<html><head></head><body><div style="color:#000; background-color:#fff; font-family:lucida console, sans-serif;font-size:16px"><div id="yui_3_16_0_ym18_1_1459616500741_7697" dir="ltr">I agree that reverse engineering the ota clone protocol would be half the battle. For example, I recall seeing somewhere a while back that someone had already mapped this out for TH-79A, but cant seem to find it at the moment.</div><div id="yui_3_16_0_ym18_1_1459616500741_7604"><span></span></div><div id="yui_3_16_0_ym18_1_1459616500741_7666" class="qtdSeparateBR"><div id="yui_3_16_0_ym18_1_1459616500741_7789">One possible initial approach also comes to mind, assuming it is DTMF based, which might be useful for quick prototyping/testing:<br></div><div id="yui_3_16_0_ym18_1_1459616500741_7803">1. Implement the file-based radio class to convert to/from a file-based, intermediate representation of the memory, i.e. sequence of dtmf digits in ascii txt file</div><div dir="ltr" id="yui_3_16_0_ym18_1_1459616500741_7922">2. use some "off-the-shelf" executables/libs/etc to convert audio (direct output, wav file, etc) to/from the text file</div><div id="yui_3_16_0_ym18_1_1459616500741_7989" dir="ltr"><br></div><div id="yui_3_16_0_ym18_1_1459616500741_7990" dir="ltr">Integrating the conversion and management of audio representation output/file generation could be done separately if the initial approach works.</div><div id="yui_3_16_0_ym18_1_1459616500741_8062" dir="ltr"><br></div><div id="yui_3_16_0_ym18_1_1459616500741_8066" dir="ltr">This actually makes me want to do something for my wife's TH-79A, _if_ I can ever find that document...<br></div><div id="yui_3_16_0_ym18_1_1459616500741_8063" dir="ltr"><br></div><br></div><div style="display: block;" id="yui_3_16_0_ym18_1_1459616500741_8033" class="yahoo_quoted"> <div id="yui_3_16_0_ym18_1_1459616500741_8032" style="font-family: lucida console, sans-serif; font-size: 16px;"> <div id="yui_3_16_0_ym18_1_1459616500741_8031" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div id="yui_3_16_0_ym18_1_1459616500741_8030" dir="ltr"> <font id="yui_3_16_0_ym18_1_1459616500741_8035" face="Arial" size="2"> <hr id="yui_3_16_0_ym18_1_1459616500741_8034" size="1"> <b><span style="font-weight:bold;">From:</span></b> Angus Ainslie <angus@akkea.ca><br> <b><span style="font-weight: bold;">To:</span></b> af5mi@yahoo.com <br><b><span style="font-weight: bold;">Cc:</span></b> "chirp_devel@intrepid.danplanet.com" <chirp_devel@intrepid.danplanet.com><br> <b><span style="font-weight: bold;">Sent:</span></b> Saturday, April 2, 2016 9:44 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [chirp_devel] Yaesu FTM-10R<br> </font> </div> <div id="yui_3_16_0_ym18_1_1459616500741_8099" class="y_msg_container"><br><div id="yiv6250215490"><div id="yui_3_16_0_ym18_1_1459616500741_8098"><div id="yui_3_16_0_ym18_1_1459616500741_8097" dir="ltr">Hi Jens,</div>
<div dir="ltr">Thanks for the analysis. </div>
<div id="yui_3_16_0_ym18_1_1459616500741_8100" dir="ltr">You've basically outlined what I was thinking of doing. I figured that I would need generate the DTMF/modem tones via the sound card and tx it through a different radio.</div>
<div id="yui_3_16_0_ym18_1_1459616500741_8101" dir="ltr">I was hoping that if someone had 2 of them it would make it easier to reverse engineer any real time comms that might be going on.</div>
<div dir="ltr">I picked up one of these now and it's a real pain to program so I'm going to start trying to figure out how the clone works.</div>
<div dir="ltr">Angus</div>
<div class="yiv6250215490yqt5231960734" id="yiv6250215490yqt36208"><div class="yiv6250215490gmail_quote">On Apr 1, 2016 1:34 PM, af5mi@yahoo.com wrote:<br clear="none"><blockquote class="yiv6250215490quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div><div style="color:#000;background-color:#fff;font-family:'lucida console' , sans-serif;font-size:16px;"><div>A quick scan of the manual seems to indicate its a "wireless-only" clone.</div><div><br clear="none"></div><div dir="ltr"><a rel="nofollow" shape="rect" target="_blank" href="https://www.yaesu.com/downloadFile.cfm?FileID=4483&FileCatID=150&FileName=FTM-10R.pdf&FileContentType=application%2Fpdf">https://www.yaesu.com/downloadFile.cfm?FileID=4483&FileCatID=150&FileName=FTM-10R.pdf&FileContentType=application%2Fpdf</a><br clear="none"></div><div dir="ltr"><br clear="none">This suggests it is some sort of sequence of tones sent OTA. Older Kenwood HT's, e.g. TH-79A did something similar using sequence of DTMF tones transmitted to other radio.</div><div dir="ltr"><br clear="none"></div><div dir="ltr">Because this is not serial- or file-based communication, Chirp currently doesnt have any support for it.</div><div dir="ltr"><br clear="none"></div><div dir="ltr">Opinion and conjecture follow...</div><div dir="ltr"><br clear="none"></div><div dir="ltr">I'm guessing it would be theoretically possible to write an OTA chirp driver, but it would likely have to accomplish two things:</div><div dir="ltr">1. generate the actual (DTMF) tones for cloning to radio (either outputting to sound-card, or a wav file, etc which could be replayed via another radio), and</div><div dir="ltr">2. decode (DTMF) tones received from master radio.</div><div dir="ltr"><br clear="none"></div><div dir="ltr">This assumes that there is no real-time ack/verification. (Otherwise this would require some real-time radio interaction with a surrogate radio coupled to pc/chirp in order to rx/tx audio OTA to the clone target.)</div><div dir="ltr"><br clear="none"></div><div dir="ltr">You would likely have to find some python modules which support this tone generation/decoding, or lash up something low-level, using python audio stream modules.</div><div><br clear="none"></div><div>-Jens</div><div><br clear="none"></div><div class="yiv6250215490elided-text" style="display:block;"> <div style="font-family:'lucida console' , sans-serif;font-size:16px;"> <div style="font-family:'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif;font-size:16px;"> <div dir="ltr"> <font face="Arial" size="2"> </font><hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Angus Ainslie via chirp_devel <chirp_devel@intrepid.danplanet.com><br clear="none"> <b><span style="font-weight:bold;">To:</span></b> chirp_devel@intrepid.danplanet.com <br clear="none"> <b><span style="font-weight:bold;">Sent:</span></b> Wednesday, March 30, 2016 9:22 PM<br clear="none"> <b><span style="font-weight:bold;">Subject:</span></b> [chirp_devel] Yaesu FTM-10R<br clear="none"> </div> <div><br clear="none"><div><div dir="ltr">Hi All</div>
<div dir="ltr">There isn't a programming cable for this radio but it can clone channels to other FTM-10R radios.</div>
<div dir="ltr">Has anyone tried to reverse engineer this cloning ? </div>
<div dir="ltr">Is it done via RF or Bluetooth ?</div>
<div dir="ltr">Does anyone have 2 of these radios and the equipment to capture the cloning ?</div>
<div dir="ltr">Thanks<br clear="none">
Angus</div>
</div><br clear="none">_______________________________________________<br clear="none">chirp_devel mailing list<br clear="none"><a rel="nofollow" shape="rect" ymailto="mailto:chirp_devel@intrepid.danplanet.com" target="_blank" href="mailto:chirp_devel@intrepid.danplanet.com">chirp_devel@intrepid.danplanet.com</a><br clear="none"><a rel="nofollow" shape="rect" target="_blank" href="http://intrepid.danplanet.com/mailman/listinfo/chirp_devel">http://intrepid.danplanet.com/mailman/listinfo/chirp_devel</a><br clear="none">Developer docs: <a rel="nofollow" shape="rect" target="_blank" href="http://chirp.danplanet.com/projects/chirp/wiki/Developers">http://chirp.danplanet.com/projects/chirp/wiki/Developers</a><br clear="none"><br clear="none"></div> </div> </div> </div></div></div></blockquote></div></div></div></div><br><br></div> </div> </div> </div></div></body></html>