I've inherited an old Elan SS1 that I'm hoping may still be useful. I'm trying to establish IP control of the unit which as far as I can tell isn't something Elan ever officially supported. This is a DIY project, I'm not working with a dealer. I believe I'll still need to program the SS1 using Via!Tools.

The Via!2-8.4 wireless touch panels and the N800 both communicate over Wi-Fi to the SS1, so there should be a way to emulate these devices. I could buy one and sniff the traffic but I'm hoping for an easier way. Has anybody done this before? Is the protocol documented anywhere? Thoughts or suggestions?

The zone SS1 receives UDP messages on port 4114 with this data format:
\aaU\01\01\00jcommand=MAC_EXE¯oaddr=120&source=0&ssname=Zone 1 4fd2af5c&zonenumber=0&MID=402b&CID=87&CRC=e304

\aaU\01\01\00 fixed header
j is length
command (MAC_EXEC, KREF or KREL)
macroaddr can be parsed from the ButtonArray.xml generated by ViaTools
ssname is generated during programming
MID appears constant
CID is an index counter but can be repeated
CRC is checksum from command to =

The packets can be captured and replayed as-is.

I have been trying to get this to work for too long. I imagine the SS1 will need to be programmed in Tools as a stand alone device with the device. G would need a generic IP controlled Zone Controller with the IP addy set to port 4114....I do not have any of the old wireless pads for Via so sniffing it would be hard. Does anyone have the IP codes at the ready?

Does anyone have the IP codes for this? None of my Via 2 panels are working since the battery issues are so common.