nrf7002-DK - Wifi channel switching raw packets

[narfster]

Hi,

We have conducted evaluation test with the nrf7002-DK and the raw packet sample.

The code sends a burst of 3 raw packets on channels 1, 6, 11.

between each packet within the 1,6,11 burst we try to send as fast as we can.

between each burst ( 3 packets)  we sleep for 1 second.

Our goal is to send raw WiFi (802.11.g) packets on a battery powered tag with power optimization in mind.

other modification for the raw packet sample:

1. transmit in legacy mode (802.11g)

CONFIG_RAW_TX_PKT_SAMPLE_RATE_FLAGS 0

2. enabled low power with this

CONFIG_NRF_WIFI_LOW_POWER=y

results:

 - We succeeded in capturing packets on 3 channels with wireshark.

-  There is an issue when channel switching.

here are some result of power profile:

sending 1 packet on 1 channel.  ~20ms.

sending 3 packets on same channel (without ch switching) ~20ms

sending 3 packets with channels switching - ~752ms

some point to look at:

1. what is "1" peak.  is this Wifi calibration?

if so, we need a way to control this.

TI cc3x20 offers 3 modes for calibration

Normal, Triggred, On-time - see link to TI network processor.

https://www.ti.com/lit/ug/swru455m/swru455m.pdf?ts=1711606377096&ref_url=https%253A%252F%252Fwww.ti.com%252Fproduct%252FCC3130

2. after transmitting, why does the chip keep on staying awake?

see "2" in image above. - we need minimum time soc is awake for max power optimization

see also thread

devzone.nordicsemi.com/.../477431

Thanks

Dan

[dejans]

Hi,

sending 1 packet on 1 channel.  ~20ms.

What is around 20 ms?  

Could you please provide more information about the screenshot below - which case does it cover and what is shown in the picture?

between each packet within the 1,6,11 burst we try to send as fast as we can.

Could you describe in detail how you transfer packets? Are you sending anything between packets?

Best regards,
Dejan

[narfster]

Hi,

This image you selected is the first case in my question -  sending 1 packet on 1 channel.

this has been done with Nordic's example without code changes.

the screenshot shows, a single packet sent over wifi.

the next packet sent  (not captured) will be seen in 1 second.

configuration to example code was:

CONFIG_RAW_TX_PKT_SAMPLE_RATE_FLAGS 0 // Legacy mode (802.11g)

CONFIG_NRF_WIFI_LOW_POWER=y

I retested this and confident with this result.

appreciate your support!

[dejans]

Hi,

Which NCS version do you use?

dejans said:

sending 1 packet on 1 channel.  ~20ms.

What is around 20 ms?  

Could you please provide information what do values 20 ms and 752 ms correspond to?

dejans said:

between each packet within the 1,6,11 burst we try to send as fast as we can.

Could you describe in detail how you transfer packets? Are you sending anything between packets?

Could you describe in detail how you transfer packets in your application? When sending packets in bursts of 3 with channel switching, do you send one burst on one channel, and then next burst on another channel and so on, or do you have each packet on a different channel?

Could you provide your "west build" command?

EDIT:
What is the duration of the second interval labeled "2" in your screenshot?

Do you use connected mode?

Can you provide your project configurations in different cases for which you provided screenshots?

Best regards,
Dejan

[narfster]

Hi Dejan - thanks for reply!

when you send a packet / or packets, this is considered an event. The event triggered a capture on the scope of the current drawn at that time. The images I shared show respectively what happens in different types of events.

setup was: nrf7002-dk connecting a current prob to P23 jumpers, and gave power 3.6v to P21 as explained in documentation.

20ms is the total time of event for 1 channel and 1 packet , you can see on scope with the time division, how long the entire event took.

752 ms is the total time of event, for sending 3 packets on 3 different channels.

The scope images are showing what the device is doing for just sending a wifi packet. The application code doesn't do anything else -see example raw packet source code.

NCS is 2.6.0

CONFIG_RAW_TX_PKT_SAMPLE_RATE_FLAGS 0

CONFIG_NRF_WIFI_LOW_POWER=y

using nrf connect extension, just updated the example with these config values and press build.

dejans said:

Could you describe in detail how you transfer packets in your application? When sending packets in bursts of 3 with channel switching, do you send one burst on one channel, and then next burst on another channel and so on, or do you have each packet on a different channe

If you want to see the case of 1 packet sent, you can use the example without changes.

if you want to see case application sends 3 packets on 3 different channels, see this code i attached

Fullscreen 23271.main.c Download

/*
 * Copyright (c) 2023 Nordic Semiconductor ASA
 *
 * SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
 */

/** @file
 * @brief Wi-Fi Raw Tx Packet sample
 */

#include <zephyr/logging/log.h>
LOG_MODULE_REGISTER(raw_tx_packet, CONFIG_LOG_DEFAULT_LEVEL);

#include <zephyr/net/socket.h>
#include <nrf_wifi/fw_if/umac_if/inc/default/fmac_structs.h>

#include "net_private.h"
#include "wifi_connection.h"

#define BEACON_PAYLOAD_LENGTH 256
#define CONTINUOUS_MODE_TRANSMISSION 0
#define FIXED_MODE_TRANSMISSION 1

#define IEEE80211_SEQ_CTRL_SEQ_NUM_MASK 0xFFF0
#define IEEE80211_SEQ_NUMBER_INC BIT(4) /* 0-3 is fragment number */

struct beacon {
	uint16_t frame_control;
	uint16_t duration;
	uint8_t da[6];
	uint8_t sa[6];
	uint8_t bssid[6];
	uint16_t seq_ctrl;
	uint8_t payload[BEACON_PAYLOAD_LENGTH];
} __packed;

static struct beacon test_beacon_frame = {
	.frame_control = htons(0X8000),
	.duration = 0X0000,
	.da = {0XFF, 0XFF, 0XFF, 0XFF, 0XFF, 0XFF},
	/* Transmitter Address: A0:69:60:E3:52:15 */
	.sa = {0XA0, 0X69, 0X60, 0XE3, 0X52, 0X15},
	.bssid = {0XA0, 0X69, 0X60, 0XE3, 0X52, 0X15},
	.seq_ctrl = 0X0001,
	/* SSID: NRF_RAW_TX_PACKET_APP */
	.payload = {
		0X0C, 0XA2, 0X28, 0X00, 0X00, 0X00, 0X00, 0X00, 0X64, 0X00,
		0X11, 0X04, 0X00, 0X15, 0X4E, 0X52, 0X46, 0X5F, 0X52, 0X41,
		0X57, 0X5F, 0X54, 0X58, 0X5F, 0X50, 0X41, 0X43, 0X4B, 0X45,
		0X54, 0X5F, 0X41, 0X50, 0X50, 0X01, 0X08, 0X82, 0X84, 0X8B,
		0X96, 0X0C, 0X12, 0X18, 0X24, 0X03, 0X01, 0X06, 0X05, 0X04,
		0X00, 0X02, 0X00, 0X00, 0X2A, 0X01, 0X04, 0X32, 0X04, 0X30,
		0X48, 0X60, 0X6C, 0X30, 0X14, 0X01, 0X00, 0X00, 0X0F, 0XAC,
		0X04, 0X01, 0X00, 0X00, 0X0F, 0XAC, 0X04, 0X01, 0X00, 0X00,
		0X0F, 0XAC, 0X02, 0X0C, 0X00, 0X3B, 0X02, 0X51, 0X00, 0X2D,
		0X1A, 0X0C, 0X00, 0X17, 0XFF, 0XFF, 0X00, 0X00, 0X00, 0X00,
		0X00, 0X00, 0X00, 0X2C, 0X01, 0X01, 0X00, 0X00, 0X00, 0X00,
		0X00, 0X00, 0X00, 0X00, 0X00, 0X3D, 0X16, 0X06, 0X00, 0X00,
		0X00, 0X00, 0X00, 0X00, 0X00, 0X00, 0X00, 0X00, 0X00, 0X00,
		0X00, 0X00, 0X00, 0X00, 0X00, 0X00, 0X7F, 0X08, 0X04, 0X00,
		0X00, 0X02, 0X00, 0X00, 0X00, 0X40, 0XFF, 0X1A, 0X23, 0X01,
		0X78, 0X10, 0X1A, 0X00, 0X00, 0X00, 0X20, 0X0E, 0X09, 0X00,
		0X09, 0X80, 0X04, 0X01, 0XC4, 0X00, 0XFA, 0XFF, 0XFA, 0XFF,
		0X61, 0X1C, 0XC7, 0X71, 0XFF, 0X07, 0X24, 0XF0, 0X3F, 0X00,
		0X81, 0XFC, 0XFF, 0XDD, 0X18, 0X00, 0X50, 0XF2, 0X02, 0X01,
		0X01, 0X01, 0X00, 0X03, 0XA4, 0X00, 0X00, 0X27, 0XA4, 0X00,
		0X00, 0X42, 0X43, 0X5E, 0X00, 0X62, 0X32, 0X2F, 0X00
	}
};

#ifdef CONFIG_RAW_TX_PKT_SAMPLE_NON_CONNECTED_MODE
static void wifi_set_channel(void)
{
	struct net_if *iface;
	struct wifi_channel_info channel_info = {0};
	int ret;

	channel_info.oper = WIFI_MGMT_SET;

	iface = net_if_get_first_wifi();
	if (iface == NULL) {
		LOG_ERR("Failed to get Wi-Fi iface");
		return;
	}

	channel_info.if_index = net_if_get_by_iface(iface);
	channel_info.channel = CONFIG_RAW_TX_PKT_SAMPLE_CHANNEL;
	if ((channel_info.channel < WIFI_CHANNEL_MIN) ||
		   (channel_info.channel > WIFI_CHANNEL_MAX)) {
		LOG_ERR("Invalid channel number. Range is (1-233)");
		return;
	}

	ret = net_mgmt(NET_REQUEST_WIFI_CHANNEL, iface,
		       &channel_info, sizeof(channel_info));
	if (ret) {
		LOG_ERR(" Channel setting failed %d\n", ret);
			return;
	}

	LOG_INF("Wi-Fi channel set to %d", channel_info.channel);
}
#endif

static void wifi_set_channel_cyclic(void)
{
	struct net_if *iface;
	struct wifi_channel_info channel_info = {0};
	int ret;
	static int i = 0;

	channel_info.oper = WIFI_MGMT_SET;

	iface = net_if_get_first_wifi();
	if (iface == NULL) {
		LOG_ERR("Failed to get Wi-Fi iface");
		return;
	}

	i++;
	channel_info.if_index = net_if_get_by_iface(iface);
	int i_mod = i % 3;

	if(i_mod == 0)
	{
		channel_info.channel = 1;
	}
	else if(i_mod == 1)
	{
		channel_info.channel = 6;
	}
	else if(i_mod == 2)
	{
		channel_info.channel = 11;
	}
	if ((channel_info.channel < WIFI_CHANNEL_MIN) ||
		   (channel_info.channel > WIFI_CHANNEL_MAX)) {
		LOG_ERR("Invalid channel number. Range is (1-233)");
		return;
	}

	ret = net_mgmt(NET_REQUEST_WIFI_CHANNEL, iface,
		       &channel_info, sizeof(channel_info));
	if (ret) {
		LOG_ERR(" Channel setting failed %d\n", ret);
			return;
	}

	LOG_INF("Wi-Fi channel set to %d", channel_info.channel);
}

static void wifi_set_mode(int mode_val)
{
	int ret;
	struct net_if *iface = NULL;
	struct wifi_mode_info mode_info = {0};

	mode_info.oper = WIFI_MGMT_SET;

	iface = net_if_get_first_wifi();
	if (iface == NULL) {
		LOG_ERR("Failed to get Wi-Fi iface");
		return;
	}

	mode_info.if_index = net_if_get_by_iface(iface);
	mode_info.mode = mode_val;

	ret = net_mgmt(NET_REQUEST_WIFI_MODE, iface, &mode_info, sizeof(mode_info));
	if (ret) {
		LOG_ERR("Mode setting failed %d", ret);
	}
}

#ifdef CONFIG_RAW_TX_PKT_SAMPLE_INJECTION_ENABLE
static int wifi_set_tx_injection_mode(void)
{
	struct net_if *iface;

	iface = net_if_get_first_wifi();
	if (!iface) {
		LOG_ERR("Failed to get Wi-Fi iface");
		return -1;
	}

	if (net_eth_txinjection_mode(iface, true)) {
		LOG_ERR("TX Injection mode enable failed");
		return -1;
	}

	LOG_INF("TX Injection mode enabled");
	return 0;
}
#endif /* CONFIG_RAW_TX_PKT_SAMPLE_INJECTION_ENABLE */

static int setup_raw_pkt_socket(int *sockfd, struct sockaddr_ll *sa)
{
	struct net_if *iface = NULL;
	int ret;

	*sockfd = socket(AF_PACKET, SOCK_RAW, IPPROTO_RAW);
	if (*sockfd < 0) {
		LOG_ERR("Unable to create a socket %d", errno);
		return -1;
	}

	iface = net_if_get_first_wifi();
	if (!iface) {
		LOG_ERR("Failed to get Wi-Fi interface");
		return -1;
	}

	sa->sll_family = AF_PACKET;
	sa->sll_ifindex = net_if_get_by_iface(iface);

	/* Bind the socket */
	ret = bind(*sockfd, (struct sockaddr *)sa, sizeof(struct sockaddr_ll));
	if (ret < 0) {
		LOG_ERR("Error: Unable to bind socket to the network interface:%s",
			strerror(errno));
		close(*sockfd);
		return -1;
	}

	return 0;
}

static void fill_raw_tx_pkt_hdr(struct raw_tx_pkt_header *raw_tx_pkt)
{
	/* Raw Tx Packet header */
	raw_tx_pkt->magic_num = NRF_WIFI_MAGIC_NUM_RAWTX;
	raw_tx_pkt->data_rate = CONFIG_RAW_TX_PKT_SAMPLE_RATE_VALUE;
	raw_tx_pkt->packet_length = sizeof(test_beacon_frame);
	raw_tx_pkt->tx_mode = CONFIG_RAW_TX_PKT_SAMPLE_RATE_FLAGS;
	raw_tx_pkt->queue = CONFIG_RAW_TX_PKT_SAMPLE_QUEUE_NUM;
	/* The byte is reserved and used by the driver */
	raw_tx_pkt->raw_tx_flag = 0;

	if(raw_tx_pkt->tx_mode == 0)
	{
		LOG_INF("tx mode LEGACY");
	}
	
}

int wifi_send_raw_tx_pkt(int sockfd, char *test_frame,
			size_t buf_length, struct sockaddr_ll *sa)
{
	return sendto(sockfd, test_frame, buf_length, 0,
			(struct sockaddr *)sa, sizeof(*sa));
}

static int get_pkt_transmit_count(unsigned int *mode_of_transmission,
					unsigned int *num_tx_pkts)
{
#ifdef CONFIG_RAW_TX_PKT_SAMPLE_TX_MODE_FIXED
	*mode_of_transmission = 1;
	*num_tx_pkts = CONFIG_RAW_TX_PKT_SAMPLE_FIXED_NUM_PACKETS;
	if (*num_tx_pkts == 0) {
		LOG_ERR("Can't send %d number of raw tx packets", *num_tx_pkts);
		return -1;
	}
	LOG_INF("Sending %d number of raw tx packets", *num_tx_pkts);
#else
	*mode_of_transmission = 0;
	*num_tx_pkts = UINT_MAX;
	LOG_INF("Sending raw tx packets continuously");
#endif
	return 0;
}

static void increment_seq_control(void)
{
	test_beacon_frame.seq_ctrl = (test_beacon_frame.seq_ctrl +
				      IEEE80211_SEQ_NUMBER_INC) &
				      IEEE80211_SEQ_CTRL_SEQ_NUM_MASK;
	if (test_beacon_frame.seq_ctrl > IEEE80211_SEQ_CTRL_SEQ_NUM_MASK) {
		test_beacon_frame.seq_ctrl = 0X0010;
	}
}

static void wifi_send_raw_tx_packets(void)
{
	struct sockaddr_ll sa;
	
	struct raw_tx_pkt_header packet;
	char *test_frame = NULL;
	unsigned int buf_length, num_pkts, transmission_mode, num_failures = 0;

	while(1)
	{
		for (int i = 0; i < num_pkts; i++) {

			for(int j = 0; j < 3; ++j)
			{
				int sockfd, ret;

				wifi_set_channel_cyclic();

				ret = setup_raw_pkt_socket(&sockfd, &sa);
				
				if (ret < 0) {
					LOG_ERR("Setting socket for raw pkt transmission failed %d", errno);
					return;
				}

				fill_raw_tx_pkt_hdr(&packet);

				ret = get_pkt_transmit_count(&transmission_mode, &num_pkts);
				if (ret < 0) {
					LOG_ERR("get_pkt_transmit_count");
					close(sockfd);
					return;
				}

				test_frame = malloc(sizeof(struct raw_tx_pkt_header) + sizeof(test_beacon_frame));
				if (!test_frame) {
					LOG_ERR("Malloc failed for send buffer %d", errno);
					return;
				}

				buf_length = sizeof(struct raw_tx_pkt_header) + sizeof(test_beacon_frame);
				memcpy(test_frame, &packet, sizeof(struct raw_tx_pkt_header));

				

				memcpy(test_frame + sizeof(struct raw_tx_pkt_header),
					&test_beacon_frame, sizeof(test_beacon_frame));

				ret = sendto(sockfd, test_frame, buf_length, 0,
						(struct sockaddr *)&sa, sizeof(sa));
				if (ret < 0) {
					LOG_ERR("Unable to send beacon frame: %s", strerror(errno));
					num_failures++;
				}

				increment_seq_control();

				close(sockfd);
				free(test_frame);
				
				//k_msleep(1000);

			}
			k_msleep(1000);

		}
		

	}

	//LOG_INF("Sent %d packets with %d failures on socket", num_pkts, num_failures);

	/* close the socket */
	//close(sockfd);
	//free(test_frame);
}

int main(void)
{
	int mode;

	mode = BIT(0);
	/* This is to set mode to STATION */
	wifi_set_mode(mode);

#ifdef CONFIG_RAW_TX_PKT_SAMPLE_INJECTION_ENABLE
	if (wifi_set_tx_injection_mode()) {
		return -1;
	}
#endif

#ifdef CONFIG_RAW_TX_PKT_SAMPLE_CONNECTION_MODE
	int status;

	status = try_wifi_connect();
	if (status < 0) {
		return status;
	}
#else
	//wifi_set_channel();
	//wifi_set_channel_cyclic();
#endif
	wifi_send_raw_tx_packets();

	return 0;
}

[ch1, ch6, ch11]  [sleep 1000ms ] [ch1, ch6,ch 11] [ sleep 1000ms]  loop forever...

thanks

Dan

[dejans]

Hi Dan,

Thank you for providing additional information.

Could you also answer remaining questions (shown below)?

dejans said:

Could you provide your "west build" command?

EDIT:
What is the duration of the second interval labeled "2" in your screenshot?

Do you use connected mode?

Can you provide your project configurations in different cases for which you provided screenshots?

Best regards,
Dejan

Best regards,
Dejan

[narfster]

west build:

Building raw_tx_packet
C:\Windows\system32\cmd.exe /d /s /c "west build --build-dir c:/dev/raw_tx_packet/build c:/dev/raw_tx_packet --pristine --board nrf7002dk_nrf5340_cpuapp --no-sysbuild -- -DNCS_TOOLCHAIN_VERSION=NONE -DCONFIG_SIZE_OPTIMIZATIONS=y -DCACHED_CONF_FILE=c:/dev/raw_tx_packet/prj.conf"

proj.conf -see below: all same configurations:

only thing that was modified

CONFIG_RAW_TX_PKT_SAMPLE_RATE_FLAGS=0

CONFIG_NRF_WIFI_LOW_POWER=y

connected mode:

I don't know what you mean - i don't think so.

label2:

~10ms

#

# Copyright (c) 2023 Nordic Semiconductor ASA

#

# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause

#

CONFIG_WIFI=y

CONFIG_WIFI_NRF700X=y

CONFIG_NRF_WIFI_LOW_POWER=y

CONFIG_NRF700X_RAW_DATA_TX=y

# WPA supplicant

CONFIG_WPA_SUPP=y

# Below configs need to be modified based on security

# CONFIG_RAW_TX_PKT_SAMPLE_KEY_MGMT_NONE=y

# CONFIG_RAW_TX_PKT_SAMPLE_KEY_MGMT_WPA2=y

# CONFIG_RAW_TX_PKT_SAMPLE_KEY_MGMT_WPA2_256=y

# CONFIG_RAW_TX_PKT_SAMPLE_KEY_MGMT_WPA3=y

CONFIG_RAW_TX_PKT_SAMPLE_SSID="Myssid"

CONFIG_RAW_TX_PKT_SAMPLE_PASSWORD="Mypassword"

CONFIG_RAW_TX_PKT_SAMPLE_RATE_FLAGS=0

# System settings

CONFIG_NEWLIB_LIBC=y

CONFIG_NEWLIB_LIBC_NANO=n

# Networking

CONFIG_NETWORKING=y

CONFIG_NET_SOCKETS=y

CONFIG_NET_LOG=y

CONFIG_NET_IPV4=y

CONFIG_NET_UDP=y

CONFIG_NET_TCP=y

CONFIG_NET_DHCPV4=y

CONFIG_NET_PKT_RX_COUNT=8

CONFIG_NET_PKT_TX_COUNT=8

# Below section is the primary contributor to SRAM and is currently

# tuned for performance, but this will be revisited in the future.

CONFIG_NET_BUF_RX_COUNT=16

CONFIG_NET_BUF_TX_COUNT=16

CONFIG_NET_BUF_DATA_SIZE=1500

CONFIG_HEAP_MEM_POOL_SIZE=153600

CONFIG_NET_TC_TX_COUNT=1

CONFIG_NET_IF_UNICAST_IPV4_ADDR_COUNT=1

CONFIG_NET_MAX_CONTEXTS=5

CONFIG_NET_CONTEXT_SYNC_RECV=y

CONFIG_INIT_STACKS=y

CONFIG_NET_L2_ETHERNET=y

CONFIG_NET_CONFIG_SETTINGS=y

CONFIG_NET_CONFIG_INIT_TIMEOUT=0

CONFIG_NET_SOCKETS_POLL_MAX=10

# Memories

CONFIG_MAIN_STACK_SIZE=4096

CONFIG_SYSTEM_WORKQUEUE_STACK_SIZE=2048

CONFIG_NET_TX_STACK_SIZE=4096

CONFIG_NET_RX_STACK_SIZE=4096

# Debugging

CONFIG_STACK_SENTINEL=y

CONFIG_DEBUG_COREDUMP=y

CONFIG_DEBUG_COREDUMP_BACKEND_LOGGING=y

CONFIG_DEBUG_COREDUMP_MEMORY_DUMP_MIN=y

CONFIG_SHELL_CMDS_RESIZE=n

# Kernel options

CONFIG_ENTROPY_GENERATOR=y

# Logging

CONFIG_LOG=y

CONFIG_LOG_BUFFER_SIZE=2048

CONFIG_POSIX_CLOCK=y

CONFIG_NET_CONFIG_MY_IPV4_ADDR="192.168.1.99"

CONFIG_NET_CONFIG_MY_IPV4_NETMASK="255.255.255.0"

CONFIG_NET_CONFIG_MY_IPV4_GW="192.168.1.1"

# printing of scan results puts pressure on queues in new locking

# design in net_mgmt. So, use a higher timeout for a crowded

# environment.

CONFIG_NET_MGMT_EVENT_QUEUE_TIMEOUT=5000

[dejans]

Hi Dan,

Thank you for providing additional information.

Regarding your first question, the existence of the peak in your screenshot (marked "1") could be the result of charging external capacitor when turning on specific internal regulator.

We will look into this issue further during next week. I hope to provide you with some information by the end of the next week.

Best regards,
Dejan

[dejans]

Hi Dan,

To reduce duration of the second interval ("2" in your screenshot) you could try to tune idle time by setting -DCONFIG_NRF700X_RPU_PS_IDLE_TIMEOUT_MS=1.

Best regards,
Dejan