This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

SmartRF04EB as sniffer

Other Parts Discussed in Thread: CC1101

I am working on a project to use the TI platform to monitor communications between two devices that are based on the CC1101.  The two proprietary devices work fine, but, I can't seem to capture anything with the sniffer.  Other than the crystal frequency, the proprietary systems are identical to the TI module for the CC1101 that plugs into the SmartFR04 (we use 27Mhz).  I thought I had translated the registers to work with a 26Mhz receiver, but am stymied.  Here are the registers as captured from our firmware and as set up on the sniffer:

Address Register Device Sniffer Note
 0x00 IOCFG2 0x06 N/A Pin output function insignificant
0x01 IOCFG1 0x2E N/A Pin output function insignificant
0x02 IOCFG0 0x09 N/A Pin output function insignificant
0x03 FIFOTHR 0x0A ? Probably should be Sniffer defaule
0x04 SYNC1 0x1D 0x1D
0x05 SYNC0 0x96 0x96
0x06 PKTLEN 0xFF 0xFF
0x07 PKTCTRL1 0x04 0x04
0x08 PKTCTRL0 0x45 0x45
0x09 ADDR 0x00 0x00
0x0A CHANNR 0x00 0x00
0x0B FSCTRL1 0x06 0x06
0x0C FSCTRL0 0x00 0x00
0x0D FREQ2 0x21 0x23 Changed for crystal differences
0x0E FREQ1 0xF6 0x44 Changed for crystal differences
0x0F FREQ0 0x84 0xEC Changed for crystal differences
0x10 MDMCFG4 0xF7 0xF7
0x11 MDMCFG3 0x75 0x83 Changed for crystal to get 4.8Kb
0x12 MDMCFG2 0x03 0x03
0x13 MDMCFG1 0x20 0x20
0x14 MDMCFG0 0x00 0x00
0x15 DEVIATN 0x00 0x00 Min deviation, might do better as 0x10 or 0x01??
0x16 MCSM2 0x07 0x07
0x17 MCSM1 0x10 0x10
0x18 MCSM0 0x18 0x18
0x19 FOCCFG 0x36 0x36
0x1A BSCFG 0x6C 0x6C
0x1B AGCTRL2 0x03 0x03
0x1C AGCTRL1 0x40 0x40
0x1D AGCTRL0 0x91 0x91
0x1E WOREVT1 0x87 0x87
0x1F WOREVT0 0x6B 0x6B
0x20 WORCTRL 0xFB 0xFB
0x21 FREND1 0x56 0x56
0x22 FREND0 0x10 0x10
0x23 FSCAL3 0xE9 0xE9
0x24 FSCAL2 0x2A 0x2A
0x25 FSCAL1 0x00 0x00
0x26 FSCAL0 0x1F 0x1F
0x27 RCCTRL1 0x41 0x41
0x28 RCCTRL0 0x00 0x00
0x29 FSTEST 0x59 0x59
0x2A PTEST 0x7F 0x7F
0x2B AGCTEST 0x3F 0x3F
0x2C TEST2 0x81 0x81
0x2D TEST1 0x35 0x35
0x2E TEST0 0x09 0x09

I am ordering 27Mhz crystals but if it can get fixed with just a different configuration that would be better.

  • The web formatter slaughters text, a legible table of the registers is attached.

    CC1101 Config
    
    Sniffer - 26 Mhz Crystal on CC1101EM v3.0
    Device  - 27 Mhz Production device frequency
    
           Address     Register   Device      Sniffer    Note
            0x00        IOCFG2     0x06        N/A        Pin output function insignificant
            0x01        IOCFG1     0x2E        N/A        Pin output function insignificant
            0x02        IOCFG0     0x09        N/A        Pin output function insignificant
            0x03        FIFOTHR    0x0A         ?         Probably should be Sniffer defaule
            0x04        SYNC1      0x1D        0x1D
            0x05        SYNC0      0x96        0x96
            0x06        PKTLEN     0xFF        0xFF
            0x07        PKTCTRL1   0x04        0x04
            0x08        PKTCTRL0   0x45        0x45
            0x09        ADDR       0x00        0x00
            0x0A        CHANNR     0x00        0x00
            0x0B        FSCTRL1    0x06        0x06
            0x0C        FSCTRL0    0x00        0x00
            0x0D        FREQ2      0x21        0x23        Changed for crystal differences
            0x0E        FREQ1      0xF6        0x44        Changed for crystal differences
            0x0F        FREQ0      0x84        0xEC        Changed for crystal differences
            0x10        MDMCFG4    0xF7        0xF7
            0x11        MDMCFG3    0x75        0x83        Changed for crystal to get 4.8Kb
            0x12        MDMCFG2    0x03        0x03
            0x13        MDMCFG1    0x20        0x20
            0x14        MDMCFG0    0x00        0x00
            0x15        DEVIATN    0x00        0x00        Min deviation, might do better as 0x10 or 0x01??
            0x16        MCSM2      0x07        0x07
            0x17        MCSM1      0x10        0x10
            0x18        MCSM0      0x18        0x18
            0x19        FOCCFG     0x36        0x36
            0x1A        BSCFG      0x6C        0x6C
            0x1B        AGCTRL2    0x03        0x03
            0x1C        AGCTRL1    0x40        0x40
            0x1D        AGCTRL0    0x91        0x91
            0x1E        WOREVT1    0x87        0x87
            0x1F        WOREVT0    0x6B        0x6B
            0x20        WORCTRL    0xFB        0xFB
            0x21        FREND1     0x56        0x56
            0x22        FREND0     0x10        0x10
            0x23         FSCAL3    0xE9        0xE9
            0x24        FSCAL2     0x2A        0x2A
            0x25        FSCAL1     0x00        0x00
            0x26        FSCAL0     0x1F        0x1F
            0x27        RCCTRL1    0x41        0x41
            0x28        RCCTRL0    0x00        0x00
            0x29        FSTEST     0x59        0x59
            0x2A        PTEST      0x7F        0x7F
            0x2B        AGCTEST    0x3F        0x3F
            0x2C        TEST2      0x81        0x81
            0x2D        TEST1      0x35        0x35
            0x2E        TEST0      0x09        0x09
    

  • Hi Michael,

    You better post your question on Low Power RF Hardware & Tools Forum,

    Have a nice day.