The data field length has been increased from 8 to 12 bits, and there is an aditional stop bit in the middle of the frame.
For more details, see Wiki : http://wiki.samygo.tv/index.php5/Ethern ... _Interface
Of course, I tried to enter the setup menu

For TV, it is pretty straightforward (codes are listed in exeDSP)
http://IP/ir.htm?data=1F&type=0&device=0707
http://IP/ir.htm?data=3B&type=0&device=0707
and that's it, you've got the setup menu !
For BD, the IR codes are translated by the Front Panel microcontroler...
I tried to scan all the possible codes (it took more than 1 day !) and see the feedback on the Serial Console (filtering BDKeyInput strings).
Unfortunately, I did not find the KEY_FACTORY IR code.
Maybe I missed it...
The known codes are listed here : http://wiki.samygo.tv/index.php5/Key_codes
Anyone interested to redo the scan and discover the KEY_FACTORY code ?