# LTE Cell Scanner support bladeRF now (Vritual machine test results also attached) **URL:** \ **Category:** GNU Radio\ **Created:** [November 2, 2014, 1:33am UTC](https://www.ruby-forum.com/t/lte-cell-scanner-support-bladerf-now-vritual-machine-test-results-also-attached/232882 "2014-11-02T01:33:36Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![addis\_a](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/c4cdca/32.png) [@addis\_a](https://www.ruby-forum.com/u/addis_a)\ **Post date:** [November 2, 2014, 1:33am UTC](https://www.ruby-forum.com/t/lte-cell-scanner-support-bladerf-now-vritual-machine-test-results-also-attached/232882/1 "2014-11-02T01:33:36Z")
After LTE-Cell-Scanner [https://github.com/JiaoXianjun/LTE-Cell-Scanner](https://github.com/JiaoXianjun/LTE-Cell-Scanner) supports rtlsdr hackRF, now it supports bladeRF [http://sdr-x.github.io/LTE-Cell-Scanner%20supports%20bladeRF%20now%20(LTE小区搜索程序新增bladeRF硬件支持)/](http://sdr-x.github.io/LTE-Cell-Scanner%20supports%20bladeRF%20now%20%28LTE%E5%B0%8F%E5%8C%BA%E6%90%9C%E7%B4%A2%E7%A8%8B%E5%BA%8F%E6%96%B0%E5%A2%9EbladeRF%E7%A1%AC%E4%BB%B6%E6%94%AF%E6%8C%81%29/) ! Here is part of README: ## An OpenCL accelerated TDD/FDD LTE Scanner (from rtlsdr/hackRF/bladeRF A/D samples to PDSCH output and RRC SIB messages decoded). By Jiao X. ( removed\_email\_address@domain.invalid). Tech blog: [http://sdr-x.github.io](http://sdr-x.github.io) New features, make and Usages _0x00. basic method to build program_ ``` mkdir build cd build cmake ../ make ``` CellSearch and LTE-Tracker program will be generated in build/src. Use “–help” when invoke program to see all options _0x01. cmake to build for different hadware_ ``` cmake ../ -DUSE_BLADERF=1 -- build for bladeRF cmake ../ -DUSE_HACKRF=1 -- build for hackRF cmake ../ -- default for rtlsdr ``` … See complete README here: > **[GitHub - JiaoXianjun/LTE-Cell-Scanner: OpenCL, SDR, TDD/FDD LTE cell scanner,...](https://github.com/JiaoXianjun/LTE-Cell-Scanner)** > > OpenCL, SDR, TDD/FDD LTE cell scanner, full stack from A/D samples to SIB ASN1 messages decoded in PDSCH, (optimized for RTL-SDR HACKRF and BladeRF board) - GitHub - JiaoXianjun/LTE-Cell-Scanner: O... See video outside China: [LTE Cell Scanner supports bladeRF now! - YouTube](http://youtu.be/rg6ENh-tbJY) See video in China: [http://v.youku.com/v\_show/id\_204158978.html](http://v.youku.com/v_show/id_204158978.html) * * * I also test some cases to see if rtlsdr hackRF and bladeRF can work in virtual machine smoothly. rtlsdr dongle and bladeRF work well in virtual machine for this LTE Cell Scanner [https://github.com/JiaoXianjun/LTE-Cell-Scanner](https://github.com/JiaoXianjun/LTE-Cell-Scanner), while hackrf\_info always reports: Found HackRF board. hackrf\_board\_id\_read() failed: HACKRF\_ERROR\_LIBUSB (-1000) My configuration: host OS: Win7 guest OS: Ubuntu14 (LTS) virtual machine: VMware 10.0.4 mainboard: ASUS P9X79 PRO -LGA 2011/Intel X79 /ATX CPU: i7 3930K -3.2GHz/LGA 2011/12M 120W memory: Kingston HyperX 16G(4GBx4) DDR3 1600 KHX1600C9D3K4/16GX graphic: GTX550TI 950MHz/4100MHz 1GB/192BIT DDR5 PCI-E Hope above is useful for someone. BR Jiao X. ---
**Author:** ![Jiao\_X](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/bbce88/32.png) [@Jiao\_X](https://www.ruby-forum.com/u/Jiao_X)\ **Post date:** [November 5, 2014, 5:20pm UTC](https://www.ruby-forum.com/t/lte-cell-scanner-support-bladerf-now-vritual-machine-test-results-also-attached/232882/2 "2014-11-05T17:20:46Z")
Interesting… What usable information shows this scanner? Please explain how it works in simpler words. Regards Sebatian Dnia 2 listopada 2014 1:32 Jiao X. \ napisał(a): After LTE-Cell-Scanner supports rtlsdr hackRF, now it supports bladeRF! Here is part of README:An OpenCL accelerated TDD/FDD LTE Scanner (from rtlsdr/hackRF/bladeRF A/D samples to PDSCH output and RRC SIB messages decoded). By Jiao X. (removed\_email\_address@domain.invalid). Tech blog: [http://sdr-x.github.io](http://sdr-x.github.io) New features, make and Usages0x00. basic method to build program mkdir build cd build cmake …/ makeCellSearch and LTE-Tracker program will be generated in build/src. Use “–help” when invoke program to see all options0x01. cmake to build for different hadware cmake …/ -DUSE\_BLADERF=1 – build for bladeRF cmake …/ -DUSE\_HACKRF=1 – build for hackRF cmake …/ – default for rtlsdr…See complete README here: [https://github.com/JiaoXianjun/LTE-Cell-ScannerSee](https://github.com/JiaoXianjun/LTE-Cell-ScannerSee) video outside China: [LTE Cell Scanner supports bladeRF now! - YouTube](http://youtu.be/rg6ENh-tbJYSee) video in China: [http://v.youku.com/v\_show/id\_204158978.html----------------------------------------------------------------------------------------------I](http://v.youku.com/v_show/id_204158978.html----------------------------------------------------------------------------------------------I) also test some cases to see if rtlsdr hackRF and bladeRF can work in virtual machine smoothly.rtlsdr dongle and bladeRF work well in virtual machine for this LTE Cell Scanner, while hackrf\_info always reports:Found HackRF board. hackrf\_board\_id\_read() failed: HACKRF\_ERROR\_LIBUSB (-1000) My configuration:host OS: Win7guest OS: Ubuntu14 (LTS)virtual machine: VMware 10.0.4mainboard: ASUS P9X79 PRO -LGA 2011/Intel X79 /ATXCPU: i7 3930K -3.2GHz/LGA 2011/12M 120Wmemory: Kingston HyperX 16G(4GBx4) DDR3 1600 KHX1600C9D3K4/16GXgraphic: GTX550TI 950MHz/4100MHz 1GB/192BIT DDR5 PCI-EHope above is useful for someone.BRJiao Xianjun\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_Discuss-gnuradio mailing removed\_email\_address@domain.invalid://lists.gnu.org/mailman/listinfo/discuss-gnuradio ---
**Author:** ![Jiao\_X](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/bbce88/32.png) [@Jiao\_X](https://www.ruby-forum.com/u/Jiao_X)\ **Post date:** [November 6, 2014, 6:26am UTC](https://www.ruby-forum.com/t/lte-cell-scanner-support-bladerf-now-vritual-machine-test-results-also-attached/232882/3 "2014-11-06T06:26:54Z")
Hi, Sebatian Sorry for my insufficient introduction. I have written a more clear version of README here [http://sdr-x.github.io/LTE-Cell-Scanner%20supports%20bladeRF%20now%20(LTE小区搜索程序新增bladeRF硬件支持)/](http://sdr-x.github.io/LTE-Cell-Scanner%20supports%20bladeRF%20now%20%28LTE%E5%B0%8F%E5%8C%BA%E6%90%9C%E7%B4%A2%E7%A8%8B%E5%BA%8F%E6%96%B0%E5%A2%9EbladeRF%E7%A1%AC%E4%BB%B6%E6%94%AF%E6%8C%81%29/) to show the concrete commands and outputs. Basically, the program read real-time A/D samples from SDR hadware (rtlsdr, hackRF, bladeRF) and perform full stack LTE physical layer processing (time-frequency synchronization, frame synchronization, channel estimation, channels demultiplexing, convolution decoding, turbo decoding, ASN1 parsing, etc.) to get MIB info in PBCH channel and RRC SIB message in PDSCH. It is based on James Peroulas’s [GitHub - Evrytania/LTE-Cell-Scanner: LTE SDR cell scanner optimized to work with very low performance RF front ends (8bit A/D, 20dB noise figure)](https://github.com/Evrytania/LTE-Cell-Scanner) . I add some new features, such as TDD, OpenCL, external-LNB, hackRF, bladeRF, pre-search-algorithm, etc. You may find the evolution by digging my repo and searching internet. Also paste latest README here for your information: _0x01. basic method to build program_ mkdir build cd build cmake …/ – default for rtlsdr and OpenCL ON; OR cmake …/ -DUSE\_BLADERF=1 – build for bladeRF; OR cmake …/ -DUSE\_HACKRF=1 – build for hackRF cmake …/ -DUSE\_OPENCL=0 – disable OpenCL (See notes in later chapter) make CellSearch and LTE-Tracker program will be generated in build/src. Use “–help” when invoke program to see all options. (You may need some related libraries, such as itpp, fftw, libboost-, Curses, … etc.) _0x02. basic usage (If you have OpenCL, make sure those .cl files in LTE-Cell-Scanner/src have been copy to program directory)_ _0x02.1_ CellSearch --freq-start 1890000000 (try to search LTE Cell at 1890MHz) output: … Detected a TDD cell! At freqeuncy 1890MHz, try 0 cell ID: 253 PSS ID: 1 RX power level: -17.0064 dB residual frequency offset: -48.0366 Hz k\_factor: 1 … Detected the following cells: Meaning – DPX:TDD/FDD; A: #antenna ports C: CP type ; P: PHICH duration ; PR: PHICH resource type DPX CID A fc freq-offset RXPWR C nRB P PR CrystalCorrectionFactor TDD 253 2 1890M -48h -17 N 100 N 1/2 0.99999997458380551763 _0x02.2_ LTE-Tracker -f 1890000000 (try to track LTE Cell at 1890MHz) _0x02.3_ LTE\_DL\_receiver (Matlab script. Decode RRC SIB message in PDSCH by reading captured signal bin file) _0x02.4_ LTE\_DL\_receiver 1890 40 40 (Matlab script. Decode SIB at 1890MHz lively with LNA VGA gain of hackRF 40dB 40dB) output: … TDD SFN-864 ULDL-2-|D|S|U|D|D|D|S|U|D|D| CID-216 nPort-2 CP-normal PHICH-DUR-normal-RES-1 SF0 PHICH1 PDCCH1 RNTI: … SF4 PHICH1 PDCCH1 RNTI: SI-RNTI SI-RNTI PDCCH No.0 4CCE: Localized VRB from RB0 to RB11 MCS-7 HARQ-0 NEWind-0 RV-0 TPC-1 DAI-0 Calling asn1c decoder (…/asn1\_test/LTE-BCCH-DL-SCH-decode/progname) for BCCH-DL-SCH-Message. …/asn1\_test/LTE-BCCH-DL-SCH-decode/progname tmp\_sib\_info.per -p BCCH-DL-SCH-Message …