Replaying & receiving data obtained from URH using CC1101 #842

smolbun · 2023-10-05T14:19:40Z

smolbun
Oct 5, 2023

I've been playing around with Universal Radio Hacker (URH) particularly ASK modulation.
I'm having issues replaying "88ee88ee8888888e8888888e8".

How can I replay such an array of bytes?
Is it possible to transmit signals directly by controlling GDO0 HIGH/ LOW pin states? (For e.g using digitalWrite() for an array of raw timings)
Is it possible to receive signals directly, HIGH/LOW states will output via GDO2.

For 2 and 3 I'm referring to rc-switch specifically from LSatan's CC1101 Library

CC1101 module with RadioLib

Code for 1:

#include <RadioLib.h>
#include <SPI.h>
#define SCK_PIN 18
#define MISO_PIN 16
#define MOSI_PIN 19
#define SS_PIN 17

// CC1101 has the following connections:
// CS pin:    10
// GDO0 pin:  2
// RST pin:   unused
// GDO2 pin:  3 (optional)
CC1101 radio = new Module(SS_PIN, 20, RADIOLIB_NC, 21);

// or using RadioShield
// https://github.com/jgromes/RadioShield
// CC1101 radio = RadioShield.ModuleA;

void setup()
{
    Serial.begin(115200);

#ifdef ARDUINO_ARCH_RP2040
    SPI.setRX(MISO_PIN);
    SPI.setCS(SS_PIN);
    SPI.setSCK(SCK_PIN);
    SPI.setTX(MOSI_PIN);
#endif

    delay(2000);
    // initialize CC1101 with default settings
    Serial.print(F("[CC1101] Initializing ... "));
    int state = radio.begin(433.92, 2.5, 5.0, 58.0, 10, 32);

    if (state == RADIOLIB_ERR_NONE)
    {
        Serial.println(F("success!"));
    }
    else
    {
        Serial.print(F("failed, code "));
        Serial.println(state);
        while (true)
            ;
    }

    // set node address
    // NOTE: Calling this method will automatically enable
    //       address filtering. CC1101 also allows to set
    //       number of broadcast address (0/1/2).
    //       The following sets one broadcast address 0x00.
    //       When setting two broadcast addresses, 0x00 and
    //       0xFF will be used.
    Serial.print(F("[CC1101] Setting node address ... "));
    state = radio.setNodeAddress(0x01, 1);
    if (state == RADIOLIB_ERR_NONE)
    {
        Serial.println(F("success!"));
    }
    else
    {
        Serial.print(F("failed, code "));
        Serial.println(state);
        while (true)
            ;
    }
}

void loop()
{
    radio.setOOK(true);
    radio.setCrcFiltering(false);
    radio.disableSyncWordFiltering();
    Serial.print(F("[CC1101] Transmitting packet ... "));

    // you can also transmit byte array up to 63 bytes long
    /*
      byte byteArr[] = {0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF};
      int state = radio.transmit(byteArr, 8);
    */
    // 88 ee 88 ee 88 88 88 8e 88 88 88 8e 80
    byte byteArr[] = {0x88, 0xee, 0x88, 0xee, 0x88, 0x88, 0x88, 0x8e, 0x88, 0x88, 0x88, 0x8e, 0x80 };
    
    radio.transmit(byteArr, 13);

    // wait for a second before transmitting again
    delay(1000);
}

jgromes · 2023-10-05T14:45:21Z

jgromes
Oct 5, 2023
Maintainer

From the capture, it seems that packet length and CRC are enabled. That can be disabled by calling fixedPacketLengthMode(13); and setCrcFiltering(false);. I don't understand why are you setting the address to 0x01.
There are the transmitDirect and receiveDirect methods to facilitate this. After calling, the transceiver will be put in a "direct mode" in which it will take input from GDO0 (clock) and GDO2 (data) pins in synchronous mode, or in async mode just data on GDO0. RadioLib uses this to implement ham radio modes like Morse or RTTY.
Same answer as above, there's also an example for a different module (https://github.com/jgromes/RadioLib/blob/master/examples/SX127x/SX127x_Receive_Direct/SX127x_Receive_Direct.ino), the logic is the same for CC1101.

1 reply

smolbun Oct 5, 2023
Author

Thanks for the quick reply, I got 1. to work and its all good. As for 2. it works but GDO0 stays high despite setting it to LOW, I've even tried radio.reset() but that didn't fix it. [edit: seems like the void loop() freezes]

#include <RadioLib.h>
#include <SPI.h>
#define SCK_PIN 18
#define MISO_PIN 16
#define MOSI_PIN 19
#define SS_PIN 17

// CC1101 has the following connections:
// CS pin:    10
// GDO0 pin:  2
// RST pin:   unused
// GDO2 pin:  3 (optional)
CC1101 radio = new Module(SS_PIN, 20, RADIOLIB_NC, 21);

// or using RadioShield
// https://github.com/jgromes/RadioShield
// CC1101 radio = RadioShield.ModuleA;

void setup()
{
    Serial.begin(115200);

#ifdef ARDUINO_ARCH_RP2040
    SPI.setRX(MISO_PIN);
    SPI.setCS(SS_PIN);
    SPI.setSCK(SCK_PIN);
    SPI.setTX(MOSI_PIN);
#endif

    delay(2000);
    Serial.print(F("[CC1101] Initializing ... "));
    int state = radio.begin(433.92, 2.5, 5.0, 58.0, 10, 32);

    if (state == RADIOLIB_ERR_NONE)
    {
        Serial.println(F("success!"));
    }
    else
    {
        Serial.print(F("failed, code "));
        Serial.println(state);
        while (true)
            ;
    }

    // set node address
    // NOTE: Calling this method will automatically enable
    //       address filtering. CC1101 also allows to set
    //       number of broadcast address (0/1/2).
    //       The following sets one broadcast address 0x00.
    //       When setting two broadcast addresses, 0x00 and
    //       0xFF will be used.
    Serial.print(F("[CC1101] Setting node address ... "));
    // state = radio.setNodeAddress(0x01, 1);
    if (state == RADIOLIB_ERR_NONE)
    {
        Serial.println(F("success!"));
    }
    else
    {
        Serial.print(F("failed, code "));
        Serial.println(state);
        while (true)
            ;
    }
    pinMode(20, OUTPUT);
}

void loop()
{
    radio.setOOK(true);
    // Disable preamble
    radio.disableSyncWordFiltering();
    // Disable CRC
    radio.setCrcFiltering(false);
    radio.fixedPacketLengthMode(13);
    
    // Example 1: using array of bytes
    // // Data obtained from URH
    // byte byteArr[] = {0x88, 0xee, 0x88, 0xee, 0x88, 0x88, 0x88, 0x8e, 0x88, 0x88, 0x88, 0x8e,0x80,0x00 };

    // Repeat transmission 10 times
    // for (int i = 0; i < 11; i++)
    // {
    //     radio.transmit(byteArr, 14);
    //     delayMicroseconds(10000 - 5000); // 10ms would have an actual delay of ~15ms
    // }

    // Example 2: replaying directly using array of raw timings
    radio.transmitDirect();
    uint16_t rawTimings[] = {400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400};
    for (int i = 0; sizeof(rawTimings) / sizeof(rawTimings[0]); i++)
    {
        digitalWrite(20, (i % 2 == 0) ? HIGH : LOW);
        delayMicroseconds(rawTimings[i]);
    }
     digitalWrite(20, LOW);
    radio.finishTransmit();
    
    // wait for 5s before transmitting again
    delay(5000);
}

smolbun · 2023-10-06T02:58:41Z

smolbun
Oct 6, 2023
Author

Seems like I had a typo earlier, got it fixed.

radio.transmitDirect();
    delay(10);
    uint16_t rawTimings[] = {400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400};
    for (int i = 0; i < sizeof(rawTimings) / sizeof(rawTimings[0]); i++)
    {
        digitalWrite(20, (i % 2 == 0) ? HIGH : LOW);
        delayMicroseconds(rawTimings[i]);
    }
     digitalWrite(20, LOW);

0 replies

smolbun · 2023-10-06T05:00:10Z

smolbun
Oct 6, 2023
Author

~~How did you know setting 13 to fixedPacketLengthMode would disable CRC? I couldn't find any info when I glanced through the datasheet.~~
I get [CC1101] Initializing ... failed, code -104 when I set the bandwidth 60 and above radio.begin(433.92, 2.5, 5.0, 60.0, 10, 32); , it doesn't throw an error when it's radio.begin(433.92, 2.5, 5.0, 58.0, 10, 32); Why does that happened? Isn't it in the range of 58.0 to 812.0.
I've tried hooking up a logic analyzer to my CC1101 GDO2 but I do not see any activity on that pin in particular.
Only receiveDirectAsync() works, receiveDirect() doesn't. When using receiveDirectAsync(), any data received will output only to GDO0 and not GDO2. Even though the bandwidth is the lowest, the signal out is very noisy. I've tested same hardware with LSatan's CC1101 library "ELECHOUSE_cc1101.SetRx()" GDO2 outputs clean signal at 58 so I don't think it's a hardware/connection issue. [Edited: fix typo]
The transmission seems to be off as well, when set to 433.92MHz the actual signal is at 433.86Mhz

Code:

#include <RadioLib.h>
#include <SPI.h>
#define SCK_PIN 18
#define MISO_PIN 16
#define MOSI_PIN 19
#define SS_PIN 17

#define outputPin 20
#define inputPin 21

// CC1101 has the following connections:
// CS pin:    17
// GDO0 pin:  20
// RST pin:   unused
// GDO2 pin:  21 (optional)
CC1101 radio = new Module(SS_PIN, 20, RADIOLIB_NC, 21);

void setup()
{
    Serial.begin(115200);

#ifdef ARDUINO_ARCH_RP2040
    SPI.setRX(MISO_PIN);
    SPI.setCS(SS_PIN);
    SPI.setSCK(SCK_PIN);
    SPI.setTX(MOSI_PIN);
#endif

    delay(2000);
    // initialize CC1101 with default settings
    Serial.print(F("[CC1101] Initializing ... "));
    int state = radio.begin(433.92, 2.5, 5.0, 58.0, 10, 32);

    if (state == RADIOLIB_ERR_NONE)
    {
        Serial.println(F("success!"));
    }
    else
    {
        Serial.print(F("failed, code "));
        Serial.println(state);
        while (true)
            ;
    }

    // pinMode(outputPin, OUTPUT);
    // pinMode(inputPin, INPUT);

    radio.setOOK(true);
    // Disable preamble
    radio.disableSyncWordFiltering();
    // Disable CRC
    radio.setCrcFiltering(false);
    radio.fixedPacketLengthMode(13);
    radio.receiveDirectAsync();
}

void loop()
{

    // Example 1: using array of bytes
    // Data obtained from URH
    // byte byteArr[] = {0x88, 0xee, 0x88, 0xee, 0x88, 0x88, 0x88, 0x8e, 0x88, 0x88, 0x88, 0x8e,0x80 };

    // for (int i = 0; i < 11; i++)
    // {
    //     radio.transmit(byteArr, 14);
    //     delayMicroseconds(10000 - 4500); // 10ms would have an actual delay of ~15ms
    // }

    // Example 2: replaying directly using array of raw timings
    // radio.transmitDirect();
    // uint16_t rawTimings[] = {400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12000, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400};
    // for (int i = 0; i < sizeof(rawTimings) / sizeof(rawTimings[0]); i++)
    // {
    //     digitalWrite(outputPin, (i % 2 == 0) ? HIGH : LOW);
    //     delayMicroseconds(rawTimings[i]);
    // }
    // digitalWrite(outputPin, LOW);

    // delay(5000);
}

5 replies

jgromes Oct 9, 2023
Maintainer

Starting off with the easy stuff:

I was not able to replicate that, my CC1101 transmits at 433.92015 when set to 433.92 and slowly drifts upwards. It should be noted that RadioLib assumes the crystal oscillator to be 26 MHz, could you check yours?
The bandwidth configuration isn't continuous, but only possible for specific values listed in the datasheet. The documentation failed to mentioned that, it's fixed now. The allowed values are 58, 68, 81, 102, 116, 135, 162, 203, 232, 270, 325, 406, 464, 541, 650 and 812 kHz.

I'll try to investigate the other points as well.

smolbun Oct 9, 2023
Author

Yes my module uses 26MHz crystal as well. I'm using this CC1101 module.

I've switch to an official RTL-SDR and notice 0.02MHz difference.

Calibrated with LSatan's library:

I'm not exactly sure how the calibration works on LSatan's library, I've mine set accordingly.

...
if (378.0 <= freq && freq <= 464.0)
   {
        ELECHOUSE_cc1101.setClb(2, 11, 14);
   }
...

Calibration sketch I've used to obtain those values

jgromes Oct 9, 2023
Maintainer

I didn't do any sort of calibration, nor did I see any need to do so on the CC1101 devices I have used in the past - may be just a lucky lot of the oscillators. I should note taht your module looks quite different from mine though.

smolbun Oct 9, 2023
Author

May I ask, where did you get your CC1101 module from?

jgromes Oct 23, 2023
Maintainer

Honestly, I don't remember, most likely some ebay vendor, since that's how I get 90% of these transceivers.

Crsarmv7l · 2024-03-15T12:17:06Z

Crsarmv7l
Mar 15, 2024

Sorry to jump in to this old conversation, but you all are talking about things I am attempting to research without much luck.

I want to use synchronous serial to rx data.

Per Ti Developer note AN095 sync serial provides the clock on one pin and the data on another.

What I can't find in either LSatan's ELECHOUSE lib or in Radiolib is how this is set up in the api's. Which pin is which? Also for that matter I see in radiolib directmode which I assume is synchronous serial, as I see directmode async.

0 replies

smolbun · 2024-03-15T15:06:51Z

smolbun
Mar 15, 2024
Author

I made a simple RF remote repeater with LSatan's ELECHOUSE lib but I've yet to published it. Mine works by polling gdo2 pin when its in direct receive mode, it then stores the duration of it's HIGHs and LOWs into an array. As for replaying the signal it does it in direct mode as well. These examples may be of interest Rc-switch example .

9 replies

cgmckeever May 31, 2024

Thank you! I will parse this a bit, see if there is anything can unF me!
Here was my original working repeated code and here is my signal flare to see if there are other workarounds with radiolib ...

Crsarmv7l May 31, 2024

Woo there are 3 of us! Seems like most people using this lib are interested in lora.

I have been spending most of my time on PCBs/and Device cases but in the next few weeks I will be back into software. Made some tweaks to the CC1101.cpp with the direct buffer and will be implementing an rssi filter. Got a pretty good idea how to go about it. I know smolbun is working on similar so all of us might as well share lessons learned.

cgmckeever-orbis May 31, 2024

@Crsarmv7l you too are making a repeater? How are you doing the initial decoder? I was originally using RC-Switch to get a decoded signal, and then transmit that signal with RC-Switch when a web request came in to send it. I was also real-time listening for and decoding using the RTL_433_esp library -- but now that has rc-switch conflicts due to the move to RadoLib .. I can has two devices, but thats annoying ...

cgmckeever-orbis May 31, 2024

Do you have some sample code?

Crsarmv7l Jun 3, 2024

Sorry, not a repeater. I am more interested in signals (lights, outlets, weather sensors, tpms, etc) the typical stuff you analyze with URH.

In terms of decoders, I will be creating decoders to deal with such signals which are usually fairly simple (ignoring the CRC's of certain TPMS). Haven't gotten to the decoders as of yet.

So far my project was focused on basic functionality, which I am pretty much there, then I shifted to PCB/Case and miniaturization. As of last night I have pretty much wrapped up those pieces (still need to do the prints in PETG instead of PLA), so in the coming weeks I will move on to finishing whats left of the basics and move on to decoders.

As far as decoding signals I have found it to be very helpful to read how the decoders work in rtl_433, then grab one from the rtl_433 test repo and break it down in URH and decode it by hand. That has helped me to write a decent amount of decoders for the Yardstick One.

Pictures because I am proud of how well the hw came out:

Crsarmv7l · 2024-04-13T13:40:31Z

Crsarmv7l
Apr 13, 2024

I'm mainly working with RF remote with unknown protocols therefore I didn't bother decoding the signals, perhaps there's a more efficient method out there. I poll mine based on state changes, I believe Rc-switch does something similar but with interrupts instead.

Came back to this because of your transmitdirect discussion above. I got serial sync rx working but need sync tx ha. Seems like I always end up circling back to where I started.

Although your discussion also clued me in because when using the FIFO for tx I hadn't disabled CRC or set fixed packet length. Need to do more experiments, because I am good with FIFO limitations if the end result is exactly what I put in.

8 replies

Crsarmv7l Apr 29, 2024

I see you figured out some things.

That was just an example but it is intended to return EVERYTHING. Anything that is intended to act as a filter is turned off (CRC, syncword, Packet Quality Threshold (PQT) is set to 0). I do that intentionally for building decoders because I want a constant raw stream feeding in. For you there are many ways to reduce the noise, the best among them would be to introduce a syncword with setDirectSyncWord. Such a raw stream of data cannot be done with the CC1101 FIFO's at least from what I have found.

Carriersense is a minor form of filtering.

You could also include an RSSI filter (eg only return signals while RSSI > some value).

As far as baudrate I have used inspectrum in the past to figure out signal baudrates, but IMO the easiest way is to measure the duration of a bit (inspectrum, URH, heck rtl_433) and use one of these lookup tables.

It wont be exact, but it will get you close especially since most signals do fall into a pretty standard rate.

smolbun Apr 29, 2024
Author

I tried rewriting the code that gets bytes that is under -50 rssi, getRSSI() is stuck at -74. You've raised an issue that was marked as completed, do you have an implementation of that?

void loop() {
    while (radio.available() && radio.getRSSI() >= -50) {
      byte b = radio.read();
      Serial.print(b, HEX);
    }
}

Crsarmv7l Jun 8, 2024

With the latest release RSSI is fixed if you didn't do it manually. I got my RSSI filter working. Dunno if you were still interested in it. Its not perfect as you can't constantly check RSSI without missing some signal (@jgromes is always right!). So I check RSSI, if above a set threshold, stop checking RSSI, fill the buffer (my buffer is smaller, you will probably need to adjust), and return it. Otherwise purge the buffer. Seems to work ok, you are going to get noise at the end of the buffer since you only check RSSI at the beginning. There is probably a better way to do it.

boolean RSSIflag = false;
usrRSSI = -70;

if (RSSIflag ==false) {
      if (radio.getRSSI() > usrRSSI) {
        RSSIflag = true;
      }
    }
    
    if (RSSIflag) {
      if (radio.available() == 63) {
        while (radio.available()) {
          byte b = radio.read();
          Serial.print(b, HEX);
        }
      Serial.println();
      RSSIflag = false;
     }
   }
   else {
      while (radio.available()) {
        byte c = radio.read();
      }
    }

I need to figure out tx with sync serial or async. The signals I am interested in have more than the FIFO can hold. Or i need a fast way to fill/tx/refill/tx again with the FIFO

jgromes Jun 8, 2024
Maintainer

@Crsarmv7l

The signals I am interested in have more than the FIFO can hold

There is a way to work around that. On some modules like SX127x, I have implemented a "stream" mode that fills/unloads FIFO on-the-fly - see examples/Stream_*. In theory, this should be possible on CC1101 as well, however, I have never managed to get it running. If you could make it work, it would be a very good addition to RadioLib.

(@jgromes is always right!)

I beg to differ, take one look at the commits here and you will find taht in fact this very repository is mostly a giant record of my oversights, mistakes, missteps and downright foolishness :D

Crsarmv7l Jun 8, 2024

Annnnd now I am reading Ti design docs.

https://www.ti.com/lit/an/swra109c/swra109c.pdf

Is very interesting. Particularly this part which seems to be what Stream does. I make no promises. I am just a tinkerer

2.2 Packet Size ≤ 255 Bytes
It is fully possible to transmit and receive packets with packet size up to 255 bytes, but the
firmware will be more complex since the TX FIFO will need to be refilled while in TX and the
RX FIFO needs to be read while in RX. There are two different ways to implement this in
firmware. One can either have the MCU poll status registers on the SPI or one can have an
interrupt driven solution. Both fixed and variable packet length mode can be used.
2.2.1 SPI Polling
The status byte returned on the MISO line or the TXBYTES or RXBYTES register can be
polled at a given rate after strobing TX or RX, to see if there is room for more bytes in the TX
FIFO or more bytes to read from the RX FIFO.
TX:

Start by writing 64 bytes to the TX FIFO

Strobe TX

Poll the status byte or the TXBYTES register at a given rate to see if there is space
available in the TX FIFO.

Write to the TX FIFO whenever there is room for more bytes

Repeat 3 and 4 until the whole packet is written to the TX FIFO

Crsarmv7l · 2024-04-29T15:17:45Z

Crsarmv7l
Apr 29, 2024

The maintainer pushed a fix, but didn't issue a new release as of yet. Should be easy enough to include the changes in your local library. Alternatively you could simply delete your local Physical layer cpp and replace it with the current one from the repo. As for my implementation, no I haven't done it yet because I am thinking of a better way o purge the buffer if RSSI is less than the set point. With direct read, we are constantly reading the pin if the clock is high and storing it in the buffer even if it doesn't meet your specified RSSI. Sure we could use an else and read out each byte to do nothing with if RSSI is too low but that is pretty wasteful. We could also use memset/memcpy with God mode to zero out the buffer directly (and reset the bufferWritepos/bufferReadpos,) but the current buffer implementation is writing directly to the bytes in the buffer which gives me pause. So I'm still thinking a bit.

…

On Mon, Apr 29, 2024, 11:04 AM smolbun ***@***.***> wrote: I tried rewriting the code that gets bytes that is under -50 rssi, getRSSI() is stuck at -74. You've raised an issue that was marked as completed, do you have an implementation of that? void loop() { while (radio.available() && radio.getRSSI() >= -50) { byte b = radio.read(); Serial.print(b, HEX); } } — Reply to this email directly, view it on GitHub <#842 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AULD4G5RGKAW2FNCZM7RCBTY7ZORRAVCNFSM6AAAAAA5ULDH22VHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TENRUGEYDI> . You are receiving this because you commented.Message ID: ***@***.***>

0 replies

Crsarmv7l · 2024-04-29T17:16:05Z

Crsarmv7l
Apr 29, 2024

Took a much closer look, and based on a convo I had with the maintainer I think I have an idea so updateDirect isn't writing straight to the buffer, and instead writing to an intermediate single byte buffer. That way we can pull the buffer out from the God Mode restriction and access it/modify it directly.

I'll see if I can get something together and put in a pull request in the next few days.

0 replies

smolbun · 2024-05-22T04:51:30Z

smolbun
May 22, 2024
Author

Hi @jgromes , I'm quite confused on the behaviour of setBitRate(), I've set it to 3.33 and indeed each pulse is 300us. I'm transmitting in direct mode shouldn't the pulse follow accordingly? Is there a way to avoid such behaviour without having to explicitly set the bit rate to 2.5 to achieve 400us?

#include <RadioLib.h>
#include <SPI.h>
#define SCK_PIN 10
#define MISO_PIN 8
#define MOSI_PIN 7
#define SS_PIN 4

#define gdo2 3
#define gdo0 1

CC1101 radio = new Module(SS_PIN, gdo0, RADIOLIB_NC, gdo2);

void setup() {
  Serial.begin(115200);
  delay(2000);
  Serial.print(F("[CC1101] Initializing ... "));
  int state = radio.begin();
  if (state == RADIOLIB_ERR_NONE) {
    Serial.println(F("CC1101 Init: Success!"));
  } else {
    Serial.print(F("CC1101 Failed: Code "));
    Serial.println(state);
    while (true)
      ;
  }
  radio.setFrequency(433.92);
  radio.setBitRate(3.33);
  radio.setOutputPower(10);
  radio.setOOK(true);
  radio.setCrcFiltering(false);
  radio.disableSyncWordFiltering();
  pinMode(gdo0, OUTPUT);
}

void loop() {
  radio.transmitDirect();
  delay(10);
  uint16_t rawTimings[] = { 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12203, 400, 1200, 334, 1273, 1148, 400, 1200, 457, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12188, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12207, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12190, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12194, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12206, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12193, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12210, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12198, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 12195, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 1200, 400, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 400, 1200, 1200, 400, 400 };

  for (int i = 0; i < sizeof(rawTimings) / sizeof(rawTimings[0]); i++) {
    digitalWrite(gdo0, (i % 2 == 0) ? HIGH : LOW);
    delayMicroseconds(rawTimings[i]);
  }
  digitalWrite(gdo0, LOW);
  radio.finishTransmit();
  delay(5000);
}

8 replies

smolbun May 24, 2024
Author

The even elements in the array is the HIGH pulse that's why I used digitalWrite(gdo0, (i % 2 == 0) ? HIGH : LOW), it is followed then by how long to keep it HIGH or LOW.

Crsarmv7l May 24, 2024

I could always be wrong...but delayMicroseconds(rawTimings[i]); is not how long to keep it high or low; it is a delay before it writes the next high/low (how long to do nothing). digitalWrite is how long to keep it high or low, but you don't pass the timing to it, only the index number.

Since you don't pass the timing to it your highs will only be the duration of the clock, eg the bitrate

Crsarmv7l May 24, 2024

If it were me I would try something like:

for (int i = 0; i < sizeof(rawTimings); i++) {
    If ( i % 2 ==0) {
        digitalWrite(gdo0, rawTimings[i] / rawTimings[0]);
    else
        delayMicroseconds(rawTimings[i]);
    }
}

Keep in mind the above for sure has some issues, its just a for instance

smolbun May 24, 2024
Author

Hmm I actually didn't think about bitrate at all, I'm trying to import code that uses Lsatan's library, if I would set GDO0 to HIGH it will remain that state for however long until I set GDO0 to LOW, that's why I used delayMicroseconds(). This approach seems to work well with transmitDirectAsync() though.
[edit]
Regarding your implementation, I'm pretty sure the 2nd parameter for digitalWrite() is either a HIGH or LOW

Crsarmv7l May 31, 2024

Hmm I actually didn't think about bitrate at all, I'm trying to import code that uses Lsatan's library, if I would set GDO0 to HIGH it will remain that state for however long until I set GDO0 to LOW, that's why I used delayMicroseconds(). This approach seems to work well with transmitDirectAsync() though. [edit] Regarding your implementation, I'm pretty sure the 2nd parameter for digitalWrite() is either a HIGH or LOW

Probably, That was simply to show a train of thought. It also assumes OOK.

smolbun · 2024-08-14T11:26:53Z

smolbun
Aug 14, 2024
Author

Hi @jgromes I notice that with receiveDirectAsync(), getRssi() seems to only return -74 but with receiveDirect(), it works normally. I'm currently using v6.6 of the library, v6.5 does not have this issue.

#include <RadioLib.h>

#define SS_PIN 4
#define gdo2 3
#define gdo0 1
#define usrbutton 21

CC1101 radio = new Module(SS_PIN, gdo0, RADIOLIB_NC, gdo2);

void setup() {
  Serial.begin(115200);

  while (!Serial) {};

  int state = radio.begin();
  if (state == RADIOLIB_ERR_NONE) {
    Serial.println(F("CC1101 Init: Success!"));
  } else {
    Serial.print(F("CC1101 Failed: Code "));
    Serial.println(state);
    while (true)
      ;
  }

  pinMode(gdo0, INPUT_PULLUP);
  pinMode(gdo2, INPUT_PULLUP);
  pinMode(usrbutton, INPUT_PULLUP);

  radio.setFrequency(433.92);
  radio.setOOK(true);
  radio.setRxBandwidth(650);
  radio.receiveDirectAsync();
}

const int rssiThreshold = -55;
const uint16_t maxSample = 2000;
uint16_t timings[maxSample] = { 0 };
uint32_t lastTime = 0;
uint16_t sample = 0;

bool RSSIflag = false;

void loop() {
  uint32_t time = micros();
  
  if (RSSIflag == false) {
    int rssi = radio.getRSSI();
    Serial.println(rssi);
    if (rssi > rssiThreshold) RSSIflag = true;
  }

  if (RSSIflag) {
    static uint8_t prevLevel = 0;
    bool level = digitalRead(gdo0);

    // On state change
    if (level != prevLevel) {
      uint32_t duration = time - lastTime;
      if (sample > maxSample) {
        sample = 0;
        memset(timings, 0, sizeof(timings));
      }
      if (!(sample == 0 && prevLevel == 1)) timings[sample++] = duration;
      lastTime = time;
      prevLevel = level;
    }
    RSSIflag = false;
  }

  static bool readyToReplay = false;
  if (sample > 10 && time - lastTime >= 100000) {
    Serial.printf("Samples: %d \n", sample);
    uint16_t size = sizeof(timings) / sizeof(timings[0]);
    Serial.println("Raw timings: ");
    Serial.print("[");
    for (uint16_t i = 0; i < size; i++) {
      if (timings[i] != 0) {
        Serial.print(timings[i]);
        if ((i < size - 1) && (timings[i + 1] != 0)) {
          Serial.print(", ");
        }
      }
    }
    Serial.println("]");
    lastTime = time;
    sample = 0;
    readyToReplay = true;
  }

  if (readyToReplay && digitalRead(usrbutton) == LOW) {
    Serial.println("Replaying Signal");

    int size = sizeof(timings) / sizeof(timings[0]);
    pinMode(gdo0, OUTPUT);
    radio.transmitDirectAsync();
    radio.setOutputPower(10);

    for (uint16_t i = 0; i < size; i++) {
      digitalWrite(gdo0, (i % 2 == 0) ? LOW : HIGH);
      delayMicroseconds(timings[i]);
    }
    digitalWrite(gdo0, LOW);
    pinMode(gdo0, INPUT_PULLUP);
    radio.receiveDirectAsync();
    memset(timings, 0, sizeof(timings));
    readyToReplay = false;
    delay(100);
  }
}

1 reply

jgromes Aug 14, 2024
Maintainer

@smolbun -74 seems familiar: #1121, unfortunately it has not been released yet. So the workaround is to use the master.

Replaying & receiving data obtained from URH using CC1101 #842

Replies: 10 comments · 32 replies

jgromes Oct 5, 2023 Maintainer

smolbun Oct 5, 2023 Author

smolbun Oct 6, 2023 Author

smolbun Oct 6, 2023 Author

jgromes Oct 9, 2023 Maintainer

smolbun Oct 9, 2023 Author

jgromes Oct 9, 2023 Maintainer

smolbun Oct 9, 2023 Author

jgromes Oct 23, 2023 Maintainer

smolbun Mar 15, 2024 Author

smolbun Apr 29, 2024 Author

jgromes Jun 8, 2024 Maintainer

smolbun May 22, 2024 Author

smolbun May 24, 2024 Author

smolbun May 24, 2024 Author

smolbun Aug 14, 2024 Author

jgromes Aug 14, 2024 Maintainer

Replies: 10 comments 32 replies

jgromes
Oct 5, 2023
Maintainer

smolbun Oct 5, 2023
Author

smolbun
Oct 6, 2023
Author

smolbun
Oct 6, 2023
Author

jgromes Oct 9, 2023
Maintainer

smolbun Oct 9, 2023
Author

jgromes Oct 9, 2023
Maintainer

smolbun Oct 9, 2023
Author

jgromes Oct 23, 2023
Maintainer

smolbun
Mar 15, 2024
Author

smolbun Apr 29, 2024
Author

jgromes Jun 8, 2024
Maintainer

smolbun
May 22, 2024
Author

smolbun May 24, 2024
Author

smolbun May 24, 2024
Author

smolbun
Aug 14, 2024
Author

jgromes Aug 14, 2024
Maintainer