3. Flipper Add‐On: SubGHz

How does Flipper Add-On SubGHz' technologies work?

SubGHz

It's a wireless technology that operates in a frequency band lower than 1 GHz. Usually from 300-928 MHz. This is where the name of the technology comes from. This technology typically has a longer range than other higher frequency transmissions like Bluetooth or Wi-Fi.

LoRa

LoRa (short for long range) is a spread spectrum modulation technique derived from chirp spread spectrum (CSS) technology. This is a proprietary technology from Semtech.

LoRa signals can reach much farther than other wireless technologies like Bluetooth. In ideal conditions, they can travel over 6 miles (ca. 10 km). One of LoRa's big advantages is that it uses very little power. This makes it perfect for battery-powered devices that need to last for a long time.

Flipper Add‐On: SubGHz

This Add-On allows you to analyze and view IoT traffic in the Sub-GHz band. In addition to adding an extra CC1101 to, our beloved Flipper adds a LoRa SX1262 chip. Both chips are used as transceivers. You will be able to analyze the traffic of the signals and even replicate it to the final device meant to execute a task. This Add-On specifically works with SX1262 firmware.

Tech Specs

CC1101

The low-cost CC1101 sub-1 GHz transceiver is developed for very low-power wireless applications.

A highly customizable baseband modem is included inside the RF transceiver. With a programmable data rate of up to 600 Kbps, the modem supports a number of modulation types.

This device offers exceptional RF performance with high sensitivity (-116 dBm at 433 MHz and 0.6 kBaud, -112 dBm at 868 MHz and 1.2 kBaud) and low current consumption (14.7 mA at 868 MHz and 1.2 kBaud).

Frequency bands covered are 300-348 MHz, 387-464 MHz, and 779-928 MHz, and it allows programmable output power up to +12 dBm for all supported frequencies.

Read more of its characteristics in the datasheet.

LoRa SX1262

This Semtech device is a Long Range, Low Power, sub-GHz half-duplex RF Transceiver. Designed for long battery life with just 4.2 mA of active receive current consumption. It is able to transmit up to +22 dBm thanks to its integrated power amplifiers. The continuous frequency coverage from 150 MHz to 960 MHz allows the support of all major sub-GHz ISM bands around the world.

This device is designed to comply with the physical layer requirements of the LoRaWAN specification released by the LoRa Alliance.

You can read more about all its features on its datasheet.

Schematics

Find the schematics here →FLIPPER_Subg

Understanding Flipper Add‐On: SubGHz

Main functions

This Add-On allows you to analyze and view IoT traffic in the Sub-GHz band. In addition to adding an extra CC1101 to our beloved Flipper adds a LoRa SX1262 chip. Both chips are used as transceivers. You will be able to analyze the traffic of the signals and even replicate it to the final device meant to execute a task. This Add-On specifically works with SX1262 firmware.

Connecting your Add-On to Flipper

Use the pin headers to plug your Add-On to your Flipper.

First steps with Flipper Add‐On: SubGHz

To start using your SubGHz Add-On is having the LoRa Relay app installed. This app correctly allows you to use both onboard chips. Go to the below link to find the instructions:

• LoRa Relay app — Installation steps

Linker Sub-GHz

Important

We have created an special submenu for using the basic SubGHz apps included in the default Flipper's firmware within the LoRa app, this way you can correctly use the external built-in antenna of the Add-On.

You may face crashes if using the Flipper's default SubGhz app.

Find more information here: Flipper LoRa Relay app - Linker Sub-GHz

To confirm you are using the external antenna, you must see in the Flipper's screen the Ext/E indicator when using SubGHz apps (if supported). Here are some examples:

LoRa Relay

Note

You must first install the LoRa Relay Flipper app.

Sniff

Watch data traveling through the specific LoRa settings. Use the right key in the D-pad to start sniffing.

• The first 8 bytes of the LoRa messages received will be displayed according to the established parameters and their ASCII representation if available. Use the central key in the D-pad to start/stop recording LoRa messages to log file.

Important

A successful communication between flipper and another LoRa device will depend on LoRa parameters configured, you must know how are they configured in the target LoRa network, wrong configurations will result in data loss.

Send

Send a file containing LoRa messages to any peripheral listening on the network. Use the central key in the D-pad to start the Browser.

• Browse in your files, look for a log file and send it.