Over on YouTube balint256 (Balint), a researcher at Ettus (creators of the USRP line of software defined radios) has uploaded a video showing how he is using his USRP to help with frequency management at FPV time trial racing events. FPV a.k.a First Person View is a term used to describe the act of flying a remote controlled aircraft such as a quadcopter with an onboard camera that transmits live video down to the pilot. FPV racing is a new sport where pilots race FPV controlled drones around a track.
One important technical challenge at these events is frequency management. FPV drones use many frequencies at around 2.4 GHz for control and 5.8/2.4/1.3 GHz for video. With many drones in the air it is important that frequencies are managed appropriately so as to not jam each others signals.
To try and solve this problem Balint has been using GNU Radio coupled with a USRP X310 software defined radio to get very wide band RF spectrum waterfall views of the 2.4 and 5.8 GHz bands. In the waterfalls he is able to see when control signals and video signals are transmitted and at what frequency, and is able to tell if any are overlapping and jamming each other.
SDR Wideband Spectrum Monitoring for Drone FPV Frequency Management
In addition to this, Balint has also been working on his custom software defined radio based digital video downlink. Back in March we posted about his earlier work on this concept. In the video Balint demonstrates his drone with an on board USRP E310 which is used to send a custom 4.2 Mbps video downlink.
SDR digital video downlink (custom drone FPV) with E310 + webcam
Over on Reddit and GitHub user cuppa-joe has released a Python based EAS SAME Alert message decoder called dsame which is compatible with the RTL-SDR. EAS is an acronym for Emergency Alert System and is a system that is most commonly used to alert the public to local weather emergencies such as tornadoes, flash floods and severe thunderstorms.
Local EAS weather alerts are encoded with the SAME (Specific Area Message Encoding) protocol. They are transmitted on the local weather radio frequency in the USA and Canada and some weather radio’s are capable of decoding the EAS SAME data. Cuppa-joe’s dsame EAS decoder outputs full EAS weather messages such as:
The National Weather Service in Pleasant Hill, Missouri has issued a Required Weekly Test valid until 12:30 PM for the following counties in Kansas: Leavenworth, Wyandotte, Johnson, Miami, and for the following counties in Missouri: Clay, Platte, Jackson, Cass. (KEAX/NWS)
To use the software you will still need to use a EAS demodulator such as multimon-ng which is available for Windows and Linux, and you will also need Python 2.7+ installed.
An example EAS SAME alert can be heard in the player below:
The idea was to analyze the Doppler from the head echoes and and see if something useful can be extracted from them.
We detected a meteor from two distant locations and measured Doppler and Doppler slope at those locations. The we tried to find solutions to the meteor equation by brute force until we obtain a big number of them. Then we plotted those solutions in the sky and we see some of them pass near a known active radiant at the time of observation. Then, we checked the velocity of those solutions near the known radiant and found they are quite similar to the velocity of the known radiant, so we concluded probably they come from that radiant.
But they can come from everywhere else in the sky along the solution lines! There is not guarantee these meteors to be Geminids, although probabilities are high. Once all the possible radiants of a meteor are plotted into the sky, there is no way to know who of all them was the real one. Doppler only measurement from two different places is not enough to determine a meteor radiant. But don’t forget with some meteors, suspect to come from a known shower, the possible results includes the right radiant at the known meteor velocity for that radiant, so there seems to be some solid base fundamentals in this experiment.
Initially they ran into a little trouble with their sound cards, as it turns out that sound cards don’t exactly sample at their exact specified sample rate. After properly resampling their sound files they were able to create a stereo wav file (one receiver on the left channel, one receiver on the right channel) which showed that the doppler signature was different in each location. The video below shows this wav file.
Double station meteor head echoes
Using the information from their two separate recordings, they were able to do some doppler math, and determine a set of possible locations for the radiant of the meteors (it was not possible to pinpoint the exact location due to there being no inverse to the doppler equation). The radiant of a meteor shower is the point in the sky at which the meteors appear to be originating from. Although their solution couldn’t exactly pinpoint the location, some of the possible solutions from most meteors passed through the known radiant of the Geminids meteor shower. With more measurement locations the exact location could be pinpointed more accurately.
Possible solutions for the radiant of several meteors detected during the Geminids meteor shower.
Paul Rascagneres, an RF experimenter has recently uploaded a document detailing his efforts at reverse engineering a wireless doorbell (pdf file) with a 433 MHz Amplitude Shift Keyed (ASK) signal with his HackRF software defined radio. The HackRF is a SDR similar to the RTL-SDR, but with a wider available bandwidth and transmit capabilities.
To reverse engineer the doorbell, Paul used GNU Radio with the Complex to Mag decoder block to receive and demodulate the ASK signal. Once demodulated he was able to visually see the binary modulated waveform, and manually obtain the serial bit stream. From there he went on to create a GNU Radio program that can automatically obtain the binary strings from the ASK waveform.
In order to replay the signal, Paul found that the simplest way was to use the hackrf_transfer program, which simply records a signal, and then replays it via the HackRF transmitter on demand. With this method Paul was able to ring his doorbell via the HackRF.
Paul also confirmed his SDR results with an Arduino and 433 MHz transceiver. He then took it a step further and used the Arduino to create a system that could automatically receive and replay signals at 433 MHz and 315 MHz.
Radio pirates often make use of the Fleetsatcom satellites to send and receive slow scan television (SSTV) pictures over a wide distance. Fleetsatcom is a satellite communications system used by the US Navy for radio communications. Since these satellites are simply radio repeaters with no authentication mechanisms, pirates soon discovered that they could take over the satellites for their own use.
Over on YouTube user LEGION ELMELENAS has uploaded a video showing his reception of some pirates transmitting a SSTV image at a Fleetsatcom frequency of 252 MHz. To receive the image he used a home made turnstile antenna, an RTL-SDR dongle, SDR# and the RX-SSTV decoder. The image appears to be a photo of a pirates son.
We previously posted more information about Fleetsatcom SSTV pirates in this post.
SSTV from Satcom satellites. RTL-SDR SDRSharp FLTSATCOM pirates
Back in September last year we posted a tutorial written by RTL-SDR.com reader Happysat which showed how to receive and decode high resolution Meteor-M2 LRPT satellite images. The tutorial required several offline manual processing steps to be performed and therefore could not decode the image in real time.
At the same time Vasili has also released another plugin called DDE Tracker which allows a satellite tracking program such as Orbitron to interface with and control SDR#. The plugin can be downloaded on the same page as the QPSK plugin. This is similar to the already existing DDE plugins, but now also comes with a scheduler which allows users to automatically schedule recordings of Meteor-M2 and NOAA satellite passings.
NOTE:Meteor M1 has come alive again, so the frequency of Meteor M2 was changed from 137.1 MHz to 137.9 MHz. Meteor M1 is now at 137.1 MHz and can be received using the same steps as in this tutorial, though please note that images from Meteor M1 are not perfect since the satellite is tumbling. Meteor M1 is gone again.
Tutorial
To help users get set up with this new method, Happysat has again come forth with another tutorial which can be downloaded here (.pdf) (.docx) (.txt w/ images in .rar). At first glance the tutorial may seem more complicated than the old method, but in the end it is a much faster and more efficient way at decoding LRPT images. The basic steps involve setting up Orbitron and the DDE plugin to automatically track the Meteor-M2 LRPT satellite and signal, and then setting up the QPSK plugin and the new version of Lrptdecoder (if that link is down, try this mirror) to talk to one another in real time via a local TCP connection.
Real time decoding of Meteor-M2 with two new SDR# Plugins.QPSK Demodulator SDR# PluginDDE Orbitron Interface SDR# Plugin.
AMIGOS
One more Meteor-M2 related thing to look forward to in the future is the AMIGOS project which stands for Amateur Meteor Images Global Observation System. This will be a system where users around the world can contribute LRPT images through the internet to create a worldwide LRPT receiver. Oleg of LrptDecoder writes:
There is an idea to merge LRPT receive amateur radio stations in a network through the Internet and create a super LRPT receiver.
I see the benefit of professionals from the control center in the operational monitoring of the condition of the equipment MSU-MR, and for fans of the fullest reception of images from Meteor-M.
All is in testing phase and need some setup for the servers, data is beeing shared thru a VPN connection to a central server which will have a continous flow of images from all over the world.
If you don't understand what all this is about: The Meteor-M N2 is a polar orbiting Russian weather satellite that was launched on July 8, 2014. Its main missions are weather forecasting, climate change monitoring, sea water monitoring/forecasting and space weather analysis/prediction.
The satellite is currently active with a Low Resolution Picture Transmission (LRPT) signal which broadcasts live weather satellite images, similar to the APT images produced by the NOAA satellites. LRPT images are however much better as they are transmitted as a digital signal with an image resolution 12 times greater than the aging analog NOAA APT signals. Some example Meteor weather images can be found on this page and the satellite can be tracked in Orbitron or online.
A software defined radio such as the low cost RTL-SDR, or the higher end Airspy and Funcube dongles can be used to receive these signals.
An Example LRPT Image Received with an RTL-SDR from the Meteor-2 M2.
Updates
The DDE plugin can also be used for tracking NOAA satellites. Some people have been having trouble with set up. Happysat writes a solution:
Over on YouTube user kpappa has uploaded a video showing his reception of the J43VHF radio amateur stratosphere balloon with an RTL-SDR dongle and discone antenna. On the 10th of May radio amateurs in Greece launched a high altitude balloon. The balloon carried a transceiver payload which allowed amateurs to talk to each other via the balloon at a frequency of 144.200 MHz. The video shows good reception of the balloon and also shows it’s tracking via APRS.fi.
The author’s tutorial goes over setting up ModeSDeco2 to broadcast data over the network, setting up ModeSMixer2 to receive data, and also setting up the basestation.sqb file to add airline logos and silhouettes to the web based GUI of ModeSMixer2.
