LTE Cell Scanner support bladeRF now (Vritual machine test results also attached)

GNU Radio
1

After LTE-Cell-Scanner https://github.com/JiaoXianjun/LTE-Cell-Scanner
supports rtlsdr hackRF, now it supports bladeRF
http://sdr-x.github.io/LTE-Cell-Scanner%20supports%20bladeRF%20now%20(LTE小区搜索程序新增bladeRF硬件支持)/
!

Here is part of README:

An OpenCL accelerated TDD/FDD LTE Scanner (from rtlsdr/hackRF/bladeRF
A/D
samples to PDSCH output and RRC SIB messages decoded). By Jiao X. (
[email protected]). Tech blog: http://sdr-x.github.io

New features, make and Usages

0x00. basic method to build program

    mkdir build
    cd build
    cmake ../
    make

CellSearch and LTE-Tracker program will be generated in build/src. Use
“–help” when invoke program to see all options

0x01. cmake to build for different hadware

    cmake ../ -DUSE_BLADERF=1   -- build for bladeRF
    cmake ../ -DUSE_HACKRF=1    -- build for hackRF
    cmake ../                   -- default for rtlsdr

…

See complete README here:

See video outside China: LTE Cell Scanner supports bladeRF now! - YouTube

See video in China: http://v.youku.com/v_show/id_204158978.html

I also test some cases to see if rtlsdr hackRF and bladeRF can work in
virtual machine smoothly.

rtlsdr dongle and bladeRF work well in virtual machine for this LTE Cell
Scanner https://github.com/JiaoXianjun/LTE-Cell-Scanner, while
hackrf_info always reports:

Found HackRF board.
hackrf_board_id_read() failed: HACKRF_ERROR_LIBUSB (-1000)

My configuration:

host OS: Win7

guest OS: Ubuntu14 (LTS)

virtual machine: VMware 10.0.4

mainboard: ASUS P9X79 PRO -LGA 2011/Intel X79 /ATX

CPU: i7 3930K -3.2GHz/LGA 2011/12M 120W

memory: Kingston HyperX 16G(4GBx4) DDR3 1600 KHX1600C9D3K4/16GX

graphic: GTX550TI 950MHz/4100MHz 1GB/192BIT DDR5 PCI-E

Hope above is useful for someone.

BR

Jiao X.

2

Interesting…
What usable information shows this scanner?
Please explain how it works in simpler words.
Regards
Sebatian
Dnia 2 listopada 2014 1:32 Jiao X. <[email protected]>
napisał(a):
After LTE-Cell-Scanner supports rtlsdr hackRF, now it supports bladeRF!
Here is part of README:An OpenCL accelerated TDD/FDD LTE Scanner (from
rtlsdr/hackRF/bladeRF A/D samples to PDSCH output and RRC SIB messages
decoded). By Jiao X. ([email protected]). Tech blog:
http://sdr-x.github.io
New features, make and Usages0x00. basic method to build program mkdir
build cd build cmake …/ makeCellSearch and LTE-Tracker program will be
generated in build/src. Use “–help” when invoke program to see all
options0x01. cmake to build for different hadware cmake …/
-DUSE_BLADERF=1 – build for bladeRF cmake …/ -DUSE_HACKRF=1 – build
for hackRF cmake …/ – default for rtlsdr…See complete README here:
https://github.com/JiaoXianjun/LTE-Cell-ScannerSee video outside China:
LTE Cell Scanner supports bladeRF now! - YouTube video in China:
http://v.youku.com/v_show/id_204158978.html----------------------------------------------------------------------------------------------I
also test some cases to see if rtlsdr hackRF and bladeRF can work in
virtual machine smoothly.rtlsdr dongle and bladeRF work well in virtual
machine for this LTE Cell Scanner, while hackrf_info always
reports:Found HackRF board.
hackrf_board_id_read() failed: HACKRF_ERROR_LIBUSB (-1000)
My configuration:host OS: Win7guest OS: Ubuntu14 (LTS)virtual machine:
VMware 10.0.4mainboard: ASUS P9X79 PRO -LGA 2011/Intel X79 /ATXCPU: i7
3930K -3.2GHz/LGA 2011/12M 120Wmemory: Kingston HyperX 16G(4GBx4) DDR3
1600 KHX1600C9D3K4/16GXgraphic: GTX550TI 950MHz/4100MHz 1GB/192BIT DDR5
PCI-EHope above is useful for someone.BRJiao
Xianjun_______________________________________________Discuss-gnuradio
mailing
[email protected]://lists.gnu.org/mailman/listinfo/discuss-gnuradio

3

Hi, Sebatian

Sorry for my insufficient introduction. I have written a more clear
version
of README here
http://sdr-x.github.io/LTE-Cell-Scanner%20supports%20bladeRF%20now%20(LTE小区搜索程序新增bladeRF硬件支持)/
to show the concrete commands and outputs.

Basically, the program read real-time A/D samples from SDR hadware
(rtlsdr,
hackRF, bladeRF) and perform full stack LTE physical layer processing
(time-frequency synchronization, frame synchronization, channel
estimation,
channels demultiplexing, convolution decoding, turbo decoding, ASN1
parsing, etc.) to get MIB info in PBCH channel and RRC SIB message in
PDSCH.

It is based on James Peroulas’s
GitHub - Evrytania/LTE-Cell-Scanner: LTE SDR cell scanner optimized to work with very low performance RF front ends (8bit A/D, 20dB noise figure) . I add some new features,
such as TDD, OpenCL, external-LNB, hackRF, bladeRF,
pre-search-algorithm,
etc. You may find the evolution by digging my repo and searching
internet.

Also paste latest README here for your information:

0x01. basic method to build program

mkdir build
cd build
cmake …/ – default for rtlsdr and OpenCL ON; OR
cmake …/ -DUSE_BLADERF=1 – build for bladeRF; OR
cmake …/ -DUSE_HACKRF=1 – build for hackRF
cmake …/ -DUSE_OPENCL=0 – disable OpenCL (See notes in later
chapter)
make

CellSearch and LTE-Tracker program will be generated in build/src. Use
“–help” when invoke program to see all options.

(You may need some related libraries, such as itpp, fftw, libboost-,
Curses, … etc.)

0x02. basic usage (If you have OpenCL, make sure those .cl files in
LTE-Cell-Scanner/src have been copy to program directory)

0x02.1 CellSearch --freq-start 1890000000 (try to search LTE Cell at
1890MHz)

output:
…
Detected a TDD cell! At freqeuncy 1890MHz, try 0
cell ID: 253
PSS ID: 1
RX power level: -17.0064 dB
residual frequency offset: -48.0366 Hz
k_factor: 1
…
Detected the following cells:
Meaning – DPX:TDD/FDD; A: #antenna ports C: CP type ; P: PHICH
duration ; PR: PHICH resource type
DPX CID A fc freq-offset RXPWR C nRB P PR
CrystalCorrectionFactor
TDD 253 2 1890M -48h -17 N 100 N 1/2
0.99999997458380551763

0x02.2 LTE-Tracker -f 1890000000 (try to track LTE Cell at 1890MHz)

0x02.3 LTE_DL_receiver (Matlab script. Decode RRC SIB message in PDSCH
by
reading captured signal bin file)

0x02.4 LTE_DL_receiver 1890 40 40 (Matlab script. Decode SIB at
1890MHz
lively with LNA VGA gain of hackRF 40dB 40dB)

output:
…
TDD SFN-864 ULDL-2-|D|S|U|D|D|D|S|U|D|D| CID-216 nPort-2 CP-normal
PHICH-DUR-normal-RES-1
SF0 PHICH1 PDCCH1 RNTI:
…
SF4 PHICH1 PDCCH1 RNTI: SI-RNTI SI-RNTI
PDCCH No.0 4CCE: Localized VRB from RB0 to RB11 MCS-7 HARQ-0
NEWind-0 RV-0 TPC-1 DAI-0
Calling asn1c decoder (…/asn1_test/LTE-BCCH-DL-SCH-decode/progname)
for BCCH-DL-SCH-Message.
…/asn1_test/LTE-BCCH-DL-SCH-decode/progname tmp_sib_info.per -p
BCCH-DL-SCH-Message











…