Capturing & Analyzing Packets with Saleae Logic Pro 8 - Reverse Engineering A/C Remote part 2

Using the Saleae Logic Pro 8 digital analyzer to reverse engineer the packets from my air conditioner remote.
NECAnalyzer code and captured trace: github.com/Liv...
Saleae Logic Pro 8: www.saleae.com/
=[ 🔴 Stuff I use ]=
→ Microphone:* geni.us/ntg3b
→ Graphics tablet:* geni.us/wacom-...
→ Camera#1 for streaming:* geni.us/sony-c...
→ Lens for streaming:* geni.us/sony-l...
→ Connect Camera#1 to PC:* geni.us/cam-link
→ Keyboard:* geni.us/mech-k...
→ Old Microphone:* geni.us/mic-at...
US Store Front:* www.amazon.com...
=[ ❤️ Support ]=
→ per Video: / liveoverflow
→ per Month: / @liveoverflow
=[ 🐕 Social ]=
→ Twitter: / liveoverflow
→ Website: liveoverflow.com/
→ Subreddit: / liveoverflow
→ Facebook: / liveoverflow
=[ 📄 P.S. ]=
All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.
#HardwareSecurity

[@Max24871]

This is the best. channel. ever.
Thank you!

[@justinmichile]

this is the best channel i saw so far in CZcams

[@MB-rc8ie]

I just discovered this channel, and, as a 1st year electronics student, i think it's super cool

[@AlanMedina314]

The python script used to detect the difference bit position change is gold.

[@radovanslavkovsky2778]

.. Wow .. I adore to people with this kind of knowledge and mindset .

[@slap_my_hand]

A $10 logic analyzer is enough for most people. They work for signals up to 1 or 2 Mhz.

[@LiveOverflow]

+StarTrek123456 yeah absolutely :) can you recommend one?

[@DangerousPictures]

you can get saleae clones on ebay for around 5€
www.ebay.de/itm/24MHz-8CH-USB-Logic-Analyzer-8-Channel-Logic-Analyzer-Compatible-to-Saleae/171202927182?hash=item27dc7d5a4e:g:M-8AAOSwyQtV6XEJ
they have 8 digital chanels and 24 mhz

[@AlanMedina314]

Very intersting application of python and logic analyzer, Thanks for the video.

[@shargon85]

waiting part 3! :)

[@Syphon83]

Thank you so much. Your channel is awesome.

[@jeanalpha2401]

Looks like a 1-wire protocol trace, That might work instead of writing your own analyzer script.

[@deangreenhough3479]

Great work thank you 🏴󠁧󠁢󠁥󠁮󠁧󠁿

[@jurajbuljevic9820]

I wonder why they dont use Manchaster encoding for the IR.

[@CodePhiles]

brilliant as usual ..keep forward

[@GRBtutorials]

Well, it seems you got lucky. Daikin A/C codes are more difficult! And it's different for each model. There are a few reverse engineered models but none seem to apply to my model!

[@rfdave3980]

Awesome channel.

[@neoXXquick]

Nice reversing stuff.. thx for video..

[@h4ck314]

great thorough work

[@MartinRys]

You could also optimize the arduino analyzer by using 115200 serial speed instead of mere 9600.

[@renakunisaki]

And capture to a buffer in memory instead of writing every bit to serial as it's read.

[@tomaschku]

Could you try that with other devices too? (e.g. (not) Nintendo Switch)

[@PyPylia]

Probably not Nintendo Switch as it uses Bluetooth not infrared (the only thing it uses infrared for is to detect distance), but you can use it for pretty much any remote, and anything else that uses infrared for data (not distance measurement)

[@tomaschku]

@@PyPylia Oh thanks! I don't own a switch and thought that it simply uses infrared (since the wii & wiiu also uses that).
Well, I guess I learned. :)

[@woulg]

This is so fun :)

[@michaelepica3564]

LiveOverflow, I am getting an arduino and i want to ask you, what should i get with it?

[@rootlabs2970]

so does that mean that if i try to repeat the bits using an IR transmitter, it would work?

[@LiveOverflow]

+r00t l4b kinda. Yes. The only issue would be that the IR protocol actually sends many pulses as a 1. but if you use some standard IR Library that does that for you, it should work. Though, I haven't tried it myself yet.

[@LiveOverflow]

+r00t l4b kinda. Yes. The only issue would be that the IR protocol actually sends many pulses as a 1. but if you use some standard IR Library that does that for you, it should work. Though, I haven't tried it myself yet.

[@rootlabs2970]

good to know, i will try it, anyways thanks man.

[@carlt.8266]

What's the difference between one of the Saleaes and the cheap clones on eBay?

[@LiveOverflow]

The genuine product is made by a small company who also develops the free "Logic" program. They spend the money and took the risk of creating such a product. The clones simply take advantage of the free software and ride on the trusted name "Saleae". With that comes support and warranty (I have read that they are quite nice in exchanging fried units). But that said, I'm lucky enough to be in a position that I can spend a bit more money and support a small business. But if I couldn't, I obviously would go with whatever I can afford :)

[@carlt.8266]

LiveOverflow Thanks, as I never got to the point in electronics or hardware reverse engineering were I want to be, I have accumulated quite some EE equipment, that has never seen the usage it deserves. Thus, I decided to go cheap if possible and only support the creator of the original if I use the product. That's fair enough to the creative and productive people I guess.
I quite like and share your attitude though. These are great videos you are doing, they not only teach me a lot, but keep me motivated. Thank you.

[@LiveOverflow]

+Carl T. That makes me really happy to hear :) hopefully your equipment will get a bit more use now :D
I also just bought a damn expensive oscilloscope that I probably will never use to it's full potential. But oh well - it's Christmas soon, right?

[@abizernaseem2046]

I have a little problem placing this into perspective. So u reverse engineer the packets and can now understand the protocol and so you can craft your own packets. But how would u send them. Wouldn't there be like a src/dst controller somewhere?

[@abizernaseem2046]

*by send I meant replay the packets

[@LiveOverflow]

I thought about implementing that. You would just use a IR LED and speak the IR protocol the same way. No magic about it.

[@OptimusWhey]

I still live here...STOP BUYING THINGS I WANT TO BUY!.

[@Popart-xh2fd]

Where is the NECAnalyzer dll file?

[@LiveOverflow]

there is none. You have to compile it yourself.

[@Popart-xh2fd]

LiveOverflow Why is that?

[@LiveOverflow]

because as you can see in the video, I use macOS. And not windows ;)

[@Popart-xh2fd]

LiveOverflow Ok, is it difficult to make the dll in windows? How is it done?

[@LiveOverflow]

Read the official doc/help. For example: support.saleae.com/hc/en-us/articles/208666946-How-do-I-develop-custom-analyzers-for-the-Logic-software-on-Windows-

[@graugans]

I love your very compact videos. Due to the fact you prefer hacking Python in your videos you maybe interested in using your salea with sigrok instead of the original GUI. sigrok.org/ in sigrok there are a ton of analyzers and you can hack your own in Python.

[@LiveOverflow]

Oh thanks! I will check this out. The Logic GUI is lacking a lot of things.

[@zaper2904]

did you really just spend a few hours writing a custom analyzer instead of spending a few seconds counting ?

[@Ragnarok540]

Think what is the most interested alternative and in the long term most useful... Clearly you don't think like an engineer.

[@zaper2904]

@@Ragnarok540 no i think like someone who likes being efficient it is incredibly unlikely he will ever analyze this protocol again and even if he does he would have to analyze hundreds if not thousands of cases in order to make the time wasted worth it

[@Ragnarok540]

@@zaper2904 a specific protocol is not the point. Being able to generalize a solution and even better, to program a way to do that boring manual labor automatically is a real skill that apparently some people don't appreciate.

[@zaper2904]

@@Ragnarok540 automation is meant to make your work easier, not harder you shouldn't automate for the sake of automation

[@GRBtutorials]

@@zaper2904 Well, it will help other people out, and maybe he just wanted to try it out. And now he has experience in case he wants to implement a more complex one.