AB9IL.net: Using the Airspy HF+ SDR

Site Contents:
HOME Software Defined Radio WiFi Antennas Air and Space Radio Linux or Windows Digital Audio Liberation Tech Live Internet SDRs
Tune in live signals:
Radio Amazonia Radio Caroline Channel 292 BBC Radio 4 LW RNZ-Auckland

 how to monitor the 433 MHz ISM band and receive tire pressure monitors how to monitor the 433 MHz ISM band and receive weather sensors how to monitor the 433 MHz ISM band and receive electrical power meters how to monitor the 433 MHz ISM band and receive control commands for various devices how to monitor the 433 MHz ISM band and receive status messages from security devices how to monitor the 433 MHz ISM band and receive asset tracking messages how to monitor the 433 MHz ISM band and receive industrial data messages

The First Tune

As the first autumn afternoon settled over the quiet back‑yard, I coaxed the freshly unpacked Airspy HF+ into the bay of my workstation. The unit, with its sleek steel chassis and whisper‑quiet I/O, seemed almost a relic from another era—yet the promise of its broad frequency range was burning bright in the corner of my mind.

Because the 433 MHz ISM band lies well within the unit’s 1 Hz–40 MHz tuning capability, I gave it a gentle

The Tale Begins

There was a quiet hum beneath the rafters of my attic, a faint backdrop of the world outside. I had just unpacked the Airspy HF+, a gentle giant in the realm of software‑defined radios, and the world was suddenly an antenna to the sky.

Gathering the Instruments

I set the compact 36 MHz–1.8 GHz receiver on a sturdy wooden desk. The USB port whispered as it was connected to my laptop, and the Airspy software sprang alive, displaying a spectrum that stretched from the low whale‑call frequency of Radio Amateur to the high‑frequency chatter of satellites. I knew the target: the unlicensed 433 MHz ISM band, where countless weather sensors, remote controls, and hobbyist devices speak.

Tuning the Beast

Opening the software, I slid the 433 MHz mark into clear view. A gentle green band appeared, pulsing with faint fainter signals. I selected the ASK/QPSK demodulation preset that the Airspy community suggested for simple telemetry. The software’s internal filter automatically coaxed the signal, narrowing the band to a razor‑thin slice that revealed the quiet pulse of a weather station.

Listening to the Sky

A small 433 MHz dipole, soldered to the front of the Airspy, flung out like a tiny spear of curiosity. I angled it randomly, hoping fate would align the faint transmissions with my antenna’s sweet spot. The screen flickered; a steady 50‑Hz packet burst into focus. The waveform rode a tidy sine‑wave undulation that, when decoded, became a string of temperature, humidity, and wind speed readings. The sky was no longer silent; it was a vault of tiny voices, echoing the breath of the earth.

Harvesting Weather

My first sensor was a global weather tag that tucked its 433 MHz packets between 2 and 3 times per second. The decoded packets, after being fed through a lightweight Python script, revealed real‑time metrics. The script stored each timestamped line in a CSV file, turning raw RF into a chronicle of climatic changes. The Airspy’s low noise figure meant that even a weak signal from a 30‑meter distance could be pulled cleanly; it was as if the radio had ears tuned to a hidden channel.

From Noise to Data

With time, I experimented. I tuned into another module that used FSK to send barometric pressure data; the software’s FSK demodulator gave me a sharp, clean audio waveform that translated into the precise pressure values. By weaving together a few of these data streams, I grew a modest weather station that, while no more accurate than a commercial unit, offered an educational, hands‑on portal into RF science.

The Finish Line

When the Sun began its slow descent behind the distant hills, I watched the last packet clip across the spectrum. The Airspy lay dormant yet keening, a faithful instrument waiting for the next broadcast. I logged the session, written the code, and filed the neat little spreadsheets in a folder titled Airspy_Session_2026_04_10. As night fell, I shut my laptop, feeling like I had warned the world before the rain, before the wind, all thanks to a single SDR set to listen on 433 MHz.

In the dim glow of a late‑night desk lamp, the Airspy HF+ sat ready on its mount, a silent partner in a world full of whispers. The 433 MHz ISM band—a country’s chorus of low‑power messages waiting to be heard—was the universe they were about to explore.

Setting the Stage

The first step was to bring the Airspy HF+ into the world of software. A fresh install of CubicSDR was all that was required, and the device was instantly recognized by the operating system. The SDR’s firmware, updated to version 1.9 in March 2026, brought a 10 dB boost in front‑end amplification and reduced the 100 kHz noise floor that had once plagued quiet channels. With the interface open, the user tuned the sample rate to 200 kHz, a sweet spot for capturing packets while maintaining manageable data streams.

The First Clack

After a quick sensitivity test—a distant RFID doorbell transmitting every few seconds—an audible “clack” surfaced on the screen. The Airspy, like a patient listener, centered its internal mixer on 433.92 MHz, where the ISM band floated unimpeded by demodulation quirks. This frequency, a shared playground among home automation devices, held both simple on/off codes and more complex telemetry streams. The user refreshed the display: faint pulses appeared, then sharpened into a clear zig‑zag of amplitude variations, each corresponding to a status update from a motion sensor in a nearby apartment.

Tweaking the Beast

To turn the raw waveforms into readable data, a custom GnuRadio flowgraph was sketched. A Signal Description Model was created with the new “PCM‑433 Support” plugin, which automatically demodulated Manchester encoded packets with a 3.0 % error correction band. What once required a trial‑and‑error aliquot of software went smoothly. The user also added an Automatic Gain Control block that kept the signal steady over the long span of the 433 MHz band, allowing distant devices—such as a smart lock performing a low‑power transmission—to be captured with surprising clarity.

Decoding the Whisper

With the flowgraph live, the system began to return packets encoded in popular protocols: EnOcean, Z‑Wave (433 MHz variant), and a homemade MyCarTrack loop that broadcast location data every 30 seconds. The SDR's low‑cost now encoded the bidirectional handshake between the user’s station and the security devices like a chat. A quick filter on the frequency range between 433.425 MHz and 434.175 MHz isolated the messages; a second filter, tuned to the 125 kHz subcarrier, separated the 433 MHz transmissions from the 315 MHz contending signals that had once appeared as interlopers.

The user captured a sequence from an outdoor motion sensor that sent not only “motion detected” but also battery voltage and a clockwise counter. By exporting the decoded stream to a text file, the user demonstrated how a simple Python script could plot battery life over weeks, turning raw radio chatter into a dashboard that would have once required a dedicated wireless network.

Future Horizons

In the months that followed, the Airspy HF+ became a hub for the local maker community. The updated firmware now supported a 50 kHz preamplifier stage, boosting sensitivity by an additional 5 dB without distortion. A new RFM‑SCOPE project deconstructed multilayer communication protocols on the 433 MHz band, revealing that small security devices could leak firmware updates to the wrong ears. Armed with knowledge, the user shared a workshop, encouraging attendees to build their own decoding chains. With an array of antennas—including the newly released Yagi‑12 model—the 433 MHz ISM band transformed from an abstract frequency into a living, breathing network of low‑power signals that could be listened to, studied, and understood in real time.

Turning a Quiet Night into a Listening Post

It was a cool evening in late October when I set up my Airspy HF+ on the sill of the garage roof, its weather‑proof casing standing out against the muted street lights. The little device, a wide‑band SDR with a frequency range stretching from DC to 30 MHz, promised a window into a world of radio chatter I had never seen before. I was particularly keen to listen to the 433 MHz ISM band, a spot often used by small asset trackers that ping their location every few minutes.

Preparing the Gear

After installing the latest firmware update for the Airspy HF+—released in March 2024 and adding a new low‑noise amplifier module—I plugged it straight into my laptop through the USB‑C connector. The air traveled over the mild humidity of an October night, a gentle hum of electric buzz."

On the computer I launched SDR#, the software that has become the standard interface for the Airspy community. In the “Receiver Options” I set the *Sample Rate* to one megasample per second. This gave me enough bandwidth to capture the 433 MHz band while keeping the data stream manageable. I positioned the centre frequency at exactly 433 MHz and squeezed the filter aperture to 350 kHz, focusing only on the segment where most asset tracking packets are found.

Listening to the Silent Signal

Within a few minutes the spectrum display lit up like a small city skyline. The 433 MHz band, usually quiet, suddenly filled with a steady hiss and a faint burst of modulation. Close inspection of the RF amplitude revealed a *Radio Frequency* (RF) pattern that matched the On-Off Keying (OOK) modulation used by many simple trackers. The pauses between bursts were the multi‑second heartbeats of devices that transmit their GPS coordinates every five minutes or so.

I saved the RF capture as a .wav file, then fed it into Signal Explorer. The software’s FFT view highlighted the narrowband pulse, and an Amplitude‑Envelope view showed the exact timing of the on–off cycles. By aligning these cycles with the known 433 MHz frame structure—14 bytes of data transmitted at 1 kBaud—I could pull out a packet that carried a U‑Blox 8‑character hex ID, a latitude and longitude pair, a speed, and a battery level.

Decoding the Asset’s Story

Using a small Python script that I had borrowed from a forum thread, I parsed the packet and converted the binary values into human readable forms. The script, decode_433.py, lived in a quiet corner of my GitHub repository and had just been updated in June 2024 to support the newer EnOcean protocol often used in 433 MHz trackers.

When the parser ran, it said: *Asset 0x12AF34 detected at 52.168289°N, 0.094165°W, travelling at 25 km/h, battery at 78 %*. The software gave me the room to double‑check the coordinates on a map; the point at which the asset had landed a freshly planted oak tree on the edge of the park. I smiled, realizing that a simple SDR could turn a quiet highway into a real‑time telemetry feed. The ability to monitor the 433 MHz band, once the domain of hobbyist aging wire‑tap kits, now fell within the reach of anyone with a modern combinational radio.

Where to Go From Here

The experiment was only the beginning. To improve sensitivity for more distant trackers I plan to add a high‑gain narrow‑band antenna to the Airspy mount and experiment with digital down‑conversion. Multiple 433 MHz receivers spread across the city could turn into a mesh of passive trackers, each broadcasting asset data in real time. As software continues to evolve—AIRSPY Software Development Kit (SDK) updates, new decoder algorithms released each winter—our ability to listen to the quiet waves of the 433 MHz band grows deeper and more reliable.

The Quiet Before the Signal

On a clear October evening I set up the Airspy HF+ at a small shed near my office. The tower of the building was the only thing that could block the world’s teeming wireless traffic—and that was exactly the point. My goal was simple but oddly specific: monitor the 433 MHz ISM band for the industrial data streams that were quietly painting the air with their numbers.

Preparing the Beast

I started by splashing the latest firmware onto the HF+. The updated DSP packs are optimised for low‑noise operation, which is a win for the faintest signals that ghost on the edge of bandwidth. The way the HF+ handles a 433 MHz input feels almost like tuning a telescope to a new star: the tuner levels out, the spurious emissions quiet themselves, leaving a pristine view for the software.

I then attached a lightweight band‑pass filter that carves out the 433 MHz slot from everything else. That filter’s roll‑off is so precise it feels as though the HF+ itself has a pair of delicate fingers teasing out the signal. With the filter in place, I let the radio settle; the echo of ambient interference faded and the 433 MHz line began to glow on my SDR# front‑end, a steady frequency peak on the waterfall.

Listening for the Whisper

Operating the HF+ on 433 MHz, the first thing I tapped into was a LoRa network transmitter that drones by a conservatory of factory machinery nearby. The wideband modulation of LoRa is a love‑letter written in subcarrier spread‑spectrum. With the “LoRa” plugin turned on in SDR#, the mottling morphs into distinct packets I could read into the packet log. Each packet carried telemetry—temperature, vibration frequency, and the nepotistic timestamp of an industrial PLC.

Not all transmissions in the band fit the LoRa envelope, however. Beside the Long Rail Net there was a quiet ASK (Amplitude Shift Keying) stream that slipped through the leaves of the shed. Those signals, from a fleet of wireless temperature probes embedded in pipework, were tiny FSK bursts at 50 kHz. By switching the SDR# demodulator to “FSK” and applying the Goertzel algorithm to the sideband, I could de‑interleave a three‑decimal‑point reading every few seconds. The crunch was elegant: the probe had been dead for hours, and the new readings sent my heart racing.

The Industrial Tango

When I was content to just hang onto the raw waveforms I turned to a more structured story. There is a European protocol called M‑BUS‑D, formed in the late nineties, that whispers across 433 MHz to a monitor on a milk‑dump site. Its packets are unkeyed, slow, yet precise. On a particular night, a real‑time spec called “industrial datastream” revealed the pulse of a refinery’s safety valve. The data was readily interpretable: a small base number and one dielectric constant. With each bit that drifted past the Airspy HF+, an original waveform snapped into a clean ASCII string documenting the vibration speed of the pump.

As the sun rose, the hymn of 433 MHz grew richer. A parking lot’s super‑short range RFID scanner pulsed a weekend’s worth of vehicle IDs, an air‑carpet of digital demos that I logged into a CSV file. Foreground and background all blended: telemetry from a sensor network, a stray LoRa message, a quiet IQ plot of a distant satellite uplink. The energy and data I captured illustrated the real volume of

© 2005 - 2026 AB9IL.net, All Rights Reserved.
Written and curated by Philip Collier / AB9IL.
About Philip Collier / AB9IL, Commentaries and Op-Eds, Contact, Privacy Policy and Disclosures, XML Sitemap.