ST 131 “PIRANHA II”

TECHNICAL DESCRIPTION AND OPERATING MANUAL ST131 <PIRANHA II> and ST131N

1

ST 131 “PIRANHA- II”

ST 131N

MULTIFUNCTIONAL DETECTION DEVICES

TECHNICAL DESCRIPTION AND OPERATING MANUAL


2

CONTENT

Introduction 3

1 General Characteristic 4

1.1 Purpose and main features 4

1.2 List of equipment 5

1.3 Description of the main components 6

1.4 Packaging 13

1.5 Detection channels 14

1.6 Power supply 15

2 Operation and display 16

2.1 Operation 16

2.2 Indication 17

2.3 Main menu 18

2.4 Information 19

3 Modes, sub-modes and options 20

3.1 "FULL RANGE" mode 20

3.2 "BAND" mode 22

3.3 "DEMODULATION" mode 23

3.4 "AUTOMATIC ANALYSIS" sub-mode 24

3.5 "MEMORY" sub-mode 27

3.6 "SCALE" sub-mode 29

3.7 "MEASUREMENTS" sub-mode 30

3.8 "OSCILLOSCOPE" option 31

3.9 “WATERFALL” option 33 3.10 "SPECTRAL SUBTRACTION" option 34

3.11 "DIGIT" option 36

3.12 "NON-LINEAR JUNCTION DETECTOR" option 38

4 Working with the ST131 40

4.1 Working with the "RADIO" channel 41

4.2 Working with the "WIRE" channel 52

4.3 Working with the "OPTICAL" channel 56

4.4 Working with the "ACOUSTO-ELECTRIC" channel 57 4.5 Working with the "NON-LINEAR JUNCTION DETECTOR" option 59 5 Main unit firmware update 60 6 Technical Specifications 61

7 Certificate of Acceptance 63

8 Warranty 64

ANNEX 1 66

ANNEX 2 67


3

INTRODUCTION

ST131 “PIRANHA II” is a multifunctional detection device intended for detecting and localization of

the special technical means (STM) for surreptitious information gathering.

ST131N - a multifunctional detection device that has all the features and functionality of ST131 «PIRANHA II» model with the additional option: NON-LINEAR JUNCTION DETECTOR in wired lines.

In the further, according to the text, unless otherwise specified, ST131 «PIRANHA II» and ST131N models will be specified as ST131.

Prior to beginning of use of ST131, please read carefully this manual and keep it as a reference

book for further use.

Any part of information contained in this manual is subject to change without a notice.


4

1 GENERAL CHARACTERISTIC

1.1 Purpose and main features

A multifunctional detection device ST131 is intended for detecting and localization of special

technical means (STM) for surreptitious information gathering as well as identification of natural and

artificial sources of information leakage.

The main types of the STM, for detection of which ST131 is intended, are:

The STM with information transfer by radio channel. These primarily include:

• Radio microphones, including those with the accumulation and subsequent transfer of information (so-

called “burst transmitter” STM) and Frequency Hopping Spread Spectrum (FHSS);

Telephone radio transmitters;

Radio stethoscopes;

Video cameras with radio transmitters;

Unauthorized use cell phones and modems of CDMA, GSM, UMTS and DECT standards as well as the

devices with digital channels of data transmission such as WLAN, BLUETOOTH and LTE standards;

STM with the composition of the spatial high-frequency irradiation device;

Radio beacons for tracking of moving objects.

The STM that uses the following lines for information transfer: such as AC power,

telephone, coaxial, security and fire alarm cords.

The STM with information transfer in the infrared frequency range.

The STM with information transfer in the ultrasonic frequency range.

Natural and artificial channels of acoustic information leakage, detection of which is

included in the ST131 tasks, are:

Acoustic information channel emerged:

in wired lines for various purposes, as a result of acoustic-electric conversion ("microphone effect").

as a result of the absence or lack of sound insulation in the surveyed areas.


5

1.2 LIST OF EQUIPMENT

Basic set

1 Main unit.

2 “ST131.UHF” - UHF converter.

3 “ST131.AWL” – wire line adapter.

(“ST131.AWLN” for ST131N)

4 “ST131.UHF.A” - broadband UHF antenna.

5 Telescopic antenna.

6 «ST131.RAWL» - RF wire line adapter.

7 Probes set + alligator clips

8 220V clips (2 units)

9 "GROUND" wire

10 «F-BNC» adapter.

11 Power supply (2 units).

12 Main unit’s supporting device.

13 Main unit’s shoulder holder.

14 Tripod.

15 USB cable.

16 Hex-nut wrench.

17 AA-type batteries (8 pcs).

18 Headphones.

19 USB flash drive with software.

20 Technical description and operating manual.

Additional set

1 “ST131.SHF” - SHF antenna-detector

2 “ST131.IR” - infrared sensor

3 “ST131.TEST” - testing device

4 “ST131.MF” - Magnetic field sensor

5 “ST131.OV” - Bias voltage module


6

1.3 Description of the main components

1.3.1 The main unit

Appointment of connectors and controls are shown

in Figures 1 and 2.

1 "I/O" Socket for connection of UHF converter

ST131.UHF, SHF-detector ST131.SHF, magnetic sensor ST131.MF and infrared sensor ST 131.IR

2 "GEN" Test signal generator output (only for

ST131N)

3 "CH2" Socket for connection of probes

operating in the “ACOUSTO-ELECTRIC” channel and magnetic sensor ST131.MF

4 "CH1" Socket for connection to the wire line adapter ST131.AWL and Telescopic antenna

1 Sound line out.

2 3.5’’ socket for headphones connection.

3 Volume knob.

4 Battery compartment covers.

5 ON/OFF switch.

6 Power supply socket.

7 USB slot.

On the bottom of the main unit comprises a screw-threaded hole for connecting the main unit

supporting block and shoulder holder, as well as labels with device number information and polarity

when inserting the batteries in the battery compartments.

Figure 1

Figure 2

Figure 1


7

1.3.2 Software

ST131 ANALYZER PRO software enhance the ability and expands capacities of the device for

analyzing and processing of signals.

This software implemented the following:

Oscilloscope, spectral and vector analysis,

“waterfall”;

Creation of signals database;

MONITORING with expanded presets;

Stream recording of signals to HDD of PC;

Special detection algorithms.

PC transfer of data, that has been stored in

the ST131 main unit

Detailed information on the program and instructions for its use is on a USB-flash.

PC configuration required

CPU: 2 cores and 2 GHz or faster.

RAM: 1 GB at least.

Display: 1280 x 1024 resolution, widescreen recommended.

Ports: USB 2.0.

Operating system: Windows 8, 8.1, 7, Windows Vista, Windows XP.

TABLET configuration required

Operating system: Windows 8, 8.1 and above (full version).

Figure 3


8

1.3.3 UHF converter "ST131.UHF"

ST131.UHF is connected to the "I/O" socket of the main unit.

1 SMA socket.

2 Switch-on and low battery power indicator.

3 ON/OFF switch.

4 Main unit link quality indicator.

5 Screw-threaded hole ¼”.

6 Battery compartment cover.

At the end part of the UHF converter handle there is a socket for power supply.

1.3.4 Wire lines adapter «ST131.AWL»/ «ST131.AWLN»

ST131.AWL/ ST131.AWLN is a monoblock in which structurally united:

Step-down transformer voltage converter assigned to operate in the frequency range from 0.01

to 30 MHz;

• Low frequency differential amplifier assigned for operation in the acoustic frequency range (0.3-

15 KHz).

Switching device controlled directly from the main unit and provides connection to the contact

pairs of the RJ-45. Connection can be to the most common combinations of pairs as well as user-defined pair.

Amplifier for test signal generator (only for ST131N).

1 Sockets for probe connection.

2 "GROUND" contact.

3 RJ-45 sockets.

4 “LINE” voltage indicator.

5 “PWR/LINK” power and main unit data exchange indicator.

6 "OVERLOAD" indicator of input signals.

At the bottom of the adapter there are elements of attachment to supporting device and a shoulder holder to the main unit.

ST131.AWL connects to the main unit’s corresponding sockets.

Figure 4

Figure 5

1

2

3

4

5 6


9

The “WIRE 0.01-30 MHz” channel is designed for the analysis of signals in the 0.01-30 MHz frequency band and the “WIRE 0.3-15 KHz” channel is for the 0.3-15 KHz frequency band.

Connecting to the explored line executes through connectors:

• RJ-45 (3), that provides a pass-through connection to the ETHERNET and phone line.

• Sockets for probe connection (1), which provide a connection to other types of conductive lines with using of additional clips, if necessary.

Pressing the “COMM” button of the main unit provides a choice for switching pairs of wires connected

to the RJ-45:

Combination "4-5", "3-6", "1-2" and "7-8" are

the most likely options of pairs.

Use the button and to select the choice and confirm by pressing the or rotary knob.

"SELECT" – sets the user-defined pair (except of the same name to avoid short-circuit):

• 1st pin number (1-8): Entering the first contact from the numeric keypad.

• 2nd pin number (1-8): Entering the second contact.

The specified pair is indicated in position 10 of Fig 18.

"NEGATIV"/ "POSITIV" – changes the polarity of the pair of wires.

"NO COMM" - disconnection from the explored line.

ST131.AWL remains operable under voltage at input connectors no more than 380V.

Attention! When working with ST131.AWL, in order to avoid electric shock,

obey the rules of electrical safety.

1.3.5 RF wire line adapter «ST131.RAWL».

ST131.RAWL is designed to work in the "WIRE 30-3000 MHz” channel.

ST131.RAWL is a single monoblock with integrated circuit protection

against high voltage up to 250V.

ST131.RAWL is connected to the same type SMA connector like the

ST131.UHF converter. Input connector "F" type is designed for direct

connection to the coaxial line. Use «BNC-F» adapter to connect to the line with

BNC connector.

.

Figure 6


10

1.3.6 Infrared sensor "ST131.IR"

This sensor structurally consists of receiving photodiode and pre-amplifier.

This sensor is connected to I/O socket of the main unit.

The front side of sensor has the screw-thread used for connection of the

special monopod.

1.3.6.1 Monopod

The monopod is intended for facilitation of search of IR transmitting devices which installed at

external side of the window aperture in the direction “from the window”.

1.3.7 SHF antenna-detector "ST131.SHF"

ST131.SHF consists of the structurally integrated log-

periodic antenna and SHF detector-amplifier.

The handle comprises a screw-threaded hole 1/4" for

connection to the tripod.

It is connected to I/O socket of the main unit.

Figure 9

Figure 7


11

1.3.8 Magnetic field sensor ST131.MF.

St131.MF consists of a ferrite antenna and pre-amplifier.

1 The mode selector"GRAD-MAG"

__________________________________________________________________________

The Thread hole ¼” is on the opposite side of the ferrite antenna.

ST131.MF operates in two modes:

«MAGNETOMETER"- directly as a magnetic field intensity sensor (a mode selector is in a position

"MAG").

"GRADIOMETER" - as a gradiometer (a mode selector is in position "GRAD").

In this mode an influence of remote strong sources of magnetic field is reduced

significantly as well as influence of other disturbing impacts (acoustic, vibro-acoustic, etc).

ST131.MF connected to the sockets «I/O» and «CH2» of the main unit.

1.3.9 UHF antenna "ST131.UHF.A"

ST131.UHF.A is a passive broadband antenna.

It is connected to the input SMA socket of the ST131.UHF converter

(position 1, Figure 4).

Figure 11

Figure 10


12

1.3.10 Testing device "ST131.TEST"

The "ST131.TEST" is intended to control operability of devices ST131 and ST131N by testing all

detection channels in the main unit as well as rest equipment (sensors, antennas, adapters, converters). The "ST131.TEST" has six control signal sources corresponding to the ST131 detection channels

as well as non-linear element to check the non-linear junction detector.

1 Battery charge indicator.

2 Power supply socket "5V".

3 ON/OFF switch.

4 Connector "CH2" - output of signals to check the "ACOUSTO-

ELECTRIC" channel.

5 Connector "UHF" - output of signals to check the "RADIO 30-

4400 MHz" channel.

6 Rotary knob.

7 Reception cavity “SHF” for the ST131.SHF detector.

8 Reception cavity "MAG" for the ST131.MF magnetic field

sensor.

9 Reception cavity “IR” for the ST131.IR infra-red sensor.

10 Socket "AWL" - output of signals to check the "WIRE"

channel.

Complete information about working with ST131.TEST is in the "Technical description and user

manual ST131.TEST".

Figure 12


13

1.4 PACKAGING

The ST131 device is packed in a special shock-proof and water-resistant black color case with

dimensions 400 x 304 x 165 mm. Special location foam polyurethane plates are installed in the case body for convenient and reliable

placement of all components of the device. Arrangement of the components is shown in Figure 13.

1 Power supply (2 units).

2 Main unit.

3 UHF converter ST131.UHF.

4 Probes set + alligator clips + 220V clips + "GROUND" wire.

5 Wire line adapter ST131.AWL/ST131.AWLN.

6 Magnetic field sensor ST131.MF.

7 UHF antenna-detector ST131.SHF.

8 Infrared sensor ST131.IR + monopod

9 AA-type batteries (8 pcs) + hex-nut wrench.

________________________________________________________________

1 USB cable.

2 Tripod.

3 Shoulder mount and main unit’s supporting

device.

4 USB flash drive.

5 UHF antenna ST131.UHF.A + wire line

adapter ST131.RAWL + "F-BNC" adapter +

telescopic antenna.

6 Headphones.

7 ST131.TEST testing device with accessories.

Figure 13


14

1.5 DETECTION CHANNELS

ST131 has four detection channels.

Detection channel Frequency range

RADIO

0.01-30 MHz

30–4400 MHz 4–18 GHz

WIRE

0.3-15 KHz

0.01–30 MHz 30–3000 MHz

OPTICAL 770-1650 nm (0.001-30 MHz)

ACOUSTO-ELECTRIC 0.01–125 KHz

List of channels access is provided by pushing " " button and selecting "SELECT CHANNEL"

in the "MENU".

1.5.1 «RADIO» CHANNELS

Selective receiving and subsequent processing of radio signals within the range of

0.01 – 18000 MHz is provided in this channel.

To work in a range of 0.01-30 MHz, the telescopic antenna or other antenna of this frequency range can be used.

To work in a range of 30-4400 MHz, the ST131.UHF converter and the ST131.UHF.A antenna are

used. For operation in the 4-18 GHz microwave detector «ST131.SHF» is used.

1.5.2 «WIRE» CHANNELS

This channel provides receiving and subsequent processing of the signals transferred by wire line

of different purpose (power networks, telephone networks, computer networks, security and fire alarm

lines, etc.). These lines can be de-energized as well as alive ones (AC or DC voltage) up to 250V.

Use the ST131.AWL wire line adapter to work in a range of 0.3-15 KHz and 0.01-30 MHz.

Use the ST131.RAWL RF adapter and the ST131.UHF converter together to work in a range of 30-

3000 MHz.

1.5.3 «OPTICAL» CHANNEL

Receiving and subsequent processing of the radiations in the optical frequency range is provided in

this channel.

The ST131.IR infrared sensor is used together with a special monopod to work in this channel.

1.5.4 «ACOUSTO-ELECTRIC» CHANNEL

Receiving, amplifying and analyzing of signals within the frequency range of 10 Hz – 125 KHz is

provided in this channel.

Ultrasonic signal is converted into audio frequency signal by means of frequency transfer.

Application of different types of acoustic transducers depends on the tasks considering parameters

of this channel.


15

1.6 POWER SUPPLY

1.6.1 Main unit

Power supply of the ST131 main unit is provided by means of six AA-type batteries (or rechargeable

batteries) or power adapter.

Completely filled icon (position 11, Figure 14) corresponds to full capacity of the battery,

completely discolored and strikethrough image corresponds completely discharged batteries.

It is preferable to use heavy-duty alkaline batteries.

Under average operating condition (backlight is switched on for 50% of time, volume level – 50%

of maximum level) hours of service of one set of batteries is not less than 5 hours at least.

It is possible to use only one battery compartment (three batteries). In this case the service time is

reduced to 1 hour.

To replace the batteries, please open the battery compartment covers with the wrench included

into delivery set. Replace the batteries observing polarity given at the bottom cover of the main unit.

1.6.2 UHF converter ST131.UHF

UHF converter is powered by two AA type batteries (or rechargeable batteries) or power adapter.

When the batteries are discharged the continuous lighting of the indicator «ON/LOW BAT» (position

3, Figure 4) will be replaced by blinking one time per second.

Service life of the device when using evidently new batteries of alkaline type should be at least two

hours.

To replace the batteries, please open the battery compartment covers and replace the batteries

observing polarity indicated at the bottom part of the battery compartment.


16

2 OPERATION AND DISPLAY OF ST131

2.1 OPERATION

CONTEXT BUTTONS (4)

Definition of the context buttons – depends on the selected detection channel, operating

mode in this channel is indicated in the lower line of the display.

When pushing or rotary knob changes the buttons context: basic or supplementary.

FUNCTIONAL BUTTONS (5)

- switching on the FULL RANGE mode

- switching on the BAND mode

- switching on the DEMODULATION mode

- switching on the SCALE sub-mode

- access to measuring functions

SUPPLEMENTARY BUTTONS

and are intended for sequential switching between the bands in the BAND

mode, choice of the displayed part of the "RADIO 30-4400 MHz" range: "30-4100 MHz" or "300-4400

MHz" and changing the display brightness (using the ) (1)

– entry in the main MENU (2)

– entry in the indication of current settings (3)

– switching in the MEMORY sub-mode (6)

- switching in the AUTOMATIC ANALYSIS sub-mode (7)

and - choice in MENU and pop-up lists and set the displayed maximum signal level (8)

- zero in the numeric keypad and automatic adjustment of the current spectrogram or oscillogram

in vertical screen size (9)

– confirmation of selection (aka ENTER) (10)

– decimal point and reset of the accumulation results of detectors (11)

– - digital keyboard (12)

Figure 14


17

“ON/OFF switch” (position 5, Figure 2) is designed to switch on/off the ST131 main unit.

“Volume control” (position 3, Figure 2) regulates the output audio level of the built-in loudspeaker

or headphones. Adjustment is possible if it is provided for a particular mode (an icon of volume control

accessibility is indicated in position 12, Figure 15). Numerical value of the volume level (0-99) is displayed

in position 11.

Use automatic adjustment of the current spectrogram and oscillogram in vertical screen

size by pressing the button.

Manually moving the horizontal axis of the spectrogram is made by and . One press

changes the displayed boundaries of levels by 5 dB in position 6, figure 14. So you can make vertical

shift of the spectrogram to view it more comfortable. If you work with the oscillogram, these buttons

increase or decrease the displayed amplitude of the signal.

Reset of the averaged results of the detectors is carried out by pushing the button.

2.2 INDICATION

The common way of signal indication in the ST131 are spectrograms. Common elements are shown in Figure 15.

1 Start and end of the displayed frequency range.

2 Short name of the current channel.

3 Mode.

4 Sub-mode.

5 Overload Indicator / The maximum possible level of

signal that displayed without overload. *

6 The lower and upper level of the displayed signal

(dynamic range).

7 Frequency and maximum level of signal considering the spectral resolution. **

8 Noise level.

9 Gain value of the input amplifier of the main unit.

10 Attenuator value of the ST131.UHF converter (“RADIO 30-4400 MHz" and “WIRE 30-3000 MHz"

channels) or the number of the selected RJ-45 connector pair ("WIRE 0.01–30 MHz” and “WIRE 0.3-15

KHz" channels).

11 Battery level indicator.

12 Volume level indicator.

13 Mute or sound control availability indicator.

* The maximum possible signal level without overload is implemented only for the "RADIO 30-4400

MHz" and "WIRE 30-3000 MHz" channels. **For example, spectral resolution in the FULL RANGE mode of the "RADIO 30-4400 MHz" channel

is 32 MHz. Indication of 930 MHz frequency means that the maximum signal is within the range of

930+/-16 MHz. Thus the accuracy of measuring frequency is +/- 16 MHz.

Figure 15


18

2.2.1 OVERLOAD INDICATION

The appearance of the inscription "OVERLOAD" (position 5, Figure 14) means that at the entrance to

the main unit there is the signal exceeding the allowable maximum input signal at that setting. In the "RADIO 30-4400 MHz" channel with the factory setting, this message can be caused by the 10

mW signal power at a distance of about one meter, or one watt at a distance of about ten meters. Moment of appearance of this inscription set in the MENU (section 2.3). By default, this indication

appears only for the long-term overload. You can change that setting by pressing the button,

selecting "ADVANCED SETTINGS" and checking "More indicat. of overloading." After that it will be

displayed by any, even the short-term overload.

To avoid the overload, do the following:

change your location or turn off the source of this signal, if possible.

successively decrease the amplifier gain input value ( ) and then pressing until

the overload is removed from display.

In the "RADIO 30-4400 MHz" channel to avoid the overload use the attenuator located in the UHF

converter. Once pressing the button leads to automatically calculated level from 5 to 30 dB in steps of 5 dB to eliminate overload (with indication in position 10, Figure 15). Manually, the necessary

attenuation of the input signal can be selected from the list after clicking on .

If the attenuator value is 30 dB, overload in "RADIO 30-4400 MHz" channel will be triggered by the 1 W signal at 1 meter.

It should be noted that the source of overload may be signals that are beyond the investigated

band (“BAND” mode) but still in the frequency range of this channel (“FULL RANGE” mode). This can

lead to the "OVERLOAD" indication although the signal is not seen on the spectrogram.

2.3 MAIN MENU

To enter main MENU press the button.

"Memory data transfer…" – turns on the main unit into the two-way data transfer. See “ST131

Analyzer Pro. User’s Manual" to get description of that process.

"Save user’s settings..." – saves the current settings (preview by clicking ). To restore the

saved settings, select "User's settings..." in the start menu.

“LPF demodulation” – selection of cutoff frequency of the 1st order low-pass filter at the output

of the demodulator.

Figure 16


19

"Gain out" – selects level of signal for line and headphones output in the DEMODULATION mode.

It defaults to automatic gain control ("AGC"). No use in the “WIRE 0.3-15 KHz” and “ACOUSTO-

ELECTRIC” channels.

"Full memory erase" - complete data erasure held in non-volatile memory of the main unit.

"More indicat. of overloading" – selecting of this setting provides instant indication of overload

at the time of its occurrence in position 5, Figure 15. five-second delay as a default. Short-term overload

indication is usually caused by band and out of band transients. This option also includes an additional indication if the displayed signal beyond the screen but no

overloading (the message "OVERSCL.").

"Disable the probe ident."- disable the identification and diagnosis of external converters such as ST131.UHF и ST131AWL.

2.4 INFORMATION

With pressing the button information about current settings of the device appears.

“Ver.x.x.xx”- current number of device’s firmware version.

" " - access to the information window of distribution of device’s non-volatile memory. If

selected, it is highlighted in red.

Figure 17

Figure. 18


20

3 MODES, SUB-MODES AND OPTIONS

following features have been realized in ST131:

THREE MODES: “FULL RANGE”, “BAND” and “DEMODULATION”.

FOUR SUB-MODES: “SCALE”, “AUTOMATIC ANALYSIS”, “MEMORY” and

“MEASUREMENTS”.

FOUR OPTIONS: “OSCILLOSCOPE”, “SPECTRAL SUBTRACTION”, “DIGIT” and “NON-

LINEAR JUNCTION DETECTOR” (only for ST131N).

3.1 “FULL RANGE” MODE

In general, this mode is intended for visual estimation of the signal occupancy in the full frequency

range and quick detection the signals with relatively strong level.

Entry in this mode is carried out automatically after selection of

the channel from the list of the channels in start MENU or by pressing

(except “RADIO 4–18 GHz” channel).

The large frequency range of the "RADIO 30-4400 MHz” channel is divided into two sub-ranges:

“30-4100 MHz” and “300-4400 MHz”. Switching between sub-ranges is performed by and buttons.

CONTEXT BUTTONS FUNCTIONS______________________________________________

All possible main and auxiliary context buttons in this mode for all channels are presented below. Definition of the buttons can be different in each channel.

- selects the attenuator level (0-30 dB) of the ST131.UHF converter in the "RADIO 30-4400

MHz” channel. It is displayed on position 1, Figure 15.

- selects the displayed dynamic range of signal levels (30, 60 or 120 dB). It is displayed on

position 6, Figure 15.

- selects the pair of RJ-45 connector in the "WIRE" channels (see section 1.3.4). It is displayed on position 1, Figure 15.

- selects the gain of the input amplifier for the main unit as well as automatic gain control (AUTO).

- selects signal averaging (see section Annex 1).

- access to the "DIGIT" option in the "RADIO 30-4400 MHz" channel (see section 3.10) .

- access to the “SPECTRAL SUBTRACTION” option (see section 3.9) and the detailed pattern (see section 3.4.1).

_______________________________________________________________________


21

When you click on the rotary knob or button, a number of auxiliary context

buttons appears.

FUNCTIONS OF THE AUXILIARY CONTEXT BUTTONS_______________________________

- access to context-sensitive help (under construction).

, - selects analyzing frequency bandwidth. Function is active in the BAND mode. All

possible bandwidth values depend on the selected channel.

- activates the 'PULSE' option.

______________________________________________________________________

For detailed analysis (the "BAND" mode), gently turn the rotary knob. The cursor lines and

new context buttons will appear on the screen (Figure 19).

1. Marker of the tuned frequency.

2. Cursor lines of the frequency band for the BAND

mode.

3. Signal level value corresponding to the position of

the marker.

4. Bandwidth value for the BAND mode.

Selection of the cursor lines location on the spectrogram performed by rotating the rotary knob.

Changing the frequency bandwidth is achieved by pressing or . The distance between

cursor lines will be changed proportionally, if possible. Lists of bandwidth and their particular features are different depend on the selected channel.

After selecting the center frequency and bandwidth, press the button to switch to the BAND

mode. Selected band will be shown on the full screen.

Figure 19


22

3.2 “BAND” MODE

This mode is intended for detailed analysis of the signals within selected bandwidth.

Entry to this mode performs from the FULL RANGE mode by pressing on with the appearance

of the cursor lines (Figure 20) and secondary pressing on

CONTEXT BUTTONS FUNCTIONS______________________________________________

- entering the central frequency of the analyzed band by using the numerical keypad.

- - see section 3.1.

- see section 3.1.

- see section 3.1.

Signal selection is provided by turning the rotary knob. At the same time this allows the movement

of the cursor on the spectrogram with the step equal to the spectral resolution (see section 2.4 "Information").

If you want to change the screen resolution, with respect to any signal at the cursor (electronic

magnifying glass), press on to reduce the resolution or to enlarge it. Full list of bandwidths can be seen by going to the auxiliary row context buttons and pressing

. Maximum list is presented in the "RADIO 30-4400 MHz" channel. Here the values of bands are listed in the range of 500 Hz to 2048 MHz with a corresponding change in the threshold sensitivity.

When choosing a band up to 10 MHz displayed result of the Fast Fourier Transform, which provides maximum speed and resolution proportional to the number of FFT points.

10 MHz spectrums will be glued in a row for displaying if the band is from 20 MHz to 200 MHz.

There is provided a special algorithm of calculation in the bands 512, 1024, 2048 and 4100 MHz. In this case the maximum signal in the local FFT is calculated among multiple FFT analysis that corresponds

to the screen resolution 4, 8, 16 and 32 MHz.

When bringing the cursor to the edge of the screen continued rotation of the rotary knob will

automatically switch to the next band analysis (identical to pressing or ).

Signal under the marker can be moved to the center of the screen by clicking on .

The same with moving the signal to the center of the screen will happen when you click on

or while simultaneous changing the bandwidth.

Decreasing of bandwidth increases signal/noise ratio in inverse proportion as well as horizontal resolution

by frequency (see section Annex 2).

Figure 20


23

3.3 DEMODULATION MODE

This mode is intended mainly for demodulation and audio control of the investigated signal.

Input and output this mode carried out by pressing . In this case, the cursor lines appear to indicate

the demodulation bandwidth (Figure 21). Sound control indication enables, too ( changes to ).

To listen this signal set the desired volume level by rotating the volume control (position 3, Figure

2). Using headphones is preferable.

1. Type of demodulation.

2. Demodulation bandwidth.

CONTEXT BUTTON FUNCTIONS______________________________________________

– access to selection of demodulator type. Possible selection includes amplitude modulation

(АМ), frequency modulation (FM), single sideband modulation with lower (LSB) and upper (USB)

sideband.

– - selection of demodulation bandwidth. Bands from 2 KHz to 500 KHz are available for sound (audible) control. The 5 MHz band provides only viewing demodulated signal in the time

domain (it is necessary to press on ). This is useful, for example, for identifying an analog video

signal.

- selection of the frequency step value for fine tuning. Step can be from 1 Hz to the selected

bandwidth.

- access to fine tuning the central frequency. If selected, it is highlighted in red. Tuning is

performed by using the rotary knob by 100 Hz step.

Going to the waveform of the demodulated signal by pressing on . Back in the spectrogram –

pressing second time .

Figure 21


24

3.4 “AUTOMATIC ANALYSIS” SUB-MODE

This sub-mode is intended to create a list of signals that exceed a user-defined threshold in the

current spectrum. For each detected signal is indicated by its frequency level exceeds the threshold

value and signal bandwidth characteristic.

This sub-mode is implemented for channels "RADIO 30-4400 MHz”, “RADIO 0.1-30 MHz", "WIRE

0.01-30 MHz”, “WIRE 30-3000 MHz" and "OPTICAL".

To enter press button, to exit - any functional button. You will see a threshold red line and its

level value indicated in the position 1, Figure 22.

CONTEXT BUTTON FUNCTIONS_____________________________________________

- activates the analysis function

- goes to the list of signals created by an analysis or read from memory.

- indicates that you can change the position of the threshold line by the rotary knob (set by default).

- select of the spectral averaging.

- selecting this option (highlighted in red) provides subtraction signals stored in the detailed

pattern from the current spectrogram, if the detailed pattern has been created (see section 3.4.1).

FUNCTION OF THE AUXILIARY CONTEXT BUTTONS_______________________________

- creates a detailed pattern (see section 3.4.1).

_________________________________________________________________________________

Before the automatic analysis start it is necessary to select the position of the threshold line and

the type of averaging.

Installation is performed by turning the rotary knob (when displaying the destination -

or more precisely by pressing the and buttons.

Setting option of averaging is performed based on the following assumptions:

If there is 10 MHz analysis bandwidth or less, averaging options described in Annex 1 will be used.

If there is more than 10 MHz analysis bandwidth, the following options are possible:

• «SAMPLE" - analysis is done once (total cycle is about 0.2 seconds). It is the fastest option. • «PEAK" – analysis is done 8 times and peak values of all harmonics will be taken (total cycle is

about 1.6 seconds). That option increases the chance of detection of the pulse signal.

Figure 22


25

• «AVERAGE» - the analysis is done 8 times and the averaged results will be taken (total cycle is about 1.6 seconds). This option reduces the chance of detection of the accidental spontaneous pulse

signal.

In case of the indefinite situation, set the “PEAK” option.

After pressing on the button - signal analysis begins with a change of information in position 1, Figure 23.

The consecutive analysis executes throughout range or band with a resolution of 40 KHz (if there is

more than 10 MHz analysis bandwidth).

1 At the time of analysis with format XXX / YYY:

XXX - counter of detected signals; YYY –percentage of completion of analysis (%).

Upon completion of analysis: XXX - number of the signal with marker on it;

YYY - the total number of signals exceeded the threshold level.

Upon completion of the analysis, following options are possible:

• to work with a list of signals by pressing .

• to stay with the spectrogram and press (the title of the button will change to )

that will provide an opportunity to set the marker over the signals which exceed the threshold and

switch the marker to other signals by rotating the rotary knob or pressing and .

BAND

NARROW - less than 100 KHz;

WIDE - from 100 to 1000 KHz; VERY WIDE - more than 1000 KHz;

LEVEL - signal level value; EXCEESS - excess over the set threshold level. CONTEXT BUTTON FUNCTIONS ______________________________________________________

- go to the selected signal spectrogram. When pressed, it will be a transition to the selected

signal spectrogram with the position of the signal line in the center of the screen and 10 MHz bandwidth (the BAND mode). The first press causes warning message to appear: "Unsaved results of analysis

will be lost. Continue? If YES, press ‘1’ If NO press other key".

- transition to the current spectrogram.

- highlight signal string in red or green, for example, for dividing into legal and suspicious

signals.

- removing signal from the list of signals.

To save list of signals in the memory of the device, press on and then on .

In the future, to display a list of memory you need to press on , and further on .

Figure 24

Figure 23


26

Demodulation and listening of signal from the list by

clicking on .

3.4.1 Using the "AUTOMATIC ANALYSIS" sub-mode together with the "SPECTRAL SUBTRACTION" option.

To exclude the signals recorded in a detailed pattern (section 3.9), activate the pattern options

by pressing before analyzing. If the pattern has been created, button will be highlighted in

red.

Figure 25


27

3.5 “MEMORY” SUB-MODE This sub-mode is intended for storage of screen image in non-volatile memory of the device and

subsequent indication of:

• screen images;

• selected signal;

• results of work in the "AUTOMATIC ANALYSIS" sub-mode.

It is possible to transfer stored data to a PC in form of individual files and integrate

them into special software «ST131 Analyzer Pro» (see "ST131 Analyzer Pro. User’s manual»).

After pressing the shortcut context buttons are changed to the following:

- save image.

- get list of saved image.

- save the signal under the marker.

- get list of stored signals.

3.5.1 WORK WITH SCREEN IMAGES

To save the display picture, press , enter the digital identity of record or press and check the appearance of short inscription "Data is written! XX.XX-YY.YY», where X and Y - the initial

and final frequency of the stored spectrogram. Screen images are stored sequentially in the current group. Groups are formed according to the

current CHANNEL and MODE of operation. To call a stored image, press . After the list

appearance (Figure 27) selection of the desired image performed

by buttons and , then confirm your selection by pressing

.

You can upload only these images that relate to the channel and mode in which the device it used.

CONTEXT BUTTON FUNCTIONS ______________________________________________

- go to the display of the selected frequency range.

- removes the selected item from the list and memory.

- deletes the entire list from memory.

___________________________________________________________________________________

Figure 27


28

When displaying the saved image background color of the

screen changes to a light green color (Figure 28).


- return to list.

- saves the signal under the marker (see section 3.5.2).

- transition to the current spectrogram with parameters corresponding to the stored image.

- pressing this button allows to subtract the saved spectrogram from the current.

___________________________________________________________________________________

Since with saving image not a static image is stored, but a dataset, when pressed , the possibility of cursor measurements is provided, both directly spectrogram and the transition to the

"OSCILLOSCOPE" sub-mode with measurements of signal timing parameters.

3.5.2 WORK WITH THE EXTRACTED SIGNAL.

When working with the spectrogram is possible quickly to

keep the information about the frequency and signal level for subsequent analysis (manual creation of a list of frequencies).

Thus you can save the signal under the marker. Saving is provided with a central frequency corresponding to the position of the

cursor and 10 MHz bandwidth. To save signal press . Check the appearance of

short inscription "Data is written! XXX. XXXX», wherein X - the

frequency value of the marker. To view the list of saved signals, press . This

displays a list of similar structure with lists created in the "AUTOMATIC ANALYSIS" sub-mode (Figure 29).

3.5.3 WORK WITH THE SAVED RESULTS ANALYSIS

Access to stored results of the analysis performed by pressing from the "AUTOMATIC ANALYSIS" sub-mode. After that, there are 2 available shortcut keys:

- to store the result of a previous analysis. If there has not been analysis, the button will not appear.

- to get a list of all previously saved analysis results for the current channel.

To get information about used memory, press and .

Figure 28

Figure 29


29

3.6 SUB-MODE "SCALE".

In this sub-mode the level of signal is represented in the form of a multi-segment scale.

Input and output from this sub-mode are performed by pressing . "SCALE" is the main mode for the "RADIO 4–18 GHz” channel and auxiliary sub-mode for other

channels.

In fact, this sub-mode is a graphical representation of the interpretation of the signal level to

facilitate localization STM for their direct search. In general, the principle of display and search method are similar to devices for searching STM

like a broadband bug detectors. In this sub-mode the maximum signal level in the FULL RANGE or BAND mode is displayed.

Figure 30 shows the screen image of the "RADIO 30-4400 MHz” channel in the FULL RANGE mode.

1 The numerical scale grading

2 Signal level scale

3 Level and maximum signal frequency value

__________________________________Figure30_________________________________

Figure 31 shows image of the screen for the "RADIO 30-4400

MHz” channel in the BAND mode.

1 Lower, central and upper frequency of the current band.

2 Analysis bandwidth.

_____________________________Figure 31___________________________________

Setting of the scale relatively to the noise level with pressing .

The horizontal offset scale by pressing buttons and with 5 dB step.

Increasing the number of simultaneously red light segments will fit approximation to the

radiation source or increase of its signal level (considering the inherent features of a particular channel). In case scale is completely filled with red light segments and the location of the radiation source not

found, it is necessary to press the button repeatedly to shift the scale.


30

3.7 “MEASUREMENTS” SUB-MODE

This sub-mode is activated by pressing the while in these modes "FULL RANGE" and "BAND", a cursor line appears

on the graph and context buttons change their meaning (Figure

32).

In "DEMODULATION" mode with pressing the oscillogram of the demodulated signal appears.

CONTEXT BUTTON FUNCTIONS

_____________________________________________

– switch to representation of the signal in time domain (only for bands from 10 MHz and

below).

/ / - enable/disable display update or remove cursor line.

- activation of relative cursor measurements. After pressing and rotating the rotary knob there

appears auxiliary cursor line with indication of the frequency difference between the main and auxiliary cursor line.

– switching on the Hanning window function to improve the resolution of the weak signals against the background of strong signals (except the FULL RANGE mode in the "RADIO 30-4400 MHz"

channel). If selected, it is highlighted in red. ___________________________________________________________________________________

AUXILIARY CONTEXT BUTTON FUNCTIONS

- choose the type of drawing spectrum: continuum spectrum or spectrum envelope (if selected, it is highlighted in red).

Figure 32


31

3.8 “OSCILLOSCOPE” OPTION

This option is intended for analyzing signals in time domain.

Log in with pressing and . In the "DEMODULATION" mode transition in the waveform

of the demodulated signal occurs immediately after pressing .

This option is unavailable from the FULL RANGE mode of the “RADIO 30-4400 MHz” channel and

from the BAND mode with more than 10 MHz bandwidth.

1. Value of the time segment per one point of

indication.

2. Value of the tuned frequency (the center frequency

of the current band).

3. Length of the time interval for the graph.

4. Value of the vertical sensitivity.

5. Root mean square (RMS) value of the signal level.

6. “Peak to peak” signal level value.

CONTEXT BUTTON FUNCTIONS _____________________________________________

– swtch to the spectrogram.

Repeatedly pressing the button will result in selection of the following functions:

- cursor measurements sub-mode.

– activation access to modify the horizontal time. Change by rotating the rotary knob.

- activation access to change the center frequency of the current band (only for the "BAND" mode). Change by rotating the rotary knob.

– activation access to change the trigger line. Change by rotating the rotary knob.

- activation of the second cursor line for relative cursor measurements.

___________________________________________________________________________________

Repeatedly pressing the button will result in selection of synchronization results display:

– synchronization is disabled.

– oscillogram is displayed dynamically at the screen under the conditions of synchronization.

– oscillogram is freezed under the conditions of synchronization that ensures readiness for the

cursor measurements.

Figure 33


32

AUXILIARY CONTEXT BUTTON FUNCTIONS _____________________________________

- access to a choice of synchronization conditions:

• «->» - synchronization happens if the instantaneous value of the signal above a predetermined

level. • «<-» - synchronization happens if the instantaneous value of the signal is below a predetermined level.

Successive pressing will select: - disable the cursor line.

/ - start/stop redrawing the waveform.

______________________________________________________________________

Automatic alignment of the waveform relative to the center of the screen occurs by

pressing the button.

Zoom the waveform vertically by pressing the buttons and .

Second cursor line appears when you press and that ensures cursor measurements.

1 Sweep time value in the position of the auxiliary

cursor line

2 Signal level at the location of the cursor line

3 Value between the time values of main and auxiliary

cursor lines

4 Frequency corresponding to the time period specified

in item 3.

There is a feature of interpreting the results of cursor measurements in the oscilloscope for the

BAND mode. To get the true value of the frequency of a carrier, you must go to the "SPECTRUM" option, or recalculate the value obtained from the measurement of a cursor by adding or subtracting this value

with the value of the tuned frequency. Time values for cursor measurements in this case remain true always.

Figure 34


33

3.9 OPTION «WATERFALL»

This option displays signal spectra changes in time and

looks like signal amplitude color projection on frequency-time plane.

Red color – maximum signal level. Blue – minimal.

This indication form helps to identify signalsб emitting with different frequency and time (pseudorandom adjustment of

operating frequency PAOF). On picture BLUETOOTH standard

signal connection is shown, it can be classified as PAOF.

Selection of this option is done by pressing and buttons.

Color spectrum setup is done by regulating signal level in spectrogram window by and buttons.

When working in this mode it is recommended to turn off averaging by pressing and selecting «OFF» line.

Maximum waterfall update speed is done with 10MHz band or lower. Minimum, respectively, in

«FULL RANGE» mode. Cursor measurements in this option is not intended.


34

3.10 “SPECTRAL SUBTRACTION” OPTION

This option can only display those signals that were left after subtracting the current spectrum from

previously created ones.

The main purpose of creation the pattern spectrum is to use it as a legitimate signal spectrogram, which obviously does not have STM signals within the controlled area. Thus, it provides the sharp

reduction in the amount of signals to be processed by subtracting the pattern spectrum.

Spectrum which subtracts from the current spectrum (hereinafter, the pattern) is created in three

ways:

First method is a one-time creation of a pattern. This

means that the current spectrum becomes the pattern just by pressing the button. New signals will be displayed in

green color over the background gray pattern (Figure 35). Activation this method provides by pressing

and selecting .

Second way is to save pattern in the device’s memory. To do this, go to the "Memory" sub-mode by

pressing then press , select the name and click on the rotary knob. Having been stored in the non-volatile memory of the main unit, this pattern can be used repeatedly.

To use the stored pattern, you need to load it from memory by pressing and selecting the desired image. Then press without leaving the "Memory" sub-mode.

Third method is fundamentally different from previous ones because it does not store the displayed

spectrum but the entire spectrum with a fixed high frequency resolution in the maximum range

frequency limit will be saved. This way is relevant and implemented to the "RADIO 30-4400 MHz" and "WIRE 30-3000 MHz"

channels. This saved spectrum we will call the detailed pattern.

To create the detailed pattern, go to the “AUTOMATIC

ANALYSIS " sub-mode by pressing . Next, switch to the

auxiliary context buttons by pressing the rotary knob and press . If the detailed pattern has been created before, there

will be warning message: "The pattern was created before. Rewrite it? If YES press '1'. If NO press other key." If the

pattern has not been created previously, the screen will

immediately show an information window of the pattern being created (Figure 36).

Time to create a detailed pattern is about half an hour.

Finally there will be the message: "Pattern created successfully. Pattern difference option can be used".

The pattern having been stored in non-volatile memory of the main unit can be used repeatedly like in the second method. In

addition, it is possible to transfer the detailed pattern to the PC

and save it into a file and then upload it again into the ST131 main unit later. See «ST131 Analyzer Pro. User’s Manual" to get

description of that process.

Figure 35

Figure 36


35

To use the detailed pattern, you need to press and being in the «BAND» mode with not more than 200 MHz bandwidth. If the pattern has not been created, it appears: "The pattern was

not created yet."

When the "AUTOMATIC ANALYSIS" sub-mode is used, the bandwidth value could be any, up to the

maximum frequency range. Read more about working in this mode (see section 3.4)

Features of these pattern are following:

Spectral resolution.

In first and second methods spectrums are recorded with a resolution corresponding to the resolution

of the screen. This resolution can be checked by pressing . For instance, the spectral resolution in the FULL RANGE mode is 16 MHz and in the BAND mode for the 0.5 KHz bandwidth is 19 Hz.

Herewith the threshold sensitivity in the FULL RANGE mode is about -90 dBm, while in the BAND mode for the 0.5 KHz bandwidth is about -160 dBm.

If you use a third method, detailed pattern will have a fixed frequency resolution 40 KHz.

Location for recording of patterns.

To avoid capture "dangerous" signals to the pattern, recording must be performed at a distance from

the place of work. This distance is determined by considering that the level of the "dangerous" signals

is below the threshold sensitivity of the ST131 at the place of creating the pattern and consequently only “legal” signals will be recorded.

Ten meters or more will be enough for the first and second methods in the FULL RANGE mode. For the bandwidth below 10 MHz in BAND mode and for the detailed pattern it is fifty meters or more.

Restrictions.

It should be noted that in first two methods use of a pattern is limited by the fact that band of the pattern should be equal to the current working band. Thus, considering the purpose of search signals,

it means if you work in FULL RANGE mode, only one pattern is enough. If you need a sequential shift band after the band, you have to create the patterns for all these bands.

It can be done by writing patterns for all bands and later recalling them from memory (second

method). Also you can make pattern from a predetermined distance each time after switching to the next band and return to the place of work (first or second methods).

In third method, there is no such difficulties. The detailed pattern exists as unified for the entire frequency range so you can use it for any frequency band you set.

Generally, use of the detailed pattern is preferably, but sometimes, using first two methods is justified. For example, when there is a limited time or inability to provide enough distance from a work place to

make pattern. Anyway, joint using all these methods is possible.


36

3.11 "DIGIT" OPTION

Option is intended to detect and analyze signals related to the standard wireless and cellular data

transfer. Figure 37 shows the position of these standards on the

spectrogram in the FULL RANGE mode.

Access to this option is realized in the “RADIO 30-4400

MHz” channel by pressing .

Indication of level of the signal terminals and base stations

is determined by following criteria:

• Using the optimal detector type for the particular data

transfer standard.

• Signal frequency is corresponded to the frequency range

of terminal devices or base stations of the standard.

• Time parameters of the detected signal are corresponded to the standard (only for GSM 900/1800

and DECT).

Figure 38 shows the screen if the “DIGIT” option is selected.

1. Graphic representation of the average signal level within the frequency band specified by given

standard.

2. Threshold level of graphic indicator.

3. Digital data transfer standards.*

4. Averaged level of detected signal (dBm). Absence

of indication (---) of means no signal with a level

a sufficient to identify it.

* 2.4 GHz - ISM frequency range - 2400-2485 MHz (WLAN, BLUETOOTH and other signal)


– Selection of measurement level of base stations.

– Selection of serial automatic scanning of all standards (when is highlighted in red light).

- Selection of the dynamic range of graphic display of signal level (20, 40 or 70 dB)

- Selection of simultaneous display only for GSM and 3G. When you select a button is

highlighted in red.

- setting the threshold level of graphic indicator relative to the current signal level (maximum

sensitivity in case no signal).

AUXILIARY CONTEXT BUTTON FUNCTIONS _____________________________________

- On/off identification of signals on the time parameters. ON position is default and highlighted

in red. Applicable only for the GSM 900/1800 and DECT. _______________________________________________________________________

Figure 38

Figure 37


37

Setting the threshold display by pressing button or “RESET” context button. Threshold

level of graphic indicator (position 4, Figure 38) will show current signal level or the current noise level

if there are no signal. When use auto-scan that will affect to all of the standards, as for manual selection

- only chosen.

To switch to manual mode you must press or press

any of the buttons or . In this case backlight

will change to black. The selector (Fig. 38 pos.1) of the

standards can be moved manually by the buttons and

or rotation of the rotary knob.

When you press that performes move to the spectrogram of the selected standard (Figure 39). By clicking on

the it is provided transition to the waveform. In this case the default settings of the spectrogram and oscillogram are

optimized for current data transfer standard. Back to indicate

levels is continuing to press .

Figure 40

Figure 39


38

3.12 NON-LINEAR JUNCTION DETECTOR OPTION (only for ST131N)

This option provides an analysis of wire lines connected to the presence of electronic elements

with non-linear characteristics - diodes, transistors, etc. They are, as a rule, power supply elements and

input overvoltage protection elements.

The principle is based on the generation of a stable sinusoidal signal to the line and analyzing

the presence of the third harmonic of this signal, indicating that the line is connected to a non-linear

element.

Option is activated from MENU by pressing "SELECT CHANNEL" item and select "NON-

LINEAR JUNCTION DETECTOR” item from the start menu.

After selecting this option on the screen displaying the scale of the signal level with all the

pairs numbers of contacts of the RJ-45 connector and the inscription "Сycle of preparing ... XX%",

indicating the passage of a period of adaptation to the connected line (XX - percentage of completion

of the process of adaptation).

1 Level scale

2 Number of a pair


- Forced adaptation

- Choosing between automatic (highlighted in red) and the serial manual control pairs.

- Selecting dynamic range display.

In the process of adaptation performs adjust the level of the second and third harmonic to the level of

the signal generator. Device must be disconnected from the line during adaptation.

Consecutive measurement and indication of the level of the second and third harmonic is started

automatically after adaptation (Figure 41). An analyzing pair is highlighted in green.

When an electronic device with non-linear components in its input circuits is connected to the explored

wire line, level of the third harmonic of the test signal is rising in position 2 at the figure 41 and position

3 at the figure 42.

Figure 41


39

1 Level of the second harmonic.

2 Level of the third harmonic.

3 Marker for manual select of a pair.

4 Numerical value of the relative level of the signal.

Manual selection of the pair is performed by turning

the rotary knob with displaying the selected pair in position 3,

Figure 41.

For a detailed analysis of the selected pair (Figure 42), press on the or the rotary knob.

To return secondary press on the or the rotary knob.

1 Absolute level of the testing signal in dBm.

2, 3 Relative level of the second and third

harmonic of the signal.


- Enabling the generation of the test signal (if enabled, is highlighted in red light).

___________________________________________________________________________________

In the detailed analysis of the selected pair (Figure 42) you can select the pair manually by

rotating the rotary knob, too. In this case, the number of analyzed pairs will be changed in the left top

corner: "CURRENT PAIR: XX".

Figure 42

Figure 43


40

4 WORKING WITH THE ST131

4.1 WORKING WITH “RADIO” CHANNELS.

4.1.1 PREPARATION FOR OPERATION IN “RADIO 0.01–30 MHz” CHANNEL.

Plug in to the "CH1" socket of the main unit with supplied telescopic antenna or with the other,

corresponding to a given range.

When using ST131 as a panoramic analyzer plug in intermediate frequency output of the radio

emitting device to the “CH1” connector with HF cable.

It is desirable to use “ST131Analyzer Pro” software for better display information.

Turn on the main unit and select the "RADIO 0.01-30 MHz” channel.

4.1.2 PREPARATION FOR OPERATION IN “RADIO 30–4400 MHz” CHANNEL.

Insert batteries in ST131.UHF converter (see section 1.7) or connect to a power supply.

Connect UHF antenna ST131.UHF.A.

Connect ST131.UHF converter to the “I/O” socket of the main unit.

Switch on ST131.UHF by moving power switch to “ON” position (position 4, Figure 3). Control one

time lighting of the indicator “LINK” and continuous lighting of “ON/LOW BAT”.

Turn on the main unit and select from MENU - "RADIO 30–4400 MHz” channel.

Thereafter, within a few seconds there will be identification and verification of ST131.UHF converter

followed by successive messages "Plug the ST131.UHF" and "Checking of the ST131.UHF". At the end

of the information on the screen will correspond to the FULL RANGE mode. In this mode there is a

sequential scan of the range, which is accompanied by a flashing indicator «LINK» of the ST131.UHF

converter once per second. When you select "BAND" or "DEMODULATION", this indicator is off (stop

scanning).

4.1.3 PREPARATION FOR OPERATION IN “RADIO 4-18 GHz” CHANNEL.

Connect SHF detector ST131.SHF to the “I/O” socket of the main unit.

Switch on the main unit and select in MENU - “RADIO 4–18 GHz” channel.

4.1.4 OPERATION IN “RADIO 30-4400 MHz” CHANNEL.

In advance, if possible, it is necessary to ensure secrecy of the search operations together with

the creation of conditions for activation - as well as remotely switched STM and STM based on GSM and

3G standards. Optimal for this purpose is an imitation of an important meeting with the appropriate

sound accompaniment. The real situation may be complicated for example, if the room has secretly

installed cameras.

It is expedient to consider a real microphone sensitivity of STM when searching. This is

corresponded usually no more than 10 meters. As a rule, attempts to establish STM as close as possible

to the venue of the negotiations – at the meeting table or interior elements in the immediate vicinity.

It is also need to be considered that:


41

Modern STM are using different kinds of signal formation, modulation and coding. Along with the

general detection method, which can detect most of analog and digital radio emitting STM there

are some specific STM, where special methods must be applied.

ST131 is ultrawiderange receiver which can detect signals with wavelength from tens of meters

to centimeters. Radio waves propagation with such difference in wave lengths, especially in urban

areas, are significantly different.

Signals re-reflection from walls, ceiling and interior can give false signal level representation.

4.1.4.1 Generalized search model with using of ST13

Divide search of the radiating STM into two consecutive tasks:

• Detection of radio emission.

• Identify the location of the radio emission source.

Generalized model of action sequences with using ST131 "PIRANHA II" is shown in Figure 44.

Figure 44

4.1.4.1.1 Initial settings

Initial settings are: Determination of frequency range, in which STM detection will be done

Determination of necessary sensitivity

Detector selection

Detailed template creation.


42

4.1.4.1.1.1 Determination of frequency range Frequency range contraction is possible when additional information available. In case

of absence of additional information all possible frequency range on given channel is selected.

“Popular” ranges of STM are 110-500MHz and GSM frequencies (see 4.1.4.4)

4.1.4.1.1.2 Determination of necessary sensitivity

Sensitivity of the device depends on the band (see section Annex 2) and is defined by the

displayed noise level.

In future, we will accept detection of signal exceeding its level above the noise at 10dB.

In FULL RANGE mode noise level is no worse than –88 dBm (about 10 µV).

When selecting the BAND mode and the minimum bandwidth - 0.5 KHz noise value will be about

–150 dBm (about 0.01 µV). Clearly, this noise level can be seen only without signal observed in the

measurement bandwidth.

Thus, range of changing sensitivity due to changes in the frequency band is up to 60 dB (1000

times). Before starting work, you must decide what level of radiation is to be detected. All possible levels

of radiation for modern STM is greatly wide. In very general case, we can talk about radiation levels

from a few watts up to tenths of microwatts. For example, the radiated power of the "classic" STM with

FM modulation with a range of several hundred meters - is the tens of milliwatts.

Maximum power of GSM transmitter is 1W (at a maximum distance from the base station).

Minimum real power of 3G and 4G transmitters are decimals of microwatts (with minimum

distance from the base station).

In “usual” practice it is about milliWatts.

Let’s define, which sight band it is necessary to use and on which distance from examined

interior UHF converter antenna should be settled.

Figure 45 shows an example on the dependence of level of the received signal on the distance

from the source (for a frequency of 2 GHz). Based on threshold sensitivity of the ST131, depending on

the analyzing frequency band (red lines) are determined the maximum distance at which the signal can

be detected with a given power.

Figure 45


43

Thus, for example, to detect 10µW transmitter being at the center of the circular room with a

radius 10 meters must select a span of not more than 10 KHz or if the transmitter power will be 1 mW,

it is sufficient 100 MHz band.

You can see the situation from the other side. Increase the frequency band with keeping the

predetermined sensitivity. In this case you need to move the antenna along the surveyed interior at a

certain distance and at a certain interval. For example, if you chose the 100 MHz band this distance

should be no more than three meters. This means that every three meters need to stop and scan a

given band with selected frequency range (very conditional each stop will take about ten minutes). Or,

subject to the antenna and ground surfaces, use the FULL RANGE mode. In this case there is no need

for intermediate stops, however, the high probability of missing signals from the transmitters of less

than 10 µW take place.

4.1.4.1.1.3 Choosing detector.

To search for radio signals with unknown parameters, there is obviously preferable to use a

peak-hold detector. Choose a peak-hold detector with and then pressing the "PEAK" item. A

classic application of this detector is the retention (accumulation) of spectrum peaks when needs a fixing

fact of rare occurrence of a single signal or pulse sequence with unknown time of its appearance. When

searching for signals with unknown parameters its use avoids of passing variable time signals (reset of

accumulation results by pressing ). A “clog” of the spectrum is possible with this kind of detector.

4.1.4.1.1.4 Detailed template creation.

See 3.9.2

After presetting go to potentially dangerous signals database.

4.1.4.1.2 signals database creation

As it is seen from fig. 44 there are two main ways – manual and automatic. Given database represents a set of signals, exceeded the predetermined threshold.

Formally, these signals classification – demodulation etc. is done in next step – signal analysis, but of course, with manual work these actions can be combined.

Cost and time estimates with using of different primary database creation methods Extreme cost and time estimates variants are presented. Depending on work specifics combination of

these variants are possible.

4.1.4.1.2.1 Manual signal database creation method

For using of this method press . Next, place the cursor on interested signal and press

Signal will be saved. It must be noted, that there can be only one list of this kind, unlike from AUTOMATIC ANALYSIS

result lists.

4.1.4.1.2.2. Automatic signal database creation method

For automatic signal creation, for example, being in “full Range” mode press . Device will

go to “Automatic analysis” submode. (see 3.4)


44

Set detection threshold

Threshold setting – thin red line – (In indication - )

is done, with 1dB step by buttons and rotary encoder rotation. Let’s set up threshold on 10dB higher then noise level (on

fig- NOISE=-88дБ) i.e. -78dB. This value is displayed on upper right corner of the display.

Set peak average

Turn on previously created detailed template (see 3.9). “TEMPLATE” button will become red.

Activate spectrum analysis by pressing .

Values at the upper right corner (052>045%) indicating: “052” –

number of detected signals, “045%” – percentage expression of

completeness of the process.

At the end of the analysis this place will be indicated like on the figure: “001/78”, where 001 –first detected signal (cursor

will be placed there), 78 – total number of detected signals.

Signal frequency value is shown between extreme values

of frequency range – “125.000MHz” on figure, level – in “cursor” field. On figure it is -063dB.

Save received list in memory of the device with using of “MEMORY”

submode (see 3.5).

For that press , then . After record number selection and pressing record will be saved.

Next move to the signal analysis

4.1.4.1.3 Signal analysis

Localization of a transmission source is a final stage of work. To get there, it is helpful to perform a preliminary analysis of the signals in order to exclude non-hazardous signals. Features of the non-

hazardous signal in this case are following: no modulation, the demodulated sound of the television or

broadcasting station, some radio talks which do not have correlation with inside room talking. All other modulated signals including "digital" signals should be treated as hazardous signals anyway.

In general, use of sound control, as a method of identifying STM is currently limited. A classical STM

is implemented by using analog modulation techniques (mostly, this is the frequency modulation) and can be listened and identified, but in case of "digital" modulation there is no correlation between the

background sound and the digitally modulated signal.

For analysis start signal from the database should be called.

In case of manual signal database creation method, for calling signal list from memory,

being in “MEMORY” mode press (see 3.5.2).


45

In case of automatic signal database creation method (“AUTOMATIC ANALYSIS”

submode) for calling signal list from memory press then and .

For signal analysis select it from the database (on figure

database was created by manual method) and turn on demodulator

by pressing . Select different types of demodulators by

pressing and its selection form the list. Listen to the

sound. Use of headphones is preferred.

Use the fine-tuning option to get the well-tuned signal. To do this,

press (the button will be highlighted in red). When

enabled, the tuning will be performed by rotating the rotary knob

with a step of 100 Hz.

When deciding to exclude signal from further analysis go out from “DEMODULATION” mode by pressing and then press ..

If signal is not being heard (for example, it is ceased to exist in broadcast) or more detailed

analysis is needed, go to the spectrogram indication. For that, go out form “DEMODULATION” mode by pressing and .

If signal exist in broadcast, it will be shown at the center of the screen with 10MHz band.

Standard set of actions is possible here:

Increase/decrease of sight band – by and buttons.

Transition to signal oscillogram is done by pressing and . Transition to oscillogram

of demodulated signal – being in “DEMODULATION” mode – by pressing button. Returning

to the spectrogram – subsequent press of .

Is there is no operational possibility for signal source detection and necessity of more detailed

radio emitting analysis, use software “ST131Analyzer.Pro” options. Particularly functions, which are

absent when working only with a main unit ST131 – “Waterfall”, “vector analysis”, WAV file recording

for analysis by other manufacturers software.

4.1.4.1.4 Finding the source location

Detection is based on increasing the value of received signal

level on the screen ST131 approaching the source of the signal (so-called amplitude method).To implement this method it is

necessary to replace the peak-hold detector used for detecting radio signal. Choose what type of detector is determined

on the basis of Annex 1. Mainly, there is used the "PEAKx8" item

as a compromise option. But to search for signals with a constant carrier frequency, the “AVERx8” option is better.

For correct detection of the location of their sources is desirable

to provide an indication of only one signal. This is achieved by positioning the cursor on the desired

signal and pressing (when the BAND mode). Signal will automatically be in the center of the screen. Next, button selects the band for optimal display of this signal – one on a figure (mostly it is 1 to 10 MHz bands)

Next, by pressing go to antenna movement in space with initial task of direction determination of emitting source and subsequent moving towards the source.

Approach sign will be increasing value of signal level (on figure it is -48.2dB)

Using of “SCALE” submode is more convenient (see 3.6)


46

After going to this mode press . It will set null scale value on the maximum signal level. Select

necessary scale of signal level change. In general most dynamic variant (30dB) is used.

In general, if you see the signal level about -40 dBm and higher, that means the signal source is pretty close (a few centimeters to one meter).

4.1.4.2 Special cases of radio emitting SMT search

4.1.4.2.1 Wireless data transfer standards SMT detection

When detecting this kind of SMT it is recommended to use DIGIT option (see 3.10)

Table 1 shows the currently existing digital wireless data transmission standards. Of course, the list

is not complete and depends on the geographical location as well as the state of the telecommunications

market.

Table 1

STANDARD Frequency range (МHz) Bandwidth (МHz)

1 CDMA

IMT-MC-450

453-457.5 uplink

463-467.5 downlink

1.5

2 GSM-900 890-915 uplink

935-960 downlink 25 (124 channels by 200 KHz)

3 GSM-1800 1710-1785 uplink

1805-1880 downlink 75 (374 channels by 200 KHz)

4 DECT 1880-1900 20 (10 channels)

5 UMTS (3G)

3G1 1920-1935 uplink

3G2 1935-1950 uplink 3G3 1950-1965 uplink

3G4 1965-1980 uplink

3G1 2110-2125 downlink 3G2 2125-2130 downlink

3G3 2140-2155 downlink 3G4 2155-2170 downlink

5

6 IEEE802.11b,g,

n 2400-2485

80 (13 channels by 20 МHz with step 5

МHz and 1, 6 and 11 channels are not overlapped).

7 BLUETOOTH 2400-2480 80 (79 channels by 1 МHz)

8 LTE FDD 2500-2570 uplink

2600-2680 downlink from 1.4 to 20

All of these "legal" standards can be used for transfer of illegally obtained information. It is

promoted by a number of factors, of which the main ones are: • Availability

• Relatively low price

• Difficulty of detection

• In most cases, information can be transmitted almost anywhere in the world.

These devices are high-tech products with wide possibilities.


47

As an example, some possibilities of the smartphone are following:

• Work in almost all telecommunication standards: GSM, 3G, WLAN, BLUETOOTH and LTE (4G).

• Transmission of video.

• Preserving and subsequent transmission of audio and video data on the basis of the installed software.

For example, data compression, followed by transmission to an arbitrary time by LTE broadband channel.

When searching, the illegal device can be mistaken for legal because there was no obvious

distinguishing features.

Possibility of remote on/off on the STM transfer complicate it by detection and requires more

special additional measures, for example, creating a situation provoking insertion STM (the simulation

of an important meeting). Do not forget about the possible presence of secretly installed video cameras.

Options: from "forgotten" phone set - to number of specially made all range, highly sensitive

and high-energy devices.

Modern cell phone is transmitting:

• at the moment of establishing a connection with a base station;

• mainly, while sound presence at the phone (talk) after the connection is already established;

• while data transfer (e.g., SMS).

All the rest time the phone is receive-only. No radiation - no detection.

The same way search is complicated by the absence or long delays (up to several hours) the

broadcasting after blocking communication, for example, such as jammer devices.

CDMA

Detection of STM with this channel transmitting information is complicated with the following factors:

• Radiated power of phone set has a strict dependence on the distance from the base station with

a tendency to minimize it. Being in close proximity to base station radiated power is no more than 10

µW (maximum – 200 mW).

• The emitted signal has a noise-like structure.

Based on these factors, it is recommended to choose the control of this standard in manual mode.

The spectrogram of the signal is similar to that shown in figure 35. Transition to the spectrogram by

pressing . In this case the default display settings are optimized for this standard. Return to display

levels performed by secondary pressing on .

GSM 900/1800, 3G

Specially manufactured STM based on this standard or

cellular handset can use any of these three ranges.

Therefore, for operative search, it is recommended to use

simultaneous viewing only these standards. This is done by pressing

the "GSM+3G" (Figure 47).

UMTS (3G) signals have CDMA noise-like structure.

Figure 47


48

The radiated phone set power depends on the distance to the base station and amounts from

hundreds of milliwatts to microwatts.

DECT To listen and transfer the information there can be used, for

example, phone sets with function of listening rooms or "baby

monitor".

Detection range of the base station and phone set is about

five meters (different variants with specially reduced radiated power

are possible).

For visual identification of the signal, press the button

and compare oscillogram with the trace shown in Figure 48. To carry

out cursor measurements, click on the rotary knob. At presence of DECT receiving signals at the

reception point from several sources of oscillogram they displayed on the screen randomly, but with a

period equal of about 10 ms and duration time of about 0.4 ms.

Since the DECT frequency range of cell phone and base station is the same, they will be visible

in the oscillogram simultaneously.

2.4 GHz (WLAN + BLUETOOTH + other license-free data transmission standards).

Before using the ST131 it is recommended to evaluate the state of ether of this range.

Information on the status and number of PC connections to "own" network or peripheral devices is on

the inner site of router or network administrator.

For the analysis of "alien" connections, use one of many different programs of monitoring and

analysis. This type of program usually displays the following information: number of access points, used

channels, the signal level at the receive point, the MAC addresses, etc.

WLAN

This standard can be used for:

data transmission from PC. Time and bandwidth are

uncertain.

Video surveillance. WLAN video camera characterized with

high traffic and a relatively large emitted power. Working

time corresponds with events in the monitored area. Screen

picture when you receive such a signal is shown in Figure

49.

BLUETOOTH

Using this standard is possible with the following variants of unauthorized transfer of information:

transfer data from PC, notebook, phone, smartphone, etc.

Figure 48

Figure. 49


49

receiving and transmission of audio information with the use of a headset.

Emitted power devices of this standard varies from relatively high up to tens of milliwatts (data

transmit), and tens microwatts (wireless headsets of cell phones).

Additional complexity of its

detection is applicable use in this standard

the method of pseudorandom frequency

hopping (FHSS). In this case it is

recommended to use the "WATERFALL"

option of software.

LTE FDD (4G)

Signals have noise-like structure. Radiated power amounts tens of milliwatts.

4.1.4.2.2 Detection of a single RF pulse (hereinafter referred to SRFP)

In the context of the purpose of the ST131 to the sources of pulsed signals are the STM which

preliminary accumulate and subsequent transfer the information by radio (so-called "pulse

transmitters").

In all modes, a single RF pulse duration of 500 ms or more can be detected without gaps.

SRFP are hallmarks: indefinite time and rare appearances on the air (e.g., once a day), a broad

band signal (tens of MHz) and the relatively high radiated power (up to several watts).

SRFP detection involves the use of a peak-hold detector function and spectral subtraction. Detected

signal from SRFP will be presented in the form of spectral lines. Information about the time of the signal

and its duration is absent.

Localization the STM with SRFP transmission is almost impossible by using the amplitude

method because of too short lifetime signal. In this case it is recommended to use alternative

methods of searching STM: visual, non-linear locations, etc.

4.1.4.2.3 Detection of RF pulse sequence (RFPS).

In context of purpose of the ST131 to the sources of such sequences are the STM with different

variants of pulse modulation, such as pulse-width (PWM), pulse-position (PPM), pulse-code

(PCM), pulse-amplitude (PAM), as well as combinations thereof.

RFPS is detected in the frequency and time domains.

Comparison analysis of the frequency and time domains:

Advantages Disadvantages

Spectrum Detection across the entire

frequency

Low detectability.

Lack of information about the duration and period of signal

Oscilloscope High sensitivity Detection in a band not more than 60 MHz.

Absence of reliable information

about the frequency and level of signal


50

In the FULL RANGE mode the pulse sequence with a pulse width of 0.1 ms and a duty ratio of

1:1 with no gaps are detected but when duty ratio of 1:100 the detection time will be about 30 seconds

and for duty ratio of 1:1000 - more than 500 seconds.

Pulse width 0.1 ms at a duty ratio of 1:100 corresponds to the DECT network parameters and

is close to 2G network.

Reducing the analysis bandwidth increases detectability. So when the band is 10MHz or less and

duty ratio of 1:100, the detection time will be less one second.

If there is information about the carrier frequency of the radio pulse is advisable to use the

"PULSE" option specially designed to detect the sequence of radio pulses. Maximum band simultaneous

analysis is 60 MHz and a maximum duration of the screen visible signal is equal 200 ms.

When using "PULSE" option, pulse sequence with a pulse width of 0.1 ms at a duty ratio of 1:1

and 1:100 are detected without time gap (when “MAX TIME” option value and the time scale value

are maximum).

To activate it, being in the FULL RANGE mode switch to auxiliary context buttons (pressing the

rotary knob) and press . Next step:

• Set the center frequency repeatedly pressing on to chose the "FREQ" item and further rotation

of the rotary knob to set the desired frequency. Frequency step is selected in the pop-up list after

pressing the button.

• Select the maximum duration of the signal from the pop-up list after pressing the button .

Check the correct installation, in the time scale should be 210 ms. Otherwise, pressing the select

the "HORIZON" item and rotate the rotary knob to the proper setting.

At maximum value of the “MAX TIME” option the device’s reaction to click slows down to one

second. Selecting that maximum time allows the user to choose

between the detection and correct representation of pulse

sequences with short pulse duration and correct representation of

pulse sequences with long duration. Press the or button

once to cancel the automatic waveform alignment relative to the

center of the screen. The "AUTO" sign in the upper right corner

will disappear. Press , then select and rotate the rotary knob,

set the threshold level to the required position.

• Press and select . The appearance of the inscription "WAIT ..." informs that

the device is waiting the rising edge pulse to exceed the threshold level.

Figure 45


51

When there is the radio pulse exceeding a predetermined threshold

level, it will be captured and displayed (Figure 46).

Localization of STM with RFPS transmission is

provided by using the "SCALE" sub-mode and selecting the peak-

hold detector with the maximum averaging factor, such as

"PEAKx32" or "PEAKx16". Technique is similar to finding signals

with a constant carrier frequency.

4.1.4.3 OPERATION IN “RADIO 4–18 GHz” CHANNEL

When selecting this channel display information will correspond to fig. 47

Initially set indication threshold depending on current signals

level (background substraction) by pressing .

When signal detected number of colored green segments,

indicating signal level with constant carrier frequency or moving of signal red segment, indicating impulse signal level, will rise.

Numerical signal level values are indicated above level scale.

For visual assessment of detected signals and measurement go to «OSCILOGRAPH» option by

pressing (see 3.7)

- dynamic range indication selection (30 or 60Db on full scale).

- averaged signal selection (see appendix 1)

If «OVERLOAD» sign appear it means presence of signal, exceeding maximum input signal (see 2.2.1).

In this channel sound control of dectected signal is provided.

It must be noted that in given frequency range, in urban area, prevail ISM 5.6GHz signals, radiation from security sensors and fire alarms.

4.1.4.4 OPERATION IN “RADIO 0.1-30 MHz” CHANNEL.

With this range, screen information will correspond to the FULL RANGE mode.

In general, the sequence of use of modes corresponds to the "RADIO 30-4400 MHz" channel.

When using ST131 as a panoramic analyzer set central panorama frequency on radio receiving

device. Sight band can be seen from specifications of radio receiving device.

Values of intermediate frequencies should be in range of selected channel.

Figure 46

Figure 47


52

4.2 WORKING WITH "WIRE" CHANNELS. 4.2.1 GETTING STARTED IN THE “WIRE 0.01-30 MHz” and “WIRE 0.3-15 KHz” CHANNELS

Connect the ST131.AWL adapter to the ST131 main unit. Connection is made to the same name

terminals. Turn on the main unit and select from start MENU the “WIRE 0.01-30 MHz” channel to work in

the high frequency range or the "WIRE 0.3-15 KHz” channel to work in the audio frequency range. After identifying the ST131.AWL adapter, information on the screen will correspond to the FULL

RANGE mode.

Connecting ST131.AWL to study lines provided by:

using the probes;

connecting directly to the investigated line with RJ-45 connector.

Do not allow the simultaneous connection of coupling probes and RJ-45 connector to the

different lines. This can lead to damage of the equipment, because the lines will be galvanically

connected to each other (probe contacts are always connected to the input of ST131.AWL).

In case of line voltage presence with a value above five volts, the "LINE" LEDs light up, located on the top of ST131.AWL. Moreover, if two LEDs are lit - the line has AC voltage, if one - DC voltage.

Brightness depends on the level of voltage in the line.

LED indicator PWR/LINK with connecting and during operating lights solid green. Flashing once per second occurs with the facilities transmission from the main unit such as the selection of pairs of

contacts RJ-45 connector and the gain of the input amplifier of ST131.AWL.

4.2.2 PREPARING TO WORK IN THE “WIRE 30-3000 MHz” CHANNEL.

Install the batteries in the ST131.UHF converter (see section 1.7) or connect the power supply Connect the wire line RF adapter ST131.RAWL to the ST131.UHF converter.

Connect the UHF converter to «I/O» socket of the main unit. Turn on ST131.UHF with transfer power switch to the «ON» position (position 3, Figure 4).

Check the single indicator flash «LINK» and continuous indicator light «ON/LOW BAT».

Turn on the main unit and select the "WIRE 30–3000 MHz” channel in start MENU. Thereafter, within a few seconds identification provides and verification of the ST131.UHF

converter followed by successive messages "Plug the ST131.UHF" and "Checking of the ST131.UHF". At the end the information on the screen will correspond the FULL RANGE mode.

4.2.3 GENERAL REMARKS

Non-contact methods with using of inductive and capacitive sensors are used during collection

of information with using wirelines. Remote detection of these is difficult. It is recommended, if possible,

visually check investigated line along the entire length.

Wireline can be used as a source of intercepted data, power or transmitting antenna.

To measure the line voltage using any type voltmeter.

For preliminary wireline length use devices for cable length define. It is reflectometer or «Cable

tester» option in a device. This test is also good for wireline pair identification. For a preliminary assessment of the length of the wireline use devices for cable length define.

It is reflectometr or an option in the device under the name "cable tester." The tester also will be useful for identification of the wire pairs.


53

For detection bugging devices, galvanically connected to the wire lines, use the option «Non-linear junction detector» (only for ST131N).

Powering some types of Bugging devices is done by the same lines, which are used for intercepted data transfer. For compulsory activation of such kind of devices "ST131.OV" Biasing Module

should be used. Data transfer from Bugging devices is possible both in acoustic frequency range and with

transfer on carrier frequency. In first case “WIRE 0.3-15 KHz” channel is used, in second-“WIRE 0.01-30 MHz” and “WIRE 30-3000 MHz”.

4.2.4 OPERATION IN THE “WIRE 0.3–15 KHz” CHANNEL

At initial selection of this channel the screen information will correspond to the FULL RANGE

mode.

Modes "BAND" and "DEMODULATION" in this channel are inactive.

In this range, a check is sound signals in lines tested. Separately considered:

wired telephone with telephone line

security and firefighter alarm systems with sensors.

Wired telephone with telephone line

Telephone and telephone lines are the most common places for Bugging devices Installation.

Telephone line can be used directly for acoustic data transfer, powerline and antenna for radio

transmitting devices.

Receivers of acoustic data can be both

microphone of telephone and specially installed microphone.

In dual wire telephone line «3-4» pair of RJ-11 is used. But, it should be controlled (for example

visually), that in connected to the telephone line only one pair is used. If other pairs are detected, the

should be checked for both analog and digital signal. Both, «1-2», 3-6», «7-8» and other pair combinations

should be checked.

For pair check automation of RJ-45 use additional features of submode "SCALE” on that channel.

For that option press and . There are will be image on the display (fig.52) corresponding to automatic sequential signal level

control on all possible pairs of RJ-45 or RJ-11. Line numbering of socket pins can be seen on fig.51. «4-5» pair of RJ-45 is corresponding to «3-4» pair of RJ-11. Sound control is provided.

Fig. 51 5


54

1 Signal level

2 Mark for manual pair selection

3 Pair number

4 Mark of automatic pair control

5 Numerical relative signal level value

___________________________________________________________________________

Feature of automatic level of signal control is to move the mark 4 to pairs of numbers with the

indication of the signal level in the pair, which is marked.

To manually select a pair, you must turn the rotary knob while 2 and 4 marks aligns vertically.

Pair selection is performed by turning the rotary knob.

Automatic installation of signal levels vertically relative to the noise level provides by

pressing the button, manual selection is made by using and buttons.

If necessary, for detailed analysis of chosen pair press button.

Connect wireline analyzer ST131.AWL to the telephone line gap (between telephone and junction box).

On the main unit of ST131 «4-5» pair should be chosen ( - «4-5»)

If everything is connected properly, bright light of one of the «LINE» indicators on the top panel of ST131.AWL should appear as well as tonal sound signal with lifted headset.

With lowered headset constant voltage on telephone line will be 48 (60) +/-10V, if lifted - 10+/-5V («LINE» indicator dimly glowing)

To suppress interference signals with frequencies multiples of 220V - 50Hz signals from the

pulse power supply units, etc. connect pin 2 (Fig. 5) using a wire "Earth" to the ground bus. In case of overload set lower value of amplifying level of input amplifier or chose automatic level

control (AUTO). In case of wireline control with put headset or unconnected pair don’t forget to set maximum possible amplifying level.

Check this pair for acoustic sound signal with put headset. Sound which is corresponds with room noise means presence listening device, which is using the given pair for data transfer. Wherein,

presence of other signal, digital for example, should be considered as dangerous and a source should

be found. With lifted headset all unused pairs should be checked for signal presence.

Telephone should be checked in radiofrequency range using «RADIO» channel with range difference control with lifted and put headset.

Security and firefighter alarm system lines

Security and firefighter alarm system sensors are convenient places for installation of surveillance devices up to video cameras.

Same way as in the telephone line check for any analog or digital signal should be done.

In lack of «usual level» signals (from 100mV and more) on maximum amplification presence of such devices as «passive» microphone (without power supply) or loudspeaker working in reverse,

microphone, mode should be cheked.

Fig. 52

5


55

4.2.5 Operation in the “WIRE 0.01–30 MHz” channel.

In this range checking for presence of high-frequency signal in lines is done. In general the sequence of modes used corresponds to the "RADIO 30-4400 MHz" channel.

Additionally, provided the access to the option "OSCILLOSCOPE" in the FULL RANGE mode that

allows, for example, quickly assess the presence of impulsive components in the received signal composition.

Separately considered: mains 380/220V in total with sockets

local computer network (ETHERNET)

Power lines 380/220 in total with sockets Frequency range of listening devices, which are using 220V mains for data transfer is usually

concentrated on low frequency range – from 40 to 200 kHz.

Devices, which are using noise like signals and impulse modulation can be located on any area

of frequency range. For detecting such kind of signals with impulse modulation «OSCILLOSCOPE» option should be used.

One of the most possible places of listening devices location are inner cavity of network sockets. ST131 should be connected to all sockets in room due to the fact that power supply of the room

(respectively data transfer from the room) can be done from different phases.

Check extension cords or mains powered devices in the presence of built listening devices produced by their serial connection to the power supply and measurement level of signal. In this case

it is rational to use «RANGE SUBTRACTION» option. It will allow to see all previously missing signals.

Local computer network (ETHERNET) Data transfer, depending on used protocol, is done by pairs shown on the fig 51.

Same way, as with telephone line analysis presence of signals in unused pairs control should be

done.

4.2.6 WORKING IN 30-3000MHz RANGE

In this range inspection of wirelines on presence of high frequency signals, particularly in coaxial lines (TV broadcast cables).

Connection is done directly to the inspected cable or through BNC adapter.


56

4.3 WORKING WITH “OPTICAL” CHANNEL.

Connect IR sensor ST131.IR to the “I/O” socket of the main unit.

Click in start MENU the "OPTICAL" channel. When the initial selection of that channel the screen

information will corresponds to the FULL RANGE mode.

Pressing the "REM.CTRL" provides rapid transition to a low-frequency part of the spectrum display in

the time domain (see section 3.8). This representation is optimal for the analysis of low-speed data

signals transmit. This type of signal is typical, for example, for remote controls. Because of a considerable

spread of time parameters of these signals new contextual button is added which allows the

selection of the maximum storage of time samples (sweep). Available values are 0.1, 0.8 , 3.2, 13 , 52

and 208 ms. Increasing of this value slows down the drawing time of oscillogram and with maximum

values of device reaction to the button pressing slows down up to one second.

Technique of signals identifying in the rest part of the spectrum is similar to "RADIO" and

"WIRE” channels.

In locating the source of infrared radiation inspect premises with given radiation pattern of IR

sensor (30°) and presumably a fairly narrow focus diagram of IR signal emitter.

ADDITIONAL RECOMMENDATIONS

Specificity of infrared STM is the need for "direct visibility" between the transmitter and the

infrared receiver. Therefore, in the indoor transmitter radiation path may pass outwardly through the

window openings or from them (the transmitter is mounted directly into a window frame). With these

features, the search of danger signals should be start from the windows of the room. To find the STM

installed in window frames use a SPECIAL MONOPOD or tripod (see section 1.3.5.1.). Installing the IR

sensor on a tripod is made with respect to the direction of the receiving part of the sensor to the side

of the room.


57

4.4 WORKING WITH "ACOUSTO-ELECTRIC" CHANNEL.

4.4.1 GETTING STARTED WITH MICROPHONE.

Connect microphone to the «CH2» jack corresponding to the input parameters of the channel

(see section SPECIFICATION). For research in the field of ultrasonic signal frequencies use special

microphones, for example 40BE with microphone preamplifier type 12AL produced by G.R.A.S.

4.4.2 GETTING STARTED WITH SENSOR MAGNETIC FIELD ST131.MF.

Connect the ST131.MF sensor to the connectors «I/O» and "CH2" of the main unit.

4.4.3 WORKING WITH MICROPHONE.

To work with a microphone choose in start MENU the "ACUSTO-ELECTRIC" channel. When

this channel used the screen information will correspond to the FULL RANGE mode (see section 3.1)

Select the desired frequency band, carried out in two ways:

• Rotate the rotary knob. In this case the upper range value limited: 125, 62.5, 31.25, 15.62 and 7.812

KHz.

• Regular transition to the modes FULL RANGE - BAND - DEMODULATION.

In the context of this channel this variant used for the analysis of the ultrasonic signals (above

20 KHz) by down-conversion to the audible range of spectrum.

First way is designed for working in acoustic frequency range, second – in the ultrasound.

To display the signal level using octave filters, press . Screen information will fit in

Figure 51.

1 Value of the center frequency of the filter.

2 Graphical representation of the signal used with selected

detector ( button).

3 Signal level marker in connection with the peak-hold

detector (PEAKx8).

4 Numerical signal level corresponding to position 2.

Figure. 51


58

4.4.4 OPERATION WITH MAGNETIC FIELD SENSOR ST131.MF.

Select the working range (0.01-31.25 KHz) rotating the rotary knob.

Operation is possible in two modes:

- MAGNETOMETER (mode switch in position «MAG»)

- DIFFERENTIAL (mode switch in position «GRD»)

4.4.4.1 "MAGNETOMETER" MODE.

In "MAGNETOMETER" mode the measurements produced of strength (induction) of the

magnetic field.

H = U/S (1)

B = 4pi*(10^-7)*H (2), where

U - output voltage;

S - conversion efficiency;

H - the magnetic field strength, A/m;

B – electromagnetic induction, T.

Output voltage is proportional to cos(φ), where φ - angle between the magnetic field intensity

vector and the magnetic axis.

4.4.4.2 "DIFFERENTIAL" MODE.

In the "DIFFERENTIAL" mode, field intensity difference is measured at two points on the

magnetic axis disposed symmetrically about the center.

In this mode the effect of distant powerful magnetic fields are significantly attenuated as well

as the influence of other interfering influences (acoustic, vibro-acoustic, etc.). Characteristic of this mode

is the attenuation coefficient of the homogeneous magnetic field (K).

K = 20lgU/Ug, (3), where

U - measured voltage in the "MAGNETOMETER" mode;

Ug - measured voltage in the "DIFFERENTIAL" mode.

In the frequency range of 0.3–100 KHz the value of K is over 30dB.

Using the ST131.MF sensor mainly due to the search of low-frequency spurious electromagnetic

radiation arising from the work of various electronics and office equipment (computers, communication

devices, sound systems, tape recorders, telephones, etc.).

Despite the high sensitivity of the sensor, the distance between the sensor and the examined

object should be as small as possible, almost until touching. Inspection should be done by moving the

probe along the surface of the object with the change of the spatial position.

The main variant of control is the sound through headphones.


59

4.5 WORKING WITH OPTION "DETECTOR OF NON-LINEAR TRANSITION".

Connect the ST131.AWLN adapter to the ST131 main unit.

To obtain reliable results it is necessary to disconnect the explored line from external sources

and consumers as well as remove any explicit loads and the length of the line should not exceed 200

m.

Connect ST131.AWLN to the explored line using the RJ-45 connector or the probe connector

(Figure 5).

After selecting in start MENU the "NON-LINEAR JUNCTION DETECTOR" option, the scale of

signal level with all numbers on pairs of contacts of RJ-45 connector will appear on the screen.

After the passage of adaptation to the connected line, the serial automatical measurements will

happen with displaying the levels of the second and third harmonics of the test signal.

Indication of the presence of the investigated line connection to electronic device with non-

linear radioelements in its input circuit is an increased level of the third harmonic of the test signal.


60

5 MAIN UNIT FIRMWARE UPGRADE

Turn on the ST131 with the button pressed. The screen should be appeared with this

message:

The firmware can be found on the supplied flash drive or online www.signal-t.ru/eng.

Connect ST131 to your computer using the USB cable. Wait for the USB drivers installed. Select

the appropriate version of the firmware and run the program.

Follow the update process on the computer screen and ST131 as well.


61

6 SPECIFICATIONS

DIGITAL SIGNAL PROCESSING MODULE

Simultaneous processing frequency range, MHz 0.01-30

Resolution of ADC, bits 10, 14, and 16

Number of FFT points 32768 (with PC software)

512 (the ST131 main unit)

DDC filter bandwidth, MHz 0.0005-10 MHz

Demodulators АМ, FM, SSB, TV (AM)

Detectors RMS, average, peak-hold, quasi-peak

“RADIO” CHANNELS

Frequency range 1, MHz 0.01-30

Displayed noise level

FULL RANGE, dBm Minus 110 (minus 130 for PC software)

1 KHz bandwidth, dBm Minus 150

Input signal maximum level, dBm 5

Values of bandwidth, MHz 10, 5, 2, 1, 0.5, 0.2, 0.1, 0.05, 0.02, 0.01, 0.005, 0.002, 0.001, 0.0005

Frequency range 2, MHz 30 - 4400

Displayed noise level dBm



Maximum input level, dBm 5

Analysis speed, not less, GHz/sec 10

Values of bandwidth, MHz 2048, 1024, 512, 200, 100, 50, 20, 10, 5, 2,

1, 0.5, 0.2, 0.1, 0.05, 0.02, 0.01, 0.005, 0.002, 0.001 and 0.0005

Input attenuation value, dB 0 - 30 with step 5

Identifiable standards of data communication CDMA, GSM, 3G, 4G, WLAN, DECT

Frequency range 3, MHz 4000 - 18000

Threshold sensitivity, dBm Minus 65

Directional pattern width, degree 60-90

“WIRE” CHANNELS

Frequency range 1, KHz 0.3-15

Displayed noise range, not worse, dBm Minus 115 (minus 140 for PC software)


Input amplifier gain, dB 14, 26, 38, 44, 50, AGC

Common mode rejection ratio (CMRR), not less,

dB

60

Maximum allowed input voltage, V 250

Frequency range 2, MHz 0.01-30






Values of bandwidth, MHz 10, 5, 2, 1, 0.5. 0.2, 0.1, 0.05, 0.02, 0.01,

0.005, 0.002, 0.001, 0.0005

Input amplifier gain, dB Plus 5, minus 1, 7, 13, 19, 25, 31, 37, AGC

-150

-100

-50

0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

Частота ГГц


62

Frequency range 3, MHz 30-3000




Maximum input level, dBm 5

Analysis speed, not less, GHz/sec 10

Values of bandwidth, MHz 2048, 1024, 512, 200, 100, 50, 20, 10, 5, 2,

1, 0.5, 0.2, 0.1, 0.05, 0.02, 0.01, 0.005, 0.002, 0.001 and 0.0005

Input attenuation value, dB 0 - 30 with step 5


“OPTICAL” CHANNEL

Threshold sensitivity, dBm Minus 70

Dynamic range, not worse, dB 60

Frequency range, MHz 0.01-30

Spectral range, nm 770 – 1600 (550-1100)

Field of view, degree 30

“ACOUSTO-ELECTRIC” CHANNEL

Frequency range, KHz 0.01-125




Input signal maximum level, dBm Minus 5

Input amplifier gain, dB 6, 14, 20, 26, 34, and 40

Magnetic antenna ST131.MF

Frequency range (for passband ripple 4dB), Hz 30-30000

Conversion factor, at 1000 Hz, V*m/A 1.00±0.01

Threshold sensitivity, at 1000 Hz, not worse, A/m*Hz1/2

2*10-6

NON-LINEAR JUNCTION DETECTOR

Frequency of test signal, KHz 150-220

MAIN UNIT

Dimensions, mm 190 x 97 x 50

Weight (without batteries), kg 0.8

Indication TFT, 3.5’’, 240x320, 262144 colors

Interface USB 2.0, up to 224 Mbit/s

Supply current, A 0.4-0.6

Power supply 6 AA type batteries (or rechargeable

batteries)


63

7 CERTIFICATE OF ACCEPTANCE

ST131/ST131N multifunctional detection device №_______________meets specifications and is fit for use.

Release Date _________________


64

8 WARRANTY INFORMATION.

8.1 The manufacturer guarantees that each manufactured product meets all requirements of the

specifications for a period of 12 months from the date of sale.

8.2 The manufacturer shall, within the warranty period if free of repairs are required, its subsidiary and other parts, until replaced by the instrument as a whole, if it is during this time will be damaged or

its performance will be lower standards specifications.

8.3 Covers free repair (control) or replacement shall be made only when the user observes the rules

of operation, transportation and storage, in the absence of mechanical damage to the device itself and its parts, as well as the presence of a correctly completed warranty card.

8.4 The warranty applies to each of the products only in the presentation of a consumer with a

warranty card stamped manufacturer and its dealers to sell, certified by an official round stamp standard

pattern.

8.5 The manufacturer provides services for post-warranty maintenance of the product.


65

COUPON № 1 For warranty repair (maintenance) multifunctional search device ST131

number _______________ Made ________________

Seal of the manufacturer

Sold ____________________________________________(Trade name of the company)

Date of sale _____________ 201__Seller__________________ Vendor Seal (signature) of commercial

enterprise___________________________________________________________________________

Spine ticket number 1 for warranty repairs (maintenance) of the ST131 № ________ seized the

contractor _______________________________ (surname, personal signature)

COUPON № 2 For warranty repair (maintenance) multifunctional search device ST131

number _______________ Made ________________

Seal of the manufacturer

Sold ____________________________________________(Trade name of the company)

Date of sale _____________ 201__Seller__________________ Vendor Seal (signature) of commercial

enterprise___________________________________________________________________________

Spine ticket number 1 for warranty repairs (maintenance) of the ST131 № ________ seized the

contractor _______________________________ (surname, personal signature)


66

ANNEX 1

Selection of the options of signal averaging.

In the context of search activities it can be divided into two use tasks of detectors: signal

detection and the source location.

For the first task, in the beginning of the search, the peak-hold detector (“PEAK”) is selected. It provides

detection of signal irrespective of its timing parameters. Reset of the stored results is made by pressing

the button of digital keyboard.

In the future, if signal analysis required, the choice of the detector is determined based on the

following assumptions:

1 Linear averaging should be used for analyzing stationary signals (that indicated as AVER x8, x16,

x32, x64).

2 Peak-hold averaging with linear reduction (quasi-peak detector) is used for non-stationary signals

(that indicated as PEAK x8, x16, x32). When averaging with linear reduction, there is the coefficient

towards reduction. It is possible to use to emphasize non-random signals.


67

ANNEX 2

DIGITAL SIGNAL PROCESSING. SOME OBSERVATIONS.

Digital signal processing based on the FFT provides a better, compared with the analog reception

path, the sensitivity at the same display width of the spectrum.

We will show the following relation:

F=2B/N *

, where:

F - frequency bandwidth of one harmonic.

B - frequency bandwidth of the whole band. In our case, it ranges from 10 MHz to 500 Hz.

N - number of FFT points. For the main unit it is 512, for the software – 16384 (the FULL RANGE

mode) or 4096 (the BAND mode).

* this ratio does not consider certain parameters which do not affect the general idea.

The displayed noise DNL is calculated with the formula:

DNL = -174 + NF + 10 * log(F)

, where:

NF - noise factor.

As can be seen, the calculation considers the width of the harmonics depends on the number of

FFT points. The less the value - the lower the displayed noise level and therefore there is more sensitive.

Thus, if you change the value of the span, the sensitivity will be changed.

For example, the difference in the displayed noise level between the bands 10 MHz and 500 Hz is

40 dB (excluding the noise factor).

In the context of search activities we can say that the user has a possibility to change operatively

the sensitivity of the device from the communication receiver (tenth microvolts value) up to the

broadband field detector (tens of microvolts value).

ST 131 “PIRANHA II”

Documents

Transcript of ST 131 “PIRANHA II”