[airprobe-main] Cell phone tracking using ss7 hlr lookups

Holger Hans Peter Freyther holger at freyther.de
Thu Feb 25 21:03:26 UTC 2010

On Thursday 25 February 2010 20:50:54 Karsten Nohl wrote:

> Creating the {MSC -> location} mapping database would be a very
> worthwhile exercise. The data collection would have to happen from
> phones. Either we create an application for one of the popular phone
> platforms (Symbian, Android, iPhone). Anybody on the list knows if
> these phones expose the MSC number to application software?
> Alternative, the Osmocon project could probably expose the MSC
> information easily. The project is still in early stages and it will
> take a few months until a collector software could be running. I
> wonder if any of the supported Motorola phones have GPS?


I'm not aware of any GSM 04.08 message containing information
about the MSC (besides GMM Error Message MSC not reachable).

The only thing that is available is the Location Area Code and that
is broadcasted in the System Information Type. So I assume you
are meaning this one? In GSM it is possible to page you by LAC so
that is the closest you get by without more advanced messages.

Did you mean this? In that case we would be at a state where we
could easily write such a scanner application. It would scan the
ARFCNs, get the SIs write out the LAC, continue..

am I off?


More information about the baseband-devel mailing list