ICE MotoTRBO TRS Decoding Project

A forum for discussion of the many trunked radio systems in and around our listening area.
Message
Author
User avatar
N1BHH (Silent Key)
Posts: 3270
Joined: 04 Sep 2005 13:22
Location: Jackson Square, East Weymouth
Contact:

#76 Post by N1BHH (Silent Key) » 23 Nov 2013 22:11

wb1hbu wrote:
I was able to hear Network 134 Site 17 good when I was up in Manchester, NH. It is somewhere nearby.
Site 17 CC 2
Neighbors: Georgetown, Andover, 19
935.1375
938.0750
Mount Uncanoonuc in Goffstown most likely, it looks right down into Manchester.
CLYDE - N1BHH - A KNOW-CODE AMATEUR RADIO OPERATOR / WQWJ272 - GMRS
Pro94 Pro106 Pro164 Pro197 Pro2006 Pro2015 Pro2021 Pro2055
Yaesu's FT60R, FT2900R & FT8800R, Icom IC735, Motorola MTX9250 (900 MHz.)

User avatar
garys
Posts: 3262
Joined: 29 Aug 2005 13:07

#77 Post by garys » 25 Dec 2013 12:10

Now jumping in to the party. I have my SDR set up going reasonably well and was able to get DMRDecode working on a MotoTrbo system this morning. It's Network 134, and DMRDecode is telling me it's Site 28. SDR# tells me the frequency is 935.3125 which I don't see in the Wiki. I won't add it yet because I might be off frequency. I also think that Site 28 might be Plymouth.

Showing Site 7 (Foxboro) on 939.400. Again, I'm not sure if this is the actual frequency or if there is some offset in there. Either way I'm getting good data on DMRDecode. That includes channel grants. I'm going to let it run and get a nice long log of data to save.

I'm not sure what the "Colour Code" info means.

More as I figure out what I'm seeing on the DMRDecode screen.
We're peace loving people, we're not hunting trouble, but if trouble should find us, we'll stand up and fight.

User avatar
Scott
Posts: 7881
Joined: 18 Aug 2005 12:00
Location: Cape Cod, Massachusetts
Contact:

#78 Post by Scott » 25 Dec 2013 14:46

For those of you involved with this project, or like Gary newly jumping on board, I would STRONGLY recommend that you download and use the new version of DSD that was released today (Merry Christmas!). It is available via this link: http://www.reddit.com/r/RTLSDR/comments ... _with_dsd/

If you use it, you will notice that it has the capability to simultaneously demodulate BOTH DMR slots. What falls into the "wicked cool" category is that it sends Slot 1 voice to your left speaker, and Slot 2 voice to the right speaker. This should be of huge help as you should be much better equipped to follow conversations with this capability.

If you're using a RTL dongle, make sure you use SDRSharp to control it and not SDR-Radio, as the latter has no means to send unfiltered audio to DSD.
Scott

User avatar
garys
Posts: 3262
Joined: 29 Aug 2005 13:07

#79 Post by garys » 25 Dec 2013 14:54

Thanks. Nothing like having the latest version. This is the next piece of these and the SDR projct.
We're peace loving people, we're not hunting trouble, but if trouble should find us, we'll stand up and fight.

User avatar
Scott
Posts: 7881
Joined: 18 Aug 2005 12:00
Location: Cape Cod, Massachusetts
Contact:

#80 Post by Scott » 25 Dec 2013 14:57

In addition to the "wicked cool" stuff this version offers a significant improvement in decoding quality, especially for P25, but also for DMR. It's also a native Win32 program so you don't have to go to a command prompt to run it unless you want to use specific parameters.
Scott

User avatar
garys
Posts: 3262
Joined: 29 Aug 2005 13:07

#81 Post by garys » 25 Dec 2013 22:04

I got it running with minimal aggravation. I folllowed the instructions in the ReadMe, but got an error message when I tried to start the program. It needs lame_enc.dll and for some reason my laptop didn't have that loaded although my desktop has it under the System32 directory. I copied that and loaded it in the DSDPlus directory and it started fine. I haven't got any audio yet, but when I parked on a DMR control channel, I got a screen full of data. Tomorrow's plan is to park on the Stoughton DPW frequency and see what I get. I suppose I could park on the N. Attleboro PD channel and see if it will decode P25.

Scott SNE Webmaster wrote:In addition to the "wicked cool" stuff this version offers a significant improvement in decoding quality, especially for P25, but also for DMR. It's also a native Win32 program so you don't have to go to a command prompt to run it unless you want to use specific parameters.
We're peace loving people, we're not hunting trouble, but if trouble should find us, we'll stand up and fight.

User avatar
Scott
Posts: 7881
Joined: 18 Aug 2005 12:00
Location: Cape Cod, Massachusetts
Contact:

#82 Post by Scott » 26 Dec 2013 08:07

I neglected to mention the need for lame_enc.dll but at least it's obvious in the instructions. There are different versions out there apparently though; I'd recommend finding the latest and using it. I found 3 different versions on my Windows 8.1 desktop, one of which did not work.
Scott

User avatar
Scott
Posts: 7881
Joined: 18 Aug 2005 12:00
Location: Cape Cod, Massachusetts
Contact:

#83 Post by Scott » 26 Dec 2013 10:51

Has anyone actually heard any voice traffic on the Comtronics system (Network 139)? I have been letting my local site (5) run for the last hour and I've heard nary a peep. This is close to a year since I originally discovered and posted it. If it works similarly to ICE's system I'd think I'd be hearing wide area traffic, but maybe not.
Scott

User avatar
Scott
Posts: 7881
Joined: 18 Aug 2005 12:00
Location: Cape Cod, Massachusetts
Contact:

#84 Post by Scott » 26 Dec 2013 11:00

Actually as I revisit the licensing for the frequency of the CC I'm monitoring (937.6875) I see some very interesting results...
Scott

cdgordon
Posts: 1175
Joined: 29 Aug 2005 15:46
Location: Granby, CT

#85 Post by cdgordon » 08 Jan 2014 19:52

I logged Network 139, Site 9, Holyoke today
937.6875 CC/voice
936.6625 voice
938.4125 voice

chris

User avatar
Scott
Posts: 7881
Joined: 18 Aug 2005 12:00
Location: Cape Cod, Massachusetts
Contact:

#86 Post by Scott » 08 Jan 2014 21:40

cdgordon wrote:I logged Network 139, Site 9, Holyoke today
937.6875 CC/voice
936.6625 voice
938.4125 voice

chris
Interesting. I have yet to hear any voice traffic on the Network 139 site here on Cape Cod.
Scott

wb1hbu
Posts: 949
Joined: 08 Oct 2005 21:38
Location: Lynn, Essex Co.

#87 Post by wb1hbu » 09 Jan 2014 13:26

Hello,

I hear traffic on the Network 139 sites around Boston.

73 Eric

User avatar
garys
Posts: 3262
Joined: 29 Aug 2005 13:07

#88 Post by garys » 19 Jan 2014 14:05

DMRDecode Build 73 has just been released.

I'm getting a reasonably good decode rate on the Quincy ICE MotoTrbo control channel. The biggest hurdle is signal strength which I think is why I'm getting some errors and only fragments of voice. Today being Sunday, there isn't that much going on.

Messages I'm seeing are,

"DMR Voice Frame with Embedded Signaling"

"Channel Grant: LCN 5 TS2 Source 8828 Group 28" My guess is that this means Channel 5, Slot 2, and 8828 is the unit ID and Group 28 is the Talk Group.

"Connect Plus CSBKO=1" I'm also seeing "CSBKO= 3" I have no idea what that means.

Channel Grant LCN 5 TS1 Source 6663 Group 56

I'm getting the feeling that I'll just have to look at a lot of this stuff to start to see a pattern and make sense of the data. Like code breaking.

I'm going to let this run during the AFC Game and then copy everything to the clipboard and save it as .txt file. Then I can read it at my leisure and try to make sense of it. If anyone is interested in a copy, let me know.
We're peace loving people, we're not hunting trouble, but if trouble should find us, we'll stand up and fight.

User avatar
garys
Posts: 3262
Joined: 29 Aug 2005 13:07

#89 Post by garys » 19 Jan 2014 20:47

I don't know if this make sense, but I'm getting the System 134 Site 27 control channel on 938.6675. I don't see it listed on the Wiki. Can anyone else verify?
We're peace loving people, we're not hunting trouble, but if trouble should find us, we'll stand up and fight.

cdgordon
Posts: 1175
Joined: 29 Aug 2005 15:46
Location: Granby, CT

#90 Post by cdgordon » 20 Jan 2014 10:40

That would not be a legit frequency. Perhaps .6625?
That is licensed in Quincy but still ICE (IWT)

chris

User avatar
garys
Posts: 3262
Joined: 29 Aug 2005 13:07

#91 Post by garys » 20 Jan 2014 19:56

Of course now I can't remember what the exact frequency that SDR# displayed. I think it was 938.666.812, which I just rounded off. It's not 938.650, because that's licensed to Commtronics in MA. ICE has that in ME, but it's obviously not that. I have to get better at figuring out the offset with SDR#. Of course today there is no activity on whatever the correct frequency was. Back to the drawing board!

UPDATE: I'm now copying the Site 27 control channel with a displayed frequency of 937.117.115 on SDR#. That's not close to the two frequencies in the Wiki, although the other control channels are 937.xxxx frequencies. Maybe someone can figure out what the actual frequency is.

Same Channel Neighbor list as West Bridgewater has in the Wiki.


cdgordon wrote:That would not be a legit frequency. Perhaps .6625?
That is licensed in Quincy but still ICE (IWT)

chris
We're peace loving people, we're not hunting trouble, but if trouble should find us, we'll stand up and fight.

User avatar
JFR
Posts: 315
Joined: 21 Jul 2007 17:41
Location: Walpole, Ma

#92 Post by JFR » 20 Jan 2014 20:54

A shot in the dark re: display freq different than actual. Gary- have you fine-adjusted the RX in SDR?
*set SDR to a known freq (NWS for example)
*zoom in on the bandwidth display for finer detail
*open the config tab
*adjust the PPM so that the freq display is in close alignment to the peak of the carrier.

Mine required a PPM adustment of 55 once it warmed up. These dongles drift with temperature changes.

-JR

User avatar
garys
Posts: 3262
Joined: 29 Aug 2005 13:07

#93 Post by garys » 20 Jan 2014 21:23

Updated: I've started to figure some of this out and hope to be able to add useful information soon. I'm on the Quincy MotoTrbo control channel now and have DMRDecode set up to log the data. It's also set to ignore error messages, so I'm getting just readable messages. I"m also getting some voice fragments, but not enough to be intelligible. I'll probably move on to Foxboro or West Bridgewater since I have a better line of sight to either of those than Quincy.

It takes some getting used to the 2 slot configuration. It makes sense that each trunk can use fewer channels because each channel can carry either a data channel and a voice channel or two voice channels.

How have others been monitoring voice channels? I see that some of the Talk Groups are tagged with users and I assume that requires listening to voice and figuring out who is talking. I've seen Channel Grants on the data channel and assume that people are using DSD or DSD+ simultaneously with DMRDecode. Are you running to instances of SDR+ with different versions of a virtual audio cable?

Some guidance would be appreciated. Thanks.


Thanks. I started to do this after having yet another duh moment. I set my 346XT on the Foxboro ICE trunk and found the current control channel. I then used SDR# and Unitrunker to find the system. I got a rough offset of 0.0385. Which makes the frequency I'm receiving one of the known West Bridgewater control channels. Now, if that drift would only stay constant! I'm trying to get the PPM adjustment working now.

JFR wrote:A shot in the dark re: display freq different than actual. Gary- have you fine-adjusted the RX in SDR?
*set SDR to a known freq (NWS for example)
*zoom in on the bandwidth display for finer detail
*open the config tab
*adjust the PPM so that the freq display is in close alignment to the peak of the carrier.

Mine required a PPM adustment of 55 once it warmed up. These dongles drift with temperature changes.

-JR
We're peace loving people, we're not hunting trouble, but if trouble should find us, we'll stand up and fight.

N1ZZN
Posts: 725
Joined: 29 Aug 2005 15:36
Location: Hanson, MA

#94 Post by N1ZZN » 19 Feb 2014 10:57

Having fun with DSDPlus & DMRDecode with my newly tapped 996T.

Some observations of frequencies that aren't in the wiki:

937.1625 - Network 134 Site 15 - CC
937.7000 - Network 134 Site 27 - Voice
938.1625 - Network 134 Site 2 - Voice
Jeff Lehmann - N1ZZN WQDJ863
Hanson, MA

disp617
Posts: 285
Joined: 01 Sep 2005 00:09
Location: Central Mass

#95 Post by disp617 » 07 Apr 2014 21:23

I see one site lists LCN's. Does anyone know how to tell what LCN is which? That is the next step I'd like to work on.

User avatar
garys
Posts: 3262
Joined: 29 Aug 2005 13:07

#96 Post by garys » 13 Nov 2014 16:14

I'd like to try to resurrect this thread since I have my computer working, the lastest versions of SDR# and DSDPlus installed and running, and have a newly installed antenna. The last seems to be the key and I'm pulling in signal from everywhere.

I've started listening to voice channels on the ICE Quincy MotoTrbo system since that seems to be one of the busiest so far.

As we've discussed in the past, the sites are linked with the same talk groups showing up simultaneously on Neighbor sites.

There is a lot of ambulance company activity and after listening for a while I have some educated guesses on which talk groups might belong to who. Most of this is very preliminary, so bear with me if they turn out to be wrong.

34,35,36 might be EasCare, but I'm not sure which offices. There is still a lot of EasCare activity on the Quincy analog site, so these might be other offices. I think I identified 38 as EasCare chair cars based on the type of traffic I'm hearing and that the analog TG has been quiet for a while.

35 is interesting in that it only comes alive after 9:00PM. Or at least only on the Quincy site after that time. I don't know if the MotoTrbo system can be configured to patch TGs or if they can be added to sites at particular times. When EasCare had a dispatch center out of Stoughton, they would shut down about that time and all units would be sent to the Quincy TG.

103 is another ambulance service. I think it's possible that Brewster is no longer on the NexEdge system and moved to ICE. They are a lot bigger than when they originally were reopened for business, so it's possible that channel loading became an issue.

I also found an 937.xxxx channel that is listed by DSDPlus as being NID 134 Site 2, which would make it Quincy. Unfortunately I lost the note I wrote for that, so I'll have to try to find it again.
We're peace loving people, we're not hunting trouble, but if trouble should find us, we'll stand up and fight.

User avatar
garys
Posts: 3262
Joined: 29 Aug 2005 13:07

Site 28

#97 Post by garys » 07 Jan 2015 14:58

I still don't know where this is located, but it's southeast MA somewhere. I get good signal using my R820T dongle on an outside antenna. Good decode using DSD+. Site 28 is good because it only has three frequency pairs and they are very close together. That makes jumping around to follow a particular TG relatively easy.

Perhaps most importantly, there is no AAA traffic on this site. That cuts down on the "noise" because AAA talk groups tend to be very active.

I also discovered a site 29 on the Neighbor List, but have not found any control channels for it yet. I'm probably just out of range of that site where ever it is.
We're peace loving people, we're not hunting trouble, but if trouble should find us, we'll stand up and fight.

User avatar
garys
Posts: 3262
Joined: 29 Aug 2005 13:07

#98 Post by garys » 22 Jan 2015 14:41

Now that I have my Airspy, my set up seems to be doing a better job receiving and decoding the data stream from the ICE MotoTrbo system. As I mention Site 28 is good because it has little if any AAA traffic. I've been able to identify or confirm several talk groups, especially private ambulance companies.

I've also noticed some new data on the DSD+ read out. I know that TG 34 is EasCare, I know that 6435 is the subscriber ID. I know what Slot1 and Slot2 are.

I'm not sure what the "VH" data is.

Does anyone know?

This is an excerpt from the log file I got using DSD+.

[font=&quot]VH-TGT=34[/font]
[font=&quot][]=1 state=5 ch#=2 tgt=34 src=6435[/font]
[font=&quot][]=0 state=1 ch#=1 tgt=-100 src=-100[/font]
[font=&quot]VH-slot=1 []=1 state=5 ch#=2 tgt=34 src=6435[/font]
[font=&quot]-DMR slot2 BS DATA CC=13 Voice Hdr[/font]
[font=&quot]-DMR slot1 BS DATA CC=13 CSBK[/font]
[font=&quot] [/font]
[font=&quot]VH-TGT=34[/font]
[font=&quot][]=1 state=5 ch#=2 tgt=34 src=6435[/font]
[font=&quot][]=0 state=1 ch#=1 tgt=-100 src=-100[/font]
[font=&quot]VH-slot=1 []=1 state=5 ch#=2 tgt=34 src=6435[/font]
We're peace loving people, we're not hunting trouble, but if trouble should find us, we'll stand up and fight.

User avatar
garys
Posts: 3262
Joined: 29 Aug 2005 13:07

#99 Post by garys » 07 Feb 2016 22:59

I thought that I'd resurrect this thread since I'm now back in business thanks to Chris Gordon.
Tomorrow should be a good day for scanning and trying to ID Talk Groups. A lot of the normal businesses will likely be off the air.

One thing I've notices is that there are a lot of two companies/AAA affiliates on the system. I've been busy this evening trying to lock them out since they use so much air time.

Should be a lot of plowing relate traffic tomorrow, along with some ambulance traffic.
We're peace loving people, we're not hunting trouble, but if trouble should find us, we'll stand up and fight.

disp617
Posts: 285
Joined: 01 Sep 2005 00:09
Location: Central Mass

#100 Post by disp617 » 08 Feb 2016 07:15

The AAA contracted companies use it for interoperability purposes. They have their own company channel and they also have an AAA contractor channel. That way they can contact AAA via radio for information instead of calling on the phone and possibly being placed on hold. It also comes in handy if the contractor needs assistance if he is out of his home area.

Post Reply