Hue Dimmer Switch Connected to ST

Because my Sunday night was clearly not exciting enough, I decided to crack open a dimmer only to find… Test points! including a serial port. Much rummaging and some jiggery pokery later said serial port outputs logs from the dimmer.

Originally I was hoping to snoop on the traffic between the cpu and zigbee chip, but they are the same chip.


Output of it booting while paired to ST

[Log,Info,Switch,MCUCR=0x00,LockBits=0xFC,LowFuse=0xF6,HighFuse=0x9A,ExtFuse=0xFE]
[Log,Info,Switch,devsig=0x1EA803]
[Log,Info,S_DeviceInfo,Booting into normal mode...]
[Log,Info,S_DeviceInfo,DeviceId: HueDimmerSwitch-US]
[Log,Info,N_Security,LIB4.5.101]
[Log,Info,N_Security,KeyBitMask,0x0012]
[Log,Info,SC_BatteryMeter,Vbat=2563, adcValue=549, calMask=3]
[Log,Info,AC_OTAUpgrade,signature=FFFFFFFF, status=FF]
[Log,Info,Switch,errs=0,lastErr=NULL@0]
[Log,Info,Switch,Platform 0.65.1: r15377, BC_V3.2.0_0.5_M: r15377]
[Log,Info,Switch,Product version Switch 5.45.1.15767,built by LouvreZLL]
[Log,Info,Switch,N_Watchdog_GetResetReason 3]
[Log,Info,AC_Commissioning,NwkAddr: 0x2145, Ch: 19, Pan: 0x2A33, NwkUpdId: 2, ExtPanID: E8C3F529C7899A14]
[TH,Ready,0]

Hue Connected boot

ÿÿÿÿÿÿÿ
[Log,Info,Switch,MCUCR=0x00,LockBits=0xFC,LowFuse=0xF6,HighFuse=0x9A,ExtFuse=0xFE]
[Log,Info,Switch,devsig=0x1EA803]
[Log,Info,S_DeviceInfo,Booting into normal mode...]
[Log,Info,S_DeviceInfo,DeviceId: HueDimmerSwitch-US]
[Log,Info,N_Security,LIB4.5.101]
[Log,Info,N_Security,KeyBitMask,0x0012]
[Log,Info,SC_BatteryMeter,Vbat=2777, adcValue=594, calMask=3]
[Log,Info,AC_OTAUpgrade,signature=FFFFFFFF, status=FF]
[Log,Info,Switch,errs=0,lastErr=NULL@0]
[Log,Info,Switch,Platform 0.65.1: r15377, BC_V3.2.0_0.5_M: r15377]
[Log,Info,Switch,Product version Switch 5.45.1.15767,built by LouvreZLL]
[Log,Info,Switch,N_Watchdog_GetResetReason 3]
[Log,Info,AC_Commissioning,NwkAddr: 0x2B4B, Ch: 20, Pan: 0xA40D, NwkUpdId: 3, ExtPanID: 89D9B1AA5E2B1A73]
[TH,Ready,0]

Those are almost identical, But here is an odd log. This is connected to ST you can see that it drops some messages from the hub that are too old when it wakes up but after mashing buttons I finally got it to redlight and drop off the network. Note the line marked with *** it thinks it received a commisioning request to connect to a network with an ID of
0000000000000000. I suspect it did exactly that and now its off in la la land.

[Log,Info,Switch,MCUCR=0x00,LockBits=0xFC,LowFuse=0xF6,HighFuse=0x9A,ExtFuse=0xFE]
[Log,Info,Switch,devsig=0x1EA803]
[Log,Info,S_DeviceInfo,Booting into normal mode...]
[Log,Info,S_DeviceInfo,DeviceId: HueDimmerSwitch-US]
[Log,Info,N_Security,LIB4.5.101]
[Log,Info,N_Security,KeyBitMask,0x0012]
[Log,Info,SC_BatteryMeter,Vbat=3284, adcValue=701, calMask=3]
[Log,Info,AC_OTAUpgrade,signature=FFFFFFFF, status=FF]
[Log,Info,Switch,errs=0,lastErr=PWRON@0]
[Log,Info,Switch,Platform 0.65.1: r15377, BC_V3.2.0_0.5_M: r15377]
[Log,Info,Switch,Product version Switch 5.45.1.15767,built by LouvreZLL]
[Log,Info,Switch,N_Watchdog_GetResetReason 0]
[Log,Info,AC_Commissioning,NwkAddr: 0xE81F, Ch: 19, Pan: 0x0F41, NwkUpdId: 3, ExtPanID: E8C3F529C7899A14]
[TH,Ready,0]
[Log,Info,Switch,Dropping stale message from 0x0000]
[Log,Info,Switch,Dropping stale message from 0x0000]
[Log,Info,S_Nv,CompactSector(s=0)]
[Log,Info,S_Nv,CompactSector(s=1)]
[Log,Info,S_Nv,CompactSector(s=0)]
*** [Log,Info,AC_Commissioning,NwkAddr: 0xE81F, Ch: 19, Pan: 0x0F41, NwkUpdId: 3, ExtPanID: 0000000000000000]