Half-baked: remote control head over Ethernet?
Moderator: Queue Moderator
Forum rules
Share your enhancements here! Examples are out of band, scan list increases, other general trickery. What is not permitted is the discussion regarding adding features (aka flash options) which you can still purchase from Motorola for current subscriber products including discussion regarding Depot on current products.
Share your enhancements here! Examples are out of band, scan list increases, other general trickery. What is not permitted is the discussion regarding adding features (aka flash options) which you can still purchase from Motorola for current subscriber products including discussion regarding Depot on current products.
- fogster
- Posts: 386
- Joined: Sun Nov 06, 2005 10:38 am
- What radios do you own?: XTS2500/5000, XPR7550/5550
Half-baked: remote control head over Ethernet?
Has anyone tried to run a remote head and microphone for an XTL5000 or ASTRO Spectra over Ethernet? I'm still at the handwavey details stage, but I think it's possible. My idea is to have something like a Raspberry Pi on either end. TX/RX audio is easy enough with VoIP. (I need to play with Asterisk and app_rpt a bit; I think it can handle keying up the transmitter and I've got the GPIO pins to steer it.)
It looks like the control head and radio communicate over a serial bus called SB9600, which I presume is 9600bps. I spent a while fruitlessly trying to read up on how this works, before I realized -- if it's just remote control, I just need to reliably shuttle bits back and forth, not make any sense of it. Transmitting 9600bps data back over a network isn't exactly a novel problem.
Am I overlooking any major gotchas? Obviously there's a world of difference between the high-level idea and actually getting it working, but I figured I'd toss the idea out here rather than just mulling it over in my mind. The idea is that I could keep the radio drawers upstairs for a short cable run to an attic antenna, while keeping the speaker, mic, and control head a couple stories lower on my desk. Totally not something for a public safety agency to depend on, but a fun thing for me to tinker with for ragchewing on 2 meters...
It looks like the control head and radio communicate over a serial bus called SB9600, which I presume is 9600bps. I spent a while fruitlessly trying to read up on how this works, before I realized -- if it's just remote control, I just need to reliably shuttle bits back and forth, not make any sense of it. Transmitting 9600bps data back over a network isn't exactly a novel problem.
Am I overlooking any major gotchas? Obviously there's a world of difference between the high-level idea and actually getting it working, but I figured I'd toss the idea out here rather than just mulling it over in my mind. The idea is that I could keep the radio drawers upstairs for a short cable run to an attic antenna, while keeping the speaker, mic, and control head a couple stories lower on my desk. Totally not something for a public safety agency to depend on, but a fun thing for me to tinker with for ragchewing on 2 meters...
Re: Half-baked: remote control head over Ethernet?
Are you looking to have the radio on only one channel and only need to hear and talk over it? If so, it is easy and you don't need the SB9600 control. All you need is a remote adapter at the radio and a remote control unit like a desk telephone style tone remote control. There are a ton of them laying around and should be able to be picked up cheap.
If your looking to change channels and display the control head display information, then your in for some interesting times trying to decode the SB9600 data stream and be able to generate the SB9600 codes to control the radio. As Motorola has been very close to the vest with the SB9600 control codes, you will have to find it yourself. You will also need some sort of computer to generate the required data stream.
With that said, there has been a couple of postings on the Internet with some of this SB9600 information, but it is old and may no longer be available. I did a search some years back on just this subject, but decided it wasn't worth the effort.
You would be much better off running a good piece of coax and have the radio located where your going to be and not try to remotely control it.
Jim
If your looking to change channels and display the control head display information, then your in for some interesting times trying to decode the SB9600 data stream and be able to generate the SB9600 codes to control the radio. As Motorola has been very close to the vest with the SB9600 control codes, you will have to find it yourself. You will also need some sort of computer to generate the required data stream.
With that said, there has been a couple of postings on the Internet with some of this SB9600 information, but it is old and may no longer be available. I did a search some years back on just this subject, but decided it wasn't worth the effort.
You would be much better off running a good piece of coax and have the radio located where your going to be and not try to remotely control it.
Jim
- fogster
- Posts: 386
- Joined: Sun Nov 06, 2005 10:38 am
- What radios do you own?: XTS2500/5000, XPR7550/5550
Re: Half-baked: remote control head over Ethernet?
The idea is to have the control head working as well. If I'm connecting a radio to a control head, I think I don't actually need to understand SB9600, right? I just need the computer on either end to emulate a serial cable, shuttling bits back and forth between the control head and the radio. All I'd need to do is have the 9600bps data link available, and the radio and control head are free to exchange whatever codes they wish over it. It's just a lot easier than if it used some wacky DC signaling or something.
Admittedly, the idea has turned into a "because I wonder if I can" thing... I agree that running a bit more coax would probably be the easier solution. (I'm in a condo which makes outside runs trickier, but it's still a solvable problem.)
Admittedly, the idea has turned into a "because I wonder if I can" thing... I agree that running a bit more coax would probably be the easier solution. (I'm in a condo which makes outside runs trickier, but it's still a solvable problem.)
Re: Half-baked: remote control head over Ethernet?
Both Jim and yourself are correct, to the best of my knowledge.
SB9600 and some audio isn't the only thing on the control head flex, though.
You know, this is really interesting. If I wasn't running around 100% time commitment in the wood shop, I would like to take a look at this.
Rpi on both ends, sure. Possibly something you could do with an arduino with a wifi or ethernet shield. Latency is a concern. The original design of the radio puts the control head at a maximum of 131 feet (which surprised me, I was expecting ~50), which implies that this is not your grampaw's RS-232 (bog standard RS-232 tops out at 50 ft). Still going to be nothing compared to the latency of a serial to ethernet to ethernet to serial conversion, especially if wifi is in the mix.
If the setup ends up being "latency tolerant", it would be kinda awesome to have a project box with an Rpi in it, an 05 CH mounted to the top, and a power supply at work, using your radio at home...
http://www.radioparts.com/motorola-hkn6164a 131 ft control head cable.
...seeing that, it may be easier to run the control head cable, instead of extending coax or implementing CHoIP.
I do want to see this working though! Anyone have any more data on SB9600 and other signalling on the CH -> Radio lines?
SB9600 and some audio isn't the only thing on the control head flex, though.
You know, this is really interesting. If I wasn't running around 100% time commitment in the wood shop, I would like to take a look at this.
Rpi on both ends, sure. Possibly something you could do with an arduino with a wifi or ethernet shield. Latency is a concern. The original design of the radio puts the control head at a maximum of 131 feet (which surprised me, I was expecting ~50), which implies that this is not your grampaw's RS-232 (bog standard RS-232 tops out at 50 ft). Still going to be nothing compared to the latency of a serial to ethernet to ethernet to serial conversion, especially if wifi is in the mix.
If the setup ends up being "latency tolerant", it would be kinda awesome to have a project box with an Rpi in it, an 05 CH mounted to the top, and a power supply at work, using your radio at home...
http://www.radioparts.com/motorola-hkn6164a 131 ft control head cable.
...seeing that, it may be easier to run the control head cable, instead of extending coax or implementing CHoIP.
I do want to see this working though! Anyone have any more data on SB9600 and other signalling on the CH -> Radio lines?
Re: Half-baked: remote control head over Ethernet?
even more delicious when you start looking at O-style XTL or APX, that's non-standard CANBus in there.
Re: Half-baked: remote control head over Ethernet?
There was a guy either here or P25 forums that was parsing data from it to show Channel and Radio IDs on a console. I don't recall where I saw it, but it was recent.
This company is doing something similar and when I asked about an XTL, he said they were working on it for another customer. http://www.softradio.se/softradio.htm
This company is doing something similar and when I asked about an XTL, he said they were working on it for another customer. http://www.softradio.se/softradio.htm
Schrodinger's Radio: It is simultaneously too loud and too quiet, but you will never know which until someone transmits.
-
- Posts: 152
- Joined: Wed May 02, 2012 11:30 am
Re: Half-baked: remote control head over Ethernet?
There's been a lot of work done with Automotive CAN Bus hacking and they run much faster (up to 1000kbps) so 9.6kbps should be a walk in the park.
Looking at the rear J2 connector on mid-power XTL radios, I see a twisted pair CAN Bus on pins 2 & 3 (CAN+ & CAN- respectively)
![Image](http://s27.postimg.org/harrwkwc3/J2_Connector.jpg)
Most automotive CANs use either a 11-bit or 29-bit address (or header) with a 64-bit payload, although there are no guarantees seeing as Motorola have just invented their own protocol?
It should be a simple (although certainly not trivial) matter of "sniffing" the CAN Bus, logging PID and message IDs, filtering and then identifying what's what? For example, pressing a button on the CH (other than a W series) should send a message over the CAN with that button's ID plus a payload of data, if you then use the terminal software to send that same message from your PC it should mimic that button press!
Very interested in this project if anyone has the time to get into it?
Andrew
Looking at the rear J2 connector on mid-power XTL radios, I see a twisted pair CAN Bus on pins 2 & 3 (CAN+ & CAN- respectively)
![Image](http://s27.postimg.org/harrwkwc3/J2_Connector.jpg)
Most automotive CANs use either a 11-bit or 29-bit address (or header) with a 64-bit payload, although there are no guarantees seeing as Motorola have just invented their own protocol?
It should be a simple (although certainly not trivial) matter of "sniffing" the CAN Bus, logging PID and message IDs, filtering and then identifying what's what? For example, pressing a button on the CH (other than a W series) should send a message over the CAN with that button's ID plus a payload of data, if you then use the terminal software to send that same message from your PC it should mimic that button press!
Very interested in this project if anyone has the time to get into it?
Andrew
Re: Half-baked: remote control head over Ethernet?
Bigfella237 wrote:There's been a lot of work done with Automotive CAN Bus hacking and they run much faster (up to 1000kbps) so 9.6kbps should be a walk in the park.
Looking at the rear J2 connector on mid-power XTL radios, I see a twisted pair CAN Bus on pins 2 & 3 (CAN+ & CAN- respectively)
Most automotive CANs use either a 11-bit or 29-bit address (or header) with a 64-bit payload, although there are no guarantees seeing as Motorola have just invented their own protocol?
It should be a simple (although certainly not trivial) matter of "sniffing" the CAN Bus, logging PID and message IDs, filtering and then identifying what's what? For example, pressing a button on the CH (other than a W series) should send a message over the CAN with that button's ID plus a payload of data, if you then use the terminal software to send that same message from your PC it should mimic that button press!
Very interested in this project if anyone has the time to get into it?
Andrew
Sorry to break the bad news to you but the BUS + and the BUS - on pins 2 and 3 on the XTL radios are not CAN bus connections. They are SB9600.
Jim
Re: Half-baked: remote control head over Ethernet?
Well, Fogster is looking at a transparent Control Head over IP transport, I'm just interested. IF SB9600 is on the J2... can a CH be connected there?
Re: Half-baked: remote control head over Ethernet?
http://wiki.n1zyy.com/Idea-Bakery should have some relevance
Edit: As should https://paulbanks.org/projects/sb9600/
Edit: As should https://paulbanks.org/projects/sb9600/
- kf4sqb
- Posts: 1491
- Joined: Mon May 19, 2003 9:11 pm
- What radios do you own?: I can't enter that much....
Re: Half-baked: remote control head over Ethernet?
Why not just use vRCH? You would have to run separate audio cables for mike and speaker audio (or else make up a VoIP system for it), but the actual control of the radio is handled by the vRCH software.
kf4sqb "at" wetsnet "dot" com
Look for the new "Jedi" series portables!
Bat-Phone= BAT-CAVE (2283)
-.- .. ....- -.-. -.-- . .. ... -- -.-- -... .-. --- - .... . .-. .-.-.-
Look for the new "Jedi" series portables!
Bat-Phone= BAT-CAVE (2283)
-.- .. ....- -.-. -.-- . .. ... -- -.-- -... .-. --- - .... . .-. .-.-.-
Re: Half-baked: remote control head over Ethernet?
Motorola has made changes to the SB9600 data bus traffic data. This has been done on the more recent firmware updates in the CPS. The SB9600 bus no longer provides the direct display and control ability that it use to. The CAN bus is where it has all been shifted to.
Trying to decode the data on the CAN bus will cause you to spend some extended time trying to figure out just what is going on. But it can be done with effort. I do know one company that has done this to be able to control the radios and be able to display the mode (channel) display information. It is possible to change frequencies and zones once you figure it out.
Don't ask me for the details, as I am just passing along some scuttlebutt information from 3rd party friend. But they are currently controlling the XTL and APX radios in this fashion. This is probably driving Motorola crazy trying to keep others out of being able to do this. They don't like others tramping inside their territory.
Jim
Trying to decode the data on the CAN bus will cause you to spend some extended time trying to figure out just what is going on. But it can be done with effort. I do know one company that has done this to be able to control the radios and be able to display the mode (channel) display information. It is possible to change frequencies and zones once you figure it out.
Don't ask me for the details, as I am just passing along some scuttlebutt information from 3rd party friend. But they are currently controlling the XTL and APX radios in this fashion. This is probably driving Motorola crazy trying to keep others out of being able to do this. They don't like others tramping inside their territory.
Jim
- Astro Spectra
- Posts: 668
- Joined: Sat Sep 22, 2001 4:00 pm
Re: Half-baked: remote control head over Ethernet?
Major gotchas?
Well for the XTL and later radios the audio between the head and body is digital, it's embedded in the CAN bus frames.
The CAN bus is only available on the circular blue J300 CAN connectors. There are two so heads can be daisy chained. Motorola makes a 115' extension HKN6165 and I believe the physical limit is about 250'.
The daisy chain configuration would allow passive investigation of CAN transactions, the necessary first feasibility step.
You can buy CAN bus shields for some of the development boards like the Pi. However, I expect the programming and timing issues, not to mention the possibility of a non-standard CAN implementation (eg bus speed) would slow most people down.
An analog audio and limited SB9600 channel change interface is certainly possible but a fully functional head extension over IP is very non-trivial.
Well for the XTL and later radios the audio between the head and body is digital, it's embedded in the CAN bus frames.
The CAN bus is only available on the circular blue J300 CAN connectors. There are two so heads can be daisy chained. Motorola makes a 115' extension HKN6165 and I believe the physical limit is about 250'.
The daisy chain configuration would allow passive investigation of CAN transactions, the necessary first feasibility step.
You can buy CAN bus shields for some of the development boards like the Pi. However, I expect the programming and timing issues, not to mention the possibility of a non-standard CAN implementation (eg bus speed) would slow most people down.
An analog audio and limited SB9600 channel change interface is certainly possible but a fully functional head extension over IP is very non-trivial.
- fogster
- Posts: 386
- Joined: Sun Nov 06, 2005 10:38 am
- What radios do you own?: XTS2500/5000, XPR7550/5550
Re: Half-baked: remote control head over Ethernet?
The bit that initially got me thinking this could be viable is that you're just ferrying bits/frames/whatever back and forth. You don't need to be able to interpret the data, just replicate it on the other side. It could be encrypted for all I care; it's just being moved between the radio and head via Ethernet instead of the existing cable.
I could certainly see timing issues being an issue, especially over the Internet, but I'd be surprised if it were a big problem on a home LAN.
That said, I no longer even own a remote-mount radio, so I'm not going to be doing this any time soon myself.![:(](./images/smilies/icon_frown.gif)
I could certainly see timing issues being an issue, especially over the Internet, but I'd be surprised if it were a big problem on a home LAN.
That said, I no longer even own a remote-mount radio, so I'm not going to be doing this any time soon myself.
![:(](./images/smilies/icon_frown.gif)
- Astro Spectra
- Posts: 668
- Joined: Sat Sep 22, 2001 4:00 pm
Re: Half-baked: remote control head over Ethernet?
Well CNA bus is multi-drop at 1 Mbps over a single twisted pair so unfortunately you do need to interpret the protocol otherwise you don't know if you should be receiving or transmitting.
There are commercial CAN bus over Ethernet products like this:
http://www.systec-electronic.com/en/pro ... gateway-v2
but you'd need to establish if Motorola was using CAN exactly as per the spec before investing.
There are commercial CAN bus over Ethernet products like this:
http://www.systec-electronic.com/en/pro ... gateway-v2
but you'd need to establish if Motorola was using CAN exactly as per the spec before investing.
Re: Half-baked: remote control head over Ethernet?
I know this is a rather old post but it's relevant even now so I will toss in what I know.
I personally, and some others here do as well, someone that sat down and wrote an application that was more or less a PC based remote head for the Astro Spectra.
The key to t was two things. The first was looking at the data going to the radio via the bus. The second was figuring out what the radio was sending back and the head then replying to it.
There are commands that happen via the bus that require the head to respond to the tray and vice versa. As I recall, the only thing he used was a PC and with a serial port, but there may have been some attenuators there due to voltage differences.
It may well have been that he used a RIB for this and some creative wiring. The MW520 head software did use a mini RIB to interface into the Astro Spectra and Spectra radios, so this may be an option.
I personally, and some others here do as well, someone that sat down and wrote an application that was more or less a PC based remote head for the Astro Spectra.
The key to t was two things. The first was looking at the data going to the radio via the bus. The second was figuring out what the radio was sending back and the head then replying to it.
There are commands that happen via the bus that require the head to respond to the tray and vice versa. As I recall, the only thing he used was a PC and with a serial port, but there may have been some attenuators there due to voltage differences.
It may well have been that he used a RIB for this and some creative wiring. The MW520 head software did use a mini RIB to interface into the Astro Spectra and Spectra radios, so this may be an option.
Keith
CET USMSS
Field Tech
What more can I say
CET USMSS
Field Tech
What more can I say