Hitec AFHSS Protocol

Now with the support for CC2500 transceiver in Deviation, I think will be nice to add support for Hitec AFHSS protocol.

Pluses:
- Low cost receivers (cost more the FrSky ones, but less the Spektrum ones)

- Integrated voltage telemetry (35V, max) on Optima receivers (even less costs)

- Hobbyking sells Minima compatible receivers (I think its a FrSky one, reprogrammed)


Know info:

- Its uses CC2500 tranceiver

- have 1-way (minima) and 2-way (Optima) mode

- The Minima receiver don´t have read fuse set on IC (Hack opportunity )

I'd be interested in starting to look at capturing data to support this.

I don't actually have a Hitec system, although I have some Ares models running on "Hitec Red" aka Minima protocol.

So far i've attempted to hook up a Logic Analyser, although the Tx that i've got has an integrated IC/RF stage so I don't think that worked marvellously!

I do own a Hack RF, so would liek to start investigating OTA sniffing for this.

I know that the protocol uses a GFSK modulation, and hops between 21 channels (I can see the hops on a waterfall plot and also they're documented on the FCC test report.)

Unfortunalty, i'm not really sure where to go next to capture anything meaningful, is there an OTA guide or any GRC flow charts around that may help?

Ota hacking has only been tried by goebish so far. I'd first take a look at bandwidth and data rate as well as the hopping sequence and specific channels during tx bind. I'd then try to programm an cc2500 to receive the tx bind packets by trying some register settings similar to the expected settings acquired by Ota sniffing above.

Off topic on/

For OTA hacking Radiolink protocol may be of interest, reports on those are good and RX cheaply available...…

Others missing HITEC, JETI, Multiplex, Graupner Hott, Sanwa FHSS, but personally I think that the DIY community really already dropped all the famous brands, people who buy expensive branded receivers they use them with an original Tx. Deviation users buy cheap (but still as good hardware....)

Really of interest for me would be LORA chipset support, as frsky R9 or Crossfire or maybe an open source protocol version of that as Qlrs or YALRS (Inav)

Hitec Protocol is available in a test build now thanks to the work of planger and hexfet. Please check the recent thread.

Which thread are you referring to ?