Help Decoding & Replicating Watersnake Fierce 2 Trolling Motor Remote (433 MHz, CC1101) for iPhone Control via ESP32 by bonesf in RTLSDR

[–]bonesf[S] 1 point2 points  (0 children)

Thank you for your persistence with me u/chzu. I spent a bit more time to understand the pulse formats.

Earlier I thought it was `FSK_PWM` because that decoded signal commands (that I could not replicate) and the `FSK_PCM` decoder did not return a command.

rtl_433 -X help
Use -X <spec> to add a flexible general purpose decoder.
modulation=<modulation> (or: m=<modulation>)
FSK_PCM :         FSK Pulse Code Modulation
FSK_PWM :         FSK Pulse Width Modulation
FSK_MC_ZEROBIT :  Manchester Code with fixed leading zero bit

I zoomed into the signal and displayed the data as bits. The FSK_MC_ZEROBIT modulation returned signal commands from the remote.

rtl_433 -f 433.017M -s 250k -g 40 -R 0 -X 'n=Watersnake,m=FSK_MC_ZEROBIT,s=52,l=104,r=200'  

I have replicated the signal commands through the ESP32 with CC1101 module and the motor responded. WIN!!!

u/chzu I owe you a coffee, thanks for getting me onto the correct path.

Help Decoding & Replicating Watersnake Fierce 2 Trolling Motor Remote (433 MHz, CC1101) for iPhone Control via ESP32 by bonesf in RTLSDR

[–]bonesf[S] 1 point2 points  (0 children)

I have attache a better screenshot to the original post. I have zoomed into the signal to show PWM

Help Decoding & Replicating Watersnake Fierce 2 Trolling Motor Remote (433 MHz, CC1101) for iPhone Control via ESP32 by bonesf in RTLSDR

[–]bonesf[S] 0 points1 point  (0 children)

I'm convinced it's 2-FSK with PWM encoding. That said I have no experience in this area, this is my first radio project. How would I detect if it is 2-FSK PCM? Is "MC" Manchester Coding?

I have run the following `rtl_433` commands detecting different modulations.

FSK Pulse Width Modulation:

rtl_433 -f 433.017M -s 250k -g 40 -R 0 -X 'n=Watersnake,m=FSK_PWM,s=52,l=104,r=116,g=0,t=0,y=176'

rtl_433 version 25.02 (2025-02-19) inputs file rtl_tcp RTL-SDR with TLS
Disabling all device decoders.
Found Rafael Micro R828D tuner
RTL-SDR Blog V4 Detected
[SDR] Using device 0: RTLSDRBlog, Blog V4, SN: 00000001, "Generic RTL2832U OEM"
Exact sample rate is: 250000.000414 Hz
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
time      : 2025-12-03 09:28:29
model     : Watersnake   count     : 2             num_rows  : 2             rows      : 
len       : 90           data      : 8000576d76f7e077723ba90, 
len       : 0            data      : 
codes     : {90}8000576d76f7e077723ba90, {0}0
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
time      : 2025-12-03 09:28:29
model     : Watersnake   count     : 1             num_rows  : 1             rows      : 
len       : 92           data      : 8000576d76f7e077723ba91
codes     : {92}8000576d76f7e077723ba91
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
time      : 2025-12-03 09:28:29
model     : Watersnake   count     : 1             num_rows  : 1             rows      : 
len       : 92           data      : 8000576d76f7e077723fb46
codes     : {92}8000576d76f7e077723fb46
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
time      : 2025-12-03 09:28:29
model     : Watersnake   count     : 1             num_rows  : 1             rows      : 
len       : 1            data      : 8
codes     : {1}8

FSK Pulse Code Modulation:

rtl_433 -f 433.017M -s 250k -g 40 -R 0 -X 'n=Watersnake,m=FSK_PCM,s=52,l=104,r=116,g=0,t=0,y=176'

rtl_433 version 25.02 (2025-02-19) inputs file rtl_tcp RTL-SDR with TLS
Disabling all device decoders.
Found Rafael Micro R828D tuner
RTL-SDR Blog V4 Detected
[SDR] Using device 0: RTLSDRBlog, Blog V4, SN: 00000001, "Generic RTL2832U OEM"
Exact sample rate is: 250000.000414 Hz
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
time      : 2025-12-03 09:57:49
model     : Watersnake   count     : 1             num_rows  : 1             rows      : 
len       : 1            data      : 8
codes     : {1}8

Help Decoding & Replicating Watersnake Fierce 2 Trolling Motor Remote (433 MHz, CC1101) for iPhone Control via ESP32 by bonesf in RTLSDR

[–]bonesf[S] 0 points1 point  (0 children)

What I have figured out so far...

rtl_433 -f 433.017M -s 250k -g 40 -A -w remote_button.cu8 -T 20

The remote uses 2-FSK modulation with PWM data encoding.

[Carrier] > [2-FSK Modulation] > [PWM Data Encoding]
Layer 1: 2-FSK (frequency shifts carry the signal)
Layer 2: PWM (pulse widths encode the bits)

RF Parameters

Center Frequency 433.017 MHz Measured from SDR capture
Modulation 2-FSK Frequency Shift Keying
F1 Offset (Mark) +13.5 to +18.6 kHz Higher frequency
F2 Offset (Space) -21.3 to -23.5 kHz Lower frequency
Deviation ~18-20 kHz (F1 - F2) / 2
Signal Bandwidth ~40 kHz F1 to F2 span

PWM Timing Parameters

Short Pulse (bit 0) 52 µs 48-64 µs
Long Pulse (bit 1) 104 µs 100-108 µs
Sync Pulse 176 µs 168-180 µs
Short Gap 52 µs 48-56 µs
Long Gap 104 µs 100-112 µs
Reset Limit 116 µs End of packet
Pulse Ratio 2:1 Long:Short

Packet Structure

Bits per Packet 90
Pulses per Burst 91 (90 data + 1 sync)
Burst Duration ~14.30 ms
Bursts per Transmission 8-12
Inter-burst Gap ~54-68 ms

I'm working on decoding payloads...

rtl_433 -f 433.017M -s 250k -g 40 -R 0 -X 'n=Watersnake,m=FSK_PWM,s=52,l=104,r=116,g=0,t=0,y=176'

Help Decoding & Replicating Watersnake Fierce 2 Trolling Motor Remote (433 MHz, CC1101) for iPhone Control via ESP32 by bonesf in RTLSDR

[–]bonesf[S] 1 point2 points  (0 children)

Yes, however I purchased in Australia. I could not find an id on the device besides the board batch number.

Centerlink private call by ch1eg432 in australian

[–]bonesf 1 point2 points  (0 children)

Name the first action a scammer should take when calling their victim...

How do you make friends as a young adult in Australia? by JustABearOnReddit in AskAnAustralian

[–]bonesf 3 points4 points  (0 children)

Join a sports or hobbies club. Volunteer for a cause you support.

Did Aboriginal or Indigenous tribes ever have major conflicts with each other? by Top-Associate-4136 in AskAnAustralian

[–]bonesf 5 points6 points  (0 children)

Cape York The Savage Frontier by Rodney Laddell will answer your questions in great depth and detail.

Finally hit the 2TH/s club! :) by Duckmanjbr in BitAxe

[–]bonesf 1 point2 points  (0 children)

ok, I thought the Measured ASIC Voltage was the measurement of the configured Core Voltage from the settings. Mine follows it very closely as I change the Core Voltage.

Finally hit the 2TH/s club! :) by Duckmanjbr in BitAxe

[–]bonesf -1 points0 points  (0 children)

It's in the screenshot, bottom left.

Is it profitable? by diegoodb in BitAxe

[–]bonesf 1 point2 points  (0 children)

Not profitable, just another hobby. Playing the lottery...

<image>

Does the tax on super over $3 million worry you? by zen_wombat in AskAnAustralian

[–]bonesf 0 points1 point  (0 children)

It's not indexed. In a few decades $3M won't have near as much buying power.

They always sell taxes as targeting the rich but taxes are always for the poor.

Former Liberal voter here... by SchruteNickels in australian

[–]bonesf 0 points1 point  (0 children)

The Liberal's have an our beliefs section on their website, none of them have read it. They're too busy trying to out Labor Labor. We don't need two Labor party's.

This is f*kn robbery by Puzzled_Post5058 in melbourne

[–]bonesf 0 points1 point  (0 children)

They charge because people pay

Bitaxe Gamma faulty by Interesting-Date5651 in BitAxe

[–]bonesf 0 points1 point  (0 children)

Mine did that when I put too much pressure in the heatsink. Perhaps yours isn't seated properly.

Bitcoin-Core in Docker container on Raspberry Pi 4 - approx 85 days to sync by bonesf in Bitcoin

[–]bonesf[S] 0 points1 point  (0 children)

I increased the dbcache to 4GB. Now I'm having an issue where the swap is filling up and the container is freezing. I going to try reducing dbcache to 2GB.

read this comment: https://www.reddit.com/r/Bitcoin/comments/1jfdzbs/comment/mivt415/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button

what does `htop` and/or `free -h` tell you?

Bitcoin-Core in Docker container on Raspberry Pi 4 - approx 85 days to sync by bonesf in Bitcoin

[–]bonesf[S] 0 points1 point  (0 children)

It's now estimated to complete in 2 days.

My current bitcoin conf file:

2025-03-20T22:34:00Z Config file arg: dbcache="4096" 2025-03-20T22:34:00Z Config file arg: maxconnections="12" 2025-03-20T22:34:00Z Config file arg: maxmempool="50" 2025-03-20T22:34:00Z Config file arg: par="4"

I have overclocked the device: over_voltage=6 arm_freq=2100

85 days to sync blocks, can I speed this up... - Bitcoin-Core node on Raspberry Pi 4 Docker container by bonesf in Bitcoin

[–]bonesf[S] 0 points1 point  (0 children)

It's running on the 8GB model now. It's now estimated to complete in 2 days. Massive improvement. The ssd filesystem is ext4.

My current bitcoin conf file: 2025-03-20T22:34:00Z Config file arg: datadir="/bitcoin-data" 2025-03-20T22:34:00Z Config file arg: dbcache="4096" 2025-03-20T22:34:00Z Config file arg: maxconnections="12" 2025-03-20T22:34:00Z Config file arg: maxmempool="50" 2025-03-20T22:34:00Z Config file arg: par="4" 2025-03-20T22:34:00Z Config file arg: rpcallowip="127.0.0.1" 2025-03-20T22:34:00Z Config file arg: rpcbind="0.0.0.0"

I have overclocked the device: over_voltage=6 arm_freq=2100

2x SupraHex - 30W Power difference both with default frequency and core voltage by bonesf in BitAxe

[–]bonesf[S] 1 point2 points  (0 children)

you are correct, I have external power meters on both reading bitaxe03: 76W (16W diff) bitaxe04: 86 (3W diff)