Passive monitoring of 5G New Radio (NR) traffic is well known to be very difficult because of the high configurability of physical layer settings and the presence of important but hidden parameters such as scrambling ID’s and Radio Network Temporary Identifiers (RNTIs). In this demonstration we show a real-time Golden Sniffer, an optimized C++ implementation which is able to recover user-specific parameters on the spot without any prior knowledge. The demo features an SDR-based live gNB, COTS devices, and our sniffer working in real time to extract cell metadata and to identify the Scrambling IDs and RNTIs by blind decoding of the Downlink Control Information (DCI). A dashboard displays the ongoing extraction of active RNTIs as well as real-time estimates of uplink and downlink throughput.

Mangione, S., Palamà, I., Dino, A., Focarelli, G., Bianchi, G. (2026). Demo: Real-Time Golden Sniffer for 5G NR Signal Interception. In Proceedings ACM MOBICOM (pp. 1855-1857) [10.1145/3795866.3848476].

Demo: Real-Time Golden Sniffer for 5G NR Signal Interception

S. Mangione
;
A. Dino;
2026-10-26

Abstract

Passive monitoring of 5G New Radio (NR) traffic is well known to be very difficult because of the high configurability of physical layer settings and the presence of important but hidden parameters such as scrambling ID’s and Radio Network Temporary Identifiers (RNTIs). In this demonstration we show a real-time Golden Sniffer, an optimized C++ implementation which is able to recover user-specific parameters on the spot without any prior knowledge. The demo features an SDR-based live gNB, COTS devices, and our sniffer working in real time to extract cell metadata and to identify the Scrambling IDs and RNTIs by blind decoding of the Downlink Control Information (DCI). A dashboard displays the ongoing extraction of active RNTIs as well as real-time estimates of uplink and downlink throughput.
26-ott-2026
9798400725050
Mangione, S., Palamà, I., Dino, A., Focarelli, G., Bianchi, G. (2026). Demo: Real-Time Golden Sniffer for 5G NR Signal Interception. In Proceedings ACM MOBICOM (pp. 1855-1857) [10.1145/3795866.3848476].
File in questo prodotto:
File Dimensione Formato  
MOBICOM_Demo.pdf

Solo gestori archvio

Tipologia: Pre-print
Dimensione 292.35 kB
Formato Adobe PDF
292.35 kB Adobe PDF   Visualizza/Apri   Richiedi una copia
3795866.3848476.pdf

accesso aperto

Descrizione: This is an open access article under the CC BY-NC-ND license
Tipologia: Versione Editoriale
Dimensione 298.87 kB
Formato Adobe PDF
298.87 kB Adobe PDF Visualizza/Apri

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/10447/721054
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus ND
  • ???jsp.display-item.citation.isi??? ND
social impact