Old sonoff (itead) devices - DW1, PIR2

[alaunay]

Hi,

I found in a box some old (but new...) devices from Sonoff/itead, which were lying for years.

They are:

• Sonoff Sensor - PIR2 (and noted in the back of the product CT60-WIRELESS-ANTI-PET)
• Sonoff DW1 (magnetic contact detector)

They are recognized as proto 30, generic-remote:

PIR2:
Mar 2 19:25:41 9b13b3f4-rtl433-next rtl_433 {"time":"2026-03-02 20:25:41","protocol":30,"model":"Generic-Remote","id":53950,"cmd":222,"tristate":"1Z0XX11X1Z1X"}
Mar 2 19:25:41 9b13b3f4-rtl433-next rtl_433 {"time":"2026-03-02 20:25:41","protocol":30,"model":"Generic-Remote","id":53950,"cmd":222,"tristate":"1Z0XX11X1Z1X"}
(...)
repeated a dozen time, probably when it catches movement

DW1:
Mar 2 19:23:41 9b13b3f4-rtl433-next rtl_433 {"time":"2026-03-02 20:23:41","protocol":30,"model":"Generic-Remote","id":32683,"cmd":17,"tristate":"Z111XXX10Z0Z"}
Mar 2 19:23:41 9b13b3f4-rtl433-next rtl_433 {"time":"2026-03-02 20:23:41","protocol":30,"model":"Generic-Remote","id":32683,"cmd":17,"tristate":"Z111XXX10Z0Z"}
(...)
repeated 43 times when the magnet is separated.

From what I gathered from other tickets, I could make use of them by adding a decoder... But I'm uncertain how to do that. The other idea that come to my mind is just to put them in the trash, but I have moral problems trashing out working hardware -- at least not without giving them a chance.

BTW, thanks for the software, it does perfectly decode my car TPMS and my AmbientWeather sensors, and that is far more of use than those old sensors :)

[zuckschwerdt]

I think I had those too. They are simple EV1527 senders. Measure the PWM timings with -A then adapt one of the EV1527 flex decoders. These should be similar (and might already work):
https://github.com/merbanan/rtl_433/blob/master/conf/EV1527-PIR-Sgooway.conf
https://github.com/merbanan/rtl_433/blob/master/conf/EV1527-DDS-Sgooway.conf
Let us know what you find or possibly PR the conf files, I don't think I'll be able to still find mine :)

[alaunay]

Mar 2 21:08:16 9b13b3f4-rtl433-next rtl_433 {"time":"2026-03-02 22:08:16","model":"EV1527-SONOFF-DW1","count":1,"num_rows":1,"len":25,"data":"8054ee8","code":8410350}

I'm not sure what to do with that. Well, for the DW1 anyway, this means "open", and there's no signal when it's closed... I'm unsure about this. I'd like to get the state: is it open or closed ? :) Probably the wrong device for that. That might be fine for security though.

Right now, the decoder looks like this, I took bit and pieces from analyze_pulses:

decoder {
        n=EV1527-SONOFF-DW1,
        m=OOK_PWM,
        s=440,
        l=1316,
        r=1288,
        g=0,
        t=0,
        y=128,
        bits>=24,
        bits<=25,
        get=@0:{24}:code,
        unique
}

But that's black magic for as far as I'm concerned :)

[zuckschwerdt]

There is bit of explanation on decoder arguments with rtl_433 -X

The 0x8054ee is 8410350 decimal, that's all of the transmissions data, one 24 bit number.

The EV1527 protocol has the possibility of variable data, but most times just a single (motion / opened) code is used.