brmlab project:sdr:tetrapol

Decoding audio

Anonymous (anonymous@undisclosed.example.com) — 2017-01-15T23:13:53+00:00

1484521668		current
Line 14:		Line 14:
	* You may need to recompile it with grcc and you may need to change your SDR parameters. We have tested it with bladeRF.		* You may need to recompile it with grcc and you may need to change your SDR parameters. We have tested it with bladeRF.
	* Protip: If your radio does not receive the generated signal, you may have incompatible scrambling code (the "SCR=4;" line in forward_voice.c)		* Protip: If your radio does not receive the generated signal, you may have incompatible scrambling code (the "SCR=4;" line in forward_voice.c)
		+	* You will also have to XOR all the *.txt files back and forth or capture these frames from your radio. There is no automated tool for that.

	We are running an online decoder at http://nat.brmlab.cz:8064/.		We are running an online decoder at http://nat.brmlab.cz:8064/.

Anonymous (anonymous@undisclosed.example.com) — 2016-03-13T19:43:37+00:00

1457896792	current
Line 1:	Line 1:
	+	====== Radio MC9600 G1 ======
	+
	+	===== Battery pinout ====
	+
	+	{{:project:sdr:tetrapol:konektor_baterie.jpg?300 \|}}
	+
	+	^ Pin no. ^ Description ^
	+	\| 1 \| Power + 7.8 V \|
	+	\| 2 \| Power GND \|
	+	\| 3 \| ? \|
	+	\| 4 \| Battery detection, connected to GND using 470 Ω when battery present \|
	+	\| 5 \| ? \|
	+	\| 6 \| ? \|
	+
	+	===== Programing and handsfree connector ====
	+
	+	This is the strange connector on top of the radio. Press connector top cover hard to open it.
	+
	+	Pins are numbered counterclockwise starting from the notch on radio side of the connector.
	+
	+	^ Pin no. ^ Description ^
	+	\| 1 \| /debug enable \|
	+	\| 2 \| GND \|
	+	\| 3 \| audio ?in/out? \|
	+	\| 4 \| audio ?in/out? \|
	+	\| 5 \| audio ?in/out? \|
	+	\| 6 \| 12 V power supply input for flash programing \|
	+	\| 7 \| GND ??? \|
	+	\| 8 \| serial 1 TX (5V, 19200 baud) \|
	+	\| 9 \| serial 1 RX (5V, 19200 baud) \|
	+	\| 10 \| 5V output \|
	+	\| 11 \| serial 2 TX ??? \|
	+	\| 12 \| serial 2 RX ??? \|
	+
	+	In order to enable debug mode turn the radio off, tie pin 1 to ground and turn it on.
	+
	+	Serial port 1 is used for station programing using proprietary protocol. The same port is used by bootloader but the protocol probably differes (?).
	+

Anonymous (anonymous@undisclosed.example.com) — 2015-11-22T05:13:18+00:00

	current
Line 1:	Line 1:
	+	==== Radio - MC9620 G2 ====

	+	=== Battery pinout ===
	+
	+	Radio battery pinout. Pins are numbered from left to right when the contacts on battery are closer to You.
	+
	+	- GND (shortened pin)
	+	- GND
	+	- Thermistor (measure resistace against GND)
	+	- Bat+
	+	- SMBus Clock (connect to bq2040 or other Gas gauge I2C chip)
	+	- SMBus Data (connect to bq2040 or other Gas gauge I2C chip)
	+	- 1-wire data line - connected to chip with unique serial number like DS2400/DS2401
	+	- N/C
	+
	+	{{:project:sdr:mc9620_g2_baterry.jpeg?200 \|}}
	+
	+	=== Dummy battery ===
	+
	+	In order to replace battery or make fake one You need to connect power lines and the 1-wire chip providing unique ID. Station will turn on, report bad battery but should work.

Anonymous (anonymous@undisclosed.example.com) — 2016-04-19T03:08:07+00:00

1459445754	current
Line 1:	Line 1:
	+	===== Software How To =====

	+	On Debian install libcmocka-dev libglib2.0-dev libjson-c-dev.
	+
	+	Clone the repository, do what README says.
	+
	+	==== Tools usage ====
	+
	+	* The scripts in demod/ directory eat data from SDR and spit out demodulated bits.
	+	* apps/tetrapol_dump eats these bits and decodes metadata. Use -t TCH or -t CCH to decode the right channel (switch to the other one if it does not work).
	+
	+	Scan for Tetrapol traffic. It is 12.5kHz wide buzzing (when demodulated as FM) usually in the 380-420MHz band.
	+
	+	Compute the ARFCN of your station. We believe it is (f-358400000)/12500. E.g. a station at 394425 kHz is channel number 2882.
	+
	+	Run the demodulator, passing tetrapol_dump to its pipe. E.g.
	+
	+	<code>./demod.py -c 2882 -p 44 -g 40 -O "tetrapol_dump -t TCH"</code>
	+
	+	To save raw bits for further experiments, you can for example add the "tee" command to the pipe.
	+
	+	If the dumping mysteriously fails, you probably have wrong type of channel. There are CCH channels (broadcast and control messages) and TCH channels (actual traffic is happening here).

1457896792	current
Line 1:	Line 1:
	+	====== Radio MC9600 G1 ======
	+
	+	===== Battery pinout ====
	+
	+	{{:project:sdr:tetrapol:konektor_baterie.jpg?300 \|}}
	+
	+	^ Pin no. ^ Description ^
	+	\| 1 \| Power + 7.8 V \|
	+	\| 2 \| Power GND \|
	+	\| 3 \| ? \|
	+	\| 4 \| Battery detection, connected to GND using 470 Ω when battery present \|
	+	\| 5 \| ? \|
	+	\| 6 \| ? \|
	+
	+	===== Programing and handsfree connector ====
	+
	+	This is the strange connector on top of the radio. Press connector top cover hard to open it.
	+
	+	Pins are numbered counterclockwise starting from the notch on radio side of the connector.
	+
	+	^ Pin no. ^ Description ^
	+	\| 1 \| /debug enable \|
	+	\| 2 \| GND \|
	+	\| 3 \| audio ?in/out? \|
	+	\| 4 \| audio ?in/out? \|
	+	\| 5 \| audio ?in/out? \|
	+	\| 6 \| 12 V power supply input for flash programing \|
	+	\| 7 \| GND ??? \|
	+	\| 8 \| serial 1 TX (5V, 19200 baud) \|
	+	\| 9 \| serial 1 RX (5V, 19200 baud) \|
	+	\| 10 \| 5V output \|
	+	\| 11 \| serial 2 TX ??? \|
	+	\| 12 \| serial 2 RX ??? \|
	+
	+	In order to enable debug mode turn the radio off, tie pin 1 to ground and turn it on.
	+
	+	Serial port 1 is used for station programing using proprietary protocol. The same port is used by bootloader but the protocol probably differes (?).
	+