Hi , I need advice from every one who knows to tell me information about a brut-force software which is capable to find the factory cipher key code.
I would appreciate it if some one help me with that big mess.
Unfortunately the Hexing Meters company never responded to my emails for support!!
And I haven't any other way to connect proper with my meter without the default keys.
Hi, That is basically…
Hi,
That is basically possible, but it will take a lot of time. Block Cipher key 16 bytes long value and looping all possible combinations will take a long time.
You need to read the meter with manufacturer's application to get the encrypted frames. If you do it, I can try with one Gurux app if you add encrypted messages here.
BR,
Mikko
Thank you for your support…
Thank you for your support Mr. Mikko, I don't have the manufacturer's application and I have try search it many many times in the web but is not possible for me . Do you know any server to be able to download the application or some user to share the application ?? The manufacturer never give any support and never responded to my emails till now.
Hi, There are several…
Hi,
There are several parameters that must be met or the meter will not respond.
It's possible that I can check those parameters from the communication log, but you need an application to read your meter. Without that, it's not possible.
I hate to say it, but I think the easiest way is to change the meters to products from another manufacturer.
BR,
Mikko
Hi, I have connected to the…
Hi, I have connected to the meter with Gurux director software. Here is the communication with the meter.
21:49:04 09:49:04.402 Info Opening
21:49:04 09:49:04.418 Info Ρυθμίσεις σειριακής θύρας: Όνομα θύρας: COM3 Ποσοστό Baud: 300 Κομμάτια δεδομένων: 7 Ισοτιμία: Even Διακοπή Bits: One Έλεγχος ροής: None Eop: None
21:49:04 09:49:04.434 Info Open
21:49:05 09:49:05.459 Sent 2F 3F 21 0D 0A
21:49:05 09:49:05.915 Received 2F
21:49:05 09:49:05.946 Received 2F
21:49:05 09:49:05.977 Received 48
21:49:06 09:49:06.013 Received 58
21:49:06 09:49:06.044 Received 45
21:49:06 09:49:06.091 Received 35
21:49:06 09:49:06.125 Received 5C
21:49:06 09:49:06.157 Received 35
21:49:06 09:49:06.188 Received 48
21:49:06 09:49:06.219 Received 58
21:49:06 09:49:06.250 Received 45
21:49:06 09:49:06.282 Received 33
21:49:06 09:49:06.313 Received 31
21:49:06 09:49:06.344 Received 30
21:49:06 09:49:06.375 Received 0D
21:49:06 09:49:06.375 Sent 06 32 35 32 0D 0A
21:49:08 09:49:08.375 Info Closing
21:49:08 09:49:08.500 Info Closed
21:49:08 09:49:08.500 Info Opening
21:49:08 09:49:08.500 Info Ρυθμίσεις σειριακής θύρας: Όνομα θύρας: COM3 Ποσοστό Baud: 9600 Κομμάτια δεδομένων: 8 Ισοτιμία: None Διακοπή Bits: One Έλεγχος ροής: None Eop: None
21:49:08 09:49:08.516 Info Open
21:49:09 Send SNRM request.
TX: 7E A0 07 03 21 93 0F 01 7E
21:49:09 09:49:09.547 Sent 7E A0 07 03 21 93 0F 01 7E
21:49:09 09:49:09.719 Received 7E A0 1E 21 03 73 C3 7A 81 80 12 05 01
21:49:09 09:49:09.735 Received 01 80
21:49:09 09:49:09.750 Received 00 00 01 53 3B
21:49:09
RX: 7E A0 1E 21 03 73 C3 7A 81 80 12 05 01 80 06 01 80 07 04 00 00 00 01 08 04 00 00 00 01 53 3B 7E
21:49:09 Send AARQ request.
TX: 7E A0 2B 03 21 10 FB AF E6 E6 00 60 1D A1 09 06 07 60 85 74 05 08 01 01 BE 10 04 0E 01 00 00 00 06 5F 1F 04 00 62 BE DF FF FF E1 4E 7E
21:49:09 09:49:09.782 Sent 7E A0 2B 03 21 10 FB AF E6 E6 00 60 1D A1 09 06 07 60 85 74 05 08 01 01 BE 10 04 0E 01 00 00 00 06 5F 1F 04 00 62 BE DF FF FF E1 4E 7E
21:49:10 09:49:10.141 Received 7E A0 37 21 03 30 6C 7C E6
21:49:10 09:49:10.157 Received E6 E7 00 61 29 A1 09
21:49:10 09:49:10.172 Received 01 A2 03 02 01 00 A3 05 A1 03 02 01 00 BE
21:49:10 09:49:10.188 Received 10 04 0E 08 00 06 5F 1F 04 00 00 10 10 00
21:49:10 09:49:10.203 Received 7D 00 07 7D EE
21:49:10
RX: 7E A0 37 21 03 30 6C 7C E6 E7 00 61 29 A1 09 06 07 60 85 74 05 08 01 01 A2 03 02 01 00 A3 05 A1 03 02 01 00 BE 10 04 0E 08 00 06 5F 1F 04 00 00 10 10 00 7D 00 07 7D EE 7E
Hi, You can connect without…
Hi,
You can connect without authentication and you can read at least part of the data.
This doesn't tell anything from block cipher keys or is it used.
Check if you can see the values where you are interested in GXDLMSDirector. You can at least read the values, but settings e.g. clock might be harder.
BR,
Mikko
Hi, in Association view on…
Hi, in Association view on the gurux director soft everything I added manually and work fine (read only).
I want to read all the alerts and some of them to reset them .
when I make hardware installation of the meter the tamper alert goes ''active''.
To make proper installation of the cables we must remove the plastic cover of the electric contacts and when I did that the "tamper" alert is active.
How can I reset that with the Gurux software??
I have read also on the Hexing installation manual that after the installation of the meter on the electric GRID we must reset (delete) the errors with the software.
Βecause during installation the meter generate errors and must reset it (delete).
Hi, If you need to reset…
Hi,
If you need to reset values you must change the authentication level. You need to change the client address and password also. The correct values should be on the documents.
BR,
Mikko
Hi, I have only the receipt…
Hi, I have only the receipt that I pay the meters nothing else!!!! No other document included in the boxes also no other document give me the shop(vendor)....nothing.
I know the password only, is…
I know the password only, is : 0000000000000000 (16bit)
and is default from factory for all the Hexing HXE310 meters.
Only that I know from the security keys.
regards
Hi, You need to ask for some…
Hi,
You need to ask for some documents from your vendor. If you don't know the password you can only read the values that you can now read, but it's not possible to write anything for the meter and you can't reset values what you want to.
BR,
Mikko
As I told you I know the…
As I told you I know the password!!!
is : 0000000000000000
when I try to add that pass (change the settings to High level security on Director settings ) the program stacks and stop responding .
Hi, Now you need to know the…
Hi,
Now you need to know the client's address. The client address is different than the meter expects and the frame is ignored. GXDLMSDirector try to establish the connection, but the meter doesn't reply. You can try to solve the client address with HDLC address resolver. You can try with client address other than 0x10. That is for public authentication.
https://youtu.be/BeaWKmyMwuE?si=WU_WdG_NWKxw_VQJ
BR,
Mikko
Hi Mr. Mikko, I have try…
Hi Mr. Mikko, I have try many server address 'numbers'
1
16
4
128
192
32
146
140
120
148
96
but I receive the same error .
can you guess or have any idea what is the correct server address for my meter??
Hi, I believe that your…
Hi,
I believe that your server address is 1 because you can connect without authentication.
The client address is the problem. You must use the correct client address or the meter doesn't reply. The meter manufacturer selects the client address and it can be anything from 1 to 127.
BR,
Mikko
HI, I have try all the…
HI, I have try all the combinations for
client address and server address for:
1
2
3
4
6
7
8
9
10
11
12
13
14
15
client address
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
identical error to all my attempts . What am doing wrong??
do you have experience on issue like that??
After many attempts to…
After many attempts to connect with low security I receive that communication from the meter, it stack again .This is my settings Client address 11 physical server 1 logical server o
17:01:10 05:01:10.933 Info Opening
17:01:10 05:01:10.933 Info Ρυθμίσεις σειριακής θύρας: Όνομα θύρας: COM3 Ποσοστό Baud: 300 Κομμάτια δεδομένων: 7 Ισοτιμία: Even Διακοπή Bits: One Έλεγχος ροής: None Eop: None
17:01:10 05:01:10.933 Info Open
17:01:11 05:01:11.951 Sent 2F 3F 21 0D 0A
17:01:12 05:01:12.437 Received 2F
17:01:12 05:01:12.468 Received 2F
17:01:12 05:01:12.500 Received 48
17:01:12 05:01:12.537 Received 58
17:01:12 05:01:12.584 Received 45
17:01:12 05:01:12.622 Received 35
17:01:12 05:01:12.653 Received 5C
17:01:12 05:01:12.687 Received 35
17:01:12 05:01:12.719 Received 48
17:01:12 05:01:12.738 Received 58
17:01:12 05:01:12.776 Received 45
17:01:12 05:01:12.805 Received 33
17:01:12 05:01:12.838 Received 31
17:01:12 05:01:12.869 Received 30
17:01:12 05:01:12.901 Received 0D
17:01:12 05:01:12.901 Sent 06 32 35 32 0D 0A
17:01:14 05:01:14.906 Info Closing
17:01:15 05:01:15.022 Info Closed
17:01:15 05:01:15.022 Info Opening
17:01:15 05:01:15.022 Info Ρυθμίσεις σειριακής θύρας: Όνομα θύρας: COM3 Ποσοστό Baud: 9600 Κομμάτια δεδομένων: 8 Ισοτιμία: None Διακοπή Bits: One Έλεγχος ροής: None Eop: None
17:01:15 05:01:15.029 Info Open
17:01:16 Send SNRM request.
TX: 7E A0 07 03 23 93 BF 32 7E
17:01:16 05:01:16.047 Sent 7E A0 07 03 23 93 BF 32 7E
17:01:16 05:01:16.232 Received 7E A0 1E 23 03 73 7B CF 81 80 12 05 01 80
17:01:16 05:01:16.248 Received 80
17:01:16 05:01:16.264 Received 00 01 53 3B
17:01:16
RX: 7E A0 1E 23 03 73 7B CF 81 80 12 05 01 80 06 01 80 07 04 00 00 00 01 08 04 00 00 00 01 53 3B 7E
17:01:16 Send AARQ request.
TX: 7E A0 42 03 23 10 CC FC E6 E6 00 60 34 A1 09 06 07 60 85 74 05 08 01 01 8A 02 07 80 8B 07 60 85 74 05 08 02 01 AC 08 80 06 30 30 30 30 30 30 BE 10 04 0E 01 00 00 00 06 5F 1F 04 00 62 BE DF FF FF 51 51 7E
17:01:16 05:01:16.264 Sent 7E A0 42 03 23 10 CC FC E6 E6 00 60 34 A1 09 06 07 60 85 74 05 08 01 01 8A 02 07 80 8B 07 60 85 74 05 08 02 01 AC 08 80 06 30 30 30 30 30 30 BE 10 04 0E 01 00 00 00 06 5F 1F 04 00 62 BE DF FF FF 51 51 7E
17:01:16 05:01:16.549 Received 7E A0 37 23 03 30 D4 C9 E6 E7 00 61 29 A1
17:01:16 05:01:16.565 Received A1
17:01:16 05:01:16.580 Received 01 01 A3 05 A1 03 02 01 0D BE 10 04 0E 08
17:01:16 05:01:16.596 Received 00 06 5F 1F 04 00 00 10 10 00 7D 00 07 6E
17:01:16 05:01:16.611 Received 57
17:01:16
RX: 7E A0 37 23 03 30 D4 C9 E6 E7 00 61 29 A1 09 06 07 60 85 74 05 08 01 01 A2 03 02 01 01 A3 05 A1 03 02 01 0D BE 10 04 0E 08 00 06 5F 1F 04 00 00 10 10 00 7D 00 07 6E 57 7E
17:01:16 05:01:16.611 Sent 7E A0 07 03 23 53 B3 F4 7E
17:01:16 05:01:16.796 Received 7E A0 07 23 03
17:01:16 05:01:16.812 Received 03 73 B9 F5
17:01:16
RX: 7E A0 07 23 03 73 B9 F5 7E
17:01:16 05:01:16.812 Sent 01 42 30 03 0D 0A
If you can help me to connect properly with the meter I will send you donation with my paypal account . Please help
Hi, Try with client…
Hi,
Try with client addresses 1 and 100. You are not doing anything wrong, your settings are just different than the meter expects. I believe that you can establish the connection for the meter as soon as you have found the correct client address value.
BR,
Mikko
Hi, I have try many many…
Hi, I have try many many combinations of client and server addresses. The same result , the program stack again and again!!! The logical server is set '0' is there a chance to be wrong that setting???
Do you know any (or some trick) other way to find the HDLC address?????
Am sure that users from this forum knows the correct settings but not help me , I have see comments that proves the connection at high level with that meter.
Hi, Your client or server…
Hi,
Your client or server address is different than the meter expects. It's always hard if those values are not documented.
The main problem is that manufacturers might have multiple meter models and meter models use different settings.
So even if you can connect with one model, you can't connect to another model with the same settings.
You need to try to get application from the meter vendor. I can get the correct settings if I have the communication log.
I propose you forget this meter if you don't get support from the meter manufacturer.
BR,
Mikko