Marantz MCR-610

[M4T VW]

So this is my next driver to look at for the time being.

http://www.marantz.co.uk/uk/products/pag...ediamcr610

It can be controlled via an iPhone app very well, But not via a web interface. (Only a very basic IP settings screen if you get stuck)

Running the device through a port checker, This is the result.
Scanning 192.168.0.9 [65535 ports]
Discovered open port 80/tcp on 192.168.0.9
Discovered open port 5001/tcp on 192.168.0.9
Completed SYN Stealth Scan at 15:12, 27.33s elapsed (65535 total ports)

Not sure what 5001 is but it seems to be listening on port 80 at least.

Had to run it though a packet sniffer to see what the iphone was putting out to control it.
It seems to be using something called "GoAhead" which is confirmed on this page. http://scriptkiller.de/en/a61/computer_e..._m-cr610_/
I did a quick "power on" command with the iPhone app to see what it sent.

From: IP 192.168.137.68
To: IP 192.168.0.9
Message: GET /goform/formiPhoneAppPower.xml?1+PowerOn

There is also this in the list which i think was just loading the values of the current status.
Message: POST /goform/AppCommand.xml

Sadly there is no protocol out there yet for this.

Has anyone seen anything like this before? What would be a good driver to use as a starting point? I have tried the current Marantz driver but I'm going to have to rip it apart first as it wont even connect.

Cheers
Mat

[Dean Roddey]

There's already a driver for the Marantz 8801, but it's a simple telnet protocol (basic new line delimited text) which is on port 23, so doesn't look like that was brought forward to this line. So the port 5001 must be something different. Though, you could always use a serial terminal and connect to port 5001 and make some changes on the Marantz and see if anything readable gets spit out. That would give you some idea of the type of protocol. They may publish the protocol, since they do for plenty of other models (all of which that I know of share the same telnet style as the 8801.)

[M4T VW]

Connected to 5001 and nothing changes, It's just dead by the looks of it.
I will drop marantz an e-mail to get things started first.

Hmm, Some strange things on port 23 (Telnet) On the scan it said it was not open but im getting a respose back.
"BDFILE NAME 100000173005616" for playing a CD

[Dean Roddey]

Try doing some things like power off and on and changing input source and see what it spits out on port 23. Tell the terminal to add line feeds or you may just sit there and overwrite the same line over and over and not really see what it's spitting out, since the Marantz may only send CR line ends.

[M4T VW]

Sorry for delay, Manic at work.
Here is a feed from the telnet port 23. The key presses were (It was already on tuner) CD, Tuner, Off.
It seems to be a readout of what it's doing rather than a command as such. Any use to us?

BridgeCo AG Telnet server

TFDA12B 225.648
TFDA12B 225.648
TFDANAMEBBC R2
TFDA12B 225.648
TFDA12B 225.648
TMDA
TMANAUTO
TFDA12B 225.648
TFDANAMEBBC R2
SICD
BDFOLDER NAME
BDFILE NAME
BDSTATUS 4420000100000003000000
PWSTANDBY
SYMOM-CR610EU2
SYMDNOR
PWSTANDBY
SICD
BDFOLDER NAME
BDFILE NAME
MUOFF
MV00
SLP OFF
PSBAS 50
PSTRE 50
PSBAL 50
PSSDB OFF
PSSDI OFF
FV01 02 Heart
FV02 02 BBC R2
FV03
FV04
FV05
FV06
FV07
FV08
FV09
FV10
FV11
FV12
FV13
FV14
FV15
FV16
FV17
FV18
FV19
FV20
FV21
FV22
FV23
FV24
FV25
FV26
FV27
FV28
FV29
FV30
FV31
FV32
FV33
FV34
FV35
FV36
FV37
FV38
FV39
FV40
FV41
FV42
FV43
FV44
FV45
FV46
FV47
FV48
FV49
FV50
SICD
BDFOLDER NAME
BDFILE NAME
SICD
BDFOLDER NAME
BDFILE NAME ▒▒
SICD
BDFOLDER NAME
BDFILE NAME ▒▒
BDSTATUS 6620001100000003000000

PWON
SICD
BDFOLDER NAME
BDFILE NAME
BDSTATUS 6620001100000003000000
BDSTATUS 442000B100000173005616
TFDA12B 225.648
TFDA12B 225.648
TFDANAMEBBC R2
TFDA12B 225.648
TFDA12B 225.648
TMDA
TMANAUTO
TFDA12B 225.648
TFDANAMEBBC R2
SICD
BDFOLDER NAME
BDFILE NAME
BDSTATUS 4420000100000003000000
PWSTANDBY
SYMOM-CR610EU2
SYMDNOR
PWSTANDBY
SICD
BDFOLDER NAME
BDFILE NAME
MUOFF
MV00
SLP OFF
PSBAS 50
PSTRE 50
PSBAL 50
PSSDB OFF
PSSDI OFF
FV01 02 Heart
FV02 02 BBC R2
FV03
FV04
FV05
FV06
FV07
FV08
FV09
FV10
FV11
FV12
FV13
FV14
FV15
FV16
FV17
FV18
FV19
FV20
FV21
FV22
FV23
FV24
FV25
FV26
FV27
FV28
FV29
FV30
FV31
FV32
FV33
FV34
FV35
FV36
FV37
FV38
FV39
FV40
FV41
FV42
FV43
FV44
FV45
FV46
FV47
FV48
FV49
FV50
SICD
BDFOLDER NAME
BDFILE NAME
SICD
BDFOLDER NAME
BDFILE NAME ▒▒
SICD
BDFOLDER NAME
BDFILE NAME ▒▒
BDSTATUS 6620001100000003000000

[Dean Roddey]

It's basically the same protocol as the one used by the existing Marantz drivers, though of course the details will change. Those are asynchronous reports of things that are happening. SICD means you changed the source input to CD, MUOFF means you turned mute off, MV00 means the master zone volume was set to 0, and so forth. Those are the same commands as other Marantz units use.

However, writing a driver for this type of unit is fairly complex because you have to deal with async commands. And you'd also have to find the actual protocol document for that unit to know what all of the values are.

The simple ones are likely to be the same. If you used the terminal to send something like:

PWON

with a carriage return, that should power on the main zone. Is this one multi-zone? If so, that further complicates things, because they are often inconsistent about what commands/options are available for the non-primary zones.

You can look at the existing Marantz drivers for an idea of what would be involved. The other thing is that, if doing a driver for this guy, it wouldn't make any sense to do a non-V2 compliant one. The 8801 Marantz driver is a V2 compliant one, so that would be the one to look at.

[M4T VW]

Hi Dean

Sending PWON did indeed turn the unit on.
This is not multizone, It's just a glorified CD player really. There is a seperate "Zone" but it's just another set of outputs that shares the same as what the main zone is listening to so its just an on/off swich with volume.

I have input the 8801 code into CQC and it says "Waiting for comm resourse" so will need to take the code apart to get it to connect first.

[Dean Roddey]

Yeh, the 8801 assumes multiple zones, so it's not going to remotely work as is. All of the 2nd/3rd zone stuff will have to be removed. And even then the MCR may have options for inputs and audio modes and such that the 8801 doesn't expect and that will cause it to fail.

[M4T VW]

Ok, managed to get the diver to connect. It was sending a query to a field that does not exist on my device which is why the error starts. I have removed this for now and managed to get the driver to connect. I sent out a power off command and it turned the device off, sadly it won't turn it on yet but I have run out of time to look at it. I think the priority is to remove all the Z1, Z2 zone stuff as this does not use any of that. As you say I could do with the protocol list but I just don't think it's out there yet.

[M4T VW]

Managed to get the protocol from Marantz!

http://www.addy.co.uk/M-CR610_510_PROTOCOL_Ver1.0.0.pdf

With a quick glance, How much different is it from the 8801?