Tool/software:
Manually generated HCI commands for BLE CS channel-sounding i.e. HCI_LE_CS_Test and HCI_LE_CS_Test_End appear to be unsupported in device firmware. Device returns UNKNOWN_HCI_COMMAND.
Is updated firmware available?
Hardware： LP-EM-CC2340R5, LP-XDS110ET
SDK：simplelink_lowpower_f3_sdk_8_40_02_01
CC2340R5 firmware: host_test
Btool：v1.44.04
ALL COMMANDS SENT USING BTOOL MISC_RawTxMessage with HEX message arguments
*********************************
SHOWING THAT DEVICE IS CONNECTED AND RESPONDING CORRECTLY TO HCI_Reset
*********************************
[1] : <Tx> - 03:20:09.138
-Type : 0x01 (Command)
-OpCode : 0x0C03 (HCI_Reset)
-Data Length : 0x00 (0) byte(s)
Dump(Tx):
0000:01 03 0C 00 ....
--------------------------------------------------------------------
[2] : <Rx> - 03:20:09.159
-Type : 0x04 (Event)
-EventCode : 0x000E (HCI_CommandCompleteEvent)
-Data Length : 0x04 (4) bytes(s)
Packets : 0x01 (1)
OpCode : 0x0C03 (HCI_Reset)
Status : 0x00 (0) (SUCCESS)
Dump(Rx):
0000:04 0E 04 01 03 0C 00 .......
--------------------------------------------------------------------
*********************************
SHOWING THAT DEVICE RESPONDS TO HCI_LE_CS_Test COMMAND WITH 'UNKNOWN_HCI_CMD'
*********************************
[3] : <Tx> - 03:28:32.158
-Type : 0x01 (Command)
-OpCode : 0x2095 (Unknown OpCode 0x2095)
-Data Length : 0x00 (0) byte(s)
Dump(Tx):
0000:01 95 20 00 .. .
--------------------------------------------------------------------
[4] : <Rx> - 03:28:32.174
-Type : 0x04 (Event)
-EventCode : 0x000E (HCI_CommandCompleteEvent)
-Data Length : 0x04 (4) bytes(s)
Packets : 0x01 (1)
OpCode : 0x2095 (Unknown OpCode 0x2095)
Status : 0x01 (1) (UNKNOWN_HCI_CMD)
Dump(Rx):
0000:04 0E 04 01 95 20 01 ..... .
--------------------------------------------------------------------
*********************************
SHOWING THAT DEVICE RESPONDS TO HCI_LE_CS_Test_End COMMAND WITH 'UNKNOWN_HCI_CMD'.
Note per specification it should reply with 0x0c='Command Disallowed' if there is no running CS command.
*********************************
[5] : <Tx> - 03:20:21.189
-Type : 0x01 (Command)
-OpCode : 0x2096 (Unknown OpCode 0x2096)
-Data Length : 0x00 (0) byte(s)
Dump(Tx):
0000:01 96 20 00 .. .
--------------------------------------------------------------------
[6] : <Rx> - 03:20:21.207
-Type : 0x04 (Event)
-EventCode : 0x000E (HCI_CommandCompleteEvent)
-Data Length : 0x04 (4) bytes(s)
Packets : 0x01 (1)
OpCode : 0x2096 (Unknown OpCode 0x2096)
Status : 0x01 (1) (UNKNOWN_HCI_CMD)
Dump(Rx):
0000:04 0E 04 01 96 20 01 ..... .
--------------------------------------------------------------------
My miscellaneous notes,
from BT Core Specification 6.0
section 2.3 Channel Sounding test commands
Table 2.2: Channel Sounding HCI commands and events
* HCI_LE_CS_Test (command) OGF=0x08 OCF=0x0095, data length=variable/many
01 95 20 00 (attempt to write command with zero parameters)
* HCI_LE_CS_Subevent_Result (event)
* HCI_LE_CS_Subevent_Result_Continue (event)
* HCI_LE_CS_Test_End (command) OGF=0x08 OCF=0x0096, data length=0
01 96 20 00
From the specification "If the Host issues this command when there is no prior CS test initiated using the HCI_LE_CS_Test command or when a prior CS test has already been completed, then
the Controller shall return the error code Command Disallowed (0x0C)."
* HCI_LE_CS_Test_End_Complete (event)
