Category: Applications

SignalsEverywhere: Driving around with KerberosSDR and Locating a P25 Transmitter

On this weeks episode of SignalsEverywhere, host Corrosive tests out our KerberosSDR coherent RTL-SDR unit for radio direction finding. If you didn't already know KerberosSDR is our experimental 4x Coherent RTL-SDR product. With it, coherent applications like radio direction finding (RDF) and passive radar are possible. Together with the KerberosSDR direction finding Android app it is possible to visualize the direction finding data produced by a KerberosSDR running on a Pi3/Tinkerboard.

In the video Corrosive uses the KerberosSDR together with the recently updated companion Android app to determine the location of a P25 control channel. By driving around with the app constantly collecting data he's able to pinpoint the location within about 15 minutes.

If this interests you, we also have some more driving demo videos available here.

Direction Finding With Kerberos SDR

In addition to his video, Corrosive has also created a very useful calculator that can be used to calculate the required antenna spacing for a circular or linear direction finding array that can be used with the KerberosSDR.

AIS Share App Updated and Magazine Article

Thank you to Christian, programmer of the AIS Share Android App for letting us know about some updates to his AIS Share Android application. AIS Share is a €2 app for Android that allows you to turn an Android device into an AIS receiver together with an RTL-SDR. AIS stands for Automatic Identification System and is used by ships to broadcast their GPS locations in order to help avoid collisions and aide with rescues. An RTL-SDR with the right software can be used to receive and decode these signals, and plot ship positions on a map.

Recent updates to AIS Share have brought improved AIS reception, and updates allowing it to run on the latest Android version. A new video demonstrating the software was also uploaded to YouTube.

AIS SHARE - Android (RTL-SDR AIS receiver)

The App has also been featured in the February 2019 edition the "Practical Boat Owner" magazine (paid magazine with digital editions). The article discusses using AIS Share and an RTL-SDR to stream data to Boat Beacon, which is a popular chart navigation app. A similar but free tutorial on setting up AIS Share and Boat Beacon can be found here.

An excerpt of the Practical Boat Owner AIS Share RTL-SDR Article.
An excerpt of the Practical Boat Owner AIS Share RTL-SDR Article.

Decoding PAL Video from a Nintendo with an Airspy SDR

Oona (also known as [Windytan] and @windyoona) was recently looking for a way to capture PAL composite video from her old 1980’s Nintendo Entertainment System (NES) without spending a bunch of money on what are often poor video capture cards. As she already owned an Airspy SDR she decided to receive the PAL signal with the Airspy and modify some software to act as a PAL decoder.

PAL decoding was handled via some modifications to her private Tempest software. Normally Tempest type programs like TempestSDR that we covered in a [previous article] are used to spy on computer/TV monitors from signals that are unintentionally emitted in the surrounding area.

Oona has made the connection from the composite output directly to the SDR antenna input so it’s not unexpected that you’d have a strong signal. However, I have to admit that’s an incredibly clear image for a video being demodulated via a software radio.

What makes this an even more amazing feat is that the latency is low enough that it’s nearly playable using a computer and SDR in place of a television set.

We note that we’ve also seen SDRs used to decode standard PAL TV broadcasts before with an SDR# plugin called TVSharp.

SigDigger: A Graphical Digital Signal Analyzer for Linux

Recently a new open source Linux based SDR application called SigDigger was released by programmer BatchDrake (Gonzalo J. Carracedo). It is based on his own DSP libraries called Sigutils and Suscan which can take advantage of multi-core CPUs. SigDigger also makes use of the SoapySDR interface, so it is compatible with almost all software defined radios including the RTL-SDR.

SigDigger Screenshot
SigDigger Screenshot

Like other general purpose SDR applications, SigDigger has your typical AM/FM/LSB/USB demodulation and audio playback features. However, it also has some key additional features that make it worth taking a look at if you're interested in reverse engineering, or taking a closer look at digital signals. The features include:

  • Both realtime and replay analysis modes
  • Analog audio playback (AM, FM, LSB and USB)
  • Baseband recording (full spectrum and per-channel)
  • Per-device gain presents
  • Dynamic spectrum browsing
  • ASK, FSK and PSK inspection
  • Gradient-descent SNR calculation
  • Different spectrum sources (cyclostarionary analysis, signal power…)
  • Symbol recording and visualization
  • Transition analysis

Planned features already implemented and just waiting to be exposed to the UI:

  • Parameter estimation (baudrate, constellation order…)
  • Fast symbol autocorrelation analysis
  • Automatic calculation of scrambling polynomials
  • Symbol stream codecs

Possible future features coming soon:

  • Symbol tagging (correspondence between symbols and groups of bits)
  • Automatic symbol tagging guessing
  • Automatic convolutional code detection
  • Viterbi decoding

We note that while the UI looks like GQRX, it is not based on GQRX at all. Rather BatchDrake just liked the minimal UI of GQRX. Also unlike GQRX, SigDigger is not based on GNU Radio, so it may be a bit more efficient and lightweight.

Below we've embedded a video that BatchDrake uploaded his YouTube channel which demonstrates SigDigger being used to inspect a PSK channel.

Using SigDigger to inspect a PSK channel

This software looks great, and we think it deserves some serious attention and testing, so check it out on the GitHub. Binary releases are also available, although BatchDrake notes that they are minimally tested, for x64 Linux only, and preferably for Debian-like distros. Alternatively, it can be installed from source, after installing the Sigutils and Suscan DSP library dependencies.

METEOR M Demodulator SDR# Plugin and LRPT-Decoder Updated

Thanks to Happysat for providing info on updates to these programs again. Meteor Demodulator V2.2 is a plugin for SDR# that connects to the M2 LRPT Decoder software. Together with an RTL-SDR and 137 MHz satellite antenna, these programs are used to receive, track, demodulate and decode Meteor M satellite signals into live weather satellite images. Happysat has a tutorial available here, however we note that at the time of this post it hasn't been updated to use the latest software versions.

The biggest change appears that you can now affect the decoder settings from within the SDR# plugin. This is useful because the METEOR M2-2 satellite appears to be changing it's operating mode often (number of infrared vs visible channels, data rate etc).

We also note news from Happysat that the Meteor M-N2-2 satellite has now changed frequency to 137.100 MHz mode 72K on 16 Aug. 9:30 Moscow time (6:30 UTC). Other users have also indicated that M2-2 is currently transmitting two IR channels, and one visible now. Meteor M2 appears to still be transmitting visible channels.

M2 LRPT Decoder V47:

- Added Meteor Demodulator V2.2 socket support

- only mode, sat, rgb are supported so far.

- Fix manual s-file processing

By design, the plug-in will manage the settings of the decoder and this should reduce the number of settings that must be done when changing the Meteor operating modes.

Example scheduler options:

M2_decoder_init_Line <rgb=123.jpg> or (rgb=125,444,555 ect)

In order for the decoder to work with Meteor Demodulator V2.2 , the ini-file mode and sat entries must be assigned to auto!




M2 LRPT Decoder V48:

- Remove debug window


Meteor Demodulator V2.2


Added interaction with Meteor LRPT-Decoder via socket.

At the beginning of the data transmission, the configuration of the modulation speed and modulation type (satellite name) is transmitted to the decoder.

That is, there is no need to change the decoder settings when changing 72K / 80K and M2 / M2.2.

It will receive signal information from the plugin.

It is enough to change the speed in the scheduler.

A new scheduler command "M2_decoder_init_Line <>" has been added to the plugin.

Using it, you can transfer any commands that are in the ini file of the decoder (for example, the command to select channels to save a color picture:

M2_decoder_init_Line <rgb = 123.jpg>)

In general, this allows you to change the settings when changing the reception conditions only in the scheduler and not in the entire chain of programs for processing the signal from the satellite.

M2 decoder compatible with these functions is >V47

Updated Meteor M2 Demodulator Plugin.
Updated Meteor M2 Demodulator Plugin.

A Remote ADS-B, ACARS, VDL2 and Air Traffic Control Voice Monitoring Station with LTE Connection

Over on Reddit u/tsimola has posted about his remote ADS-B station that is accessed via an LTE connection. When an opportunity came up to install a remote ADS-B station on a tall building with unobstructed 360 degree views, tsimola decided to build the best ADS-B monitoring station that he could, and make sure that it would be easily to maintain and monitor from afar.

He notes that his ADS-B station consists of a FlightAware Prostick Plus and 16-element collinear coaxial antenna. The following components are also used:

  • Raspberry Pi 3 booting and running from SSD drive (Raspbian and ADSB Receiver Project package)
  • Power via UPS (1 hour and 45-minute runtime) and text message controlled power socket (for hard reboots)
  • Powered USB hub with three basic RTL-SDR dongles (ACARS, VDL Mode 2 and voice)
  • Three temperature sensors and one humidity sensor, 80 mm exhaust fan (filtered air intakes)
  • Magnetic switch for push notifications if the lid is opened (IFTTT and Webhooks)
  • LTE/4G router for Internet connection

In addition to the ADS-B station, tsimola has also added ACARS, VDL2, and AM voice air traffic control monitoring with a second station in the same location that utilizes three RTL-SDR dongles. This second airband station is connected to a 128 MHz tuned airband dipole antenna, with an LNA4all and GPIO labs airband filter.

As well as descriptions of the hardware, tsimola's post goes over his software choices and explains how it is securely accessed. We think that this is a very well put together build that should be replicated in other locations too.

A remote ADS-B, ACARS, VDL2 and Air Traffic Control Monitoring Station.
A remote ADS-B, ACARS, VDL2 and Air Traffic Control Monitoring Station.

[Also seen on Hackaday]

Android ADS-B Flight Tracker with 3D Aircraft Display

ADSB Flight Tracker is an Android App that allows you to display ADS-B flight data in either 2D or 3D. It works either with data shared from others over the internet via aggregation sites like, or via your own home ADS-B receiver data coming from an RTL-SDR and dump1090 server on your home network. You can also directly connect to an RTL-SDR that is running on your phone and this will allow you to get data faster with less lag. Using data shared by others from the internet could have a delay of a few seconds.

In order to keep using the 3D and RTL-SDR features you'll need to unlock them for a small in-app purchase of $2 for each feature. Initially you get about 30 minutes trial time however.

2D and 3D Screenshots from ADS-B Flight Tracker
2D and 3D Screenshots from ADS-B Flight Tracker

Some interesting 3D videos were also recently posted to the apps Twitter page @ADSBFlightTrkr

SDRTrunk 0.4.0 Alpha 9 Updates Highlighted

You may recall that a few years ago we released a tutorial on how to set up and use [SDRTrunk]. Fast forward a few years and the software has seen numerous changes. This application was designed primarily for tracking trunking radio systems but also has the ability to decode things like MDC-1200, LoJack and more.

The software is compatible with many Software Defined Radios such as our RTL-SDR v3, HackRF and the Airspy. Some of the newer improvements include a bundled copy of java so that an installation of java is not required on the host computer, as well as decoding improvements for P25 among other digital voice modes. You can find a full list of improvements along with the latest release on [GitHub]

The biggest feature many have been waiting for is the ability to import talk groups for their radio system into the application from radio reference. While this has not yet been implemented, user [Twilliamson3] has created a [web application] that will convert table data from radio reference into a format that is supported by SDRTrunk.

SDRTrunk Screenshot
SDRTrunk Screenshot