comthings/pandwarf

PandwaRF: RF analysis tool with a sub-1 GHz wireless transceiver controlled by a smartphone or

nrftoolbox | gollum

PandwaRF (formerly GollumRF) is a RF analysis tool with a sub-1 GHz wireless transceiver controlled by a smartphone or a PC. Its purpose is to capture, display & transmit RF data very easily. It can be connected to an Android smartphone using BLE or USB, and to Linux using USB. It is based on the well-known RfCat & Yard Stick One tools with the Texas Instruments CC1111 RF transceiver, but with a lot of new features, making PandwaRF the perfect portable RF analysis tool.

Cheaper, simpler, smaller than a SDR.

Communications channels

• PandwaRF wiki
• PandwaRF forum
• PandwaRF chat

pandwarf's Issues

Code Starters for PandwaRF Bare - Developer version

Would be great to start with a basic set of working BLE & C1111 drivers. A basic BSP or "blinking LED equivalent" source code would be a very helpful.

USB not functional on Android SDK

gollumDongle.isUsbConnected() always returns as FALSE, despite device being connected

Javadoc

It's possible to have more information about the fields of the methods of GollumDongle? example:

rxSetup(int freq, int mod, int drate, int flen)

A modulation is linked to an integer, what are these integers? thank you

GollumUsbManagerCallbacks in SDK 0.7.22 doesnt get updated

Tried disconnecting USB once connected.
onUsbDeviceDisconnected - doesnt get updated

FW CC1111 Version: 1.0.17
FW Nordic Commit Id:
FW Nordic Version: 0.9.19

Nordic FW update (DFU) not working

The Nordic FW update always fail with a "Gollum firmware update failed" error.

RfCat RFxmit function gives the error "ChipconUsbTimeoutException: Timeout waiting for USB response

when i try to send some data the program show me the following error: >>> d.RFxmit('blahblahblah')
Traceback (most recent call last):
File "", line 1, in
File "/home/maverick/pandwarf/PandwaRF/SW/rfcat/rflib/chipcon_nic.py", line 226, in RFxmit
self.send(APP_NIC, NIC_XMIT, "%s" % struct.pack("<HHH",len(data),repeat,offset)+data, wait=wait)
File "/home/maverick/pandwarf/PandwaRF/SW/rfcat/rflib/cc1111client.py", line 851, in send
return self.recv(app, cmd, wait)
File "/home/maverick/pandwarf/PandwaRF/SW/rfcat/rflib/cc1111client.py", line 815, in recv
raise(ChipconUsbTimeoutException())
ChipconUsbTimeoutException: Timeout waiting for USB response.

Being able to enable both tx and rx amps (they will be switched on temporary and respectivelly when rx or tx is activated)

Bug value in SpecAn tab

When you are in the "SpecAn" tab, the Start Freq changes regularly for -1.275MHz which then indicates an error.

The phone I use :

• HTC One (m7)
• Android 5.0.1

Add support for 4-FSK to decode DMR

Please can you add support for 4-FSK demodulation for CC1111 (like YARD Stick One) in order to capture DMR data.

Increase max number of data bytes in RX Frame length

Max value is 90 bytes, increase to max possible value (+200 bytes)

Battery level indication after a battery reconnect

After a battery reconnection charge indicator on Bus Service tab of Android app always shows Level: 0%
Very annoying in case of adding power switch into a cut of powerline to be able of total powering off device.

Steps to reproduce:

1. disconnect device from USB
2. Disconnect internal battery from device (desolder or kind of)
3. Connect battery back
4. Connect to device via app
5. push Reload button on Bus Service tab

to fix it back:

1. Disconnect internal battery from device
2. Power on device with USB plug
3. Connect battery back
4. disconnect device from USB

While battery connected, indicator values are correct.

Detect carrier frequency problems

I am trying to use the PandwaRF to detect the base frequency of signals in the range 433.5 MHz to 434.5 MHz. I have used the API for Android, and have used rfSpecanGetRssi to get RSSI values in this range over a period of 5 seconds (refresh rate 30ms). Then I calculate the frequency based on the RSSI values retrieved.
However, this method is not working well as the RSSI values are not very accurate, especially if I use an antenna. Has anybody had success with any other methods for obtaining the base frequency, or have any ideas for a better method?
Thanks in advance!

USB doesnt work with Android App

Trace attached. Followed the sequence

1. Open App with BLE OFF
2. Connect USB reader
3. No functions work
4. Switched on BLE and connected to device (to get FW versions in logs)
   ....

PandwaRF Device Information:
MAC Address: FB:35:B3:12:A8:69
Model: PandwaRF Big
HW revision: E
CC1111 Build Type: GollumRfBigCCtl
CC1111 Bootloader Version: CCTL v2
FW CC1111 Commit Id:
FW CC1111 Version: 1.0.17
FW Nordic Commit Id:
FW Nordic Version: 0.9.19

Rogue: false
Rogue Nordic: false
Rogue CC1111: false

PandwaRF App Information:
APPLICATION_ID: com.comthings.pandwarf
BUILD_TYPE: release
FLAVOR: pub
VERSION_CODE: 10258
VERSION_NAME: 1.2.58
App Commit Id: 5db17dc
Gollum Android Lib Version: 0.7.20-pub-release
Gollum Android Lib Commit Id: 5db17dc
Gollum Device Lib Version: 0.0.9-pub-release
Gollum Device Lib Commit Id: 5db17dc
Gollum Device Lib Flavor: 5db17dc

Phone Information:
serial: 881f8509
bootloader: I9505XXUHOA7
manufacturer: samsung
brand: samsung
hardware: qcom
board: MSM8960
device: jflte
model: GT-I9505
display: LRX22C.I9505XXUHOA7
id: LRX22C
type: user
user: dpi
host: SWDD6212
fingerprint: samsung/jfltexx/jflte:5.0.1/LRX22C/I9505XXUHOA7:user/release-keys
tags: release-keys
time: 1422470526000
radio firmware: I9505XXUHOA7
version.codename: REL
version.release: 5.0.1
version.incremental: I9505XXUHOA7
version.sdk_int: 21
Hash: db6b6d2548c91c04f2255540ebb8cd15

Screen shots

logcat.zip

Issues with Mediatek chipsets

Extract from http://pandwarf.boards.net/thread/27/app-work-on-different-phones

2 phones tested, nothings works or near.

• On Android 7.0 phone (Doogee S60) :
  Everything works as it should at the beginning, scanning, connect, display informations about hardware firmware etc.

(I don't have paired any of them with the PandwaRF, nothing in the Android's BT menu listed).

But when I try the spectrum analyser, the app become little weird : the title of the APP "PandwaRF" change from white to red colour, then a few seconds after it start to display some white noise and I never see any 433MHZ data's from a remote. Pressing stop / start didn't change anything. Need to kill the app to scan and connect again. Note : until I do force-close the APP, the blue LED is still OK, means the BLE link seems OK ?

In the Tx/Rx menu, if I click on "Measure", most of time nothing happened, no data seen and need to force-close (and title of APP change to WHITE/RED flipping randomly). But sometime I have the green LED acting in rhythm with the remote, but no data on APP. I was lucky one or two time with the "Sniff" function and see some datas onscreen, but I need to try & force-close 10 or 15 time before seeing something. If I increase the frame to 128 I lost the BLE link.

Another bug, when I activate developer functions, goes to CC1111RF menu and "Read all" registers, it mostly failed to display them and I can't try more than 10 times, the app crash and ask for sending a bug report.

• On the Android 6.0 (NOMU S30) : Everything works as bad, except one thing : the "Read all" for CC1111 registers works like a charm ! No crash, values OK each time.

Cf Thread in forum
http://pandwarf.boards.net/thread/27/app-work-on-different-phones

ER:GPIOs for RollJam

It would be great to use the gpios using Javascript just for a 1 euro upgrade to my pandwa there would be a way to hack Rolling codes.I know that you are trying to make pandwaRF hack rolling codes so i think this idea can make it really cheap. The idea is that i would connect a 1EURO 433mhz OOK transmitter to the gpios and that would allow us to jam and at the same time listen for the data.

For people who don't understand something here are all the links.
433 transmitter:
https://www.amazon.com/433Mhz-Transmitter-Receiver-Link-Arduino/dp/B016V18KZ8/ref=sr_1_4?s=electronics&ie=UTF8&qid=1504963252&sr=1-4&keywords=433mhz+transmitter
RollJam;
https://makezine.com/2015/08/11/anatomy-of-the-rolljam-wireless-car-hack/
Thanks.
PS:Sorry for my English ,but i am from Europe so i am not the best.

Brute Force chipset settings disappear

in the Brute Force page, by default Modulation:ask/ook and type:chipset are selected.
If you change type to something else, and then you select back the type "chipset", it will have less options than the first time you opened the brute force page.
To restore it, the only way is to close and reopen the application.

Incorrect dependencies in Android SDK 0.7.21

SDK doesnt compile.

Incorrect dependency

AndroidGollum
nrftoolbox
unspecified

DIO BF not working: Brute Force SyncCode Tail not supported, BF not started

Pandwarf not working on Galaxy S7 + android 6.0.1 ($ rm -Rf /*)

Hey I don't seem to be able to make Pandwarf work on my phone: Galaxy S7 + android 6.0.1 // for example the spectrum analyser doesn't show graph and when it does, the sampling seems to stop after one second and the entire app gets irresponsive. Then i'm forced to quit and reinit the app. I tried to wipe cache, and reset config, but still no luck. - Advice? -

Galaxy S7 + android 6.0.1

Brand new Pandawarf all leds on

I unpacked my new pandawarf, I connected a 868MHz antenna and an usb cable to power it, all leds still on, nothing happen, reset button do nothing, impossible to put the device in recovery mode, bluetooth devices are not detected, nothing works.
Can I try something to fix this problem?

Oneplus 3 crash (Robson)

Hi. I would like to Know if App it's compatible with Oneplus 3 bela use I has a lote of issue. App crash every time. Battery leve dont appear. Sniff workshop onde once (I need to clean cache every time) spec works slowly. Maybe I Set some tinas wrong. I need some help. Thanks

oxigenOS 3.2.4 oneplus 3

Calibration for battery still showing 0%, after 1.5 day the battery is empty

There are still issues with the battery. After some testing, the battery is now empty in 1.5 day (after a full day of charge). In the beginning the device was standby for almost 6 days. The battery measure in the app is always showing 0%. I am on the latest release (app and firmware).

can not use d.setMaxPower() in rfcat

d.setMaxPower() does not work with PandwaRF.
Need to turn on rf power amplifiers with android app before using python scripts.
Then it works until usb disconnect.

Any chance to open source fw?

Will you open source the firmware code for CC1111, or nRF some day?

Android SDK 0.7.22 On bluetooth disconnect/ Reconnect the radio stops functioning

Tested the following sequence.
Connect via Bluetooth
TX setup and transmity
Disconnect bluetooth and reconnect.
On Reconnect the C1111 stops working

Dongle busy, gollumDongleActivityCallback called, gollumTaskCounter: 13
gollumTaskCounter after any command increases by 1 and no any command send to device

A feature request, keep the BLE connection alive when into background

This feature request will be nice:

It will very nice to keep the BLE connection and the PandwaRF Android app alive and running in the background.

A scenario for this feature is interesting;

1. Use the PandwaRF app, running something
2. Push the PandwaRF app and the BLE connection to the background when opening a new android app.
3. Opening SDRtouch app (for example) to monitor the PandwaRF
4. Results in using PandwaRF (BLE connection) and RTL-SDR device (USB OTG) from one device (android smartphone)

Thanks!

gollumPrint in js crashes APP on USB connection

gollumPrint in javascript crashes application on USB connection.
If I comment all gollumPrint.. lines - script works.
If I create custom javascript with only one gollumPrint line - app crashes.

Bluetooth LE services and characteristics documentation

Hi,

I am interested in developing a mobile application using PandwaRF and would be great if I could use directly Bluetooth LE services and characteristics.

Could you please provide some documentation? Also, are there any plans open sourcing the data processing part or it's proprietary?

p.

The ability to change or encrypt the device name when broadcasting BLE

If you search for BLE devices, you can see the full name of PandwaRF. This means that everyone can use the device without your knowing. There is no "easy" switch to shutdown the device. It is always broadcasting the full name in BLE.

Gollum 0.9.8 migrate problems

Lats release Gollum 0.9.8 not have dependency to nrftoolbox. So after update from 0.9.3 I have build errors.

P.S. To fix need manually add implementation 'com.comthings.pandwarf:nrftoolbox:1.0.9'

Next problem - java.lang.IllegalStateException: Must Initialize Fabric before using singleton()
at com.comthings.gollum.api.gollumandroidlib.utils.Utils.log

P.S. To fix this need add Fabric.with(this, new Crashlytics());

Being able to "link" the antenna power condition to the transmitting condition (antenna power appear only during the transmission), this can be used as a tx switching signal for a device connected on the rf port.

No details on Bus Service tab (S3PP4)

I am able to connect (BT), but it never shows any details on Bus Service nor anywhere else. Blue light stays on, anyway.
Is there any btn to make "RESET" active? I mean this is really working weirdly...can connect, no readouts what-so-ever.

received codes logging

I would like being able to feed audio files to apk to decode and analyse signals received with a sdr. also the next code generation (same or rolling) might use the recorded audio signal as a Base.
alternatively, I'd like the ability to leave "sniff mode" on and log/analyze all received signals. maybe with direct USB connection that would be feasible?
last but not least, an integrated archive of known signals/parameters to make our life easier?
thx

App version 1.2.42 broke BruteForce

I've updated today two devices to 1.2.42 app version.
Brute force does not work anymore. 1 second after start it stops automatically.

Device 1: Samsung GT-i9300 - Android 7.1.2
Device 2: Samsung Galaxy Tab A - Android 5.1.1

Update the detail description of parameters for scripting

An update on wiki that describe details of parameters for writing scripts for PandwaRF.
See the wiki and the TODO list; https://github.com/ComThings/PandwaRF/wiki/Developer-JavaScript-Functions-Mapping

Thanks!

Error in Gollum JS execution of file: gollumRfJammingTest.js

Jamming script in android app worked week ago. Now it doesnt.
Error in Gollum JS execution of file: gollumRfJammingTest.js

USB Crashes for Payload more than 250 Bytes < 500bytes

Works well for Payloads below the page limit. Works first time for say 400 bytes.
After that the USB driver crashes.
400 bytes works over Bluetooth

Versions
Android SDK 0.7.22
Nordic 0.9.19
C1111 1.0.17

Logs
CC1111_RF: rfsub1g_cc1111_Rf_Setup_Config
11-25 15:30:36.075 24665-32185/xx.co.xx V/  CC1111_RF: rfsub1g_cc1111_Rf_ConfigBuffer_Erase
11-25 15:30:36.075 24665-32185/xx.co.xx V/  CC1111_RF: rfsub1g_cc1111_Rf_GetBulkConfig
11-25 15:30:36.075 24665-32185/xx.co.xx D/   CC1111_RF_CONTROL: cc1111_peek (0xdf00 62)
11-25 15:30:36.075 24665-32185/xx.co.xx V/    CC1111_NPI: Enter npi_SendSynchDataRfcat
11-25 15:30:36.075 24665-32185/xx.co.xx V/    CC1111_NPI: Enter npi_sendframeRfcat
11-25 15:30:36.075 24665-32185/xx.co.xx D/     CC1111_NPI_LIBUSB: npi_libusb_send(0xff 0x80 4)
11-25 15:30:36.075 24665-32185/xx.co.xx E/     CC1111_NPI_LIBUSB: Write Error
11-25 15:30:36.075 24665-32185/xx.co.xx E/    CC1111_NPI: Rfcat frame not sent, app: ff, cmd: 80, len: 4
11-25 15:30:36.075 24665-32185/xx.co.xx E/  CC1111_RF: rfsub1g_cc1111_Rf_GetBulkConfig: Failed, readburst returned null
11-25 15:30:36.075 24665-32185/xx.co.xx E/  CC1111_RF: rfsub1g_cc1111_Rf_Setup_Config: Failed to setup config
11-25 15:30:36.075 24665-32185/xx.co.xx V/  CC1111_RF_MSG: rfsub1g_cc1111_Rf_SetMdmModulation Called with PARAMETERS: modulation: 0, invert: -1
11-25 15:30:36.075 24665-32185/xx.co.xx V/    CC1111_NPI: npi_SendAsynchDataRfcat: Posting Asynch data
11-25 15:30:36.075 24665-32185/xx.co.xx V/    CC1111_NPI: Enter npi_sendframeRfcat
11-25 15:30:36.075 24665-32185/xx.co.xx D/     CC1111_NPI_LIBUSB: npi_libusb_send(0xbf 0x54 2)
11-25 15:30:36.075 24665-32185/xx.co.xx E/     CC1111_NPI_LIBUSB: Write Error
11-25 15:30:36.075 24665-32185/xx.co.xx E/  CC1111_RF_MSG: rfsub1g_cc1111_Rf_SetMdmModulation: Failed, reason: set Power failed
11-25 15:30:36.075 24665-32185/xx.co.xx V/  CC1111_RF_MSG: rfsub1g_cc1111_Rf_SetFreq Called with PARAMETER: freq: 433913879
11-25 15:30:36.075 24665-32185/xx.co.xx V/    CC1111_NPI: npi_SendAsynchDataRfcat: Posting Asynch data
11-25 15:30:36.075 24665-32185/xx.co.xx V/    CC1111_NPI: Enter npi_sendframeRfcat
11-25 15:30:36.075 24665-32185/xx.co.xx D/     CC1111_NPI_LIBUSB: npi_libusb_send(0xbf 0x52 4)
11-25 15:30:36.075 24665-32185/xx.co.xx E/     CC1111_NPI_LIBUSB: Write Error
11-25 15:30:36.075 24665-32185/xx.co.xx E/  CC1111_RF_MSG: rfsub1g_cc1111_Rf_SetFreq: Failed, reason: set Freq failed
11-25 15:30:36.075 24665-32185/xx.co.xx V/  CC1111_RF_MSG: rfsub1g_cc1111_Rf_SetMdmDRate Called with PARAMETER: Data Rate: 3200
11-25 15:30:36.075 24665-32185/xx.co.xx V/    CC1111_NPI: npi_SendAsynchDataRfcat: Posting Asynch d

No device information (Patrick)

Connecting with BLE no problem ( Samsung Galaxy Note 4 & Lenovo Yoga Book), but i can not see any device Informationen from Pandwarf.
No Spectrumanalyzer works or any lese!

Android app reinstall not working too.

Samsung Galaxy Note 4 SM-N910F Android 6.0.1
Lenovo Yoga Book

Unable to do RX/TX - RX Setup takes long time

Bluetooth connects fine. However unable to receive an RF signals as RX setup seems to go on forever.
Attached logs
Phone is MotoG
Android ver 5.1

Tried with smaller buffer lengths. Any help will be appreciated.

PandwaRF Device Information:
MAC Address: E6:C2:E5:4B:62:6C
FW CC1111 Commit Id:
FW CC1111 Version: 1.0.17
FW Nordic Commit Id:
FW Nordic Version: 0.9.17

PandwaRF App Information:
APPLICATION_ID: com.comthings.pandwarf
BUILD_TYPE: release
FLAVOR: pub
VERSION_CODE: 10254
VERSION_NAME: 1.2.54
App Commit Id: b877d29
Gollum Android Lib Version: 0.7.17-pub-release
Gollum Android Lib Commit Id: b877d29
Gollum Device Lib Version: 0.0.7-pub-release
Gollum Device Lib Commit Id: e340293
Gollum Device Lib Flavor: e340293

Phone Information:
serial: TA9290DPBV
bootloader: 0x411A
manufacturer: motorola
brand: motorola
hardware: qcom
board: MSM8226
device: falcon_umts
model: XT1032
display: LPB23.13-56
id: LPB23.13-56
type: user
user: hudsoncm
host: ilclbld36
fingerprint: motorola/falcon_retgb/falcon_umts:5.1/LPB23.13-56/60:user/release-keys
tags: release-keys
time: 1439854829000
radio firmware: MSM8626BP_1032.3116.98.00R EMEA_CUST
version.codename: REL
version.release: 5.1
version.incremental: 60
version.sdk_int: 22
Hash: cd8403413815ca03f9abc46ebfba33a7[
logcat.zip
](url)

Save RF amplifiers config into internal memory so that amplifiers can be used when assigning buttons

ChipconUsbTimeoutException in d.RFrecv()

./rfcat -r
'RfCat, the greatest thing since Frequency Hopping! Modified version to run with PandwaRF'

Research Mode: enjoy the raw power of rflib

currently your environment has an object called "d" for dongle. this is how
you interact with the rfcat dongle:
>>> d.ping()
>>> d.setFreq(433000000)
>>> d.setMdmModulation(MOD_ASK_OOK)
>>> d.makePktFLEN(250)
>>> d.RFxmit("HALLO")
>>> d.RFrecv()
>>> print d.reprRadioConfig()

In [1]: d.setFreq(433000000)

In [2]: d.setMdmModulation(MOD_ASK_OOK)

In [3]: d.makePktFLEN(250)

In [4]: d.RFrecv()

ChipconUsbTimeoutException Traceback (most recent call last)
/home/user/PandwaRF/SW/rfcat/rflib/init.pyc in ()
----> 1 d.RFrecv()

/home/djamil/ism/droids/bitbucket/PandwaRF/SW/rfcat/rflib/chipcon_nic.pyc in RFrecv(self, timeout, blocksize)
233 raise(Exception("Blocksize too large. Maximum %d") % EP5OUT_BUFFER_SIZE)
234 self.send(APP_NIC, NIC_SET_RECV_LARGE, "%s" % struct.pack("<H",blocksize))
--> 235 data = self.recv(APP_NIC, NIC_RECV, timeout)
236 # decode, if necessary
237 if self.endec is not None:

/home/user/PandwaRF/SW/rfcat/rflib/cc1111client.pyc in recv(self, app, cmd, wait)
829 time.sleep(0.001)
830
--> 831 raise(ChipconUsbTimeoutException())
832
833 def recvAll(self, app, cmd=None):

ChipconUsbTimeoutException: Timeout waiting for USB response.

PandwaRF stops rx/tx from android app

PandwaRF stops receiving/transmitting frequently (every 5 - 20 time random). Registers also can not be read when this happens. I need to reconnect (disconnect/connect). Sometimes disconnect and turning BT off does not help - blue light always on, so I need to press reset on the unit.
No errors in BLE log.

GollumDongle - getInstance

For the next release it's possible to pass a context instead an activity when GollumDongle.getInstance is called ?
Because I would like to call GollumDongle from an Android service.

Thanks.

2-FSK doesnt work in Android SDK and Example app

Tried the following with the Android SDK gollumDongle.txSetup(433913879, 00, 3200); 2-FSK transmission, with no success.

Exact same thing with ASK works gollumDongle.txSetup(433913879, 48, 3200); // 0x30

Tried the changing it on the example SDK app from ASK to 2-FSK. No success. The PandwaRF app works fine with 2-FSK. (Atleast it transmits and Receives at a default deviation)

Was expecting the SDK /Example app to transmit at some default deviation, which doesn't seem to happen. Any help appreciated.

Kirin chipset regression

Android V1.3.5 was ok with Kirin chipsets

Spectrum Analyser shows 2 - 15 Meas/s on Kirin. Throughput 800 - 1500 bits/s (with default settings).

Android V1.4.0 is no more OK

after app and fw update throughput on kirin is 200 - 300 bits/s again 😟

Link to button

Hi,

I own a Rogue Pro, unless I am misunderstanding the 'link to button' feature, I don't believe it is working for me.

After capturing the data from an OOK transmitter and then confirming successful capture by re-transmitting it, I then try to link the configuration/data to a physical button. Upon pressing the hardware button (short press) i do get a red LED, however it does not appear to be transmitting anything. I have tried pressing the button from within 'Bus Service Extended' of which also presents a red LED with no apparent transmission?

Appreciated.

Unable to access the class GollumBleManagerCallbacks in Android SDK 0.7.20

https://comthings.github.io/PandwaRF/com/comthings/gollum/api/gollumandroidlib/ble/GollumBleManagerCallbacks.html. GollumBleManagerCallbacks is obfuscated in the new SDK and is not accessible.

rxFlush() and flushMsgQueue() do not remove data in buffer overflow

I want to remove any overflow from the receive buffer after the requested buffer size has been received. At the moment I am doing this using RxStop() followed by RxSetup(), which refreshes the receive buffer, but I want to keep the dongle in Rx mode and flush the buffer overflow so that, the next time I receive data, there is no data waiting in the next buffer. rxFlush and flushMsgQueue do not help with this. Maybe they were not made to do this - if so, is there another function that could perform this task?

problem with the modified rf cat

Fixed

CC1111_NPI: Send synch data timed out

Every ~10 times RxSetup() or RxStop() is called (android API), the PandwaRF device crashes. The error is:

E/    CC1111_NPI: Send synch data timed out
E/   CC1111_RF_CONTROL: cc1111_ReadReg: Error, peek returned null
V/  CC1111_RF: rfsub1g_cc1111_Rf_GetRadioState: Retrieved radio state: 00: SLEEP
E/  CC1111_RF: rfsub1g_cc1111_Rf_SetRfMode: SetRfMode Failed due to a timeout of 400 us
E/  CC1111_RF: rfsub1g_cc1111_Rf_StartRx: Failed to start RX
E/CTCOM_RF_RXTX: ctcom_rx_setup: Failed with freq: 433930000, mod: 0, drate: 1440, flen: 100, chanbw: 100000, deviation: 20000

Any idea how to mitigate this?