Thread: Discussion Walkera DEVO Tx Hacking
View Single Post
Old Nov 20, 2012, 12:42 AM
PhracturedBlue is offline
Find More Posts by PhracturedBlue
Registered User
Joined Jan 2012
682 Posts
I got my Hubsan x4 today. I immediately opened up the Tx, and grabbed some captures.
The protocol looks pretty straight-forward:
1) The Tx waits for a signal from the model before binding
2) The datapackets are 16 bytes
3) data appears to be 8-bit, unencrypted
4) the last byte is a checksum of the packet
5) the tx transmits 4 packets on the 1st channel, then 1 packet on the 2nd, the repeats
6) packets are sent every 10msec
7) data is only transferred from the Rx to the Tx during binding (handshake)

I'll start a new thread with more details as I spend some time actually analyzing the protocol.
PhracturedBlue is offline Find More Posts by PhracturedBlue
Reply With Quote