Access to radio's calibration data. about md380tools HOT 12 CLOSED

I figured out the organization of the MD-380 .test file. I should be able to through together a chirp bitwise structure for it when I get a chance. While the .test file is 8 KB, only the first 512 bytes has data in it. the rest is 0xFF padding. If they follow the same pattern that is probably the way the bits are organized on the flash.

Conveniently the data seems to be organized in 16 byte rows even those most of the calibration rows are only using 9 values.

The 9 columns seem to correspond to a set of 9 frequencies for calibration 401,411,421,...,479.99 mhz

In the meantime, I wrote the details of the .test file down here while I was figuring it out http://rctnotes.blogspot.com/2016/02/structure-of-tytera-md-380-test-radio.html

from md380tools.

Thanks! That should be sufficient to read out the calibration data.

In the firmware, I see a lot of strange DFU commands interacting with the OTP Flash. Perhaps that's where it's stored? In any case, packet sniffing will tell.

from md380tools.

The window software lets you write the changed "test" settings back to the radio, so I'm guessing not OTP...

screenshot

from md380tools.

pcap file from read calib. data:

https://flauschfunk.de/read_calib.pcapng

from md380tools.

working hypothesis: radio's calibration data are stored in 3X256-Bytes Security Registers on spi flash

from md380tools.

I'll add support for reading that over USB with md380-tool.

from md380tools.

Removing my assignment. With a little luck, @ea will have a pull request for us soon.

from md380tools.

added with: b0c0166

from md380tools.

Sorry for the off-topic but anyone knows what's the difference for CPS having testmode=0 or testmode=1?
I know that all pages over internet say to change it to access test mode but apparently I can access the test mode window (and it seems fully working) even with testmode=0, any one knows what that setting does exactly?

from md380tools.

Ctrl+T

from md380tools.

Yes... but Ctrl+T works even with testmode=0... even on older 1.30 CPS... then I'm curious why anybody suggests changing it... what the change does exactly...

from md380tools.

This is an issue tracker, not a forum. Please move the discussion to IRC or the mailing list.

from md380tools.