Project

General

Profile

Actions

New Model #1489

closed

Wouxun KG-UV950P Quad Band

Added by Matthew Poertner about 10 years ago. Updated 12 months ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
Target version:
Start date:
03/11/2014
Due date:
% Done:

0%

Estimated time:
Equipment Loan/Gift Offered:
No
I read the instructions above:

Description

I would love to be able to use CHIRP on this new radio. I definitely would loan it out to help. Thanks!


Files

kg-uv950pl_protocol.txt (490 Bytes) kg-uv950pl_protocol.txt Ron Wellsted, 01/26/2016 05:51 AM
download.txt (278 KB) download.txt Wouxun software downloading from radio Ron Wellsted, 01/29/2016 12:21 PM
upload.txt (538 KB) upload.txt Wouxun software uploading to radio Ron Wellsted, 01/29/2016 12:21 PM
test.py (5.33 KB) test.py Test python script. Pavel Milanes, 01/25/2018 06:39 AM
data_down_clean.txt (86.1 KB) data_down_clean.txt Cleaned data extracted from the download.txt Pavel Milanes, 01/25/2018 06:39 AM

Related issues

Related to New Model #7223: Wouxun KG-UV980PClosedMel Terechenok11/10/2019

Actions
Actions #1

Updated by Ian Beeby over 9 years ago

I am in UK and have just bought one of these radios - the Wouxun software is lamentable and anything would be a significant improvement. I would be delighted to help and in particular testing would be easy for me. I have OS-X, Ubuntu 12.04LTS and Win8.1 machines available (although the latter belongs to another).

There is a clear bug with the Wouxun interface cable which is that the version of the Prolific PL2303 device used is not supported in Win8.1 - you have to roll back the driver to an earlier version before the cable will actually work - users and testers beware.

I can lend my radio although shipping/insurance is a concern. I am based in DE4 and HA8 postcode areas from time to time and can also be found in WC2A.

Regards,

Ian, G8OGJ

Matthew Poertner wrote:

I would love to be able to use CHIRP on this new radio. I definitely would loan it out to help. Thanks!

Actions #2

Updated by Stefano Sbarzagli over 8 years ago

Me also waiting for this model supported. I can loan a radio.

Actions #3

Updated by Ron Wellsted about 8 years ago

I have recently purchased the KG-UV950PL (European version with 6m/4m/2m/70cm) and have started work on the driver. Currently trying to understand the protocol used. It is similar to (but sufficiently different from) the KG-UV8D.

Actions #4

Updated by Ron Wellsted about 8 years ago

This proving difficult as it appears that the serial protocol is encrypted.

Actions #5

Updated by Pavel Milanes about 8 years ago

I don't want to say "encrypted" but "encoded", the same that I suspected for the KG-UV9D one in #2671.

I have kind of characterized the KG-UV9D comm protocol and I bet it will be similar to this, and the data in the download/upload don't have any logic at a glance, so I suspected about an encoded (encrypted?) data transfer.

I tried to contact Wouxun about this but no luck yet.

Actions #6

Updated by Ron Wellsted about 8 years ago

Attached are my captures of the download/upload from the Wouxun software. The encoding does show a pattern for the memory slots (\xda \x85 records on the upload). There is a similarity with the KG-UV9D as in #2671
Based on the number of packets sent, it looks like the radio/software transfers 4 memory slots at a time and seems to use 16 or 18 bytes per slot.

Actions #7

Updated by Ron Wellsted about 8 years ago

  • Target version changed from 0.4.1 to 0.5.0

Analysing the dumps, and looking at the 4th packet from download.txt (DA 82 00 06 57 1B 1B 1B 1B 1B 1F) and the 3rd packet from upload.txt (DA 83 FF 06 57 1B 1B 1B 1B 1B 1F), the "checksum" (1F) is the same even though 2 bytes in the header (DA 82 00 06 vs DA 83 FF 06) are different. This indicates that the 4 header bytes are not used in the calculation of the "checksum".

Since the initialisation packet (1st packet sent to the radio) seems to always provoke a reply with a 100 byte payload, I am beginning to suspect that the encoding/encryption key is buried in that first packet. The initialisation packet (DA 80 FF 00 58) does use the same checksum algorithm as the KG-UV8D. i.e. Start with -1 then add in the first four bytes using modulo 256.

Actions #8

Updated by Pavel Milanes about 6 years ago

  • Chirp Version changed from 0.3.0 to daily

Hi Ron et all.

I did some tinkering with the serial logs and the crypt protocol is similar to the used by the KG-UV8D Plus, but the checksum of each packet is unknown yet.

It has some different approach but I did manage to decode packet data, so there is an advance, notes and sample code are at home, so tomorrow will upload all of them.

Just need to give the good news to the group, we have an advance on this one.

73 Pavel CO7WT.

Actions #9

Updated by Pavel Milanes about 6 years ago

Hi to all.

As promised here comes the scripts with the tests, the test.py script will read the data_down_clean (this is the transfer data extracted from the download.txt file of this issue) and will output the decoded data stream payload.

As you will see the crypt trick is almost the same but the checsum algorithm is unknown yet and need more work.

Some example output:

===================================================%<-------------------------------------------------
pavel@agatha-lt:~/Chirp/KG-UV950P$ python test.py
Ident record
Decrypted payload [100][100]
000: 4b 47 2d 55 56 39 35 30 52 32 43 10 80 17 90 42 KG-UV950R2C....B
016: 00 46 90 05 00 05 40 07 00 07 60 32 00 39 90 70 .F....@...2.9.p
032: 00 98 50 14 00 17 30 42 00 46 90 05 00 05 40 07 ..P...0B.F....@.
048: 00 07 60 14 00 17 30 00 10 80 17 90 42 00 46 90 ..
...0.....B.F.
064: 05 00 05 40 07 00 07 60 32 00 39 90 70 00 98 50 ...@...2.9.p..P
080: 14 00 17 30 42 00 46 90 05 00 05 40 07 00 07 60 ...0B.F....@...

096: 14 00 17 30 00 00 00 00 00 00 00 00 00 00 00 00 ...0............

Invalid packet
Decrypted payload [3][3]
000: 00 4c 04 00 00 00 00 00 00 00 00 00 00 00 00 00 .L..............

Invalid packet
Decrypted payload [6][6]
000: 00 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .L..............

Invalid packet
Decrypted payload [3][3]
000: 08 10 10 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
===================================================%<-------------------------------------------------

You can at a glance see the ident string and some of the bad edges in the first packet, yet the checksum is invalid [Invalid packet]

73 Pavel CO7WT.

Actions #10

Updated by Jim Neel over 5 years ago

Are we getting any closer to a solution with this radio?
I'm mostly interested in being able to open the frequency
above 480mhz into the T-Band 510mhz

Actions #11

Updated by Ron Wellsted about 4 years ago

  • Assignee deleted (Ron Wellsted)

I no longer have this radio so I am unable to proceed

Actions #12

Updated by Bernhard Hailer almost 4 years ago

  • Status changed from In Progress to Feedback
  • Target version changed from 0.5.0 to chirp-legacy
Actions #13

Updated by Ryan Neily over 3 years ago

Hi,

I just purchase a KG-UV950P Quad Band radio, I would gladly pick up the torch of helping to get this radio added to Chirp. I think this radio, as well as a the KG-UV920P, and the KG-UV980P are all the same radio, just different face-plates. Let me know what I can do to help! I would (among others from the forums that I have read on the subject) love to get this added and supported!!!!

Actions #14

Updated by Mel Terechenok 12 months ago

  • Status changed from Feedback to Closed
  • Target version changed from chirp-legacy to chirp-py3

Please see issue 10498 for updates on the 950P

https://chirp.danplanet.com/issues/10498

Actions

Also available in: Atom PDF