2

I am trying to reverse engineer a two wire RS-485 standard serial bus interface to talk to a samsung heat pump.

Here are some hex commands I was able to sniff. Every message starts with 0x32 and ends with 0x34. Does someone recognise this protocol?

32 00 1A 80 FF 00 10 00 00 C0 11 ED 01 06 0C 00 00 00 00 00 00 00 00 00 00 B7 C8 34 
32 00 17 10 00 00 80 FF 00 C0 15 ED 01 06 0C 82 02 48 5A 16 04 23 13 8C 34 
32 00 11 80 FF 00 10 00 00 C0 11 EE 01 86 01 00 0D 2E 34 
32 00 11 80 FF 00 10 00 00 C0 11 EF 01 86 0A 00 7B 85 34 
3

2 Answers 2

2

This is Samsung NASA protocol which seems to be not very well documented to say the least.

00 01 Start marker (32)
01 02 Length of the message
03 03 Source address
06 03 Destination address
09 .. message header
.. .. message
.. 02 CRC16
.. 01 End marker (34)

There are some projects that seem to have grasp on this. https://github.com/omerfaruk-aran/esphome_samsung_hvac_bus/ seems to be fairly advanced to deal as a source of information for whatever you might need.

-1
 By0 - 32 start frame  
 By1 - 00 source address  
 By2 - 1A, 17 11 - destination address  
 By3 - 80,10 -> command  
 By4 ... ByN-2 data  
 ByN-1 ... CRC XOR of By1 to ByN-2  
 ByN - 34 End of Frame
2
  • 1
    Please edit your answer to add the source of this information, endianness, ... Commented Oct 21, 2024 at 5:34
  • On a second sight, byte 2 holds the number of bytes between 0x32 and 0x34. This answer might not be correct. Commented Mar 20 at 6:55

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.