I think you will find that reverse engineering is the grey aread, but the day you try to sell it, is another matter,
and im with Paul on this one becarefull not to put off a new buyer for Pronto!

What's the difference between learning an ethernet protocol or learning an IR code? HAI is already capable of talking to a RFX, there also is a non Philips iPronto app. There is nothing on sale here, just information about a protocol. It's not ment for building and selling an own extender (however there is and has been the freeware Prontonic for years without a problem), but to be capable to use one. They even use public protocols like UDP and SSDP without encryption or MAC checking.

Anyway, if the prontoteam or remotecentral have a problem with it they know how to contact me.

Back on topic:
When the Pronto first connects (or didn't send something for a longer time) it's send 00 (probably to check if the extender is there), then a part I can't figure out in my case 30 00 00 1A 00 00 75 30 and then the ProjectName from the CF.

The extender replies twice on everything. First 20 then 40, probably the first to ack the command and the second to confirm it's executed or that it's ready for more.

This is the second time I've seen this mentioned here. Outside of these 2 times, I have never seen anything that says that HAI can talk to an RFX. Where is some info on this?

What are you using for sniffing the ethernet frames? Wireshark?

About the HAI product, I've never worked with it, but I'm pretty sure I've seen a picture where there was a RFX9400/9600 option.

It’s simply looking at the data section of the ethernet frame in wireshark. You can send you’re own UDP packets with Com Operator Pal or UDP test tool.

Sending RS232:
 
header:
3 bytes to indicate message number (00 00 01)
1 byte statuscode (00 = Request, 20 = Ok, 24 = Failed, 40 = Finished)
1 byte repeatcount (00)
7 bytes probably reserved (00 00 00 00 00 00 00)
 
data:
1 double byte to indicate action
  00 = Completed
  30 = Requeststatus
  31 = Repeat last frame
  40 = IR
  50 = RS232
  63 = SetRelayState
  64 = ToggleRelayState
  65 = GetRelayState

1 byte  ??? (02) (maybe Pronto major version 2.00?)
1 byte  ??? (00) (maybe Pronto major version 2.00?)
1 byte  datalength (from action to end data)
1 byte 
  first part RS232 port
  port1 = 0
  port2 = 1
  port3 = 2
  port4 = 3

  second part  RS232 baudrate
  2400   = 2
  4800   = 3
  9600   = 4
  14400  = 5
  19200  = 6
  28800  = 7
  31250  = 8
  38400  = 9
  57600  = a
  115200 = b

1 byte combined rs232 flags
  Stopbits:
  1   = 0
  1.5 = 2
  2   = 4
  Parity:
  none  =  0
  even  =  8
  odd   =  16
  mark  =  24
  space =  32
  Databits:
  5 = 0
  6 = 64
  7 = 128
  8 = 192
  So, Stopbits 8 + Parity space + Databits 8 = 226 = e4

2 bytes Duration in ms (01 ea = 1ea = 490ms = .49s)
7 bytes probably reserved (00 00 00 00 00 00 00)
1 byte  rs232 repeatcount (01)
? bytes RS232 string
 
end data:
3 bytes to indicate end or reserved (00 00 00)

It's possible to send multiple data + end data (multiple commands) in one packet.

sWORDs, those should be bytes, not double bytes. A whole byte is always represented with two hex numbers:
00 is 0000 0000
ff is 1111 1111

So it is 3 bytes, 2 bytes.

I'll try to help look at it, let's see what we can do. I believe data lacks the IR codes.

Yeah, I still need to have a look a IR, but I'll finish rs232 first. And you're right, a hex byte is 00, I've adjusted the text.

Hi Guys,

just wanna see the info you are posting is very usefull,
I would like to help, but currently i'm out of time.

You do a great job!

Hi there sWORDs,

I would like to help you with this project, I have a TSU9600 and RFX9600 at home.
In fact I was already thinking about trying to port the xcf files to android (I do own one to) in order to connect to RFX9600 and control everything from there when I came across this post.

I hope I can help,
Just P.M. me.

I was curious as to whether there has been any progress on getting outside sources talking with the RFX9600? Simple, one-way communication would suffice, but two-way would be ideal. I was hoping of perhaps getting an iPad to control my second zone and keep my TSU9600 for zone one. I was looking a maybe getting a TSU9800 on the cheap, but they are still much pricier than the iPad and stock is dwindling... plus the iPad can perform many other useful functions... although it lacks any hard buttons that I find extremely useful. I know Crestron has a clamshell add-on, but not very useful unless you switch to a Crestron system... also, it looks like someone made it in their basement (although perhaps just a prototype).

Perhaps Philips would consider releasing the protocols since the line is offically dead? One can only hope.

Scott

For one-way, you could use www.iruleathome.com and the Global Cache Gateway.

another one way control ( soon to be two way) try Bitwise www.bitwisecontrols.com

@ Scott

Although Pronto has quit manufacturing , the Protocol will not be released as Philips still want to sell it all .... if they can

I was under the impression that the deal fell through with the potential suitors and that the line will cease to exist. Perhaps I don't have the latest info then.

Scott

The two zones will access the same equipment, so this would mean a total switch to iPad and Global Cache Gateway. Not sure how it would work with both the RFX and Gateway controlling the same equipment.

I believe Barry has integrated both the Pronto and iPad in the same system... although done through a custom PC with other add-ons. Certainly above my level of expertise.

Will have to research this further.

Thanks for the input.

Scott

Think I found my answer to the dual RFX/Gateway issue with the Xantech 283TP
TWIN PLUG BLINK-IR MOUSE EMITTER. It has one IR emitter connected to two 3.5mm connectors. Would be more elegant if the iPad could talk to the RFX natively, but this may work.

Scott

Almost everything you need to start using the RFX from another source is in this topic. I stopped posting because of the whining.