--- a/doc/RVTMUX	Sat Jun 21 19:36:32 2014 +0000
+++ b/doc/RVTMUX	Sat Jun 21 21:28:56 2014 +0000
@@ -120,12 +120,12 @@
 for yourself.)  Thus TMFFS2 is currently the "officially adopted" version for
 FreeCalypso.
 
-Our fc-tmsh utility (described below) allows a developer-operator to send TMFFS
-"get version" queries to a running GSM fw in both ETM_FFS1 and ETM_FFS2 formats;
-this capability allows us to determine experimentally which protocol (if any) is
-implemented by a given proprietary firmware version.  Experiments reveal that
-Openmoko's moko11 firmware implements TMFFS1, whereas Pirelli's fw implements
-TMFFS2.
+Our fc-tmsh utility (see below and ../rvinterf/README) allows a developer-
+operator to send TMFFS "get version" queries to a running GSM fw in both
+ETM_FFS1 and ETM_FFS2 formats; this capability allows us to determine
+experimentally which protocol (if any) is implemented by a given proprietary
+firmware version.  Experiments reveal that Openmoko's moko11 firmware
+implements TMFFS1, whereas Pirelli's fw implements TMFFS2.
 
 The leo2moko-r1 firmware produced by the FreeCalypso project in 2013-10
 implements TMFFS1, simply because that was the selected configuration in the
@@ -138,38 +138,5 @@
 
 As one would naturally expect, the FreeCalypso project has developed some host
 tools that allow a PC running GNU/Linux (or other Unix systems) to interface to
-running firmwares on GSM devices via RVTMUX.  The following tools are currently
-available:
-
-rvtdump		Opens the serial port, decodes TI's binary packet protocol, and
-		simply dumps every received/decoded packet on stdout in a human-
-		readable form.  No provision for sending anything to the target.
-		Intended use: observing the debug trace output which all TI
-		firmwares emit as standard "background noise".  This utility
-		allows one to observe/log/study the "noise" that appears on
-		Pirelli's USB-serial port (running Pirelli's original fw),
-		as well as that emitted on the IrDA (headset jack) port on the
-		GTA02 by mokoN/leo2moko firmwares.
-
-rvinterf	Provides a bidirectional interface to RVTMUX on the host side.
-		It dumps and/or logs the "background noise" emitted by the
-		target just like rvtdump, but also creates a local UNIX domain
-		socket on the host machine to which other programs can connect,
-		replicating the MUXing function on the host side.
-
-fc-tmsh		Interactive asynchronous test mode shell.  This program connects
-		to a target GSM device through rvinterf and allows a developer-
-		operator to send various ETM commands to the target.  ETM
-		responses are decoded (sometimes only lightly) and displayed.
-		fc-tmsh is fully asynchronous in that it continuously listens
-		(via select(2)) for both user input and for packets from the
-		target at the same time, translating any user-entered commands
-		into packets to the target and conversely, scribbling on the
-		terminal when a packet arrives from the target.  It has no
-		knowledge of any correspondence between commands and responses
-		they normally elicit.
-
-fc-tmsh implements some low-level ffs2 commands (see above regarding our design
-decision to use TMFFS2 rather than TMFFS1), but it is already known that this
-implementation approach is a dead end, and a different host utility is planned
-to be written for full FFS read/write access via the TMFFS2 protocol.
+running firmwares on GSM devices via RVTMUX.  See the rvinterf subtree of
+freecalypso-sw for the source and documentation.