DIY-Multiprotocol-TX-Module
DIY-Multiprotocol-TX-Module copied to clipboard
pascallanger
Traxxas TQi
Hello
Is it possible, to add traxxas TQi ?
Would be great to use my traxxas cars on Radiomaster MT12-)
Thanks
Yes it could be done as it is based on a cyrf6936 RF chip. But I need at least a TX and RX.
@pascallanger I am going to be getting one of these radios soon. I am willing to help out is there any way I could capture the data you need and send it to you if no one is willing to send you a TX & RX? I have the equipment to capture SPI and I2C data. I would just need to know what types of communication (just TX on or just RX on or both) you need and do you need data captured from both the TX and RX or just the TX.
Regards
If you can capture the spi bus of the cyrf6936 on the TX that would be perfect. I would need a bunch of captures: in bind mode with a RX in bind mode, in normal mode steering, throttle, aux...
Hey! That would be great if the Multiprotocol would support Traxxas TQi! With the MT12 a new world of car will be covered. Of course you are working on the basics but what I would like to add is to support the following features:
- support of telemetry; the new ESC in the cars do integrated measurements and transmit them to the receiver; this data is send to Transmitter via telemetry protocol. At least having the Battery status (voltage) would be great
- some settings are done in the transmitter; most of them could be done with mixing inside transmitter; some of them have to be sent to the receiver: TSM stability control setting (gyro setting)
So, @williefeb19 would be cool if you add some measurements while changing TSM setting and for different battery voltages.
Find some details in the manual: https://traxxas.com/sites/default/files/89086-4-OM-EN-R01.pdf
I like the Traxxas cars! But the Traxxas transmitter is very limited and you need a bluetooth module and a smartphone to do setting in a convenient way. Therefore the MT12 would be great. I don't want to hook a phone onto my transmitter in the dirt.
I pulled my controller apart and found that it is not based on the cyrf6936. I found a CC2640 and CC2592. Would the CC2592 be compatible with the CC2500 that is in the 4in1 module? The model controller I have is the Traxxas TQi 6529 if I am not mistaken. I have included a picture of the RF section.
They are emulating the cyrf6936 with this component. The cc2500 can't do it as it is limited to 500kbps max where the cyrf uses 1mbps.
I'm looking at the TQ protocol first (other issue opened) and will look into TQi next. Hopefully TQi is an evolution of TQ.
I'm also willing to help. This is what one of my TQi radios has internally.
I've got 3 or 4 TQi RX/TX pairs, and probably half dozen TQ sets. I've got a BusPirate too, or if there is a different SPI sniffer you prefer, I'd be happy to buy one of those.
@jakezilla Great! Let see what we can do with the hardware you have. Can you do a SPI dump from power on of a TQ radio binding a 6519 RX ? Have you tried my latest code to bind your numerous 6519 RXs?
The controller I have does not seem to have a separate MCU to be able to sniff the SPI bus. So, I don't know how much help I can be unless there is another way to get the data needed.
being that this is one of the most popular surface crawler it would be amazing if we could get this working I have extra receivers and transceivers. has anyone sent the data??
@pascallanger I am also interested in this new protocol and I see that you did some work on TRAXXAS related features. Do you have all the TXs and RCs that you need? Would a bounty of 100 € be welcome?
@jakezilla what model TX and FCC ID is on the TX from your pictures and do you have a 6533 RX to sample with? (6533 appears to be the most advanced TQi RX).
@pascallanger I did attempt Traxxas TQ binding on a 6533 RX using my TX16S and a surface build from earlier this week (https://downloads.multi-module.org/latest-test/). It appears that when the RX enters binding mode if causes the TX to exit binding but the RX LED continues to flash and does not respond to TX inputs (even after power cycle).
My Traxxas TX is similar to @williefeb19 's and my RX similar to @inventor7777 's shown in #927 . These both appear to use the CC2640 MCU/RF chip so I don't think we would be able to attempt decode from these without $$$ RF equipment.
I have: Traxxas model 6528B -2 channel TQi TX w/ FCC ID: XVE-TRX1041 Traxxas model 6533 -5 channel TSM RX w/ FCC ID: XVE-TRX1029
I wonder if it is possible to get data about the CC2640 RF chips off of the FCC filings/patents?
I have RX/tX I'm not currently using it someone have the tech I'm happy to ship if the cost is t crazyThank you Jleftbrane On Mar 6, 2024, at 1:38 PM, inventor7777 @.***> wrote: I wonder if it is possible to get data about the CC2640 RF chips off of the FCC filings/patents?
—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you commented.Message ID: @.***>
The cc2640 is used to emulate the cyrf6936. It's an all in one chip. To work on this profil I need to get my hands on an old TQi TX which still has a cyrf6936.
Is there a model number I have 3 or 4Thank you Jleftbrane On Mar 6, 2024, at 1:53 PM, pascallanger @.***> wrote: The cc2640 is used to emulate the cyrf6936. It's an all in one chip. To work on this profil I need to get my hands on an old TQi TX which still has a cyrf6936.
—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you commented.Message ID: @.***>
Gotcha, I may find time today!Thank you Jleftbrane On Mar 6, 2024, at 1:56 PM, pascallanger @.***> wrote: No idea, you need to open the TX and look at the RX chip.
—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you commented.Message ID: @.***>
So far It appears that only TQi TX with FCC ID: XVE-TRX1017 and XVE-SA10044 have been found to be using the CYRF6936 chip.
Below is a summary of Traxxas LP (XVE) FCC filings I found related to TQ and TQi TX/RX. Filed/Last_Mod,FCC_ID,Device Detail 2023-06-15,XVE-TRX1041,TQi TX 6528B 6529B 6530B 6529A (only integrated MCU/RF?) 2020-02-17,XVE-TRX1029,TQi RX 6533B 5-ch TSM 2020-02-17,XVE-TRX1028,TQi TX 6530B (STM and integrated MCU/RF?) 2018-08-08,XVE-TRX1024,TQi TX 6530B (STM and integrated MCU/RF?) 2018-08-06,XVE-TRX1025,TQi RX 6533B 5-ch TSM 2018-07-16,XVE-TRX1026,TQ/LaTrak RX 6519B 3046B 3-ch? 2018-07-12,XVE-TRX1023,TQ/LaTrak TX 6517B 6516B 3047B 2016-04-14,XVE-TRX1017,TQi TX 6530 6530A 6507R 6529A 6528 6528A 6509R (STM and CYRF6936) 2012-11-16,XVE-SA12163,TQ TX 6516 6517 2011-12-12,XVE-SA10044,TQi TX "6513-4-5, 6507-8-9" (STM and CYRF6936) w/optional iPhone/IPod dock (thanks @Eingehirner) 2011-11-18,XVE-SA10046,TQi RX 6518 (thanks @Eingehirner) 2011-01-06,XVE-SA09218,TQ RX 2218 5-ch
Warning: FCC filings can be updated and often contain poor quality images and misleading information. This information should be considered incorrect and incomplete. Please verify details independently.
Hi, Is there a tutorial or something that we can follow to help contribute to all these new requests? I can code (including basic microcontroller stuff like Arduinos), I know how to use an oscilloscope and a logic analyzer, but I wouldn't know how to get started on this RF emulation stuff. Is there a guide so that the community can help?
I have a couple of Traxxas TQi radios. Maybe I can send out one to you as well. I have a Model 6528 from 2016 (And the latest 6530B which seems to not be useful here) but would prefer to hold onto it if its useful to this project 9if there's atutorial I can follow), or alternatively I could ship it out to you, Pascal.
XVE-TRX1024,TQi TX 6530B
The chip we are looking for is probably under the metal shield?
Update-> Shield removed
So this is not the chip we are looking for and it confirms the FCC data.
Yes @M-i-c-h-a-e-l1 , it would be helpful to heat the solder joints and carefully pry each side clear to remove the shield in order to verify what chips are underneath. Don't hesitate to ask questions.
Entering Grantee Code: "XVE" and Product Code: "-TRX1024" at https://www.fcc.gov/oet/ea/fccid yielded internal images that can not be utilized to properly identify two chips under the can. Best guess is this FCC ID contains a CC MCU/RF and a CC LNA chip which is not ideal to snooping.
@ANiMOSiTYza I do not know of a single tutorial but searching the internet you can find some pieces of how someone decoded/determined bits and pieces of other RF protocols. But just trying something usually offers some learning :-).
To help add Traxxas TQi support to MTM: -verify the FCC ID on your 6528 TX -crack it open to verify the RF segment?
-obtain a cheap logic analyzer? so we can talk you through hookup and sampling communication between the STM and CYRF chips. OR Send your 6528 TX to someone else for sampling?
My generic "DIYUSER USB Logic Analyzer 24MHz 8 Channel 24M/seconds" Logic Analyzer cost less than <$10 USD shipped from aliexpress.
Updated my post of 09.03.2024 with a picture of the RF section of the radio.
Updated my post of 09.03.2024 with a picture of the RF section of the radio.
Nice picture. Thank you @M-i-c-h-a-e-l1 for taking the time to verify. -p
To help us proceed I have marked up @jakezilla 's image with the intent of using the larger pads at the STM for sampling. I have reasonably high confidence about the items in purple. I think we still need to figure out a sample point for SS ~~and IRQ. I can't even guess if XOUT or PACTL are helpful~~. The STM pads flagged orange are ones I found interesting and would like to trace next.
I feel this protocol will have a powerful draw and the potential to encourage many more users to help branch out our hobbies.
Please indicate if you have a Traxxas TQi TX with FCC ID: XVE-TRX1017 and are willing to sample data from it. (some of the TQi TX with model numbers 6530, 6530A, 6507R, 6529A, 6528, 6528A, 6509R may have FCC ID: XVE-TRX1017)
If no one indicates they are up for this task in the next ~1-2 months I would like us to identify someone that can commit to shipping a TX/RX set (preferably 6507R >=4 channel TX with FCC ID: XVE-TRX1017 and a 6533 TSM RX) to someone able to perform the needed testing and sample collection.