Skip to content

LimeSDR

LimeSDR

Notes: If using gqrx make sure you select the correct antenna for data to work.

Scan for Possible Frequencies:
https://www.kali.org/tools/rtlsdr-scanner/
https://github.com/neural75/gqrx-scanner

Signal Types:
https://www.rtl-sdr.com/tag/baby-monitor/

Pager

https://lokcon.me/2019/06/18/rtl-sdr-pocsag

Use GQRX as a pipe:
1. Click the three dots button on the bottom right of the window
2. Go to the Network Tab and set the UDP host and port to localhost:7355
3. Click the UDP Button To start the streaming

Use multimon-ng to demodulate and Interpret the signal:

nc -l -u 7355 | sox -r 48000 -t raw -b 16 -c 1 -e signed-integer /dev/stdin -r 22050 -t raw -b 16 -c 1 -e signed-integer - | multimon-ng -t raw -c -a POCSAG512 -a POCSAG1200 -a POCSAG2400 -a FLEX -a SCOPE -f alpha /dev/stdin

Boat Location

Modulator:

#
./rtl_ais -d 00000003 -h 127.0.0.1 -P 10110 -S 60
#View on OpenCPN

Decode Signals:
http://ais.tbsalling.dk/

https://github.com/dgiardini/rtl-ais
Docker Container

Airplane Location

dump1090

Aircraft Communications Addressing and Reporting System (ACARS)

  • 131.550 MHz

https://github.com/TLeconte/acarsdec

https://gist.github.com/dev-zzo/5705fffb20bf30bf1f58726337de5adc

Celular Device

https://github.com/Oros42/IMSI-catcher
https://www.hackers-arise.com/post/software-defined-radio-part-6-building-a-imsi-catcher-stingray

gr-gsm

Kalibrate GSM Search:

#Start to search for 900Mhz GSM stations : 
kal -s 900 -g 49.6 -e 23

Temperature Sensors

https://github.com/merbanan/rtl_433

rtl_433 -driver=soapysdr -t "antenna=LNAW,bandwidth=4.5M"

Cordless Phone

https://github.com/SignalsEverywhere/gr-dect2

Voice Radio

This includes the radios of the following
- Police scanner
- EMS
- Taxis
- Fire

P25

  • ~860 MHz, ~500 MHz + others
    https://github.com/DSheirer/sdrtrunk
    https://github.com/boatbod/op25

New
https://github.com/MattMills/radiocapture-rf
https://github.com/robotastic/p25-decoder

DMR/MotoTRBO

DSD from GQRX:

#Make the temp Pipe
mkfifo /tmp/sdr_pipe
# Pipe the GQRX to std input
socat UDP-RECV:7355 - | ./dsd -i /dev/stdin -o /tmp/sdr_pipe
# Play Audio from the pipe
aplay -r 8000 -f S16_LE -t raw -c 1 < /tmp/sdr_pipe

Oneline P25 Listening:

./dsd -f1 -mc -i <(rtl_fm -F1 -o4 -g32 -f 484.7918M -s48000 -) -o >(aplay -r 8000 -f S16_LE -t raw -c 1)

POCSAG/FLEX-A

Weather Balloon Signals

https://github.com/projecthorus/radiosonde_auto_rx
https://github.com/rs1729/RS

Amateur Radio

  • 126 MHZ

Universal Radio Hacker (URH)

Example on Decoding RF

Analysis

Interpretation