Hello, We have a working OpenBSC-LCR-Asterisk setup by now. Sending SMS from one cell phone to another works perfectly after typing "sms send pending" in the vty-console. Is it always needed to trigger the sms-sending manually or is there a fixed intervall in which sms will be transfered? Still a problem exists. If we try to send a sms directly from the bsc_hack_vty with "subscriber extension xxx sms send "TEXT"", the bsc_hack crashes: <0008> paging.c:225 Start paging of subscriber 36 on bts 0. <0008> paging.c:225 Start paging of subscriber 36 on bts 1. <0008> paging.c:87 Going to send paging commands: imsi: '262012840035907' tmsi: '0x79d38c8e' <0008> paging.c:87 Going to send paging commands: imsi: '262012840035907' tmsi: '0x79d38c8e' <0008> paging.c:87 Going to send paging commands: imsi: '262012840035907' tmsi: '0x79d38c8e' <0008> paging.c:87 Going to send paging commands: imsi: '262012840035907' tmsi: '0x79d38c8e' <0004> abis_rsl.c:1165 (bts=0,trx=0,ts=0,ss=0) Activating ARFCN(871) SS(0) lctype SDCCH r=LOCATION_UPDATE ra=0x15 <0004> abis_rsl.c:969 (bts=0,trx=0,ts=0,ss=0) CHANNEL ACTIVATE ACK <0009> abis_rsl.c:831 MEASUREMENT RESULT NR=0 RXL-FULL-ul=-108dBm RXL-SUB-ul=-108dBm RXQ-FULL-ul=6 RXQ-SUB-ul=6 BS_POWER=0 NOT VALID NUM_NEIGH=0 <0005> abis_nm.c:519 OC=BASEBAND TRANSCEIVER(04) INST=(00,00,ff) Failure Event Report Type=processing failure Severity=warning level failure <0000> abis_rsl.c:1276 (bts=0,trx=0,ts=0,ss=0) SAPI=0 ESTABLISH INDICATION <0003> gsm_04_08.c:799 PAGING RESPONSE: mi_type=0x04 MI(2043907214) <0003> gsm_04_08.c:817 <- Channel was requested by 262012840035907 <0008> paging.c:289 Stop paging on bts 0, calling cbfn. <0007> gsm_04_11.c:1151 paging_cb_send_sms(hooknum=1, event=0, msg=(nil),lchan=0x85365d8, sms=0x859cd58) <0008> paging.c:293 Stop paging on bts 1 silently. <0009> abis_rsl.c:831 MEASUREMENT RESULT NR=1 RXL-FULL-ul=-47dBm RXL-SUB-ul=-47dBm RXQ-FULL-ul=6 RXQ-SUB-ul=6 BS_POWER=0 L1_MS_PWR= 2dBm L1_FPC=0 L1_TA=0 NOT VALID NUM_NEIGH=0 <0000> abis_rsl.c:1276 (bts=0,trx=0,ts=0,ss=0) SAPI=0 DATA INDICATION <0003> gsm_04_08.c:835 CLASSMARK CHANGE CM2(len=3) CM3(len=2) <0009> abis_rsl.c:831 MEASUREMENT RESULT NR=2 RXL-FULL-ul=-47dBm RXL-SUB-ul=-47dBm RXQ-FULL-ul=0 RXQ-SUB-ul=0 BS_POWER=0 L1_MS_PWR= 2dBm L1_FPC=0 L1_TA=0 RXL-FULL-dl=-47dBm RXL-SUB-dl=-47dBm RXQ-FULL-dl=7 RXQ-SUB-dl=3 NUM_NEIGH=1 <0009> abis_rsl.c:863 IDX=0 ARFCN=877 BSIC=63 => -56 dBm <0000> abis_rsl.c:1276 (bts=0,trx=0,ts=0,ss=0) SAPI=3 ESTABLISH CONFIRM <0007> gsm_04_11.c:1125 rll_ind_cb(lchan=0x85365d8, link_id=3, sms=0x859cd58, type=0 <0007> gsm_04_11.c:1057 send_sms_lchan() <0001> transaction.c:69 subscr=0x859cb98, subscr->net=0x8533960 Program received signal SIGSEGV, Segmentation fault. 0x003a4785 in ?? () from /lib/tls/i686/cmov/libc.so.6 gdb bt prints out: Program received signal SIGSEGV, Segmentation fault. 0x003a4785 in ?? () from /lib/tls/i686/cmov/libc.so.6 (gdb) bt #0 0x003a4785 in ?? () from /lib/tls/i686/cmov/libc.so.6 #1 0x001729e9 in gsm48_encode_bcd_number (bcd_lv=0xbffff130 "", max_len=12 '\f', h_len=1, input=0xa6 <Address 0xa6 out of bounds>) at gsm48_ie.c:83 #2 0x080d137d in gsm340_gen_oa (conn=0x8536990, sms=0x8592f90) at gsm_04_11.c:423 #3 gsm340_gen_tpdu (conn=0x8536990, sms=0x8592f90) at gsm_04_11.c:461 #4 gsm411_send_sms_lchan (conn=0x8536990, sms=0x8592f90) at gsm_04_11.c:1096 #5 0x080bfe2f in complete_rllr (rllr=0x8592f18, type=BSC_RLLR_IND_EST_CONF) at bsc_rll.c:59 #6 0x080b7238 in abis_rsl_rx_rll (msg=0x8591db8) at abis_rsl.c:1303 #7 abis_rsl_rcvmsg (msg=0x8591db8) at abis_rsl.c:1728 #8 0x080c3c8a in handle_ts1_read (bfd=0x858550c, what=<value optimized out>) at input/ipaccess.c:489 #9 ipaccess_fd_cb (bfd=0x858550c, what=<value optimized out>) at input/ipaccess.c:597 #10 0x0016f925 in bsc_select_main (polling=1) at select.c:119 #11 0x08050289 in handle_gsm_bs () at gsm_bs.cpp:864 #12 0x08084343 in main (argc=2, argv=0xbffff884) at main.c:472 Maybe someone expirienced the same problems or can provide some help? Best Regards and Thank you, Richard Zahoransky