Thread Tools
Oct 16, 2017, 10:43 PM
Registered User
Thread OP
Discussion

Yuneec Receiver protocol?


Does anybody have any experience decoding serial protocols and want to take a stab at what the Yuneec radios use?

I have figured out quite a bit, but I am stuck trying to figure out how to decode the actual channel data from the receiver output.

I have purchased a spare Typhoon H receiver and this is what I have figured out so far from that and surfing the net:
1. The Yuneec ST10, ST16, the Wizard wand, the Typhoon H, Q500, and Blade Chroma all seem to use the same transmitter/receiver module = SR24
2. The SR24 is a CC2530 based Zigbee module.
3. The connection to the SR24 is: pin 1- Black wire, GND; Pin 2 - White wire, +3V; Pin 3 - Gray wire, serial data in; Pin 4 - Yellow wire, serial data out.
4. After attaching it to a typhoon H to bind it, I captured the serial output data using a logic analyzer module
5. From the logic analyzer data, the serial connection is 115.2Kbps 8N1, LSB first.
6. Data is output a one 46 byte data frame followed by two 27 byte data frames.
7. Each data frame starts with the same two bytes: 0x55, 0x55
8. The next two bytes seem to indicate if it is a 46 or 27 byte frame: 46bytes=0x2B,0x03 .... 27bytes=0x18,0x00
9. Bytes 5,6,7 seem to be a counter of some sort. They always seem to go up from one frame to the next by ~50K but the exact value varies a bit. Maybe clock counts?
10. The last byte if each frame (byte 46 or 27) always varies and I think it is a checksum
11. Some of the rest of the data changes with stick changes on the transmitter but I havent been able to figure out what corresponds to what channel.

Any thoughts? Has anybody seen a similar protocol I could look at?

CSV Sample data:
packet,byte,Time,Everything Centered,Pitch up,Pitch Down,Roll Right,Roll Left,Yaw Right,Yaw Left,Throt Up,Throt Down
1,1,0.005664583,0x55,0x55,0x55,0x55,0x55,0x55,0x55 ,0x55,0x55
1,2,0.005760042,0x55,0x55,0x55,0x55,0x55,0x55,0x55 ,0x55,0x55
1,3,0.005855542,0x2B,0x2B,0x2B,0x2B,0x2B,0x2B,0x2B ,0x2B,0x2B
1,4,0.005951,0x03,0x03,0x03,0x03,0x03,0x03,0x03,0x 03,0x03
1,5,0.006046458,0x04,0xA9,0x22,0x72,0xA1,0xD2,0x3D ,0xCF,0x64
1,6,0.006141917,0x7E,0x4D,0xE1,0x91,0xB6,0x52,0xC5 ,0x48,0x8F
1,7,0.006237375,0xEC,0xE7,0xE7,0xDC,0xE9,0xEF,0xEF ,0xEB,0xEA
1,8,0.006332833,0x00,0x00,0x00,0x00,0x00,0x00,0x00 ,0x00,0x00
1,9,0.006428333,0x80,0x80,0x80,0x80,0x80,0x80,0x80 ,0xC3,0x3C
1,10,0.00652375,0x08,0x08,0x08,0x03,0x0C,0x08,0x08 ,0x78,0x48
1,11,0.00661925,0x06,0x00,0x00,0xCA,0x37,0x04,0x04 ,0x03,0x06
1,12,0.006714708,0x80,0xC2,0x3B,0x80,0x80,0x80,0x8 0,0x80,0x80
1,13,0.006810167,0x08,0x18,0xF8,0x08,0x08,0x04,0x0 B,0x08,0x07
1,14,0.006905667,0x00,0x00,0x00,0x00,0x00,0xA2,0x5 2,0x00,0xFD
1,15,0.007001125,0x80,0x80,0x80,0x80,0x80,0x80,0x8 0,0x80,0x80
1,16,0.007096583,0x08,0x08,0x08,0x08,0x08,0x08,0x0 8,0x08,0x08
1,17,0.007192042,0x00,0x00,0x00,0x00,0x00,0x00,0x0 0,0x00,0x00
1,18,0.007287542,0x82,0x82,0x82,0x82,0x82,0x82,0x8 2,0x82,0x82
1,19,0.007382958,0x28,0x67,0x67,0x97,0x77,0x48,0x6 7,0x47,0x97
1,20,0.007478458,0x00,0xFE,0xFE,0xFD,0xFE,0x00,0xF E,0xFE,0xFD
1,21,0.007573875,0x88,0x88,0x88,0x88,0x88,0x88,0x8 8,0x88,0x88
1,22,0.007669375,0x85,0x85,0x85,0x85,0x85,0x85,0x8 5,0x85,0x85
1,23,0.007764833,0xDE,0xDE,0xDE,0xDE,0xDE,0xDE,0xD E,0xDE,0xDE
1,24,0.007860292,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xF F,0xFF,0xFF
1,25,0.007955792,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xF F,0xFF,0xFF
1,26,0.00805125,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF ,0xFF,0xFF
1,27,0.008146708,0xB3,0x65,0x50,0xC6,0x69,0xAD,0xD A,0xDC,0xF0
1,28,0.008242167,0x92,0x91,0x95,0x7B,0x8F,0x90,0x8 F,0x90,0x8F
1,29,0.008337667,0x1D,0x1D,0x1D,0x1D,0x1D,0x1D,0x1 D,0x1D,0x1D
1,30,0.008433083,0x1B,0x1B,0x1B,0x1B,0x1B,0x1B,0x1 B,0x1B,0x1B
1,31,0.008528583,0xB6,0xD7,0x6D,0xC9,0xC0,0xB4,0x6 A,0x34,0xDF
1,32,0.008624042,0x47,0x49,0x49,0x3C,0x47,0x48,0x4 9,0x49,0x49
1,33,0.0087195,0xC3,0xC3,0xC3,0xC3,0xC3,0xC3,0xC3, 0xC3,0xC3
1,34,0.008814958,0xB6,0xB6,0xB6,0xB6,0xB6,0xB6,0xB 6,0xB6,0xB6
1,35,0.008910417,0x00,0x00,0x00,0x00,0x00,0x00,0x0 0,0x00,0x00
1,36,0.009005875,0x00,0x00,0x00,0x00,0x00,0x00,0x0 0,0x00,0x00
1,37,0.009101375,0x78,0x60,0x9A,0xCC,0x28,0x78,0x7 4,0x78,0x68
1,38,0.009196833,0x42,0x42,0x42,0x42,0x42,0x42,0x4 2,0x42,0x42
1,39,0.009292292,0x8C,0xE4,0x94,0xE4,0x8C,0x54,0x5 4,0x8C,0xE4
1,40,0.009387792,0x0A,0x0C,0x11,0x0C,0x0A,0x0B,0x0 B,0x0A,0x0C
1,41,0.009483208,0xF4,0xC8,0x78,0xF4,0x90,0x00,0x6 4,0x00,0x00
1,42,0.009578708,0x01,0x00,0x05,0x01,0x01,0x00,0x0 0,0x00,0x00
1,43,0.009674167,0x1C,0x70,0xD8,0x2C,0x28,0x80,0xB 8,0xD4,0xF8
1,44,0.009769625,0xF3,0xE5,0x0E,0xE8,0xF1,0xF3,0x3 D,0x17,0x2A
1,45,0.009865083,0x08,0x06,0x06,0x06,0x08,0x07,0x0 7,0x08,0x06
1,46,0.009960583,0x7B,0xF5,0x28,0xD8,0x1F,0x40,0x8 1,0xA0,0x99
2,1,0.025651708,0x55,0x55,0x55,0x55,0x55,0x55,0x55 ,0x55,0x55
2,2,0.025747208,0x55,0x55,0x55,0x55,0x55,0x55,0x55 ,0x55,0x55
2,3,0.025842625,0x18,0x18,0x18,0x18,0x18,0x18,0x18 ,0x18,0x18
2,4,0.025938125,0x00,0x00,0x00,0x00,0x00,0x00,0x00 ,0x00,0x00
2,5,0.026033583,0x05,0xAA,0x23,0x73,0xA2,0xD3,0x3E ,0xD0,0x65
2,6,0.026129042,0x44,0x12,0xA7,0x57,0x78,0x18,0x8B ,0x0F,0x56
2,7,0.0262245,0xEA,0xEA,0xE7,0xE2,0xE6,0xE8,0xE7,0 xEC,0xEF
2,8,0.026319958,0x00,0x00,0x00,0x00,0x00,0x00,0x00 ,0x00,0x00
2,9,0.026415417,0x80,0x80,0x80,0x80,0x80,0x80,0x80 ,0xC3,0x3C
2,10,0.026510917,0x08,0x08,0x08,0x03,0x0C,0x08,0x0 8,0x78,0x48
2,11,0.026606375,0x06,0x00,0x00,0xC9,0x37,0x03,0x0 7,0x03,0x04
2,12,0.026701833,0x80,0xC2,0x3B,0x80,0x80,0x80,0x8 0,0x80,0x80
2,13,0.026797333,0x08,0x48,0xF8,0x08,0x08,0x04,0x0 B,0x08,0x07
2,14,0.02689275,0x00,0x00,0x00,0x00,0x00,0xA2,0x52 ,0x00,0xFD
2,15,0.02698825,0x80,0x80,0x80,0x80,0x80,0x80,0x80 ,0x80,0x80
2,16,0.027083708,0x08,0x08,0x08,0x08,0x08,0x08,0x0 8,0x08,0x08
2,17,0.027179167,0x00,0x00,0x00,0x00,0x00,0x00,0x0 0,0x00,0x00
2,18,0.027274625,0x82,0x82,0x82,0x82,0x82,0x82,0x8 2,0x82,0x82
2,19,0.027370125,0x28,0x47,0x77,0x48,0x17,0x48,0x7 7,0x67,0x77
2,20,0.027465542,0x00,0xFE,0xFE,0x00,0xFE,0x00,0xF D,0xFE,0xFD
2,21,0.027561042,0x88,0x88,0x88,0x88,0x88,0x88,0x8 8,0x88,0x88
2,22,0.0276565,0x85,0x85,0x85,0x85,0x85,0x85,0x85, 0x85,0x85
2,23,0.027751958,0xDE,0xDE,0xDE,0xDE,0xDE,0xDE,0xD E,0xDE,0xDE
2,24,0.027847458,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xF F,0xFF,0xFF
2,25,0.027942875,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xF F,0xFF,0xFF
2,26,0.028038375,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xF F,0xFF,0xFF
2,27,0.028133833,0x4B,0x65,0xFC,0x00,0x72,0x10,0x3 D,0x92,0xC8
3,1,0.045751667,0x55,0x55,0x55,0x55,0x55,0x55,0x55 ,0x55,0x55
3,2,0.045847125,0x55,0x55,0x55,0x55,0x55,0x55,0x55 ,0x55,0x55
3,3,0.045942583,0x18,0x18,0x18,0x18,0x18,0x18,0x18 ,0x18,0x18
3,4,0.046038042,0x00,0x00,0x00,0x00,0x00,0x00,0x00 ,0x00,0x00
3,5,0.046133542,0x06,0xAA,0x24,0x74,0xA3,0xD3,0x3F ,0xD0,0x66
3,6,0.046229,0x0B,0xD9,0x6E,0x1E,0x3E,0xDF,0x51,0x D6,0x1D
3,7,0.046324458,0xE8,0xEA,0xEF,0xE2,0xE6,0xED,0xEC ,0xEE,0xEA
3,8,0.046419917,0x00,0x00,0x00,0x00,0x00,0x00,0x00 ,0x00,0x00
3,9,0.046515417,0x80,0x80,0x80,0x80,0x80,0x80,0x80 ,0xC3,0x3C
3,10,0.046610833,0x08,0x08,0x08,0x03,0x0C,0x08,0x0 8,0x78,0x48
3,11,0.046706333,0x04,0x00,0x00,0xC9,0x37,0x03,0x0 7,0x03,0x04
3,12,0.046801792,0x80,0xC2,0x3B,0x80,0x80,0x80,0x8 0,0x80,0x80
3,13,0.04689725,0x08,0x38,0xF8,0x08,0x08,0x04,0x0B ,0x08,0x07
3,14,0.046992708,0x00,0x00,0x00,0x00,0x00,0xA2,0x5 2,0x00,0xFD
3,15,0.047088167,0x80,0x80,0x80,0x80,0x80,0x80,0x8 0,0x80,0x80
3,16,0.047183667,0x08,0x08,0x08,0x08,0x08,0x08,0x0 8,0x08,0x08
3,17,0.047279125,0x00,0x00,0x00,0x00,0x00,0x00,0x0 0,0x00,0x00
3,18,0.047374583,0x82,0x82,0x82,0x82,0x82,0x82,0x8 2,0x82,0x82
3,19,0.047470042,0x28,0x87,0x77,0x87,0x97,0x47,0x7 7,0x47,0x48
3,20,0.047565542,0x00,0xFD,0xFD,0xFE,0xFD,0xFE,0xF E,0xFE,0x00
3,21,0.047660958,0x88,0x88,0x88,0x88,0x88,0x88,0x8 8,0x88,0x88
3,22,0.047756458,0x85,0x85,0x85,0x85,0x85,0x85,0x8 5,0x85,0x85
3,23,0.047851917,0xDE,0xDE,0xDE,0xDE,0xDE,0xDE,0xD E,0xDE,0xDE
3,24,0.047947375,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xF F,0xFF,0xFF
3,25,0.048042833,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xF F,0xFF,0xFF
3,26,0.048138292,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xF F,0xFF,0xFF
3,27,0.048233792,0x16,0xC6,0x0C,0xC1,0xF8,0x1A,0x7 D,0x88,0x09
Sign up now
to remove ads between posts
Oct 18, 2017, 09:51 AM
Registered User
Thread OP
I figured more of it out. Bytes 9-14 have channels 1-4 data, 12 bits per channel. It is TAER order. I assume the other channels follow the same format but I need to collect more data.

Also, I'm pretty sure that bytes 27-45 of the large packet is GPS data sent from the controller. I noticed that when I collect data right after powering on the transmitter then all of these bytes are 0x00. I still need to verify that but it makes sense.

Dylan
Oct 24, 2017, 12:37 AM
Registered User
Thread OP
So as far as I can tell bytes 9-26 are the radio channels, 12bits each, in this order:
T,A,E,R, Smart/Angle/Home switch, ? , Camera tilt Slider, Pan Knob , ? ,pan mode switch, landing Gear switch, Button 2

Not sure what channels the question marks are.

Bytes 30-27 of the 46 byte packets is the Latitude of the ST16 transmitter to 7 decimal places.
Byte 34-31 of the 46 byte packets is Longitude of the ST16 transmitter to 7 decimal places.
Jan 10, 2018, 02:58 PM
mam
mam
Registered User
Hello there,
Do you still work on the yuneec protocol?
I'm waiting for the result.
My radio receiver works the same way.
Thank you for your work
May 20, 2018, 05:57 PM
Registered User
Hello,

I'm very interested in this research.

Thanks to the information that you have searched, I know that it is a CC2530 based zigbee protocol. So, perhaps it will be easier sniffing the radio packets because the drone can fly while you capture data.

I will research in this url and I will post any advance

http://www.ti.com/tool/PACKET-SNIFFER
Feb 05, 2019, 08:47 PM
Registered User

Yuneec Q500 Zigbee Protocol Decoded


This may have already been done but I spent some time to decode the Zigbee protocol and was successful. I have a video showing the project and how I did it.

You can download the spreadsheet for the protocol. I haven't figured out everything but most of it. So help would be awesome!
http://www.codemakesitgo.com/wp-cont...-Protocol.xlsx

This protocol includes the ST10 & ST10+ controller and the Q500 quad. This information allows us to be able to fly the quad using Google Earth as a navigation aid (as in the video) or to even write our own custom controller!

Here is the video, hope you enjoy. Please let me know.
Yuneec Q500 Zigbee Protocol Decoded (8 min 59 sec)
Mar 08, 2019, 02:01 AM
Registered User
I'm not an electronics guy, and I realize this is a fairly old thread. But my question would be, based on the work you've done so far, would it be possible to change the RX in one of these birds to make it possible to fly it with a different controller? There are things I really like about the ST16 controller, but I really miss the ability to program everything like I could with my Taranis. The only thing I'd lose with the Taranis is the live video feed, and that could be recovered with the phone app, ala DJI. Just curious, thanks.

Dave
Apr 18, 2019, 11:23 AM
Registered User
saludos tengo un st10 y un sr24 original de mi q500 que se incendio la placa ya instale una pixhawk al drone ya esta todo configurado pero no logro emparejar el st10 con el sr24
alguien podria ayudarme con ese tema ojo ya no tengo la main del q500 porque esta quemada
gracias


Quick Reply
Message:

Thread Tools

Similar Threads
Category Thread Thread Starter Forum Replies Last Post
Discussion Open Source RC Protocol & Receiver Project soligen DIY Electronics 61 Mar 25, 2019 08:30 AM
Discussion Spektrum Remote Receiver Protocol Documentation AndyKunz DIY Electronics 14 Sep 11, 2017 06:25 PM
Discussion Spektrum Remote Receiver Protocol Documentation AndyKunz Radios 2 Nov 11, 2016 10:06 AM
Discussion spektrum satellite receiver protocol? mayday1 DIY Electronics 2 Oct 05, 2012 03:24 AM