If you don't know what is a nabaztag, take a look here
The goal of this page is to add all information about the communication between the toy and the server.
Lot of work were made by Edouard on this page.
All information that are in italics are just supposition or unknown. Feel free to complete if you have more information. Everybody can edit this page by clicking "edit" on the bottom of this page.
Ad-Hoc mode Configuration
There's 2 web page on the Nabaztag a.htm and b.htm
a.htm
Display the configuration form.
b.htm
Execute the form. It accepts GET values:
| Name | Value | Comment |
| q | 1 | ??? |
| r | 1 | ??? |
| k | SSID | Name of the Wifi network |
| l | 0 / 1 | Authentication mode (0:Open/1:Shared) |
| n | WEP Key | Wep key in hexa or text form (11:22:33:44:55:66:77:88:99:AA:BB:CC:DD) |
| f | on / off | DHCP enabled |
| g | | IP address (if DHCP not used) |
| h | | Mask (if DHCP not used) |
| i | | Gateway (if DHCP not used) |
| j | | IP address of DNS server (if DHCP not used) |
| c | on / off | Proxy enabled |
| d | | Proxy server address |
| e | | Proxy server port |
| a | p.nabaztag.com | Address of the violet server |
| b | 80 | Port of the server |
| y | Update | update or update and reboot |
| Name | Value | Comment |
| sn | 000000000000 | Serial Number of the Nabaztag |
| v | 14 | Version of the Nabaztag (here 1.4) |
| st | 0 / 1 | Status. First request is always 0 and then always 1 |
| ts | 00230210 | ??? |
| sd | 0002 | #sdv sd Value |
| tc | 00230210 | ??? |
| tn | 00203077 | ??? |
sd Values
This is the way the Nabaztag warns the server that something change on it.
| Value | Comment |
| 0002 | Nabaztag finished an event. In this case 'ts' contains the EventId? of the finised event. |
| 0003 | We press its head |
| 0004 | We long press its head |
| XXXX | We move its ears position with our hands'' |
Notes:
- Each time there's a 'sd', there's also a 'ts' value. These 2 values are linked.
- 'tc' and 'tn' are some pointer/index on events.
Example: http://193.149.99.27/vl/FR/p3.jsp?sn=000000000000&v=14&st=01&ts=00230210&sd=0002&tc=00230210&tn=00203077
The answer of the server is a binary packet that contains a set of message.
Header
A packet always begins with a byte with the value 7F. Then one or more messages follow. It ends with a byte with the value FF followed by one or more garbage 0A. If we remove the garbage, everything works fine.
Message
Message Types
| Type | Comment |
| 03 | Delay Message |
| 04 | Led Message |
| 05 | Download Message |
Message Type 03
Delay before each query.
| Offset | Size | Comment |
| 00 | 1 | Delay in deci-seconds (01=10s, 02=20s ...), default=03 |
Example: a complete packet 7F0300000101 will set the delay between 2 queries to 10 seconds.
Message Type 04
Led and Ears Patterns.
Led Pattern
YYY XXX means that all three led are in Yellow (Y) and then all led are off (X).
There are too much values, don't know if there s logical way to create these number.
Tempo is just here to say that the switching between color are fast or not. 2s is slow, -2s is fast.
| Value | Tempo | Color Pattern |
| 0100 | | YYY XXX |
| 0101 | | BXB XYX |
| 0102 | | BBB XXX |
| 0103 | | BXB BXX XXB XBX BXX |
| 0104 | | BXX XBX BXX XBX XXB XBX XXB XBX |
| 0105 | | YBX XYB YBX XBY BYX |
| 0106 | | RXR XXX |
| 0107 | 2s | XRX RXR XXX |
| 0108 | 1s | XRX RXR XXX |
| 0109 | 0s | XRX RXR XXX |
| 010A | -1s | XRX RXR XXX |
| 010B | -2s | XRX RXR XXX |
| 010C | -3s | XRX RXR XXX |
| 010D | -2s | XXW XWX WXX |
| 010E | -1s | XXW XWX WXX |
| 010F | 0s | XXW XWX WXX |
| 0110 | 1s | XWX XXX |
| 0111 | 1s | WXX XWX XXW |
| 0112 | 0s | WXX XWX XXW |
| 0113 | -1s | WXX XWX XXW |
| 0114 | 0s | PXX XPX XXP XPX |
| 0115 | 0s | XPX XXX |
| 0116 | 0s | PXP XXX |
| 0117 | 0s | PPP XXX |
| 0118 | 2s | LLL XXX |
| 011A | 2s | LLL XXX |
| 011B | 2s | LLL XXX |
| 011C | 2s | LLL XXX |
| 011D | 0s | LXX XLX LLX LLL XLL ... |
| 011E | 0s | LXX XLX LLX LLL XLL ... |
| 011F | 0s | LXX XLX LLX LLL XLL ... |
| 2000 | | All black |
| 4000 | 0s | BXX BXB XXB ... |
| 8000 | 1s | BXX XBX BXX XBX XXB XBX XXB XBX |
| F000 | 1s | YYY XXX |
| ... | ... | ... |
Ears Pattern
When the Ears Pattern change, a little music is playing and ears move. Value is between 00 and 10 (included).
Warning: The value 11 makes ear to loop always and always and do really weird things, don't use this value or above.
Nose Pattern
This is a one byte value that select a color:
| Value | Color |
| 00 | Off |
| 01 | Red |
| 02 | Green |
| 03 | Yellow |
| 04 | Blue |
| 05 | Purple |
| 06 | Light Blue |
| 07 | White |
| 08 | Pale White |
| 09 | Pale Pink |
| 0A | Pale Green |
| 0B | Pale Yellow |
| 0C | Pale Blue |
| 0D | Pale Purple |
| 0E | Pale Light Blue |
| 0F | Orange |
Example: a complete packet 7F040000177FFFFFFF01030000000000000000000000000000011001FF will set the 3 led to random blue, left ear to one position, right ear to one position behind and the nose blink red.
Message Type 05
TODO
Message Type 06
Repeat the last message.
| Offset | Size | Comment |
| 00 | 4 | 7FFFFFFF |
Example: a complete packet 7F060000047FFFFFFFFF will make the Nabaztag repeates the last message.
