TechMinds: Using Public Online SDRs without SDR Hardware

This weeks video on the TechMinds channel explores the various online web SDRs that are available to access for free. Accessing these online SDRs does not require any hardware apart from a PC and internet connection, although of course you are then receiving signals from a different location to yourself. 

In the video he shows how to access the SDR# Spy Server Network which mostly consists of Airpsy and RTL-SDR units, the SDR-Console V3 Server network which consists of a wide array of different SDRs, the browser based WebSDR network which is mostly soundcard based SDRs but also RTL-SDR and other SDRs, and finally the KiwiSDR network which is made up of KiwiSDRs.

Using Software Defined Radio Without SDR Hardware - WebSDR

SignalsEverywhere: Setting up a Broadcastify Feed with SDRTrunk

In her last video Sarah from the SignalsEverywhere YouTube channel showed us how to set up SDRTrunk for reception of digital P25 Police and other services with two RTL-SDR dongles. On this weeks episode Sarah shows us how to set up Broadcastify with SDRTrunk. Broadcastify is a an online service that allows you to stream audio from your SDR or scanner radio to their website for anyone to listen to. We note that sharing audio or some talkgroups may not be legal in all countries so please do your research first.

In the video Sarah shows the full setup process involving setting up a Broadcastify account, creating an alias list, adding talkgroups to share and finally setting up the Icecast server for streaming to the Broadcastify servers.

SDRTrunk Broadcastify Feed Tutorial

NyanSat: A Low Cost Open Source Satellite Ground Station

Thank you to John D for writing in and letting us know that Wired magazine has recently run an article about the "Nyansat" project. Nyansat aims to bring low cost open source satellite ground stations to the masses. The goal is to democratize citizen access to space by allowing for easier collection of satellite data, or even for collaborative citizen science radio astronomy projects such as the detection of space debris or undocumented satellites. John writes:

While most people think of a satellite ground station as a giant dish mounted on top of a building in the desert, technically any radio receiver that tunes into a satellite's signal can be called a ground station.  Somewhere between the giant dish and the GPS chip in your phone is a ground station that uses a directional antenna to pull in the faint signals.  So unless you're only interested in geosynchronous satellites, the antenna needs to be aimed at the satellite, and that's where NyanSat comes in. 

The design of the NyanSat consists of a pan-tilt head, an Inertial Measurement Unit (IMU) for precise azimuth and elevation measurements, a motor-driver board, an optional OLED display, an optional GPS module, and is powered by an ESP32.  Full source code is available in their git repo, found at https://github.com/RedBalloonShenanigans/antenny. The NyanSat's software is written in micropython specifically for the ESP32, but obviously could be ported if desired.

Mounting an antenna, adding an RTL-SDR, and actually tuning in a satellite, is still up to the builder.

One of the goals of the NyanSat project is to eventually build up a network of ground stations that can collaborate to contribute frequently updated satellite ephemeris information.

When they're in stock, the project's sponsor, Red Balloon Security, has occasionally been offering a kit containing a custom PCB that is pre-populated with the ESP32 and motor driver; a pan-tilt gimbal; an IMU; and an RTL-SDR.  They've been selling them for $1.00(!), just to get them out in the hands of people.  Keep your eye open in case they get another batch in.

The Red Balloon store lists the kit as currently out of stock so we suggest keeping an eye on their store just in case any of the $1 kits come back in stock.

NyanSat will also present a live twitch demo at this years online DefCon conference on Friday Aug 7 6:30-8PM EDT and Sat Aug 8 6:30-8PM EDT. On Sun Aug 9 12:30 EDT they will hold another event where they judge the best work of the Nyansat community.

The SatNOGS project which we have covered many times before on this blog is quite similar with it's own open source antenna rotator design, however the Nyansat design looks a bit easier to build as it doesn't require 3D printed parts. Although critically from their demos we haven't seen what sort of sized antennas the gimbal chosen by Nyansat is capable of moving.

The NyanSat Pan/Tilt Gimbal Control Setup

Setting up a GSM Basestation in minutes with a USRP and DragonOS

DragonOS is a ready to use Linux OS image that includes many SDR programs preinstalled and ready to use. The creator Aaron also runs a YouTube channel that has multiple tutorial videos demonstrating software built into DragonOS.

In a recent video Aaron shows how you can set up a GSM basestation within minutes by using the latest DragonOS version together with a USRP b205mini-i software defined radio. As the required software (osmo-BTS, osmo-bts, osmo-bts-trx) is all preinstalled, setting up the basestation is a simple matter of opening three terminal windows and running a few commands. We note that this latest DragonOS version is due to be released this Thursday.

In a previous video Aaron also shows a more detailed setup procedure showing how all the software was installed.

DragonOS Focal Running a GSM network in minutes (osmo-bts, osmo-bsc, osmo-bts-trx, USRP b205mini-i)

Flipper Zero Crowdfunding: An Open Source RF Pen Testing Tool For Hackers

Flipper Zero isn't an SDR, but it is an interesting RF capable pentesting tool that is currently being crowdfunded, and we think it deserves a post. Based on a TI CC1101 transceiver chip, the Flipper Zero has a sub 1-GHz radio capable of doing things like emulating a garage door remote, transmitting digital signals like OOK/ASK/FSK/GFSK/MSK at 315/433/866 MHz, analyzing and decoding popular remote control algorithms like Keeloq, and reading and emulating 125 kHz RFID tags. And as the crowd funding stretch goals have already been reached, the hardware will also include a Bluetooth and NFC module.

In addition to the RF features, it has a 1-wire iButton/TouchMemory/Dallas key reader, can function as a U2F security token, has an infrared transceiver with learning feature for emulating IR remotes and has 12 5V tolerant GPIO pins available for expansion with modules such as interfaces, sensors, wireless modules and cellular modems. It can also emulate a USB slave device like a keyboard allowing you to deploy a keyboard payload.

Flipper Zero currently costs US$119 however it will soon jump to US$129 once the early bird special runs out. At the time of this post they already have 13,000 backers and have raised in excess of 2.5 million dollars. There is still 25 days left in the campaign.

Flipper Zero

iotSDR Crowdfunding: An SDR Devboard for Designing Custom IoT Protocols and Gateways

A new SDR has recently launched on the CrowdSupply crowdfunding platform. This one is called "iotSDR" and is designed to be a software defined radio to help developers and enthusiasts design custom Internet of Things (IoT) algorithms and protocols.

It has a 2-channel AT86RF215 transceiver chip which is capable of tuning to all major IoT frequencies as well as a 13-bit ADC with sample rate of up to 4 MSPS. In addition is a MAX2769B chip which is used for the GNSS reception of GPS, GLONASS, Galileo and Beidou positioning satellites. An onboard ZYNQ XC7Z010 / XC7Z020 FPGA can be used for any hardware computing required.

iotSDR currently costs US$399 for the Zync XC7Z010 FPGA version, and US$599 for the Zynq XC7Z020 FPGA version. At the time of this post there are 37 days left in the campaign.

Embedding SDR in IoT

iotSDR provides a platform that allows SDR developers and enthusiasts to design innovative algorithms and cutting-edge products. While wide-band SDRs are more versatile, narrow-band transceivers perform better for many IoT-related applications. Accordingly, iotSDR hosts two narrow-band Microchip AT86RF215 transceivers that provide their own base-band cores and have the ability to handle their own I/Q signal streaming. The result is an extremely powerful tool for anyone who is looking to simplify the task of developing, testing, and deploying high-complexity frameworks.

A Powerful FPGA and a GNSS Chip to Round It Out

iotSDR’s Microchip transceivers are backed by a Zynq SoC—which provides an FPGA and a processing system in a single package—as well as a MAX2769 GNSS chip capable of streaming live signal records. That GNSS chip can be used for custom GPS, Galileo, BieDou, and GLONASS receiver development, and is perfect for projects in the location-based services (LBS) domain such as those related to navigation and surveying.

Use Existing Software, Design a Protocol, or Build a Gateway

You can drive the hardware described above using a wide variety of popular open source software, including the Xilinx PYNQ Python framework, Jupyter Notebooks, and GNU Radio.

And if your work is further down the stack, don’t worry. iotSDR still has you covered. If you want to design and implement a physical layer IoT protocol, for example—a protocol like LoRa, SigFox, WightLess, Bluetooth, BLE, 802.15.4, ZigBee, or something of your own design—this board is for you. It’s also a great place to start if you want to build a custom IoT gateway along the lines of The Things NetworkLPWAN, or Google’s Thread.

Radio has long been a pillar of modernization and technology, and this remains true in the era of software-defined radio. The Internet of Things, in particular, stands to benefit from the latest advancements in SDR technology. With iotSDR, you can be part of the community that makes that happen.

Features & Specifications

  • RF Transceiver: 2x Microchip/Atmel AT86RF215
    • European band: 863-870 MHz / 870-876 MHz / 915-921 MHz
    • Chinese band: 470-510 MHz / 779-787 MHz
    • North American band: 902-928 MHz
    • Korean band: 917-923.5 MHz
    • Japanese band: 920-928 MHz
    • World-wide ISM band: 2400-2483.5 MHz
  • GNSS Receiver: Maxim MAX2769B supporting GPS, GLONASS, Galileo, and BieDou
  • SoC: Two options available
    • Xilinx ZYNQ XC7Z010-1CLG400C
      • Dual-core ARM Cortex-A9 MPCore
      • 256 kb on-chip memory
      • DDR3 support
      • 28,000 logic cells
      • 17,600 LUTs
      • 2.1 Mb block RAM
      • 80 DSP slices
      • 2x UART, 2x CAN 2.0 B, 2x I²C, 2x SPI, 4x 32-bit GPIO
      • FPGA configuration via JTAG
    • Xilinx ZYNQ XC7Z020-1CLG400C
      • Dual-core ARM Cortex-A9 MPCore
      • 256 kb on-chip memory
      • DDR3 support
      • 85,000 logic cells
      • 53,200 LUTs
      • 4.9 Mb block RAM
      • 220 DSP slices
      • 2x UART, 2x CAN 2.0 B, 2x I²C, 2x SPI, 4x 32-bit GPIO
      • FPGA configuration via JTAG
  • EEPROM Memory: 1x Microchip AT24MAC602 for RF transceiver MCU firmware and data
  • Flash Memory: 1x QSPI 128 Mb flash memory for firmware
  • RAM: 512 MB DDR3
  • SD Card: Micro SD card slot
  • General User Inputs/Outputs:
    • 2x 8-bit PL (Programmable Logic) interfaces
    • 1x 8-bit PS (Programmable Subsystems) interface
  • Connectivity:
    • 1x Gigabit Ethernet
    • USB 2.0 High Speed (Microchip USB3310)
    • USB 2.0 Full Speed (Silicon Labs CP2104)
    • 2x SMA RF connector for Low Frequency IoT band
    • 2x SMA RF connector for 2.4 GHz band
    • 1x SMA connector for GNSS receiver
    • FPGA JTAG connector for external JTAG programmer/debugger
  • Clock System:
    • Single clock source for both RF frontends
    • Separate clock for GNSS receiver
  • Board Dimensions: 76.2 mm x 101.6 mm
The iotSDR

Analyzing Lightning Discharges with an RTL-SDR and the Sage Network

Sage is a project working on creating geographically distributed sensor systems including cameras, microphones, weather and air quality stations in order to benefit the work of scientists. Recently on their GitHub they have uploaded a Jupyter Notebook showing how they have used an RTL-SDR V3 on a Linux Laptop to analyze lightning discharges. When lightning strikes, it creates a broadband RF pulse generally across the lower frequencies. This is how live lightning maps like Blitzortung work.

In their example Sage use a dipole antenna and analysis frequency of 30 MHz. The notebook doesn't offer much additional information, but provides Python Numpy and Scipy code which can be used to detect and plot the lightning pulses.

Graphing Lightning Pulses for the Sage Network

RSGB Talk: How To Check and Report VDSL RFI with an SDR in the UK

Back in April we posted a video from Tech Minds where he showed us how to use special software combined with an SDRplay RSPdx to detect and report VDSL interference on the HF bands. VDSL or Very High Speed Digital Subscriber Line is an internet connection technology that runs over old copper phone wires allowing for a fast broadband connection. The frequencies used by VDSL are between 25 kHz to 12 MHz, and for VDSL2 up to 30 MHz. Unfortunately the frequencies used can result in high amounts of radio interference from RFI radiating from the copper phone lines which is a major problem for HF amateurs and short wave listeners.

Recently John Rogers (M0JAV) presented a talk via the UK amateur radio organization RSGB. In the talk he explains how VDSL works, why it causes RFI and how to check for VDSL RFI using an SDR and the Lelantos software. He also shows how he drove around with a magnetic loop antenna looking for VDSL RFI sources in his neighbourhood. He then goes on to call out for more volunteers in the UK to submit RFI reports to Ofcom as they responded that they won't do anything about the interference unless there are more complaints. 

The RSGB EMC Committee (EMCC) has been investigating VDSL interference since 2014. As the number of installations has risen to over 30M the interference level at amateur radio stations has also increased. The majority of radio amateurs are now impacted by this problem.

In the May 2020 RadCom we outlined how to detect and estimate the level of interference. This can be done by inspection of an SDR spectrum display or by taking a recording and then using a SW package—developed by Martin Sach of the EMCC—which identifies the VDSL signature in the recording and shows how many different VDSL lines are causing the problem and what their relative strengths are.

This talk demonstrates what to look for and how to use the tools to find out if you have a problem yourselves. We hope this will help you respond to our call for action and complain to Ofcom about the level of RFI you are subjected to.

John Rogers, M0JAV
Chair EMCC

RSGB Tonight @ 8 - How to check for VDSL RFI with John Rogers, M0JAV