Page 1 of 3 123 LastLast
Results 1 to 13 of 28
  1. #1
    Join Date
    Jan 2009
    Location
    Poulsbo, Washington
    Posts
    15

    Carrier Comfort Zone II packet data

    Hello to all!

    Great to be on this web site! I am looking to expand my knowledge of HVAC control to learn and to help others. Here is my story…

    I have a Carrier Comfort Zone II (8 Zones, 5 Active).

    As a software engineer and programmer and former Industrial Automation Engineer (Johnson Controls, Barber Coleman, Invensys), I would like to develop a web based interface to view and control the zones. I have used software for each controller or PLC but would like to expand my protocol knowledge to assist others.

    I connected to the RS-485 bus using a B&B 485CARLP9A 232 to 485 converter. It works very well and uses the data signal to power the adapter.

    I analyzed the data stream using a Digital Storage Oscilloscope and logic analyzer.
    The analyzer has an RS-232 interpreter. Using a serial terminal program that captures HEX, DEX, and ASCII, I can see good packets being transmitted on the bus. However, I think the data has Cyclic Redundancy Check bytes in the packet stream and I am having difficulty interpreting the ASCII or HEX values in order to determine what the Comfort Zone Controller and Smart Sensor T-Stats are sending and receiving. I am sure that the Comfort Zone Controller is sending polling data to each Smart Sensor and they are responding with room temperature, settings, and pending commands. The transmission occurs exactly at 10 second intervals. It appears that the packets start initially with 5 pairs of packets (possibly the polling commands) then followed by 12 packets varying in data size. Reading some of the packets, I THINK I see that out of the 11 or 22 bytes, a couple of the bytes closely relates to each Smart Sensor’s low and high settings (i.e. 68 74 ).

    I hope I am not loosing anyone.

    I would greatly appreciate any assistance in interpreting/parsing the data so I can extract Zone, Temp, Humidity, Control, and VAV command data (if available). I hope I am not offending anyone. If I develop this software, I will offer it free. And, if there are any suggestions or ideas to add to the software for you HVAC technicians to aid troubleshooting, I will happily program those ideas into the application.

    Great web site for resource. Spent two hours learning much. Thanks to all.
    I have read the bylaws of this site and hope this does not border the “DIY” rule. If it does please remove this post and accept my apologies.

  2. #2
    Join Date
    Jun 2001
    Location
    Louisville, KY
    Posts
    12,189
    Crestron has already developed a CZII interface.

    I used to have the CZII protocol on a PC. I'll see if I can find it. It may be posted somewhere in the controls section of this site.
    Perhaps you should have read the instructions before calling.

  3. #3
    Join Date
    Jan 2009
    Location
    Poulsbo, Washington
    Posts
    15
    I truly appreciate the quick response and assistance. I look forward to receiving anything to help me move forward.

  4. #4
    Join Date
    Jan 2009
    Location
    Poulsbo, Washington
    Posts
    15

    Any info on CZII protocols?

    JR,

    I was revisiting my dilemma as posted. I continued to search the web for Carrier Comfort Zone II RS-485 protocols and was unsuccessful.

    Did you have any luck with your information?

    Many thanks.

    Doyle

  5. #5
    Join Date
    Jan 2009
    Location
    Poulsbo, Washington
    Posts
    15
    UPDATE: I am making progress as time permits. I have determined the data packet structure from each controller; CPU, Master T-Stat, Slave T-Stat. At this point the data appears to be needing a 'lookup table' to determine the true meaning of the data bytes.
    This is a challenge to reverse engineer the protocol, but with time I may be able to do it. If anyone has suggestions or input, please let me know. Stay safe and have a great holiday!

  6. #6
    Join Date
    May 2010
    Location
    Australia
    Posts
    1

    Love it when somebody else has done all the hard work

    How are you going with this??

    I was about to start down the same track. As I dont have your background I would be bugging my IT friend to help me out. My aim is to have my CCZ11 controlled through my C-Bus automation system.

    It would be great to hear an update!!

    Thanks
    Mark

  7. #7
    Join Date
    Jan 2009
    Location
    Poulsbo, Washington
    Posts
    15
    Shepard,

    I have me significant progress with 'sniffing' the data bus. I have deciphered all data bytes except the last two, which I think are Cyclic Redundancy Check (CRC) values or possibly data mask. There are 23 data bytes total with 13, 14, 21, or 23 bytes transmitted (depending on who is requesting or sending data). I can see when a T-stat is sending data and what is transmitted. I can produce requests with predictable results; however, the data stream is not yet translated into parsed sentences i.e. Current Temp, Humidity, Set Temp/Hum, OAT, OAH, address/channel, etc. I would need a table breakdown of the bytes.

    I have put this project on the back-burner pending completion of higher priorities. Let me know where you want to go. Do you have a break-down of the C-Bus protocol? You can contact me at maleche1 at comc_st dot net (_ = a).


    Here is a small output sample:
    9 0 1 0 3 0 0 11 0 9 1 213 184
    9 0 1 0 3 0 0 11 0 9 2 149 185
    9 0 1 0 3 0 0 11 0 9 3 84 121
    9 0 1 0 11 0 0 12 0 9 4 15 15 15 15 15 15 15 15 170 168
    9 0 1 0 4 0 0 12 0 9 5 160 143 1
    2 0 1 0 3 0 0 11 0 2 3 118 109
    3 0 1 0 3 0 0 11 0 2 3 114 145
    4 0 1 0 3 0 0 11 0 2 3 104 229
    5 0 1 0 3 0 0 11 0 2 3 108 25
    6 0 1 0 3 0 0 11 0 2 3 99 93
    7 0 1 0 3 0 0 11 0 2 3 103 161
    8 0 1 0 3 0 0 11 0 2 3 87 181 E
    9 0 1 0 3 0 0 11 0 9 1 213 184
    9 0 1 0 3 0 0 11 0 9 2 149 185
    9 0 1 0 3 0 0 11 0 9 3 84 121
    9 0 1 0 11 0 0 12 0 9 4 15 15 15 15 15 15 15 15 170 168
    9 0 1 0 4 0 0 12 0 9 5 160 143 1
    2 0 1 0 3 0 0 11 0 2 3 118 109
    3 0 1 0 3 0 0 11 0 2 3 114 145
    4 0 1 0 3 0 0 11 0 2 3 104 229


    Keep chillin'

  8. #8
    Join Date
    Jan 2009
    Location
    Poulsbo, Washington
    Posts
    15
    All,

    Thanks to those folks interested in this venture and have provided some insight and CRC-16 (IBM) validation into the protocol. (Thanks Peter!). I can now read temperatures in all zones. I developed a Graphical User Interface to read the data stream and parse out room temperatures and set points. My next goal is to decipher the rest of the protocol and attempt to send commands to the master controller (Zone 1) to allow selected set point changes.

    The above data capture is a poor example of the data stream and I will post an update soon. Kudos to Carrier (Comfort Zone II) for their vague protocol, however, it is a personal challenge to determine the structure and control/query my home via internet, WiFi, or ZigBee.

    The Infinity protocol and command structure is the way to go if you intend to view/command your home.

    Any assistance is greatly appreciated.

  9. #9
    Join Date
    Jan 2009
    Location
    Poulsbo, Washington
    Posts
    15

    CZII Protocol Update

    Here is the latest update:
    Moving closer to a break-down of each data byte.
    Developed a CZII Packet Analyzer/Sniffer to capture and track communications on the data bus between all units.

    At time permits I will continue this venture. It's been a fun challenge and greatly appreciate the input from others with the same interest and venture.


    Attach is a screen shot of my CZII Data Analyzer/Sniffer. Comments and suggestions are welcome.


    Below is a better data dump of captured bytes. I programmed a byte delimiter using the "." (period/dot) to allow visability of data.

    9.0.1.0.3.0.0.11.0.9.1.213.184.
    1.0.9.0.11.0.0.6.0.9.1.255.255.255.255.255.255.255 .255.52.154.
    9.0.1.0.3.0.0.11.0.9.2.149.185.
    1.0.9.0.11.0.0.6.0.9.2.255.255.255.255.255.255.255 .255.32.106.
    9.0.1.0.3.0.0.11.0.9.3.84.121.
    1.0.9.0.10.0.0.6.0.9.3.64.255.255.255.255.0.0.232. 150.
    9.0.1.0.11.0.0.12.0.9.4.15.15.15.15.15.15.15.15.17 0.168.
    1.0.9.0.1.0.0.6.0.170.240.
    9.0.1.0.4.0.0.12.0.9.5.160.143.1.
    1.0.9.0.1.0.0.6.0.170.240.
    2.0.1.0.3.0.0.11.0.2.3.118.109.
    3.0.1.0.3.0.0.11.0.2.3.114.145.
    4.0.1.0.3.0.0.11.0.2.3.104.229.
    1.0.4.0.13.0.0.6.0.2.3.0.0.0.0.4.72.69.60.82.0.140 .29.
    4.0.1.0.13.0.0.12.0.2.1.0.51.255.255.3.0.0.0.2.2.1 57.180.
    1.0.4.0.1.0.0.6.0.118.48.
    4.0.1.0.10.0.0.12.0.2.2.0.0.0.0.60.82.0.208.46.
    1.0.4.0.1.0.0.6.0.118.48.
    9.0.1.0.3.0.0.11.0.9.1.213.184.
    1.0.9.0.11.0.0.6.0.9.1.255.255.255.255.255.255.255 .255.52.154.
    9.0.1.0.3.0.0.11.0.9.2.149.185.
    1.0.9.0.11.0.0.6.0.9.2.255.255.255.255.255.255.255 .255.32.106.
    9.0.1.0.3.0.0.11.0.9.3.84.121.
    1.0.9.0.10.0.0.6.0.9.3.64.255.255.255.255.0.0.232. 150.
    9.0.1.0.11.0.0.12.0.9.4.15.15.15.15.15.15.15.15.17 0.168.
    1.0.9.0.1.0.0.6.0.170.240.
    9.0.1.0.4.0.0.12.0.9.5.160.143.1.
    1.0.9.0.1.0.0.6.0.170.240.
    2.0.1.0.3.0.0.11.0.2.3.118.109.
    3.0.1.0.3.0.0.11.0.2.3.114.145.
    4.0.1.0.3.0.0.11.0.2.3.104.229.
    1.0.4.0.13.0.0.6.0.2.3.0.0.0.0.4.74.69.60.82.0.245 .221.
    4.0.1.0.13.0.0.12.0.2.1.0.51.255.255.3.0.0.0.2.2.1 57.180.
    1.0.4.0.1.0.0.6.0.118.48.
    4.0.1.0.10.0.0.12.0.2.2.0.0.0.0.60.82.0.208.46.
    1.0.4.0.1.0.0.6.0.118.48.
    9.0.1.0.3.0.0.11.0.9.1.213.184.
    1.0.9.0.11.0.0.6.0.9.1.255.255.255.255.255.255.255 .255.52.154.
    9.0.1.0.3.0.0.11.0.9.2.149.185.
    1.0.9.0.11.0.0.6.0.9.2.255.255.255.255.255.255.255 .255.32.106.
    9.0.1.0.3.0.0.11.0.9.3.84.121.
    1.0.9.0.10.0.0.6.0.9.3.64.255.255.255.255.0.0.232. 150.
    9.0.1.0.11.0.0.12.0.9.4.15.15.15.15.15.15.15.15.17 0.168.
    1.0.9.0.1.0.0.6.0.170.240.
    9.0.1.0.4.0.0.12.0.9.5.160.143.1.
    1.0.9.0.1.0.0.6.0.170.240.
    2.0.1.0.3.0.0.11.0.2.3.118.109.
    3.0.1.0.3.0.0.11.0.2.3.114.145.
    4.0.1.0.3.0.0.11.0.2.3.104.229.
    1.0.4.0.13.0.0.6.0.2.3.0.0.0.0.4.72.69.60.82.0.140 .29.
    4.0.1.0.13.0.0.12.0.2.1.0.51.255.255.3.0.0.0.2.2.1 57.180.
    1.0.4.0.1.0.0.6.0.118.48.
    4.0.1.0.10.0.0.12.0.2.2.0.0.0.0.60.82.0.208.46.
    1.0.4.0.1.0.0.6.0.118.48.
    9.0.1.0.3.0.0.11.0.9.1.213.184.
    1.0.9.0.11.0.0.6.0.9.1.255.255.255.255.255.255.255 .255.52.154.
    9.0.1.0.3.0.0.11.0.9.2.149.185.
    1.0.9.0.11.0.0.6.0.9.2.255.255.255.255.255.255.255 .255.32.106.
    9.0.1.0.3.0.0.11.0.9.3.84.121.
    1.0.9.0.10.0.0.6.0.9.3.64.255.255.255.255.0.0.232. 150.
    9.0.1.0.11.0.0.12.0.9.4.15.15.15.15.15.15.15.15.17 0.168.
    1.0.9.0.1.0.0.6.0.170.240.
    9.0.1.0.4.0.0.12.0.9.5.160.143.1.
    1.0.9.0.1.0.0.6.0.170.240.
    2.0.1.0.3.0.0.11.0.2.3.118.109.
    3.0.1.0.3.0.0.11.0.2.3.114.145.
    4.0.1.0.3.0.0.11.0.2.3.104.229.
    1.0.4.0.13.0.0.6.0.2.3.0.0.0.0.4.74.69.60.82.0.245 .221.
    4.0.1.0.13.0.0.12.0.2.1.0.51.255.255.3.0.0.0.2.2.1 57.180.
    1.0.4.0.1.0.0.6.0.118.48.
    4.0.1.0.10.0.0.12.0.2.2.0.0.0.0.60.82.0.208.46.
    1.0.4.0.1.0.0.6.0.118.48.
    9.0.1.0.3.0.0.11.0.9.1.213.184.

    Until next time!

    Keep chillin'
    Attached Images Attached Images  

  10. #10
    maleche,
    i've been trying to discover how i can change temp in zones without using a master (zone1) user interface. do u have a solving of my problem.
    (i'm very sorry for my terrible english. hope u understand me )

  11. #11
    Join Date
    Jan 2009
    Location
    Poulsbo, Washington
    Posts
    15
    Almost!

    I have not yet tried to use the computer as a master controller (zone 1). However, I'm moving forward with interpreting the protocol to establish an interface. From there, I should be able to write a Graphical User Interface to achieve full remote and local control for iPod, iPad, iPhone, DROID/ANDROID/GOOGLE, WEB interface, as well as from the internet.

    To answer your question...perhaps in a few months (as time permits).

    Keep in touch.
    D.M.

  12. #12
    can u share th methods u've used to determine each byte?
    i've already discovered bytes where zone temp. are by changing this temperatures using 2nd zone UI and monitoring the changes in data packets.
    but this is all i know for today and it is not enough to do the things i want to do with CZII. and i just don't know what to do next because of the poor experience. it would be cool if u could help me

  13. #13
    Join Date
    Jan 2009
    Location
    Poulsbo, Washington
    Posts
    15
    These are some of the packets from the RS-485 bus in order from “Byte 1 through Byte n” (23 Max)

    4 0 1 0 3 0 0 11 0 2 3 104 229
    1 0 4 0 13 0 0 6 0 2 3 0 0 0 0 4 74 69 60 82 0 245 221
    4 0 1 0 13 0 0 12 0 2 1 0 51 255 255 3 0 0 0 2 2 1 57 180.

    Here are data Byte definitions that I know so far:

    Byte 1: Sender (Device Number)
    Byte 2: Sender Channel (bus)
    Byte 3: Receiver (Device Number)
    Byte 4: Receiver Channel (bus)
    Byte 5: Packet length bytes (count backwards from the byte before the first CRC byte)

    Last two bytes in each packet are always CRC-16 values representing the sum of bytes 1 through (length-2 bytes)

    I am working on the command bytes 8 and 9 (I think)

    The values will vary based on using the Carrier "Smart Sensor" T-Stats or the Stand-alone Temperature Sensors (diodes). I am working on a Temperature verses value table in this case.

    In Byte 1 and Byte 3:
    A value of "1" is the Master Controller (Device 1).
    Values 2 through 8 represent the Receiver and Sender Device number.
    A value of "9" is the Carrier Comfortzone II Controller.

    If you try to change or set a zone temperature, the CRC has to be recalculated. I did this and the zone changed, however, it also changed back to the original setting. Based on this, I'm sure an acknowledgement is required in order to execute the last command. This is what I am working on now.

    This is what I have so far. I will post updates when available.

    Good luck!

Page 1 of 3 123 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Comfortech Show Promo Image

Related Forums

Plumbing Talks | Contractor Magazine
Forums | Electrical Construction & Maintenance (EC&M) Magazine
Comfortech365 Virtual Event