Getting the testmode to run once is pretty easy to be honest. Getting it running continuously without gaps and then extrating the produced firehose of data is where most of the complexity was. At least for me. Also fuzzing for configurations that were not intended. For example, stock tables only allow for up to 40mhz @ 80msps on the 2.4ghz band.