March 2009 - OpenBSC - lists.osmocom.org

by Michael Gernoth

Hi, after receiving an E1 card, I tried (unsuccessfully) to get bsc_hack up and running: http://pbot.rmdir.de/19e2baa94ffedfdb814dce0a9346532e After that, no new network can be found with a mobile phone. bs11_config is reporting: PHASE: 3 Normal MBCCU0: Load MBCCU1: Load Abis-link: Up When bsc_hack is started, the following message appears a huge number of times in the kernel log: Mar 1 17:24:51 faui43g kernel: mISDN_send: error -12 and then sometimes messages like: Mar 1 17:24:52 faui43g kernel: ph_data_indication 0x0 0x3 0x0 The kernel version is 2.6.27.19 (patched), but I also tried the newest git tree from Linus with the same results. I think the configuration of my BS-11 is somehow broken, as both TRX seem to be enabled: BS11 Power Amplifier 0 ATTRIBUTES: TRX Power: 30mW (GSM) BS11 Power Amplifier 1 ATTRIBUTES: TRX Power: 30mW (GSM) But running bs11_config delete-trx1 (or create-trx1) just produces BS11 DELETE OBJECT NACK (respectively BS11 CREATE OBJECT NACK): http://pbot.rmdir.de/53344f67ed0cb86f24c4a79f0af4fe2e Trying to reset the standard configuration by deleting and recreating all objects in create_objects() doesn't work, too: http://pbot.rmdir.de/13e0b928689c0d527b13fa52698b9391 (Patch: http://pbot.rmdir.de/e549a8a52da6d389326e2e2891c2f289) It seems to me, that I have to reset the BS-11 to the factory defaults and recreate the configuration with bs11_config, but I don't know how to do that (and if I need the firmware files for that...). Did I miss something obvious, or is the configuration of my BS11 somehow broken? Thanks & Regards, Michael -- Michael Gernoth Department of Computer Science IV Martensstrasse 1 D-91058 Erlangen Germany University of Erlangen-Nuremberg http://www4.informatik.uni-erlangen.de/~gernoth/

15 years, 1 month

2
4
0 0

RequestForHelp on mISDNUser

by Holger Freyther

Hey guys, some month ago I added basic support to dump the LAPD frame we send and receive. This code was disabled in Haralds restructuring of this layer in order to add support for the IP Access nanoBTS. The question is now should we repair or nuke this feature. Shortly after having finished my implementation prom pointed me to the mISDNuser tool[1]. It looks like this can write pcap files as well and that wireshark should be able to handle them. I would be happy if someone could try this tool and see what files are produced and if we should continue this way or restore the "-p file" functionality. thanks z. PS: Maybe we just need to move the pcap Linux-LAPD header over to this tool... [1] http://git.misdn.org/?p=mISDNuser.git;a=blob;f=debugtool/mISDNdebugtool.c;h…

15 years, 1 month

1
0
0 0

SMS are now stored in SQL table

by Harald Welte

Hi all! Today I've just committed some code that stores incoming SMS in the SQL table as soon as they are received. There is also more error handling right now, i.e. if the SMS is sent to an unknown extension, it is rejected right away. What's still missing is the code to actually deliver the SMS from the SQL table to the destination phone. For this, we need to * decouple paging from voice calls * correctly construct TPDU and RP/CP header from actual SMS payload * trigger SMS delivery of pending messages at LOCATION UPDATING / IMSI ATT * trigger SMS delivery once the MS tells us it has memory (SMMA) * regularly iterate over undelivered SMS and try to send them * decide how to handle SMS while a voice call is ongoing If anyone has a good idea what to do about UCS2 encoded messages, I'm more than happy to hear about it. My plan so far is to translate it to UTF-8 and store it as UTF-8 in the SQL database. This way we have something that most linux systems (and other tools) can deal with. Disadvantage is that we'd end up translating a message back and forth... Also, if somebody is more familiar with the 'regular' SMSC architecture in real GSM networks, it would probably be good to think of a way how we can integrate external SMS delivery both incoming and outgoing. SMS is much easier since it is basically data/signalling only and there's no need to actually route unstructured voice data like it is the case for regular phone calls. -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

15 years, 1 month

2
1
0 0

Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Holger Adams

Hello Everybody, my E-1 link now seems to work correctly. at least I can see the LAPD RR-PingPong on my analyzer. First Problem: I'm still having some problems with bs11_config, this happens with create-trx1 and delete-trx1. If I remember right, this already have been reported by somebody else. I first disconnected the BTS from the BSC with 'bs11_config disconnect'. openbsc:/svn/trunk/openbsc/src# ./bs11_config delete-trx1 bs11_config (C) 2009 by Harald Welte and Dieter Spaar This is FREE SOFTWARE with ABSOLUTELY NO WARRANTY LMT LOGON: ACK PHASE: 2 Maintenance MBCCU0: No Load MBCCU1: Load Abis-link: Down Wed Mar 18 15:24:51 2009 <0020> abis_nm.c:689 BS11 DELETE OBJECT NACK Wed Mar 18 15:24:51 2009 <0020> abis_nm.c:689 BS11 DELETE OBJECT NACK LMT LOGOFF: ACK (same for create-trx1). ~ Second problem: openbsc:/svn/trunk/openbsc/src# ./bsc_hack -a -f 123 Allowing everyone? DB: Database initialized. DB: Database prepared. 1 device found id: 0 Dprotocols: 00000018 Bprotocols: 0000000e protocol: 4 nrbchan: 30 name: hfc-e1.1 activate bchan bootstrapping OML Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=0) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=1) E1=(0,2,1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=2) E1=(0,2,2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=3) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=3) E1=(0,2,3) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=4) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=4) E1=(0,3,0) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=5) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=5) E1=(0,3,1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=6) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=6) E1=(0,3,2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=7) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=7) E1=(0,3,3) bootstrapping RSL MCC=1 MNC=1 bootstrapping OML Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=0) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=1) E1=(0,2,1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=2) E1=(0,2,2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=3) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=3) E1=(0,2,3) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=4) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=4) E1=(0,3,0) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=5) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=5) E1=(0,3,1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=6) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=6) E1=(0,3,2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=7) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=7) E1=(0,3,3) (...) 'bsc_hack' hangs here, can't get more - even with verbose settings. Sometimes I get something like a 'Failure Event' (can't remember excact message) and 'RADIO ... DISABLED'. I don't have loggings of these, Sorry. Have I missed something? Best Regards, Holger

15 years, 1 month

3
4
0 0

Re: Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Dieter Spaar

Hello Harald, On Mon, 23 Mar 2009 15:05:09 -0300, "Harald Welte" <laforge(a)gnumonks.org> wrote: > > yes, DELETE OBJECT is currently not working in bs11_config. I or somebody else > with LMT (Dieter?) need to look at a LMT when deleting an object and compare > the binary data with what bs11_config generates in order to check for differences > and fix them. I think the DELETE OBJECT message is fine, the problem is that an object has to be locked before it can be deleted. This is how locking/unlocking looks in LMT (its basically the CHG_ADM_STATE message): ; Lock BBSIG 1 Tx 69A50200010401 Rx 61A5020001040124010701071C0100 Rx 6AA50200010401 ; Lock PA 1 Tx 69A50900010401 Rx 61A5090001040124010701071C0100 Rx 6AA50900010401 ; Unlock PA 1 Tx 69A50900010402 Rx 61A5090001040224010701071C0100 Rx 6AA50900010402 ; Unlock BBSIG 1 Tx 69A50200010402 Rx 61A5020001040224010701071C0100 Rx 6AA50200010402 After the object is locked, it can be deleted: ; Delete BBSIG 1 Tx ACA5020001 Rx ADA5020001 Please note that locking for deleting is enough, unlocking the deleted object is of course not needed. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

15 years, 1 month

2
1
0 0

BTS connections

by Eric Cathelinaud

Hello everybody, I would like to know whether it would be possible to obtain some information about the cable connection. It is written on the website that the Y03 and Y04 PCM are left open, but I can see on the photo http://bs11-abis.gnumonks.org/trac/attachment/wiki/BS11_Configuration/bs11_… that there is a twinax cable between them. Am I wrong? If not, I would like to know what's the use of this connection. Thanks a lot Eric

15 years, 1 month

2
1
0 0

Re: Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Dieter Spaar

Hello Holger, On Thu, 19 Mar 2009 17:25:15 +0100, "Holger Adams" <holger(a)kernreaktor.org> wrote: > > I remember that one TRX wasn't ('No Load') loaded. Phase 3 was reached. If this is the first one, it won't work because this is the one OpenBSC uses in the moment. If it is not loaded you should switch off and on the BS-11 and check if it works afterwards. On my BS-11 there seems to be a temperature related problem which sometimes requires quite a few restarts to get the first TRX loaded. Additionally it could be that an attached RS232 cable disturbs the startup process. All of the above is not 100% sure because its difficult to reproduce, but maybe it helps to load the first TRX (if the second TRX is not loaded this should be no problem to get OpenBSC running). Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

15 years, 1 month

3
3
0 0

Re: Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Dieter Spaar

Hello Holger, On Mon, 23 Mar 2009 09:13:00 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote: > > There are still some problems of getting the TRX started (sorry for keep > bugging, but it doesn't make real fun to start developing without a > working fundament). I don't see a problem with the traces, what you receive is the "Channel Load" Indication from the BS-11, OpenBSC advices the BS-11 to send this report. > I except of beeing 'DoSed' by various mobilephones lying around here, but > nothing happens. I also can't see the 'OpenBSC-Test' provider on my > mobilephones (manual network select). A phone normally won't register to the test network as long as it reaches the network stored on the SIM. You should see the network "001-01" if you manually search for a network (it could also be "Test01" or similar), but not the name 'OpenBSC-Test'. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

15 years, 1 month

1
0
0 0

Re: Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Dieter Spaar

Hello Holger, On Thu, 19 Mar 2009 14:32:48 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote: > > The programm stucks at 'TX TEI(1): 10 1a 1e 06 0b 00 0b 06 1e 00 01 00 f1 > 10 00 01 28 ff' but continues playing LAPD-RR-Pingpong. Should I try to > reflash the firmware? I also tried restarting 'openbsc' a few times. > Does bs11_config show that both TRX are loaded and that the BS-11 is in Phase 3 ? Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

15 years, 1 month

2
1
0 0

Re: Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Dieter Spaar

Hello Holger, On Thu, 19 Mar 2009 11:02:05 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote: > > Sniffed Abis-Link (with K1103): > http://www.kernreaktor.org/stuff/bs11-e1.txt I am not familiar with the K1103. But if I don't misunderstand the traces, everything should be fine. After the database has been sent to the BS-11, you won't see any additional traffic on the E1 interface as long as there is no phone registering to the BS-11 or you advice OpenBSC to send something to the BS-11. You should now be able to see the network with a phone. If you want to generate some E1 traffic without a phone, you can press (or release) the instrusion switch, this should result in a report sent from the BS-11. However I don't know how long the delay is between actually changing the switch state and the resulting report. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

15 years, 2 months

2
1
0 0

Wanted: A-bis and/or Um protocol traces for GPRS

by Harald Welte

Hi! As one of our following steps in OpenBSC will be work on GPRS support, I would be interested in any GPRS related protocol traces of the A-bis interface or the Um interface. Particularly interesting obviosuly is the registration and session setup/teardown. So if anyone has such traces for GPRS, please don't hesitate to contact me. The traces will not be publicized but just used as a reference and example for the further development of OpenBSC. Thanks in advance! (yes, I'm still on holidays, but rather wrote that email immediately than to put it on a TODO list and loose time and/or forget about it) -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

15 years, 2 months

1
0
0 0

E1 interface, layer 2

by Klaus-Peter Junghanns

Hi, i am staring at the sources right now, figuring out how openbsc uses which part of misdn to send/receive frames over the e1 link. I think it's doing something like this (please correct me if i am wrong: - use timeslot 1 in hdlc mode for the signalling link - use misdns layer 2 to handle the TEI assignment, etc What i am wondering about is: - which ETSI standard describs layer 2 for GSM abis? Thanks a lot in advance for your feedback. :-) Mit freundlichen Grüßen -- best regards Klaus-Peter Junghanns -- Junghanns.NET Gesellschaft fuer Internet-Services & Software-Development mbH Breite Str. 13a 12167 Berlin Germany Geschaeftsfuehrer : Klaus-Peter Junghanns Eingetragen beim Amtsgericht Charlottenburg, HRB 79169 Finanzamt fuer Koerperschaften III, Steuernummer 29/409/8978 Umsatzsteuernummer : DE 217621658 WEEE-Reg.-Nr. DE 86102730

15 years, 2 months

2
2
0 0

Re: E1 interface, layer 2

by Dieter Spaar

Hello, On Tue, 10 Mar 2009 15:24:00 +0100, "Klaus-Peter Junghanns" <kpj(a)junghanns.net> wrote: > > What i am wondering about is: > - which ETSI standard describs layer 2 for GSM abis? As far as I am aware, its LAPD as specified by ITU Q.920 and Q.921 (very similar if not equal to what is used in the "D"-channel of ISDN). Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

15 years, 2 months

1
0
0 0

Racal 6103 ?

by Dieter Spaar

Hello, does anyone has access to a Racal 6103 ? I have bought a used one and have some questions. Please drop me a note, private email is fine. Thank you very much. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

15 years, 2 months

2
1
0 0

BS-11, bs11_config

by Klaus-Peter Junghanns

Hello everybody, finally i found some time to unwrap my precious BS-11 and started playing. Unfortuantely i did not get to far... I managed to build the power cable, install the antenna, hook up the serial cable to a debian box and install the openbsc software. I followed the steps in the wiki, e.g. run "bs11_config -p /dev/ttyS0" and then turn on the BS-11. The green power LED on the BS-11 is solid green. But i do not get any output from the bs11_config (e.g. no booting messages, etc). :-( Sometimes bs11_config segfaults when i switch on the power to the BS-11: bs11_config -p /dev/ttyS0 bs11_config (C) 2009 by Harald Welte and Dieter Spaar This is FREE SOFTWARE with ABSOLUTELY NO WARRANTY Invalid length in hdr: 0 Segmentation fault The serial cable is connected to the serial port (1 of 4) which is closest to the antenna connectors (like i have seen it on the photo). What did i do wrong? Thanks in advance for your help. :-) Mit freundlichen Grüßen -- best regards Klaus-Peter Junghanns -- Junghanns.NET Gesellschaft fuer Internet-Services & Software-Development mbH Breite Str. 13a 12167 Berlin Germany Geschaeftsfuehrer : Klaus-Peter Junghanns Eingetragen beim Amtsgericht Charlottenburg, HRB 79169 Finanzamt fuer Koerperschaften III, Steuernummer 29/409/8978 Umsatzsteuernummer : DE 217621658 WEEE-Reg.-Nr. DE 86102730

15 years, 2 months

4
6
0 0

Re: Jumper settings for 120 Ohm connection

by Dieter Spaar

Hello Holger, On Sat, 28 Feb 2009 11:53:23 +0100, "Holger Adams" <holger(a)kernreaktor.org> wrote: > > Maybe its important to mention: > - Both LEDs of the E-1 card are blinking red > - Used cables for the RJ45 plug (CAT5): orange/blue I can't help with Linux (I use Windows), however I noticed this in mISDN (hfc_multi.c) a while ago: case 1: /* HFC-E1 OEM */ /* 2 red blinking: NT mode deactivate * 2 red steady: TE mode deactivate * left green: L1 active * left red: frame sync, but no L1 * right green: L2 active */ So I would guess that there is a synchronisation problem which is not related to the TEI setting. Maybe there is something wrong with the wire connection. If you can see the signal sent from the E1 card at the BS-11 and there is also a signal sent from the BS-11, than probably the signal from the BS-11 is not received by the E1 card so it could not synchronize on it. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

15 years, 2 months

3
2
0 0

Jumper settings for 120 Ohm connection

by Holger Adams

Hello Everybody, I'm just trying to connect the E-1 host card to the BS-11, but I can't get it work. The serial connection works fine, I'm also seeing the "Abis-link: Restoring" message. My hardware configuration: 1) I removed the green jumpers TB01 - TB04 2) Jumper settings below the Twinax-board: 1-4 ON, 5-8 OFF 3) HFC-E1: NT Mode, Config A (all jumpers on the left side to the left) 4) 'hfcmulti' modprobed with 'dslot=1' 5) Forced the BS-11 to use correct TEI and E1 slot by using 'bs11_config' Have I missed something? I put a scope upon the rx/tx pins - traffic flows into both directions, so I think there's no collision (tx->tx, rx->rx) Thanks, Holger

15 years, 2 months

2
3
0 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

OpenBSC March 2009