Category: Applications

Update to the RTL-SDR Transmitting at 1270 MHz

In our previous post we featured a video by OH2FTG which showed an RTL-SDR transmitting at 1270 MHz. Now OH2FTG has written in to give us some more information about the RTL-SDR transmitter. He has done a short writeup explaining how it’s done on his website. It turns out that the RTL-SDR is actually capable of transmitting a FSK morse beacon using it’s leaky oscillator.

In the video, code written by another ham OH2EAT is used. OH2EAT’s code essentially changes the frequency on the transmitting RTL-SDR at up to 300 times a second using a modified driver. This is used to create a Frequency Shift Keyed (FSK) transmission.

The modulating transmitter code is not yet available as it is not yet ready for release. In the future OH2FTG hopes to build an amplifier to boost the signal output for further experiments.

New AIS Decoder for the RTL-SDR: PNAIS

Over on our Forums  has told us about his recently released an AIS decoder called PNAIS which appears to directly connect to the RTL-SDR and decode AIS data. After decoding it then outputs the decoded NMEA data via UDP, which could then be received and used in map plotting software such as OpenCPN.

AIS is and acronym for Automatic Identification System and is a system used by ships to broadcast position and vessel information.

PNAIS Decoder

Receiving and Decoding FLARM (Tracking Gliders, Helicopters etc) using the RTL-SDR

Over on our Facebook page, a user has let us know about the Open Glider Network project which makes use of the RTL-SDR dongle to decode FLARM. FLARM is a low cost and low power consumption ADS-B alternative which is often used by small aircraft such as gliders and helicopters for collision avoidance. With the right antenna, receiver and decoder any aircraft transmitting a FLARM signal could potentially be tracked on a map.

FLARM signals are transmitted at 868 MHz and are effectively weaker by 100-1000 times compared to standard ADS-B signals. The project recommends use of a high gain collinear antenna for receiving the weak FLARM signals. The open glider network project wiki contains information on how to set up their Linux based FLARM decoder that relies on the RTL-SDR for various embedded devices.

Once the software is up and running, the received and decoded FLARM packets can be seen on as real time glider positions (also at in a 3D Google Earth).

FLARM Gliders shown in real time on a map
FLARM Gliders received with the RTL-SDR shown in real time on a map

Using an RTL-SDR and TI Chronos RF Wristwatch to Copy a Garage Door Opener

At Tel-Aviv University in Israel, two students undertook a class project where they were able to use an RTL-SDR to record a garage door opener signal and then use a Texas Instruments (TI) Chronos watch to retransmit a copy of the signal. Their report can be found here (pdf). The TI Chronos is a wrist watch with a built in programmable ISM band RF transmitter.

The students report contains an analysis of the signal which may be of use to anyone interested in decoding their own ISM band signals and they also describe a method used to automatically obtain the required parameters for programming the TI Chronos with the signal to be copied. The abstract of their report is as follows

We present a simple and affordable way of copying remote controls widely used for parking lot gates, garage doors and other simple systems. These simple remote controls usually use a fixed code (as opposed to the more secured rolling code used for car keys remote controls) and a simple On-Off Keying (OOK) modulation, over 433.92MHz in the ISM band. We suggest the use of the TI-Chronos wrist-watch platform for the emulation of the remote control, as this platform transmits in the same band, and can be programmed to emulate different modulations and to send user pre-defined signals.

In this report we show the complete process for copying a remote control into the Chronos platform. This process utilizes only a standard PC and low-cost hardware (less than $75 all together), alongside free software, and additional software developed by us. The process starts with recording the original remote control RF signal. It continues with automatic analysis of the recording, extracting the needed parameters of the signal. Finishing the process, we set the Chronos with those parameters. We demonstrate the copy process using a 4-channel remote control and its receiver board.

Flow Diagram of Copy Process
Flow Diagram of Copy Process

Hak5: Using a Solar Powered Embedded Device with an RTL-SDR to Track Aircraft Remotely

Over on YouTube Hak5, a popular electronics enthusiast channel has uploaded a video showing their project which involves creating a remote solar powered ADS-B receiver with the RTL-SDR. They used a WiFi Pineapple which is a mini Linux based embedded computer as a remote PC and sealed it in a weather tight briefcase with a lead acid battery and solar panel. They also used a high gain directional WiFi antenna on both the transmitting and receiving ends. With this setup the WiFi Pineapple is capable of running indefinitely transmitting ADS-B data using just the solar panel and battery.

They took their setup to the top of a hill near to their office and pointed the transmitting WiFi antenna towards their offices. Then back in the comfort of their offices they were able to remotely connect to the WiFi Pineapple and start a dump1090 webserver and connect to it using Virtual Radar Server.

Solar WiFi Pineapple Briefcase, Aircraft Tracking with High Gain Point-to-Point, Hak5 1614

Analyzing 433 MHz Transmitters with the RTL-SDR

Over on his blog, Yashin has written a post showing how to analyze 433 MHz transmitters using several methods. Devices that transmit using low power 433 MHz are common and often include devices such as weather monitors, power monitors and alarm sensors.

To show his analysis methods Yashin used an ASK modulated FS1000A 433 MHz transmitter connected to an Arduino Teensy microcontroller. He first uses GQRX and baudline together with an RTL-SDR in Kali Linux to test that the transmitter is working and to visually inspect the RF spectrum. Then he shows how to use GNU Radio to receive the 433 MHz transmitter and how to record an audio file. The final tool he shows how to use is rtl_433 which will automatically decode the data into binary strings using the analysis option.

ASK 433 MHz Transmitter
ASK 433 MHz Transmitter

Receiving Signals from the Lunar Reconnaissance Orbiter with an RTL-SDR and WiFi Grid Antenna

Gat3way has recently posted on his blog an article showing how he was able to receive a signal from the Lunar Reconnaissance Orbiter (LRO) using only an RTL-SDR, WiFi grid antenna and a low noise block (LNB). The LRO is a NASA spacecraft which is currently orbiting and being used to create maps of the moon.

The LRO transmits a tracking, telemetry and control (TT&C) signal at 2271.125 MHz which is in the S band (2 to 4 GHz). Since the S band frequencies are commonly used for Indovision satellite TV, gat3way was able to find a cheap LNB which could downconvert the GHz level S band frequencies down into a frequency receivable by the RTL-SDR. For the antenna he used a high 22dBi gain motor controlled WiFi mesh parabolic grid antenna.

After aiming the antenna at the moon, gat3way was able to clearly see the LRO carrier signal in the RTL-SDR waterfall as shown in the image below.

WiFi Parabolic Mesh Antenna for the S Band
WiFi Parabolic Mesh Antenna for the S Band
LRO Signal Received by RTL-SDR, LNB and WiFi antenna.
LRO Signal Received by RTL-SDR, LNB and WiFi antenna.

Automatic Heatmap Logging on a Raspberry Pi using an RTL-SDR and RTL_POWER

Amateur radio hobbyist DE8MSH recently wrote in to let us know about a project he has been working on. His project involves using a Raspberry Pi B and RTL-SDR to automatically log a wide band heatmap using rtl_power. Rtl_power is a command line tool that will log signal strengths to a csv file using the RTL-SDR over a very large definable bandwidth.

To do the automatic logging the Raspberry Pi runs rtl_power for 23 hours constantly writing data to a mounted hard drive. After 23 hours the heatmap image is calculated and then uploaded to a webpage at The scheduling is performed by a cron job.

DE8MSH has also been working on a second related project over at The heatmap on this page shows various transmissions from weather balloons. As you mouse over those transmissions, the QTH (location) of those weather balloon transmissions is shown as well as the frequency and time of where the mouse pointer currently is.

Raspberry Pi Automatic Heatmap Logging with rtl_power
Raspberry Pi Automatic Heatmap Logging with rtl_power

Monitoring Multiple AM channels with RTL-SDR Airband

A new command line program for the RTL-SDR called RTL-SDR Airband has recently been released. The program can be used to simultaneously monitor multiple AM channels per dongle. It is intended to be used with online streaming services like which provide live audio streams of air traffic control communications around the world.

Its features include

  • Decode multiple AM channels per dongle (within bandwidth frequency range)
  • Auto squelch and Automatic Gain Control
  • MP3 encoding
  • Stream to Icecast or SHOUTcast server
  • Low CPU usage on Windows (<4% on i5-2430m) thanks to SSE and AVX instructions
  • FFT using GPU on Raspberry Pi (50-55% CPU with default clock)
Monitoring Multiple AM Channels with RTL-SDR Airband.
Monitoring Multiple AM Channels with RTL-SDR Airband.

RTL-SDR Based Coherent Multichannel Receiver

YO3IIU has written a post on his blog showing how he was able to create a coherent multichannel receiver using several RTL-SDR dongles all running on a single clock source.

To do this he used a CDCLVC1310-EVM board which provides up to 10 clock outputs and then connected four of the clock outputs to the clock inputs of four separate RTL-SDR dongles. He then uses a GNU Radio program to correlate the signals from each RTL-SDR stick.

Recently we have seen two applications of an RTL-SDR based coherent multichannel receiver used in passive a radar systems here and here.

Coherent Multichannel Receiver based on the RTL-SDR
Coherent Multichannel Receiver based on the RTL-SDR