Table of Contents

Advertisement

Spectrum Analyzer
User Manual
Research Electronics International, LLC
455 Security Drive, Cookeville, TN 38506 U.S.A.
(800) 824-3190 (US Only)
+1 931-537-6032
www.reiusa.net
© Copyright Research Electronics International LLC

Advertisement

Table of Contents
loading

Summary of Contents for REI OSCOR Blue

  • Page 1 Spectrum Analyzer User Manual Research Electronics International, LLC 455 Security Drive, Cookeville, TN 38506 U.S.A. (800) 824-3190 (US Only) • +1 931-537-6032 www.reiusa.net © Copyright Research Electronics International LLC...
  • Page 3 Spectrum Analyzer This document is intended to provide guidance and instruction on using the OSCOR Blue Spectrum Analyzer for detecting electronic surveillance devices. The overall effectiveness of this product, and of any surveillance countermeasure, is dependent on the threat level and the user’s ability to properly utilize the appropriate equipment.
  • Page 4 OWNER’S RECORD The Serial Number of each OSCOR Blue is located on the back of the unit. Please record this number and refer to it whenever you contact your dealer or Research Electronics International concerning this product. Note: Removal or alteration of the serial number automatically voids all warranties of this product.
  • Page 5: Table Of Contents

    TABLE OF CONTENTS PRECAUTIONS ......................1 EQUIPMENT DESCRIPTION ..................2 Main Panel ..........................2 Inputs/Outputs/Accessories ....................4 QUICK START EXERCISES ................... 8 Exercise 1 – Listen to a Radio Station ..................8 Exercise 2 – Basic Methods To Detect Threat Transmitters ..........12 SET-UP &...
  • Page 6 Changing the Position of the Cursor ....................33 RF Spectrum Trace Display Modes ..................33 Real Time Trace ..........................35 Peak Trace ............................35 Average Trace ............................. 37 Persistence View ..........................37 Merge Peak ............................38 Math Trace ............................42 Detail Zoom ...........................45 Detail Zoom Screen Elements ......................
  • Page 7 IF Out ............................81 Baseband Out ........................81 Cursor Lock ...........................82 Receiver Overload – Analyze Mode ..................82 THE MULTI-PURPOSE PROBE (MPP) ................ 84 Connecting the MPP to the OSCOR Unit ................84 OSCOR Unit Operations with the MPP connected ................86 Selecting an MPP Input ......................86 Coax (In-Line)............................
  • Page 8: Precautions

    To avoid damage to the unit and internal circuitry, do not use this connector for telephone connections. • Only use REI approved power sources, batteries, chargers, and probes. • CAUTION The antenna panel can be damaged by a high-level electrostatic discharge (ESD) to the whip antenna connector.
  • Page 9: Equipment Description

    SET-UP & BASIC OPERATION EQUIPMENT DESCRIPTION Main Panel 1. POWER – turns the unit off and on. Press and hold the power button until the unit shuts off to do a firmware reset. As the unit powers on, the power button will display various patterns of solid and blinking colors to indicate successful initialization and self-test.
  • Page 10 SET-UP & BASIC OPERATION Decaying Red – Low battery, shutdown is imminent Blinking Red – Battery Fault (disconnect power and remove battery) With the Unit Off but with AC Power Connected: Pulsing White – Battery is charging Blinking Yellow – No battery detected Blinking Green –...
  • Page 11: Inputs/Outputs/Accessories

    SET-UP & BASIC OPERATION 13. CENTER/START – Highlights the CENTER field, to allow changes to the frequency of the CENTER of the displayed span. When the SHIFT key is pressed immediately before this key, the START field is highlighted, allowing changes to the displayed START frequency. 14.
  • Page 12 5. IF Out – 75 MHz IF Out, Center frequency = 75 MHz, 3 dB Bandwidth = 30 MHz. The IF Out port is active anytime that the unit is in Analyze Mode (see page81). 6. Auxiliary Control Port – digital control for REI supplied accessories, such as the Multi-Purpose Probe (see page 84) 7.
  • Page 13 SET-UP & BASIC OPERATION 12. Hard Reset – recessed switch for initiating a hard reset to the unit. This button should only be used if the unit has locked up or is not functioning normally due to an unforeseen programming condition.
  • Page 14 * The Directional Antenna is not included in some OSCOR models/versions. If the unit purchased did not include this antenna, it can be purchased by contacting REI or an Authorized REI reseller. 19. Multi-purpose Probe (MPP) - The MPP is a small portable probe that...
  • Page 15: Quick Start Exercises

    SET-UP & BASIC OPERATION QUICK START EXERCISES This section is intended to provide some short exercises to familiarize the user with some of the basic OSCOR functions and capabilities. These exercises are provided with minimal explanation and assume that the unit is turned off before starting. Detailed explanations of OSCOR functions and procedures are provided in later sections of this User’s Manual.
  • Page 16 SET-UP & BASIC OPERATION Repeatedly press the Narrowbutton to zoom in on the selected frequency. As you zoom in, the selected frequency will center itself on the screen. Press SWEEP/ANALYZE to enter Analyze mode. Press Mute or Vol Up to listen to the radio station.
  • Page 17 SET-UP & BASIC OPERATION Exercise 1b. – Listen to a radio station using tuner presets & touch controls. This exercise assumes that the OSCOR unit is again turned OFF. Press the Power button to turn on the unit. Press F1 to go to the Setup Menu.
  • Page 18 SET-UP & BASIC OPERATION Press SWEEP/ANALYZE to enter Analyze mode. Press Mute or Vol Up to listen to the radio station. To listen to other known signals, type in the desired frequency or use the rotary knob to move the cursor to adjacent stations.
  • Page 19: Exercise 2 - Basic Methods To Detect Threat Transmitters

    SET-UP & BASIC OPERATION Exercise 2 – Basic Methods To Detect Threat Transmitters The purpose of this exercise is to introduce methods for locating threat signals using Peak Traces, Math Traces, and the RSSI Locate feature. For this exercise, you will use some type of RF transmitter such as a cell phone, baby monitor, wireless microphone, or wireless camera.
  • Page 20 SET-UP & BASIC OPERATION Allow the peak trace to build for 10-15 sweeps. Now we want to save this peak trace in Office A. The Peak / Avg Sub-Menu should still be open from the last step. Select the Save Peak iconfrom the Peak / Avg Sub-Menu.
  • Page 21 SET-UP & BASIC OPERATION From the Stored Sub-Menu, select the Open icon. In the dialog box that appears, find and select one of the traces that you saved. Press OK. This trace will now be displayed on the screen. Notice that the Empty 1 icon in the Stored Sub- Menu now contains the name of this saved trace and the color of...
  • Page 22 SET-UP & BASIC OPERATION The Math Trace, which should now be displayed, shows a graphical difference of the peak trace generated in Office B compared to Office A. In the screen shot below, the spectrum was zoomed down to a 3GHz window to see the areas of the spectrum that contain the greatest differences. In this example, there are clearly some differences and each area of the spectrum should be closely examined.
  • Page 23 SET-UP & BASIC OPERATION We will now locate this transmitter in Office B using the RSSI Locate function. Press Sweep/Analyze to enter Analyze Mode. In this example, the wireless microphone was demodulated and “listened” to using the audio demod. To Locate the transmitter select Corr / Locate or press F4.
  • Page 24 SET-UP & BASIC OPERATION You can use the previous location method of monitoring the signal RSSI level as you walk around the room, but for this example we will use the Live Waterfall Raster to locate the wireless camera. Press F4 or select Waterfall from the main menu.
  • Page 25: Set-Up & Basic Operation

    Updating the Software and Firmware Software updates, provided in the form of an .O2update file, will be made available by contacting REI at sales@reiusa.net. To update your OSCOR unit: 1.
  • Page 26: Help File

    6. After a successful update, remove the thumb drive or compact flash card and save the .O2update file as a back-up. Notes Contact REI at sales@reiusa.net for software update notification. .o2update files also contain updates to the firmware for the MPP. When an MPP is connected to the OSCOR unit (see page 84) if the software on the unit is incompatible with the software on the MPP, the unit will automatically update the firmware on the MPP.
  • Page 27: Setting The Time Zone, Date, And Time

    SET-UP & BASIC OPERATION Setting the Time Zone, Date, and Time Setting up the time zone, date, and time will give you accurate timestamps on any recorded data. To set up this information on the OSCOR unit: 1. From the Main Menu, select System or press F6 2.
  • Page 28: Touch Screen Calibration

    SET-UP & BASIC OPERATION Touch Screen Calibration The easiest method to access and control OSCOR functions is to use the built in Touch Screen. There is a stylus located in the grip which will give the most precise control on the touch screen. In order to properly align the touch screen to the display, it may be necessary to calibrate the touch screen.
  • Page 29: Using The Storage Manager

    SET-UP & BASIC OPERATION Using the Storage Manager USB Hard Drives must be formatted with a FAT file system, such as FAT32, for use with the OSCOR unit. Hard drives formatted with the NTFS file system will not be recognized by the OSCOR. Windows operating systems limit the storage capacity of a FAT32 partition to less than 32 GB when formatting.
  • Page 30 SET-UP & BASIC OPERATION 3. The storage manager will open. Connected storage devices will be shown in the tree list on the left side of the storage manager window. 4. Find and Select the device you wish to format from the tree list in the storage manager. Properties for the device will be displayed on the right side of the storage manager window.
  • Page 31: Resetting To Factory Defaults

    SET-UP & BASIC OPERATION Several other tasks can be performed from the Storage Manager: • Refresh Devices – When the storage manager is first open, it will automatically detect all storage devices connected to the OSCOR. However, while the storage manager is open, if devices are connected or disconnected, it may be necessary to press Refresh Devices to refresh the tree list.
  • Page 32: Preset Spans

    SET-UP & BASIC OPERATION Preset Spans The range of frequencies swept by the tuner, or tuner span, can be adjusted during operation by changing one or more of the spectral parameters (see page 32). Custom spans may be configured, named, and stored in memory for easy recall later. Several default tuner spans are available on the OSCOR from the factory: o Full: The tuner will sweep the entire frequency range available on the OSCOR (100 kHz to 24 GHz for 24 GHz models and 100 kHz to 8 GHz for 8 GHz models)
  • Page 33: Managing Preset Spans

    SET-UP & BASIC OPERATION Managing Preset Spans Custom spans can be created and stored for later recall. After creating a custom span, it will be displayed in the list of available tuner spans. 1. From the Main Menu select Setup or press F1. 2.
  • Page 34: Showing/Hiding The Sweep Counts

    SET-UP & BASIC OPERATION 1. From the Main Menu, select Traces or press F2. 2. From the Traces Sub-Menu, select Options or press F5. 3. To show or hide the legend, press or toggle the Legend icon. Showing/Hiding the Sweep Counts It is possible to have the trace legend display the number of sweeps included in the real time trace, peak trace, average trace(if displayed), and any open stored traces.
  • Page 35: Using The Built-In Pre-Amp

    SET-UP & BASIC OPERATION turned on to reduce or eliminate the RF overload. Two separate attenuators exist for the 24 GHz models: one attenuator for the 0-8 GHz range and a separate attenuator for the 8-24 GHz range. Each attenuator offers three different levels of RF attenuation. 1.
  • Page 36 SET-UP & BASIC OPERATION 3. Select the Aux RF icon from the Setup Sub-Menu. When the background of the Aux RF icon is orange, the 0-8 GHz Auxiliary RF input is active. When the background of the Aux RF icon is gray, the 0-8 GHz Antenna input is active.
  • Page 37: Sweep Mode

    OPERATION SWEEP MODE Sweeping the RF Spectrum When you first power up your OSCOR unit, it will by default enter Sweep Mode. This section describes the controls for navigating the spectrum and the tools necessary for doing trace analysis in Sweep Mode.
  • Page 38: Navigating The Spectral Display

    OPERATION reference level to the default, press the OK button and select Default Range from the context menu that pops up. This will also reset the dBm/div value to default. 4. dBm/div indicator – indicates the number of dBm per screen division. The dBm/div value can be adjusted by tapping twice on the dBm/div indicator with the stylus and selecting a new value from the drop down list.
  • Page 39: Changing The Spectral Parameters

    OPERATION the LEFT ARROW key will jump the currently displayed span down one half screen to the next set of lower frequencies. Your SPAN parameter will remain constant, but your START, STOP, and CENTER parameters along with the CURSOR position will change as the spectral display pans. Click &...
  • Page 40: Changing The Position Of The Cursor

    OPERATION Press the CENTER, SPAN, SHIFT + CENTER, or SHIFT + SPAN button to highlight the CENTER, SPAN, START, or STOP parameters respectively. Enter a value using the number keypad, followed by a unit key (kHz, MHz, GHz) to initiate the change or turn the rotary knob to change the selected parameter’s value.
  • Page 41 OPERATION • Average Trace –Trace display mode developed by averaging the real time trace data. Average traces can also be saved for later analysis. • Math Trace – Displays differences in amplitude between any two open traces. Useful for comparing traces taken from different locations or taken at different times. To turn on/off and reorder the displayed view of traces: 1.
  • Page 42: Real Time Trace

    OPERATION Real Time Trace The real time trace is displayed by default when the OSCOR unit is first powered on. It is yellow by default. It is updated as quickly as the display can be updated and may itself be composed of the peak data from more than one sweep.
  • Page 43 OPERATION 2. Select Peak/Avg from the Traces Sub-Menu or press F2. 3. Select the Save Peak icon from the Peak/Avg Sub-menu. 4. From the dialog box that appears select a place to save the trace and name the saved trace. To Open or Close a Saved Trace: Up to four saved traces can be opened on the OSCOR unit at any given time.
  • Page 44: Average Trace

    OPERATION Average Trace The average trace is created by averaging a specified number of real time traces. An average trace can be very effective in reducing the noise floor, since the noise is averaged out, giving the user a better view of any signals that may be present.
  • Page 45: Merge Peak

    OPERATION peak trace views, this signal might be overlooked or obscured by the surrounding Wi-Fi traffic. However, using the Persistence Trace view, the narrow band signal stands out among the Wi-Fi signals. Narrow Band Signal To display the Persistence view 1.
  • Page 46 OPERATION Note: After performing the Merge Peak function, Trace ‘A’ will be closed and the resulting, merged trace will be opened in the same storage slot. To merge two stored peak traces: 1. Select “Merge Peak” from the Traces | Stored Sub-Menu 2.
  • Page 47 OPERATION P1 and Merged Traces P2 and Merged Traces A Note Regarding Noise Floor Levels Peak Traces will tend to have a higher perceived noise floor, because the highest peak at each point along a trace is stored and anything else is ignored until an even higher peak is encountered. Real time...
  • Page 48 OPERATION traces, even though they are meant to be a more instantaneous view of the spectrum, can also have a higher perceived noise floor because they are also constructed using peaks. When you are looking at a very narrow span, as long as you are not in Detail Zoom mode (see page 45), the tuner is able to sweep much faster than the display screen can refresh so that each display update may contain data from several sweeps –...
  • Page 49: Math Trace

    OPERATION Math Trace The OSCOR provides the ability to compare two different sets of trace data. Math traces can be generated from the real time trace, peak trace, average trace, or up to 4 saved traces if they are currently open on the OSCOR unit. The Math Trace allows a very quick view of the difference between the Frequency Spectrum of two different locations or the same location at two different times, and is a very reliable method for detecting sophisticated transmitters that are not continuous transmitters.
  • Page 50 OPERATION To Display a Math Trace: 1. From the Main Menu, select Traces or press F2. 2. From the Traces Sub-Menu, select Math or press F4. 3. Select the Math icon. Note: If a math trace has already been set up once during your current session, you will need to use the Edit icon to change the math trace.
  • Page 51 OPERATION Note: While using the Mask function, you may notice some signals seem to automatically be removed from the list. Some types of signals, such as frequency hoppers or FM transmitters may initially appear as several distinct, closely spaced signals. Overtime, as the envelope of this signal begins to fill in with peaks, the Mask function will automatically group these previously recognized narrow band signals into one signal with a larger bandwidth.
  • Page 52: Detail Zoom

    OPERATION Detail Zoom Up to this point, all methods described for navigating around the spectrum, i.e. narrowing or expanding the span, changing start and stop frequencies, panning across the spectrum, etc…, have involved changing the range the tuner is actually sweeping. What if you are interested in continuing to sweep the full tuner range with the OSCOR collecting peak data for the full range, but you want to look at just a specific portion of the spectrum in more detail? In this situation, you would use the Detail Zoom feature on the OSCOR.
  • Page 53: Navigating Within The Detail Zoom Window

    OPERATION 2. Zoom Region – shows the portion of the tuner range that is displayed in the detail zoom window. 3. Detail Zoom Window – When zoomed in on a portion of the tuner range, this window is where you will view the zoomed portion of the spectrum. Navigating within the Detail Zoom Window When Detail Zoom is on, all of the spectral parameters at the top of the screen refer to the Detail Zoom Window, not the range currently being swept by the tuner or the spectral thumbnail.
  • Page 54 OPERATION To create a new preset span for the detail zoom tuner setting, you must first create a new custom tuner span (see page 26). Note: Detail Zoom can also be accessed from the Traces | Displayed Sub-Menu.
  • Page 55: Signals

    OPERATION Signals Signal Lists A signal list allows you to store and recall frequencies of interest along with additional information such as signal amplitude, bandwidth, threat level, location, and any other comments which may be important. With the OSCOR, you have the capability to automatically generate signal lists, merge signals from multiple databases, add or delete signals from an existing database, or edit the information for any given signal –...
  • Page 56 OPERATION Generating and Saving a Signal List To generate a signal list: 1. From the Main Menu, select Signals or press F3. 2. The Lists Sub-Menu should be visible. If it is not, select Lists or press F1. 3. From the Lists Sub-Menu, select the Generate icon. 4.
  • Page 57 OPERATION pressing SHIFT + EXPAND. If Detail Zoom is on, then the signal list will be generated from the spectrum shown in the spectral thumbnail. Frequency Allocation Information When generating a signal list, the OSCOR will automatically populate the comments field with information about the frequency band that a signal might be a part of for the currently selected ITU region.
  • Page 58 OPERATION c. ITU Region 3 contains most of Asia (not including the former Soviet Union) and most of Oceania. d. FCC is a special case of ITU Region 2 for US regions that fall under FCC regulations For more information, see https://en.wikipedia.org/wiki/ITU_Region http://www.itu.int Note: Changing the ITU Region while a signal list is open will not reclassify all of the signals in the signal...
  • Page 59 OPERATION Opening or Closing a Signal List 1. If you are not already in the Signals|Lists Sub-Menu, from the Main Menu select Signals|Lists. 2. From the Lists Sub-Menu, select the Open icon. The open dialog box will appear. 3. After navigating to the media where your signal list is located, select your previously saved signal list and select OK or press F5.
  • Page 60 OPERATION 1. Position the cursor on the frequency of the signal that you would like to add to the list. When adding signals, the OSCOR will search for the largest peak in the area immediately surrounding the cursor. For increased accuracy narrow in on the cursor position before adding the signal. 2.
  • Page 61 OPERATION Hiding/Showing the Signal List and Markers To hide the signal list and/or the markers which are displayed by default on the spectral graph when a signal list is generated: 1. If you are not already in the Signals Sub-Menu, from the Main Menu select Signals or press F3. 2.
  • Page 62 OPERATION 4. From the Signals Sub-Menu, select the Next icon. The cursor will move to the signal in the Signal List with the next highest frequency. 5. From the Signals Sub-Menu, select the Previous icon. The cursor will move to the signal in the Signal List with the next lowest frequency.
  • Page 63: Auto Analyze

    OPERATION Auto Analyze After a signal list has been generated, the Auto Analyze function will automatically step through each signal in the signal list fine tuning main carrier frequencies, bandwidth measurements, and determining whether or not the signal correlates with room audio. Frequency and bandwidth determinations that are made during signal list generation in Sweep Mode are subject to the resolution bandwidth limitations found in Sweep Mode.
  • Page 64 OPERATION longer the dwell time is, the more accurate the bandwidth value will be, however, the overall time for the Auto Analyze process will be longer. The default value for Envelope Dwell Time is 3 seconds. b. Enable Noise Output – selecting this option will enable the white noise generator and unmute the audio.
  • Page 65 OPERATION If you chose to enable Signal Correlation when setting up Auto Analyze, the Auto Analyze function will step through the signal list a second time to make a determination of whether or not the signal correlates with room audio. During this 2 part of the process, a correlation graph will be displayed at the top right corner of the screen.
  • Page 66: Live Raster Waterfall

    OPERATION Live Raster Waterfall The Live Raster feature on the OSCOR captures a series of traces and displays them in a waterfall format. This is a quick way to observe the RF spectrum over a period of time and easily identify intermittent transmissions such as burst transmitters.
  • Page 67 OPERATION Notes The span and bandwidth of the spectral display can be changed while viewing a Live Raster Waterfall. However, whenever the spectral display is changed, the waterfall data will be cleared and a new waterfall will begin, unless Detail Zoom (see page 45) is turned on. The speed with which the Live Raster Waterfall data is captured and displayed will vary depending on the span of the RF spectrum;...
  • Page 68 OPERATION 4. If the Live Raster Sub-Menu is not already displayed, select Live Raster or press F1. 5. From the Live Raster Sub-Menu, select the Open icon. 6. From the dialog box that appears, navigate to any attached storage, such as a compact flash card or a USB thumb drive, select a saved peak trace, and choose OK or press F5.
  • Page 69 OPERATION 4. To edit an existing color in the color gradient, highlight the corresponding color marker on the gradient editor with the stylus. Drag the color marker up or down the gradient editor to modify the dBm value represented by the color. To edit the color of the selected marker, use the color controls on the left side of the dialog box.
  • Page 70: Receiver Overload - Sweep Mode

    OPERATION Receiver Overload – Sweep Mode Due to the nature of digital receivers, very strong signals can have an overloading effect on the receiver circuitry, resulting in intermodulation distortion and/or large spurs appearing at aliased frequencies. To assist in these situations, the OSCOR is equipped with overload indicators to alert the user that an overload is occurring.
  • Page 71 OPERATION The screenshot above shows the same signal, but with 10dB of input attenuation applied. The overload indicators have disappeared as well as the false spurs. Overload information is stored when peak traces are saved. The screen shot above shows a blue bar above the spectrum to indicate that the stored trace (which is displayed in blue) has an overload condition.
  • Page 72: Analyze Mode

    OPERATION ANALYZE MODE Analyze Mode changes the operation of the OSCOR from a sweep function to a single frequency signal analysis. The resolution bandwidth in Analyze Mode varies depending on the zoom level; it improves as you narrow the span. Analyze Mode will demodulate an analog AM, FM, or video signal. To enter Analyze Mode: 1.
  • Page 73: Setting Up The Analyze Mode Display

    OPERATION • Video Display – displays demodulated video. By default, video is not displayed when you enter Analyze Mode. Video Demodulation must be turned on by selecting the Video icon in the Demod Sub-Menu within Analyze Mode. (Not shown above) Setting up the Analyze Mode Display Several items on the Analyze Mode display can be customized depending on the information that needs to be seen on the screen:...
  • Page 74 OPERATION d. By default, audio is muted when Analyze Mode is entered. Press Mute or adjust the volume using the Vol^/v keys to hear the demodulated audio through the OSCOR unit’s speakers. You can also use headphones to listen to the demodulated audio. Plugging headphones into the headphone output will automatically mute the built-in speakers.
  • Page 75: Changing The Scope Display In Analyze Mode

    OPERATION The analyze screen for Video Demodulation consists of the same two plots as the screen for Audio Demodulation, but adds a third element: a window for displaying demodulated video. spectral graph oscilloscope Video Display Changing the Scope Display in Analyze Mode The display can be modified to suit your particular application.
  • Page 76: Setting A Squelch Level For Demodulated Audio

    OPERATION Setting a Squelch Level for Demodulated Audio The squelch control will allow you to suppress demodulated audio output when the carrier of the currently tuned signal drops below a set threshold. This will prevent you from hearing white noise when, for example, demodulating the audio from a two way radio and no transmission is being sent.
  • Page 77: Capturing And Reviewing A Frame Of Demodulated Video

    OPERATION To record longer durations of demodulated audio: Quick Record only allows capture of up to 30 seconds of audio. To record for longer durations it will be necessary to use the Record Audio icon and setup the location for file saving beforehand. 1.
  • Page 78: Toggling The Traces In Analyze Mode

    OPERATION To display a previously captured frame of video: 1. From the Analyze Mode menu, select Demod or press F1. From the Demod Sub-menu, select Capture or press F3. 2. From the Capture Sub-Menu, select the View Frame icon. 3. In the dialog box that appears, select a stored video frame for viewing. It may be necessary to change the file type (either .png or .bmp) in the dialog box to view previously stored frames.
  • Page 79: Demod Fft/Subcarrier Demodulation

    OPERATION Demod FFT/Subcarrier Demodulation Subcarrier demodulation is a means of decoding a second “piggy backed” signal carried on a normal transmitted radio signal. Subcarrier demodulation is sometimes referred to as double demodulation. Subcarrier signals are used for transmitting a number of things including stereo audio information, metadata, color information, and even audio for video signals.
  • Page 80 OPERATION 5. Once a subcarrier is identified, turn on subcarrier demodulation by selecting the type of demodulation that you want to use from the Subcarrier Sub-Menu: AM or FM. 6. Select the bandwidth that you wish to use: 200 kHz, 12.5 kHz, or 6.25 kHz. The 200 kHz subcarrier bandwidth is only available if the demodulation bandwidth is greater than 200 kHz.
  • Page 81: Subcarrier Scope

    OPERATION Note: Subcarrier demodulation is only available for video demodulation and the four larger filter sizes (200 kHz, 800 kHz, 6.375 MHz, 12.75 MHz) for audio demodulation. Note: A peak trace is also available for the Demod Spectrum. From the Subcarrier Sub-Menu, select the Peak: Off icon until it says Peak: Hold or Peak: Decay.
  • Page 82 OPERATION • New–Opens a blank signal list to which signals can be manually added in Analyze Mode. • Open List–Opens previously saved signal lists. • Close List – Closes a signal list that is open. If the signal list has not been saved up to that point, you will be asked whether or not to save the list.
  • Page 83: Locating Signals

    OPERATION Locating Signals RSSI Locate The OSCOR includes an RSSI locating feature to aid in narrowing down the physical location of a bug. RSSI stands for Relative Signal Strength Indicator. Opening the RSSI Locate Window 1. Position the cursor on the frequency of the signal suspected to be transmitting from your immediate area (see page 33).
  • Page 84: Correlation

    OPERATION • Threshold – The relative level of the RSSI graph can be adjusted to make it easier to see small variations in signal strength. Select the Threshold icon from the Locate Sub-Menu and then adjust the threshold level using the rotary knob. Press OK when you are done. Clear RSSI –...
  • Page 85 OPERATION An increased level in the center of the graph is an indication that the demodulated signal correlates with room audio and could be a potential threat. The OSCOR unit will automatically assess the correlation graph and make a determination regarding whether or not the demodulated audio correlates with the ambient room noise.
  • Page 86: Ranging

    To locate the source of these types of signals, you will need to use other methods, such as RSSI level (see page 76) or RF mapping, a process taught in REI’s TSCM training classes. Contact REI (sales@reiusa.net) for training dates.
  • Page 87 OPERATION noise generated by the OSCOR to perform the ranging function. Select Cancel or press F6 if you have decided not to use the ranging function. 3. By comparing the white noise received by the built-in mic and that received through the demodulated audio it makes a determination as to how far away the eavesdropping device is.
  • Page 88: If Out

    OPERATION 6. While using the ranging function, walk around the room carrying the OSCOR unit. The distance indicated by the ranging function will get smaller as you near the eavesdropping device. It should be noted that this particular step could be alerting to a potential eavesdropper. IF Out The IF Out port (see page 5) is active anytime that the OSCOR unit is in Analyze Mode.
  • Page 89: Cursor Lock

    OPERATION 2. From the Options Sub-Menu, select the Baseband Out icon to turn the Baseband Out port on. Deselect the Baseband Out icon to turn the Baseband Out port off. Note: Whenever the Baseband Out port is on, the video display on the OSCOR unit will lose color. This is normal and is due to hardware limitations in the unit.
  • Page 90 OPERATION In the screenshot above, a very strong signal has caused an overload condition, creating several false spurs and causing the “Input Overload!” indicator to appear on the spectrum. Applying just 10dB of input attenuation has eliminated the overload condition. The overload indicator has disappeared along with all of the false spurs.
  • Page 91: The Multi-Purpose Probe (Mpp)

    MULTI-PURPOSE PROBE THE MULTI-PURPOSE PROBE (MPP) The multi-purpose probe, or MPP, is a small portable probe that attaches to the auxiliary port of the OSCOR unit and extends its functionality with the addition of different sensors/antennas to allow the capture and analysis of suspicious signals: Coaxial Connectors, Carrier Current Probe (CCP), VLF Antenna (Loop Antenna), Infrared (IR) sensor, and a Visible Light (VL) sensor.
  • Page 92 MULTI-PURPOSE PROBE 5. Upon connecting the MPP, if the OSCOR unit is powered on and using the built-in antenna panel, you will be presented with a dialog box. 6. Select Yes or press F5 to switch the RF input to the MPP. The Aux RF icon in the Setup Menu will be replaced with an MPP icon.
  • Page 93: Oscor Unit Operations With The Mpp Connected

    MULTI-PURPOSE PROBE OSCOR Unit Operations with the MPP connected Most of the OSCOR operations continue to operate with the MPP just as they do with the built-in antenna panel. The maximum frequency range will automatically be adjusted for whichever MPP input is selected;...
  • Page 94: Coax (In-Line)

    MULTI-PURPOSE PROBE Coax (In-Line) Two of the MPP functions utilize the coaxial connectors: Coax (In-Line) and Coax (Single-Ended). The Coax (In-Line) Setting allows you to make in-line measurements using one of the coax ports as an input and the other as an output. The MPP contains a directional coupler between port A and port B. Therefore, if a signal is originating from the Port A coax input, then the signal should appear stronger when the MPP is switched to port A versus port B.
  • Page 95 MULTI-PURPOSE PROBE 5. It is advisable to save this trace for later comparison. Select Traces from the Main Menu or press F2. From the Traces Sub-Menu, select Peak / Avg or press F2. Select the Save Peak icon from the Peak/Avg Sub-Menu. 6.
  • Page 96: Coax (Single-Ended)

    MULTI-PURPOSE PROBE 8. Repeat step 5 to save a Peak Trace from Port B. The two saved peaks can now be compared to identify possible suspect signals. A math trace can also be performed on these two peaks (see page 42) Notes: Always verify the directionality of any suspicious signal by connecting each side up individually.
  • Page 97 MULTI-PURPOSE PROBE To measure signals using the Coax (Single-Ended) inputs: 1. Connect the signal up to either coax port A or port B. Be sure and connect the 75 ohm terminator included with the OSCOR to the remaining port. 2. On the OSCOR unit, make sure that the “Coax (Single-Ended)” input is selected. The options for the Coax (Cable TV) input will appear on the right side of the MPP tab.
  • Page 98: Ccp (Carrier Current Probe)

    MULTI-PURPOSE PROBE Because the two coaxial connectors are coupled and because any signal connected to one of the ports will be seen at the other port, it is not advisable to connect two different signals to ports A and B at the same time. The 100 MHz Baseband Upconvert option mixes the signal with a 100 MHz signal for analyzing baseband (see page 97).
  • Page 99 MULTI-PURPOSE PROBE Notes Noise from the AC power supply may interfere with carrier current measurements. Be sure that the AC power supply for the OSCOR unit is not plugged into the electrical circuit that you are testing for carrier currents. Be aware that any switching power supply connected to the electrical circuit that you are measuring may affect carrier current measurements...
  • Page 100: Receiver Overload - Mpp Carrier Current Probe

    MULTI-PURPOSE PROBE The 100 MHz Baseband Upconvert option mixes the signal with a 100 MHz signal for analyzing baseband (see page 97). A break-out cable with alligator clips is included with the OSCOR unit for use with the carrier current input. This cable should not be used with power circuits. Receiver Overload - MPP Carrier Current Probe When using the MPP to test for carrier current on the ground line, there typically is a lot of RF emissions at the low end of the spectrum.
  • Page 101: Ir (Infrared Light)

    MULTI-PURPOSE PROBE To measure signals with the VLF Loop Antenna: 1. Lift slightly on the end of the loop antenna and slide all the way open for use. 2. On the OSCOR unit, make sure that the “VLF (Loop Antenna)” input is selected. Notes The displayed frequency range in Sweep Mode for the VLF antenna is from 50 kHz to 20 MHz.
  • Page 102 MULTI-PURPOSE PROBE To measure signals with the IR detector: 1. On the OSCOR unit, make sure that the “IR (Infrared Light)” input is selected. 2. The IR detector on the MPP is located on the end with the Photo Detector label. Point this end toward any suspected IR source.
  • Page 103: Vl (Visible Light)

    MULTI-PURPOSE PROBE (Carrying strap is not an included accessory) VL (Visible Light) The MPP can be used for detecting visible light transmitters with a wavelength range of 450 – 1100 nm. To measure signals with the VL (Visible Light) detector: 1.
  • Page 104: 100 Mhz Baseband Upconvert

    MULTI-PURPOSE PROBE 100 MHz Baseband Upconvert The 100MHz Baseband Upconvert option is available for all of the MPP inputs except Coax (In-Line). This option mixes the selected input with a 100 MHz signal, which effectively shifts everything in the spectrum up 100MHz. When this option is enabled the span of the OSCOR unit is fixed from 100MHz to 120MHz.
  • Page 105 MULTI-PURPOSE PROBE To disconnect the MPP and return to the built-in antenna panel: 1. Disconnect the MPP from the AUX Jack and the 0-8 GHz auxiliary jack on the back of the OSCOR unit. 2. Upon disconnecting the MPP from the AUX jack, you will be presented with a dialog box. 3.
  • Page 106: Specifications

    SPECIFICATIONS SPECIFICATIONS RF SYSTEM Frequency: 8GHz Model= 10kHz to 8GHz, 24 GHz Model = 10kHz to 24GHz Displayed Average Noise Level (DANL) (25kHz Resolution Band Width): Without Preamp= -100dBm With Preamp = -110 dBm Sweep Speed: 24GHz/second Preamp: DC–8 GHz = 10 dB Attenuation: DC-24GHz = 0dB, -10dB, -20dB, -30dB Dynamic Range: Min/Max Range: 90dB, SFDR: 80dB AUDIO SYSTEM...
  • Page 107 SPECIFICATIONS EXTERNAL STORAGE CAPABILITY Compact Flash (CF) Slot USB-A Port MECHANICAL Dimensions: 11.5 in x 13.2 in x 3.0 in (29.2 cm x 33.5 cm x 7.6 cm) Weight with Battery: 9.6lbs (4.4 kg) Case Dimensions: 5.5 in x 14.9 in x 19.5 in (14 cm x 37.8cm x 49.5cm) Loaded Case Weight: 21.0 lbs (9.5kg) Operating Temperature: 0°C to +50°C Note: It is recommended to run the unit on battery power above +40°C.
  • Page 108: Appendix

    APPENDIX APPENDIX Trace Record Waterfall The Trace Record Waterfall is designed to capture high resolution traces from the spectrum trace data over long periods of time. The Trace Record Waterfall allows for even more detailed analysis than the Live Raster Waterfall. Unlike the Live Raster Waterfall, which is stored as a bitmap image from the display, the Trace Record Waterfall is stored as raw binary trace data;...
  • Page 109 APPENDIX a. Frequency Range – select from a preset or use a specific range by specifying a start frequency and a stop frequency. b. Start, Interval, and Duration – select an interval and a total time for recording. The minimum interval is 5 seconds. You can also schedule a start time for the Trace Record Waterfall session.
  • Page 110 APPENDIX iii. To schedule the record session to start at a later time, select Schedule Startup with the stylus, then enter a start time & date. Each portion of the time (hr, min, sec) can be selected individually and adjusted using either the up or down arrow keys, the on-screen arrow buttons next to the Time field, or the numeric keypad.
  • Page 111 If you are copying the waterfall from one media to another (e.g. copying the waterfall from a compact flash card to a PC for viewing on the OSCOR Blue Data Viewer software), it is important to copy all of the files contained within the waterfall folder.
  • Page 112 APPENDIX 5. To display the Waterfall full screen during review, double tap on the waterfall portion of the screen with the stylus. To return to the original screen configuration, double tap the waterfall with the stylus again. 6. When you are finished reviewing the Waterfall Recording, select Back or press F6 to return to Sweep Mode.
  • Page 113 APPENDIX • Color gradient information is not stored with the trace record waterfall data. When opening previously recorded waterfalls, the waterfall is always displayed with the current color gradient applied. Receiver Overload – Waterfall Mode The screenshots below demonstrate the receiver overload indications for the Trace Record Waterfall during record mode and review mode.
  • Page 114 APPENDIX smallest amount of input attenuation that prevents the overload condition, then start the recording session again. Once the overload condition is corrected, the false spurs will also disappear. Overload Indicators The screenshot above shows a previously captured Trace Record Waterfall being reviewed. A very strong signal which was present while the Trace Record Waterfall was being captured caused an overload condition to occur.
  • Page 115 APPENDIX Exercise – Using the Trace Record Waterfall To Detect Intermittent Transmitters The Trace Record Waterfall allows for detailed trace recording and analysis. During the Trace Record, all of the collected trace information, including a timestamp, is saved, so that each trace can be analyzed at a later time.
  • Page 116 APPENDIX The OSCOR will begin recording trace data. During the recording, the top half of the screen will display a peak trace and the most recently captured trace. The bottom half of the screen will display the trace data in a waterfall format. When the recording has finished, a dialog box will appear to alert you.
  • Page 117 APPENDIX After loading, your waterfall data will be displayed. The top half of the screen will display individual traces. The bottom half of the screen will display multiple traces in a waterfall format. Tap the bottom half of the screen with the stylus and turn the rotary knob.
  • Page 118 APPENDIX As you move the waterfall cursor through the waterfall data, pay attention to the displayed traces on the top half of the screen. The red trace is a peak trace of the complete waterfall recording session. The yellow trace displays the signals that were present at the time of the timestamp on the waterfall cursor. Compare the data in waterfall format to a peak trace taken during the same period as the waterfall recording.
  • Page 119 APPENDIX VNCe Server Remote control in the OSCOR Blue uses the freely-available VNCe Server, which is licensed under version 2 of the GNU General Public License (the GPL.) VNCe Server comes with ABSOLUTELY NO WARRANTY; for details see the GPL. VNCe Server is free software and you are welcome to redistribute it under certain conditions;...
  • Page 120 APPENDIX 2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change.
  • Page 121 APPENDIX 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein.
  • Page 122 APPENDIX...
  • Page 123 Research Electronics International, LLC 455 Security Drive, Cookeville, TN 38506 U.S.A. (800) 824-3190 (US Only) • +1 931-537-6032 www.reiusa.net © Copyright Research Electronics International LLC This manual contains proprietary information intended solely for use with the OSCOR Spectrum Analyzer. All information within this manual is subject to change without notice.

This manual is also suitable for:

Oscor green

Table of Contents