SysSec-KAIST/LTESniffer

BladeRF: Trying to figure out how to set arguments to start

Opened this issue · 4 comments

Hello,

I am trying to use LTESniffer with a BladeRF device for downlink sniffing, but I would like to configure a few parameters specifically:

  • Sampling rate: How can I set the sampling rate for the BladeRF device? Is there a way to adjust the sample rate via the configuration or command line arguments?
    
  • Disabling SoapySDR: The program is attempting to use SoapySDR as a backend, but I want to use BladeRF directly without Soapy. How can I ensure that LTESniffer uses BladeRF and not SoapySDR? Are there any specific flags or settings I should configure?
    

For now I've tried in this way and I get this output:

sudo LTESniffer -a rf.device=bladeRF -A 2 -W 8 -f 806e6 -I 286 -m 0

LTESniffer Start!!!

Creating Phy
Creating 8 Worker threads

LTESniffer_Core: Starting...

Fri_Nov__8_17.53.39_2024.
Sniffer Mode: DL only
Available RF device list: UHD soapy bladeRF zmq
Trying to open RF device 'UHD'
Opening USRP channels=2, args: rf.device=bladeRF
Unable to open RF device 'UHD'
Trying to open RF device 'soapy'
Soapy has found device #0: backend=libusb, device=0x02:0x08, driver=bladerf, instance=0, label=BladeRF #0 [5b00f071..3d9837cb], serial=5b00f07115fa4830b0f4716f3d9837cb,
Selecting Soapy device: 0
Setting up Rx stream with 2 channel(s)
Setting up Tx stream with 2 channel(s)
Available device sensors:

  • RFIC_TEMP
    Available sensors for Rx channel 0:
  • PRE_RSSI
  • SYM_RSSI
    Available sensors for Rx channel 1:
  • PRE_RSSI
  • SYM_RSSI
    State of gain elements for Rx channel 0 (AGC supported):
  • full: 71.00 dB
    State of gain elements for Tx channel 0 (AGC not supported):
  • dsa: -10.00 dB
    Rx antenna set to RX
    Tx antenna set to TX
    RF device 'soapy' successfully opened
    Opening RF device with 2 RX antennas...
    Starting AGC thread...
    Tunning DL receiver to 806.000
    Setting sampling rate 11.52 MHz
    Found PSS... NID2: 1, Peak: 1.14, FrameCnt: 0 State: 0
    Missed PSS Attempts: 0
    Found PSS... NID2: 1, Peak: 1.03, FrameCnt: 0 State: 0
    Missed PSS Attempts: 1
    Found PSS... NID2: 1, Peak: 1.13, FrameCnt: 0 State: 0

Hi, unfortunately, I also dont have any experience with bladeRF, I only have USRP to test.
However, many users reported that Bladerf works well. So I will keep the issue open here for any advice from other users.
Thanks.

I'm testing using this command: LTESniffer -A 1 -W 4 -f xxxe6 -m 0 -g 30
He prints me "Processed 1000/1000 subframes" but It doesn't find any RNTI and also the ltesniffer_dl_mode.pcap is empty, as he hasn't sniffed anything, but I'm sure there is traffic going on.

I'm testing using this command: LTESniffer -A 1 -W 4 -f xxxe6 -m 0 -g 30 He prints me "Processed 1000/1000 subframes" but It doesn't find any RNTI and also the ltesniffer_dl_mode.pcap is empty, as he hasn't sniffed anything, but I'm sure there is traffic going on.

Could you please copy and paste your terminal log including the command was used here?

$LTESniffer -A 1 -W 4 -f 806e6 -m 0 -g 30 -p 80

LTESniffer Start!!!

Creating Phy
Creating 4 Worker threads

LTESniffer_Core: Starting...

Tue_Nov_26_17.38.39_2024.
Sniffer Mode: DL only
Available RF device list: UHD soapy bladeRF zmq
Trying to open RF device 'UHD'
Opening USRP channels=1, args:
Unable to open RF device 'UHD'
Trying to open RF device 'soapy'
Soapy has found device #0: backend=libusb, device=0x02:0x03, driver=bladerf, instance=0, label=BladeRF #0 [a6caa423..b4d2f10e], serial=a6caa423a1f7475bb984737cb4d2f10e,
Selecting Soapy device: 0
Setting up Rx stream with 1 channel(s)
Setting up Tx stream with 1 channel(s)
Available device sensors:

  • RFIC_TEMP
    Available sensors for Rx channel 0:
  • PRE_RSSI
  • SYM_RSSI
    State of gain elements for Rx channel 0 (AGC supported):
  • full: 71.00 dB
    State of gain elements for Tx channel 0 (AGC not supported):
  • dsa: -10.00 dB
    Rx antenna set to RX
    Tx antenna set to TX
    RF device 'soapy' successfully opened
    Opening RF device with 1 RX antennas...
    Tunning DL receiver to 806.000
    Setting sampling rate 23.04 MHz
    Found PSS... NID2: 0, Peak: 1.08, FrameCnt: 0 State: 0
    Missed PSS Attempts: 0
    Found PSS... NID2: 0, Peak: 1.03, FrameCnt: 0 State: 0
    Missed PSS Attempts: 1
    Found PSS... NID2: 0, Peak: 1.02, FrameCnt: 0 State: 0
    Missed PSS Attempts: 2
    Found PSS... NID2: 0, Peak: 3.07, FrameCnt: 0 State: 0
    Missed PSS Attempts: 3
    Found PSS... NID2: 0, Peak: 1.60, FrameCnt: 0 State: 0
    Missed PSS Attempts: 4
    Found PSS... NID2: 0, Peak: 1.19, FrameCnt: 0 State: 0
    Missed PSS Attempts: 5
    Found PSS... NID2: 0, Peak: 1.01, FrameCnt: 0 State: 0
    Missed PSS Attempts: 6
    Found PSS... NID2: 0, Peak: 1.20, FrameCnt: 0 State: 0
    Missed PSS Attempts: 7
    Found PSS... NID2: 0, Peak: 1.08, FrameCnt: 0 State: 0
    Missed PSS Attempts: 8
    Found PSS... NID2: 0, Peak: 1.49, FrameCnt: 0 State: 0
    Missed PSS Attempts: 9
    Found PSS... NID2: 0, Peak: 1.00, FrameCnt: 0 State: 0
    Missed PSS Attempts: 10
    Found PSS... NID2: 0, Peak: 1.29, FrameCnt: 0 State: 0
    Missed PSS Attempts: 11
    Found PSS... NID2: 0, Peak: 1.01, FrameCnt: 0 State: 0
    Missed PSS Attempts: 12
    Found PSS... NID2: 0, Peak: 2.96, FrameCnt: 0 State: 1
    Missed PSS Attempts: 13
    [17:38:47] Processed 1000/1000 subframes
  • Type: FDD
  • PCI: 0
  • Nof ports: 2
  • CP: Normal
  • PRB: 125
  • PHICH Length: Normal
  • PHICH Resources: 2
  • SFN: 140
    Decoded MIB. SFN: 140, offset: 3
    ^C
    LTESniffer_Core: Exiting...
    -------------------------------------------------------------------------------------------------------------
    [17:38:48]: Num RNTI Table Active New TX ReTX Success HARQ Normal W_MIMO W_pinfor Other
    -------------------------------------------------------------------------------------------------------------
    -------------------------------------------------------------------------------------------------------------
    [17:38:48]: Num RNTI Table Active New TX ReTX Success HARQ Normal W_MIMO W_pinfor Other
    -------------------------------------------------------------------------------------------------------------
    [256Tracking] Total: 0 RNTIs are 64QAM table, 0 RNTIs are 256QAM table, 0 RNTIs are Unknown

#overflows=2
nof_decoded_locations, nof_cce, nof_missed_cce, nof_subframes, nof_subframe_collisions_dw, nof_subframe_collisions_up, time, nof_locations
0, 0, 0, 0, 0, 0, 0.000000, 0
Destroyed Phy
Skipped subframe: 0 / 1243
Skipped subframes: 0 (-nan%)

LTESniffer End!!!

Saving MAC PCAP file
Deleted DL Sniffer core