Some sniffing help appreciated. I'm now completely stuck.

[ripvega]

Latest firmware used?

Be sure you tried the latest release or the newest binary of the firmware!

Not sure how to check the version but the file is RF-Bridge-EFM8BB1.

Information

What device you try to sniff data from? Description? Brand and type?

Foxdry remote.
Model SY10-02A

This is a simple rf remote and I only need the codes from two of the buttons.

Sniffed data

Post your sniffed data by command 0xB1 or 0xA6.

I have the code from the up button, and this works:
AAB04F060802DA01F40140008200D2139CD092B092B0B0B09292829292B0B0B082B0B082B0B0828282B082828282B08282B0B0B0B0B0B0B082B0B0B0B0C0C0C0C0B0C0C0C0C082C08282C0C08282C0C0828155

I have been relentlessly trying to get the 'down' button code without success. It seems that the code changes.

I have been sniffing using home assistant services and ESPhome: ESPHome: spa_rf_bridge_start_bucket_sniffing

This is how I got the 'up' button code.

The 'down' codes show up as per these examples:

[08:34:46][I][rf_bridge:209]: Raw Bucket Sniffing on
[08:34:46][D][rf_bridge:037]: Action OK
[08:34:53][I][rf_bridge:104]: Received RFBridge Bucket: AA B1 03 0276 00E6 1388 A081908190909081818181819090908190908190908181819081818181908181909090909090909081909090909090909090908190908190909081909081908181 55
[08:35:09][I][rf_bridge:209]: Raw Bucket Sniffing on
[08:35:09][D][rf_bridge:037]: Action OK
[08:35:15][I][rf_bridge:104]: Received RFBridge Bucket: AA B1 03 026C 00E6 1388 A081908190909081818181819090908190908190908181819081818181908181909090909090909081909090909090909090908190908190909081909081908181 55
[08:35:29][I][rf_bridge:209]: Raw Bucket Sniffing on
[08:35:29][D][rf_bridge:037]: Action OK
[08:35:34][I][rf_bridge:104]: Received RFBridge Bucket: AA B1 03 00B4 028A 0294 281818 55
[08:35:41][I][rf_bridge:209]: Raw Bucket Sniffing on
[08:35:41][D][rf_bridge:037]: Action OK
[08:35:49][I][rf_bridge:104]: Received RFBridge Bucket: AA B1 03 0230 0118 026C 281819 55

All of the above are from the same button press.

I've then run the codes through the BitBucket converter and used ESPHome: spa_rf_bridge_send_raw to test, without success.

I'd appreciate any help in understanding where to go from here.