Re: [Discuss-gnuradio] LTE Cell Scanner support bladeRF now (Vritualmachine test results also attached).

Hi, Sebatian

Sorry for my insufficient introduction. I have written a more clear version of README here to show the concrete commands and outputs.

Basically, the program read real-time A/D samples from SDR hadware (rtlsdr, hackRF, bladeRF) and perform full stack LTE physical layer processing (time-frequency synchronization, frame synchronization, channel estimation, channels demultiplexing, convolution decoding, turbo decoding, ASN1 parsing, etc.) to get MIB info in PBCH channel and RRC SIB message in PDSCH.

It is based on James Peroulas's https://github.com/Evrytania/LTE-Cell-Scanner . I add some new features, such as TDD, OpenCL, external-LNB, hackRF, bladeRF, pre-search-algorithm, etc. You may find the evolution by digging my repo and searching internet.

Also paste latest README here for your information:

0x01. basic method to build program

mkdir build  cd build  cmake ../                   -- default for rtlsdr and OpenCL ON;   OR  cmake ../ -DUSE_BLADERF=1   -- build for bladeRF;    OR  cmake ../ -DUSE_HACKRF=1    -- build for hackRF  cmake ../ -DUSE_OPENCL=0    -- disable OpenCL (See notes in later chapter)  make  

CellSearch and LTE-Tracker program will be generated in build/src. Use "--help" when invoke program to see all options.

(You may need some related libraries, such as itpp, fftw, libboost-, Curses, ... etc.)

0x02. basic usage (If you have OpenCL, make sure those .cl files in LTE-Cell-Scanner/src have been copy to program directory)

0x02.1 CellSearch --freq-start 1890000000 (try to search LTE Cell at 1890MHz)

output:  ...  Detected a TDD cell! At freqeuncy 1890MHz, try 0  cell ID: 253  PSS ID: 1  RX power level: -17.0064 dB  residual frequency offset: -48.0366 Hz              k_factor: 1  ...  Detected the following cells:  Meaning -- DPX:TDD/FDD; A: #antenna ports C: CP type ; P: PHICH duration ; PR: PHICH resource type  DPX  CID  A     fc  freq-offset RXPWR  C   nRB  P   PR  CrystalCorrectionFactor  TDD  253  2  1890M         -48h   -17  N  100   N  1/2   0.99999997458380551763  

0x02.2 LTE-Tracker -f 1890000000 (try to track LTE Cell at 1890MHz)

0x02.3 LTE_DL_receiver (Matlab script. Decode RRC SIB message in PDSCH by reading captured signal bin file)

0x02.4 LTE_DL_receiver 1890 40 40 (Matlab script. Decode SIB at 1890MHz lively with LNA VGA gain of hackRF 40dB 40dB)

output:  ...  TDD SFN-864 ULDL-2-|D|S|U|D|D|D|S|U|D|D| CID-216 nPort-2 CP-normal PHICH-DUR-normal-RES-1  SF0 PHICH1 PDCCH1 RNTI:   ...  SF4 PHICH1 PDCCH1 RNTI: SI-RNTI SI-RNTI   PDCCH   No.0  4CCE: Localized VRB from RB0 to RB11 MCS-7 HARQ-0 NEWind-0 RV-0 TPC-1 DAI-0  Calling asn1c decoder (../asn1_test/LTE-BCCH-DL-SCH-decode/progname) for BCCH-DL-SCH-Message.  ../asn1_test/LTE-BCCH-DL-SCH-decode/progname tmp_sib_info.per -p BCCH-DL-SCH-Message  <BCCH-DL-SCH-Message>      <message>          <c1>              <systemInformation>                  <criticalExtensions>                      <systemInformation-r8>                          <sib-TypeAndInfo>                                  <sib2>                                      <radioResourceConfigCommon>                                          <rach-ConfigCommon>                                              <preambleInfo>                                                  <numberOfRA-Preambles><n52/></numberOfRA-Preambles>  ...  

On Thu, Nov 6, 2014 at 12:19 AM, Sebastian Komorowski <bajtelo@o2.pl> wrote:

Interesting...

What usable information shows this scanner?

Please explain how it works in simpler words.



Regards
Sebatian




Dnia 2 listopada 2014 1:32 Jiao Xianjun <putaoshu@gmail.com> napisał(a):

After LTE-Cell-Scanner supports rtlsdr hackRF, now it supports bladeRF!

Here is part of README:

An OpenCL accelerated TDD/FDD LTE Scanner (from rtlsdr/hackRF/bladeRF A/D samples to PDSCH output and RRC SIB messages decoded). By Jiao Xianjun (putaoshu@gmail.com). Tech blog: http://sdr-x.github.io

---

New features, make and Usages

0x00. basic method to build program

        mkdir build          cd build          cmake ../          make  

CellSearch and LTE-Tracker program will be generated in build/src. Use "--help" when invoke program to see all options

0x01. cmake to build for different hadware

        cmake ../ -DUSE_BLADERF=1   -- build for bladeRF          cmake ../ -DUSE_HACKRF=1    -- build for hackRF          cmake ../                   -- default for rtlsdr  

...

See complete README here: https://github.com/JiaoXianjun/LTE-Cell-Scanner

See video outside China: http://youtu.be/rg6ENh-tbJY

See video in China: http://v.youku.com/v_show/id_204158978.html

----------------------------------------------------------------------------------------------

I also test some cases to see if rtlsdr hackRF and bladeRF can work in virtual machine smoothly.

rtlsdr dongle and bladeRF work well in virtual machine for this LTE Cell Scanner, while hackrf_info always reports:

Found HackRF board.
hackrf_board_id_read() failed: HACKRF_ERROR_LIBUSB (-1000)

My configuration:

host OS: Win7

guest OS: Ubuntu14 (LTS)

virtual machine: VMware 10.0.4

mainboard: ASUS P9X79 PRO -LGA 2011/Intel X79 /ATX

CPU: i7 3930K -3.2GHz/LGA 2011/12M 120W

memory: Kingston HyperX 16G(4GBx4) DDR3 1600 KHX1600C9D3K4/16GX

graphic: GTX550TI 950MHz/4100MHz 1GB/192BIT DDR5 PCI-E

Hope above is useful for someone.

BR

Jiao Xianjun

_______________________________________________Discuss-gnuradio mailing listDiscuss-gnuradio@gnu.orghttps://lists.gnu.org/mailman/listinfo/discuss-gnuradio