Re: [Discuss-gnuradio] LTE Cell Scanner support bladeRF now (Vritualmachine test results also attached).

[Jiao Xianjun]

Hi, Sebatian

Sorry for my insufficient introduction. I have written a more clear version of README here to show the concrete commands and outputs.

Basically, the program read real-time A/D samples from SDR hadware (rtlsdr, hackRF, bladeRF) and perform full stack LTE physical layer processing (time-frequency synchronization, frame synchronization, channel estimation, channels demultiplexing, convolution decoding, turbo decoding, ASN1 parsing, etc.) to get MIB info in PBCH channel and RRC SIB message in PDSCH.

It is based on James Peroulas's https://github.com/Evrytania/LTE-Cell-Scanner . I add some new features, such as TDD, OpenCL, external-LNB, hackRF, bladeRF, pre-search-algorithm, etc. You may find the evolution by digging my repo and searching internet.

Also paste latest README here for your information:

0x01. basic method to build program

mkdir build
cd build
cmake ../                   -- default for rtlsdr and OpenCL ON;   OR
cmake ../ -DUSE_BLADERF=1   -- build for bladeRF;    OR
cmake ../ -DUSE_HACKRF=1    -- build for hackRF
cmake ../ -DUSE_OPENCL=0    -- disable OpenCL (See notes in later chapter)
make

CellSearch and LTE-Tracker program will be generated in build/src. Use "--help" when invoke program to see all options.

(You may need some related libraries, such as itpp, fftw, libboost-, Curses, ... etc.)

0x02. basic usage (If you have OpenCL, make sure those .cl files in LTE-Cell-Scanner/src have been copy to program directory)

0x02.1 CellSearch --freq-start 1890000000 (try to search LTE Cell at 1890MHz)

output:
...
Detected a TDD cell! At freqeuncy 1890MHz, try 0
cell ID: 253
PSS ID: 1
RX power level: -17.0064 dB
residual frequency offset: -48.0366 Hz
            k_factor: 1
...
Detected the following cells:
Meaning -- DPX:TDD/FDD; A: #antenna ports C: CP type ; P: PHICH duration ; PR: PHICH resource type
DPX  CID  A     fc  freq-offset RXPWR  C   nRB  P   PR  CrystalCorrectionFactor
TDD  253  2  1890M         -48h   -17  N  100   N  1/2   0.99999997458380551763

0x02.2 LTE-Tracker -f 1890000000 (try to track LTE Cell at 1890MHz)

0x02.3 LTE_DL_receiver (Matlab script. Decode RRC SIB message in PDSCH by reading captured signal bin file)

0x02.4 LTE_DL_receiver 1890 40 40 (Matlab script. Decode SIB at 1890MHz lively with LNA VGA gain of hackRF 40dB 40dB)

output:
...
TDD SFN-864 ULDL-2-|D|S|U|D|D|D|S|U|D|D| CID-216 nPort-2 CP-normal PHICH-DUR-normal-RES-1
SF0 PHICH1 PDCCH1 RNTI: 
...
SF4 PHICH1 PDCCH1 RNTI: SI-RNTI SI-RNTI 
PDCCH   No.0  4CCE: Localized VRB from RB0 to RB11 MCS-7 HARQ-0 NEWind-0 RV-0 TPC-1 DAI-0
Calling asn1c decoder (../asn1_test/LTE-BCCH-DL-SCH-decode/progname) for BCCH-DL-SCH-Message.
../asn1_test/LTE-BCCH-DL-SCH-decode/progname tmp_sib_info.per -p BCCH-DL-SCH-Message
<BCCH-DL-SCH-Message>
    <message>
        <c1>
            <systemInformation>
                <criticalExtensions>
                    <systemInformation-r8>
                        <sib-TypeAndInfo>
                                <sib2>
                                    <radioResourceConfigCommon>
                                        <rach-ConfigCommon>
                                            <preambleInfo>
                                                <numberOfRA-Preambles><n52/></numberOfRA-Preambles>
...

On Thu, Nov 6, 2014 at 12:19 AM, Sebastian Komorowski <address@hidden> wrote:

Interesting...

What usable information shows this scanner?

Please explain how it works in simpler words.



Regards
Sebatian




Dnia 2 listopada 2014 1:32 Jiao Xianjun <address@hidden> napisał(a):

After LTE-Cell-Scanner supports rtlsdr hackRF, now it supports bladeRF!

Here is part of README:

An OpenCL accelerated TDD/FDD LTE Scanner (from rtlsdr/hackRF/bladeRF A/D samples to PDSCH output and RRC SIB messages decoded). By Jiao Xianjun (address@hidden). Tech blog: http://sdr-x.github.io

---

New features, make and Usages

0x00. basic method to build program

        mkdir build
        cd build
        cmake ../
        make

CellSearch and LTE-Tracker program will be generated in build/src. Use "--help" when invoke program to see all options

0x01. cmake to build for different hadware

        cmake ../ -DUSE_BLADERF=1   -- build for bladeRF
        cmake ../ -DUSE_HACKRF=1    -- build for hackRF
        cmake ../                   -- default for rtlsdr

...

See complete README here: https://github.com/JiaoXianjun/LTE-Cell-Scanner

See video outside China: http://youtu.be/rg6ENh-tbJY

See video in China: http://v.youku.com/v_show/id_204158978.html

----------------------------------------------------------------------------------------------

I also test some cases to see if rtlsdr hackRF and bladeRF can work in virtual machine smoothly.

rtlsdr dongle and bladeRF work well in virtual machine for this LTE Cell Scanner, while hackrf_info always reports:

Found HackRF board.
hackrf_board_id_read() failed: HACKRF_ERROR_LIBUSB (-1000)

My configuration:

host OS: Win7

guest OS: Ubuntu14 (LTS)

virtual machine: VMware 10.0.4

mainboard: ASUS P9X79 PRO -LGA 2011/Intel X79 /ATX

CPU: i7 3930K -3.2GHz/LGA 2011/12M 120W

memory: Kingston HyperX 16G(4GBx4) DDR3 1600 KHX1600C9D3K4/16GX

graphic: GTX550TI 950MHz/4100MHz 1GB/192BIT DDR5 PCI-E

Hope above is useful for someone.

BR

Jiao Xianjun

_______________________________________________Discuss-gnuradio mailing listaddress@hiddenhttps://lists.gnu.org/mailman/listinfo/discuss-gnuradio