- Posts: 8
Protocol for Bugs 5W / JJRC X5
20 Apr 2019 12:57 - 20 Apr 2019 12:57 #74031
by gpo123
Protocol for Bugs 5W / JJRC X5 was created by gpo123
Hello,
I really would appreciate if the Bugs 5 W could be deviated / multiprotocoled. The transmitters of the Bugs 5W has the same appearance as the one from the Bugs 3 mini plus a display. Inside the PCBs share some similarities too, the main protocol chip seems to be a NUVOTON N76E0030T20. As the Bugs 3 mini is deviated I have high hopes that this affordable camera drone can be deviated soon.
I will work through the Bugs 3 mini thread, but what route is the easiest get the information needed ? I have a Saleae LA (though never worked with it), a Jumper T8SG V2 Plus and a Taranis Q X7 with I-Rangex multiprotol.
Greetings
I really would appreciate if the Bugs 5 W could be deviated / multiprotocoled. The transmitters of the Bugs 5W has the same appearance as the one from the Bugs 3 mini plus a display. Inside the PCBs share some similarities too, the main protocol chip seems to be a NUVOTON N76E0030T20. As the Bugs 3 mini is deviated I have high hopes that this affordable camera drone can be deviated soon.
I will work through the Bugs 3 mini thread, but what route is the easiest get the information needed ? I have a Saleae LA (though never worked with it), a Jumper T8SG V2 Plus and a Taranis Q X7 with I-Rangex multiprotol.
Greetings
20 Apr 2019 20:24 - 20 Apr 2019 20:33 #74042
by goebish
Replied by goebish on topic Protocol for Bugs 5W / JJRC X5
I suppose you've already tried the Bugs3Mini protocol ?
That's probably a XN297, find which pin is GND (#2 ?), connect it to the analyzer GND then connect all other pins to Channels 1-7 then provide some dumps
(bind sequence, sticks, mode changes ...)
Just a note ... if it's like the Bugs 3 or Bugs 3 mini we won't be able to reverse engineer it remotely (or that will be very tiresome ...)
That's probably a XN297, find which pin is GND (#2 ?), connect it to the analyzer GND then connect all other pins to Channels 1-7 then provide some dumps
(bind sequence, sticks, mode changes ...)
Just a note ... if it's like the Bugs 3 or Bugs 3 mini we won't be able to reverse engineer it remotely (or that will be very tiresome ...)
20 Apr 2019 21:59 - 21 Apr 2019 00:20 #74045
by goebish
Replied by goebish on topic Protocol for Bugs 5W / JJRC X5
XN297 Dump might help but better use the logic analyzer when possible, XN297 Dump isn't finished yet and we have more info with a logic dump.
Regarding the test rig to dump id/address pairs, I'll check on my hdd, I probably have a backup of my code.
requires:
- arduino
- nrf24l01
- nfet circuit to be able to switch the transmitter on/off with the arduino (reset pin of the nuvoton is disabled)
- in the transmitter, solder a wire so that the bind button is permanently set (see black wire between A and B on bottom right)
- remove the buzzer or wear earplugs
Regarding the test rig to dump id/address pairs, I'll check on my hdd, I probably have a backup of my code.
requires:
- arduino
- nrf24l01
- nfet circuit to be able to switch the transmitter on/off with the arduino (reset pin of the nuvoton is disabled)
- in the transmitter, solder a wire so that the bind button is permanently set (see black wire between A and B on bottom right)
- remove the buzzer or wear earplugs
20 Apr 2019 22:06 - 21 Apr 2019 00:49 #74046
by goebish
Replied by goebish on topic Protocol for Bugs 5W / JJRC X5
Make a dump of the bind sequence first so we can check if rxid/addr (and rf channels) is different, and in which way it's different.
Pinout of the XN297 module:
- pin 2 : GND -> connect to analyzer gnd
- pin 3: CSN -> connect to channel 0
- pin 4: CLK -> channel 1
- pin 5: DAT -> channel 2
Pinout of the XN297 module:
- pin 2 : GND -> connect to analyzer gnd
- pin 3: CSN -> connect to channel 0
- pin 4: CLK -> channel 1
- pin 5: DAT -> channel 2
Time to create page: 0.206 seconds
-
Home
-
Forum
-
Development
-
Protocol Development
- Protocol for Bugs 5W / JJRC X5