Wireshark - Capturing and sending IP commands to Sony TV

Hi Guys,

I am trying to use Wireshark (although I have been working in It for 15 years, I have shamefully never used it.)

I would like to capture the commands the Sony Sideview app on an IOS and Andoid device send to the TV.

Command would mute, volume up, etc the TV.

I want to initially capture and send these command from the PC using telnet or Hercules http://www.hw-group.com/products/hercules/index_en.html

Can anyone help me figure out what I need to put into these programs to send the command from PC?

The capture file is attached.  TV is IP address and iPad with Sideview app is

Please change extension to .pcapng to open in wireshark

I have figured out with the attached file that the command to mute is AAAAAQAAAAEAAAAUAw==, but how do I send this again from another program.

Thanks in advance.
Who is Participating?
Happy_ComputingConnect With a Mentor Author Commented:
Hi guys,

I figured this out.

Another forum I posted on indicated in needed to look into protocol reverse engineering, so I learned Debian Linux as this had a open source program for reverse engineering available called netzob.

After learning this program and reading several books on Wire shark. I was able to figure out the handshake between the iPad and the TV and other devices.

I then out this in the custom iPad app and am able to control all the av equipment, lighting and heating from one app.

Going to figure out the alarm if I can next, and but this may not be possible as it is a proper grade 2 security system.
Darrell PorterEnterprise Business Process ArchitectCommented:
An article related to rooting this TV can be found here:

This discusses how to "talk" to the embedded Linux OS on the TV.
Darrell PorterEnterprise Business Process ArchitectCommented:
Also, check out this Sony Editor - I did run it through a zero-day AV process and it shows no malware present
Cloud Class® Course: Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

Darrell PorterEnterprise Business Process ArchitectCommented:
And if you get in to the TV and get prompted for a password, the password is gemstar
Happy_ComputingAuthor Commented:
Wow that for the amazingly quick response.

I am not actually looking to root the TV.

I am just looking to send command to the TV that it will already respond to without rooting.

There is program called Sony virtual remote at  http://falcosoft.hu/softwares.html that already do this similar to the Sony Editor.

What I want to do is replicate this control with simple commands through telnet or hercules (or similar)

Once I have done this I can program the command into apps for the ipad and android like iRule and control lots of devices together (lighting, under floor heating etc.)

iRule already does the basics like turning TV off an on and changing volume, but is missing the command for new 2013 model TV's.

Thanks, but I need more.
Darrell PorterEnterprise Business Process ArchitectCommented:
Okay - if you grab the latest version of the Sony Virtual Remote, which as of this writing is 1.2, and review the ReadMe.txt, does your television have the Get Device Doc entry on the context menu?

Have you looked at this project - https://github.com/lmc/ruby-cers-tv

And a follow-up discussion regarding the use of VR as well as the ruby code mentioned above:

I found quite a number of resources with this search - https://www.google.com/search?num=100&safe=off&q=sony+ircc+commands
Happy_ComputingAuthor Commented:
Hi walkabout,

Thanks again for the links. - I have seen most of these

Maybe I should simply my question as below.

From the captured wireshark dump that is attached, how do I replicate the command send from the iPad on IP address to the TV


but there is a lot of HTTP, POST XML bit as well and I want to know what needs to be entered into telnet or hercules to send these commands.
Happy_ComputingAuthor Commented:
I think I need an answer from someone who is experiences with wireshark and network analysis and can look at my network dump and break it down into the individual command that were sent.

Then tell me how to enter these in quick succession into a program on my PC, so I can replicate the iPad.

Once this works I can use with another iPad app like iRule.
Happy_ComputingAuthor Commented:
Also in answer to Walkabout's question.

The TV does support the IRCC, command as this can be seen in the dump file I attached, but unfortunately does not support the function to read all command the TV does support. and most of the button in the virtual remote program to work.

Although it may have the read command function, the one implemented on the 2011 TV's does not work on the 2013 model.

But I need to replicate this program from the command line or a very basic program like hercules.
Darrell PorterEnterprise Business Process ArchitectCommented:
I will load up the Wireshark dump when I get home in a couple of hours.
Happy_ComputingAuthor Commented:
Do you mean download it Walkabout?

Sorry you confused me.  

Its annoying when most things just work easily and when you get stumped, its difficult, cos not that many people out there who can help.

I'll definitely shout you a couple of beers if you can help though.
Darrell PorterEnterprise Business Process ArchitectCommented:
I will download your wireshark dump to my network analyzer laptop when I get home, then I can provide you a more-informed answer (hopefully) about what commands/ports/protocols you need to use to send the commands.

And I, too, despise when companies don't provide the necessary documentation to allow consumers to produce enhancements to their products which would, in turn, increase the popularity of said products.
Happy_ComputingAuthor Commented:

Is there any way on Experts Exchange to send you my e-mail address without typing it in the post?

I suspect you live in UK as you are on the way home at the same time as I should be and I see an opportunity to make some money if I can get this working and will need people to go on site to program these automation systems.

But I initially need to keep my wife happy and make all this new AV equipment work easily without the 9 remotes we currently have for it all.
>> Is there any way on Experts Exchange to send you my e-mail address without typing it in the post?

Just put it in your Profile, and set it to Show.

You may want to use <at> and <dot> instead of the actual characters. You never know when somebody will figure out how to get a bot somewhere it isn't suppose to be.    ; )
Happy_ComputingAuthor Commented:
I have posted what I learned in the last post, but this and a slightly hint in another forum lead me to solutions.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.