chrishrb/hoval-gateway

U32 values

Opened this issue · 4 comments

Thanks for putting this project together! I'm in the process of getting data from two Hoval UltraSource B Comfort C heat pumps and I am particularly interested in the energy consumption/production datapoints of the systems. These are found in FunctionGroup 10, FunctionNum 1 and DataPoint Ids 23009 and 29050.

Both these datapoints are 32bit unsigned ints per the specification from Hoval. Interestingly, I can't seem to observe any response messages (42) for any of these datapoints. A can dump of the bus only shows messages that seem to be significantly formatted in a different fashion than the usual response messages. Additionally, the values would have to be sent as two messages as well, since this is a 32bit int.

Do you have any pointers or suggestions as to what I should look for?

can you maybe post a part of the can dump? maybe I find something useful 😄

Sure thing: this is a wireshark capture from Heat Pump unit 2 while enumerating the interesting values through a display unit: DP 23009 are byte values 0x59,0xE1 . There are a few messages that contain these hex values, but these don't look like any of the usual responses.

wez2.pcapng.zip

hm can you maybe create a dump with the candump tool? (https://sgframework.readthedocs.io/en/latest/cantutorial.html) i'm not really familiar with wireshark^^

It may be a few days until I get to capture another dump, so here's a few excerpts from the file above:

Messages that include anything that looks like datapoint 23009:

❯ tshark -r wez2.pcapng -V |grep "59 e1"
0000  3d 59 e0 b8 59 e1 b8 59                           =Y..Y..Y
0000  5e 59 e0 b8 59 e1 b8 59                           ^Y..Y..Y
0000  68 59 e0 b8 59 e1 b8 59                           hY..Y..Y
0000  01 40 0a 01 59 e1                                 .@..Y.
0000  11 a8 42 0a 01 59 e1 00                           ..B..Y..
0000  19 a9 56 0a 01 59 e1 f0                           ..V..Y..

Datapoint 29050:

❯ tshark -r wez2.pcapng -V |grep "71 7a"
0000  3d 5a 45 3b 71 7a 98 71                           =ZE;qz.q
0000  5e 5a 45 3b 71 7a 98 71                           ^ZE;qz.q
0000  68 5a 45 3b 71 7a 98 71                           hZE;qz.q
0000  01 40 0a 01 71 7a                                 .@..qz
0000  11 8e 42 0a 01 71 7a 00                           ..B..qz.
0000  19 8f 56 0a 01 71 7a b0                           ..V..qz.
0000  01 44 0a 01 71 7a                                 .D..qz

As you can see the request (40) is visible as you would expect it but the dump does not contain any responses in the usual format. This is consistent over a long period of time.

I'm also attaching a decoded text dump of the file above:

tshark -r wez2.pcapng -V > wez2.txt

wez2.txt