1 July 2015
29 June 2015
Unid OFDM 16-tone 75 Bd, 110 Hz (MS 188-110A App.A modified?)
tags:
OFDM-16
I had this signal via Twente SDR on USB 14301.8 (cf) on 28/06/15 (1710z) just in the well-known 20 mt reserved band, an that's a bit odd.
The waveform is an OFDM 16-tone PSK, 75 Bd and 110 Hz shift, sent in burst mode. It is very similar to the obsoleted Standard NATO MIL 188-110A Appendix A without the doppler tone @ 605 Hz and in not-continuous mode.
There is a Chinese variant of the MIL 188-110A 16 channels: it could be this case, but I could not find info or logs about it. The burst mode could lead to something like a selcall waveform but the ~720mS spaced "pips" looks like a TDMA.
Hope to get more info and/or more records.
A short recording can be downloaded from here:
27 June 2015
Unid FSK-8 + PSK-2 1200 Bd (prob. AX-25)
tags:
Unids-PSK
Recordered this morning on 19304.0 USB (central frequency 19305.0) starting from 0937z until 1020z (s/off). The trasmission heard consists of a series of short messages in PSK-2 1200 Bd (as well as some short bursts) along with 9-tones intervals. Sometimes a PSK-2 100 Bd preamble is sent.
![]() |
| 9-tones and PSK-2 1200 Bd insertions |
![]() |
| PSK-2 1200 Bd, carrier ~1060 Hz |
![]() |
| the 9 tones, top and bottom @ 7dB higher |
![]() | |
| PSK-2 100 Bd preamble |
The same waveform has been reported in radioscanner.ru:
http://www.radioscanner.ru/forum/index.php?action=search&loc=1&forum=21&topic=36750&page=1179863
and it is still un-identified.
http://www.radioscanner.ru/forum/index.php?action=search&loc=1&forum=21&topic=36750&page=1179863
and it is still un-identified.
25 June 2015
SERDOLIK sync marker (idling)
tags:
SERDOLIK
24/06/15 16047.0 --- Russian Gov 0918 Serdolik sync marker
![]() |
![]() |
![]() |
| Serdolik Selcall and Sync Marker (courtesy of KarapuZ) |
http://www.sozvezdie.su/museum/sura__posolskaya_svyaz_dlya_sssr/
Thanks to KarapuZ for the link and the Sedolik Selcall waveform.
20 June 2015
WINMOR-500
tags:
WINMOR
18/06/15 10146.0 HB9AK Winlink Mail Server 0700 Winmor-500
The WINMOR (WINlink Message Over Radio) protocol is intended to be used for sending messages and binary data error free over a HF radio link. It is a Selective Repeat Automatic Retry reQuest (SRARQ) protocol where the Information Receiving Station (IRS) acknowledges receipt of the data to the Information Sending Station (ISS). Normally during a connection session the IRS and ISS exchange roles multiple times. The protocol is designed to handle the type conditions normally encountered in amateur radio transmission. WINMOR is not optimized for keyboarding or chat mode applications though this may be possible.
The WINMOR protocol uses basic OFDM (Orthogonal Frequency Division Multiplexing) modulation and a number of modulation modes and error correction schemes to adapt to changing channel conditions.
There is currently 2 operating bandwidths of 500 and 1600 Hz (@ 26 db below peak power output:
There is currently 2 operating bandwidths of 500 and 1600 Hz (@ 26 db below peak power output:
- 500 Hz BW 2 carriers 46.875 Baud 4FSK or 93.75 baud PSK
- 1600 Hz BW 8 carriers 46.875 Baud 4FSK or 93.75 baud PSK
![]() |
| Pic. 1a - WINMOR-500 data frames |
![]() |
| Pic. 1b - 4FSK grid |
I recently heard (18 June, Pic. 1) the WINMOR 500 Hz bandwidth mode around 0700z on 10146.0 KHz (center frequency). As said, the 500 Hz bandwidth mode use 3 modes PSK:
- 4PSK TCM, 8PSK TCM, 16PSK TCM - 2 Carriers at 1406.25 Hz and 1593.75 Hz
and one 4FSK mode:
- 2 groups of 1 of 4 Carriers. (2 carriers active simultaneously)
Group 1: 1312.5, 1358.375, 1406.25 and 1453.125 Hz
Group 2: 1546.875, 1593.75, 1640.625 and 1687.5 Hz
Group 1: 1312.5, 1358.375, 1406.25 and 1453.125 Hz
Group 2: 1546.875, 1593.75, 1640.625 and 1687.5 Hz
A WINMOR frame is composed of a Pilot ("leader" of the frame) and Data. The Pilot is used to enable rapid
identification of a transmission, to DSP tune the receiving station
accurately, to establish symbol and frame sync and to indicate the frame
type:
Data frames:
- Two carrier 8PSK (Pic. 2)
- Two carrier 4FSK (Pic. 3)
- Two carrier 8PSK (Pic. 2)
- Two carrier 4FSK (Pic. 3)
Control frames:
- Connect ReQuest frame: 2 Car 4FSK
- Coded Control Frame: 2 Car 4FSK (Pic. 3,4,5)
- Ack: 2 Car 4FSK FEC (Pic. 4)
- ID frame: 2 Car 4FSK (Pic. 5)
- Connect ReQuest frame: 2 Car 4FSK
- Coded Control Frame: 2 Car 4FSK (Pic. 3,4,5)
- Ack: 2 Car 4FSK FEC (Pic. 4)
- ID frame: 2 Car 4FSK (Pic. 5)
![]() | |
| Pic.2 - 16QAM data frame |
![]() |
| Pic. 4 - control frame and ACK frame |
![]() |
| Pic. 5 - control frame and ID frame |
17 June 2015
Harris RF-5800 'Selective Call', MSK 2000Bd/1000
tags:
2G-ALE,
Harris,
Harris selcall,
semi-modes
('Systeme3000-ALE' equivocation)
(AngazU,I56578)
We
recently had the opportunity to get and study the Harris
Selective Call waveform (we name it as Harris-ALE but it's not
its official name!): it's an MSK modulation at 2000 Baud speed,
followed by short MFSK-8 125 Baud in non-standard MS-188-141A
(ALE), acf is 50 ms (100 bit). We focused on the initial 3 seconds
segment in order to define modulation mode and other features in order to help to clarify the above misunderstanding (see later).
At first glance it looks
like a serial-tone signal: carrier frequency 1600 Hz and OQPSK
modulation at 2000 Bd speed (pic. 1). As reported in this article by
Sergey Makarov (SergUA6) http://signals.radioscanner.ru/info/item281/ "it is not easy to tell
apart between QPSK and MSK since they are tightly connected".
![]() | |
| Pic. 1- Harris Selective Call and its phase-plane |
By measuring the main
parameters of the signal we had (pic.2):
baudrate (Br) = 2000 Bd
bandwidth (Bw) ~ 3000 Hz
shift (Sh) = 1000 Hz
![]() |
| Pic. 2 |
That said, and according
to what reported here http://signals.radioscanner.ru/info/item68/ we
are pretty sure that the Harris Selective Call is not an OQPSK but rather an MSK 2000/1000
waveform, 2000Baud speed and 1000Hz shifted. As it is clearly
visible in pic.2, are verified those relationships
that are specific to MKS signals, i.e.: Bw
= 1.5 Br and Sh = Br/2 as shown in the cited article (pic.3):
![]() | ||
| Pic. 3 - MSK relationships (from radioscanner.ru) |
Moreover, into the Harris signal, there is another clue that points to MSK. As you can see in the picture 4, there is a long state staying in one frequency, if should it be PSK, the frequency should come back to carrier and stay there till a new phase change.
The
shape of the eye diagram (pic. 5) also points in this direction (MSK
with BT = 0.3):
![]() |
| Pic. 5 |
The Harris signal has an ACF value of 50 mSec (100 bit) and it is characterized by the presence of what looks like a signature, something like a 'business card':
As said, this is a safe-origin
signal since it was recordered
some years ago during Harris RF-5800 acceptance tests: at that time it was
supposed to be standard in Falcon-II series radios. Harris equipment
is wide spread in NATO countries, but this mode, although
available, seems to be not much used.
With
these points in mind, we asked ourselves the question
that we indicated at the beginning: the
so-called Thales “Systeme3000-ALE” (reported also in a post on this blog) has a
waveform that is very similar to the Harris-ALE' one, also aurally they just sound in the same way. Browsing the web, there are
logs by listeners reporting both the signals: altought the Thales waveform be almost 99.99% OQPSK, may be the
case that these two signals could be confused each other ?
29 May 2015
CIS-60 HDR modem 35.5 Bd, π/8-DPSK8
CIS-60 is one of the Russian OFDM HDR (High Data Rate) Modem modes, it uses 60 data carriers and 1 pilot carrier located 3300 Hz from dial frequency, as usual in CIS HDR modem series. According to my logs, CIS-60 comes in two waveforms (I have logged both the twos):
- Baudrate 30, modulation QPSK
- Baudrate 35.5, modulation π/8-DPSK8
in both the cases the carriers are 44.5 Hz spaced and the signals spreads a 2800 Hz bandwidth. Sometimes you could hear operators chatting (in voice) followed by a waveform switch, i.e. from DPSK-4 to DPSK-8: I do not know if it's for tests purposes or for some other reason. The original signal has been resampled to 8888.8 Hz.
![]() |
25 May 2015
HFDVL modem: OFDM 73-tone (13 pilot tones) QPSK
(I-56578, ANgazu)
Total carriers: 73
Pilot carriers: 13
Data symbols per OFDM symbol: 60
Native sample rate (sps): 9600
FFT length (samples): 256
|
Modulation: QPSK
Bit rate (bps): 3600
Bandwidth (Hz): 2737.5
Samples per OFDM symbol: 320
|
![]() | |||
| OFDM parameters, body segment |
The most interesting feature is the way
the 13 pilot tones are formed, and why - at a first look - we found
only 1 pilot tone (the higher one).
We found that all
the even tones have QPSK modulation (at least into the seen signals) :
and
the top tone (the 73th) is clearly a pilot one:
We
found that in the odd tones there is a new element in absolute
constellation that generates a PSK8 pattern in diff constellation. We
guess this element is a scattered pilot and, for some reason we do
not know, it shifts diff constellation of 45 degrees, giving the
false PSK8:
Skipping
symbols, we could see the 'no modulated pilot' feature for these
tones. Then, according to our
analysis, the 13 pilots coule be formed in the following way:
- 1 fixed pilot tone (73th);
- 1 fixed pilot tone (73th);
- 12 scattered pilots which
are chosen in turn from 3 different sets (each set contains 12 odd
tones);
(...and we are quite positive that we have
exactly identified all the tones of each set).
The pilot
tones configuration changes at every OFDM symbol: we do not know the
reason (perhaps to contrast propagation conditions?) and the
algorithm that determines
the initial configuration; possibly the
BPSK preamble has these data inside, but it's just a guess. Anyway,
as said above, it looks like that all the odd tones are pilots-candidate (we
could say “virtual pilots”) and only 12 of them are used - in
turn - to form the real pilots, while the remaining 24 + the 36 even
tones are used to transport user data (60 tones).
Here is an example of a possible pilot tones scheme that assumes the configuration A as the initial configuration:
configuration A (73th tone + 12 tones of the set-A)
configuration B (73th tone + 12 tones of the set-B)
configuration C (73th tone + 12 tones of the set-C)
...and so on, restarting from configuration A
The trailing segment of the signal just exhibits all the odd (pilots candidate) tones, some using BPSK modulation.
Two words about the
speed. Official documentation say:
Total carriers 73, Pilot carriers 13, Data symbols per OFDM
symbol 60, Bit rate (bps) 3600
(assuming Bit rate to be the “system” speed “on
the air”). Since the 30 baud PSK-4
modulation, the system grants 30 * 2 * 60 = 3600 bps data rate.
The HFDVL modem (waveform is developed by the groups "CeTIC" from the Universidad de Las Palmas de Gran Canaria and "GAPS" from Universidad Politécnia de Madrid, other than Aeropuertos Españoles y Navegación Aérea) has been heard mostly on USB 14350.0 and 14828.5 transmitting from Spain: we think that they are conducting tests that involve transmitters in two diferent sites which exchanges data. In one of our 14828.8 KHz recordings is quite clearly visible the different quality of the signals:
Emailing the HFDVL modem manufacturer, we got a confirm about what we were thinking: "[...]Yes, there are two modems transmitting and at this moment there are not other frequencies involved in the test."
21 May 2015
AT-3004D (CIS-12): MPSK 12-tones PSK-2, PSK-4 120 Baud
tags:
AT-3004D/AT-3104,
CIS-12,
MS-5
CIS-12 is a Soviet military pseudo OFDM 12-tones + 1 pilot tone waveform allowing scrambled voice or data-communication at 120 Baud rate, modulation PSK-2 or PSK-4. CIS-12 is also known as MS-5 (sometimes also as FIRE) while the modem name is AT-3004D (or its newer counterpart AT-3104).
http://signals.radioscanner.ru/base/signal37/
"An
interesting feature of these signals is that the sub-carriers are not
orthogonal, since the manipulation speed is 120 Hz and channel spacing
is 200: it means that each channel is formed separately, not as in OFDM
using IFFT all at once, although the OFDM technology is used. CIS-12
modems may appear in three different variants, according to the n-ary
PSK modulation: 2-PSK, 4-PSK offset (doesn't turn on 180^) and 4-PSK.Channels
1-10 are for user-data while 11 and 12 for the inspection. Accordingly,
the aggregate information rate is 1200 and 2400 (PSK-2 and PSK-4)."
PSK-2 waveform:
Subscribe to:
Posts (Atom)






































