Over on YouTube user k2nccvids has posted a short video showing the Logic Trunked Radio (LTR) Analyzer software working with SDR# and the RTL-SDR. Logic Trunked Radio is a type of radio trunking system that uses distributed control channels modulated into the analogue voice channel instead of using just one signal control channel.
The popular trunking decoding software Unitrunker now supports the RTL2832U R820T RTL-SDR directly in its new version. This means that extra SDR receiver software like SDR# is no longer required to use Unitrunker.
You can download the latest version of Unitrunker here. (NOTE: Unitrunker has recently been updated to V2.1 and so the tutorial below may look a little different now)
In a normal radio system, one company (or talkgroup) might use a single frequency for radio communications. However, this is very inefficient as the frequency may not be in use for the majority of the time. In a trunked radio system, a small set number of frequencies are shared between a large number of talkgroups. Each radio receives a special computer controlled control channel. The control channel determines a vacant frequency that a particular talkgroup should use. This helps to make radio frequency allocations more efficient.
Because a talkgroup might switch between various frequencies often, it can make listening to a conversation difficult for radio scanners. Unitrunker can be used to decode the control channel and follow a voice conversation as it hops across various frequencies. With two RTL-SDR dongles you can set up a trunking receiver station with just Unitrunker. What follows below is a tutorial on how to set this up.
Over on YouTube user MrCircuitMatt has uploaded two videos on how he was able to decode a temperature weather sensor using an RTL-SDR and GNU Radio. His videos go through the GNU Radio technical steps as well as the signal encoding theory he used to decode the temperature.
Using an RTL-SDR Clayton Smith was able to reverse engineer his remote controlled ceiling fan. To do this he first used his BladeRF to determine that the remote control was transmitting a signal at 303.747 MHz. He then used a simple GNU Radio flow graph with the RTL-SDR to plot the amplitude of the signal over time which suggested that the signal was using on-off keying. From the plot he was then able to visually determine the bit pattern sent from each button on the ceiling fan remote.
Next he used his bladeRF and another GNU Radio flowgraph to replicate and transmit the the bit pattern which was able to control the ceiling fan from the PC.
Clayton notes that all this reverse engineering was done in half an hour, demonstrating the power of software defined radio.
A RTL-SDR.com reader has written in to let us know about his project involving transmitting Digital Audio Broadcasting (DAB) using GNU Radio and the HackRF. DAB is a digital radio technology that is used to broadcast radio stations. He uses the CRC-DABMUX and CRC-DABMOD software to modulate an audio file into DAB and then uses a GNU Radio python script to write the modulated signal to the HackRF for transmitting.
Programmer Tyler Watt has been working on software that automatically logs each call from an RTL-SDR running DSD (Digital Speech Decoder) and then stores it in a time stamped database as an mp3 file. There is also a web front end for the database which allows public users to search and play recorded calls.
Recently Tyler updated his code by rewriting it in PHP and making it multiplatform.
The old version of his web front end in action for his local P25 calls can be viewed here, and the newer one can be found here.
Radio controlled electricity power outlets are outlets that can be turned on or off using a wireless radio controlled remote. Over on the blog leetupload.com the author has written an article showing how he was able to reverse engineer the wireless power outlets radio protocol.
The author used an RTL-SDR and SDR# to listen to the outlets wireless AM transmissions at 434 MHz. He then recorded the signal audio and then used audacity to view the waveform. By analyzing the audio output he discovered that the signal was a Non-Return-To-Zero (NRZ), pulse width modulated (PWM), Amplitude Shift Keying / On Off Keying (ASK/OOK) signal.
Later he was also able to use the RFCat USB dongle to transmit an on off signal from his computer. RFCat is an USB dongle that is capable of transmitting on 433 MHz.
The VHF Data Link mode 2 (VDL2) is a new transmission mode used on aircraft for sending short messages, position data (similar to ADS-B) and also for allowing traffic controllers to communicate to pilots via text and data. VDL2 is intended to eventually replace the standard ACARS modes. It is found at 136.975 MHz.
Recently, a wiki page explaining how to decode VDL2 using MultiPSK, Planeplotter and the RTL-SDR has been put up. MultiPSK is a sophisticated software program that can decode a wide range of amateur radio digital signals as well as several professional modes like VDL2. To decode most professional modes like VDL2 however, the paid version of MultiPSK is required, but a 5 minute per use trial of VDL2 decoding can be used for testing. Newer versions of MultiPSK can now even directly connect to the RTL-SDR dongle.
The wiki page shows how to set up the RTL-SDR dongle on MultiPSK to receive VDL2 signals, and then shows how to connect it to PlanePlotter in order to plot the aircraft positions on a map.
