teknikill.net

dusty · Posted: Fri Jul 29, 2005 2:58 pm Post subject: more protocol info needed

For anyone who has mx240ad and/or usbsnoopy set up and working, and wants to help, please bang away on the handheld and help me try to figure out more of the protocol. You can do this by trying certain functions of the handheld, observing the results, and trying to figure out what the codes mean. Please see mx240a-protocol.txt in CVS first to see what I have already discovered. When using mx240ad to examine the handheld, you'll probably need to write scripts to interface with mx240ad like mpd-bridge.pl to get much information. I am especially interested in why the protocol seems to fail after a short while of use. You can post your results here, or email them to me at (deweese AT myrealbox DOT com). Thanks.

doppa · newb Joined: 30 Jul 2005 Posts: 2

This is what I found:

the first time I tried to register with base I refused and this was sent to hh

{ 2, 0xee, 0xc5 }

then I accepted and this was sent

{ 2, 0xee, 0xd3 }

the hh stores the base ID (and handheld name?) in nonvolatile memory
_________________
doppa

mscdex · newb Joined: 17 Sep 2005 Posts: 8

I'm using XP SP2 and I can't seem to get anything to capture using SnoopyPro or usbsnoopy.

How else can I help out, unless someone has a workaround or fix for getting a way to snoop usb traffic to the base station in xp sp2?

lou · Developer Joined: 07 Oct 2005 Posts: 32 Location: TN, USA

lou · Developer Joined: 07 Oct 2005 Posts: 32 Location: TN, USA

I am working on some code of my own to drive this thing. Nothing worthy of showing anybody yet; it is very much in flux. Anyway, I've gotten to the point where I can register the handset and send out the service name, handset name, and ringtones. According to the spike.txt files, I should be ready to receive a login from the handset at this point, but it never comes. I've, of course, tried pressing the button under the service name that I sent (" TEST "), hoping the handset would prompt me for credentials, but that does nothing. Bear in mind that I have never used one of these things with the Windows software, so I am very much guessing at how it is supposed to operate. Of course, the manual isn't much help.

At least it now plays a tune when it goes into sleep mode. Smile

My code does properly receive the 0x8c message about the handset going offline, so it is not a matter of not sending enough poll packets.

mscdex · newb Joined: 17 Sep 2005 Posts: 8

dusty · Posted: Wed Oct 12, 2005 12:29 am Post subject: Re: What am I doing wrong?

mscdex · newb Joined: 17 Sep 2005 Posts: 8

lou · Developer Joined: 07 Oct 2005 Posts: 32 Location: TN, USA

dusty · Posted: Wed Oct 12, 2005 5:56 am Post subject:

I just tried the major IM services as the service name. There could be more, but I doubt it because I think somebody disassembled the internal code and came across strings indicating these three services. The other service names could provide new functions, but it would be more difficult to reverse engineer them. They might also be incomplete.

AGK · newb Joined: 15 Oct 2005 Posts: 2

lou · Developer Joined: 07 Oct 2005 Posts: 32 Location: TN, USA

AGK · newb Joined: 15 Oct 2005 Posts: 2

thanks for clearing that up...

yes, that was my question that you answered

lou · Developer Joined: 07 Oct 2005 Posts: 32 Location: TN, USA

Would somebody with the Motorola software and Windows please run it with the following test and capture the USB sesion with usbsnoop/spike?

Enter chat with a user.
Have that user send you a really long message. At least 80 characters.
While you're in there, send such a message from the handset to that user.

That should tell me what I need to know. I am trying to figure out how to send a long message to the handset without it getting split up into multiple lines. The latter part will tell me whether some guesses that I made about the other direction are correct.

mscdex · newb Joined: 17 Sep 2005 Posts: 8