HackRF with srsLTE and openlte

HackRF with srsLTE

srsLTE supports USRP, bladeRF and SoapySDR. HackRF is interfaced to srsLTE via SoapySDR.

1)First build srsLTE

2)Install SoapySDR and test SoapySDR to detect HackRF One

Follow link here:

https://github.com/pothosware/SoapyHackRF/wiki

Dependencies

Install libhackrf - https://github.com/mossmann/hackrf/wiki
Install SoapySDR: https://github.com/pothosware/SoapySDR/wiki

Or install Hack RF packages on Ubuntu:

I have followed this procedure:

sudo add-apt-repository -y ppa:myriadrf/drivers

sudo apt-get update

sudo apt-get install hackrf libhackrf-dev

Building Soapy Hack RF

The CMake build system will locate libhackrf and SoapySDR development files on your system. The plugin module will be built and installed into the SoapySDR modules directories.

git clone https://github.com/pothosware/SoapyHackRF.git

cd SoapyHackRF

mkdir build

cd build

cmake ..

make

sudo make install

Probing Soapy Hack RF

SoapySDRUtil --probe="driver=hackrf"

######################################################

## Soapy SDR -- the SDR abstraction library

######################################################

Probe device driver=hackrf

----------------------------------------------------

-- Device identification

----------------------------------------------------

driver=HackRF

hardware=HackRF One

buffer size=3.750000MB

clock source=internal

part id=a000cb3c005f4746

serial=0000000000000000457863c82e5f3f1f

version=2015.07.2

----------------------------------------------------

-- Peripheral summary

----------------------------------------------------

Channels: 1 Rx, 1 Tx

Timestamps: NO

----------------------------------------------------

-- RX Channel 0

----------------------------------------------------

Full-duplex: NO

Antennas: RX

Full gain range: [0, 103] dB

LNA gain range: [0, 40] dB

VGA gain range: [0, 62] dB

AMP gain range: [0, 1] dB

Full freq range: [0, 7250] MHz

RF freq range: [0, 7250] MHz

Sample rates: [1, 20] MHz

Filter bandwidths: [1.75, 28] MHz

----------------------------------------------------

-- TX Channel 0

----------------------------------------------------

Full-duplex:

Antennas: TX

Full gain range: [0, 48] dB

VGA gain range: [0, 47] dB

AMP gain range: [0, 1] dB

Full freq range: [0, 7250] MHz

RF freq range: [0, 7250] MHz

Sample rates: [1, 20] MHz

Filter bandwidths: [1.75, 28] MHz

Modules

Help

Then I ran srsue in the build folder. Following is the log:

~/SmartJammer/srsLTE-master/build/srsue/src$ ./srsue

Reading configuration file /home/alok/.config/srslte/ue.conf...

Built in Release mode using 19.9.0.

Opening 1 RF devices with 1 RF channels...

[INFO] [UHD] linux; GNU C++ version 7.4.0; Boost_106501; UHD_3.14.1.1-release

[INFO] [LOGGING] Fastpath logging disabled at runtime.

Opening USRP with args:

Error opening UHD: code 11

Soapy has found device #0: device=HackRF One, driver=hackrf, label=HackRF One #0 644064dc266107cd, part_id=a000cb3c0064435e, serial=0000000000000000644064dc266107cd, version=2017.02.1,

[INFO] Opening HackRF One #0 644064dc266107cd...

Setting up Rx stream with 1 channel(s)

Setting up Tx stream with 1 channel(s)

Set Rx bandwidth to 2.50 MHz

Set Tx bandwidth to 1.75 MHz

Available device sensors:

Available sensors for Rx channel 0:

State of gain elements for Rx channel 0 (AGC not supported):

- LNA: 16.00 dB

- AMP: 0.00 dB

- VGA: 16.00 dB

State of gain elements for Tx channel 0 (AGC not supported):

- VGA: 0.00 dB

- AMP: 0.00 dB

Rx antenna set to TX/RX

Tx antenna set to TX/RX

Warning burst preamble is not calibrated for device none. Set a value manually

Waiting PHY to initialize ... Warning: Failed to create thread with real-time priority. Creating it with normal priority: Success

Warning: Failed to create thread with real-time priority. Creating it with normal priority: Success

done!

Attaching UE...

Searching cell in DL EARFCN=3400, f_dl=2685.0 MHz, f_ul=2565.0 MHz

Set Rx bandwidth to 2.50 MHz

Set Tx bandwidth to 1.75 MHz

Warning TX/RX time offset has not been calibrated for device none. Set a value manually

.....................................................................................................................^CStopping srsUE... Press Ctrl+C 9 more times to force stop

.#other_errors=110816

--- exiting ---

I pressed Ctrl+C as I had no cellular Stations operating in 2685 band.

Changing the uplink and downlink frequency as well as EARFCN

~/SmartJammer/srsLTE-master/build/srsue/src$ ./srsue ~/.config/srslte/ue.conf --rf.dl_earfcn 2540 --rf.dl_freq 883000000 --rf.ul_freq 838000000

Output:

Reading configuration file /home/alok/.config/srslte/ue.conf...

Built in Release mode using 19.9.0.

Opening 1 RF devices with 1 RF channels...

[INFO] [UHD] linux; GNU C++ version 7.4.0; Boost_106501; UHD_3.14.1.1-release

[INFO] [LOGGING] Fastpath logging disabled at runtime.

Opening USRP with args:

Error opening UHD: code 11

Soapy has found device #0: device=HackRF One, driver=hackrf, label=HackRF One #0 644064dc266107cd, part_id=a000cb3c0064435e, serial=0000000000000000644064dc266107cd, version=2017.02.1,

[INFO] Opening HackRF One #0 644064dc266107cd...

Setting up Rx stream with 1 channel(s)

Setting up Tx stream with 1 channel(s)

Set Rx bandwidth to 2.50 MHz

Set Tx bandwidth to 1.75 MHz

Available device sensors:

Available sensors for Rx channel 0:

State of gain elements for Rx channel 0 (AGC not supported):

- LNA: 16.00 dB

- AMP: 0.00 dB

- VGA: 16.00 dB

State of gain elements for Tx channel 0 (AGC not supported):

- VGA: 0.00 dB

- AMP: 0.00 dB

Rx antenna set to TX/RX

Tx antenna set to TX/RX

Warning burst preamble is not calibrated for device none. Set a value manually

Waiting PHY to initialize ... Warning: Failed to create thread with real-time priority. Creating it with normal priority: Success

Warning: Failed to create thread with real-time priority. Creating it with normal priority: Success

done!

Attaching UE...

Searching cell in DL EARFCN=2540, f_dl=883.0 MHz, f_ul=838.0 MHz

Set Rx bandwidth to 2.50 MHz

Set Tx bandwidth to 1.75 MHz

Warning TX/RX time offset has not been calibrated for device none. Set a value manually

.........................................^CStopping srsUE... Press Ctrl+C 9 more times to force stop

.#other_errors=208

--- exiting ---

I had applied parameter uplink and downlink frequencies and EARFCN from Rx Monitor app from Play Store , but still didn’t achieve anything

Following is the version and help output

alok@Alok-PC:~/SmartJammer/srsLTE-master/build/srsue/src$ ./srsue --version

Version 19.9.0

alok@Alok-PC:~/SmartJammer/srsLTE-master/build/srsue/src$ ./srsue --help

Usage: ./srsue [OPTIONS] config_file

Configuration options:

--ue.radio arg (=multi) Type of the radio [multi]

--ue.phy arg (=lte) Type of the PHY [lte]

--ue.stack arg (=lte) Type of the upper stack [lte]

--rf.dl_earfcn arg (=3400) Downlink EARFCN list

--rf.freq_offset arg (=0) (optional) Frequency offset

--rf.dl_freq arg (=-1) Downlink Frequency (if positive

overrides EARFCN)

--rf.ul_freq arg (=-1) Uplink Frequency (if positive overrides

EARFCN)

--rf.rx_gain arg (=-1) Front-end receiver gain

--rf.tx_gain arg (=-1) Front-end transmitter gain

--rf.nof_radios arg (=1) Number of available RF devices

--rf.nof_rf_channels arg (=1) Number of RF channels per radio

--rf.nof_rx_ant arg (=1) Number of RX antennas per channel

--rf.device_name arg (=auto) Front-end device name

--rf.device_args arg (=auto) Front-end device arguments

--rf.device_args_2 arg (=auto) Front-end device 2 arguments

--rf.device_args_3 arg (=auto) Front-end device 3 arguments

--rf.time_adv_nsamples arg (=auto) Transmission time advance

--rf.burst_preamble_us arg (=auto) Transmission time advance

--rf.continuous_tx arg (=auto) Transmit samples continuously to the

radio or on bursts (auto/yes/no).

Default is auto (yes for UHD, no for

rest)

--rrc.feature_group arg (=3859025920) Hex value of the featureGroupIndicators

field in theUECapabilityInformation

message. Default 0xe6041000

--rrc.ue_category arg (=4) UE Category (1 to 10)

--rrc.ue_category_dl arg (=-1) UE Category DL v12 (valid values: 0, 4,

6, 7, 9 to 16)

--rrc.ue_category_ul arg (=-1) UE Category UL v12 (valid values: 0, 3,

5, 7, 8 and 13)

--rrc.release arg (=8) UE Release (8 to 12)

--rrc.mbms_service_id arg (=-1) MBMS service id for autostart (-1 means

disabled)

--rrc.mbms_service_port arg (=4321) Port of the MBMS service

--nas.apn arg Set Access Point Name (APN) for data

services

--nas.apn_protocol arg Set Access Point Name (APN) protocol

for data services

--nas.user arg Username for CHAP authentication

--nas.pass arg Password for CHAP authentication

--nas.force_imsi_attach arg (=0) Whether to always perform an IMSI

attach

--nas.eia arg (=1,2,3) List of integrity algorithms included

in UE capabilities

--nas.eea arg (=0,1,2,3) List of ciphering algorithms included

in UE capabilities

--pcap.enable arg (=0) Enable MAC packet captures for

wireshark

--pcap.filename arg (=ue.pcap) MAC layer capture filename

--pcap.nas_enable arg (=0) Enable NAS packet captures for

wireshark

--pcap.nas_filename arg (=ue_nas.pcap)

NAS layer capture filename (useful when

NAS encryption is enabled)

--gui.enable arg (=0) Enable GUI plots

--log.rf_level arg (=error) RF log level

--log.phy_level arg PHY log level

--log.phy_lib_level arg PHY lib log level

--log.phy_hex_limit arg PHY log hex dump limit

--log.mac_level arg MAC log level

--log.mac_hex_limit arg MAC log hex dump limit

--log.rlc_level arg RLC log level

--log.rlc_hex_limit arg RLC log hex dump limit

--log.pdcp_level arg PDCP log level

--log.pdcp_hex_limit arg PDCP log hex dump limit

--log.rrc_level arg RRC log level

--log.rrc_hex_limit arg RRC log hex dump limit

--log.gw_level arg GW log level

--log.gw_hex_limit arg GW log hex dump limit

--log.nas_level arg NAS log level

--log.nas_hex_limit arg NAS log hex dump limit

--log.usim_level arg USIM log level

--log.usim_hex_limit arg USIM log hex dump limit

--log.all_level arg (=info) ALL log level

--log.all_hex_limit arg (=32) ALL log hex dump limit

--log.filename arg (=/tmp/ue.log) Log filename

--log.file_max_size arg (=-1) Maximum file size (in kilobytes). When

passed, multiple files are created.

Default -1 (single file)

--usim.mode arg (=soft) USIM mode (soft or pcsc)

--usim.algo arg USIM authentication algorithm

--usim.op arg USIM operator code

--usim.opc arg USIM operator code (ciphered variant)

--usim.imsi arg USIM IMSI

--usim.imei arg USIM IMEI

--usim.k arg USIM K

--usim.pin arg PIN in case real SIM card is used

--usim.reader arg Force specific PCSC reader. Default:

Try all available readers.

--gw.ip_devname arg (=tun_srsue) Name of the tun_srsue device

--gw.ip_netmask arg (=255.255.255.0) Netmask of the tun_srsue device

--channel.dl.enable arg (=0) Enable/Disable internal Downlink

channel emulator

--channel.dl.fading.enable arg (=0) Enable/Disable Fading model

--channel.dl.fading.model arg (=none) Fading model + maximum doppler (E.g.

none, epa5, eva70, etu300, etc)

--channel.dl.delay.enable arg (=0) Enable/Disable Delay simulator

--channel.dl.delay.period_s arg (=3600)

Delay period in seconds (integer)

--channel.dl.delay.init_time_s arg (=0)

Initial time in seconds

--channel.dl.delay.maximum_us arg (=100)

Maximum delay in microseconds

--channel.dl.delay.minimum_us arg (=10)

Minimum delay in microseconds

--channel.dl.rlf.enable arg (=0) Enable/Disable Radio-Link Failure

simulator

--channel.dl.rlf.t_on_ms arg (=10000) Time for On state of the channel (ms)

--channel.dl.rlf.t_off_ms arg (=2000) Time for Off state of the channel (ms)

--channel.dl.hst.enable arg (=0) Enable/Disable HST simulator

--channel.dl.hst.period_s arg (=7.19999981)

HST simulation period in seconds

--channel.dl.hst.fd_hz arg (=750) Doppler frequency in Hz

--channel.dl.hst.init_time_s arg (=0) Initial time in seconds

--channel.ul.enable arg (=0) Enable/Disable internal Uplink channel

emulator

--channel.ul.fading.enable arg (=0) Enable/Disable Fading model

--channel.ul.fading.model arg (=none) Fading model + maximum doppler (E.g.

none, epa5, eva70, etu300, etc)

--channel.ul.delay.enable arg (=0) Enable/Disable Delay simulator

--channel.ul.delay.period_s arg (=3600)

Delay period in seconds (integer)

--channel.ul.delay.init_time_s arg (=0)

Initial time in seconds

--channel.ul.delay.maximum_us arg (=100)

Maximum delay in microseconds

--channel.ul.delay.minimum_us arg (=10)

Minimum delay in microseconds

--channel.ul.rlf.enable arg (=0) Enable/Disable Radio-Link Failure

simulator

--channel.ul.rlf.t_on_ms arg (=10000) Time for On state of the channel (ms)

--channel.ul.rlf.t_off_ms arg (=2000) Time for Off state of the channel (ms)

--channel.ul.hst.enable arg (=0) Enable/Disable HST simulator

--channel.ul.hst.period_s arg (=7.19999981)

HST simulation period in seconds

--channel.ul.hst.fd_hz arg (=-750) Doppler frequency in Hz

--channel.ul.hst.init_time_s arg (=0) Initial time in seconds

--phy.worker_cpu_mask arg (=-1) cpu bit mask (eg 255 = 1111 1111)

--phy.sync_cpu_affinity arg (=-1) index of the core used by the sync

thread

--phy.pregenerate_signals arg (=0) Pregenerate uplink signals after

attach. Improves CPU performance.

--phy.rx_gain_offset arg (=62) RX Gain offset to add to rx_gain to

correct RSRP value

--phy.prach_gain arg (=-1) Disable PRACH power control

--phy.cqi_max arg (=15) Upper bound on the maximum CQI to be

reported. Default 15.

--phy.cqi_fixed arg (=-1) Fixes the reported CQI to a constant

value. Default disabled.

--phy.sfo_correct_period arg (=10) Period in ms to correct sample time

--phy.sfo_emma arg (=0.100000001) EMA coefficient to average sample

offsets used to compute SFO

--phy.snr_ema_coeff arg (=0.100000001)

Sets the SNR exponential moving average

coefficient (Default 0.1)

--phy.snr_estim_alg arg (=refs) Sets the noise estimation algorithm.

(Default refs)

--phy.pdsch_max_its arg (=8) Maximum number of turbo decoder

iterations

--phy.nof_phy_threads arg (=3) Number of PHY threads

--phy.equalizer_mode arg (=mmse) Equalizer mode

--phy.intra_freq_meas_len_ms arg (=20)

Duration of the intra-frequency

neighbour cell measurement in ms.

--phy.intra_freq_meas_period_ms arg (=200)

Period of intra-frequency neighbour

cell measurement in ms. Maximum as per

3GPP is 200 ms.

--phy.cfo_is_doppler arg (=0) Assume detected CFO is doppler and

correct the UL in the same direction.

If disabled, the CFO is assumedto be

caused by the local oscillator and the

UL correction is in the opposite

direction. Default assumes oscillator.

--phy.cfo_integer_enabled arg (=0) Enables integer CFO estimation and

correction.

--phy.cfo_correct_tol_hz arg (=1) Tolerance (in Hz) for digital CFO

compensation (needs to be low if

interpolate_subframe_enabled=true.

--phy.cfo_pss_ema arg (=0.0500000007) CFO Exponential Moving Average

coefficient for PSS estimation during

TRACK.

--phy.cfo_ref_mask arg (=1023) Bitmask for subframes on which to run

RS estimation (set to 0 to disable,

default all sf)

--phy.cfo_loop_bw_pss arg (=0.0500000007)

CFO feedback loop bandwidth for samples

from PSS

--phy.cfo_loop_bw_ref arg (=0.0799999982)

CFO feedback loop bandwidth for samples

from RS

--phy.cfo_loop_pss_tol arg (=400) Tolerance (in Hz) of the PSS estimation

method. Below this value, PSS

estimation does not feeds back the

loopand RS estimations are used instead

(when available)

--phy.cfo_loop_ref_min arg (=0) Tolerance (in Hz) of the RS estimation

method. Below this value, RS estimation

does not feeds back the loop

--phy.cfo_loop_pss_conv arg (=20) After the PSS estimation is below

cfo_loop_pss_tol for

cfo_loop_pss_timeout times

consecutively, RS adjustments are

allowed.

--phy.sic_pss_enabled arg (=0) Applies Successive Interference

Cancellation to PSS signals when

searching for neighbour cells. Must be

disabled if cells have identical

channel and timing.

--phy.interpolate_subframe_enabled arg (=0)

Interpolates in the time domain the

channel estimates within 1 subframe.

--phy.estimator_fil_auto arg (=0) The channel estimator smooths the

channel estimate with an adaptative

filter.

--phy.estimator_fil_stddev arg (=1) Sets the channel estimator smooth

gaussian filter standard deviation.

--phy.estimator_fil_order arg (=4) Sets the channel estimator smooth

gaussian filter order (even values

perform better).

--phy.snr_to_cqi_offset arg (=0) Sets an offset in the SNR to CQI table.

This is used to adjust the reported

CQI.

--phy.sss_algorithm arg (=full) Selects the SSS estimation algorithm.

--phy.pdsch_csi_enabled arg (=1) Stores the Channel State Information

and uses it for weightening the

softbits. It is only used in TM1.

--phy.pdsch_8bit_decoder arg (=0) Use 8-bit for LLR representation and

turbo decoder trellis computation

(Experimental)

--phy.force_ul_amplitude arg (=0) Forces the peak amplitude in the PUCCH,

PUSCH and SRS (set 0.0 to 1.0, set to 0

or negative for disabling)

--general.metrics_period_secs arg (=1)

Periodicity for metrics in seconds

--general.metrics_csv_enable arg (=0) Write UE metrics to CSV file

--general.metrics_csv_filename arg (=/tmp/ue_metrics.csv)

Metrics CSV filename

------------------------------------------------------

alok@Alok-PC:~/SmartJammer/srsLTE-master/build/lib/examples$ ./cell_search -b 8

Opening RF device...

[INFO] [UHD] linux; GNU C++ version 7.4.0; Boost_106501; UHD_3.14.1.1-release

[INFO] [LOGGING] Fastpath logging disabled at runtime.

Opening USRP with args:

Error opening UHD: code 11

Soapy has found device #0: device=HackRF One, driver=hackrf, label=HackRF One #0 644064dc266107cd, part_id=a000cb3c0064435e, serial=0000000000000000644064dc266107cd, version=2017.02.1,

[INFO] Opening HackRF One #0 644064dc266107cd...

Setting up Rx stream with 1 channel(s)

Setting up Tx stream with 1 channel(s)

Set Rx bandwidth to 2.50 MHz

Set Tx bandwidth to 1.75 MHz

Available device sensors:

Available sensors for Rx channel 0:

State of gain elements for Rx channel 0 (AGC not supported):

- LNA: 16.00 dB

- AMP: 0.00 dB

- VGA: 16.00 dB

State of gain elements for Tx channel 0 (AGC not supported):

- VGA: 0.00 dB

- AMP: 0.00 dB

Rx antenna set to TX/RX

Tx antenna set to TX/RX

[ 0/349]: EARFCN 3450 Freq. 925.00 MHz looking for PSS.

Set Rx bandwidth to 2.50 MHz

[ 1/349]: EARFCN 3451 Freq. 925.10 MHz looking for PSS.

Set Rx bandwidth to 2.50 MHz

[ 2/349]: EARFCN 3452 Freq. 925.20 MHz looking for PSS.

Set Rx bandwidth to 2.50 MHz

[ 3/349]: EARFCN 3453 Freq. 925.30 MHz looking for PSS.

Set Rx bandwidth to 2.50 MHz

[ 4/349]: EARFCN 3454 Freq. 925.40 MHz looking for PSS.

Set Rx bandwidth to 2.50 MHz

[ 5/349]: EARFCN 3455 Freq. 925.50 MHz looking for PSS.

Set Rx bandwidth to 2.50 MHz

[ 6/349]: EARFCN 3456 Freq. 925.60 MHz looking for PSS.

Set Rx bandwidth to 2.50 MHz

[ 7/349]: EARFCN 3457 Freq. 925.70 MHz looking for PSS.

Set Rx bandwidth to 2.50 MHz

[348/349]: EARFCN 3798 Freq. 959.80 MHz looking for PSS.

Set Rx bandwidth to 2.50 MHz

Found 0 cells

Bye

#other_errors=208

The band can be selected such as 1 for 2100, 5 for 869 - 874 MHz. See the link below:

http://niviuk.free.fr/lte_band.php

Although it is showing zero cells found, In Rx Monitor app in mobile it is detecting at UL: 899.6 MHz, DL:944.6 MHz also in other apps such as openLTE and LTECellScanner, it resulted in two cells.

HackRF with openlte

There were some issues while doing cmake due to unavailability of PolarSSL as it is now mbedTLS. So updated CMakeLists mainly and some code as in the patch.

During make some more errors. That was mainly due to bladerf.

One example:

LTE_fdd_enb_radio.cc:825:34: error: invalid conversion from ‘bladerf_channel’ {aka ‘int’} to ‘bladerf_channel_layout’ [-fpermissive]

So commented all the code related to bladerf in *.cc as mentioned in the error in the terminal and corresponding header files. After it did make successfully

The below site lists all the bands required for openlte

http://niviuk.free.fr/lte_band.php.

To detect live radio lte signals

Open a terminal and run “LTE_fdd_dl_scan” by typing ./LTE_fdd_dl_scan

Program will ask to connect to port 20000.

To connect to port 20000, open another terminal and type

$ telnet localhost 20000

Following will be the output:

Trying 127.0.0.1...

Connected to localhost.

Escape character is '^]'.

*** LTE FDD DL SCAN ***

Type help to see a list of commands

On typing help, following will be the output:

help

***System Configuration Parameters***

Read parameters using read <param> format

Set parameters using write <param> <value> format

Commands:

start - Starts scanning the dl_earfcn_list

stop - Stops the scan

shutdown - Stops the scan and exits

help - Prints this screen

Parameters:

band = 1

dl_earfcn_list = 25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575

repeat = on

To change a parameter, e.g. band (The LTE band list can be found from the link :

http://niviuk.free.fr/lte_band.php.)

To read a band type “read band”. Following is the input and output examples :

read band

ok 1

write band 5

read band

ok 5

To start a scan on the changed band, simply type:

start

info channel_not_found freq=869700000 dl_earfcn=2407

info channel_not_found freq=869800000 dl_earfcn=2408

info channel_not_found freq=869900000 dl_earfcn=2409

info channel_not_found freq=870000000 dl_earfcn=2410

info channel_not_found freq=870100000 dl_earfcn=2411

info channel_not_found freq=870200000 dl_earfcn=2412

info channel_not_found freq=870300000 dl_earfcn=2413

info channel_not_found freq=870400000 dl_earfcn=2414

info channel_not_found freq=870500000 dl_earfcn=2415

info channel_not_found freq=870600000 dl_earfcn=2416

info channel_not_found freq=870700000 dl_earfcn=2417

info channel_not_found freq=870800000 dl_earfcn=2418

info channel_not_found freq=870900000 dl_earfcn=2419

info channel_not_found freq=871000000 dl_earfcn=2420

info channel_found_begin freq=871100000 dl_earfcn=2421 freq_offset=-14996.8 phys_cell_id=0 sfn=120 n_ant=2 phich_dur=Normal phich_res=2 bandwidth=1.4

info channel_found_end freq=871100000 dl_earfcn=2421 freq_offset=-14996.8 phys_cell_id=0

info channel_not_found freq=871200000 dl_earfcn=2422

info channel_not_found freq=871300000 dl_earfcn=2423

info channel_not_found freq=871400000 dl_earfcn=2424

info channel_not_found freq=881700000 dl_earfcn=2527

info channel_not_found freq=881800000 dl_earfcn=2528

info channel_found_begin freq=881900000 dl_earfcn=2529 freq_offset=15001.9 phys_cell_id=0 sfn=19 n_ant=2 phich_dur=Extended phich_res=1/2 bandwidth=20

info channel_found_end freq=881900000 dl_earfcn=2529 freq_offset=15001.9 phys_cell_id=0

info channel_not_found freq=882000000 dl_earfcn=2530

info channel_not_found freq=882100000 dl_earfcn=2531

To stop the scan type: stop

To close the connection type: shutdown

Search This Blog

Embedded Systems