DIY-Multiprotocol-TX-Module icon indicating copy to clipboard operation
DIY-Multiprotocol-TX-Module copied to clipboard

Evaluate Radiomaster RC3S protocol

Open pwkpete opened this issue 1 year ago • 57 comments

Per our conversation on rcgroups. Here are the images from the radio to evaluate if it may even be possible to implement the earlier Radiolink ground protocol: https://www.radiolink.com/newsinfo/664430.html

PXL_20240205_170801201 PXL_20240205_170745081 PXL_20240205_170832280 MP

pwkpete avatar Feb 05 '24 17:02 pwkpete

The RF chip is under the glue so we don't know what it is... The SPI bus is well exposed and can be connected to an analyzer. Do you want to purchase and connect an analyzer (around $10) to your radio or proceed differently?

pascallanger avatar Feb 05 '24 17:02 pascallanger

Let me know what I need and to do (I might even have one here)

Happy to give it a try!

On Mon, Feb 5, 2024 at 11:44 AM pascallanger @.***> wrote:

The RF chip is under the glue so we don't know what it is... The SPI bus is well exposed and can be connected to an analyzer. Do you want to purchase and connect an analyzer (around $10) to your radio or proceed differently?

— Reply to this email directly, view it on GitHub https://github.com/pascallanger/DIY-Multiprotocol-TX-Module/issues/938#issuecomment-1927579046, or unsubscribe https://github.com/notifications/unsubscribe-auth/AD36JTY47JQW4LMCYZJR6E3YSELBTAVCNFSM6AAAAABC2RRGASVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMRXGU3TSMBUGY . You are receiving this because you authored the thread.Message ID: @.*** com>

pwkpete avatar Feb 05 '24 18:02 pwkpete

A small 8 ch Saleae analyzer (https://www.ebay.fr/itm/262812296176) connected to MOSI, CLK, MISO, CSN and GND.

pascallanger avatar Feb 05 '24 18:02 pascallanger

That's funny, I happen to have one of those right in front of me, though I have never used it...

I can solder that up over the next few days. (I found the software)

I assume, record from power on to bind?

On Mon, Feb 5, 2024 at 12:11 PM pascallanger @.***> wrote:

A small 8 ch Saleae analyzer (https://www.ebay.fr/itm/262812296176) connected to MOSI, CLK, MISO, CSN and GND.

— Reply to this email directly, view it on GitHub https://github.com/pascallanger/DIY-Multiprotocol-TX-Module/issues/938#issuecomment-1927679106, or unsubscribe https://github.com/notifications/unsubscribe-auth/AD36JTYKVEKQPIZ4KAHB7G3YSEOFRAVCNFSM6AAAAABC2RRGASVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMRXGY3TSMJQGY . You are receiving this because you authored the thread.Message ID: @.*** com>

pwkpete avatar Feb 05 '24 19:02 pwkpete

Please use the logic software v1.2.14 I would need different capture files for:

  • power on
  • power on + bind
  • throttle mid->low->mid->high-mid
  • steering mid->low->mid->high-mid
  • same for any other channels

pascallanger avatar Feb 05 '24 21:02 pascallanger

RC4G.zip

CSN = Chan2 MISO=Chan3 CLK=Chan1 MOSI=Chan0

Can you see if these are what you need, or if I did it correctly? (I expected to see more signal) Model bound and is operable...

Thx

pwkpete avatar Feb 06 '24 04:02 pwkpete

Sorry but the sample rate is too low, the files are unusable as they are... You need to increase it quite significantly (*4 or *8). GND is well connected between the GND of the radio and the GND of the Saleae, right?

pascallanger avatar Feb 06 '24 08:02 pascallanger

Yes ground is connected. Will up sample rate and try again. First time with this so learning how to use it correctly. Thx!

On Tue, Feb 6, 2024, 2:49 AM pascallanger @.***> wrote:

Sorry but the sample rate is too low, the files are unusable as they are... You need to increase it quite significantly (*4 or *8). GND is well connected between the GND of the radio and the GND of the Saleae, right?

— Reply to this email directly, view it on GitHub https://github.com/pascallanger/DIY-Multiprotocol-TX-Module/issues/938#issuecomment-1929038991, or unsubscribe https://github.com/notifications/unsubscribe-auth/AD36JT4LSS24RHZFVFGSYRTYSHVANAVCNFSM6AAAAABC2RRGASVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMRZGAZTQOJZGE . You are receiving this because you authored the thread.Message ID: @.*** com>

pwkpete avatar Feb 06 '24 12:02 pwkpete

Here are the files a 8MS/s, let me know how these work. I did not initiate a bind to new RX yet, want to make sure this works so far. 8MS per s.zip

Thx!

pwkpete avatar Feb 06 '24 23:02 pwkpete

Getting there, but still not fast enough... You should see 8 pulses of clock per byte, there are only 5-6 right now. If you add a SPI analyzer (on the right side) and configure the inputs (MOSI, MISO...) with everything else by default, it should be able to decode which is not the case right now. I don't think you need to capture the bind of a RX. From what I can see the radio sends bind packets for 2.5s then switch to normal mode. So just a long power on >5s would be good.

pascallanger avatar Feb 07 '24 05:02 pascallanger

Ok, tried again at 24MHz SPI analyzer finds stuff, but the clock has me confused - I'd expect to see a consistent pulse Power On.zip

pwkpete avatar Feb 07 '24 15:02 pwkpete

It works this time. I need to find out which component they are using now.

pascallanger avatar Feb 07 '24 15:02 pascallanger

Scans @ 16MHz.zip Awesome, I tried the other ones you requested at 16MHz - hope they work as well

pwkpete avatar Feb 07 '24 15:02 pwkpete

It looks like they are using a CC2500. The startup or bind phase looks strange from a first look so I'm wondering if it could be another CC2xxx. I need to spend more time on it.

pascallanger avatar Feb 07 '24 15:02 pascallanger

Cool, please let me know if you need any further data, happy to run more scenarios for you.

Note: I did not put the RX in bind mode - it connected to an already paired RX

pwkpete avatar Feb 07 '24 15:02 pwkpete

Now that I've removed the excessive polling that they are doing, I can see what 's happening. At power up, they scan the RF channels surely to find 2 unused and then start to send data on them every 14.4ms.

pascallanger avatar Feb 07 '24 16:02 pascallanger

For "Power and Bind", what are you actually doing on the TX and RX side? I'm asking since I don't see a difference between bind and no bind... Is there a bind button on the TX? My guess is that there is none and that if you put the RX in bind mode, it just binds to whatever TX is powered at that time. Do you have multiple TXs? If yes a dump of the power on from at least one more TX (more is better) would be great.

pascallanger avatar Feb 07 '24 17:02 pascallanger

Power and bind is just turning on the TX and turning on the RX (it is already bound)

I was waiting to see if this worked and then going to do an actual bind - which I have to refresh my memory on how to do it with this setup. I know there is a bind button on the RX. Will look into that in a bit

pwkpete avatar Feb 07 '24 17:02 pwkpete

The TX and RX don't "talk" at least in normal mode, TX->RX only. Please do a dump of the TX in bind mode. I doubt that the RX being off/on/bind matters but may be I'm wrong...

pascallanger avatar Feb 07 '24 17:02 pascallanger

I didn't see a bind mode in the TX: per the instructions: image

In fact - I switched to a different model powered up and it connected to the RX without issue

I'm sure you are right - RX on doesn't matter - I wasn't thinking

pwkpete avatar Feb 07 '24 17:02 pwkpete

What do you mean by "different model"? Can you select a model number on the TX? If yes I would need a dump of each model numbre.

pascallanger avatar Feb 07 '24 17:02 pascallanger

Yes, I selected a different model on the TX and it had no effect

It connected to the RX automatically - did not have to put the RX in bind mode

pwkpete avatar Feb 07 '24 17:02 pwkpete

Ok different model does not mean that there is "model match", ie the model and the RX have to match

pascallanger avatar Feb 07 '24 18:02 pascallanger

Correct, it would not seem that it is that 'smart'

pwkpete avatar Feb 07 '24 18:02 pwkpete

Hummm, the model which was loaded was not default right? By this I mean there are stuff like end points adjustments, trims and may be more?

pascallanger avatar Feb 07 '24 18:02 pascallanger

Also in the "Gyro" dump I see 2 things moving, like 2 channels. Do you have a mixer or were you moving 2 knobs in the same dump?

pascallanger avatar Feb 07 '24 18:02 pascallanger

In the above upload 'Scans 16MHz.zip' those were with the programmed model. EPA and likely some trim may have been not standard.

There is no 'mid' notch on the gyro channel, it was best guess - that is 100/100 EPA no trim Aux channel 4 was just an on/off button

Would you like me to re-do any - I can do another gyro scan - I may have bumped the steering, it is close to the knob.

pwkpete avatar Feb 07 '24 18:02 pwkpete

It's not steering moving at the same time as gyro as I can differentiate the channels. It's something else that seems to follow the gyro value in some way. Could it be an unconnected 5th channel which follows the Gyro just because it's closed to it?

pascallanger avatar Feb 07 '24 18:02 pascallanger

That is weird, this is only a 4ch TX.

Mixing is off - I watch output from ch1-4 when adjusting gyro(3) and none move.

trackstar_dspec_ts4g.pdf

This extra output does not happen on other channels? I can re-do the gyro scan if you would like

pwkpete avatar Feb 07 '24 19:02 pwkpete

Let's test. Reset a model to its default values and redo a gyro dump. Please move it slowly from one end to the other (you have been a little quick on the dumps).

pascallanger avatar Feb 07 '24 19:02 pascallanger