Decoding XZ TH10

330 views
Skip to first unread message

Ashwin Isaac

unread,
Dec 19, 2020, 4:06:40 PM12/19/20
to rtl_433
Hi,
I have a Temp/Humidity sensor; its a Thingsend XZ-TH10. I am trying to decode this using rtl_433, but having enormous difficulty in getting anywhere. I am very new to RTL_433, so clueless as to where to go next.

The device is supposed to send temp/humidity data every 30s. So, I ran with the -A option and below is what I am getting. The device is intended to be run along with a "concentrator"; XZ TAG4. The chip inside this device is a XZ-DT25-UX v1.1 (http://thingsend.com/uploadfile/2018/0727/20180727054320128.pdf)

----------------------------------

rtl_433 version 20.11-9-g8cdb56d9 branch master at 202012151640 inputs file rtl_tcp RTL-SDR
Use -h for usage help and see https://triq.org/ for documentation.
Trying conf file at "rtl_433.conf"...
Trying conf file at "/home/openhabian/.config/rtl_433/rtl_433.conf"...
Trying conf file at "/usr/local/etc/rtl_433/rtl_433.conf"...
Trying conf file at "/etc/rtl_433/rtl_433.conf"...
Disabling all device decoders.
Registered 0 out of 175 device decoding protocols [ ]
Detached kernel driver
Found Fitipower FC0012 tuner
Exact sample rate is: 250000.000414 Hz
Sample rate set to 250000 S/s.
Tuner gain set to Auto.
Tuned to 433.920MHz.
Allocating 15 zero-copy buffers
Detected FSK package    2020-12-19 20:43:17
Analyzing pulses...
Total count:   19,  width: 19.52 ms             ( 4879 S)
Pulse width distribution:
 [ 0] count:    1,  width: 5580 us [5580;5580]  (1395 S)
 [ 1] count:    4,  width:  728 us [668;828]    ( 182 S)
 [ 2] count:    2,  width:  128 us [128;132]    (  32 S)
 [ 3] count:    3,  width:  348 us [312;388]    (  87 S)
 [ 4] count:    1,  width: 1908 us [1908;1908]  ( 477 S)
 [ 5] count:    1,  width: 3992 us [3992;3992]  ( 998 S)
 [ 6] count:    2,  width:  180 us [176;188]    (  45 S)
 [ 7] count:    4,  width:   80 us [76;84]      (  20 S)
 [ 8] count:    1,  width:  244 us [244;244]    (  61 S)
Gap width distribution:
 [ 0] count:    3,  width:  128 us [112;144]    (  32 S)
 [ 1] count:    7,  width:   72 us [68;88]      (  18 S)
 [ 2] count:    3,  width:  224 us [212;232]    (  56 S)
 [ 3] count:    2,  width:  168 us [160;176]    (  42 S)
 [ 4] count:    3,  width:  316 us [276;344]    (  79 S)
Pulse period distribution:
 [ 0] count:    1,  width: 5692 us [5692;5692]  (1423 S)
 [ 1] count:    3,  width:  796 us [776;828]    ( 199 S)
 [ 2] count:    6,  width:  376 us [316;420]    (  94 S)
 [ 3] count:    1,  width: 2120 us [2120;2120]  ( 530 S)
 [ 4] count:    1,  width: 4324 us [4324;4324]  (1081 S)
 [ 5] count:    2,  width:  240 us [220;264]    (  60 S)
 [ 6] count:    2,  width:  160 us [152;172]    (  40 S)
 [ 7] count:    2,  width:  540 us [520;564]    ( 135 S)
Pulse timing distribution:
 [ 0] count:    1,  width: 5580 us [5580;5580]  (1395 S)
 [ 1] count:    4,  width:  728 us [668;828]    ( 182 S)
 [ 2] count:    6,  width:  128 us [112;144]    (  32 S)
 [ 3] count:    6,  width:  332 us [276;388]    (  83 S)
 [ 4] count:    1,  width: 1908 us [1908;1908]  ( 477 S)
 [ 5] count:    1,  width: 3992 us [3992;3992]  ( 998 S)
 [ 6] count:    5,  width:  180 us [160;212]    (  45 S)
 [ 7] count:   11,  width:   76 us [68;88]      (  19 S)
 [ 8] count:    3,  width:  232 us [228;244]    (  58 S)
Level estimates [high, low]:   5809,    448
RSSI: -4.5 dB SNR: 11.1 dB Noise: -15.6 dB
Frequency offsets [F1, F2]:    7889,   2075     (+30.1 kHz, +7.9 kHz)
Guessing modulation: No clue...

Detected OOK package    2020-12-19 20:43:27
Analyzing pulses...
Total count:    1,  width: 19.65 ms             ( 4912 S)
Pulse width distribution:
 [ 0] count:    1,  width: 19648 us [19648;19648]       (4912 S)
Gap width distribution:
Pulse period distribution:
Pulse timing distribution:
 [ 0] count:    1,  width: 19648 us [19648;19648]       (4912 S)
 [ 1] count:    1,  width: 100004 us [100004;100004]    (25001 S)
Level estimates [high, low]:   5967,    498
RSSI: -4.4 dB SNR: 10.8 dB Noise: -15.2 dB
Frequency offsets [F1, F2]:    5654,      0     (+21.6 kHz, +0.0 kHz)
Guessing modulation: Single pulse detected. Probably Frequency Shift Keying or just noise...

Detected OOK package    2020-12-19 20:45:27
Analyzing pulses...
Total count:   30,  width: 36.57 ms             ( 9142 S)
Pulse width distribution:
 [ 0] count:   24,  width:  560 us [528;596]    ( 140 S)
 [ 1] count:    6,  width: 1064 us [1060;1072]  ( 266 S)
Gap width distribution:
 [ 0] count:   24,  width:  464 us [432;480]    ( 116 S)
 [ 1] count:    1,  width: 1512 us [1512;1512]  ( 378 S)
 [ 2] count:    4,  width:  984 us [980;996]    ( 246 S)
Pulse period distribution:
 [ 0] count:   22,  width: 1024 us [1004;1040]  ( 256 S)
 [ 1] count:    1,  width: 2580 us [2580;2580]  ( 645 S)
 [ 2] count:    3,  width: 1544 us [1544;1548]  ( 386 S)
 [ 3] count:    3,  width: 2052 us [2048;2056]  ( 513 S)
Pulse timing distribution:
 [ 0] count:   48,  width:  512 us [432;596]    ( 128 S)
 [ 1] count:   10,  width: 1032 us [980;1072]   ( 258 S)
 [ 2] count:    1,  width: 1512 us [1512;1512]  ( 378 S)
 [ 3] count:    1,  width: 10724 us [10724;10724]       (2681 S)
Level estimates [high, low]:  15293,    494
RSSI: -0.3 dB SNR: 14.9 dB Noise: -15.2 dB
Frequency offsets [F1, F2]:   13274,      0     (+50.6 kHz, +0.0 kHz)
Guessing modulation: Pulse Width Modulation with multiple packets
Attempting demodulation... short_width: 560, long_width: 1064, reset_limit: 1516, sync_width: 0
Use a flex decoder with -X 'n=name,m=OOK_PWM,s=560,l=1064,r=1516,g=1000,t=202,y=0'
pulse_demod_pwm(): Analyzer Device
bitbuffer:: Number of rows: 2
[00] { 7} fc        : 1111110
[01] {23} be fb da  : 10111110 11111011 1101101

Detected OOK package    2020-12-19 20:45:29
Analyzing pulses...
Total count:   30,  width: 36.56 ms             ( 9141 S)
Pulse width distribution:
 [ 0] count:   24,  width:  556 us [528;580]    ( 139 S)
 [ 1] count:    6,  width: 1064 us [1060;1076]  ( 266 S)
Gap width distribution:
 [ 0] count:   24,  width:  468 us [448;488]    ( 117 S)
 [ 1] count:    1,  width: 1508 us [1508;1508]  ( 377 S)
 [ 2] count:    4,  width:  992 us [988;1000]   ( 248 S)
Pulse period distribution:
 [ 0] count:   22,  width: 1024 us [1004;1044]  ( 256 S)
 [ 1] count:    4,  width: 2184 us [2056;2568]  ( 546 S)
 [ 2] count:    3,  width: 1548 us [1548;1552]  ( 387 S)
Pulse timing distribution:
 [ 0] count:   48,  width:  512 us [448;580]    ( 128 S)
 [ 1] count:   10,  width: 1036 us [988;1076]   ( 259 S)
 [ 2] count:    1,  width: 1508 us [1508;1508]  ( 377 S)
 [ 3] count:    1,  width: 10764 us [10764;10764]       (2691 S)
Level estimates [high, low]:  15675,    469
RSSI: -0.2 dB SNR: 15.2 dB Noise: -15.4 dB
Frequency offsets [F1, F2]:   13975,      0     (+53.3 kHz, +0.0 kHz)
Guessing modulation: Pulse Width Modulation with multiple packets
Attempting demodulation... short_width: 556, long_width: 1064, reset_limit: 1512, sync_width: 0
Use a flex decoder with -X 'n=name,m=OOK_PWM,s=556,l=1064,r=1512,g=1004,t=203,y=0'
pulse_demod_pwm(): Analyzer Device
bitbuffer:: Number of rows: 2
[00] { 7} fc        : 1111110
[01] {23} be fb da  : 10111110 11111011 1101101

Detected OOK package    2020-12-19 20:45:30
Analyzing pulses...
Total count:   30,  width: 36.55 ms             ( 9137 S)
Pulse width distribution:
 [ 0] count:   24,  width:  560 us [524;584]    ( 140 S)
 [ 1] count:    6,  width: 1076 us [1060;1140]  ( 269 S)
Gap width distribution:
 [ 0] count:   24,  width:  464 us [408;480]    ( 116 S)
 [ 1] count:    1,  width: 1512 us [1512;1512]  ( 378 S)
 [ 2] count:    4,  width:  988 us [984;996]    ( 247 S)
Pulse period distribution:
 [ 0] count:   22,  width: 1024 us [1004;1032]  ( 256 S)
 [ 1] count:    1,  width: 2576 us [2576;2576]  ( 644 S)
 [ 2] count:    3,  width: 1548 us [1548;1548]  ( 387 S)
 [ 3] count:    3,  width: 2056 us [2056;2060]  ( 514 S)
Pulse timing distribution:
 [ 0] count:   47,  width:  512 us [444;584]    ( 128 S)
 [ 1] count:   10,  width: 1040 us [984;1140]   ( 260 S)
 [ 2] count:    1,  width: 1512 us [1512;1512]  ( 378 S)
 [ 3] count:    1,  width:  408 us [408;408]    ( 102 S)
 [ 4] count:    1,  width: 11404 us [11404;11404]       (2851 S)
Level estimates [high, low]:  15803,    452
RSSI: -0.2 dB SNR: 15.4 dB Noise: -15.6 dB
Frequency offsets [F1, F2]:   13958,      0     (+53.2 kHz, +0.0 kHz)
Guessing modulation: Pulse Width Modulation with multiple packets
Attempting demodulation... short_width: 560, long_width: 1076, reset_limit: 1516, sync_width: 0
Use a flex decoder with -X 'n=name,m=OOK_PWM,s=560,l=1076,r=1516,g=1000,t=206,y=0'
pulse_demod_pwm(): Analyzer Device
bitbuffer:: Number of rows: 2
[00] { 7} fc        : 1111110
[01] {23} be fb da  : 10111110 11111011 1101101


Detected OOK package    2020-12-19 20:46:34
Analyzing pulses...
Total count:    1,  width: 0.25 ms              (   62 S)
Pulse width distribution:
 [ 0] count:    1,  width:  248 us [248;248]    (  62 S)
Gap width distribution:
Pulse period distribution:
Pulse timing distribution:
 [ 0] count:    1,  width:  248 us [248;248]    (  62 S)
 [ 1] count:    1,  width: 10004 us [10004;10004]       (2501 S)
Level estimates [high, low]:   4322,    690
RSSI: -5.8 dB SNR: 8.0 dB Noise: -13.8 dB
Frequency offsets [F1, F2]:    1529,      0     (+5.8 kHz, +0.0 kHz)
Guessing modulation: Single pulse detected. Probably Frequency Shift Keying or just noise...

Detected FSK package    2020-12-19 20:47:14
Analyzing pulses...
Total count:   21,  width: 19.32 ms             ( 4831 S)
Pulse width distribution:
 [ 0] count:    1,  width: 6560 us [6560;6560]  (1640 S)
 [ 1] count:    5,  width:  304 us [272;348]    (  76 S)
 [ 2] count:    1,  width: 2104 us [2104;2104]  ( 526 S)
 [ 3] count:    6,  width:  192 us [168;216]    (  48 S)
 [ 4] count:    2,  width:  708 us [708;708]    ( 177 S)
 [ 5] count:    3,  width:   84 us [84;88]      (  21 S)
 [ 6] count:    1,  width:  504 us [504;504]    ( 126 S)
 [ 7] count:    2,  width: 1104 us [1036;1176]  ( 276 S)
Gap width distribution:
 [ 0] count:    4,  width:  212 us [184;240]    (  53 S)
 [ 1] count:    8,  width:   92 us [80;112]     (  23 S)
 [ 2] count:    4,  width:  136 us [112;156]    (  34 S)
 [ 3] count:    2,  width:  424 us [388;460]    ( 106 S)
 [ 4] count:    1,  width:   60 us [60;60]      (  15 S)
 [ 5] count:    1,  width:  544 us [544;544]    ( 136 S)
Pulse period distribution:
 [ 0] count:    1,  width: 6764 us [6764;6764]  (1691 S)
 [ 1] count:    6,  width:  428 us [372;520]    ( 107 S)
 [ 2] count:    1,  width: 2188 us [2188;2188]  ( 547 S)
 [ 3] count:    3,  width:  296 us [264;324]    (  74 S)
 [ 4] count:    1,  width:  928 us [928;928]    ( 232 S)
 [ 5] count:    2,  width:  176 us [168;184]    (  44 S)
 [ 6] count:    3,  width:  648 us [604;732]    ( 162 S)
 [ 7] count:    2,  width: 1364 us [1236;1496]  ( 341 S)
 [ 8] count:    1,  width:  232 us [232;232]    (  58 S)
Pulse timing distribution:
 [ 0] count:    1,  width: 6560 us [6560;6560]  (1640 S)
 [ 1] count:    5,  width:  324 us [272;388]    (  81 S)
 [ 2] count:    3,  width:  244 us [220;272]    (  61 S)
 [ 3] count:    1,  width: 2104 us [2104;2104]  ( 526 S)
 [ 4] count:    9,  width:  188 us [156;216]    (  47 S)
 [ 5] count:    2,  width:  708 us [708;708]    ( 177 S)
 [ 6] count:   10,  width:   88 us [80;104]     (  22 S)
 [ 7] count:    3,  width:  500 us [460;544]    ( 125 S)
 [ 8] count:    2,  width: 1104 us [1036;1176]  ( 276 S)
 [ 9] count:    3,  width:  116 us [112;132]    (  29 S)
 [10] count:    2,  width:   64 us [60;68]      (  16 S)
 [11] count:    1,  width:  148 us [148;148]    (  37 S)
Level estimates [high, low]:   5391,    428
RSSI: -4.8 dB SNR: 11.0 dB Noise: -15.8 dB
Frequency offsets [F1, F2]:    6515,   1440     (+24.9 kHz, +5.5 kHz)
Guessing modulation: No clue...

Detected OOK package    2020-12-19 20:48:35
Analyzing pulses...
Total count:    6,  width: 19.64 ms             ( 4910 S)
Pulse width distribution:
 [ 0] count:    1,  width: 9220 us [9220;9220]  (2305 S)
 [ 1] count:    2,  width:  736 us [708;768]    ( 184 S)
 [ 2] count:    1,  width: 4456 us [4456;4456]  (1114 S)
 [ 3] count:    1,  width: 1564 us [1564;1564]  ( 391 S)
 [ 4] count:    1,  width: 2168 us [2168;2168]  ( 542 S)
Gap width distribution:
 [ 0] count:    1,  width:  132 us [132;132]    (  33 S)
 [ 1] count:    1,  width:   60 us [60;60]      (  15 S)
 [ 2] count:    1,  width:  288 us [288;288]    (  72 S)
 [ 3] count:    1,  width:  200 us [200;200]    (  50 S)
 [ 4] count:    1,  width:   76 us [76;76]      (  19 S)
Pulse period distribution:
 [ 0] count:    1,  width: 9352 us [9352;9352]  (2338 S)
 [ 1] count:    2,  width:  804 us [784;828]    ( 201 S)
 [ 2] count:    1,  width: 4744 us [4744;4744]  (1186 S)
 [ 3] count:    1,  width: 1764 us [1764;1764]  ( 441 S)
Pulse timing distribution:
 [ 0] count:    1,  width: 9220 us [9220;9220]  (2305 S)
 [ 1] count:    2,  width:  736 us [708;768]    ( 184 S)
 [ 2] count:    1,  width: 4456 us [4456;4456]  (1114 S)
 [ 3] count:    1,  width: 1564 us [1564;1564]  ( 391 S)
 [ 4] count:    1,  width: 2168 us [2168;2168]  ( 542 S)
 [ 5] count:    1,  width:  132 us [132;132]    (  33 S)
 [ 6] count:    1,  width:   60 us [60;60]      (  15 S)
 [ 7] count:    1,  width:  288 us [288;288]    (  72 S)
 [ 8] count:    1,  width:  200 us [200;200]    (  50 S)
 [ 9] count:    1,  width:   76 us [76;76]      (  19 S)
 [10] count:    1,  width: 92204 us [92204;92204]       (23051 S)
Level estimates [high, low]:   5678,    436
RSSI: -4.6 dB SNR: 11.1 dB Noise: -15.7 dB
Frequency offsets [F1, F2]:    5389,      0     (+20.6 kHz, +0.0 kHz)
Guessing modulation: No clue...

Detected FSK package    2020-12-19 20:48:53
Analyzing pulses...
Total count:   26,  width: 19.45 ms             ( 4862 S)
Pulse width distribution:
 [ 0] count:    1,  width: 5416 us [5416;5416]  (1354 S)
 [ 1] count:    4,  width:   88 us [84;100]     (  22 S)
 [ 2] count:    4,  width:  700 us [604;784]    ( 175 S)
 [ 3] count:    3,  width:  140 us [132;156]    (  35 S)
 [ 4] count:    6,  width:  332 us [288;388]    (  83 S)
 [ 5] count:    1,  width: 1596 us [1596;1596]  ( 399 S)
 [ 6] count:    1,  width:  912 us [912;912]    ( 228 S)
 [ 7] count:    1,  width:  552 us [552;552]    ( 138 S)
 [ 8] count:    1,  width: 1196 us [1196;1196]  ( 299 S)
 [ 9] count:    4,  width:  232 us [196;264]    (  58 S)
Gap width distribution:
 [ 0] count:   12,  width:   68 us [60;80]      (  17 S)
 [ 1] count:    5,  width:  116 us [100;128]    (  29 S)
 [ 2] count:    5,  width:  248 us [232;288]    (  62 S)
 [ 3] count:    1,  width:  160 us [160;160]    (  40 S)
 [ 4] count:    1,  width:   88 us [88;88]      (  22 S)
 [ 5] count:    1,  width:  332 us [332;332]    (  83 S)
Pulse period distribution:
 [ 0] count:    1,  width: 5484 us [5484;5484]  (1371 S)
 [ 1] count:    2,  width:  196 us [188;208]    (  49 S)
 [ 2] count:    3,  width:  756 us [708;780]    ( 189 S)
 [ 3] count:   10,  width:  416 us [368;488]    ( 104 S)
 [ 4] count:    2,  width: 1572 us [1484;1660]  ( 393 S)
 [ 5] count:    3,  width:  276 us [256;312]    (  69 S)
 [ 6] count:    1,  width: 1072 us [1072;1072]  ( 268 S)
 [ 7] count:    2,  width:  568 us [528;612]    ( 142 S)
 [ 8] count:    1,  width:  152 us [152;152]    (  38 S)
Pulse timing distribution:
 [ 0] count:    1,  width: 5416 us [5416;5416]  (1354 S)
 [ 1] count:   13,  width:   80 us [68;100]     (  20 S)
 [ 2] count:    4,  width:  700 us [604;784]    ( 175 S)
 [ 3] count:    7,  width:  136 us [120;160]    (  34 S)
 [ 4] count:    9,  width:  320 us [264;388]    (  80 S)
 [ 5] count:    1,  width: 1596 us [1596;1596]  ( 399 S)
 [ 6] count:    1,  width:  912 us [912;912]    ( 228 S)
 [ 7] count:    1,  width:  552 us [552;552]    ( 138 S)
 [ 8] count:    1,  width: 1196 us [1196;1196]  ( 299 S)
 [ 9] count:    8,  width:  228 us [196;264]    (  57 S)
 [10] count:    4,  width:   60 us [60;68]      (  15 S)
 [11] count:    2,  width:  100 us [100;104]    (  25 S)
Level estimates [high, low]:   5475,    462
RSSI: -4.8 dB SNR: 10.7 dB Noise: -15.5 dB
Frequency offsets [F1, F2]:    8000,   1917     (+30.5 kHz, +7.3 kHz)
Guessing modulation: No clue...

----------------------


Can someone please help me to decode this. Any help is appreciated.

Christian Z.

unread,
Dec 19, 2020, 4:27:09 PM12/19/20
to rtl_433
Looks like you captured too different signals there. The FSK one seems disturbed and you might be too close to the center frequency. If you are looking for that signal try offsetting the frequency by 100kHz, e.g. if this is the default 433.92 then use -f 433.8M.
The other signal (OOK) is Manchester coded and well received. E.g. look at one of the pdv links and switch to MC. Looks like 28 bits, which fits  a simple T/H sensor.

If you are not sure which signal is the right one: uplug the antenna and put the device at 10-30 cm from the receiver.

Then figure out the -X decoder and tabulate codes with the readout you expect. Then find a pattern ;)

Ashwin Isaac

unread,
Dec 20, 2020, 7:13:16 AM12/20/20
to rtl_433
Many thanks Christian.

The OOK signal was from a different device. I found this out by what you suggested; removed the antenna and placed the device close to it. I only get FSK signals now.

Detected FSK package    2020-12-20 11:44:40
Analyzing pulses...
Total count:   20,  width: 19.33 ms             ( 4833 S)
Pulse width distribution:
 [ 0] count:    1,  width: 7144 us [7144;7144]  (1786 S)
 [ 1] count:    5,  width:  344 us [312;376]    (  86 S)
 [ 2] count:    2,  width: 1544 us [1532;1560]  ( 386 S)
 [ 3] count:    2,  width:  720 us [712;732]    ( 180 S)
 [ 4] count:    1,  width:  484 us [484;484]    ( 121 S)
 [ 5] count:    1,  width:  968 us [968;968]    ( 242 S)
 [ 6] count:    3,  width:  100 us [84;112]     (  25 S)
 [ 7] count:    3,  width:  164 us [148;188]    (  41 S)
 [ 8] count:    1,  width:  244 us [244;244]    (  61 S)
 [ 9] count:    1,  width:   68 us [68;68]      (  17 S)
Gap width distribution:
 [ 0] count:    1,  width:   40 us [40;40]      (  10 S)
 [ 1] count:    6,  width:  112 us [104;128]    (  28 S)
 [ 2] count:    4,  width:   76 us [72;84]      (  19 S)
 [ 3] count:    1,  width:  392 us [392;392]    (  98 S)
 [ 4] count:    1,  width:  172 us [172;172]    (  43 S)
 [ 5] count:    3,  width:  292 us [280;304]    (  73 S)
 [ 6] count:    1,  width:   60 us [60;60]      (  15 S)
 [ 7] count:    1,  width:  588 us [588;588]    ( 147 S)
 [ 8] count:    1,  width:  232 us [232;232]    (  58 S)
Pulse period distribution:
 [ 0] count:    1,  width: 7184 us [7184;7184]  (1796 S)
 [ 1] count:    6,  width:  412 us [348;456]    ( 103 S)
 [ 2] count:    2,  width: 1684 us [1668;1704]  ( 421 S)
 [ 3] count:    3,  width:  884 us [820;964]    ( 221 S)
 [ 4] count:    1,  width: 1272 us [1272;1272]  ( 318 S)
 [ 5] count:    2,  width:  168 us [168;172]    (  42 S)
 [ 6] count:    3,  width:  252 us [232;264]    (  63 S)
 [ 7] count:    1,  width:  536 us [536;536]    ( 134 S)
Pulse timing distribution:
 [ 0] count:    1,  width: 7144 us [7144;7144]  (1786 S)
 [ 1] count:    9,  width:  332 us [280;392]    (  83 S)
 [ 2] count:    2,  width: 1544 us [1532;1560]  ( 386 S)
 [ 3] count:    3,  width:  676 us [588;732]    ( 169 S)
 [ 4] count:    1,  width:  484 us [484;484]    ( 121 S)
 [ 5] count:    1,  width:  968 us [968;968]    ( 242 S)
 [ 6] count:   10,  width:  100 us [84;124]     (  25 S)
 [ 7] count:    4,  width:  164 us [148;188]    (  41 S)
 [ 8] count:    2,  width:  236 us [232;244]    (  59 S)
 [ 9] count:    5,  width:   68 us [60;76]      (  17 S)
 [10] count:    1,  width:   40 us [40;40]      (  10 S)
 [11] count:    1,  width:  128 us [128;128]    (  32 S)
Level estimates [high, low]:   5376,    215
RSSI: -4.8 dB SNR: 14.0 dB Noise: -18.8 dB
Frequency offsets [F1, F2]:    6402,   1337     (+24.4 kHz, +5.1 kHz)
Guessing modulation: No clue...

I tried with various frequencies, but none of them gave a decoded output. The manual (http://thingsend.com/index.php?m=content&c=index&a=show&catid=139&id=1) for the device lists 470.508MHz & 479.508MHz, tried those too.

Is there something I can do to scan to see what the right frequency is?

Christian Z.

unread,
Dec 20, 2020, 7:18:53 AM12/20/20
to rtl_433
Getting an overview of the band is always a recommended first step. Use CubicSDR, Gqrx, or SDRangel. A poor-mans alternative is to record the band with `-w FILE.cu8 -T 120` for some frequencies and look at the files in https://triq.org/iqs/

Ashwin Isaac

unread,
Dec 20, 2020, 9:24:45 AM12/20/20
to rtl_433
ta.
I used CubicSDR, found pulses at 434.2MHz. Changed the frequency on rtl_433 to that, but it showed only single pulses.

I found this in the manuals for the sensor

The XZ-TP10 sensor data is encrypted and transmitted, and then the XZ-TAG series gateway analyzes and outputs
data protocol.
ID=xxxxxxxx,TEP=±xx.x·C,HUM=xxx.x%,S=0xxxxxxx,V=x.xxV,SN=xxx,RSSI=-xxxdBm
ID: Address data is number 0~9 of 8-bit ASCII;
TEP: Temperature data is ACSII’s -40.9~ +80.9. “℃”is ACSII’s “.”and “C”.
HUM: Humidity data is ACSII’s 000.0 ~ 100.0. The humidity data of XZ-TP10 is always 000.0;
V: The data of voltage is actual value, unit is “V”;
SN: Serial number of the transmitted data. The serial number of the frequency hopping will be increased when there is data hopping.
RSSI: Received signal strength indicator. The signal will be weaker when the value is smaller.


Where is says encrypted, would I be able to decode it using rtl_433? 
the frequency listed is 433Mhz.

Christian Z.

unread,
Dec 20, 2020, 9:57:26 AM12/20/20
to rtl_433
If possible open an issue for this at rtl_433. Attach a sample.

Don't use the center frequency, tune aside. Consider the spread also if it's FSK (FSK is actually two frequencies, you want neither directly in "the middle").

Benjamin Larsson

unread,
Dec 20, 2020, 11:49:16 AM12/20/20
to rtl...@googlegroups.com
On 20/12/2020 15:24, Ashwin Isaac wrote:
> ta.
> I used CubicSDR, found pulses at 434.2MHz. Changed the frequency on
> rtl_433 to that, but it showed only single pulses.
>
> I found this in the manuals for the sensor
>
> The XZ-TP10 sensor data is *encrypted *and transmitted, and then the

I am quite sure this is a Lora (LoraWan) based sensor. A signal
recording will verify that.

MvH
Benjamin Larsson

Ashwin Isaac

unread,
Dec 20, 2020, 12:28:26 PM12/20/20
to rtl_433
thanks for the help. created issue #1585. Have attached the signal recordings with rtl_433 -S all
Please let me know if any more info is needed or if I need to run more tests.
Reply all
Reply to author
Forward
0 new messages