Bugs 3 mini

More
07 Oct 2018 19:52 #71219 by DPyro
Replied by DPyro on topic Bugs 3 mini
No, they blink.

Please Log in or Create an account to join the conversation.

More
07 Oct 2018 20:05 - 08 Oct 2018 07:45 #71220 by goebish
Replied by goebish on topic Bugs 3 mini

DPyro wrote: I selected bind, turned the quad on and then it went back to menu. RX ID changes from 0 to -29664


Ok, so you got a reply from the quad but it doesn't bind (probably wrong final address), more work is required ...

Now I've to simulate the reply of the quad with an arduino+nrf24 to try to understand how rxid affects address and/or hopping sequence.

That's interesting that C0ckpitvue 777 and I have Rx that can be used with the same addresses/frequencies despite different IDs.
Last edit: 08 Oct 2018 07:45 by goebish.

Please Log in or Create an account to join the conversation.

More
07 Oct 2018 20:06 #71221 by C0ckpitvue 777
Replied by C0ckpitvue 777 on topic Bugs 3 mini

DPyro wrote: No, they blink.


I also had a problem with the first time trying to update,re download and reinstall,I already know,lol.

Please Log in or Create an account to join the conversation.

More
07 Oct 2018 20:07 - 07 Oct 2018 20:17 #71222 by DPyro
Replied by DPyro on topic Bugs 3 mini
Well not even the control it came with is binding now...

EDIT: Had to turn quad on first then controller while holding red button.
Last edit: 07 Oct 2018 20:17 by DPyro.

Please Log in or Create an account to join the conversation.

More
07 Oct 2018 20:10 #71223 by goebish
Replied by goebish on topic Bugs 3 mini
@DPyro, just to confirm, it doesn't bind, but deviation exits the "binding" dialog when a battery is connected to the quad ?

Please Log in or Create an account to join the conversation.

More
07 Oct 2018 20:18 #71224 by DPyro
Replied by DPyro on topic Bugs 3 mini

goebish wrote: @DPyro, just to confirm, it doesn't bind, but deviation exits the "binding" dialog when a battery is connected to the quad ?

Yes

Please Log in or Create an account to join the conversation.

More
07 Oct 2018 22:14 #71225 by C0ckpitvue 777
Replied by C0ckpitvue 777 on topic Bugs 3 mini
Maybe Seby can give a sample if not to occupied...

Please Log in or Create an account to join the conversation.

More
08 Oct 2018 06:28 - 08 Oct 2018 10:25 #71226 by goebish
Replied by goebish on topic Bugs 3 mini
I don't need any more bind sequence for now, I've to build a rig that simulates the reply of the Rx to the Tx during bind to understand how rxid affects final address and channel hopping. I suppose hexfet did the same for the Bugs3 (remember the spreadsheet? :P).

I've to understand how the checksum that's sent by the quad in bind reply & telemetry packets is computed first:
CD 83 1D 00 00 00 00 00 00 00 00 C0 00 00 00 00
2C 83 1D 5F 00 00 00 00 00 00 00 C0 00 00 00 00
30 83 1D 63 00 00 00 00 00 00 00 C0 00 00 00 00
2E 83 1D 61 00 00 00 00 00 00 00 C0 00 00 00 00
31 83 1D 64 00 00 00 00 00 00 00 C0 00 00 00 00
2F 83 1D 62 00 00 00 00 00 00 00 C0 00 00 00 00
32 83 1D 65 00 00 00 00 00 00 00 C0 00 00 00 00

91 68 FC 00 00 00 00 00 00 00 00 C0 00 00 00 00
92 68 FC 01 00 00 00 00 00 00 00 C0 00 00 00 00
AD 68 FC 1C 00 00 00 00 00 00 00 C0 00 00 00 00
E4 68 FC 53 00 00 00 00 00 00 00 C0 00 00 00 00
E3 68 FC 52 00 00 00 00 00 00 00 C0 00 00 00 00
E8 68 FC 57 00 00 00 00 00 00 00 C0 00 00 00 00
F3 68 FC 62 00 00 00 00 00 00 00 C0 00 00 00 00
F4 68 FC 63 00 00 00 00 00 00 00 C0 00 00 00 00
packets sent by 2 different RX, 1st byte is the checksum, 2nd and 3rd bytes are rxid.
I don't get it yet.
Last edit: 08 Oct 2018 10:25 by goebish.

Please Log in or Create an account to join the conversation.

More
08 Oct 2018 10:36 - 08 Oct 2018 23:18 #71227 by goebish
Replied by goebish on topic Bugs 3 mini
Ok got it! :)
rx packet checksum = (0x6d + sum of packet[1:15]) & 0xff;
(same "magic number" as tx packet but used with sum of bytes instead of xoring)
Now to build a rig with stock tx+arduino+nrf24 when time allows ...

edit: 0x6d is the 'm' of "mjxRC" which is the bind address converted to ASCII actually :silly:
Last edit: 08 Oct 2018 23:18 by goebish.

Please Log in or Create an account to join the conversation.

More
08 Oct 2018 16:15 #71229 by hexfet
Replied by hexfet on topic Bugs 3 mini

goebish wrote: I don't need any more bind sequence for now, I've to build a rig that simulates the reply of the Rx to the Tx during bind to understand how rxid affects final address and channel hopping. I suppose hexfet did the same for the Bugs3 (remember the spreadsheet? :P).

Yes. My rig was a devo10 running protocol code that emulated a bugs3 receiver, stock tx, and a Cypress prototyping stick. :)

Please Log in or Create an account to join the conversation.

More
09 Oct 2018 10:56 - 09 Oct 2018 15:08 #71231 by goebish
Replied by goebish on topic Bugs 3 mini
Rig is up and running, spitting out rxid / address pairs at the impressive rate of around 3 per second (out of 65536) :P





First 3 bytes of the address are easy to guess (2nd byte is constant, I suppose that's a byproduct of the txid, but we don't care), and 2 last bytes often repeat, it shouldn't be that hard to crack (ie easier than the Bugs3 ?...).

Arduino code, if anyone is curious: gist.github.com/goebish/71fa5b6568e200438bf2090d50692480
Last edit: 09 Oct 2018 15:08 by goebish.

Please Log in or Create an account to join the conversation.

More
09 Oct 2018 17:35 #71234 by goebish
Replied by goebish on topic Bugs 3 mini
Still running, 50% done, 3 hours to go.

Please Log in or Create an account to join the conversation.

More
09 Oct 2018 19:25 #71235 by C0ckpitvue 777
Replied by C0ckpitvue 777 on topic Bugs 3 mini
Awesome job Goebish,you definitely know your stuff,if I can help with anything else please let me know.☺️

Please Log in or Create an account to join the conversation.

More
09 Oct 2018 20:03 #71236 by goebish
Replied by goebish on topic Bugs 3 mini
I want everyone to be able to bind first (even if a spreadsheet is required for 1st bind at first...) then I've to thoroughly understand the flags (modes ...), that's not the case yet, I've to make more captures or watch packets in realtime.

Please Log in or Create an account to join the conversation.

More
09 Oct 2018 22:57 - 09 Oct 2018 23:33 #71237 by goebish
Replied by goebish on topic Bugs 3 mini
New test builds available (7e & 10):
www.dropbox.com/sh/nrc4oppo121887l/AABQ_...IEn8A7BYvH5BpGa?dl=0

How it works (seems complicated but that's not...):
- start with no battery in the quad
- select Bugs3Mini protocol then press bind
- connect a battery to the quad
- wait for the bind dialog to exit then disconnect the battery for now
- go to the protocol options dialog then write down the "RX Id" value
- switch off transmitter
- go to bit.ly/bugs3mini_rxid
- find your RX Id in the green column (rxid s16)
- write down the corresponding value from the blue column (address[3:4] s16)
- connect your transmitter as an USB drive
- open the models/modelsxx.ini file in a text editor (under Windows, use notepad++ for exemple, not the builtin notepad, it does corrupt end of lines ...)
- under the [protocol_opts] section, fill the Address= field with the value from the blue column
- save and disconnect USB

Et voilà, it should bind now :)
You can now check that channel 5 controls leds.

source: github.com/goebish/deviation/blob/protoc...bugs3mini_nrf24l01.c

Now we've to try to make sense of this spreadsheet so we don't need it anymore ...
Last edit: 09 Oct 2018 23:33 by goebish.

Please Log in or Create an account to join the conversation.

More
09 Oct 2018 23:15 #71238 by DPyro
Replied by DPyro on topic Bugs 3 mini
Devo7e crashes and reboots after pressing bind.

Please Log in or Create an account to join the conversation.

More
09 Oct 2018 23:20 #71239 by goebish
Replied by goebish on topic Bugs 3 mini
I do not have a 7e but it works on my t8sg v2+ and 7e emu.
Have you flashed the dfu and copied the new protocols folder to the filesystem ?

Please Log in or Create an account to join the conversation.

More
09 Oct 2018 23:29 #71240 by goebish
Replied by goebish on topic Bugs 3 mini
I've just rebuilt and uploaded the 7e firmware just in case ...

Please Log in or Create an account to join the conversation.

More
09 Oct 2018 23:36 #71241 by DPyro
Replied by DPyro on topic Bugs 3 mini
Still reboots.
Attachments:

Please Log in or Create an account to join the conversation.

More
09 Oct 2018 23:41 #71242 by goebish
Replied by goebish on topic Bugs 3 mini
That's weird, pressing bind doesn't do much more than before, it only grabs the RX Id.
C0ckpitvue 777 can you check on your 7e please ?

Please Log in or Create an account to join the conversation.

Time to create page: 0.411 seconds
Powered by Kunena Forum