|
|
本帖最后由 sauron 于 2026-1-11 01:21 编辑
paopao0 发表于 2026-1-10 23:19
5A A5 AA 55 5A A5 AA 55 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
84 ...
果然是udp,现在离完成很接近了
应该和别的博联设备一样用了加密,参考https://github.com/mjg59/python-broadlink
5a a5 aa应该是请求头,然后第3行末尾很明显出现了mac地址的倒序(b4:43:0d:d0:dc:79)
根据之前抓包拿到的"aeskey": "145cbcecc4d46cfc74cc84c49c14f42c",按照上述项目的逻辑编写解密脚本
对第一份数据,第二段第4行第9位开始(从0x56偏移量开始的Payload部分)到末尾进行解密
40 00 A5 A5 5A 5A A6 C3 03 00 34 00 00 00 00 00
00 00 00 00 00 00 00 00 64 64 64 19 00 2D 00 FA
03 00 00 00 00 0D 00 0F 00 12 00 00 00 00 00 00
00 00 00 00 00 00 00 24 00 00 00 00 00 00 00 01
00 00 65 3D 31 38 30 30 0D 0A 53 65 72 76 65 72
推测数据位
偏移量,字节值,解析值,对应指标,备注
31 (0x1F),FA 03,1018,CO2,完全匹配
37 (0x25),0D 00,13,甲醛,推测单位 ug/m³,即 0.013 mg/m³ (四舍五入后显示 0.0)
39 (0x27),0F 00,15,PM2.5,完全匹配
41 (0x29),12 00,18,PM10,完全匹配
同样对第二段数据进行解密
40 00 A5 A5 5A 5A 84 C3 03 00 34 00 00 00 00 00
00 00 00 00 00 00 00 00 64 64 64 19 00 2D 00 E0
02 00 00 00 00 0A 00 0E 00 10 00 00 00 00 00 00
00 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00
00 00 65 3D 31 38 30 30 0D 0A 53 65 72 76 65 72
偏移量,字节值,解析值,对应指标,备注
31 (0x1F),E0 02,736,CO2,完全匹配
37 (0x25),0A 00,11,甲醛,推测
39 (0x27),0E 00,14,PM2.5,完全匹配
41 (0x29),10 00,16,PM10,完全匹配
|
|