search

o-gs / dji-packet-dumps

DUPC Packet communication dumps
31 stars 9 forks source link

Question #1

Open raidfire99 opened 5 years ago

raidfire99 commented 5 years ago

Hi,

I found this in my search for something related but not quite what i'm looking for, my drone knowledge is limited my field is RF so I would like to know if these captures would be of benefit to my project.

I don't own a DJI so i was searching for captures of the radio packets to reverse engineer the control protocol, do any of your taps contain the packets im looking for between handset and drone (i noted your movement of control in the recording scenarios)? is the following a true or false assumption? serial / rf (method of transmission) is not relevant the packets are still using the same structure and protocol.

if the above is true, i have no need to find a friend with a drone to come to the RF lab for a packet capture session.

mefistotelis commented 5 years ago

is the following a true or false assumption? serial / rf (method of transmission) is not relevant the packets are still using the same structure and protocol.

That's oversimplification.

On OFDM board, the drone uses two data sources for RF link: serial DUML interface, and compressed video data transferred via USB from gimbal. For the serial packets, OFDM is just a "router" - it transfers DUML packets between all sources: gimbal, FC (center board) and RC (with mobile device).

It transfers packets based on type and destination. Not all packets go everywhere.

Currently this repo contains packet captures between OFDM and Center Board.

Packets transferred via RF link are DUML; not sure if they're wrapped with any other protocol.

raidfire99 commented 5 years ago

Thanks for a super quick response, when i get my hands on a DJI I'll do some comparisons of the packets and post some rf captures.

Our scenarios will include (don't do this at home unless you own the correct documentation!) monitoring RF traffic with autonomous flight during a GPS Jam attack, GPS spoof.

I know the default behaviour on loss of gps is to switch to user, if there is no gps or user available, does it self protect and land?

mefistotelis commented 5 years ago

Either that or it would try to hover until low on battery. Not sure.