Hi,
I am a school teacher and we have some smart boards at school. Some 600, some 800.
I verified your protocol findings on 800 boards.
I think the length byte is more simple. The second digit just counts the data bytes and the
first one is the xor of the data byte count.
0xe1: 1 data byte
0xd2: 2 data bytes
0xc3: 3 data bytes
I could upload a SmartService800.log file.