Skip to content

Commit

Permalink
update README
Browse files Browse the repository at this point in the history
  • Loading branch information
sdr-x committed Mar 16, 2014
1 parent f0ddf2a commit 4c33349
Showing 1 changed file with 20 additions and 6 deletions.
26 changes: 20 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,15 @@
rtl-sdr-LTE
===========

News:

2014-03-16

All scripts are ported into C/C++ in https://github.com/JiaoXianjun/LTE-Cell-Scanner.
Now you can use the stand alone C/C++ program to scan both TDD and FDD LTE Cell, both without external LNB and with external LNB!

----

Play with LTE signal captured by rtl-sdr.

Introduction video(inside China): http://v.youku.com/v_show/id_XNjc1MjIzMDEy.html
Expand Down Expand Up @@ -35,8 +44,8 @@ China unicom: 2555-2575 MHz

Then those bands are scanned with my MATLAB scanner: https://github.com/JiaoXianjun/multi-rtl-sdr-calibration (see README_for_spectrum_scanner.txt in that repo. Or just search rtl-sdr in http://www.mathworks.com/matlabcentral/fileexchange/)

See those .png files for spectrum plots. (For the band above 2.5GHz which has exceeded range of rtl-sdr dongle, a MMDS LNB is used to extend the band to above 2.5GHz.
See MMDS-LNB-LO1998-to-extend-dongle-band.jpg. I learn this method from http://blog.cyberexplorer.me/2014/01/sniffing-and-decoding-nrf24l01-and.html and https://github.com/omriiluz/NRF24-BTLE-Decoder.
See those .png files for spectrum plots. (For the band above 2.5GHz which has exceeded range of rtl-sdr dongle, a MMDS LNB is used to extend the band to above 2.5GHz.
See MMDS-LNB-LO1998-to-extend-dongle-band.jpg. I learn this method from http://blog.cyberexplorer.me/2014/01/sniffing-and-decoding-nrf24l01-and.html and https://github.com/omriiluz/NRF24-BTLE-Decoder.
The LO of my LNB is 1998MHz. It means that when the dongle is tuned to 600MHz, it actually receives 600+1998Mhz!)

LTE-Cell-Scanner decodes LTE MIB successfully in 1850-1880MHz band, but unsuccessful for other bands even they seems pretty like LTE 20MHz spectrum.
Expand All @@ -48,14 +57,19 @@ Inspired by James Peroulas, initial exploration with only PSS correlation is don
Now TD-LTE signal is identified successfully, maybe adding TD-LTE support to LTE-Cell-Scanner is a good idea (Done! See: https://github.com/JiaoXianjun/LTE-Cell-Scanner).

But now LTE-Cell-Scanner only works for situation where there isn't MMDS LNB, because LTE-Cell-Scanner assumes analytic relationship between carrier and sampling frequency.
When there is external LNB, the relationship won't be maintained anymore. I offer a work around. A module sampling_ppm_f_search_set_by_pss.m is used to do
sampling frequency estimation and compensation. Thus LTE-Cell-Scanner can work only for uncertain carrier frequency (By setting k_factor to constant 1). By this way
the whole scanner drops analytic relationship between carrier and sampling frequency. See CellSearch.m for detailed informaiton.
When there is external LNB, the relationship won't be maintained anymore. I offer a work around. A module sampling_ppm_f_search_set_by_pss.m is used to do
sampling frequency estimation (get k_factor). Thus LTE-Cell-Scanner can work only for uncertain carrier frequency (By getting k_factor from sampling_ppm_f_search_set_by_pss). By this way
the whole scanner drops analytic relationship between carrier and sampling frequency. See CellSearch.m for detailed informaiton.

Please join me if you are also interested in this. Please see TODO firstly.

News
=======================
2014-03-16

All scripts are ported into C/C++ in https://github.com/JiaoXianjun/LTE-Cell-Scanner.
Now you can use the stand alone C/C++ program to scan both TDD and FDD LTE Cell, both without external LNB and with external LNB!

2014-01-19:

CellSearch.m works for both TDD and FDD mode under both with LNB and without LNB.
Expand All @@ -68,7 +82,7 @@ Usage
=======================
2014-01-19:

Make sure your rtl-sdr dongle works fine (http://sdr.osmocom.org/trac/wiki/rtl-sdr). Then run "rtl_tcp -p 1234 -d 0" in shell. Then:
Make sure your rtl-sdr dongle works fine (http://sdr.osmocom.org/trac/wiki/rtl-sdr). Then run "rtl_tcp -p 1234 -d 0" in shell. Then:

CellSearch.m (Open it. See comments. And try!)

Expand Down

0 comments on commit 4c33349

Please sign in to comment.