24 November 2017


05547.0: ---: Unid 2231 USB 3G-HF 2-way FLSU handshake / HDL24 transfer (06Nov17) (AAI)

05838.0: ABC7: Croatian Military, HRV 0924 USB 188-141A handshake ABK4 / radio-check (14Nov17) (AAI)

06205.0: ELETTRA11: Italian Navy & GdF ships, I 0815 J3E/USB radio-checks w/ GAMMA130, GAMMA204,GAMMA12,GAMMA70,ROSTRO525,SIRIO81,IBIS10 (24Oct17) (AAI)

06371.8: ---: Unid 1019 USB THALES Système 3000 robust MFSK-8 (17Nov17) (AAI)

06529.0: KAN: Iraqi Border Police (Khanaqin ?), IRQ 1632 USB 188-141A call DUH1 (11Nov17) (AAI)

06670.0: CAMP: SUI Emergency Net, SUI 0834 USB calling any station / 188-110A Serial, unid 8-bit protocol (03Nov17) (AAI)

06865.0: XS69: Algerian Military, ALG 1746 USB 188-141A call NX40 (14Nov17) (AAI)

06910.0: ---: Unid 0747 USB 3G-HF FLSU Async call (21Oct17)(AAI)

06985.0: COMCNET: Unid 0747 USB 188-141A sounding (24Oct17) (AAI)

07504.0: ---: Unid 0628 USB 3G-HF FLSU Async call (27Oct17)(AAI)

07527.0: UHC: USCGC DECISIVE WMEC 629 Pascagoula, MS 0605 USB 188-141A sounding 
(27Oct17) (AAI)

07608.0: ---: Russian Navy, RUS 1238 (cf) CIS Navy "Akula", FSK 500Bd/1000 (27Oct17) (AAI)

07608.0: VQ4: Polish Military, POL 1016 USB USB 188-141A handshake VQ1 / voice-comms (25Oct17) (AAI)

07671.6: ---: Polish Intel, POL 1155 (cf) POL-FSK 100Bd/620, short message (25Oct17) (AAI)

07719.0: ---: Unid 0807 USB 3G-HF 2-way FLSU handshake / LDL128 transfer (21Nov17) (AAI)

07748.0: CMOC: MORJANE-17 Algerian-Tunisian exercise, Joint Maritime Operations Center 0937 USB STANAG-4539 & 188-110A Serial modem, bearing STANAG-5066 HBFTP gzipped emails
to CLM353 "El-Kirch" missile launchers Corvette (23Oct17) (AAI)  

07788.0: ---: Unid 0635 USB 3G-HF 2-way FLSU handshake / LDL128 transfer flwd by analogue tfc in the reverse direction (27Oct17)(AAI)

07830.0: MJ02: Algerian Military, ALG 0835 USB 188-141A call NX01 (10Nov17) (AAI)

07830.0: ZD02: Algerian Military, ALG 0942 USB 188-141A call ZD01 (01Nov17) (AAI)

08002.0: 4XZ: Israeli Navy, ISR 2023 CW "AR AR VVV DE 4XZ 4XZ" (23Oct17) (AAI)

08016.0: RIHQ001: NPRD Net, HRV 1036 USB 188-141A sounding (27Oct17) (AAI)

08054.0: PG01: Algerian Military, ALG 0831 USB 188-141A call NX01 (10Nov17) (AAI)

08066.0: CLM353NET: MORJANE-17 Algerian-Tunisian exercise, Algerian Navy "El-Kirch" missile launchers Corvette 0850 USB 188-141A handshake CMOCNET Joint Maritime Operations Center / STANAG-4539 & 188-110A Serial modem, bearing STANAG-5066 HBFTP gzipped emails (26Oct17) (AAI)

08066.0: FERB: Uzbekistan Net Fargona, UZB 1817 USB 188-141A sounding (26Oct17) (AAI)

08066.0: PR510NET: MORJANE-17 Algerian-Tunisian exercise 0817 USB 188-141A handshake CMOCNET Joint Maritime Operations Center / STANAG-4539 & 188-110A Serial modem, bearing STANAG-5066 HBFTP gzipped emails (26Oct17) (AAI)

08095.0: ---: Russian Intel, RUS 1320 USB MFSK-16 66.6Bd 175Hz (25Oct17) (AAI)

08162.0: 035: Hungarian Army, HNG 0700 USB 188-141A handshake 082 / HARRIS AVS scrambled voice-comms (27Oct17)(AAI)

08188.0: A98: Chines Military, CHN 2149 USB 188-141A call D78 (26Oct17) (AAI)

08190.0: CARRECA: GdF patrol boat "Carreca G107", I 2144 USB 188-141A sounding (26Oct17) (AAI)

08190.0: CORRIAS: GdF Patrol Boat "Finanziere Corrias G206" 1012 USB 188-141A sounding (27Oct17) (AAI)

08327.0: ---: Unid 0739 USB 3G-HF 2-way FLSU handshake / LDL32, sending (usual?) 139-byte Harris "Citadel" encrypted file (23Oct17) (AAI)

10425.0: BE8: Unid 0944 USB 188-141A call SRR (23Nov17) (AAI)

10425.0: SDR: Unid 0949 USB 188-141A call SRX (23Nov17) (AAI)

11020.0: ---: Unid 1400 USB RFSM-8000 HF modem with linking protection, data exchange with peer on 11025.0 (03Nov17) (AAI)

11135.0: HQ4: Unid (Egyptian/Lybian net?) 1351 USB 188-141A handshake GANOB3, CMD "IFBUIFSHSBIBN" / short CLOVER-2000 transmission (20Nov17) (AAI)

11196.0: MSX: Unid 1247 USB 188-141A handshake SEV / voice comm (too short to understand the language) (20Nov17) (AAI)

11196.0: SEV: Unid 1347 USB 188-141A sounding (20Nov17) (AAI)

12163.0: ---: Russian Intel, RUS 1020 USB MFSK-16 66.6Bd 175Hz (25Oct17) (AAI)

12424.8: ---: F03 (prob. Polish Intel) 0848 (cf) FSK 200Bd/400, 896-bit period (27Oct17)(AAI)

12499.8: ---: Unid 1130 (cf) unid BPSK 125 Bd modem (22Nov17) (AAI)

16520.0: YIC: Unid 1043 USB 188-141A handshake SRI / 188-110A Serial (25Oct17) (AAI)

16700.0: 7771: Iraqi Government, IRQ 1317 USB 188-141A call 7777 (31Oct17) (AAI)

17149.7: ---: Unid (maybe Algerian Navy?) 0915 USB Chinese 4+4 p/4 DQPSK 75Bd modem (21Oct17)(AAI) [2]

17156.0: 5601: Iranian Net, IRN 0935 USB 188-141A sounding (21Nov17) (AAI)

18198.0: ---: Russian Mil/Intel, RUS 0715 USB CIS-112 OFDM 112-tone 22.22Bd BPSK modem (23Oct17) (AAI)

18248.6: KEN22: Unid US DoS Station 0711 USB 188-141A call KEM99 (23Oct17) (AAI)

18582.0: ---: Unid 1120 USB 188-110A 4800bps modem (200msec ACF) (17Nov17) (AAI)

14 November 2017

by Angazu & Rapidbit

SIGFOX [1] is a signal for Internet of Things (IoT) with some features that predict a great future. The use of the spectrum, adapted to its purposes, does not waste resources as other systems do. Its advantages in terms of cost and efficiency have made its develop quickly and its main usage being the internet of things.
Its data capacity is very low (100 bps), allowing up to 140 messages per day, but enough for its uses. It is cheap and has good coverage. The signal is robust and not easy to interfere with. To this we must add that the battery consumption is minimal, and may last several years. It also uses the free band of 868 MHz  and does not require any type of SIM. The standard is the ETSI GS LTN 003 V1.1.1 (2014-09) [1]

The signal was received at home, probably from a near home alarm  system carrying out installation tests.
Spectrogram (edited) in Fig. 1 shows three segments (three "telegrams") in different frequencies. Each segment lasts about 2.1 sec and is separated by a dead time of about 42 msec. Each emission uses a different frequency within its allowed range. In what has been observed so far, it always transmits the  message 3 times using  a different frequency in every Tx.

Fig.1 - spectrogram
The spectral occupation (Fig. 2)  is about 200 Hz. In this case, there are quite a few lateral lobes  due to the proximity of the transmitter-receiver. The measurement was made about 30 dB below the peak.

Fig. 2 - spectrum
Estimated modulation speed is Differential BPSK at a rate of about 100bps, the overview of 3 frames (Fig. 4) is aligned  to 210 bits. (ID has been removed once demodulated).

Fig. 3
Fig. 4
Frame as per  etsi standard:


7 November 2017

SkyOFDM 28-tone, 65.6Bd BPSK, 2.6KHz bandwidth

These transmissions have been spotted during the last weekend on 4155.0 KHz/USB by ANgazu using a remote KiwiSDR located in Norway.
The waveform has a bandwidth of 2600 Hz and uses OFDM technology for 28 channels, each with BPSK modulation at rate of 65.6 symbols/sec. Speed and modulation are confirmed by analyzing the whole signal and also a single channel.
Almost certainly it is a Skysweep Technologies proprietary waveform, probably test transmissions. The user is unknown.

Fig. 1 - analysis of the whole signal
Fig. 2 - analysis of the upper channel



3 November 2017

CIS Selcall "Vishnya", FSK 150Bd/200

I spotted this short transmission on 7823.5 KHz/USB at 0827z, it's an FSK modulation with 200Hz shift and speed of 150bps. I asked my friend KarapauZ about the name of this system and he told me that this signal is correlated with the CIS Selcall and it's also known with the nickname "Vishnya" ("Cherry" in English language) from the name of the radio equipment R-016V "Вишня".
The signal is discussed here in radioscanner:

2 November 2017

radiosonde Vaisala RS92-SGP
(by: ANgazu,Rapidbit)

The RS92-SGP has been manufactured and marketed by the Finnish company Vaisala since 2003. It incorporates a Helix Antenna (QFHA=Quadrifilar Helix Antenna) for the reception of GPS satellites.

This type of radiotracer has a GPS receiver to determine its location and allow indirect measurement of wind speed and direction at altitude... The RS92-SGP has a silicon pressure sensor, a heated dual humidity sensor and a small, fast temperature sensor.
The synthesizer-based transmitter is stable and uses narrow bandwidth. The RS92-SGP radio sensor complies with the European ETSI standard for digital radiosondes operating in the 400 MHz band.
The SONDE MONITOR software allows the data transmitted by the RS-92 SGP to be decrypted, in particular the exact position measured with the aid of the GPS receiver on board, which makes it easier to locate it in the field.
Measurements carried out with the aid of a radio-sounder are relative to a specific place and time interval. In order for such data to be truly useful, polls conducted around the world must be synchronised. These polls are usually conducted at 00h and 12h GMT. Some stations carry out polls at 06h and 18h regularly.
More than 850 surveys are conducted, at least twice a day worldwide. The distribution of the radiosonde centres is not regulated on the planet's surface and developed countries in the northern hemisphere (82%) are better covered than deserts and oceans in the southern hemisphere (18%). 820 of these surveys are carried out by fixed stations and some 30 of them are carried out from ships, both merchant and regular lines.
Surveys are mainly carried out by meteorological services, but from time to time we may find ourselves with radio probes launched by:
- Weapons test centres (missile, ammunition and radiosounder testing).
- Scientific missions, atmospheric monitoring services (ozone measurements, radioactivity)
- Special campaigns for the study of regional climatology and meteorology.
- Artillery units, before firing practice.
- Radio sounding training centres (meteorological, military, manufacturers of radio sounders...)

Radiosondes are telemetry devices that measure various atmospheric parameters.
They are usually launched using a weather balloon and, while ascending and moving in the wind, transmit the data in real time. They can reach a considerable height, so reception is possible far away  from the launching point.
The signal for this entry , from a Vaisala RS92-SGP, was recorded near an airport somewhere in the south of Europe. Frequency was 403 Mhz.
This signal is a very interesting one since it shows a considerable Doppler effect due to both its ascent speed and its lateral displacement due to the wind (Fig.1).

Fig. 1
The  spectrum exhibits a phase modulated signal framed by two unmodulated tones (Fig. 2). Tones are separated 4800 Hz.

Fig. 2
Analyzing the signal as a whole, modulation speed is 4800 sps using a GFSK modulation, but filtering out  the outer tones to isolate the internal signal, result is a BPSK with a speed of 2400 sps.(Fig.3)

Fig. 3
Should the signal be demodulated as GFSK, result is a stream of manchester coded bits. Once manchester decoded, the bits are exactly the same as if the inner signal was demodulated as BPSK. Frame ACF is 1 s. There is a second ACF for character  of 4,16 ms (Fig. 4)

Fig. 4
Once decoded, frames are  2400 bits long (Fig. 5) using  8N1 characters.

Fig. 5
The combination of vertical and lateral velocity of the probe produces a doppler effect on the signal. In the image, the frequency variation in a tone for about 21 m (Fig. 6)

Fig. 6
The data transmitted can be demodulated using the ionosonde monitor by COAA (see links)

Fig. 7