TT Sirius USB interface

Pyrotek · 09-08-2005, 09:15 AM

So far, i'm dissapointed with the TimeTrax Sirius dongle. I had pre-ordered it in March long before Mitch's product was around. Now it looks like this is going to the ebay graveyard and i'll be picking up his interface.

Last night I started working on figuring out the TT protocol. Unfortunately, they seem to use a hash checksum of some sort. Or i'm just still half asleep. Here's what i've found so far. Any input is welcome.

---------------------
//Port is opened at 9600

SEND: 2A 2A 2A 2A 2A 4D 4F 44 45 4D 54 45 53 54 2A 2A 2A 2A 2A
SEND: 41

// This string changes each time the adapter is initialized
RECV: 3E 3E 40 3C 7E 7A 67 DF 6D 5B 61 0B 29 85 B2
// The answer also changes
SEND: D8 A7 AF 78 33 B0 0A C2 29 E0 8E 40 A3 7A F7 71 1A 8F ED 44 50

// Failure point - not received unless, i'm guessing, the above is acc
RECV: 50 0D 0A FF

// Port is switched to 57600

SEND: A4 03 00 41 00 02 00 09 0D
RECV: A4 03 00 41 80 00 98 A4 03 00 01 00 03 80 00 00 D5

SEND: A4 03 00 01 80 00 00 D8
RECV: A4 03 00 01 00 03 80 00 00 D5 A4 03 00 01 00 03 80 00 00 D5 A4 03 00 02 00 04 20 09 00 00 2A

SEND: A4 03 00 02 80 00 00 D7
RECV: A4 03 00 02 00 04 20 09 00 00 2A A4 03 00 02 00 04 20 09 00 00 2A

SEND: A4 03 00 42 00 03 00 08 03 09
RECV: A4 03 00 01 00 03 80 00 00 D5 A4 03 00 01 00 03 80 00 00 D5 A4 03 00 01 00 03 80 00 00 D5

SEND: A4 03 00 01 80 00 00 D8
RECV: A4 03 00 42 80 00 97 A4 03 00 02 00 04 20 08 00 00 2B

SEND: A4 03 00 02 80 00 00 D7
RECV: A4 03 00 02 00 04 20 08 00 00 2B A4 03 00 02 00 04 20 08 00 00 2B

SEND: A4 03 00 43 00 03 00 02 7F 92
RECV: A4 03 00 43 80 00 96 A4 03 00 03 00 04 20 02 02 01 2D

SEND: A4 03 00 03 80 00 00 D6
RECV: A4 03 00 03 00 04 20 02 02 01 2D A4 03 00 03 00 04 20 02 02 01 2D

SEND: A4 03 00 44 00 02 40 18 BB
RECV: A4 03 00 44 80 00 95 A4 03 00 04 00 07 60 18 00 00 01 01 00 D4

SEND: A4 03 00 04 80 00 00 D5
RECV: A4 03 00 04 00 07 60 18 00 00 01 01 00 D4 A4 03 00 04 00 07 60 18 00 00 01 01 00 D4

SEND: A4 03 00 45 00 02 40 11 C1
// XX's represent radio serial
RECV: A4 03 00 45 80 00 94 A4 03 00 05 00 11 60 11 00 00 0C XX XX XX XX XX XX XX XX XX XX XX XX 5D

SEND: A4 03 00 05 80 00 00 D4
// XX's represent radio serial
RECV: A4 03 00 05 00 11 60 11 00 00 0C XX XX XX XX XX XX XX XX XX XX XX XX 5D A4 03 00 05 00 11 60 11 00 00 0C XX XX XX XX XX XX XX XX XX XX XX XX 5D

SEND: A4 03 00 46 00 06 00 0A 00 00 00 0B F8
RECV: A4 03 00 46 80 00 93 A4 03 00 06 00 04 20 0A 04 01 20

SEND: A4 03 00 06 80 00 00 D3
RECV: A4 03 00 06 00 04 20 0A 04 01 20

SEND: A4 03 00 47 00 06 00 0A 01 00 00 0B F6
RECV: A4 03 00 06 00 04 20 0A 04 01 20 A4 03 00 47 82 00 90

SEND: A4 03 00 47 00 06 00 0A 01 00 00 0B F6
// Here come's channel data "Hits 1 Sirius Hits 1 POP"
RECV: A4 03 00 47 80 00 92 A4 03 00 07 00 24 20 0A 00 00 01 02 00 00 00 06 48 69 74 73 20 31 0D 53 69 72 69 75 73 20 48 69 74 73 20 31 03 50 4F 50 00 00 8B A4 03 00 07 00 24 20 0A 00 00 01 02 00 00 00 06 48 69 74 73 20 31 0D 53 69 72 69 75 73 20 48 69 74 73 20 31 03 50 4F 50 00 00 8B
---------------------

Here are two more successful challenge/responses.

---------------------
RECV: 3E 3E 83 4F 2C 88 F2 2B B3 39 7E 1F 15 63 46
SEND: 1E 7C 6F C4 40 D8 EE 97 F4 B3 24 70 8F 82 BB 7C FE 85 2E 16 50
---------------------
RECV: 3E 3E 4C 24 0D 02 E2 F5 A0 F4 A1 0A 59 25 1B
SEND: 1A 80 FB 2D EA 77 71 D9 D6 C0 58 4C 13 2E 39 14 6D 62 E1 37 50

User Name		Remember Me?
Password