Hi ubernoob.
Warning: this is most probably hard work, and it is possible that the CUL is not able to decode the signals correctly.
If you still want to try:
- try to find a CC11xx parameter configuration for the protocol on the web. Since there are no obvious OpenSource projects, I think you wont find any.
Gathering as much information as possible will help you for the next tasks.
- Read the CC1101.pdf from TI, and try out the freely available Windows SmartRF-Studio software.
- Configure the CC1101 like SlowRF in culfw does, but with 2.4kHz datarate and GFSK, so your code will receive an interrupt for each signal-level-change
- If this works, then you'll get an "edge-stream". Create a log for some telegrams, and figure out how a bit is coded, how many preambel and sync-bits there are, what is the parity/checksum.
- If this is understood, and you're lucky (and know the CC1101 configuration well), then configure the CC1101 to packet mode, so you'll get readily analyzed bytes from the CC1101.
- Probably you wont be lucky, and have to analyze the bits in C-Code, like it is done in the SlowRF part of culfw for FS20/EM/TX/etc. 2.4 kHz should be manageable for the 8MHz CUL.
In the meantime I would try some social engineering with Elko :)
Regards,
Rudi