Rtl_fm is a little utility I wrote for the rtl-sdr project. The program was made to fill a gap in software defined radio: all the computers weaker than a Pentium 4. Basically, an Atom processor processor does not have enough oomph to demodulate something as simple as narrow band FM using the standard tools. (Recently a high performance FM demodulator was released, Simple FM but it works only passably on newer Atoms.) So rtl_fm was written with one goal, efficiency, in mind.
The very first version ran with plenty of cycles to space. As an unexpected bonus, it ended up being efficient enough to easily run on small ARM boards such as the Raspberry Pi. GnuRadio is a really great program easily worth a thousand bucks. But it was designed to run on $500 computers with $500 SDR hardware. Where as this is made for $20 SDRs plugged into $20 computers. More powerful windows and OSX machines can easily handle several instances of rtl_fm at once.
Rtl_fm is a general purpose analog demodulator. It can handle FM, AM and SSB. It can scan more than a hundred frequencies a second. For digital modes, piping the audio into multimon-ng works very well. On a Raspberry Pi, rtl_fm + multimon uses just over half of the CPU. If you are interested in ADS-B decoding, check out the rtl_adsb utility. It uses only 6% CPU on a Raspberry Pi and can run on targets as small and adorable as a 16MB TL-R703N. If you are using Arch Linux, I've already packaged these tools for you and you can install them with
pacman -S rtl-sdr. If you need something more specific, feel free to send me an email.
Throughout this guide, I'll be using Sox's
play command to play the audio. This is because Sox works on Linux, OSX, Windows and pretty much anything else you can run a compiler on. (If you are using Windows, rename the sox binary to
play first.) Sox will automatically resample the audio to keep your soundcard happy and can apply denoising filters to keep your ears happy. If you want to run closer to the metal, feel free to use the utilities provided by Alsa or OSS or Pulse. But I won't be talking about them in this guide.
Before starting, make sure your dongle works.
rtl_test should return a list of supported gain values and not produce error messages. Make sure you are using a USB 2.0 port as well, otherwise you get really weird errors.
It is also very important to always make sure
rtl_fm and Sox are both set to use the same data rate. This is probably the most common problem people run into.
This will tune to a broadcast FM station.
-f gives the frequency to tune in.
-M wbfm says to use wideband FM mode, but this is really a shortcut for a tweaked narrowband FM mode. It expands fully into
- '-f ...' indicated the frequency to tune to
-M fmmeans narrowband FM
-s 170kmeans to sample the radio at 170k/sec
-A fastuses a fast polynominal approximation of arctangent
-r 32kmeans to lowpass/resample at 32kHz
-l 0disables squelch
-E deempapplies a deemphesis filter
Needless to say, this is a lot just to listen to the local radio. So use
-M wbfm instead. If conditions are poor you might need to manually add some gain with
-g 20 or so.
This one will take a lot more fiddling to work properly. First, you of course need channels used by your municipality. And this will only work if your local services have not upgraded to P25 or some other trunked system.
-M fmnarrowband FM
-f ...frequency to tune, use multiple times for scanning
-s 12ksample rate, about as narrow as possible for FM voice
-g 50set gain to maximum (use a value appropriate to your dongle)
-l 70set squelch to 70. The exact values varies a lot. Changing the gain or sample rate will require a change in the squelch to compensate.
The airband has a lot of channels to scan. Explicitly listing them all is not practical, so use a channel range.
-M amAM demodulation
-f start:stop:intervala range of frequencies to scan
-s 12ksame as above
-g 50same as above
-l 280squelch level, exact value varies a lot
Pagers are considered private communications in some areas (notably the US) and may be illegal to read.
Exact frequency and gain depends on your area. Most of these options should be familiar by now. The only new thing is
-s 22050 (the only sample rate multimon supports) and the rather peculiar incantation multimon needs to use standard input. Frequency scanning also works in conjunction with multimon.
Maybe you have a poor quality wifi link and don't want to send a full 1MS/s data stream around. Here is how to make a quick and dirty mp3 stream that will average 4KB-8KB/sec for voice channels. Other codecs may be swapped in as desired.
This is normal behavior, to dodge the DC spike present in E4000 tuners. The software tunes slightly off center and then corrects for the offset during demodulation.
That is really hard. But Sox provides filters for it and you can use these filters in your
-M fmnarrow band FM
-M wbfmwide band FM
-M amamplitude modulation
-M lsblower sideband
-M usbupper sideband
-M rawraw output, 2x16 bit IQ pairs. Purely debugging and no sane person has any use for this.
Tune to a frequency. Value can be specified as an integer (89100000), a float (89.1e6) or as a metric suffix (89.1M). Multiple values or ranges will be scanned.
When using multiple dongles, this indicated which. You can also identify dongles by the text in the serial number field of the EEPROM.
Enable a higher quality downsampling FIR than the default boxcar filter.
-F 0 is okay to use while
-F 9 is still a work in progress.
Choose how arctan is computed. Options select between the standard (floating) lib, a fast polynomial integer approximation and a precomputed look-up-table.
-E dcdc blocking filter
-E deempde-emphasis filter for WBFM
-E directdirect sampling mode
-E offsetoffset tuning mode (E4000 only)
Squelch is required for scanning multiple frequencies, to indicated when a frequency should be skipped. When used with a single frequency the output will be muted instead. Default value is 0/off.
Squelch values are extremely sensitive to external conditions (noise and antenna) as well as the other options used. For example, squelch should be halved when the sample rate is doubled. When in doubt, start at zero and work upwards.
The number of squelch hits to count up to. Default value is 20. So the squelch must be trigger 20 times consecutively before rtl_fm moves on to the next channel.
Negative delay values cause rtl_fm to exit instead of hopping to another channel or muting the output. This is useful for scripts or trunked systems.
In some odd circumstances you might want to apply an extra low pass downsampling/resampling stage. This is for that, but most of the time it is rarely needed. It will also change the output rate. It is also a very poor quality resampler. Use sox for resampling.