SONY BLU-RAY BDP-S780 UPNP COMMANDS
===================================
Contained in this document are samples of TCP/IP commands sent to a Sony BDP-S780 Blu-ray player
from Sony's free MediaRemote app on an iPhone. It may be likely that the same types of commands
sent in a similar manner from other devices may work on other current Sony BDP models which have
ethernet ports.

In the examples below, the BDP-S780 Blu-ray Player's IP address is shown as 192.168.1.1, and
the MAC ADDRESS of the external control device (an iPhone in this case) is 11-22-33-44-55-66.
Be sure to replace those with your correct IP address and MAC address of course!
Also, wherever the notation "\r" appears, that actually represents the hex ascii character "0xd"
as a placeholder for a carriage return. Similarly, the notation "\n" is intended to represent
the single hex ascii character "0xa" as a placeholder for a line feed.

TO REGISTER YOUR DEICE AS A CONTROL POINT:
In order to "REGISTER" a controlling device with the Blu-ray player, so that the Blu-ray player
will then accept commands, below is the packet sent to the BDP-S780. It may be likely that the
latest firmware updates eliminate the need to first register a controlling device.)
=====================================================================
--->SEND THIS TO PORT 50002 at your Blu-ray Player's IP ADDRESS:<---
GET /register?Name=MyDeviceName®istrationType=initial&deviceId=MediaRemote%3A11-22-33-44-55-66 HTTP/1.1\r\n
Host: 192.168.1.1:50002\r\n
User-Agent: MediaRemote/3.0.1 CFNetwork/548.0.4 Darwin/11.0.0\r\n
X-CERS-DEVICE-INFO: iPhone OS5.0.1/3.0.1/iPhone3,3\r\n
Connection: close\r\n\r\n

TO REQUEST STATUS UPDATES FROM THE BLU-RAY PLAYER:
After sending this packet, of course you'll have to parse the response to figure out what
status it provides.
======================================================================
--->SEND THIS TO PORT 50002 at your Blu-ray Player's IP ADDRESS:<---
GET /getStatus HTTP/1.1\r\n
Host: 192.168.1.1:50002\r\n
User-Agent: MediaRemote/3.0.1 CFNetwork/548.0.4 Darwin/11.0.0\r\n
X-CERS-DEVICE-INFO: iPhone OS5.0.1/3.0.1/iPhone3,3\r\n
X-CERS-DEVICE-ID: MediaRemote:11-22-33-44-55-66\r\n
Connection: close\r\n\r\n

TO SEND AN ACTUAL CONTROL COMMAND TO THE BLU-RAY PLAYER:
You'll first have to Post the first part, and then after that send and XML file.
Inside the XML file you'll need to replace what is between and
a valid command. The example XML file below is for issuing the PLAY command.
======================================================================
--->SEND THIS TO PORT 52323 at your Blu-ray Player's IP ADDRESS:<---
POST /upnp/control/IRCC HTTP/1.1\r\n
Host: 192.168.1.1:52323\r\n
User-Agent: MediaRemote/3.0.1 CFNetwork/548.0.4 Darwin/11.0.0\r\n
Content-Length: 317\r\n
Content-Type: text/xml; charset=UTF-8\r\n
SOAPACTION: "urn:schemas-sony-com:service:IRCC:1#X_SendIRCC"\r\n
Connection: close\r\n\r\n

--->THEN ALSO SEND THIS TO PORT 52323 at your Blu-ray Player's IP ADDRESS:<---
\n
schemas.xmlsoap.org] /encoding/">\n
\n
\n
AAAAAwAAHFoAAAAaAw==\n
\n
\n
\n

TO GET A LIST OF ACTUAL COMMANDS SUPPORTED BY YOUR BLU-RAY PLAYER:
Send this packet and then it will respond with an xml file containing valid command codes that
are applicable to your model of Blu-ray player. It may be that different models of Sony Blu-ray
players have slightly altered command codes.
=======================================================================
--->SEND THIS TO PORT 50002 at your Blu-ray Player's IP ADDRESS:<---
GET /getRemoteCommandList HTTP/1.1\r\n
Host: 192.168.1.1:50002\r\n
User-Agent: MediaRemote/3.0.1 CFNetwork/548.0.4 Darwin/11.0.0\r\n
X-CERS-DEVICE-INFO: iPhone OS5.0.1/3.0.1/iPhone3,3\r\n
X-CERS-DEVICE-ID: MediaRemote:11-22-33-44-55-66\r\n
Connection: close\r\n\r\n

LIST OF COMMAND CODES FOR THE SONY BDP-S780 BLU-RAY PLAYER
The following list of command codes were contained in the xml file that was return after sending
the above request remote command packet.
========================================================================
Confirm:AAAAAwAAHFoAAAA9Aw==
Up:AAAAAwAAHFoAAAA5Aw==
Down:AAAAAwAAHFoAAAA6Aw==
Right:AAAAAwAAHFoAAAA8Aw==
Left:AAAAAwAAHFoAAAA7Aw==
Home:AAAAAwAAHFoAAABCAw==
Options:AAAAAwAAHFoAAAA/Aw==
Return:AAAAAwAAHFoAAABDAw==
Num1:AAAAAwAAHFoAAAAAAw==
Num2:AAAAAwAAHFoAAAABAw==
Num3:AAAAAwAAHFoAAAACAw==
Num4:AAAAAwAAHFoAAAADAw==
Num5:AAAAAwAAHFoAAAAEAw==
Num6:AAAAAwAAHFoAAAAFAw==
Num7:AAAAAwAAHFoAAAAGAw==
Num8:AAAAAwAAHFoAAAAHAw==
Num9:AAAAAwAAHFoAAAAIAw==
Num0:AAAAAwAAHFoAAAAJAw==
Power:AAAAAwAAHFoAAAAVAw==
Display:AAAAAwAAHFoAAABBAw==
Audio:AAAAAwAAHFoAAABkAw==
SubTitle:AAAAAwAAHFoAAABjAw==
Favorites:AAAAAwAAHFoAAABeAw==
Yellow:AAAAAwAAHFoAAABpAw==
Blue:AAAAAwAAHFoAAABmAw==
Red:AAAAAwAAHFoAAABnAw==
Green:AAAAAwAAHFoAAABoAw==
Play:AAAAAwAAHFoAAAAaAw==
Stop:AAAAAwAAHFoAAAAYAw==
Pause:AAAAAwAAHFoAAAAZAw==
Rewind:AAAAAwAAHFoAAAAbAw==
Forward:AAAAAwAAHFoAAAAcAw==
Prev:AAAAAwAAHFoAAABXAw==
Next:AAAAAwAAHFoAAABWAw==
Replay:AAAAAwAAHFoAAAB2Aw==
Advance:AAAAAwAAHFoAAAB1Aw==
Angle:AAAAAwAAHFoAAABlAw==
TopMenu:AAAAAwAAHFoAAAAsAw==
PopUpMenu:AAAAAwAAHFoAAAApAw==
Eject:AAAAAwAAHFoAAAAWAw==
Karaoke:AAAAAwAAHFoAAABKAw==
Qriocity:AAAAAwAAHFoAAABMAw==
Netflix:AAAAAwAAHFoAAABLAw==
Mode3D:AAAAAwAAHFoAAABNAw==

In addition, the following two HTTP requests appear to allow the setting of the "Party" feature
that exists on the Sony BDPS-780:
========================================================================
PartyOn:[Link: 192.168.1.1]
PartyOff:[Link: 192.168.1.1]

Apparently, trying to quote the structure of an XML file got interpreted in the previous post.

Let's see if this works as an example of how to encapsulate commands to be sent to the Sony BDP-S780 Blu-ray player:

Apologies for the multiple posts, but that example XML file keeps getting reinterpreted in the post, wheras I was just trying to provide a text example.

Here is how this following line in the previous post was supposed to look:

\n

Since the post got reinterpreted due to the "http" in it, please remove the extra space that I placed in the middle of the "ht" and "tp" in the above example.

Will post a link to the same text all in one file in the future when it gets accepted to Remote Center.

WOW. Just cannot post the contents of a sample XML file without it just getting completely messed up. Such a shame. File is being posted in downloads!

I have been screwing around some with ip control, and one of the things I want to control is a Sony BDP-S570. What are you using to actually send the packets to the player?

Hello, you made a great job, and I managed to register my program (vb.net) to the SONY SMP-N200.
But I cannot control it....

when I send the commands with
###ipport###: 192.168.1.124:52323 (the ip of the sony.

POST /upnp/control/IRCC HTTP/1.1\r\n
Host: ###ipport###\r\n
User-Agent: MediaRemote/3.0.1 CFNetwork/548.0.4 Darwin/11.0.0\r\n
Content-Length: 317\r\n
Content-Type: text/xml; charset=UTF-8\r\n
SOAPACTION: "urn:schemas-sony-com:service:IRCC:1#X_SendIRCC"\r\n
Connection: close\r\n\r\n

exactly as you described I get an internal Server error:
HTTP/1.1 500 Internal Server Error
Connection: close
Date: Tue, 13 Mar 2012 11:33:46 GMT
Server: Linux/2.6 UPnP/1.0 Media Player/2.0

Does anyone have a similiar list of codes for the Sony NSZ-GT1 (Blu Ray with Google TV). I use the Roomie Remote iPhone App, which allows for custom configuration to send XML packets for IP Control. My goal is to configure the app to send the commands and control the device.

How did you send the command?
did you used UDP Symbol on Crestron?

Hi!
I successfully created a program that can remote control any kind of SONY device that supports IRCC over UPnP ((supposedly, it is tested on SONY Bravia 2011 models. I used windows upnp library).
The command set is configurable. You can try it, it's free.
[Link: falco1.heliohost.org]

Hi there,

The IP control file for Sony bluray players is present in the iRule database (including all the codes in post 31 above by AMX programmer), but the discrete codes for power on/standby and eject/load are missing.

If anyone could provide the missing codes it would be most appreciated.

hi all I hate to bring up an old thread but it is right on topic for what I need is there any chance I getting someone to dumb the commands down for how to send this with Lua I have had no luck with it.

Thanks,
Yonubear

Hi,
i've succesfully created an app for Symbian 3 mobile phone device (tested on Nokia N8) to remote control a TV Sony Bravia KDL46HX855 through IP network.

I'll release it soon on my personal website (currently under construction)

http://onesim.dyndns-ip.com/

Is anyone interested?

First of all, thanks everyone for your effort thus far.

I'm looking to get this working on a 2013 Sony Bravia TV. But my attempt thus far, has resulted in some hair loss and it appears that either:

1. the IP control is not enabled on my TV (I have Bravia sync enabled)
2. I'm not using the correct port. A port scan revealed the following:
Open TCP Port: 2870 daishi
Open TCP Port: 13000
Open TCP Port: 42489
Open TCP Port: 55200
Open TCP Port: 63444
3. or I'm missing something else.

@onesim, I'm definitely interested in the app, but with a web dev background, I was hoping to get a solution that would work via a web browser. Think you could help?

That said, can anyone point me in the right direction? Note: I also tried the application that @zbacsko linked to but it doesn't find my Sony TV.

I'd appreciate it, and thanks in advance!

i can say that the app i wrote just send messages to port 80 to my tv.
It's like there's a sort of webserver running on the tv, but insted of replying with webpages, it interpretes the xml payload as a command to execute, equivalent to the remote control key.

Thanks for your response onesim. Any chance you'd be willing to share the details of what your posting to the TV?

I'm a web developer, so if I can get it working, I'd be happy to share the code/app with you.