DJI Protocol – Operator – Connection Establishment

IdentifierDescriptionPayload length
0x30Once the operator enters the wireless network, the first packet sent is Connection Establishment. As far as we could conclude, the operator also sends this packet once the connection has been lost. This still requires further investigation.48
Two example connection establishments between operator and drone
AddressBytesFindings
0x00 – 0x012 Packet Length – ((0x01 & 0x0F) << 8) + 0x00
0x02 – 0x032Session Identifier – Random values
0x04 – 0x063Padding – Zero bits
0x071CRC-8 – 0x02 XOR 0x03 XNOR 0x4F
0x6C XOR 0x21 XNOR 0x4F = 0xFD
0xE6 XOR 0x37 XNOR 0x4F = 0x61
0x08 – 0x092Start Parameters – This parameters will be used by many other packets. The purpose and change behaviour still requires further analysis.
0x0A – 0x2F38Constants – { 0x64, 0x00, 0x64, 0x00, 0xc0, 0x05, 0x14, 0x00, 0x00, 0x64, 0x00, 0x14, 0x00, 0x64, 0x00, 0xc0, 0x05, 0x14, 0x00, 0x00, 0x64, 0x00, 0x01, 0x01, 0x04, 0x0a, 0x02 }
0 0 votes
Article Rating
Subscribe
Notify of
4 Comments
Most Voted
Newest Oldest
Inline Feedbacks
View all comments

[…] Identifier – Value retrieved by Handshake at position 0x02 – […]

[…] first breakthrough. The connection handshake. As promised, detailed information about both packets (operator to drone and drone to operator) have been documented and added to the packet-types enumeration. In short: we […]

[…] the operator has sent a connection establishment packet, the drone’s response is a connection establishment […]

[…] Connection Handshake […]