OnAirCellular & rail · Experimental
Decode Cell towers with an SDR
OnAir receives Cell towers. LTE cells around you: operator, band, EARFCN, PCI, eNB and sector, TAC, neighbours (receive only, public broadcast).
What Cell towers is
LTE base stations broadcast system information (operator, band, cell identity) that any receiver can read. It is the public part of the signal.
Frequencies and where it is used
LTE downlink broadcast (MIB, SIB1 - SIB5).
In OnAir the tuning shortcut is LTE, band scan; you can enter any frequency your radio reaches.
What OnAir shows for Cell towers
Operator, band, EARFCN, PCI, eNB / sector, TAC, neighbours, band scan; receive only.
This receiver is built from the published specification and checked end to end on simulated signals. It has had little or no testing on real transmissions yet, so reports and recordings on Discord are welcome.
Which radio you need
Any radio that tunes this range works. An RTL-SDR covers roughly 24 MHz to 1.7 GHz, and every other radio in the radio guide reaches it too. Antenna height and a clear view of the transmitter matter most.
Questions about Cell towers
Can I decode Cell towers with an RTL-SDR?
Usually yes for narrowband signals, as an RTL-SDR tunes roughly 24 MHz to 1.7 GHz at up to about 2.4 Msps. Wide signals such as TV channels need a faster radio, and OnAir says next to the source what the selected radio can do.
Is it legal to receive Cell towers?
OnAir only reads the public broadcast information of cells and base stations, and does not decrypt or follow any user traffic. Check the rules where you live.
Can I try Cell towers in OnAir without a radio?
Yes. Most modes include a built-in synthetic test signal, so you can open the screen and try the controls before you own a radio.
Try it without a radio
OnAir includes built-in synthetic test signals for most modes, so you can open this screen, see the layout and try the controls before you own a radio. The Tour button walks you through the app.