• 10 dec 2017: forum version update. In case of issues use this topic.
  • 30 nov 2017: pilight moved servers. In case of issues use this topic.
Hello There, Guest! Login Register


QUIGG GT9000 (Globaltronics/ALDI)
#21
I just read some articles about the Brennenstuhl RC 3600 protocol. It seems to be very similar to the one the GT-FSI-09 sockets are using.

I'm still not convinced if everything is encrypted. As the ID is definitly not. I can change the ID and all my sockets are responding properly without changing the mid part of the protocol.

Due to the fact that the remotes have a fixed systemcode, it could be that some more bits are used for the systemcode to avoid conflicts.

One more thing to think about:
- All the analysis I'm doing is based on the codes here: http://forum.pilight.org/Thread-QUIGG-GT...7#pid12807
- My own remote never sends such "static" codes. My remote is sending codes like this (ON-1, LPF in place):
Code:
1050 630 420 1050 1260 210 630 840 1050 630 1050 630 840 630 840 630 840 630 420 1050 1260 210 630 1050 1050 210 1050 630 420 1050 1260 420 840 840 630 840 420 1050 1050 420 1050 630 840 630 420 840 420 1050 3150 7140
1065 426 426 1065 1065 426 639 852 1065 426 639 852 426 1065 426 1278 426 1278 426 1065 426 1065 1065 639 426 1065 1065 426 426 1065 1065 639 1065 426 639 852 1065 426 639 852 1065 639 1065 639 426 1065 426 1065 2982 7242
1065 426 639 1065 1065 852 213 1065 852 639 852 426 1065 639 1065 426 1065 426 426 1065 1065 426 426 1065 1065 426 1065 639 639 852 1065 639 426 1065 426 1278 426 1065 1065 639 1065 426 1065 426 426 1065 426 1065 2982 7242
1055 422 422 1055 1055 422 633 844 1055 633 422 1055 422 1055 422 1055 422 1055 422 1055 422 1055 1055 422 422 1055 1055 422 422 1055 1055 422 1055 633 633 844 1055 422 422 1055 1055 633 844 633 422 1055 422 1055 3165 7174
840 630 420 1260 1050 630 420 1050 1050 630 420 1260 210 1050 420 1050 630 1050 630 840 420 1050 1050 420 630 840 1050 630 420 1050 1050 840 630 630 420 1050 1050 630 420 1050 1050 420 1050 420 420 1050 420 1050 3150 7140
1055 422 422 1055 1055 422 422 1055 422 1055 633 1055 1055 422 1055 633 633 844 1055 422 1055 633 422 1055 844 633 422 1055 422 1055 1055 422 422 1055 1055 422 633 1055 1055 422 1055 633 1055 422 633 844 633 1055 3165 7174
1055 211 1055 422 1055 422 1055 422 1055 422 1055 1055 422 633 844 1055 422 422 1055 1055 633 844 633 422 1055 1055 633 422 1055 1266 422 1055 422 633 1055 422 1055 2954 7174
935 561 374 1122 935 748 374 1122 374 1122 561 935 1122 374 561 1122 935 561 1122 561 561 935 935 561 935 561 374 1122 935 561 561 6358
836 418 627 1045 1045 418 627 1254 209 1463 209 1254 836 627 836 627 418 1254 1045 418 1254 209 627 1045 1045 418 627 1045 418 1045 1045 418 627 1045 1045 418 627 1045 1045 418 1045 627 836 836 209 1254 418 1045 3135 7106
840 630 420 1050 1050 420 420 1050 1050 630 420 1050 840 630 420 1050 630 840 630 1050 420 1050 1050 630 420 1260 840 630 420 1050 1050 420 1260 420 420 1050 1050 420 630 1050 1050 420 1050 420 420 1050 630 840 3150 7140
848 636 424 1060 848 636 424 1060 424 1060 424 1060 1060 424 424 1060 1060 424 1060 424 424 1272 848 636 848 636 424 1060 1272 424 424 1060 424 1060 1060 424 1060 424 636 1060 1060 636 1060 636 424 1060 424 1060 2968 7208
1040 624 416 1040 1040 1248 1040 832 624 1040 624 1248 416 1040 416 1040 416 416 1040 1040 624 624 832 1040 416 1040 624 416 1040 832 624 416 1040 416 1040 416 1040 1040 624 1040 416 1040 416 624 832 416 1248 2912 7072
1045 627 627 1045 1045 418 627 1254 418 1045 418 1254 836 627 1045 627 418 1045 1045 418 1254 209 627 1045 1045 418 627 1045 418 1045 1045 418 627 1045 836 627 418 1463 627 627 836 627 836 418 418 1045 418 1045 3135 7106
1050 420 420 1050 1050 420 630 840 1050 420 630 1050 630 1050 630 840 630 1050 420 1260 210 1260 840 630 420 1050 1050 420 420 1050 1050 420 1260 210 420 1050 1050 420 630 1050 840 420 1050 420 420 1050 630 1050 2940 7140
848 636 424 1272 848 636 212 1272 424 1060 424 1272 1060 212 424 1060 1060 424 1060 424 424 1060 1060 636 848 424 636 1060 1060 636 424 1272 212 1272 848 424 1060 424 424 1060 1272 212 1272 424 636 1060 424 1060 2968 7208
856 428 428 1070 856 642 428 1070 856 428 1070 428 1284 428 1070 428 1070 428 428 1070 1070 642 856 856 1070 428 1070 642 428 1070 1070 642 428 1070 428 1284 428 1070 1070 642 1070 428 1070 428 428 1070 428 1070 2996 7276
1075 430 430 1075 1075 430 645 860 645 860 645 1075 1075 645 1075 430 430 1075 1075 430 1075 430 430 1075 1075 430 645 860 645 860 860 645 430 1075 860 645 430 1075 1075 430 1075 430 860 430 430 1075 645 1075 3010 7310

So at least we should have two systemcodes to make another comparison. The one from the first page of the thread and the one from the (really strange?) output above.
 
Reply
#22
I just bought a second set as it was on discount Smile

Let's see if I can get more insights with 2 remotes...
 
Reply
#23
I could pair my new sockets with following ON/OFF combinations:
Code:
ON-5    11001    11    1    1    0    0    101    0    1001    1    1100
OFF-5    11001    10    0    0    0    1    101    1    1001    0    1100
ON-6    11001    11    1    1    0    0    101    0    1001    1    0000
OFF-6    11001    10    0    0    0    1    101    1    1001    0    0000
ON-7    11001    11    1    1    0    0    101    0    1001    1    0100
OFF-7    11001    10    0    0    0    1    101    1    1001    0    0100
ON-8    11001    11    1    1    0    0    101    0    1001    1    1000
OFF-8    11001    10    0    0    0    1    101    1    1001    0    1000

As you can see, I just changed the first part from 10001 to 11001 (both ON and OFF) and the second part from 00 to 10 (only for OFF).

Nevertheless, I'm not sure if I can get the GT-9000 remote decrypted...here the codes it is sending for ON-1 (first number is the length)
Code:
171    2060 1074 988 358 394 1473 246 1018 482 1233 1537 285 1138 966 496 1140 287 1263 235 398 1174 268 1275 215 2401 1290 374 1036 310 1179 399 302 1283 1048 447 1034 410 1160 416 1156 370 1191 306 1151 614 201 1387 255 1229 169 1236 1011 429 252 1246 302 1230 290 1272 263 1228 251 1503 814 487 1109 545 997 390 500 1013 459 1174 456 2140 1064 428 1124 556 1058 318 415 1311 954 613 900 838 703 433 1348 654 764 181 1329 240 322 1328 201 1283 234 1201 1175 484 208 1838 886 543 1103 437 1466 1292 868 811 730 464 1328 173 352 1126 305 1264 269 2680 1060 219 1174 292 1159 675 222 1233 873 559 1000 323 1578 209 874 618 931 701 1204 384 144 1346 1500 208 1329 1254 301 1353 200 1167 595 980 288 1414 177 1168 1265 214 1150 389 1215 330 297 1470 409 923 3328 7176
47    3052 709 502 413 1229 1265 211 1127 561 843 472 1132 403 1007 548 995 547 547 1054 460 966 463 1258 781 745 270 1255 327 1157 276 1125 475 1030 498 1115 1113 340 1294 245 1033 477 732 876 607 1120 3189 7078
49    2125 175 807 638 710 289 1205 1226 232 1191 321 1302 237 1148 392 1264 335 935 478 651 947 639 909 536 1026 1063 377 441 1476 215 1091 311 1230 327 1150 328 1149 1126 375 1142 394 1169 432 455 1079 421 1067 3091 7279
49    2198 166 501 1072 694 207 1365 757 739 768 564 1106 354 1208 360 1207 406 1036 391 499 1192 306 1107 668 871 972 524 585 1028 423 1099 382 1311 261 1304 374 1081 915 439 1313 278 968 469 532 1112 380 1173 2985 7183
47    2289 338 546 857 622 348 1140 1015 408 1230 343 1133 406 986 586 1014 471 1060 470 626 994 363 1277 296 1338 754 559 408 1236 302 1117 369 1154 432 1125 383 1126 936 486 1030 586 1095 379 582 1047 372 16052
194    1399 1267 224 1266 259 1337 216 1198 1086 488 1004 590 974 698 81 1444 841 554 979 502 1003 495 312 1216 272 1196 350 1192 1212 316 373 1184 1083 425 1097 449 1072 421 327 1227 492 1036 435 2252 1062 441 1065 468 1055 473 329 1359 175 1273 185 1254 362 1153 1173 419 1181 275 1136 374 330 1241 1077 456 1103 495 1028 422 331 1188 525 999 440 1090 1090 525 250 1310 1025 436 1041 435 1137 391 292 1206 368 1162 391 2273 1276 339 1067 438 1129 347 335 1224 331 1174 352 1181 351 1200 1081 417 1084 464 1056 443 318 1381 934 507 1140 365 1069 397 361 1175 310 1190 337 1184 1176 394 329 1177 1144 527 1030 391 1100 405 531 1001 423 1108 348 2348 1205 305 1081 454 1104 707 84 1275 203 1247 274 1217 300 1317 1118 352 1087 416 1139 339 339 1218 1097 397 1118 485 1120 348 497 1043 445 1076 406 1223 1001 597 179 1240 1071 427 1100 399 1302 278 266 1222 320 1179 3047 7191
47    3326 788 546 459 1035 507 1011 471 1168 357 1158 941 525 993 505 1168 429 397 1103 1112 376 992 571 996 500 510 1070 638 872 633 900 983 583 472 1107 904 679 878 599 926 559 581 1039 403 1060 2998 7179
47    2037 510 511 1006 556 620 916 537 1003 461 1174 424 1067 905 687 1468 943 538 506 1048 1082 429 1115 417 1809 256 961 533 1041 563 954 981 552 494 1052 961 556 975 769 766 630 387 1088 461 1048 3107 7120 
48    2679 397 1019 497 588 956 601 942 561 1013 468 1034 972 809 755 649 851 650 413 1040 1004 511 1006 573 1067 435 485 1024 491 1029 510 1019 1004 550 659 862 1028 585 931 641 933 643 359 1157 345 1120 3024 7133
47    2146 546 407 1097 407 509 1038 501 1016 634 926 484 1066 973 645 977 555 855 552 509 1059 1131 416 1072 421 1018 487 551 1014 622 939 561 948 1018 524 503 1136 872 630 936 552 1149 332 510 1057 468 18181
176    331 1404 1255 843 895 1250 962 485 263 1202 1180 347 1201 402 257 1190 1099 438 1071 444 493 1045 568 1039 297 2304 1092 451 1163 588 810 727 85 1217 1157 332 1197 327 354 1162 1081 516 242 1232 371 1137 1127 411 569 953 406 1291 932 514 211 1223 1275 332 285 1241 1110 346 1115 433 340 1154 1099 499 1314 229 418 1090 318 1280 227 2381 1063 601 889 554 1378 134 232 1232 1185 345 1119 458 252 1214 1116 386 358 1270 263 1225 1040 478 472 1031 353 1365 877 598 206 1310 1048 308 407 1160 1216 288 1195 404 263 1214 1162 375 1113 379 370 1218 327 1220 451 2134 1159 378 1116 399 1119 462 436 1097 1095 413 1113 523 194 1868 626 265 293 1216 309 1196 1160 396 321 1203 373 1161 1106 399 370 1139 1107 888 96 1044 1055 430 1113 510 244 1280 999 455 1066 479 346 1130 354 1188 3095 7110
45    4377 230 634 903 981 621 911 999 1217 894 558 441 1104 546 978 1148 373 425 1058 515 1068 992 522 506 1042 970 533 599 908 1076 522 953 561 471 1213 882 675 778 684 399 1017 463 1121 3117 7042
48    2709 485 920 503 543 957 1095 433 1002 562 547 995 959 782 243 1187 347 1133 924 564 440 1071 495 1074 1081 435 477 1031 998 585 452 1037 1024 490 1010 540 576 1007 1048 608 824 685 326 1162 392 1100 3005 7168
49    2376 342 330 1034 500 527 1006 1008 575 977 500 627 934 983 536 551 1123 341 1204 862 562 433 1114 490 995 1177 455 369 1053 1037 522 458 1046 1000 565 971 558 585 942 983 939 598 562 452 1278 254 1187 2948 7146
47    2341 340 396 1118 390 519 1045 1026 500 1018 524 621 967 1018 611 398 1021 474 1034 987 767 238 1177 397 1015 1017 552 522 1030 1152 353 448 1049 1091 444 1006 516 668 923 987 489 1054 560 503 1004 521 17268
172    332 147 1381 300 1131 321 1241 1065 404 322 1215 1064 445 1085 542 1002 484 362 1415 92 1307 226 2399 947 647 919 608 898 533 204 1320 261 1220 300 1183 295 1232 1363 175 1108 380 1114 491 298 1179 1158 357 1097 456 1104 424 545 1292 89 1269 205 1331 966 497 255 1254 1223 198 1333 214 1215 349 362 1137 329 1326 213 2315 1138 385 1169 349 1110 494 281 1212 334 1271 409 1024 499 1142 967 618 992 594 904 488 271 1210 1070 482 1149 332 1211 295 402 1109 367 1162 367 1164 1105 404 471 1061 1120 398 1155 386 1141 748 1317 202 1340 185 2673 758 603 914 688 924 409 311 1150 370 1151 403 1191 282 1183 1147 377 1177 341 1130 491 334 1134 1173 394 1067 434 1127 689 94 1273 366 1090 261 1199 1247 268 366 1190 1119 429 1104 370 1149 358 554 979 491 1105 3072 6527
43    1124 422 969 663 813 578 954 1022 677 869 604 931 593 408 1061 984 577 1052 415 1035 536 483 1142 561 879 578 960 1028 513 482 1214 836 619 909 545 1200 306 461 1071 480 1044 3065 5250
40    2223 1928 353 1056 1022 496 996 534 1004 559 515 1086 945 531 1025 600 869 615 392 1052 542 1030 494 1022 1238 305 499 1046 1011 488 999 510 1026 512 651 946 470 1041 3134 7237
48    2747 540 653 536 487 1009 475 1047 515 1022 503 1086 967 532 1030 468 1012 543 542 1023 956 585 989 717 761 687 373 1109 422 1068 483 1043 1120 378 550 994 1105 437 973 618 946 524 484 1025 619 935 3059 6441
40    2474 491 984 459 1107 1052 431 1093 461 980 579 456 1016 1015 545 1012 527 978 578 444 1205 353 1077 472 1139 910 522 491 1026 1014 505 1093 428 1115 466 424 1073 507 4921 78600
161    1164 460 1035 413 343 1192 290 1197 358 2321 1082 455 1093 421 1096 486 485 1013 466 1076 398 1131 1078 592 987 505 199 1264 277 1212 363 1204 328 1231 1101 377 323 1231 1081 461 387 1139 1098 420 443 1067 1129 458 357 1289 974 532 988 486 245 1220 314 1232 354 2388 1032 457 1176 332 1202 313 375 1145 377 1214 343 1150 1120 380 1122 412 374 1178 451 1083 413 1127 330 1323 969 743 118 1149 1062 445 340 1167 1197 331 403 1153 1098 488 271 1184 1115 420 1159 402 496 1080 406 1099 347 2308 1096 442 1075 474 1071 609 188 1252 280 1271 244 1203 1192 352 1224 270 344 1172 360 1170 422 1159 359 1122 1183 421 355 1315 950 534 212 1246 1061 397 353 1201 1197 321 403 1144 1133 399 1122 409 450 1057 612 933 3155 4573 7648
37    458 1212 493 368 1103 410 1013 521 1065 447 1007 1148 439 513 1022 1022 487 742 793 1022 631 431 1058 1008 572 429 1155 847 618 929 597 435 1044 525 1044 3072 5971
42    1808 716 498 1160 859 656 859 583 491 1012 505 1040 454 1044 527 1033 1065 481 456 1069 971 558 676 863 1154 391 562 1016 993 683 336 1139 902 593 977 532 469 1062 439 1059 3039 7073
41    1537 473 1206 813 659 967 497 394 1064 512 1013 488 1098 459 1061 1085 409 520 1026 1056 502 572 973 1030 472 569 1009 996 706 284 1173 887 668 932 498 497 1030 476 1099 3004 5979
41    1197 319 450 1043 995 750 793 653 358 1034 508 1169 447 949 551 1020 1075 502 516 994 973 560 581 938 1069 527 448 1043 977 557 486 1268 770 684 866 538 472 1059 548 3196 75048
 
Reply
#24
Hi,

Any News Here? I have a couple of those at Home But havent managed to get them to work.

Greetings
 
Reply
#25
(12-14-2015, 12:32 PM)mfhotdog Wrote: Hi,

Any News Here? I have a couple of those at Home But havent managed to get them to work.

Greetings

Hi,
yes, I implemented the current status in a protocol. See here:
https://github.com/pilight/pilight/pull/215

Missing functionality:
- Decode payload

Working:
- There are about 4 different codes the remote sends for each button. Those can be used to identify the button.
- Sending with one of those received codes is working as well.
 
Reply
#26
Hi,
based on my protocol implementation I did some more investigations.

Here you can find the codes of my 2 GT-9000 remotes:
http://pastebin.com/gHtAt84E

The last 0 in the binary code is always the footer (3000 7000). The payload is bit 5-20. 21-24 is definitely the unit and 1-4 is some sort of systemcode.
You can use those codes to program your switches.

Any ideas how to do further analysis to get (at least) the information how they encode the state?

@mfhotdog, could you please do the same with your remote to get more data to analyze?
 
Reply
#27
Hi,

Thanks for update.

I will try it next weekend if its working and post the details.
 
Reply
#28
Hi,
I can identify already which button is pressed on the remote. So current status...

Bit 0-3: Systemcode part 1
Bit 4-15: Systemcode encrypted
Bit 16-19: State 4xON1, 4xON2, 4xOFF1, 4xOFF2
Bit 20-24: Unit
Bit 25: Footer

Following encoding for bit 16-19:
Code:
ON2 - 0
OFF1 - 1
OFF2 - 2
OFF2 - 3
OFF1 - 4
ON1 - 5
ON1 - 6
ON2 - 7
ON1 - 8
OFF2 - 9
ON1 - 10
OFF2 - 11
ON2 - 12
OFF1 - 13
OFF1 - 14
ON2 - 15

With the combination of state and unit it's possible to identify the proper key on the remote.

The only mistery is the payload (bit 4-15). There are 3 x 4 bits. The 4 bits use all their states. So bit 4-7 has values 0-15, bit 8-11 values 0-15, bit 12-15 again values 0-15.

I plotted the payloads including the state (bit16-19) in a graph and saw that they are nearly linear. The following table shows payloads including the state (bit16-19) from 3 different remotes. There must be some algorithm which decodes those codes and has always the same code as a result. The reason why I included the state is that I thought it is part of the payload at the beginning.
Code:
ON2    3544    3749    603
OFF1    5171    4506    6521
OFF2    8645    9470    9098
OFF2    16102    15699    15345
OFF1    17963    18657    20271
ON1    23169    21772    20578
ON1    26036    27211    26606
ON2    30893    30322    31925
ON1    35679    33343    36502
OFF2    37641    39191    37288
ON1    43372    41912    42205
OFF2    45818    48084    48432
ON2    52288    53097    51396
OFF1    55198    53280    54595
OFF1    57463    59341    59911
ON2    65298    64646    63004

It seems that there is just one small step missing to decode it. Any ideas? One more thing, the sum of the payloads is ALWAYS 524280.
 
Reply
#29
@mfhotdog
I updated my pull request with the latest patch.
https://github.com/pilight/pilight/pull/215

It would be great if you could use that one and check if it works for you and post your systemcode/payload/statecode combinations.
 
Reply
#30
@mfhotdog,
CurlyMoo just merged my code to the development branch. Let me know if it is working for you when you are testing.
 
Reply
  


Possibly Related Threads...
Thread Author Replies Views Last Post
  Brennenstuhl RCR CE1 1011 with QUIGG GT9000 Protocol scootermacro 1 241 06-27-2019, 06:20 PM
Last Post: scootermacro
  Weather Station Globaltronics GT-WT-01 Prutsky 13 6,881 04-09-2018, 07:34 PM
Last Post: NevelS
  Quigg GT-1000 maartenh 53 24,387 12-05-2016, 03:13 PM
Last Post: Klaus
  quigg gt7000 Dimmer wchristi 11 8,036 04-30-2015, 09:25 AM
Last Post: wo_rasp
  Quigg Screens curlymo 6 3,943 01-31-2015, 07:33 PM
Last Post: curlymo
  QUIGG (Globaltronics/ALDI) neevedr 49 33,071 01-12-2015, 10:01 AM
Last Post: wo_rasp

Forum Jump:


Browsing: 2 Guest(s)