Tagged: telemetry

DragonOS: Decoding Train Telemetry with SoftEOT and RTL-SDR

Over on his YouTube channel Aaron who created and maintains the DragonOS SDR Linux distribution, has uploaded a video demonstrating how to use an RTL-SDR and SoftEOT/PyEOT to decode North American wireless train telemetry.

HOT (Head of Train), EOT (End of Train) and DPU (Distributed Power Unit) telemetry is sent from various parts of a train and contains information about things like voltages, brake line pressure and to monitor for accidental separation of the train.

In his video Aaron uses his DragonOS Linux distribution, SDR++ with an RTL-SDR Blog V4 dongle and the SoftEOT and SoftDPU decoders. SoftEOT and SoftDPU are both Windows programs, however Aaron shows how to use WINE to run them in Windows. Later he shows how to use an alterative decoder called PyEOT which is based on GNU Radio.

DragonOS FocalX Decoding Train Telemetry w/ SoftEOT/PyEOT (RTLSDR V4, WINE AppImage, GR 3.10)

Receiving Video Directly from a SpaceX Falcon 9 Rocket + Scott Manley Video

Last week we posted about how several users on Reddit & Twitter worked together to receive and decode text telemetry from the SpaceX Falcon 9 rocket launch using a HackRF, 1.2m dish with custom 2232.2 MHz feed and GNU Radio. In that thread it was hinted that the text telemetry was only a small portion of data contained in the entire signal. It turns out that the remaining data is the SpaceX engineering video feed which is often shown in the official live coverage streams.

Over on Reddit user /u/TRGFelix writes how he was able to receive and decode the video with his own low cost setup involving an Airspy Mini SDR, TV MMDS downconverter and the ubiquitous low cost WiFi grid dish that we've often used for GOES satellite reception and for Hydrogen Line radio astronomy. The software used was the SatDump decoder created by /u/Aang253 which builds on the research done by @r2x0t:

So today at 10:21UTC i got my own recording of Falcon9 video feed downlink on S band 2272.5MHz and with u/Aang253's software SatDump i could easily decode it from the recording straight down to mxf, avi or mp4 video file! Even with very simple recieving setup!

Setup used for receiving was simple wifi grid mesh dish antenna (100x60cm) on a tripod with old MMDS TV downconvertor and Airspy MINI. here is a photo of the setup few minutes before launch But of course its doable without convertor with SDR such as HackRF , two SPF5189Z LNAs and same antenna or even TV dish with DIY S band feed!

Software used for recording was great performing opensource SDR++ by u/xX_WhatsTheGeek_Xx link here https://github.com/AlexandreRouma/SDRPlusPlusS oftware used for decoding was u/Aang253's Satdump software which i will link later as it still needs readme written and confirm it runs without bugs! UPDATE - LINK: https://github.com/altillimity/SatDump

Original MXF video together with CADU file and I/Q file recording 6MSPS int16 here. https://files.altillimity.com/Falcon%209%20OK9UWU/

TRGFelix is also on Twitter as @OK9UWU and he has posted images of his setup, and part of the video he decoded. TRGFelix notes that he is working on a tutorial which we are very eager to see!

It's extremely interesting that we can see views of the liquid oxygen floating around inside the stage two tank which is not shown during the official live streams.

As a bonus, this story was also covered by the very popular space YouTuber Scott Manley who has put out a great video popularizing the discovery and touching on a few interesting points such as how SpaceX may be legally required to encrypt these videos in the future (but hopefully not!).

How Amateur Radio Fans Decoded SpaceX's Telemetry & Engineering Video

Receiving SpaceX Falcon 9 Telemetry with a HackRF and 1.2m Satellite Dish

Over on the Reddit /r/SpaceXLounge discussion board user /u/Xerbot has made an interesting post showing how u/derekcz was able to receive the telemetry signals from the latest SpaceX Falcon 9 rocket launch using a HackRF and a 1.2m prime focus dish with homebuilt feed designed for the 2232.5 MHz downlink frequency. Then after demodulating the signal with GNU Radio, /u/Xerbot was able to convert that signal into binary data, and then into plain text strings. 

Another user /u/Origin_of_Mind then figured out that these strings are debug messages being sent by the software-defined GPS receiver, which amongst other data contains the GPS coordinates of the second stage. The GPS data indicates that the second stage was tracking over the north of Serbia at an altitude of 219 km and velocity of 7483m/s. /u/derekcz was able to then confirm that he was indeed recording the signal when the satellite would have been crossing Serbia, confirming the received telemetry was correct.

The entire thread is an interesting read, with multiple users dissecting the plaintext and finding out information about the launch. /u/Origin_of_Mind's post in particular explains the meaning of each of the data fields, which includes the system time, the XYZ coordinates in the earth-centered earth-fixed (ECEF) coordinate system, the loss of precision due to unfavorable GPS satellite positions and the number of GPS satellites currently received.

Another user /u/softwaresaur even notes that there was an "radiation_fdir_activation_guard" event. FDIR stands for Fault Detection, Isolation and Recovery (FDIR) and this event was triggered due to 0.06 s mission time discrepancy between the rocket and GPS true time.

SpaceX Falcon 9 Telemetry Downlink Decoded

Decoding Radio Telemetry Heard on News Helicopter Video Footage with GNU Radio

Twitter user @d0tslash was watching news helicopter footage of the BLM protests on the 28th of May when he heard something that sounded like an RF telemetry feed in the background audio on the helicopter's video feed. Having seen this previous success at decoding similar helicopter telemetry, he contacted his friend proto17 who proceeded to reverse engineer and figure out how to decode the telemetry, in the end discovering that it was providing location data for the helicopter.

Over on GitHub proto17 has documented the complete process that he took in reverse engineering the telemetry. He first explored the audio in Baudline discovering that there was a 1200 Hz wide FSK signal. Next he used GNU Radio to further analyze the signal, discovering it's baud rate, resampling the signal and then using a GFSK block to demodulate the signal into 1's and 0's.

Finally he used some clever terminal tricks and a Python script to discover the bit pattern and convert the bits into ASCII characters which reveals the helicopter coordinates. The coordinates decoded indicate that the helicopter was indeed circling the protest area.

We looked into the news helicopters in use during the protests and found that Denver news stations all share one helicopter with registration N6UX. Plugging that into adsbexchange.com and looking at the helicopter ADS-B history on the 28th gives a good match to proto17's decoded data. 

News helicopter telemetry audio vs ADS-B history
News helicopter telemetry audio vs ADS-B history

Decoding the NOAA Weather Satellite Telemetry Beacons

It is well known that the NOAA satellites broadcast weather satellite images which can be received and displayed with an RTL-SDR and computer. What is less known is that there is a telemetry beacon that is also transmitted by the same satellites. The telemetry not only contains data such as the current spacecraft time, day and ID, but also contains scientific data from on board instruments such as:

  • The HIRS/3 and HIRS/4 instruments which is a high resolution infrared sounder which can be used to create a low resolution multi-spectral scan of the earth. (more info)
  • The Space Environment Monitor (SEM-2) which has a Medium Energy Proton and Electron Detector (MEPED), and a Total Energy Detector (TED). This experiment is used to measure the effect of the sun on satellite communications. (more info)
  • The experimental DCS/2 transmitter which retransmits signals from 401.65 MHz sea buoys, arctic fox collars, sea ice monitors, weather balloons and more. (more info pdf)
  • The ARGOS Advanced Data Collection System (ADCS) which amongst other uses is used in research for tracking animal GPS collars around the world.

On GitHub user nebarnix has been working on a standalone C based decoder for these NOAA satellite telemetry beacons. So far from her wiki log, it appears that she has been able to get HIRS decoding and producing an image, receive and graph SEM-2 data, and decode the locations of some fixed DCS transmitters.

A HIRS multispectrum scan of the earth from the NOAA-18 satellite telemetry beacon.
A HIRS multispectrum scan of the earth from the NOAA-18 satellite telemetry beacon.

Using the RTL-SDR to listen to the Funcube Satellite

Recently, the FUNcube-1 satellite was successfully launched. The FUNcube is a CubeSat (a low cost miniature 10cm cube sized satellite) which is intended mainly for educating young people about radio, space, physics and electronics, but has also piqued the interest of amateur radio hobbyists.

Amateur radio hobbyist N4JTC’s has shared on his blog his experiences with receiving the FUNcube-1’s telemetry using his RTL-SDR dongle. By using the RTL-SDR to receive the telemetry beacon as the satellite passes overhead, he was able to use the FUNcube Dashboard software to record and decode and view the satellites telemetry data.

Receiving the FUNcube-1 Satellite
Receiving the FUNcube-1 Satellite