUTDOOR TEMP DISCHARGER TEMP FREQUENCE EVAP GAS TEMP CRC
243 1 48 1 0 0 255 192 6 0 0 2 0 0 0 0 0 0 0 0 0 64 30 17 159 0 0 60 20 30 0 1 30 0 145 0 0 0 0 34 0 24 0 29 0 0 0 68
SRC CTRL LEN DSW8 ADDR FREQUENCE WATER PUMP SPEED? WATER FLOW? CRC
243 1 48 1 0 0 255 193 6 0 0 0 0 26 0 0 0 0 7 0 0 0 129 0 0 0 29 0 0 100 29 0 0 0 0 3 129 0 0 0 0 0 129 0 0 0 0 243

Updated by Alessio Valeri 5 months ago · 237 revisions

Redmine Appliance - Powered by TurnKey Linux