HYBRID ACTIVE INTERCEPTOR · Technical specifications

Hybrid Active Interceptor System

A modular active cellular monitoring system with a dedicated GSM unit, a Multi-RAT base station and a laptop control station. The GSM unit handles voice and SMS functions on eight duplex channels. The Multi-RAT unit provides cellular identification across 2G, 3G, 4G and 5G NSA.

GSM 900 and 1800 MHz, including E-GSM.
Separate 2G and Multi-RAT radio modules.
Maximum RF output: 10 W for the 2G unit; 12 W for Multi-RAT.
SQL database with recording playback and data export.
AC power supply or DC supply with the vehicle kit.

Model: HYBRID ACTIVE INTERCEPTOR

Restricted to government agencies and law enforcement.

System architecture

GSM communications unit

The 2G base station handles GSM communications, including incoming and outgoing voice calls and SMS. Its eight duplex channels belong to the GSM subsystem.

Multi-RAT identification

A separate radio module supports multiple radio access technologies: GSM, UMTS, LTE and 5G NSA. Identification capabilities and voice-interception capabilities have different scopes.

Workstation and database

The laptop runs the system software and stores records. The SQL database supports subsequent review, recording playback and export.

Full description

Active cellular monitoring

An active system transmits cellular radio signals and participates in signaling exchanges with mobile devices. Its base-station hardware has both transmit and receive functions. This differs from passive reception, which listens to existing radio traffic without establishing a base-station connection.

HYBRID ACTIVE INTERCEPTOR separates the GSM communications module from the Multi-RAT identification module. The laptop provides the software interface, while dedicated hardware handles the radio functions, signal processing and power distribution.

GSM voice and SMS

The 2G module supports GSM 900 and GSM 1800, including E-GSM. It provides eight duplex channels for simultaneous monitoring and recording, with automatic recording and playback of calls and display of SMS content.

Duplex refers to the two directions of a communication link. The eight-channel specification describes GSM channel capacity; it is not a count of mobile operators.

Multi-RAT and 5G NSA

Multi-RAT means multiple radio access technologies. This unit supports identification functions across 2G GSM, 3G UMTS, 4G LTE and 5G NSA, including IMSI collection.

The 5G capability is Non-Standalone (NSA). The voice and SMS functions described for this configuration operate in GSM/2G; the Multi-RAT label does not extend those functions to native UMTS, LTE or 5G voice services.

Identifiers and communication content

An IMSI identifies a mobile subscription. An IMEI identifies mobile equipment. These identifiers are distinct from a telephone number and from the content of a conversation.

The system combines identification and GSM communication functions in separate modules. Keeping these roles separate is essential when interpreting its supported technologies, channel capacity and hardware configuration.

System modules

2G base station

Dedicated GSM 900/1800 hardware with E-GSM support, eight duplex channels and a maximum RF output of 10 W. The module provides the system’s GSM voice and SMS functions.

Multi-RAT base station

Separate radio hardware for 2G, 3G, 4G and 5G NSA identification. Maximum RF output is 12 W. Its supported cellular generations must be distinguished from the GSM unit’s communication capabilities.

Laptop control station

Runs the system software and provides local data storage. Records are organized in an SQL database for review, playback and export.

TDU processing module

The Tactical Deciphering Unit is a dedicated GSM signal-processing component associated with A5/1 support. It is separate from the radio modules and the laptop workstation.

Power supply units

The AC power supply accepts 110–230 V AC. A separate DC power supply accepts 9–36 V DC and is used with the vehicle kit.

RF amplifier and antenna equipment

The amplifier has an output rating of up to 80 W and supports 2G, 3G, 4G and 5G NSA. Antennas and connection cables complete the radio hardware configuration.

Technical specifications

Radio modules, power and data management
Product	HYBRID ACTIVE INTERCEPTOR
Architecture	Active modular cellular system with separate GSM and Multi-RAT units
Control station	Laptop with system software and data storage
GSM unit bands	GSM 900 and GSM 1800, including E-GSM
GSM channel configuration	8 duplex channels; expandable configuration
Voice and SMS scope	GSM / 2G
2G unit maximum RF output	10 W
Multi-RAT technologies	2G GSM, 3G UMTS, 4G LTE and 5G NSA
Multi-RAT function	Cellular identification, including IMSI collection
Multi-RAT maximum RF output	12 W
Dedicated signal-processing module	TDU — Tactical Deciphering Unit for GSM A5/1 processing
RF amplifier output	Up to 80 W
RF amplifier technology support	2G, 3G, 4G and 5G NSA
AC power supply input	110–230 V AC
DC power supply input	9–36 V DC, with the vehicle kit
Data storage	SQL database
Record management	Automatic recording, playback and export
Other system hardware	Antennas and connection cables

Records and traffic analysis

Stored records and playback

The SQL database holds system records for later review. Recorded calls can be played back, and the software provides an export function. Data management takes place on the workstation, separately from the radio hardware.

2G IP traffic

The traffic-analysis function covers IP streams carried over 2G. Payload inspection is limited to unencrypted content. Protocol metadata and readable payload are different types of information; support for IP traffic does not imply access to encrypted application content.

Additional units and software

The following components serve separate roles within the wider system family. The equipment schedule identifies which are included in an individual configuration.

Vehicle kit

A removable mounting arrangement for installation in a vehicle. It is paired with the DC power supply, whose input range is 9–36 V DC.

ECS SDR Backpack

A separate backpack-format Software Defined Radio unit with 2G, 3G, 4G and 5G NSA support. This is a distinct hardware format, not the enclosure specification of the main system.

Mobile Finder

A separate localization accessory covering 2G, 3G and 4G. Its function is distinct from the main system’s communication-recording and database functions.

C-SCAN cellular network analyzer

A separate network-survey tool that scans GSM, UMTS and LTE without SIM cards. Its network analysis should not be confused with voice or SMS interception.

CNAT analysis software

A web-based tool for reviewing communication records and presenting their relationships visually. It belongs to the analysis software layer, rather than the RF receiver or base-station hardware.

Pocket BTS Analyzer

A separate cellular-security tool for detecting suspected unauthorized IMSI catchers and interception systems. It supports 2G GSM, 3G UMTS and 4G LTE.

Frequently asked questions

How does active monitoring differ from passive reception?

Active equipment transmits cellular signaling and interacts with mobile devices through base-station hardware. Passive reception listens to radio signals already present. HYBRID ACTIVE INTERCEPTOR is an active system with separate GSM and Multi-RAT modules.

Does support for 5G NSA include 5G voice interception?

No. In this configuration, 5G NSA support belongs to the Multi-RAT identification unit. The voice and SMS functions are specified for GSM/2G.

What does the eight-channel specification mean?

It is the GSM unit’s duplex-channel capacity. Duplex includes both directions of a communication link. The figure does not refer to the number of mobile operators.

Are IMSI and IMEI the same as a telephone number?

No. IMSI identifies a mobile subscription, while IMEI identifies mobile equipment. A telephone number is a separate identifier. Capturing an identifier is also distinct from obtaining voice or message content.

Can the system use vehicle power?

Yes. The vehicle configuration uses a separate DC power supply with a 9–36 V DC input. The AC supply accepts 110–230 V AC.

Can the traffic analyzer display encrypted application messages?

The described traffic analyzer handles 2G IP streams and displays unencrypted payload. It does not establish support for reading end-to-end encrypted application messages.

Is C-SCAN part of the GSM communications module?

No. C-SCAN is a separate network analyzer for GSM, UMTS and LTE surveys. The GSM communications module and the network analyzer perform different functions.

Technical documentation and support

Hardware documentation

Module-specific datasheets cover the GSM unit, Multi-RAT unit, power equipment and amplifier. The system equipment list identifies the components supplied together.

Software documentation

Software-version and license details establish which record-management, export and analysis functions belong to the supplied configuration.

Integration information

Technical support can provide the relevant antenna, cabling and power-supply documentation, along with dimensions and environmental ratings for the selected hardware.