Jump to content

Using a cheap SDR for scanning for LTE.


dbsynergy

Recommended Posts

Would it be possible to use a cheap SDR like the RTL-SDR's to scan for LTE?

 

I have a couple of these guys I've used for scanning narrow band transmissions on many frequencies:

http://www.amazon.com/RTL-SDR-RTL2832U-Popular-Software-Packages/dp/B00C37AZXK

 

The limitations that come to mind is I think the widest channel bandwidth is only 2.8MHz, and the max frequency you can tune to is 1700MHz.

 

I'm wondering if it would be useful for discovering LTE Band 26 deployments.

 

Link to comment
Share on other sites

No.  Assuming whatever SDR supported the correct frequencies, you would need to still analyze the signal in order to determine what it is.  Maybe you could make a guess by checking out subcarrier spacing, but it wouldn't be exact and it wouldn't determine the carrier (provider).  Far too many opportunities for false positives if you ask me...

Link to comment
Share on other sites

  • 4 months later...

Would it be possible to use a cheap SDR like the RTL-SDR's to scan for LTE?

 

I have a couple of these guys I've used for scanning narrow band transmissions on many frequencies:

http://www.amazon.com/RTL-SDR-RTL2832U-Popular-Software-Packages/dp/B00C37AZXK

 

The limitations that come to mind is I think the widest channel bandwidth is only 2.8MHz, and the max frequency you can tune to is 1700MHz.

 

I'm wondering if it would be useful for discovering LTE Band 26 deployments.

 

Or just go this route like a few of us did...

 

http://s4gru.com/index.php?/topic/4455-shopping-for-an-spectrum-analyzer-rf-explorer/

 

I use it from time to time to check to see if the 1x800 rollout or 800LTE has started here.  Also great for finding 1900 LTE sites in test mode.  You can hook it up to a computer as well for a better look at things

 

NL03ME017_BTR_2.jpg

Link to comment
Share on other sites

Or just go this route like a few of us did...

 

http://s4gru.com/index.php?/topic/4455-shopping-for-an-spectrum-analyzer-rf-explorer/

 

I use it from time to time to check to see if the 1x800 rollout or 800LTE has started here.  Also great for finding 1900 LTE sites in test mode.  You can hook it up to a computer as well for a better look at things

 

 

 

That seems like a good option. The cheapo RTL-SDR's are not very useful for decoding broadband signals. I've actually been considering a high end SDR like the USRP B200: https://www.ettus.com/product/details/UB200-KIT

 

It's quite expensive but it has all the features I want. Broadband RF support, 70MHz to 6GHz, sampling up to 56MHz wide channels, and you can actually transmit with it. I went to a conference where they gave a presentation on the interesting things you can do with these:

Link to comment
Share on other sites

  • 1 month later...

I wrote instructions on how to start with nothing and end up with a fully function SDR based LTE scanner at my blog here: http://www.shawngarringer.org/2014/01/14/set-up-your-own-kali-linux-usb-dongle-with-support-for-lte-cel-scanner/

 

Total cost about $50, $30 for the RTL-SDR and about $20 for the USB thumb drive for persistence.  Steps you through configuring the USB drive, installing Kali, building the LTE-Scanner toolchain, and scanning frequencies. I use this all the time to map new LTE sites coming online for carriers in my area.

  • Like 1
Link to comment
Share on other sites

Ever wonder what LTE looks like in a waterfall?

 

 

I actually just recorded that with my new USRP. This thing is sweet!

 

What you see in that video is my phone getting taken out of airplane mode, authenticating with the network, and logging into tapatalk.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • large.unreadcontent.png.6ef00db54e758d06

  • gallery_1_23_9202.png

  • Posts

    • Excuse my rookie comments here, but after enabling *#73#, it seems that the rainbow sim V2? requires n70 (I turned it off along with n71 - was hoping to track n66) to be available else it switches to T-Mobile.  So this confirms my suspicion that you need to be close to a site to get on Dish.  Have no idea why they don't just use plmn. To test, I put it into a s21 ultra, rebooted twice, came up on T-Mobile (no n70 on s21).  Tried to manually register on 313340, but it did not connect (tried twice). I am on factory unlocked firmware but used a s22 hack to get *#73# working.  Tried what you were suggesting with a T-Mobile sim partially installed, but that was very unstable with Dish ( I think they had figured that one out).  [edit: and now I see Boost sent me a successful device swap notice which says I can now begin to use my new device.  Sigh.  Will try again later and wait for this message - too impatient.]
    • Hopefully this indicates T-Mobile hasn't completely abandoned mmwave and/or small cells? But then again this is the loop, so take that as you will. Hopefully now that most macro activity is done (besides rural colo/builds), they will start working on small cells.   
    • This has been approved.. https://www.cnet.com/tech/mobile/fcc-approves-t-mobiles-deal-to-purchase-mint-mobile/  
    • In the conference call they had two question on additional spectrum. One was the 800 spectrum. They are not certain what will happen, thus have not really put it into their plans either way (sale or no sale). They do have a reserve level. Nationwide 800Mhz is seen as great for new technologies which I presume is IOT or 5g slices.  T-Mobile did not bite on use of their c-band or DOD.  mmWave rapidly approaching deadlines not mentioned at all. FWA brushes on this as it deals with underutilized spectrum on a sector by sector basis.  They are willing to take more money to allow FWA to be mobile (think RV or camping). Unsure if this represents a higher priority, for example, FWA Mobile in RVs in Walmart parking lots working where mobile phones need all the capacity. In terms of FWA capacity, their offload strategy is fiber through joint ventures where T-Mobile does the marketing, sales, and customer support while the fiber company does the network planning and installation.  50%-50% financial split not being consolidated into their books. I think discussion of other spectrum would have diluted the fiber joint venture discussion. They do have a fund which one use is to purchase new spectrum. Sale of the 800Mhz would go into this. It should be noted that they continue to buy 2.5Ghz spectrum from schools etc to replace leases. They will have a conference this fall  to update their overall strategies. Other notes from the call are 75% of the phones on the network are 5g. About 85% of their sites have n41, n25, and n71, 90% 5g.  93% of traffic is on midband.  SA is also adding to their performance advantage, which they figure is still ahead of other carriers by two years. It took two weeks to put the auction 108 spectrum to use at their existing sites. Mention was also made that their site spacing was designed for midrange thus no gaps in n41 coverage, while competitors was designed for lowband thus toggles back and forth for n77 also with its shorter range.  
    • The manual network selection sounds like it isn't always scanning NR, hence Dish not showing up. Your easiest way to force Dish is going to be forcing the phone into NR-only mode (*#*#4636#*#* menu?), since rainbow sims don't support SA on T-Mobile.
  • Recently Browsing

    • No registered users viewing this page.
×
×
  • Create New...