Skip to content

Waveform Analysis

View raw signal data, detect modulation, and decode captured RF communications.


The Waveform Viewer provides a visual interface for analyzing captured RF signals from your Proxmark3. Access it after sniffing or reading cards to examine the underlying signal.


  • Pinch to zoom - Examine signal details
  • Swipe to pan - Navigate through the capture
  • Zoom slider - Fine-grained control
  • Reset view - Return to full waveform

Live display of:

  • Samples - Total sample count
  • Zoom - Current zoom level
  • Clock - Detected clock rate (when analyzed)
  • Mod - Detected modulation type

AnalysisDescription
Detect ClockAutomatically find the clock rate (RF/N)
ModulationIdentify ASK, FSK, PSK, or NRZ encoding

One-button analysis that:

  1. Detects modulation type
  2. Attempts ASK, FSK, PSK, and NRZ demodulation
  3. Runs protocol-specific searches (HID, EM, Indala, etc.)
  4. Reports any recognized card data

Optional preprocessing:

  • High-pass filter (data hpf)
  • Center threshold (cthreshold)
  • Left trim (ltrim)

Configure ASK/OOK decoding:

OptionDescription
ClockRF/N (auto-detect if empty)
InvertInvert output bits
AmplifyBoost weak signals
Sequence TerminatorCheck for ST
Max ErrorsTolerable bit errors (default: 100)
Max SamplesLimit sample count

Configure FSK decoding:

OptionDescription
ClockRF/N (auto-detect if empty)
Hi Field ClockHigh frequency period (e.g., 8, 10)
Lo Field ClockLow frequency period (e.g., 5, 8)
InvertInvert output bits

Common FSK configurations:

  • FSK1 RF/64: Clock=64, Hi=8, Lo=5
  • FSK2 RF/50: Clock=50, Hi=10, Lo=8
  • FSK2a RF/50: Clock=50, Hi=10, Lo=8, Invert

TypeCards
ASKHID Prox, EM4100, Indala, most LF cards
FSKHID iCLASS, AWID, Pyramid, IO ProxCard
PSKSome legacy systems
NRZDirect encoding

  1. Go to DiscoverySniff
  2. Execute a sniff command
  3. Tap View Waveform after capture
  1. Open File Manager
  2. Navigate to a .pm3 trace file
  3. Tap to open in Waveform Viewer

  • Good captures start with positioning - Get the Proxmark antenna as close as possible to the card/reader during sniff
  • Try preprocessing - Enable additional preprocessing if auto-demod fails on noisy signals
  • Check clock rate first - Knowing the clock helps narrow down the protocol
  • Compare to known cards - If you have a working card, capture its waveform for reference