HobbyKing.com New Products Flash Sale
Reply
Thread Tools
Old Jun 27, 2012, 03:13 PM
Registered User
Joined Apr 2012
14 Posts
Quote:
Originally Posted by zeza View Post

zeza - V911 tx #1
ID: 92 04 00 20
sequence: 6F 29 79 01 51 47 97 0B 5B 3D 8D 25(14) 65 33 83 1F

zeza - 9x tx #1
ID: FB 81 02 00
sequence: 1E 96 46 82 32 8C 3C 5A 0A 78 28 ??(64) 14 50 00 6E

PhracturedBlue
ID: 01 f3 20 00
Tx1: 79, 29, 6f, 1f, 83, 33, 65, 25, 8d, 3d, 5b, 0b, 97, 47, 51, 01

ID: 00 02 70 00
Tx2: 0a, 5a, 50, a0, 14, 64, 46, 96, 1e, 6e, 3c, 8c, 28, 78, 32, 82

My other flysky tx. I haven't analyzed the numbers, using the forums as my notes.

zeza - V911 tx #2
ID: 51 00 00 20
sequence: 9B 4B 91 41 87 37 7D 2D 73 23 69 29(18) 5F 0F 55 05


zeza - 9x tx #2 - Note: this one doesn't miss a hop
ID: BE 15 00 00
sequence: 47 97 33 83 1F 6F 15 65 29 79 0B 5B 3D 8D 01 51
zeza is offline Find More Posts by zeza
Reply With Quote
Sign up now
to remove ads between posts
Old Jul 01, 2012, 11:54 PM
Registered User
Joined Apr 2012
14 Posts
Quote:
Originally Posted by PhracturedBlue View Post
The frame data is not encrypted, and is 16-bit little endian. the data appears to be as follows.
Fo each channel the minimum value I observed was ~ 0x03e8 and the maximum was ~ 0x07ca.

word 1: 0x05aa for 3 seconds, and then 0x5505
word 2: 0x01f3
word 3: 0x2000
word 4: aileron.
word 5: elevator.
word 6: throttle.
word 7: rudder.
word 8: 0x02c3
word 9: 0x02ed
word 10:????
word 11: 0x0000

Word 10 seems to vary between 0x0024 and 0x0fff, but there are only a few discrete values observed: 0x0024, 0x0032, 0x0100, 0x0200, 0x0ffe, 0x0fff.
It does not seem to be dependent on the rest of the data, so it isn't any sort of checksum, and it doesn't move in a predictable fashion.

When I get my FlySky 9x, I'll probably try to send different patterns through the module and see which channels map where.
I just tested mapped out the channels on a 9x, the fields are in order. Using your numbering scheme above CH1 = word4 ... CH8 = word11.

The min/max values I observed was 03e2 and 07e3. The centers were all 05e0.

The 9x used in the test is running er9x, to test channels 5-8 I just remapped the sticks.



On a v911 tx the last 4 sets are gibberish as far as I can tell. Sometimes I think I see a pattern(decrementing) in word 9, perhaps this is some random memory location.
zeza is offline Find More Posts by zeza
Reply With Quote
Old Jul 02, 2012, 12:22 AM
Registered User
Joined Jan 2012
682 Posts
Quote:
Originally Posted by zeza View Post
I just tested mapped out the channels on a 9x, the fields are in order. Using your numbering scheme above CH1 = word4 ... CH8 = word11.

The min/max values I observed was 03e2 and 07e3. The centers were all 05e0.
Thanks, I've updated the Flysky.txt document with this info
PhracturedBlue is offline Find More Posts by PhracturedBlue
Reply With Quote
Old Jul 10, 2012, 04:11 PM
Registered User
United Kingdom, England, Redcar
Joined Jan 2006
3,268 Posts
Help

I have a Futaba T6 radio which i rarely use anymore and a V911 transmitter , is there a way i can install the 2.4 unit from the V911 into the Futaba which will allow me to control my little V911's and soon to be quads ? the Futaba already has a Corona 2.4 diy unit soldered in BUT it only uses 3 wires
http://www.rcgroups.com/forums/showthread.php?t=1144281

This one i believe (doesnt really make a difference ) . The v911 board that i can see has 6 ? soldered points which is were im stumped.

Sorry if its off topic , but i dont want to buy yet another radio just yet ( and i have asked previously and got zero replies )

Many thanks if you can help.
scousethief is offline Find More Posts by scousethief
Reply With Quote
Old Jul 11, 2012, 10:00 AM
Registered User
Joined Jan 2012
682 Posts
Quote:
Originally Posted by scousethief View Post
Help

I have a Futaba T6 radio which i rarely use anymore and a V911 transmitter , is there a way i can install the 2.4 unit from the V911 into the Futaba which will allow me to control my little V911's and soon to be quads ? the Futaba already has a Corona 2.4 diy unit soldered in BUT it only uses 3 wires
http://www.rcgroups.com/forums/showthread.php?t=1144281

This one i believe (doesnt really make a difference ) . The v911 board that i can see has 6 ? soldered points which is were im stumped.

Sorry if its off topic , but i dont want to buy yet another radio just yet ( and i have asked previously and got zero replies )

Many thanks if you can help.
I think that will be quite challenging unless you want to do some custom uC programming. the V911 module uses an SPI protocol whereas I'd expect the Futaba to output PPM or PWM.
Something like a Flysky module might be a better starting point, but then you need to get the channel ordering correct.
PhracturedBlue is offline Find More Posts by PhracturedBlue
Reply With Quote
Old Jul 12, 2012, 07:30 AM
RC beginner
New York
Joined Oct 2008
6,021 Posts
Quote:
Originally Posted by scousethief View Post
Help

I have a Futaba T6 radio which i rarely use anymore and a V911 transmitter , is there a way i can install the 2.4 unit from the V911 into the Futaba which will allow me to control my little V911's and soon to be quads ? the Futaba already has a Corona 2.4 diy unit soldered in BUT it only uses 3 wires
http://www.rcgroups.com/forums/showthread.php?t=1144281

This one i believe (doesnt really make a difference ) . The v911 board that i can see has 6 ? soldered points which is were im stumped.

Sorry if its off topic , but i dont want to buy yet another radio just yet ( and i have asked previously and got zero replies )

Many thanks if you can help.
heres a pic showing pinout of the module in case that would be of any use. i managed to get a couple talking to each other and also the ali modules but nothing of any practical value for flysky protocol. it would be interesting if somebody came up some flysky demos like was done in the frsky protocol thread. specially if avr based which is probably friendliest mcu platform.

dave1993 is offline Find More Posts by dave1993
Reply With Quote
Old Jul 12, 2012, 08:21 AM
Registered User
Joined Jan 2012
682 Posts
Quote:
Originally Posted by dave1993 View Post
heres a pic showing pinout of the module in case that would be of any use. i managed to get a couple talking to each other and also the ali modules but nothing of any practical value for flysky protocol. it would be interesting if somebody came up some flysky demos like was done in the frsky protocol thread. specially if avr based which is probably friendliest mcu platform.

I have most of the code written as part of the Deviation firmware. But I haven't gotten around to wiring it up to my A7105 to my Devo8 to finish it off. You can find it there as a starting point though. Porting to the AVR should be trivial.
PhracturedBlue is offline Find More Posts by PhracturedBlue
Reply With Quote
Old Jul 12, 2012, 10:15 AM
RC beginner
New York
Joined Oct 2008
6,021 Posts
i read the main.c and frsky.txt files there but with dozens of files and difficult to download got confused. what is "deviation"? you are trying to get 8ch on the v911 tx? for use with flysky 8ch rx? what processor?
dave1993 is offline Find More Posts by dave1993
Reply With Quote
Old Jul 12, 2012, 11:20 AM
Registered User
Joined Jan 2012
682 Posts
Quote:
Originally Posted by dave1993 View Post
i read the main.c and frsky.txt files there but with dozens of files and difficult to download got confused. what is "deviation"? you are trying to get 8ch on the v911 tx? for use with flysky 8ch rx? what processor?
look at protocols/flysky_a7105.c

the Deviation firmware is a custom firmware (initially) for the Walkera Devo transmitters. While it has many goals, one of them is to support multiple protocols through a single transmitter. Currently 3 CYRF6936 based protocols are supported. The DEVO8 provides easy pinned-out access to the SPI, so attaching the V911 transmitter board in parallel with the CYRF6936 is easy (just need to connect to a new enable pin, and there are several pinned out)
PhracturedBlue is offline Find More Posts by PhracturedBlue
Reply With Quote
Old Jul 12, 2012, 12:27 PM
RC beginner
New York
Joined Oct 2008
6,021 Posts
ahhhh... i remember you mentioning that in the other thread. very interesting project. i will take a look at that file. thanks.
dave1993 is offline Find More Posts by dave1993
Reply With Quote
Old Jul 12, 2012, 10:14 PM
Registered User
slebetman's Avatar
Malaysia, Selangor, Kajang
Joined Jun 2009
1,402 Posts
I've started woking on my own code again based on the Flysky.txt file. One thing I'm still confused about is the frequency hopping part. I can see that each transmitter has a different sequence of hops. But how does the RX know the sequence? I can't see any part of the data sent where the sequence is mentioned. Is it generated based on the TX id? And if so what's the algorithm that they use?
slebetman is offline Find More Posts by slebetman
Reply With Quote
Old Jul 12, 2012, 11:59 PM
Registered User
Joined Jan 2012
682 Posts
Quote:
Originally Posted by slebetman View Post
Is it generated based on the TX id? And if so what's the algorithm that they use?
This is our belief, yes, and we don't know the algorithm yet. the easiest way to figure it out is to send different IDs to the receiver and see how it responds. I haven't gotten around to trying it yet as I'm only interested in the Transmitter side, and I don't need to know the hopping algorithm to build one. I went through the process of doing this exact thing for the J6Pro recently, and while tedious, it didn't take too long to figure out how the id was converted into channel selection.
PhracturedBlue is offline Find More Posts by PhracturedBlue
Reply With Quote
Old Aug 13, 2012, 08:57 AM
Registered User
Joined Jan 2012
682 Posts
Here's an update on the flysky protocol. I finally implemented it in the Deviation firmware, so I was able to try sending different IDs and seeing how they behave. here is the result:
Code:
id      : 1st  strt                                                                       end  rpt
00000000: 0x01 0x0a 0x5a 0x14 0x64 0x1e 0x6e 0x28 0x78 0x32 0x82 0x3c 0x8c 0x46 0x96 0x50 0xa0 0x0a
00000001: 0x01 0xa0 0x50 0x96 0x46 0x8c 0x3c 0x82 0x32 0x78 0x28 0x6e 0x1e 0x64 0x14 0x5a 0x0a 0xa0
00000002: 0x01 0x0a 0x5a 0x50 0xa0 0x14 0x64 0x46 0x96 0x1e 0x6e 0x3c 0x8c 0x28 0x78 0x32 0x82 0x0a
00000003: 0x01 0x82 0x32 0x78 0x28 0x8c 0x3c 0x6e 0x1e 0x96 0x46 0x64 0x14 0xa0 0x50 0x5a 0x0a 0x82
00000004: 0x01 0x28 0x78 0x0a 0x5a 0x50 0xa0 0x14 0x64 0x1e 0x6e 0x3c 0x8c 0x32 0x82 0x46 0x96 0x28
00000005: 0x01 0x96 0x46 0x82 0x32 0x8c 0x3c 0x6e 0x1e 0x64 0x14 0xa0 0x50 0x5a 0x0a 0x78 0x28 0x96
00000006: 0x01 0x50 0xa0 0x28 0x78 0x0a 0x5a 0x1e 0x6e 0x3c 0x8c 0x32 0x82 0x46 0x96 0x14 0x64 0x50
00000007: 0x01 0x64 0x14 0x96 0x46 0x82 0x32 0x8c 0x3c 0x6e 0x1e 0x5a 0x0a 0x78 0x28 0xa0 0x50 0x64
00000008: 0x01 0x50 0xa0 0x46 0x96 0x3c 0x8c 0x28 0x78 0x0a 0x5a 0x32 0x82 0x1e 0x6e 0x14 0x64 0x50
00000009: 0x01 0x64 0x14 0x6e 0x1e 0x82 0x32 0x5a 0x0a 0x78 0x28 0x8c 0x3c 0x96 0x46 0xa0 0x50 0x64
0000000a: 0x01 0x46 0x96 0x3c 0x8c 0x50 0xa0 0x28 0x78 0x0a 0x5a 0x1e 0x6e 0x32 0x82 0x14 0x64 0x46
0000000b: 0x01 0x64 0x14 0x82 0x32 0x6e 0x1e 0x5a 0x0a 0x78 0x28 0xa0 0x50 0x8c 0x3c 0x96 0x46 0x64
0000000c: 0x01 0x46 0x96 0x0a 0x5a 0x3c 0x8c 0x14 0x64 0x50 0xa0 0x28 0x78 0x1e 0x6e 0x32 0x82 0x46
0000000d: 0x01 0x82 0x32 0x6e 0x1e 0x78 0x28 0xa0 0x50 0x64 0x14 0x8c 0x3c 0x5a 0x0a 0x96 0x46 0x82
0000000e: 0x01 0x46 0x96 0x0a 0x5a 0x50 0xa0 0x3c 0x8c 0x28 0x78 0x1e 0x6e 0x32 0x82 0x14 0x64 0x46
0000000f: 0x01 0x64 0x14 0x82 0x32 0x6e 0x1e 0x78 0x28 0x8c 0x3c 0xa0 0x50 0x5a 0x0a 0x96 0x46 0x64
00000010: 0x02 0x09 0x59 0x13 0x63 0x1d 0x6d 0x27 0x77 0x31 0x81 0x3b 0x8b 0x45 0x95 0x4f 0x9f 0x09
00000011: 0x02 0x9f 0x4f 0x95 0x45 0x8b 0x3b 0x81 0x31 0x77 0x27 0x6d 0x1d 0x63 0x13 0x59 0x09 0x9f
00000012: 0x02 0x09 0x59 0x4f 0x9f 0x13 0x63 0x45 0x95 0x1d 0x6d 0x3b 0x8b 0x27 0x77 0x31 0x81 0x09
00000021: 0x03 0x9e 0x4e 0x94 0x44 0x8a 0x3a 0x80 0x30 0x76 0x26 0x6c 0x1c 0x62 0x12 0x58 0x08 0x9e
00000022: 0x03 0x08 0x58 0x4e 0x9e 0x12 0x62 0x44 0x94 0x1c 0x6c 0x3a 0x8a 0x26 0x76 0x30 0x80 0x08
00000081: 0x09 0x98 0x48 0x8e 0x3e 0x84 0x34 0x7a 0x2a 0x70 0x20 0x66 0x16 0x5c 0x0c 0x52 0x02 0x98
00000100: 0x01 0x0a 0x5a 0x14 0x64 0x1e 0x6e 0x28 0x78 0x32 0x82 0x3c 0x8c 0x46 0x96 0x50 0xa0 0x0a
00000101: 0x01 0xa0 0x50 0x96 0x46 0x8c 0x3c 0x82 0x32 0x78 0x28 0x6e 0x1e 0x64 0x14 0x5a 0x0a 0xa0
00076f19: 0x02 0x63 0x13 0x6d 0x1d 0x81 0x31 0x59 0x09 0x77 0x27 0x8b 0x3b 0x95 0x45 0x9f 0x4f 0x63
70000002: 0x01 0x0a 0x5a 0x50 0xa0 0x14 0x64 0x46 0x96 0x1e 0x6e 0x3c 0x8c 0x28 0x78 0x32 0x82 0x0a
id = the 32bit ID I sent (valuewas sent in little-endian format)
1st = the1st channel sent. this seems to be equal to 1 + (id & 0xff) >> 4
start = the beginning of the sequence
end = the end of the sequence
rpt = start of the new sequence (should always be the same value as 'start'

I haven't tried to figure out the values themselves, however it appears the there are only 256 unique ids.
There are 16 unique combinations that are sent for 'id mod 16'. you then subtract id/16 from the base value up to id = 256. at id=256 the sequence repeats.

so you choose a row from the above (0x00 - 0x0f)
row = rows[id % 16]
and then you subtract (id & 0xff) >> 4 from each value

Edit: the values above are read from the receiver (and then '1' is added since the Rx requests a channel one less thanthe Tx). The '1st' value seems to be unique to the Rx. I don't ever see the Tx send this value. These values were obtained from a Turnigy 9x receiver.
PhracturedBlue is offline Find More Posts by PhracturedBlue
Last edited by PhracturedBlue; Aug 13, 2012 at 09:06 AM.
Reply With Quote
Old Aug 13, 2012, 09:55 PM
Registered User
slebetman's Avatar
Malaysia, Selangor, Kajang
Joined Jun 2009
1,402 Posts
Quote:
Originally Posted by PhracturedBlue View Post
Here's an update on the flysky protocol. I finally implemented it in the Deviation firmware, so I was able to try sending different IDs and seeing how they behave.
Cool. With the full table and a big enough EEPROM (looks like it doesn't even really need to be very big) we can implement the hopping without even having to figure out the algorithm that generates them.
slebetman is offline Find More Posts by slebetman
Reply With Quote
Old Aug 14, 2012, 12:33 AM
Registered User
Joined Jan 2012
682 Posts
Quote:
Originally Posted by slebetman View Post
Cool. With the full table and a big enough EEPROM (looks like it doesn't even really need to be very big) we can implement the hopping without even having to figure out the algorithm that generates them.
already done in the Deviation firmware
PhracturedBlue is offline Find More Posts by PhracturedBlue
Reply With Quote
Reply


Thread Tools

Similar Threads
Category Thread Thread Starter Forum Replies Last Post
Question 9X - FlySky/iMax/Turnigy/Eurgle FOR DUMMIES aeajr Radios 986 Today 06:42 AM
Discussion Benefits of buying FlySky TH9x (v2) over Turnigy 9x (v2) wwfisher Radios 54 Aug 13, 2014 12:35 PM
Found turnigy 9x/flysky 9x wanted!!! kremecheze Aircraft - General - Radio Equipment (FS/W) 2 Mar 25, 2012 04:04 PM
Wanted ER9x or Turnigy/Flysky 9x daign FPV Equipment (FS/W) 0 Mar 22, 2012 06:21 PM
Found Turnigy/FlySky/Eurkle/etc 9X Shell flyandi Aircraft - General - Radio Equipment (FS/W) 0 Mar 11, 2012 06:12 PM