[Hackrf-dev] LTE Cell Scanner support bladeRF now (Vritual machine test results also attached).
Jiao Xianjun
putaoshu at gmail.com
Sat Nov 1 20:38:43 EDT 2014
Hi,
After LTE-Cell-Scanner <https://github.com/JiaoXianjun/LTE-Cell-Scanner>
supports rtlsdr hackRF, now it supports bladeRF
<http://sdr-x.github.io/LTE-Cell-Scanner%20supports%20bladeRF%20now%20%28LTE%E5%B0%8F%E5%8C%BA%E6%90%9C%E7%B4%A2%E7%A8%8B%E5%BA%8F%E6%96%B0%E5%A2%9EbladeRF%E7%A1%AC%E4%BB%B6%E6%94%AF%E6%8C%81%29/>
!
Here is part of README:
An OpenCL accelerated TDD/FDD LTE Scanner (from rtlsdr/hackRF/bladeRF A/D
samples to PDSCH output and RRC SIB messages decoded). By Jiao Xianjun (
putaoshu at gmail.com). Tech blog: http://sdr-x.github.io
------------------------------
New features, make and Usages
*0x00. basic method to build program*
mkdir build
cd build
cmake ../
make
CellSearch and LTE-Tracker program will be generated in build/src. Use
"--help" when invoke program to see all options
*0x01. cmake to build for different hadware*
cmake ../ -DUSE_BLADERF=1 -- build for bladeRF
cmake ../ -DUSE_HACKRF=1 -- build for hackRF
cmake ../ -- default for rtlsdr
...
See complete README here: https://github.com/JiaoXianjun/LTE-Cell-Scanner
See video outside China: http://youtu.be/rg6ENh-tbJY
See video in China: http://v.youku.com/v_show/id_204158978.html
----------------------------------------------------------------------------------------------
I also test some cases to see if rtlsdr hackRF and bladeRF can work in
virtual machine smoothly.
rtlsdr dongle and bladeRF work well in virtual machine for this LTE Cell
Scanner <https://github.com/JiaoXianjun/LTE-Cell-Scanner>, while
hackrf_info always reports:
Found HackRF board.
hackrf_board_id_read() failed: HACKRF_ERROR_LIBUSB (-1000)
Since rtlsdr and bladeRF work in virtual machina, there is a hope for
hackrf to work also? Any ideas or suggestions?
My configuration:
host OS: Win7
guest OS: Ubuntu14 (LTS)
virtual machine: VMware 10.0.4
mainboard: ASUS P9X79 PRO -LGA 2011/Intel X79 /ATX
CPU: i7 3930K -3.2GHz/LGA 2011/12M 120W
memory: Kingston HyperX 16G(4GBx4) DDR3 1600 KHX1600C9D3K4/16GX
graphic: GTX550TI 950MHz/4100MHz 1GB/192BIT DDR5 PCI-E
Hope above is useful for someone.
BR
On Tue, Jul 8, 2014 at 1:14 AM, Hunter <neversphere at gmail.com> wrote:
> Nice work.
>
>
> On Mon, Jul 7, 2014 at 7:43 AM, Jiao Xianjun <putaoshu at gmail.com> wrote:
>
>> HI,
>>
>> In previous work, I just got raw bits from PDSCH. Now, ASN1 decoder is
>> built based on lameditor and asn1c. That means we have almost full stack
>> from A/D samples to PDSCH output and ASN1 parser for LTE Downlink RRC
>> messages.
>>
>> A article on "How to decode LTE RRC/SIB/ASN1 messages by lameditor and
>> asn1c" is written: http://sdr-x.github.io/LTE-SIB-decoding-by-asn1c/
>>
>> Have fun.
>>
>> (I plan to move this Matlab-C mixed program to pure C, and accelerate it
>> by fixed-point/parallel to achieve real-time processing LTE Downlink
>> signal. Anyone who is interested in this project, feel free to join!)
>>
>> BR
>>
>> Jiao Xianjun
>>
>>
>>
>>
>> On Tue, May 27, 2014 at 9:13 AM, Jiao Xianjun <putaoshu at gmail.com> wrote:
>>
>>> Hi,
>>>
>>> I have decode the whole 20MHz LTE signal by HACKRF board with 19.2Msps
>>> sampling rate! See all Matlab codes and captured signal here:
>>> https://github.com/JiaoXianjun/LTE-Cell-Scanner (Thanks again to
>>> hackrf.net for lending me a board to do experiment!)
>>>
>>> Maximum sampling rate of HACKRF is about 20Msps, but 20MHz LTE needs
>>> 30.72Msps rate according to LTE spec. A sampling rate converter is designed
>>> to get 30.72Msps signal from 19.2Msps HACKRF captured signal. (19.2*8/5 =
>>> 30.72)
>>>
>>> By this way, those channels in the whole 20MHz LTE bandwidth are
>>> detected, such as PBCH, PCFICH, PHICH, PDCCH, PDSCH(SIB1, SIB2, etc).
>>>
>>> We are lucky for two reasons:
>>> 1. Most 20MHz LTE signals here in China are 100RB configuration. That
>>> means actual bandwidth is 100*180kHz = 18MHz
>>> 2. USB transmission between HACKRF board and computer supports 19.2Msps
>>> sampling rate without packets loss. Higher rate (for example 23Msps) may
>>> lead to packets loss.
>>>
>>> Some figures from Matlab are attached.
>>>
>>> Figure 1 info: time-frequency resource grids of a TDD radio frame (Y:
>>> sub-carrier; X OFDM symbol)
>>>
>>> Matlab outputs and these match the Figure 1:
>>>
>>> TDD SFN-310 ULDL-2-|D|S|U|D|D|D|S|U|D|D| CID-30 nPort-1 CP-normal
>>> PHICH-DUR-normal-RES-1
>>>
>>> SF5 PHICH1 PDCCH3 RNTI: SI-RNTI SI-RNTI
>>> No.0 4CCE: Localized VRB from RB0 to RB6 MCS-2 HARQ-0 NEWind-0 RV-1
>>> TPC-1 DAI-0
>>> No.0 8CCE: Localized VRB from RB0 to RB6 MCS-2 HARQ-0 NEWind-0 RV-1
>>> TPC-1 DAI-0
>>>
>>>
>>> Figure 2 : Constellation of SIB1 in PDSCH of subframe 5 in above radio
>>> frame
>>>
>>>
>>> Figure 3 info: time-frequency resource grids of another TDD radio frame
>>> (Y: sub-carrier; X OFDM symbol)
>>>
>>> Matlab outputs and these match the Figure 3:
>>>
>>> TDD SFN-900 ULDL-2-|D|S|U|D|D|D|S|U|D|D| CID-216 nPort-2 CP-normal
>>> PHICH-DUR-normal-RES-1
>>> SF4 PHICH1 PDCCH1 RNTI: SI-RNTI SI-RNTI
>>> No.0 4CCE: Localized VRB from RB0 to RB5 MCS-2 HARQ-0 NEWind-0 RV-0
>>> TPC-1 DAI-0
>>> No.0 8CCE: Localized VRB from RB0 to RB5 MCS-2 HARQ-0 NEWind-0 RV-0
>>> TPC-1 DAI-0
>>> SF5 PHICH1 PDCCH1 RNTI: SI-RNTI SI-RNTI
>>> No.0 4CCE: Localized VRB from RB0 to RB5 MCS-2 HARQ-0 NEWind-0 RV-3
>>> TPC-1 DAI-0
>>> No.0 8CCE: Localized VRB from RB0 to RB5 MCS-2 HARQ-0 NEWind-0 RV-3
>>> TPC-1 DAI-0
>>>
>>> Videos:
>>>
>>> in China:
>>> http://v.youku.com/v_show/id_XNzE3NDYwMDgw.html
>>>
>>> outside China:
>>> http://youtu.be/2JH_EGdHyYE
>>>
>>> Next step: decoding PDSCH and porting all these into C/C++ in
>>> LTE-Cell-Scanner
>>>
>>> BR
>>> Jiao Xianjun
>>>
>>>
>>
>> _______________________________________________
>> HackRF-dev mailing list
>> HackRF-dev at greatscottgadgets.com
>> http://nine.pairlist.net/mailman/listinfo/hackrf-dev
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist9.pair.net/pipermail/hackrf-dev/attachments/20141102/3226006c/attachment.html>
More information about the HackRF-dev
mailing list