Skip to content

Capturing

Jump to bottom
eelcohn edited this page Mar 22, 2020 · 2 revisions
  1. Install Universal Radio Hacker (URH)
  2. Plug your RTL-SDR into an USB port (I've used a Nooelec nesdr Smart RTL-SDR, but any type of RTL-SDR should work).
  3. Start URH
  4. Go to File -> New Project and create a new project. And adjust the settings as shown below. Universal Radio Hacker - New Project
  5. Go to File -> Spectrum Analyzer and adjust the settings as shown below. Universal Radio Hacker - Spectrum Analyzer
  6. Click Start and press a button on the Zehnder ZRF remote control. You should see a couple of pulses in the spectrum analyzer
  7. Close the Spectrum Analyzer and open the recorder with File -> Record Signal. And adjust the settings as shown below. Universal Radio Hacker - Record Signal
  8. Make a separate recording of each of the buttons on your remote control
  9. Open a signal and click Autodetect parameters. Samples/Symbols should be 10 if you recorded with a sample rate of 1M (1 million samples per second at a bitrate of 100,000 bits per second makes 10 samples per bit) Universal Radio Hacker - Interpretation
  10. Go to the Analysis tab and select Manchester I as decoding method Universal Radio Hacker - Analysis
  11. Enter 1111110101 (the 10-bit nRF905 preamble bits) in the Search box and click Search
  12. Congratulations! You just found the start of a frame sent by your Zehnder ZRF remote control! Select the first 176 columns after the preamble (176 bits = 22 bytes), select the Hex value and copy/paste them to your favourite text editor

Clone this wiki locally