Support for Typhur Sync Gold Dual/Quad

[kevin-david]

I started looking into how to add support for this meat thermometer. I have the dual version, so the captures I had were from both probes running at once. These have 6 different temperature sensors (5 internal & one ambient) per probe so it ought to be fun to fully decode.

Here's what I've gathered so far: typhur-sync-gold-samples.zip. I'm not positive, but based just visual observation from a few of these files at https://triq.org/pdv/, I think there is some other 915MHz-band traffic flying around too.

Those were captured with temperatures around ~210-230F for the Ambient Sensors, and ~140F-165F Internal Temperatures for the internal probe sensors (next time I take a stab at this I'll get more exact)

Some things that looked pattern-y with rtl_433 -A -r, especially for files in the auto-decoded folder. The suggested decoder was rtl_433 -R 0 -X 'n=name,m=FSK_PCM,s=12,l=12,r=12288' *.cs16

{280}d5555555555555552baa10df00507a2bb00df18dc40da80d9c8da1820800ed8546de00
{279}00000000000000002baa10df00507a2bb20df18dcb8dad0da18da1820800ef8514a83e
{279}0000000000000000035461b100a0f457cb1e711ccb1cfe1c341d0d040101f90a8f7f02
{280}fd555555555555552baa10df00507a2bb20df18dcc0daf8da40da1820800f18559d580
{280}00000000000000002baa30d880507a2be60f388e658e7f0e1a8e87020080fe850eb580

Maybe preamble=0507a2b based on the above? But wasn't obvious to me why those earlier bits were changing.

One example of decoded data here

Full command line output for one capture

rtl_433 version 24.10 (2024-10-30) inputs file rtl_tcp RTL-SDR with TLS
[Input] Test mode active. Reading samples from file: g019_915M_1000k.cs16
Detected FSK package	@0.014538s
Analyzing pulses...
Total count:   35,  width: 11.97 ms		(11969 S)
Pulse width distribution:
 [ 0] count:    1,  width:    0 us [0;0]	(   0 S)
 [ 1] count:   22,  width:  103 us [98;105]	( 103 S)
 [ 2] count:    2,  width:  470 us [418;522]	( 470 S)
 [ 3] count:    6,  width:  208 us [208;211]	( 208 S)
 [ 4] count:    2,  width:  313 us [312;314]	( 313 S)
 [ 5] count:    1,  width:  728 us [728;728]	( 728 S)
 [ 6] count:    1,  width:    4 us [4;4]	(   4 S)
Gap width distribution:
 [ 0] count:    1,  width: 1042 us [1042;1042]	(1042 S)
 [ 1] count:   28,  width:  103 us [92;106]	( 103 S)
 [ 2] count:    2,  width:  208 us [208;208]	( 208 S)
 [ 3] count:    2,  width:  469 us [417;521]	( 469 S)
 [ 4] count:    1,  width:  833 us [833;833]	( 833 S)
Pulse period distribution:
 [ 0] count:    2,  width:  990 us [938;1042]	( 990 S)
 [ 1] count:   20,  width:  207 us [195;209]	( 207 S)
 [ 2] count:    4,  width:  573 us [522;626]	( 573 S)
 [ 3] count:    5,  width:  313 us [311;314]	( 313 S)
 [ 4] count:    1,  width:  416 us [416;416]	( 416 S)
 [ 5] count:    2,  width:  780 us [729;832]	( 780 S)
Pulse timing distribution:
 [ 0] count:    1,  width:    0 us [0;0]	(   0 S)
 [ 1] count:   50,  width:  103 us [92;106]	( 103 S)
 [ 2] count:    4,  width:  469 us [417;522]	( 469 S)
 [ 3] count:    8,  width:  208 us [208;211]	( 208 S)
 [ 4] count:    2,  width:  313 us [312;314]	( 313 S)
 [ 5] count:    2,  width:  780 us [728;833]	( 780 S)
 [ 6] count:    1,  width:    4 us [4;4]	(   4 S)
 [ 7] count:    1,  width: 1042 us [1042;1042]	(1042 S)
 [ 8] count:    1,  width:    0 us [0;0]	(   0 S)
Level estimates [high, low]:   1000,    210
RSSI: -24.3 dB SNR: 13.6 dB Noise: -37.8 dB
Frequency offsets [F1, F2]:    1721,  -2926	(+26.3 kHz, -44.6 kHz)
Guessing modulation: No clue...

Detected FSK package	@0.086616s
Analyzing pulses...
Total count:   78,  width: 3.41 ms		( 3409 S)
Pulse width distribution:
 [ 0] count:    4,  width:   65 us [62;74]	(  65 S)
 [ 1] count:   52,  width:   12 us [11;14]	(  12 S)
 [ 2] count:    4,  width:   37 us [36;38]	(  37 S)
 [ 3] count:   16,  width:   24 us [24;27]	(  24 S)
 [ 4] count:    2,  width:   50 us [50;50]	(  50 S)
Gap width distribution:
 [ 0] count:   55,  width:   12 us [11;14]	(  12 S)
 [ 1] count:    5,  width:   25 us [25;26]	(  25 S)
 [ 2] count:    4,  width:   49 us [48;51]	(  49 S)
 [ 3] count:    2,  width:  124 us [112;137]	( 124 S)
 [ 4] count:    6,  width:   66 us [62;75]	(  66 S)
 [ 5] count:    5,  width:   37 us [36;39]	(  37 S)
Pulse period distribution:
 [ 0] count:   11,  width:   75 us [61;88]	(  75 S)
 [ 1] count:   41,  width:   24 us [24;27]	(  24 S)
 [ 2] count:   11,  width:   37 us [37;39]	(  37 S)
 [ 3] count:    9,  width:   54 us [49;64]	(  54 S)
 [ 4] count:    2,  width:  162 us [150;174]	( 162 S)
 [ 5] count:    3,  width:  100 us [99;101]	( 100 S)
Pulse timing distribution:
 [ 0] count:   10,  width:   66 us [62;75]	(  66 S)
 [ 1] count:  107,  width:   12 us [11;14]	(  12 S)
 [ 2] count:    9,  width:   37 us [36;39]	(  37 S)
 [ 3] count:   21,  width:   25 us [24;27]	(  25 S)
 [ 4] count:    6,  width:   49 us [48;51]	(  49 S)
 [ 5] count:    2,  width:  124 us [112;137]	( 124 S)
 [ 6] count:    1,  width:   87 us [87;87]	(  87 S)
Level estimates [high, low]:   2647,    197
RSSI: -15.8 dB SNR: 22.6 dB Noise: -38.4 dB
Frequency offsets [F1, F2]:    2630,  -1691	(+40.1 kHz, -25.8 kHz)
Guessing modulation: Non Return to Zero coding (Pulse Code)
view at https://triq.org/pdv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
Attempting demodulation... short_width: 12, long_width: 12, reset_limit: 12288, sync_width: 0
Use a flex decoder with -X 'n=name,m=FSK_PCM,s=12,l=12,r=12288'
[pulse_slicer_pcm] Analyzer Device
codes     : {280}fd555555555555552baa10df00507a2bb20df18dcc0daf8da40da1820800f18559d580

---

Product link: https://www.typhur.com/products/sync-gold-dual or https://www.typhur.com/products/sync-gold-quad

FCC Info - I think this is for the probe: https://fccid.io/2BEFM-WTP3000. This is for the base: https://fccid.io/2BEFM-WT1000R

The base also has Bluetooth and Wifi support (started reverse-engineering the Wifi here), so it would be possible to capture data that way too, but I figured the RF data would be fun too.

[zuckschwerdt]

It seems there are three different senders in the samples, the slower signal at 915.0M, e.g. g021_915M_1000k.cs16, then the fast signal at 915.0M, e.g. g005_915M_1000k.cs16 and lastly the slow signal at 914.6M, e.g. g009_915M_1000k.cs16. And some others too like the first one in g015_915M_1000k.cs16.

You need to narrow it down in a quieter environment or without antenna and close to the sender.

12 µs sounds awefully fast for just a temperature probe.