gistfile1.py

import struct
import sys
import time
import json
from struct import *
from twisted.web import server, resource
from twisted.internet.protocol import DatagramProtocol
from twisted.internet import reactor
from twisted.application.internet import MulticastServer


user_pw = '0000' # default is '0000'

code_login = 0xfffd040d
code_total_today = 0x54000201
code_spot_ac_power = 0x51000201

src_serial = 987193143 # = 37 5F D7 3A (intel format, little endian)
dst_serial = 304913813 # = 95 9D 2C 12 (intel format, little endian)

comm_port = 9522
comm_dst = '192.168.2.103'


def get_encoded_pw(password):
    # user=0x88, install=0xBB
    encpw=[0x88,0x88,0x88,0x88,0x88,0x88,0x88,0x88,0x88,0x88,0x88,0x88]
    for index in range(min(len(encpw), len(password))):
        encpw[index] = encpw[index] + ord(password[index])
        
    ret = ""
    for ch in encpw:
        ret = ret + hex(ch).replace('0x','')
    return ret

cmd_login = '534d4100000402a000000001003a001060650ea0ffffffffffff00017800%s00010000000004800c04fdff07000000840300004c20cb5100000000%s00000000' % (struct.pack('<I', src_serial).encode('hex'), get_encoded_pw(user_pw))
cmd_logout = '534d4100000402a00000000100220010606508a0ffffffffffff00037800%s000300000000d7840e01fdffffffffff00000000' % (struct.pack('<I', src_serial).encode('hex'))
cmd_query_total_today = '534d4100000402a00000000100260010606509e0b500%s00007800%s000000000000f1b10002005400002600ffff260000000000' % (struct.pack('<I', dst_serial).encode('hex'), struct.pack('<I', src_serial).encode('hex'))
cmd_query_spot_ac_power = '534d4100000402a00000000100260010606509e0b500%s00007800%s00000000000081f00002005100002600ffff260000000000' % (struct.pack('<I', dst_serial).encode('hex'), struct.pack('<I', src_serial).encode('hex'))

sma_data = {}

query_list = []
rea = 0

class MulticastClientUDP(DatagramProtocol):

   def datagramReceived(self, datagram, address):
      global sma_data, data_available
      data = datagram.encode('hex')
      print "received %d bytes " % len(datagram)          
      print "data: " + data
      code = get_code(datagram)      
      print "code: %d" % code
      if code == code_login:
         print "received package code: login"
         send_command(cmd_query_total_today)
      if code == code_total_today:
         print "received package code: total, today power data"
         total = get_long_value_at(datagram, 62)
         today = get_long_value_at(datagram, 78)
         print "total: %d" % total
         print "today: %d" % today
         sma_data['total'] = total
         sma_data['today'] = today
         send_command(cmd_query_spot_ac_power)
      if code == code_spot_ac_power:
         print "received package code: spot ac power"
         value = get_long_value_at(datagram, 62)
         if value == 0x80000000:
            value = 0
         print value
         sma_data['spotacpower'] = value
         output_data = json.dumps(sma_data)
         print output_data
         out = open('sma_data.json','w')
         out.write(output_data)
         out.close()
         reactor.stop()


def send_command(cmd):
   print "sending command: %s" % cmd
   data = cmd.decode('hex')
   rea.write(data, (comm_dst, comm_port))
   
def get_code(data):
   print data[42:46].encode('hex')
   c = unpack('I', data[42:46])
   return c[0]   

def get_long_value_at(data, index):
   v = unpack('I', data[index:index+4])
   return v[0]

def callfunc(x):
    print "stopping reactor"
    reactor.stop()
    
rea = reactor.listenUDP(0, MulticastClientUDP())
_DelayedCallObj = reactor.callLater(5, callfunc, "callfunc called after 4 sec")
send_command(cmd_login)
reactor.run()

Direkt am ersten Tag an dem ich den Wechselrichter angeschlossen bekommen habe, habe ich
mich daran gemacht, mir das Protkoll anzuschauen. Dazu habe ich Wireshark verwendet
um die Kommunikation zwischen Sunny Explorer und dem Wechselrichter zu belauschen.

Bezüglich der Speedwire-Kommunikation wird in den Foren erwähnt, dass Multicast verwendet
wird, und dass einige das Speedwire-Protkoll nicht benutzen können, weil deren Powerline-Adapter
dieses Multicast-Protokoll nicht korrekt untersützen.

Meiner Meinung nach, ist Multicast nur bei der 'Discovery-Phase' wichtig. Wenn man aber
die IP-Adresse des Wechselrichters hat, dann kann man sogar auf Multicast verzichten.
Wichtig dabei ist nur zu wissen, dass die Pakete über UDP und nicht über TCP verschickt werden.
Ich selber habe nur einen Wechselrichter und kann daher keine Erfahrungen bzw. Konfigurationen
mit mehereren Wechselrichtern beisteuern.

Grundsätzlich ist der Aufbau eines Datenpakets wie folgt:

HEADER (SMA...) (12 bytes)
PACKAGE LENGTH (2 bytes)
FIXED? (4 bytes)
UNKNOW? (2 bytes) (see smaspot)
DESTINATION ADDRESS (6 bytes) (FF FF FF FF FF FF = ALL)
PARAMETER A (1 byte) (see smaspot)
PARAMETER B (1 byte) (see smaspot)
SOURCE ADDRESS (6 bytes)
FIXED 0 (1 bytes)
PARAMETER C (1 byte) (see smaspot)
FIXED 0 (4 bytes, long)
PACKAGE NUMBER/COUNT (2 bytes)
REGISTER/COMMAND (4 bytes)
PARAMETER (4 bytes)
PAYLOAD (xx bytes)

Ich habe viele Datenregister mit Hilfe von SMASpot herausfinden können, da der Aufbau
teilweise ähnlich ist.

Ich habe dieses kleine Python-Skript geschrieben, um die Standardwerte (Erzeugung Aktuell, Tag, Gesamt) abzufragen.
Diese Werte lasse ich auf einen Amazon Kindle anzeigen.

Ich habe das Skript jetzt ein wenig angepasst. Jetzt kann man seine eigene Seriennummer des Wechselrichters hinterlegen. Das sollte man auch, da das Skript sonst keine Antwort bekommt. Das User-Password kann man auch hinterlegen, im Standard ist das '0000'.

Hallo hdo,

ich habe dein Skript ausprobiert. Leider bekomme ich nur folgende Bildschirmausgabe:

<-------------------------------------------
sending command: 534d410....
received 78 bytes
data: 534d4100000402.....
0d04fdff
code: 4294771725
received package code: login
sending command: 534d4100000402a0...
stopping reactor
------------------------------------------------------------->

Ich habe sowohl "user_pw", "src_serial" und "comm_dst" angepasst.
Hast du eine Idee?
Wofür wird denn "dst_serial" benötigt?

Würde mich über einen Tip freuen. Besten Dank!

Hi,
als dst_serial funktioniert auch 4294967295 ( ff ff ff ff ), = anySerial.
Abgeschaut von SMASpot...

Hej

I have problems get this to work with my STP 10000TL-10

I changed
src_serial = 2110483816 # = 37 5F D7 3A (intel format, little endian)
This is the serial of my inverter
dst_serial = 4294967295 # = 95 9D 2C 12 (intel format, little endian)
This is as above comment.

192.168.1.181 is my inverter IP.

This is the output

sending command: 534d4100000402a000000001003a001060650ea0ffffffffffff00017800686dcb7d00010000000004800c04fdff07000000840300004c20cb5100000000b8b8b8b8888888888888888800000000
received 78 bytes
data: 534d4100000402a000000001003a001060650ed07800686dcb7d00018000686dcb7d00010000000004800d04fdff07000000840300004c20cb5100000000b8b8b8b8888888888888888800000000
0d04fdff
code: 4294771725
received package code: login
sending command: 534d4100000402a00000000100260010606509e0b500ffffffff00007800686dcb7d000000000000f1b10002005400002600ffff260000000000

I tried your script but it wasn't working. After login the script has stopped. If I replace the dst_serial by fffffffff in both commands it works fine. So the destination serial is not needed at all. I think the destination serial is only needed to parse the response and identify different inverters. See the dirty fix below to get it running. Because the source address is hardcoded anyway you don't need the string concatenation at all and you can use hardcoded request commands.

`cmd_login = '534d4100000402a000000001003a001060650ea0ffffffffffff00017800%s00010000000004800c04fdff07000000840300004c20cb5100000000%s00000000' % (struct.pack('<I', src_serial).encode('hex'), get_encoded_pw(user_pw))
cmd_logout = '534d4100000402a00000000100220010606508a0ffffffffffff00037800%s000300000000d7840e01fdffffffffff00000000' % (struct.pack('<I', src_serial).encode('hex'))

cmd_query_total_today = '534d4100000402a00000000100260010606509e0b500%s00007800%s000000000000f1b10002005400002600ffff260000000000' % (struct.pack('<I', dst_serial).encode('hex'), struct.pack('<I', src_serial).encode('hex'))

cmd_query_total_today = '534d4100000402a00000000100260010606509e0FFFFFFFFFFFF00007800375fd73a000000000000f1b10002005400002600ffff260000000000'

cmd_query_spot_ac_power = '534d4100000402a00000000100260010606509e0b500%s00007800%s00000000000081f00002005100002600ffff260000000000' % (struct.pack('<I', dst_serial).encode('hex'), struct.pack('<I', src_serial).encode('hex'))

cmd_query_spot_ac_power = '534d4100000402a00000000100260010606509e0FFFFFFFFFFFF00007800375fd73a00000000000081f00002005100002600ffff260000000000'`

Below some code to add the PDC for both panel strings on Inverter.

Output:
{"spotacpower": 3131, "total": 17575451, "string2": 782, "today": 7190, "string1": 2478}

extend the script with the following:

code_spot_dc_power = 0x53800201

cmd_query_spot_dc_power = '534d4100000402a00000000100260010606509e0FFFFFFFFFFFF00007800375fd73a00000000000081f00002805300002500ffff260000000000'

class MulticastClientUDP(DatagramProtocol):

   def datagramReceived(self, datagram, address):
      global sma_data, data_available
      data = datagram.encode('hex')
      print "received %d bytes " % len(datagram)          
      print "data: " + data
      code = get_code(datagram)      
      print "code: %d" % code
      if code == code_login:
         print "received package code: login"
         send_command(cmd_query_total_today)
      if code == code_total_today:
         print "received package code: total, today power data"
         total = get_long_value_at(datagram, 62)
         today = get_long_value_at(datagram, 78)
         print "total: %d" % total
         print "today: %d" % today
         sma_data['total'] = total
         sma_data['today'] = today
         send_command(cmd_query_spot_ac_power)
      if code == code_spot_ac_power:
         print "received package code: spot ac power"
         value = get_long_value_at(datagram, 62)
         if value == 0x80000000:
            value = 0
         print value
         sma_data['spotacpower'] = value
         output_data = json.dumps(sma_data)
         print output_data
         send_command(cmd_query_spot_dc_power)
      if code == code_spot_dc_power:
         print "received package code: spot dc power"
         string1 = get_long_value_at(datagram, 62)
         string2 = get_long_value_at(datagram, 90)
         print "string1: %d" % string1
         print "string2: %d" % string2
         sma_data['string1'] = string1
         sma_data['string2'] = string2
         output_data = json.dumps(sma_data)
         print output_data
         out = open('sma_data.json','w')
         out.write(output_data)
         out.close()
         reactor.stop()