Question

[raidfire99]

Hi,

I found this in my search for something related but not quite what i'm looking for, my drone knowledge is limited my field is RF so I would like to know if these captures would be of benefit to my project.

I don't own a DJI so i was searching for captures of the radio packets to reverse engineer the control protocol, do any of your taps contain the packets im looking for between handset and drone (i noted your movement of control in the recording scenarios)?
is the following a true or false assumption? serial / rf (method of transmission) is not relevant the packets are still using the same structure and protocol.

if the above is true, i have no need to find a friend with a drone to come to the RF lab for a packet capture session.

[mefistotelis]

is the following a true or false assumption? serial / rf (method of transmission) is not relevant the packets are still using the same structure and protocol.

That's oversimplification.

On OFDM board, the drone uses two data sources for RF link: serial DUML interface, and compressed video data transferred via USB from gimbal. For the serial packets, OFDM is just a "router" - it transfers DUML packets between all sources: gimbal, FC (center board) and RC (with mobile device).

It transfers packets based on type and destination. Not all packets go everywhere.

Currently this repo contains packet captures between OFDM and Center Board.

Packets transferred via RF link are DUML; not sure if they're wrapped with any other protocol.

[raidfire99]

Thanks for a super quick response, when i get my hands on a DJI I'll do some comparisons of the packets and post some rf captures.

Our scenarios will include (don't do this at home unless you own the correct documentation!)
monitoring RF traffic with autonomous flight during a GPS Jam attack, GPS spoof.

I know the default behaviour on loss of gps is to switch to user, if there is no gps or user available, does it self protect and land?

[mefistotelis]

Either that or it would try to hover until low on battery. Not sure.