- baseband-devel - lists.osmocom.org

For sale some phones that are no longer required.
by George Carpenter 24 Jul '12

24 Jul '12

Hello. I have some motorola phones that they are no longer required by my friends. These phones are with the filter rework done. The phones are complete with serial and antenna cables but can be sent without them. If anyone is interested, please send me a msg at irc (OsmoCarpenteR), do not reply to this msg. Thanks.

1 0

The AMR decode segmentation fault
by bob 24 Jul '12

24 Jul '12

Hi,List I use a TCH/AFS decoder written by Sylvain Munaut and mad to decode the TCH AMR, but it seems there are some bug, but I am not familiar with the convolution codes， the code is following, who are familiar can help me? very thanks! /* * conv_amr.c * * Convolutional code tables for TCH/AFS channels * * Copyright (C) 2011 Sylvain Munaut <tnt(a)246tNt.com> */ #include <stdint.h> #include <osmocom/core/conv.h> /* TCH/AFS12.2 */ /* ----------- */ //# AFS12.2 1/2, K=5, RSC static const uint8_t conv_afs12_2_next_output[][2] = {{0, 3}, {1, 2}, {0, 3}, {1, 2}, {0, 3}, {1, 2}, {0, 3}, {1, 2}, {0, 3}, {1, 2}, {0, 3}, {1, 2}, {0, 3}, {1, 2}, {0, 3}, {1, 2},}; static const uint8_t conv_afs12_2_next_state[][2] = {{0, 1}, {2, 3}, {4, 5}, {6, 7}, {9, 8}, {11, 10}, {13, 12}, {15, 14}, {1, 0}, {3, 2}, {5, 4}, {7, 6}, {8, 9}, {10, 11}, {12, 13}, {14, 15},}; static const uint8_t conv_afs12_2_next_term_output[] = {0, 1, 0, 1, 3, 2, 3, 2, 3, 2, 3, 2, 0, 1, 0, 1,}; static const uint8_t conv_afs12_2_next_term_state[] = {0, 2, 4, 6, 8, 10, 12, 14, 16, 18, 20, 22, 24, 26, 28, 30,}; static const uint16_t conv_afs12_2_punct[] = {321, 325, 329, 333, 337, 341, 345, 349, 353, 357, 361, 363, 365, 369, 373, 377, 379, 381, 385, 389, 393, 395, 397, 401, 405, 409, 411, 413, 417, 421, 425, 427, 429, 433, 437, 441, 443, 445, 449, 453, 457, 459, 461, 465, 469, 473, 475, 477, 481, 485, 489, 491, 493, 495, 497, 499, 501, 503, 505, 507, -1,}; const struct osmo_conv_code conv_tch_afs_12_2 = { .N = 2, .K = 5, .len = 250, .next_output = conv_afs12_2_next_output, .next_state = conv_afs12_2_next_state, .next_term_output = conv_afs12_2_next_term_output, .next_term_state = conv_afs12_2_next_term_state, .puncture = conv_afs12_2_punct, }; //# AFS10.2 1/3, K=5, RSC static const uint8_t conv_afs10_2_next_output[][2] = {{0, 7}, {2, 5}, {4, 3}, {6, 1}, {2, 5}, {0, 7}, {6, 1}, {4, 3}, {0, 7}, {2, 5}, {4, 3}, {6, 1}, {2, 5}, {0, 7}, {6, 1}, {4, 3},}; static const uint8_t conv_afs10_2_next_state[][2] = {{0, 1}, {3, 2}, {5, 4}, {6, 7}, {9, 8}, {10, 11}, {12, 13}, {15, 14}, {1, 0}, {2, 3}, {4, 5}, {7, 6}, {8, 9}, {11, 10}, {13, 12}, {14, 15},}; static const uint8_t conv_afs10_2_next_term_output[] = {0, 5, 3, 6, 5, 0, 6, 3, 7, 2, 4, 1, 2, 7, 1, 4,}; static const uint8_t conv_afs10_2_next_term_state[] = {0, 2, 4, 6, 8, 10, 12, 14, 0, 2, 4, 6, 8, 10, 12, 14,}; const uint16_t conv_afs10_2_punct[] = {1, 4, 7, 10, 16, 19, 22, 28, 31, 34, 40, 43, 46, 52, 55, 58, 64, 67, 70, 76, 79, 82, 88, 91, 94, 100, 103, 106, 112, 115, 118, 124, 127, 130, 136, 139, 142, 148, 151, 154, 160, 163, 166, 172, 175, 178, 184, 187, 190, 196, 199, 202, 208, 211, 214, 220, 223, 226, 232, 235, 238, 244, 247, 250, 256, 259, 262, 268, 271, 274, 280, 283, 286, 292, 295, 298, 304, 307, 310, 316, 319, 322, 325, 328, 331, 334, 337, 340, 343, 346, 349, 352, 355, 358, 361, 364, 367, 370, 373, 376, 379, 382, 385, 388, 391, 394, 397, 400, 403, 406, 409, 412, 415, 418, 421, 424, 427, 430, 433, 436, 439, 442, 445, 448, 451, 454, 457, 460, 463, 466, 469, 472, 475, 478, 481, 484, 487, 490, 493, 496, 499, 502, 505, 508, 511, 514, 517, 520, 523, 526, 529, 532, 535, 538, 541, 544, 547, 550, 553, 556, 559, 562, 565, 568, 571, 574, 577, 580, 583, 586, 589, 592, 595, 598, 601, 604, 607, 609, 610, 613, 616, 619, 621, 622, 625, 627, 628, 631, 633, 634, 636, 637, 639, 640, -1,}; const struct osmo_conv_code conv_tch_afs_10_2 = { .N = 3, .K = 5, .len = 210, .next_output = conv_afs10_2_next_output, .next_state = conv_afs10_2_next_state, .next_term_output = conv_afs10_2_next_term_output, .next_term_state = conv_afs10_2_next_term_state, .puncture = conv_afs10_2_punct, }; //# AFS7.95 1/3, K=7, RSC static const uint8_t conv_afs7_95_next_output[][2] = {{0, 7}, {3, 4}, {2, 5}, {1, 6}, {2, 5}, {1, 6}, {0, 7}, {3, 4}, {3, 4}, {0, 7}, {1, 6}, {2, 5}, {1, 6}, {2, 5}, {3, 4}, {0, 7}, {3, 4}, {0, 7}, {1, 6}, {2, 5}, {1, 6}, {2, 5}, {3, 4}, {0, 7}, {0, 7}, {3, 4}, {2, 5}, {1, 6}, {2, 5}, {1, 6}, {0, 7}, {3, 4}, {0, 7}, {3, 4}, {2, 5}, {1, 6}, {2, 5}, {1, 6}, {0, 7}, {3, 4}, {3, 4}, {0, 7}, {1, 6}, {2, 5}, {1, 6}, {2, 5}, {3, 4}, {0, 7}, {3, 4}, {0, 7}, {1, 6}, {2, 5}, {1, 6}, {2, 5}, {3, 4}, {0, 7}, {0, 7}, {3, 4}, {2, 5}, {1, 6}, {2, 5}, {1, 6}, {0, 7}, {3, 4},}; static const uint8_t conv_afs7_95_next_state[][2] = {{0, 1}, {2, 3}, {5, 4}, {7, 6}, {9, 8}, {11, 10}, {12, 13}, {14, 15}, {16, 17}, {18, 19}, {21, 20}, {23, 22}, {25, 24}, {27, 26}, {28, 29}, {30, 31}, {33, 32}, {35, 34}, {36, 37}, {38, 39}, {40, 41}, {42, 43}, {45, 44}, {47, 46}, {49, 48}, {51, 50}, {52, 53}, {54, 55}, {56, 57}, {58, 59}, {61, 60}, {63, 62}, {1, 0}, {3, 2}, {4, 5}, {6, 7}, {8, 9}, {10, 11}, {13, 12}, {15, 14}, {17, 16}, {19, 18}, {20, 21}, {22, 23}, {24, 25}, {26, 27}, {29, 28}, {31, 30}, {32, 33}, {34, 35}, {37, 36}, {39, 38}, {41, 40}, {43, 42}, {44, 45}, {46, 47}, {48, 49}, {50, 51}, {53, 52}, {55, 54}, {57, 56}, {59, 58}, {60, 61}, {62, 63},}; static const uint8_t conv_afs7_95_next_term_output[] = {0, 3, 5, 6, 5, 6, 0, 3, 3, 0, 6, 5, 6, 5, 3, 0, 4, 7, 1, 2, 1, 2, 4, 7, 7, 4, 2, 1, 2, 1, 7, 4, 7, 4, 2, 1, 2, 1, 7, 4, 4, 7, 1, 2, 1, 2, 4, 7, 3, 0, 6, 5, 6, 5, 3, 0, 0, 3, 5, 6, 5, 6, 0, 3,}; static const uint8_t conv_afs7_95_next_term_state[] = {0, 2, 4, 6, 8, 10, 12, 14, 16, 18, 20, 22, 24, 26, 28, 30, 32, 34, 36, 38, 40, 42, 44, 46, 48, 50, 52, 54, 56, 58, 60, 62, 0, 2, 4, 6, 8, 10, 12, 14, 16, 18, 20, 22, 24, 26, 28, 30, 32, 34, 36, 38, 40, 42, 44, 46, 48, 50, 52, 54, 56, 58, 60, 62,}; const uint16_t conv_afs7_95_punct[] = {1, 2, 4, 5, 8, 22, 70, 118, 166, 214, 262, 310, 317, 319, 325, 332, 334, 341, 343, 349, 356, 358, 365, 367, 373, 380, 382, 385, 389, 391, 397, 404, 406, 409, 413, 415, 421, 428, 430, 433, 437, 439, 445, 452, 454, 457, 461, 463, 469, 476, 478, 481, 485, 487, 490, 493, 500, 502, 503, 505, 506, 508, 509, 511, 512, -1,}; const struct osmo_conv_code conv_tch_afs_7_95 = { .N = 3, .K = 7, .len = 165, .next_output = conv_afs7_95_next_output, .next_state = conv_afs7_95_next_state, .next_term_output = conv_afs7_95_next_term_output, .next_term_state = conv_afs7_95_next_term_state, .puncture = conv_afs7_95_punct, }; //# AFS 7.4 1/3, K=5, RSC (2) static const uint8_t conv_afs7_4_next_output[][2] = {{0, 7}, {2, 5}, {4, 3}, {6, 1}, {2, 5}, {0, 7}, {6, 1}, {4, 3}, {0, 7}, {2, 5}, {4, 3}, {6, 1}, {2, 5}, {0, 7}, {6, 1}, {4, 3},}; static const uint8_t conv_afs7_4_next_state[][2] = {{0, 1}, {3, 2}, {5, 4}, {6, 7}, {9, 8}, {10, 11}, {12, 13}, {15, 14}, {1, 0}, {2, 3}, {4, 5}, {7, 6}, {8, 9}, {11, 10}, {13, 12}, {14, 15},}; static const uint8_t conv_afs7_4_next_term_output[] = {0, 5, 3, 6, 5, 0, 6, 3, 7, 2, 4, 1, 2, 7, 1, 4,}; static const uint8_t conv_afs7_4_next_term_state[] = {0, 2, 4, 6, 8, 10, 12, 14, 0, 2, 4, 6, 8, 10, 12, 14,}; const uint16_t conv_afs7_4_punct[] = {0, 355, 361, 367, 373, 379, 385, 391, 397, 403, 409, 415, 421, 427, 433, 439, 445, 451, 457, 460, 463, 466, 468, 469, 471, 472, -1,}; const struct osmo_conv_code conv_tch_afs_7_4 = { .N = 3, .K = 5, .len = 154, .next_output = conv_afs7_4_next_output, .next_state = conv_afs7_4_next_state, .next_term_output = conv_afs7_4_next_term_output, .next_term_state = conv_afs7_4_next_term_state, .puncture = conv_afs7_4_punct, }; //# AFS6.7 1/4, K=5, RSC static const uint8_t conv_afs6_7_next_output[][2] = {{0, 15}, {4, 11}, {8, 7}, {12, 3}, {4, 11}, {0, 15}, {12, 3}, {8, 7}, {0, 15}, {4, 11}, {8, 7}, {12, 3}, {4, 11}, {0, 15}, {12, 3}, {8, 7},}; static const uint8_t conv_afs6_7_next_state[][2] = {{0, 1}, {3, 2}, {5, 4}, {6, 7}, {9, 8}, {10, 11}, {12, 13}, {15, 14}, {1, 0}, {2, 3}, {4, 5}, {7, 6}, {8, 9}, {11, 10}, {13, 12}, {14, 15},}; static const uint8_t conv_afs6_7_next_term_output[] = {0, 11, 7, 12, 11, 0, 12, 7, 15, 4, 8, 3, 4, 15, 3, 8,}; static const uint8_t conv_afs6_7_next_term_state[] = {0, 2, 4, 6, 8, 10, 12, 14, 0, 2, 4, 6, 8, 10, 12, 14,}; const uint16_t conv_afs6_7_punct[] = {1, 3, 7, 11, 15, 27, 39, 55, 67, 79, 95, 107, 119, 135, 147, 159, 175, 187, 199, 215, 227, 239, 255, 267, 279, 287, 291, 295, 299, 303, 307, 311, 315, 319, 323, 327, 331, 335, 339, 343, 347, 351, 355, 359, 363, 367, 369, 371, 375, 377, 379, 383, 385, 387, 391, 393, 395, 399, 401, 403, 407, 409, 411, 415, 417, 419, 423, 425, 427, 431, 433, 435, 439, 441, 443, 447, 449, 451, 455, 457, 459, 463, 465, 467, 471, 473, 475, 479, 481, 483, 487, 489, 491, 495, 497, 499, 503, 505, 507, 511, 513, 515, 519, 521, 523, 527, 529, 531, 535, 537, 539, 543, 545, 547, 549, 551, 553, 555, 557, 559, 561, 563, 565, 567, 569, 571, 573, 575, -1,}; const struct osmo_conv_code conv_tch_afs_6_7 = { .N = 4, .K = 5, .len = 140, .next_output = conv_afs6_7_next_output, .next_state = conv_afs6_7_next_state, .next_term_output = conv_afs6_7_next_term_output, .next_term_state = conv_afs6_7_next_term_state, .puncture = conv_afs6_7_punct, }; //# AFS5.9 1/4, K=7, RSC static const uint8_t conv_afs5_9_next_output[][2] = {{0, 15}, {8, 7}, {4, 11}, {12, 3}, {4, 11}, {12, 3}, {0, 15}, {8, 7}, {8, 7}, {0, 15}, {12, 3}, {4, 11}, {12, 3}, {4, 11}, {8, 7}, {0, 15}, {8, 7}, {0, 15}, {12, 3}, {4, 11}, {12, 3}, {4, 11}, {8, 7}, {0, 15}, {0, 15}, {8, 7}, {4, 11}, {12, 3}, {4, 11}, {12, 3}, {0, 15}, {8, 7}, {0, 15}, {8, 7}, {4, 11}, {12, 3}, {4, 11}, {12, 3}, {0, 15}, {8, 7}, {8, 7}, {0, 15}, {12, 3}, {4, 11}, {12, 3}, {4, 11}, {8, 7}, {0, 15}, {8, 7}, {0, 15}, {12, 3}, {4, 11}, {12, 3}, {4, 11}, {8, 7}, {0, 15}, {0, 15}, {8, 7}, {4, 11}, {12, 3}, {4, 11}, {12, 3}, {0, 15}, {8, 7},}; static const uint8_t conv_afs5_9_next_state[][2] = {{0, 1}, {3, 2}, {5, 4}, {6, 7}, {9, 8}, {10, 11}, {12, 13}, {15, 14}, {17, 16}, {18, 19}, {20, 21}, {23, 22}, {24, 25}, {27, 26}, {29, 28}, {30, 31}, {32, 33}, {35, 34}, {37, 36}, {38, 39}, {41, 40}, {42, 43}, {44, 45}, {47, 46}, {49, 48}, {50, 51}, {52, 53}, {55, 54}, {56, 57}, {59, 58}, {61, 60}, {62, 63}, {1, 0}, {2, 3}, {4, 5}, {7, 6}, {8, 9}, {11, 10}, {13, 12}, {14, 15}, {16, 17}, {19, 18}, {21, 20}, {22, 23}, {25, 24}, {26, 27}, {28, 29}, {31, 30}, {33, 32}, {34, 35}, {36, 37}, {39, 38}, {40, 41}, {43, 42}, {45, 44}, {46, 47}, {48, 49}, {51, 50}, {53, 52}, {54, 55}, {57, 56}, {58, 59}, {60, 61}, {63, 62},}; static const uint8_t conv_afs5_9_next_term_output[] = {0, 7, 11, 12, 11, 12, 0, 7, 7, 0, 12, 11, 12, 11, 7, 0, 8, 15, 3, 4, 3, 4, 8, 15, 15, 8, 4, 3, 4, 3, 15, 8, 15, 8, 4, 3, 4, 3, 15, 8, 8, 15, 3, 4, 3, 4, 8, 15, 7, 0, 12, 11, 12, 11, 7, 0, 0, 7, 11, 12, 11, 12, 0, 7,}; static const uint8_t conv_afs5_9_next_term_state[] = {0, 2, 4, 6, 8, 10, 12, 14, 16, 18, 20, 22, 24, 26, 28, 30, 32, 34, 36, 38, 40, 42, 44, 46, 48, 50, 52, 54, 56, 58, 60, 62, 0, 2, 4, 6, 8, 10, 12, 14, 16, 18, 20, 22, 24, 26, 28, 30, 32, 34, 36, 38, 40, 42, 44, 46, 48, 50, 52, 54, 56, 58, 60, 62,}; const uint16_t conv_afs5_9_punct[] = {0, 1, 3, 5, 7, 11, 15, 31, 47, 63, 79, 95, 111, 127, 143, 159, 175, 191, 207, 223, 239, 255, 271, 287, 303, 319, 327, 331, 335, 343, 347, 351, 359, 363, 367, 375, 379, 383, 391, 395, 399, 407, 411, 415, 423, 427, 431, 439, 443, 447, 455, 459, 463, 467, 471, 475, 479, 483, 487, 491, 495, 499, 503, 507, 509, 511, 512, 513, 515, 516, 517, 519, -1,}; const struct osmo_conv_code conv_tch_afs_5_9 = { .N = 4, .K = 7, .len = 124, .next_output = conv_afs5_9_next_output, .next_state = conv_afs5_9_next_state, .next_term_output = conv_afs5_9_next_term_output, .next_term_state = conv_afs5_9_next_term_state, .puncture = conv_afs5_9_punct, }; //# AFS5.15 1/5, K=5, RSC static const uint8_t conv_afs5_15_next_output[][2] = {{0, 31}, {4, 27}, {24, 7}, {28, 3}, {4, 27}, {0, 31}, {28, 3}, {24, 7}, {0, 31}, {4, 27}, {24, 7}, {28, 3}, {4, 27}, {0, 31}, {28, 3}, {24, 7},}; static const uint8_t conv_afs5_15_next_state[][2] = {{0, 1}, {3, 2}, {5, 4}, {6, 7}, {9, 8}, {10, 11}, {12, 13}, {15, 14}, {1, 0}, {2, 3}, {4, 5}, {7, 6}, {8, 9}, {11, 10}, {13, 12}, {14, 15},}; static const uint8_t conv_afs5_15_next_term_output[] = {0, 27, 7, 28, 27, 0, 28, 7, 31, 4, 24, 3, 4, 31, 3, 24,}; static const uint8_t conv_afs5_15_next_term_state[] = {0, 2, 4, 6, 8, 10, 12, 14, 0, 2, 4, 6, 8, 10, 12, 14,}; const uint16_t conv_afs5_15_punct[] = {0, 4, 5, 9, 10, 14, 15, 20, 25, 30, 35, 40, 50, 60, 70, 80, 90, 100, 110, 120, 130, 140, 150, 160, 170, 180,190, 200, 210, 220, 230, 240, 250, 260, 270, 280,290, 300, 310, 315, 320, 325, 330, 334, 335, 340, 344, 345, 350, 354, 355, 360, 364, 365, 370, 374, 375, 380, 384, 385, 390, 394, 395, 400, 404, 405, 410, 414, 415, 420, 424, 425, 430, 434, 435, 440, 444, 445, 450, 454, 455, 460, 464, 465, 470, 474, 475, 480, 484, 485, 490, 494, 495, 500, 504, 505, 510, 514, 515, 520, 524, 525, 529, 530, 534, 535, 539, 540, 544, 545, 549, 550, 554, 555, 559, 560, 564, -1,}; const struct osmo_conv_code conv_tch_afs_5_15 = { .N = 5, .K = 5, .len = 109, .next_output = conv_afs5_15_next_output, .next_state = conv_afs5_15_next_state, .next_term_output = conv_afs5_15_next_term_output, .next_term_state = conv_afs5_15_next_term_state, .puncture = conv_afs5_15_punct, }; //# AFS4.75 1/5, K=7, RSC static const uint8_t conv_afs4_75_next_output[][2] = {{0, 31}, {24, 7}, {4, 27}, {28, 3}, {4, 27}, {28, 3}, {0, 31}, {24, 7}, {24, 7}, {0, 31}, {28, 3}, {4, 27}, {28, 3}, {4, 27}, {24, 7}, {0, 31}, {24, 7}, {0, 31}, {28, 3}, {4, 27}, {28, 3}, {4, 27}, {24, 7}, {0, 31}, {0, 31}, {24, 7}, {4, 27}, {28, 3}, {4, 27}, {28, 3}, {0, 31}, {24, 7}, {0, 31}, {24, 7}, {4, 27}, {28, 3}, {4, 27}, {28, 3}, {0, 31}, {24, 7}, {24, 7}, {0, 31}, {28, 3}, {4, 27}, {28, 3}, {4, 27}, {24, 7}, {0, 31}, {24, 7}, {0, 31}, {28, 3}, {4, 27}, {28, 3}, {4, 27}, {24, 7}, {0, 31}, {0, 31}, {24, 7}, {4, 27}, {28, 3}, {4, 27}, {28, 3}, {0, 31}, {24, 7},}; static const uint8_t conv_afs4_75_next_state[][2] = {{0, 1}, {3, 2}, {5, 4}, {6, 7}, {9, 8}, {10, 11}, {12, 13}, {15, 14}, {17, 16}, {18, 19}, {20, 21}, {23, 22}, {24, 25}, {27, 26}, {29, 28}, {30, 31}, {32, 33}, {35, 34}, {37, 36}, {38, 39}, {41, 40}, {42, 43}, {44, 45}, {47, 46}, {49, 48}, {50, 51}, {52, 53}, {55, 54}, {56, 57}, {59, 58}, {61, 60}, {62, 63}, {1, 0}, {2, 3}, {4, 5}, {7, 6}, {8, 9}, {11, 10}, {13, 12}, {14, 15}, {16, 17}, {19, 18}, {21, 20}, {22, 23}, {25, 24}, {26, 27}, {28, 29}, {31, 30}, {33, 32}, {34, 35}, {36, 37}, {39, 38}, {40, 41}, {43, 42}, {45, 44}, {46, 47}, {48, 49}, {51, 50}, {53, 52}, {54, 55}, {57, 56}, {58, 59}, {60, 61}, {63, 62},}; static const uint8_t conv_afs4_75_next_term_output[] = {0, 7, 27, 28, 27, 28, 0, 7, 7, 0, 28, 27, 28, 27, 7, 0, 24, 31, 3, 4, 3, 4, 24, 31, 31, 24, 4, 3, 4, 3, 31, 24, 31, 24, 4, 3, 4, 3, 31, 24, 24, 31, 3, 4, 3, 4, 24, 31, 7, 0, 28, 27, 28, 27, 7, 0, 0, 7, 27, 28, 27, 28, 0, 7,}; static const uint8_t conv_afs4_75_next_term_state[] = {0, 2, 4, 6, 8, 10, 12, 14, 16, 18, 20, 22, 24, 26, 28, 30, 32, 34, 36, 38, 40, 42, 44, 46, 48, 50, 52, 54, 56, 58, 60, 62, 0, 2, 4, 6, 8, 10, 12, 14, 16, 18, 20, 22, 24, 26, 28, 30, 32, 34, 36, 38, 40, 42, 44, 46, 48, 50, 52, 54, 56, 58, 60, 62,}; const uint16_t conv_afs4_75_punct[] = {0, 1, 2, 4, 5, 7, 9, 15, 25, 35, 45, 55, 65, 75, 85, 95, 105, 115, 125, 135, 145, 155, 165, 175, 185, 195, 205, 215, 225, 235, 245, 255, 265, 275, 285, 295, 305, 315, 325, 335, 345, 355, 365, 375, 385, 395, 400, 405, 410, 415, 420, 425, 430, 435, 440, 445, 450, 455, 459, 460, 465, 470, 475, 479, 480, 485, 490, 495, 499, 500, 505, 509, 510, 515, 517, 519, 520, 522, 524, 525, 526, 527, 529, 530, 531, 532, 534, -1,}; const struct osmo_conv_code conv_tch_afs_4_75 = { .N = 5, .K = 7, .len = 101, .next_output = conv_afs4_75_next_output, .next_state = conv_afs4_75_next_state, .next_term_output = conv_afs4_75_next_term_output, .next_term_state = conv_afs4_75_next_term_state, .puncture = conv_afs4_75_punct, }; -- View this message in context: http://baseband-devel.722152.n3.nabble.com/The-AMR-decode-segmentation-faul… Sent from the baseband-devel mailing list archive at Nabble.com.

1 0

Poll: Osmocom meeting 25th of July?
by Harald Welte 23 Jul '12

23 Jul '12

Hi all! On Wednesday, 25th of July we would have the next Osmocom meeting berlin. However, neither Holger nor I will be in Berlin on that day to host the event. I also know that Tobias will not be in Berlin. Nonetheless, if there are other people that want to meet up, there is no reason to not hold it! So I would like to get some feedback on who would want to attend next wednesday. If there are a couple of people, I'll try to find somebody who can open the CCCB for you. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

7 9

Re: Sagem OT-290 trace phone / GSMTAP integration
by Thomas Bertani 22 Jul '12

22 Jul '12

On 22 July 2012 14:26, Tyson Key <tyson.key(a)gmail.com> wrote: > Hi Thomas, > > Although myself and a few others (Denis?) have tentatively volunteered to > work on it, no-one has actually requested (or received) the hardware itself > yet, as far as I know. If I remember correctly, two phones were available - > so it might be possible to share the workload, if arrangements can be made > regarding logistics. > Hi, well I can start to work on it immediately, however I'm not sure whether one or two phones were actually available, so if it's only one, it won't be possible to share the workload. > If you're interested, then I'd suggest asking Harald for a copy of the > protocol specification to read through, to determine its feasibility in > order to figure out how long you think it would take. I've already received it, it doesn't seem an excessively long work but at the moment it would be difficult to do a precise estimation. > I hope that helps, > > Tyson. Thank you for the update, Thomas

1 0

Tooling up for osmocom, gnuradio, and android ... suggestions ?
by John Case 21 Jul '12

21 Jul '12

I am a mac and NetBSD user and have not run any linux systems for many years. I have never used Debian/Ubuntu/etc. Now I would like to begin doing work with osmocom, GNU radio, SDRs and some android development. I knw it's a religious question, but since I am starting with a completely blank slate, what would be the simplest, most painless distro to set up a development and build environment (cross compiling for arm, building osmocom, gnu radio, and running android development tools and SDKs) ? I assume the answer must be either Debian or Ubuntu, but really have no idea ... comments ? I think the nicest thing would be a distro that *already* had a full complement of the GNU devel/conf/build tools that all the examples in the wiki rely on ... so I wouldn;t have to worry about getting that environment up from scratch ... Thanks.

5 6

Receiving on TS=1 ?
by Sylvain Munaut 20 Jul '12

20 Jul '12

Hi, I've hacked something together to quickly test non-combined CCCH. However, I've hit a problem when trying to receive anything on another timeslot than 0. The TX side seems to work fine as the BTS can see my location update request and answers with a reject, but on the MS side, I never see the reject and wireshark only shows invalid incohrent data on the RX. The frames for SDCCH/8 show really nothing valid (looks like random bytes), things like 09 80 7f 47 49 06 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 47 d5 2d 06 1e 00 00 69 7c a0 91 3d 22 ff ab fe 6c 4f 56 4f 36 ... while the frames for the associated SAACH show at least something gsm-like : 03 03 01 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b but that's not quite a SI5/6 ... To RX/TX on TS=1, I just delayed the RX/TX window by 625 bits (4 * 156.25) when I'm in dedicated channel mode by chaning the 'start' in l1s_tx_win_ctrl / l1s_rx_win_ctrl Is there something else that should be done ? Cheers, Sylvain

2 5

is my patch for capturing TCH frame correctly?
by bob 19 Jul '12

19 Jul '12

Hi, everyone interesting the topic, this is my latest patch for TCH decode, fix few bug; but it not work well for TCH AMR decode, welcome everyone interesting it to review it and modify it! the most problem now I think is the capture of the Correct TCH frame, at the last ,there is some output for analysis --- app_ccch_scan.c 2012-03-14 16:08:11.305112000 +0800 +++ new_app_ccch_scan.c 2012-07-19 15:32:31.945314000 +0800 @@ -50,20 +50,80 @@ #include <l1ctl_proto.h> #include <osmocom/bb/misc/xcch.h> +#include <codec.h> +#include "conv_tch_afs.h" +//#include "../openbtsstuff/GSML1FEC.h" +//extern bool TCHFACCHL1Decoder::processBurst( const RxBurst& inBurst); +//const struct osmo_conv_code conv_tch_afs_12_2; +extern FILE *log_tmsi; extern struct gsmtap_inst *gsmtap_inst; +FILE *d_speech_file; +const unsigned char amr_nb_magic[6] = { 0x23, 0x21, 0x41, 0x4d, 0x52, 0x0a }; + +enum gsm690_amr_mode { + gsm690_4_75 = 0x01, + gsm690_5_15 = 0x02, + gsm690_5_90 = 0x04, + gsm690_6_70 = 0x08, + gsm690_7_40 = 0x10, + gsm690_7_95 = 0x20, + gsm690_10_2 = 0x40, + gsm690_12_2 = 0x80, +}; + +enum gsm690_amr_speech { + gsm690_4_75_len = 95, + gsm690_5_15_len = 103, + gsm690_5_90_len = 118, + gsm690_6_70_len = 134, + gsm690_7_40_len = 148, + gsm690_7_95_len = 159, + gsm690_10_2_len = 204, + gsm690_12_2_len = 244, +}; + +enum gsm690_amr_mode_flag { + CODEC_MODE_1 = 0b00000000, + CODEC_MODE_2 = 0b10111010, + CODEC_MODE_3 = 0b01011101, + CODEC_MODE_4 = 0b11100111, +}; + +/*gsm4.08 10.5.2.6 +enum channel_speed_mode{ + Signal = 0, + Speed_v1 = 0x01, + Speed_v2 = 0x21, + Speed_v3 = 0x41, +};*/ enum dch_state_t { DCH_NONE, + CCCH_ACTIVE, DCH_WAIT_EST, DCH_ACTIVE, + DCH_TCH, DCH_WAIT_REL, }; +static struct amr{ + uint8_t amr_acs; + uint8_t start_mode; +}; + +static struct amr_current{ + uint8_t mode; + uint8_t i; +}; + static struct { int has_si1; + int has_si3; int ccch_mode; - + int neci; + int sys_count; + enum dch_state_t dch_state; uint8_t dch_nr; int dch_badcnt; @@ -73,15 +133,76 @@ sbit_t bursts_dl[116 * 4]; sbit_t bursts_ul[116 * 4]; + sbit_t bursts_ccch[4][116*4]; + sbit_t mI[8][114]; struct gsm_sysinfo_freq cell_arfcns[1024]; uint8_t kc[8]; + uint8_t speed_mode; + struct amr amr_arg; + struct amr_current amr_cur; + + struct gsm48_ass_cmd ia; } app_state; +static char * +gen_filename(struct osmocom_ms *ms, struct l1ctl_burst_ind *bi) +{ + static char buffer[256]; + time_t d; + struct tm lt; + + time(&d); + localtime_r(&d, &lt); + + snprintf(buffer, 256, "voice_%04d%02d%02d_%02d%02d_%d_%d_%02x.amr", + lt.tm_year + 1900, lt.tm_mon, lt.tm_mday, + lt.tm_hour, lt.tm_min, + ms->test_arfcn, + ntohl(bi->frame_nr), + bi->chan_nr + ); + + return buffer; +} static void dump_bcch(struct osmocom_ms *ms, uint8_t tc, const uint8_t *data) { + if(app_state.dch_state == DCH_TCH) + { + //BCCH- SDCCH - BCCH -TCH + struct gsm48_ass_cmd *ia; + uint8_t ch_type, ch_subch, ch_ts; + + ia = &app_state.ia; + + rsl_dec_chan_nr(ia->chan_desc.chan_nr, &ch_type, &ch_subch, &ch_ts); + + if (!ia->chan_desc.h0.h) { + /* Non-hopping */ + uint16_t arfcn; + + arfcn = ia->chan_desc.h0.arfcn_low | (ia->chan_desc.h0.arfcn_high << 8); + + LOGP(DRR, LOGL_NOTICE, "ASS CMD(chan_nr=0x%02x, " + "ARFCN=%u, TS=%u, SS=%u, TSC=%u) ", + ia->chan_desc.chan_nr, arfcn, ch_ts, ch_subch, + ia->chan_desc.h0.tsc); + + /* request L1 to go to dedicated mode on assigned channel */ + l1ctl_tx_dm_est_req_h0(ms, + arfcn, ia->chan_desc.chan_nr, ia->chan_desc.h0.tsc, + GSM48_CMODE_SPEECH_EFR, 0); + } + else + { + printf("unsuport hopping!\n"); + } + + return; + } + struct gsm48_system_information_type_header *si_hdr; si_hdr = (struct gsm48_system_information_type_header *) data; @@ -115,18 +236,40 @@ #ifdef BCCH_TC_CHECK if (tc != 2 && tc != 6) LOGP(DRR, LOGL_ERROR, "SI3 on the wrong TC: %d\n", tc); -#endif - if (app_state.ccch_mode == CCCH_MODE_NONE) { - struct gsm48_system_information_type_3 *si3 = - (struct gsm48_system_information_type_3 *)data; - - if (si3->control_channel_desc.ccch_conf == RSL_BCCH_CCCH_CONF_1_C) - app_state.ccch_mode = CCCH_MODE_COMBINED; - else - app_state.ccch_mode = CCCH_MODE_NON_COMBINED; +#endif + if(!app_state.has_si3) + { + if (app_state.ccch_mode == CCCH_MODE_NONE) { + struct gsm48_system_information_type_3 *si3 = + (struct gsm48_system_information_type_3 *)data; + //printf("si3->control_channel_desc.ccch_conf = %d\n",si3->control_channel_desc.ccch_conf); + switch (si3->control_channel_desc.ccch_conf) { + case RSL_BCCH_CCCH_CONF_1_C: + app_state.ccch_mode = CCCH_MODE_COMBINED; + break; + case RSL_BCCH_CCCH_CONF_1_NC: + app_state.ccch_mode = CCCH_MODE_NON_COMBINED; + break; + case RSL_BCCH_CCCH_CONF_2_NC: + app_state.ccch_mode = CCCH_MODE_NON_COMBINED2; + break; + case RSL_BCCH_CCCH_CONF_3_NC: + app_state.ccch_mode = CCCH_MODE_NON_COMBINED4; + break; + case RSL_BCCH_CCCH_CONF_4_NC: + app_state.ccch_mode = CCCH_MODE_NON_COMBINED6; + break; + default: + fprintf(stderr, "\tUnknown CCCH_MODE\n"); + return; + } + app_state.neci = si3->cell_sel_par.neci; + app_state.has_si3 = 1; - l1ctl_tx_ccch_mode_req(ms, app_state.ccch_mode); + l1ctl_tx_ccch_mode_req(ms, app_state.ccch_mode); + } } + break; case GSM48_MT_RR_SYSINFO_4: #ifdef BCCH_TC_CHECK @@ -191,7 +334,10 @@ case GSM48_MT_RR_SYSINFO_5ter: break; default: - fprintf(stderr, "\tUnknown SI"); + app_state.sys_count++; + if(app_state.sys_count == 2) + l1ctl_tx_reset_req(ms, L1CTL_RES_T_FULL); + fprintf(stderr, "\tUnknown SI\n"); break; }; } @@ -207,16 +353,27 @@ struct gsm48_imm_ass *ia = msgb_l3(msg); uint8_t ch_type, ch_subch, ch_ts; int rv; + uint8_t chan_req_val, chan_req_mask, ra; /* Discard packet TBF assignement */ - //if (ia->page_mode & 0xf0) - if ((ia->page_mode & 0xf0) != 0x10) + if (ia->page_mode & 0xf0) return 0; /* If we're not ready yet, or just busy ... */ - if ((!app_state.has_si1) || (app_state.dch_state != DCH_NONE)) + if ((!app_state.has_si1) || (!app_state.has_si3) || (app_state.dch_state != DCH_NONE)) return 0; + printf("imm_ra %x,################!\n",ia->req_ref.ra); + //get the request cause +/* if(app_state.neci) + { + if(!((ia->req_ref.ra & 0xf0) == 0x10 ||(ia->req_ref.ra & 0xe0) == 0x80)) + return 0; + } else { + if(!((ia->req_ref.ra & 0xe0) == 0xe0 ||(ia->req_ref.ra & 0xe0) == 0x80)) + return 0; + } +*/ rsl_dec_chan_nr(ia->chan_desc.chan_nr, &ch_type, &ch_subch, &ch_ts); if (!ia->chan_desc.h0.h) { @@ -359,6 +516,8 @@ chan_need(pag->cneed1), mi_type_to_string(mi_type), mi_string); + fputs(mi_string,log_tmsi); + fputs("\n",log_tmsi); } /* check if we have a MI type in here */ @@ -380,10 +539,12 @@ chan_need(pag->cneed2), mi_type_to_string(mi_type), mi_string); + fputs(mi_string,log_tmsi); + fputs("\n",log_tmsi); } return 0; } - +char temp[20]; static int gsm48_rx_paging_p2(struct msgb *msg, struct osmocom_ms *ms) { struct gsm48_paging2 *pag; @@ -394,14 +555,23 @@ LOGP(DRR, LOGL_ERROR, "Paging2 message is too small.\n"); return -1; } - + memset(temp,0,sizeof(temp)); pag = msgb_l3(msg); LOGP(DRR, LOGL_NOTICE, "Paging1: %s chan %s to TMSI M(0x%x) \n", pag_print_mode(pag->pag_mode), chan_need(pag->cneed1), pag->tmsi1); + memset(temp,0,sizeof(temp)); + sprintf(temp, "%x", ntohl(pag->tmsi1)); + fputs(temp,log_tmsi); + fputs("\n",log_tmsi); + LOGP(DRR, LOGL_NOTICE, "Paging2: %s chan %s to TMSI M(0x%x) \n", pag_print_mode(pag->pag_mode), - chan_need(pag->cneed1), pag->tmsi2); + chan_need(pag->cneed2), ntohl(pag->tmsi2)); + memset(temp,0,sizeof(temp)); + sprintf(temp, "%x", pag->tmsi2); + fputs( temp,log_tmsi); + fputs("\n",log_tmsi); /* no optional element */ if (msgb_l3len(msg) < sizeof(*pag) + 3) @@ -425,15 +595,91 @@ "n/a ", mi_type_to_string(mi_type), mi_string); + fputs(mi_string,log_tmsi); + fputs("\n",log_tmsi); + return 0; +} +static int gsm48_rx_paging_p3(struct msgb *msg, struct osmocom_ms *ms) +{ + struct gsm48_paging3 *pag; + + if (msgb_l3len(msg) < sizeof(*pag)) { + LOGP(DRR, LOGL_ERROR, "Paging3 message is too small.\n"); + return -1; + } + + pag = msgb_l3(msg); + LOGP(DRR, LOGL_NOTICE, "Paging1: %s chan %s to TMSI M(0x%x) \n", + pag_print_mode(pag->pag_mode), + chan_need(pag->cneed1), pag->tmsi1); + memset(temp,0,sizeof(temp)); + sprintf(temp, "%x", ntohl(pag->tmsi1)); + fputs(temp,log_tmsi); + fputs("\n",log_tmsi); + LOGP(DRR, LOGL_NOTICE, "Paging2: %s chan %s to TMSI M(0x%x) \n", + pag_print_mode(pag->pag_mode), + chan_need(pag->cneed2), pag->tmsi2); + memset(temp,0,sizeof(temp)); + sprintf(temp, "%x", ntohl(pag->tmsi2)); + fputs(temp,log_tmsi); + fputs("\n",log_tmsi); + LOGP(DRR, LOGL_NOTICE, "Paging3: %s chan %s to TMSI M(0x%x) \n", + pag_print_mode(pag->pag_mode), + "n/a ", pag->tmsi3); + memset(temp,0,sizeof(temp)); + sprintf(temp, "%x", ntohl(pag->tmsi3)); + fputs(temp,log_tmsi); + fputs("\n",log_tmsi); + LOGP(DRR, LOGL_NOTICE, "Paging4: %s chan %s to TMSI M(0x%x) \n", + pag_print_mode(pag->pag_mode), + "n/a ", pag->tmsi4); + memset(temp,0,sizeof(temp)); + sprintf(temp, "%x", ntohl(pag->tmsi4)); + fputs(temp,log_tmsi); + fputs("\n",log_tmsi); return 0; } + int gsm48_rx_ccch(struct msgb *msg, struct osmocom_ms *ms) { struct gsm48_system_information_type_header *sih = msgb_l3(msg); int rc = 0; + if(app_state.dch_state == DCH_TCH) + { + //BCCH- SDCCH - BCCH -TCH + struct gsm48_ass_cmd *ia; + uint8_t ch_type, ch_subch, ch_ts; + + ia = &app_state.ia; + + rsl_dec_chan_nr(ia->chan_desc.chan_nr, &ch_type, &ch_subch, &ch_ts); + + if (!ia->chan_desc.h0.h) { + /* Non-hopping */ + uint16_t arfcn; + + arfcn = ia->chan_desc.h0.arfcn_low | (ia->chan_desc.h0.arfcn_high << 8); + + LOGP(DRR, LOGL_NOTICE, "ASS CMD(chan_nr=0x%02x, " + "ARFCN=%u, TS=%u, SS=%u, TSC=%u) ", + ia->chan_desc.chan_nr, arfcn, ch_ts, ch_subch, + ia->chan_desc.h0.tsc); + + /* request L1 to go to dedicated mode on assigned channel */ + l1ctl_tx_dm_est_req_h0(ms, + arfcn, ia->chan_desc.chan_nr, ia->chan_desc.h0.tsc, + GSM48_CMODE_SPEECH_EFR, 0); + } + else + { + printf("unsuport hopping!\n"); + } + + return 0; + } /* CCCH marks the end of WAIT_REL */ if (app_state.dch_state == DCH_WAIT_REL) app_state.dch_state = DCH_NONE; @@ -449,7 +695,7 @@ gsm48_rx_paging_p2(msg, ms); break; case GSM48_MT_RR_PAG_REQ_3: - LOGP(DRR, LOGL_ERROR, "PAGING of type 3 is not implemented.\n"); + gsm48_rx_paging_p3(msg, ms); break; case GSM48_MT_RR_IMM_ASS: gsm48_rx_imm_ass(msg, ms); @@ -483,9 +729,397 @@ return 0; } +void tch_deinterleave(ubit_t *mC, int blockOffset) +{ + int k; + for (k = 0; k < 456; k++) { + int B = ( k + blockOffset ) % 8; + int j = 2 * ((49 * k) % 57) + ((k % 8) / 4); + mC[k] = app_state.mI[B][j]; + app_state.mI[B][j] = 0; + //OBJDCOUT("deinterleave k="<<k<<" B="<<B<<" j="<<j); + } +} + +void tch_unmap(const uint16_t *map, size_t mapSize, ubit_t * dest, ubit_t * soure) +{ + unsigned int i; + for(i=0; i<mapSize; i++) + { + dest[map[i]] = soure[i]; + } +} + +void tch_map(const uint16_t *map, size_t mapSize, ubit_t * dest, ubit_t * soure) +{ + unsigned int i; + for(i=0; i<mapSize; i++) + { + dest[i] = soure[map[i]]; + } +} + +void fillField(ubit_t *mStart, size_t writeIndex, uint64_t value, unsigned length) +{ + char *dpBase = mStart + writeIndex; + char *dp = dpBase + length - 1; + + while (dp>=dpBase) { + *dp-- = value & 0x01; + value >>= 1; + } +} + +uint64_t count_tch = 0; +uint32_t flag = 0; + +static void process_tch_efr(struct osmocom_ms *ms,struct l1ctl_burst_ind *bi) +{ + int16_t rx_dbm; + uint16_t arfcn; + uint32_t fn,B; + uint8_t cbits, tn, lch_idx; + int ul, bid, i, k, length; + sbit_t *bursts, mC[456]; + ubit_t steal_bit[2], bt[114],convu[189],convd[189],tch_raw[260],TCHW[260],EFRBits[244],EFRAMR[8 + 244]; + + pbit_t voice[33]; + /* Get params (Only for SDCCH and SACCH/{4,8,F,H}) */ + arfcn = ntohs(bi->band_arfcn); + rx_dbm = rxlev2dbm(bi->rx_level); + + fn = ntohl(bi->frame_nr); + ul = !!(arfcn & ARFCN_UPLINK); + + cbits = bi->chan_nr >> 3; + tn = bi->chan_nr & 7; + + B = -1; + + if((fn%13)%4 == 0) flag= 1; + + if(!flag) return; + + B = count_tch % 8; + //printf("fn%13 %4 = %d\n",(fn%13)%4); + if (B == -1) + return; + + /* Clear if new set */ + if (B == 0){ + for(i=0; i<4; i++){ + memset(app_state.mI[i], 0x00, 114); + } + }else if(B == 4){ + for(i=4; i<8; i++){ + memset(app_state.mI[i], 0x00, 114); + } + } + + /* Unpack (ignore hu/hl) */ + osmo_pbit2ubit_ext(bt, 0, bi->bits, 0, 57, 0); + osmo_pbit2ubit_ext(bt, 57, bi->bits, 57, 57, 0); + osmo_pbit2ubit_ext(steal_bit, 0 , bi->bits, 114 , 2 , 0); + //printf("steal_bit %x , %x\n",steal_bit[0],steal_bit[1]); + /* Convert to softbits */ + for (i=0; i<114; i++) + app_state.mI[B][i] = bt[i] ? - (bi->snr >> 1) : (bi->snr >> 1); + + count_tch++; + // Deinterleave according to the diagonal "phase" of B. + // See GSM 05.03 3.1.3. + // Deinterleaves i[] to c[] + if((B % 4 ==3)&&(count_tch >= 7)){ + if(B == 3) + { + tch_deinterleave(mC, 4); + }else{ + tch_deinterleave(mC, 0); + } + + for (k = 0; k < 78; k++) { + tch_raw[182 + k] = mC[378 +k]; + } + + osmo_conv_decode(&conv_tch_afs_12_2, mC, convu); + + // 3.1.2.1 + // copy class 1 bits u[] to d[] + for (k = 0; k <= 90; k++) { + convd[2*k] = convu[k]; + convd[2*k+1] = convu[184-k]; + } + + memcpy(tch_raw,convd,182); // the last 78 bit has been stored! + + //now only process EFR or AMR 12_2, fix me! + tch_unmap(gsm660_bitorder, 260, TCHW, tch_raw); + + // Remove repeating bits and CRC to get raw EFR frame (244 bits) + for (k=0; k<71; k++) + EFRBits[k] = TCHW[k] & 1; + + for (k=73; k<123; k++) + EFRBits[k-2] = TCHW[k] & 1; + + for (k=125; k<178; k++) + EFRBits[k-4] = TCHW[k] & 1; + + for (k=180; k<230; k++) + EFRBits[k-6] = TCHW[k] & 1; + + for (k=232; k<252; k++) + EFRBits[k-8] = TCHW[k] & 1; + // Map bits as AMR 12.2k + tch_map(gsm690_12_2_bitorder, 244, EFRAMR + 8,EFRBits); + + // Put the whole frame (hdr + payload) + //mVFrameAMR.pack(mPrevGoodFrame); + //mPrevGoodFrameLength = 32; + fillField(EFRAMR, 0, 0x3c, 8); + voice[32] = 0; + length = osmo_ubit2pbit(voice, EFRAMR, 8 + 244); + fwrite(voice, 1, 32, d_speech_file); + } + +} + +int find_speech_mode(unsigned char codec,int j) +{ + int i,k; + k = 0; + for(i = 0;i<8;i++) + { + if(app_state.amr_arg.amr_acs & (1 << i)){ + k++; + if(k == j) + return i; + } + } +} + +static void process_tch_amr(struct osmocom_ms *ms,struct l1ctl_burst_ind *bi) +{ + int16_t rx_dbm; + uint16_t arfcn; + uint32_t fn,B; + uint8_t cbits, tn, lch_idx; + int ul, bid, i, k, length; + sbit_t *bursts, mC[456],hl,hu; + ubit_t steal_bit[2], bt[116],convu[260],convd[260],tch_raw[260],TCHW[260],EFRBits[244],EFRAMR[8 + 244]; + + pbit_t voice[33]; + /* Get params (Only for SDCCH and SACCH/{4,8,F,H}) */ + arfcn = ntohs(bi->band_arfcn); + rx_dbm = rxlev2dbm(bi->rx_level); + + fn = ntohl(bi->frame_nr); + ul = !!(arfcn & ARFCN_UPLINK); + + cbits = bi->chan_nr >> 3; + tn = bi->chan_nr & 7; + + B = -1; + + if(( fn % 13 ) % 4 == 0) flag = 1; + + if(!flag) return; + + //B = count_tch % 8; + B = ( fn % 13 ) % 8; + printf("fn % 26 = %d, fn % 13 = %d, B = %d\n",fn%26 , fn%13 , B); + + if (B == -1) + return; + + /* Unpack (ignore hu/hl) */ + osmo_pbit2ubit_ext(bt, 0, bi->bits, 0, 57, 0); + osmo_pbit2ubit_ext(bt, 57, bi->bits, 57, 57, 0); + //osmo_pbit2ubit_ext(steal_bit, 0 , bi->bits, 114 , 2 , 0); + //hl = bi->bits[14] & 0x10; + //hu = bi->bits[14] & 0x20; + + /* save stealing flags */ + bt[114] = !!(bi->bits[14] & 0x10); // hl + bt[115] = !!(bi->bits[14] & 0x20); // hu + printf("steal_bit %x , %x\n", bt[114],bt[115]); + +/* if (bt[114] || bt[115]) { + printf("might be FACCH %x , %x\n", bt[114], bt[115]); + return; + } +*/ + /* Convert to softbits */ + for (i=0; i<114; i++) + app_state.mI[B][i] = bt[i] ? - (bi->snr >> 1) : (bi->snr >> 1); + + count_tch++; + + // Decode AMR + if((B % 4 == 3) && (count_tch >= 7)){ + if(B == 3) + { + tch_deinterleave(mC, 4); + }else{ + tch_deinterleave(mC, 0); + } + + printf("****************** %d\n",( fn % 26) ); + if( ( fn % 26) == 3 || ( fn % 26) == 11 || ( fn % 26) == 20 ) + { + //abstract the codec mode + for(i = 0;i < 8 ; i++) + { + //printf("%x ",mC[i]); + if(mC[i] < 0) + app_state.amr_cur.mode = ( app_state.amr_cur.mode | (1 << i )); + else + app_state.amr_cur.mode = ( app_state.amr_cur.mode & (~(1 << i ))); + } + + switch(app_state.amr_cur.mode){ + case CODEC_MODE_1: + printf("codec 1\n"); + app_state.amr_cur.i = find_speech_mode(app_state.amr_arg.amr_acs, 1); + break; + case CODEC_MODE_2: + printf("codec 2\n"); + app_state.amr_cur.i = find_speech_mode(app_state.amr_arg.amr_acs, 2); + break; + case CODEC_MODE_3: + printf("codec 3\n"); + app_state.amr_cur.i = find_speech_mode(app_state.amr_arg.amr_acs, 3); + break; + case CODEC_MODE_4: + printf("codec 4\n"); + app_state.amr_cur.i = find_speech_mode(app_state.amr_arg.amr_acs, 4); + break; + default: + { + printf("unkown codec\n"); + return; + } + } + } + + memset(voice,0,32); + switch( 1 << app_state.amr_cur.i ){ + case gsm690_4_75: + printf("codec gsm690_4_75\n"); + osmo_conv_decode(&conv_tch_afs_4_75, &mC[8], convu); + memcpy(convd,convu,39); + memcpy(convd,&convu[45],56); + tch_map(gsm690_4_75_bitorder, gsm690_4_75_len, EFRAMR + 8,convd); + fillField(EFRAMR, 0, 0x04, 8); + length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_4_75_len, 1); + + break; + case gsm690_5_15: + printf("codec gsm690_5_15\n"); + osmo_conv_decode(&conv_tch_afs_5_15, &mC[8], convu); + memcpy(convd,convu,49); + memcpy(convd,&convu[55],54); + tch_map(gsm690_5_15_bitorder, gsm690_5_15_len, EFRAMR + 8,convd); + fillField(EFRAMR, 0, 0x0c, 8); + length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_5_15_len, 1); + + break; + case gsm690_5_90: + printf("codec gsm690_5_90\n"); + osmo_conv_decode(&conv_tch_afs_5_9, &mC[8], convu); + memcpy(convd,convu,55); + memcpy(convd,&convu[61],63); + tch_map(gsm690_5_9_bitorder, gsm690_5_90_len, EFRAMR + 8,convd); + fillField(EFRAMR, 0, 0x14, 8); + length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_5_90_len, 1); + + break; + case gsm690_6_70: + printf("codec gsm690_6_70\n"); + osmo_conv_decode(&conv_tch_afs_6_7, &mC[8], convu); + memcpy(convd,convu,55); + memcpy(convd,&convu[61],79); + tch_map(gsm690_6_7_bitorder, gsm690_6_70_len, EFRAMR + 8,convd); + fillField(EFRAMR, 0, 0x1c, 8); + length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_6_70_len, 1); + + break; + case gsm690_7_40: + printf("codec gsm690_7_40\n"); + osmo_conv_decode(&conv_tch_afs_7_4, &mC[8], convu); + memcpy(convd,convu,61); + memcpy(convd,&convu[67],87); + tch_map(gsm690_7_4_bitorder, gsm690_7_40_len, EFRAMR + 8,convd); + fillField(EFRAMR, 0, 0x24, 8); + length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_7_40_len, 1); + + break; + case gsm690_7_95: + printf("codec gsm690_7_95\n"); + osmo_conv_decode(&conv_tch_afs_7_95, &mC[8], convu); + memcpy(convd,convu,75); + memcpy(convd,&convu[81],84); + tch_map(gsm690_7_95_bitorder, gsm690_7_95_len, EFRAMR + 8,convd); + fillField(EFRAMR, 0, 0x2c, 8); + length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_7_95_len, 1); + break; + case gsm690_10_2: + printf("codec gsm690_10_2\n"); + osmo_conv_decode(&conv_tch_afs_10_2, &mC[8], convu); + memcpy(convd,convu,65); + memcpy(convd,&convu[71],139); + tch_map(gsm690_10_2_bitorder, gsm690_10_2_len, EFRAMR + 8,convd); + fillField(EFRAMR, 0, 0x34, 8); + length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_10_2_len, 1); + break; + case gsm690_12_2: + printf("codec gsm690_12_2\n"); + osmo_conv_decode(&conv_tch_afs_12_2, &mC[8], convu); + memcpy(convd,convu,81); + memcpy(convd,&convu[87],163); + tch_map(gsm690_12_2_bitorder, gsm690_12_2_len, EFRAMR + 8,convd); + fillField(EFRAMR, 0, 0x3c, 8); + length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_12_2_len, 1); + break; + default: + { + printf("unkown gsm690 codec\n"); + return; + } + } + + //printf("length is %d\n",length); + //printf("voice[0] is %x\n",voice[0]); + fwrite(voice, 1, length, d_speech_file); + } + +} + static void -local_burst_decode(struct l1ctl_burst_ind *bi) +local_burst_decode(struct osmocom_ms *ms,struct l1ctl_burst_ind *bi) { int16_t rx_dbm; uint16_t arfcn; @@ -514,6 +1148,24 @@ uint32_t fn_report; fn_report = (fn - (tn * 13) + 104) % 104; bid = (fn_report - 12) / 26; + printf(" SACCH fn = %d fn_report = %d\n",fn,fn_report); + }else{ + switch (app_state.speed_mode ) { + + case GSM48_CMODE_SPEECH_EFR: + process_tch_efr(ms,bi); + break; + + case GSM48_CMODE_SPEECH_AMR: + process_tch_amr(ms,bi); + break; + + default: + { + printf("unknown speed mode! %x\n",app_state.speed_mode); + return; + } + } } } else if ((cbits & 0x1e) == 0x02) { /* TCH/H */ lch_idx = cbits & 1; @@ -526,9 +1178,11 @@ } else if ((cbits & 0x1c) == 0x04) { /* SDCCH/4 */ lch_idx = cbits & 3; bid = bi->flags & 3; + printf(" SDCCH/4\n"); } else if ((cbits & 0x18) == 0x08) { /* SDCCH/8 */ lch_idx = cbits & 7; bid = bi->flags & 3; + //printf(" SDCCH/8\n"); } if (bid == -1) @@ -559,9 +1213,161 @@ if (bid == 3) { uint8_t l2[23]; - int rv; + int rv,i; + struct gsm48_ass_cmd *ia; + uint8_t ch_type, ch_subch, ch_ts; + uint8_t chan_req_val, chan_req_mask, ra; + rv = xcch_decode(l2, bursts); + if((l2[0] == 0x03) && (l2[4] == 0x2e)) + { + ia =(struct gsm48_ass_cmd *)&l2[5]; + + memcpy(&app_state.ia , ia, sizeof(struct gsm48_ass_cmd)); + + + //l1ctl_tx_reset_req(ms, L1CTL_RES_T_SCHED); + printf("the speed version is %x.\n",ia->chan_mode.voice_mode); + printf("the start mode is %x.\n",ia->mc.start_mode); + printf("the codec rate is %x.\n",ia->mc.codec_rate); + app_state.amr_arg.amr_acs = ia->mc.codec_rate; + app_state.amr_arg.start_mode = ia->mc.start_mode; + printf("Jump to TCH Channel\n"); + + app_state.speed_mode = ia->chan_mode.voice_mode; + + /* Clear if new set */ + for(i=0; i<8; i++){ + memset(app_state.mI[i], 0x00, 114); + } + + /* open speech file and configure d_tch_decoders */ + switch (app_state.speed_mode ) { + + case GSM48_CMODE_SPEECH_V1: + d_speech_file = fopen( "speech.au.gsm", "wb" ); + break; + + case GSM48_CMODE_SPEECH_EFR: + d_speech_file = fopen( gen_filename(ms,bi), "wb" ); + fwrite(amr_nb_magic, 1, 6, d_speech_file); /* Write header */ + break; + + case GSM48_CMODE_SPEECH_AMR: + d_speech_file = fopen( gen_filename(ms,bi), "wb" ); + fwrite(amr_nb_magic, 1, 6, d_speech_file); /* Write header */ + break; + + default: + { + printf("unknown speed mode! %x\n",app_state.speed_mode); + d_speech_file = NULL; + return; + } + } + app_state.dch_state = DCH_TCH; + + l1ctl_tx_reset_req(ms, L1CTL_RES_T_FULL); //BCCH- SDCCH - BCCH -TCH + + return; + + if (!ia->chan_desc.h0.h) { + /* Non-hopping */ + uint16_t arfcn; + + arfcn = ia->chan_desc.h0.arfcn_low | (ia->chan_desc.h0.arfcn_high << 8); + + LOGP(DRR, LOGL_NOTICE, "ASS CMD(chan_nr=0x%02x, " + "ARFCN=%u, TS=%u, SS=%u, TSC=%u) ", + ia->chan_desc.chan_nr, arfcn, ch_ts, ch_subch, + ia->chan_desc.h0.tsc); + + /* request L1 to go to dedicated mode on assigned channel */ + rv = l1ctl_tx_dm_est_req_h0(ms, + arfcn, ia->chan_desc.chan_nr, ia->chan_desc.h0.tsc, + GSM48_CMODE_SPEECH_EFR, 0); + } + #ifdef TCH_HOPPING + else { + /* Hopping is not support now! */ + uint8_t maio, hsn, ma_len; + uint16_t ma[64], arfcn; + int i, j, k; + + //initialize tch count and flag + count_tch = 0; + flag = 0; + + hsn = ia->chan_desc.h1.hsn; + maio = ia->chan_desc.h1.maio_low | (ia->chan_desc.h1.maio_high << 2); + + LOGP(DRR, LOGL_NOTICE, "ASS CMD( chan_nr=0x%02x, " + "HSN=%u, MAIO=%u, TS=%u, SS=%u, TSC=%u) ", + ia->chan_desc.chan_nr, hsn, maio, ch_ts, ch_subch, + ia->chan_desc.h1.tsc); + + /* decode mobile allocation */ + ma_len = 0; + for (i=1, j=0; i<=1024; i++) { + arfcn = i & 1023; + if (app_state.cell_arfcns[arfcn].mask & 0x01) { + k = ia->mob_alloc_len - (j>>3) - 1; + if (ia->mob_alloc[k] & (1 << (j&7))) { + ma[ma_len++] = arfcn; + } + j++; + } + } + + /* request L1 to go to dedicated mode on assigned channel */ + rv = l1ctl_tx_dm_est_req_h1(ms, + maio, hsn, ma, ma_len, + ia->chan_desc.chan_nr, ia->chan_desc.h1.tsc, + GSM48_CMODE_SPEECH_EFR, 0); + } + #endif + }/*else{ + return; + } +target sms sniffer + if( (l2[0] == 0x01)&&(l2[1] == 0x73)&&(l2[10] == 0x05) ) + { + unsigned int tmsi,object_tmsi; + tmsi = *(int *)&l2[12]; + for(i =12;i<12+4;i++) + { + printf("%x ",l2[i]); + } + printf("\n"); + object_tmsi = ntohl(0x97034024); + printf("object_tmsi is %x, tmsi is %x\n",object_tmsi,tmsi); + if(tmsi != object_tmsi) + { + printf("not match!\n"); + + l1ctl_tx_dm_rel_req(ms); + l1ctl_tx_fbsb_req(ms, ms->test_arfcn, + L1CTL_FBSB_F_FB01SB, 100, 0, + app_state.ccch_mode); + + + app_state.dch_state = DCH_WAIT_REL; + app_state.dch_badcnt = 0; + app_state.dch_ciph = 0; + + + if (app_state.fh) { + fclose(app_state.fh); + app_state.fh = NULL; + } + }else{ + + printf("$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$\n"); + } + + } +*/ if (rv == 0) { uint8_t chan_type, chan_ts, chan_ss; @@ -586,25 +1392,106 @@ } } -static char * -gen_filename(struct osmocom_ms *ms, struct l1ctl_burst_ind *bi) +static void +ccch_tn_decode(struct l1ctl_burst_ind *bi,uint8_t tn,struct osmocom_ms *ms) { - static char buffer[256]; - time_t d; - struct tm lt; + int16_t rx_dbm; + uint16_t arfcn; + uint32_t fn; + uint8_t cbits, lch_idx; + int ul, bid, i; + sbit_t *bursts; + ubit_t bt[116]; - time(&d); - localtime_r(&d, &lt); + /* Get params (Only for SDCCH and SACCH/{4,8,F,H}) */ + arfcn = ntohs(bi->band_arfcn); + rx_dbm = rxlev2dbm(bi->rx_level); + //printf("tn is %d\n",tn); + bursts = app_state.bursts_ccch[tn/2]; + + fn = ntohl(bi->frame_nr); - snprintf(buffer, 256, "bursts_%04d%02d%02d_%02d%02d_%d_%d_%02x.dat", - lt.tm_year + 1900, lt.tm_mon, lt.tm_mday, - lt.tm_hour, lt.tm_min, - ms->test_arfcn, - ntohl(bi->frame_nr), - bi->chan_nr - ); + cbits = bi->chan_nr >> 3; + + bid = -1; + + bid = bi->flags & 3; + //printf("cbits is %x\n",cbits); + if ( cbits == 0x12) { /* TCH/F */ + bid = bi->flags & 3; + } + + if (bid == -1) + return; + + /* Clear if new set */ + if (bid == 0) + memset(bursts, 0x00, 116 * 4); + + /* Unpack (ignore hu/hl) */ + osmo_pbit2ubit_ext(bt, 0, bi->bits, 0, 57, 0); + osmo_pbit2ubit_ext(bt, 59, bi->bits, 57, 57, 0); + bt[57] = bt[58] = 1; + + /* A5/x */ + if (app_state.dch_ciph) { + ubit_t ks_dl[114], ks_ul[114], *ks = ul ? ks_ul : ks_dl; + osmo_a5(app_state.dch_ciph, app_state.kc, fn, ks_dl, ks_ul); + for (i= 0; i< 57; i++) bt[i] ^= ks[i]; + for (i=59; i<116; i++) bt[i] ^= ks[i-2]; + } + + /* Convert to softbits */ + for (i=0; i<116; i++) + bursts[(116*bid)+i] = bt[i] ? - (bi->snr >> 1) : (bi->snr >> 1); + + /* If last, decode */ + if (bid == 3) + { + uint8_t l2[23]; + int rv; + rv = xcch_decode(l2, bursts); + + if (rv == 0) + { + struct msgb *msg; + msg = msgb_alloc_headroom(30 ,0,"layer3"); + msg->tail =30; + msg->l3h =l2; + msg->data_len = msg->len =23; + gsm48_rx_ccch(msg,ms); + //struct abis_rsl_rll_hdr *rllh = l2;//l3 + //printf("chan_nr = %x,bi->chan_nr = %x\n",rllh->chan_nr,bi->chan_nr); + uint8_t chan_type, chan_ts, chan_ss; + uint8_t gsmtap_chan_type; + + /* Send to GSMTAP */ + rsl_dec_chan_nr(bi->chan_nr, &chan_type, &chan_ss, &chan_ts); + gsmtap_chan_type = chantype_rsl2gsmtap( + chan_type, + bi->flags & BI_FLG_SACCH ? 0x40 : 0x00 + ); + gsmtap_send(gsmtap_inst, + arfcn, chan_ts, gsmtap_chan_type, chan_ss, + ntohl(bi->frame_nr), bi->rx_level, bi->snr, + l2, sizeof(l2) + ); + + /* Crude CIPH.MOD.COMMAND detect */ + if ((l2[3] == 0x06) && (l2[4] == 0x35) && (l2[5] & 1)) + app_state.dch_ciph = 1 + ((l2[5] >> 1) & 7); + } + } - return buffer; +} + +static void +local_ccch_burst_decode(struct l1ctl_burst_ind *bi,struct osmocom_ms *ms) +{ + uint8_t tn; + + tn = bi->chan_nr & 7; + ccch_tn_decode(bi,tn,ms); } void layer3_rx_burst(struct osmocom_ms *ms, struct msgb *msg) @@ -612,7 +1499,7 @@ struct l1ctl_burst_ind *bi; int16_t rx_dbm; uint16_t arfcn; - int ul, do_rel=0; + int ul,do_rel=0; /* Header handling */ bi = (struct l1ctl_burst_ind *) msg->l1h; @@ -621,6 +1508,8 @@ rx_dbm = rxlev2dbm(bi->rx_level); ul = !!(arfcn & ARFCN_UPLINK); + if (app_state.dch_state == DCH_NONE) + local_ccch_burst_decode(bi,ms); /* Check for channel start */ if (app_state.dch_state == DCH_WAIT_EST) { if (bi->chan_nr == app_state.dch_nr) { @@ -630,7 +1519,7 @@ app_state.dch_badcnt = 0; /* Open output */ - app_state.fh = fopen(gen_filename(ms, bi), "wb"); + //app_state.fh = fopen(gen_filename(ms, bi), "wb"); } else { /* Abandon ? */ do_rel = (app_state.dch_badcnt++) >= 4; @@ -643,19 +1532,44 @@ if (!ul) { /* Bad burst counting */ if (bi->snr < 64) - app_state.dch_badcnt++; + { + app_state.dch_badcnt++; + printf("sdcch app_state.dch_badcnt++\n"); + } + else if (app_state.dch_badcnt >= 2) + app_state.dch_badcnt -= 2; + else + app_state.dch_badcnt = 0; + + /* Release condition */ + do_rel = app_state.dch_badcnt >= 6; + } + } + + // when in TCH mode, we only measure the SACCH to kown the link quanlity + if (app_state.dch_state == DCH_TCH) { + //printf("app_state.dch_state == DCH_TCH\n"); + if (!ul && (bi->flags & BI_FLG_SACCH)) { + //printf("TCH SACCH\n"); + /* Bad burst counting */ + if (bi->snr < 40) + { + app_state.dch_badcnt++; + printf("sacch app_state.dch_badcnt++\n"); + } else if (app_state.dch_badcnt >= 2) app_state.dch_badcnt -= 2; else app_state.dch_badcnt = 0; /* Release condition */ - do_rel = app_state.dch_badcnt >= 600; + do_rel = app_state.dch_badcnt >= 6; } } /* Release ? */ if (do_rel) { + printf("The Delicate Channel is released because of bad SNR!\n"); /* L1 release */ l1ctl_tx_dm_rel_req(ms); l1ctl_tx_fbsb_req(ms, ms->test_arfcn, @@ -675,22 +1589,25 @@ } /* Save the burst */ - if (app_state.dch_state == DCH_ACTIVE) - fwrite(bi, sizeof(*bi), 1, app_state.fh); + if (app_state.dch_state == DCH_ACTIVE || app_state.dch_state == DCH_TCH) + //fwrite(bi, sizeof(*bi), 1, app_state.fh); /* Try local decoding */ - if (app_state.dch_state == DCH_ACTIVE) - local_burst_decode(bi); + if (!ul && (app_state.dch_state == DCH_ACTIVE || app_state.dch_state == DCH_TCH)) + local_burst_decode(ms,bi); } void layer3_app_reset(void) { /* Reset state */ app_state.has_si1 = 0; + app_state.has_si3 = 0; + app_state.neci = 0; app_state.ccch_mode = CCCH_MODE_NONE; app_state.dch_state = DCH_NONE; app_state.dch_badcnt = 0; app_state.dch_ciph = 0; + app_state.sys_count= 0; if (app_state.fh) fclose(app_state.fh); @@ -704,7 +1621,8 @@ { struct osmocom_ms *ms; struct osmobb_msg_ind *mi; - + struct osmobb_fbsb_res *fr; + if (subsys != SS_L1CTL) return 0; @@ -713,13 +1631,27 @@ mi = signal_data; layer3_rx_burst(mi->ms, mi->msg); break; + case S_L1CTL_FBSB_ERR: + fr=signal_data; + l1ctl_tx_reset_req(fr->ms, L1CTL_RES_T_FULL); + /* FIXME: L1CTL_RES_T_FULL doesn't reset dedicated mode + * (if previously set), so we release it here. */ + l1ctl_tx_dm_rel_req(fr->ms); + //printf("fr->band_arfcn is %d\n",ntohs(fr->band_arfcn)); + //return l1ctl_tx_fbsb_req(fr->ms, ntohs(fr->band_arfcn), + // L1CTL_FBSB_F_FB01SB, 100, 0, + // CCCH_MODE_NONE); + break; case S_L1CTL_RESET: + if(app_state.dch_state == DCH_ACTIVE) //if we are going TCH,we need rest_sched? + break; ms = signal_data; - layer3_app_reset(); + if(app_state.dch_state != DCH_TCH) + layer3_app_reset(); return l1ctl_tx_fbsb_req(ms, ms->test_arfcn, L1CTL_FBSB_F_FB01SB, 100, 0, - CCCH_MODE_NONE); + app_state.ccch_mode); break; } return 0; the output: <0001> app_ccch_scan.c:191 ASS CMD(chan_nr=0x09, ARFCN=622, TS=1, SS=0, TSC=2) fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 1 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 0 , 1 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489319 fn_report = 90 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 1 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 1 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 1 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 1 , 1 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489345 fn_report = 12 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 1 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 1 ****************** 3 codec 1 codec gsm690_4_75 fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 1 , 1 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 0 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 1 , 1 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 1 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 1 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 1 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489371 fn_report = 38 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 1 , 0 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 0 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 1 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489397 fn_report = 64 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 1 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 1 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 1 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 1 , 0 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 1 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 1 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489423 fn_report = 90 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 1 , 0 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 1 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 0 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 0 , 1 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 1 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 20 codec 4 codec gsm690_12_2 fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 1 ****************** 24 codec gsm690_12_2 SACCH fn = 489449 fn_report = 12 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_12_2 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 1 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 16 codec gsm690_12_2 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 1 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 1 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 1 ****************** 24 codec gsm690_12_2 SACCH fn = 489475 fn_report = 38 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 1 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 1 , 1 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 1 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 1 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_12_2 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 0 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 1 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 0 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 16 codec gsm690_12_2 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 1 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 1 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 1 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_12_2 SACCH fn = 489501 fn_report = 64 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 1 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 7 codec gsm690_12_2 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 0 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 1 , 1 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 16 codec gsm690_12_2 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 0 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 1 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_12_2 SACCH fn = 489527 fn_report = 90 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 0 , 1 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 1 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 1 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_12_2 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 1 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 1 , 1 ****************** 16 codec gsm690_12_2 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 1 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 1 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 1 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 1 , 1 ****************** 24 codec gsm690_12_2 SACCH fn = 489553 fn_report = 12 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 0 , 1 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 0 , 1 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_12_2 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 0 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 1 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 1 , 1 ****************** 16 codec gsm690_12_2 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 1 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 1 , 1 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_12_2 SACCH fn = 489579 fn_report = 38 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 0 , 1 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 1 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 1 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 1 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 7 codec gsm690_12_2 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 1 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 0 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 16 codec gsm690_12_2 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_12_2 SACCH fn = 489605 fn_report = 64 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 1 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 1 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_12_2 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 0 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 0 , 1 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 1 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 1 , 1 ****************** 16 codec gsm690_12_2 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 0 , 1 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_12_2 SACCH fn = 489631 fn_report = 90 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 1 ****************** 3 codec 1 codec gsm690_4_75 fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 1 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 0 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 1 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 0 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 1 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 1 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 0 , 1 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 1 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 1 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 1 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489657 fn_report = 12 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 1 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 0 , 1 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 3 codec 1 codec gsm690_4_75 fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 0 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 1 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 1 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 1 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 0 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 1 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 1 , 1 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 1 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 1 , 1 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 1 , 1 ****************** 24 codec gsm690_4_75 SACCH fn = 489683 fn_report = 38 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 1 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 1 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 1 , 1 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 0 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 1 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 1 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 1 , 1 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489709 fn_report = 64 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 0 , 1 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 3 codec 1 codec gsm690_4_75 fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 1 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 1 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 1 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489735 fn_report = 90 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 1 , 0 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 1 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 1 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 1 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 1 , 0 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 0 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 1 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 1 , 1 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 1 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 1 ****************** 24 codec gsm690_4_75 SACCH fn = 489761 fn_report = 12 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 3 codec 1 codec gsm690_4_75 fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 1 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 0 , 1 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 1 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 1 , 1 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489787 fn_report = 38 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 1 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 3 codec 1 codec gsm690_4_75 fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 1 , 1 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 1 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 0 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 1 , 1 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489813 fn_report = 64 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 1 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489839 fn_report = 90 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 1 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 1 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 1 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 1 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 0 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 1 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 1 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489865 fn_report = 12 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 1 , 0 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 0 , 1 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 1 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 0 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 1 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 1 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 1 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489891 fn_report = 38 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 0 , 1 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 1 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 0 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 0 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 1 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 1 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 1 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489917 fn_report = 64 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 1 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 1 , 1 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 1 , 1 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 0 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 0 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 0 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 1 , 1 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 0 , 1 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 1 , 0 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 0 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 0 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489943 fn_report = 90 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 0 , 0 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 1 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 0 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 1 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 1 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 1 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 0 , 1 fn % 26 = 11, fn % 13 = 11, B = 3 steal_bit 1 , 1 ****************** 11 unkown codec fn % 26 = 13, fn % 13 = 0, B = 0 steal_bit 1 , 1 fn % 26 = 14, fn % 13 = 1, B = 1 steal_bit 1 , 1 fn % 26 = 15, fn % 13 = 2, B = 2 steal_bit 0 , 1 fn % 26 = 16, fn % 13 = 3, B = 3 steal_bit 1 , 1 ****************** 16 codec gsm690_4_75 fn % 26 = 17, fn % 13 = 4, B = 4 steal_bit 0 , 1 fn % 26 = 18, fn % 13 = 5, B = 5 steal_bit 0 , 1 fn % 26 = 19, fn % 13 = 6, B = 6 steal_bit 0 , 1 fn % 26 = 20, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 20 unkown codec fn % 26 = 21, fn % 13 = 8, B = 0 steal_bit 0 , 0 fn % 26 = 22, fn % 13 = 9, B = 1 steal_bit 1 , 0 fn % 26 = 23, fn % 13 = 10, B = 2 steal_bit 0 , 1 fn % 26 = 24, fn % 13 = 11, B = 3 steal_bit 0 , 0 ****************** 24 codec gsm690_4_75 SACCH fn = 489969 fn_report = 12 fn % 26 = 0, fn % 13 = 0, B = 0 steal_bit 0 , 1 fn % 26 = 1, fn % 13 = 1, B = 1 steal_bit 1 , 0 fn % 26 = 2, fn % 13 = 2, B = 2 steal_bit 0 , 0 fn % 26 = 3, fn % 13 = 3, B = 3 steal_bit 1 , 0 ****************** 3 unkown codec fn % 26 = 4, fn % 13 = 4, B = 4 steal_bit 0 , 0 fn % 26 = 5, fn % 13 = 5, B = 5 steal_bit 0 , 0 fn % 26 = 6, fn % 13 = 6, B = 6 steal_bit 0 , 0 fn % 26 = 7, fn % 13 = 7, B = 7 steal_bit 0 , 0 ****************** 7 codec gsm690_4_75 fn % 26 = 8, fn % 13 = 8, B = 0 steal_bit 1 , 1 fn % 26 = 9, fn % 13 = 9, B = 1 steal_bit 1 , 1 fn % 26 = 10, fn % 13 = 10, B = 2 steal_bit 1 , 0 -- View this message in context: http://baseband-devel.722152.n3.nabble.com/is-my-patch-for-capturing-TCH-fr… Sent from the baseband-devel mailing list archive at Nabble.com.

2 1

Is OsmocomBB save for use in Live Networks?
by Martin Haug 18 Jul '12

18 Jul '12

Hello, I am using a mobile phone with OsmocomBB on it, but with transmission disabled, because I dont have a private GSM-Network. Do you think it is save to turn tramission on or is Osmocom not reliable enough? greetz Martin Haug _________________________________________________________________ Free-Mail Postfach (bis zu 10 GB E-Mail-Speicher) SMS, MMS, Fax und vieles mehr - http://www.smart-mail.de

1 0

milenage usage
by ☎ 18 Jul '12

18 Jul '12

Hello. I've noticed that unlike a5.h and comp128.h (include/osmocom/gsm), milenage.h is located in "src/gsm/milenage/" and thus is not included into .deb packages. What are the reasons for that and how milenage should be used properly? -- best regards, Max, http://fairwaves.ru

2 2

OsmocomBB Wiki update/upgrade
by George Carpenter 17 Jul '12

17 Jul '12

Hello. This is my first message to the mailing list and I would like to introduce myself. My name is George Tsnikosmaoglou (OsmoCarpenteR) and I live in Greece. I am watching this project for some years now, but due to heavy work load, unfortunately I cannot dedicate a lot of time to contribute to this project. I must give my congratulations to the people that have dedicated their time and show their passion and intelligence through this project. Even though I am watching this project for a lot of time, I consider myself a newbie, but I want to actively participate to the project and contribute to this effort as much as I can. I am already trying to inform as many people as possible, but as you know, you need a lot of effort to explain and convince one person at a time to devote some time to this project. I have met a lot of people that have either technical, or theoretical or both knowledge about GSM and general electronics. These people come with a high educational background, but due to the current working environment, they do not have time to spare to a free Software Open Source GSM Baseband software implementation as OsmocomBB is. The bottom line is that they are interested, but they stop after a while because the first steps are always difficult. So here are my proposals. It would be nice to have a complete and easy to read wiki. I know that this project is created and maintained by people who have devoted a lot of time to this project, but the current status of wiki does not allow a newbie to gather all the information that are needed to start easy and get in the project as fast as possible. I remember my first attempts to load the firmware to the mobile phone and I remember this was somewhat difficult. Thanks to some help from the IRC people that hang out and some manuals that float on the net (see srlabs gsmmap and gprs sniffing tutorial), I managed to get started. And never underestimate the frustration and the temper when you keep trying and trying to load your first firmware, or the excitement and awe when you see these sweet words (OsmocomBB) on the screen of the mobile phone. Personally, when I finally managed to load and run my first application (ccch_scan), something was created in my mind that this project really stands for something innovative and genius. But for most of my friends, this did not happen. Many of them stopped because they found this whole procedure frustrating and nerve breaking, so they either stopped or they left this aside. Also I see that although I am trying to devote sometime, there are always some expected problems. These problems are usually solved if you read the mailing list or ask help from IRC, but in many cases this takes a lot of effort and after some hours and painkillers, you cannot figure out how to solve a problem. Just to mention the latest FULL LRAM compile problem that exists since the start of the year. Yesterday I was trying all day to find a solution, but there were a lot of candidate solutions and patches, but none was solving the actual problem. This would have saved me a lot of time if this was mentioned in the wiki and if someone had devoted some time to print 2 lines of comment or directions on how to solve or explain to many people that it is not solved. Because I see that no one from the persons that have real skills and knowledge of this project spares some time to update and evolve the OsmocomBB wiki, I propose to create some “booty”, so we get a proper wiki for this project and the person or persons that will create this will be “rewarded” for their time and effort. I know that knowledge has no price, but I propose to create a “booty” bank with either money or/and services or/and equipment. Anything that any individual can contribute. I think this will boost the quality of this project and will be something interesting for some newbie to get involved. Some things that I found that this project needs is a newbie/getting started wiki. Detailed and with information and explanation as you were talking to a 5 year old child. This should include detailed information on what equipment and first things to do before you even start your first attempt to load any code to the phone and then how to load the first firmware and load the first application. I really liked the srlabs instructions about gprs and gsmmap. It was a good way to start and it was a step by step manual and easy to understand. A full list of existing applications. This will include detailed explanation of each application and it’s capabilities. Also how to load them, all the application parameters and what you can do with them. A hints/tips list. This will be some useful information about the OsmocomBB project. What to do and not to do. For example if the loader shows always the FMTOOL message and what o do in similar situations. To take extra caution to the physical contact of the cable, etc. Issues that are encountered and are standard to the project. A current issues/proposed solutions to current problems. I cannot find a more proper example as the current FULL LRAM compile problem that we currently have. There can be a small description of the problem and candidate solutions till the problem is fully solved. This will spare a lot of time to persons that encounter problems and save a lot of traffic in the IRC and mailing list. It will also be a database of knowledge for genius solutions or efforts to solve an issue. A todo list. This refers to the masters of this project. That is because they usually show the direction of the project. They who have deep knowledge of this project can show where this project is heading for. So a todo list to get there will be nice. You never know, even a newbie may solve an issue that is it totally new to the project, just to evolve the whole project. Right now I do not find any reference or it is very difficult to know (even the masters of OsmocomBB) where this project is heading to. A full GSM documentation. This will include detailed documents and references on each and every aspect of GSM technology. I am talking for an encyclopedia of everything that is referred in GSM technology. I think this is very important to have all the information that is needed all in one place and updated on any occasion. This is very important for someone who really want to get involved in the project. This can also include 3G and future communication technologies. I am talking for the bible of communications. Of course one step at a time. I know that all the information that we need is out there on the net, but all the information gathered in one place and shorted by an expert would be the ultimate tool. Of course everything that I mentioned does not have any meaning or purpose if the wiki is not updated frequently. Sorry for the big message. Thank you.

3 2

how to make T191 Brush line
by 麦田守望者 17 Jul '12

17 Jul '12

2 1

TCH/H with BB
by Leonardo Nve 14 Jul '12

14 Jul '12

Hi everyone. I tried to use TCH/H with osmocom-bb (Testing branch) with this configuration on mobile.cfg: ...... ...... codec full-speed codec half-speed prefer ...... ...... no full-speech-v1 no full-speech-v2 half-speech-v1 ...... ...... Trying it over our network (openbsc only with TCH/H timeslots and hr default codecs ) we saw that handsets are still trying TCH/F, is TCH/H supported by bb??? Openbsc log: Fri Jul 13 20:48:28 2012 <0004> abis_rsl.c:621 (bts=0,trx=0,ts=2,ss=0) RF Channel Release CMD due error 1 Fri Jul 13 20:48:28 2012 <0004> abis_rsl.c:658 (bts=0,trx=0,ts=2,ss=0) RF CHANNEL RELEASE ACK Fri Jul 13 20:48:30 2012 <0004> abis_rsl.c:594 (bts=0,trx=0,ts=0,ss=0) is back in operation. Fri Jul 13 20:48:30 2012 <0004> abis_rsl.c:1281 BTS 0 CHAN RQD: no resources for TCH/F 0xdf Fri Jul 13 20:48:30 2012 <0019> ipaccess.c:426 Bad signalling message,sign_link returned error: 0c 13 01 88 13 df 03 31 11 0c Fri Jul 13 20:48:30 2012 <0004> abis_rsl.c:594 (bts=0,trx=0,ts=2,ss=0) is back in operation. Fri Jul 13 20:48:39 2012 <0004> abis_rsl.c:1281 BTS 0 CHAN RQD: no resources for TCH/F 0xdf Fri Jul 13 20:48:39 2012 <0019> ipaccess.c:426 Bad signalling message,sign_link returned error: 0c 13 01 88 13 df 09 f5 11 0c Fri Jul 13 20:48:51 2012 <0004> abis_rsl.c:1281 BTS 0 CHAN RQD: no resources for TCH/F 0xdf Fri Jul 13 20:48:51 2012 <0019> ipaccess.c:426 Bad signalling message,sign_link returned error: 0c 13 01 88 13 df 1c 31 11 0c

3 2

Logical Channels in firmware
by Ryan Hayes 14 Jul '12

14 Jul '12

Here is a good link on Logical Channels, I am assuming the firmware is capable of decoding some point of entry into network MU. http://gsmfordummies.com/tdma/logical.shtml is there a tutorial in applying patches in both osmocombb mobile or layer23? Is using it as a BTS a key to accessing these RF channels without seeing the normal ARFCN dumps? thanks.

1 0

Baseband Architecture Question
by Ryan Hayes 14 Jul '12

14 Jul '12

Hello all, I working with osmcombb phone, is there a current list of services needing to be developed for uplink/downlink services or am I assuming the entire architecture is based on a encryption set in GSM network? It would be great to get going on possible direction of either studying the architecture base as messaging service or UART programming side. thank you.

1 0

Spare / used Openmoko GTA02 motherboards
by Dr. H. Nikolaus Schaller 13 Jul '12

13 Jul '12

Hi, maybe someone here has a use for the motherboards we have removed to upgrade Openmoko Freerunners with a GTA04 board because they carry a Calypso modem. http://www.handheld-linux.com/wiki.php?page=Neo%20Freerunner%3AMotherboard If you don't agree on the price, please use the "wishlist" function to make your proposal. There are currently approx. 20-30 such boards. Nikolaus

1 0

Sony Ericsson J100a (GSM-850 / GSM-1900), i can't configure Radio.
by G¢mez Nahuel Lucas 13 Jul '12

13 Jul '12

Hey. I am new to the mailing list. I have a Sony Ericsson J100a phone (GSM-850 / GSM-1900)The problem is that I can not make calls and send SMS. I think the problem I have is with the configuration of the stage of Radio the phone, it seems that the SIM card is properly read. I leave it attached the console output of osmocom. OsmocomBB# show subscriber Mobile Subscriber of MS '1': IMSI: 72231001******* ICCID: 8954310111********* Service Provider Name: Claro AR SMS Service Center Address: +543200000001 Status: U1_UPDATED IMSI detached TSMI 0x65945b7c LAI: MCC 722 MNC 310 LAC 0x0c29 (Argentina, CTI PCS S.A) Key: sequence 1 ec 94 74 df fa 7c 69 fb Registered PLMN: MCC 722 MNC 310 (Argentina, CTI PCS S.A) Access barred cells: no Access classes: C1 List of forbidden PLMNs: MCC |MNC |cause -------+-------+------- 722 |34 |#255 (Argentina, 34) 722 |07 |#255 (Argentina, 07) 155 |0xff4 |#255 (155, 0xff4) OsmocomBB# OsmocomBB# show ms MS '1' is up, service is limited IMEI: 010848********* IMEISV: 010848********** IMEI generation: fixed automatic network selection state: A1 trying RPLMN MCC=722 MNC=310 (Argentina, CTI PCS S.A) cell selection state: C1 normal cell selection radio ressource layer state: idle mobility management layer state: MM idle, PLMN search OsmocomBB# Are missing information, please let me know to attach. Thank you very much.

1 0

MOTO C 118 TP27 -- DLPWR (download power on), connects to Iota:RPWON
by 麦田守望者 13 Jul '12

13 Jul '12

TP27 -- DLPWR (download power on), connects to Iota:RPWON connects to ???????????????????????????????????? TP27 is must connects ?????????

1 0

the sign of a voice frame in the AMR codec
by bob wisebob 13 Jul '12

13 Jul '12

Hi,List. I am studying the TCH AMR codec; I using the first 8 bits of any TCH frame block to decide whether it is a speech frame or a signal; Although it will contain some non-speech frame; but I think it can capture all the speech frame and the captured file can be decoded correctly. is that right?

4 3

GSM clock and phones
by Dario Lombardo 12 Jul '12

12 Jul '12

Hello everybody When launching a local BTS (like with openbts on usrp or similar), one needs to feed the BTS with a precise clock or a reference clock, depending on the hardware. This step is needed because phones need a precise clock from the BTS, otherwise they don't camp. Is that correct? If yes, my question is: how can a phone determine that the clock given by the network is precise enough? I'm a bit confused: how can the phone say that's not good, if it doesn't have a precise clock itself? I tried to search something on google but results got are completely out of scope. Can someone share some link? Thanks to all Dario.

3 3

[PATCH] Fix build
by Christian Inci 12 Jul '12

12 Jul '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remember to change the header too. ;-) Signed-off-by: Christian Inci <chris.pcguy.inci(a)gmail.com> - --- src/logging.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBAgAGBQJP/nwYAAoJEC7OUg5VIFIF+zYP/i9itRon3ovv4Li2xqgIe6ZD DYmfG2m5iZiY6kvGR1q387gE/aQdyiOfO/tbmy+pwGJgP+H3Dvhy6cH4GGMxN+p1 OA84bLWGnpJ3+GJ1W9ippKgKxih5QHvR/+9gy4/z5Yxdtec4+jlTQyn/eD54Z95N HAcqJUBV0FSZeSdWDaEZUnLdnbtoBOBnW/3BHwUCgtXrzVpOumb4IM6AvbynmWiH F6q0pQgAYY4AdcbKlU1DzGxv1ge4FhjFOa06frAMiAN1oXy5iobdMq9+Yi/+EHmw NYsKMZJ4PAucuZZ0yspW+RvnBXhA8TZGBq6bjRmEvj1dMVHMIwmkeHS7VVpUDBgj GL6RiYAJz/2BZGh4k16HOi5BQdDYIKBFrPN5lMSJuj7et1PI2OxArywnP8OJ/Ff5 Ia4Jzx0lSjElVZtLGba9ujAXRQ+sAO5WcoAyFOnxuu1KxlBFY57s1Tep0J3mnmAD IMrPA7qxQbyiTVqR+pa7+e18MJf92rrhfsdBnW0oiATaYNrVY5eZ6mba2LHk5rRa P68McxYYGY6uf236DsE1fEji7UNNAmdhZaFMjcMFbw5cJK/Dmucf5EYcUHP9HIWs kqM4ehdr65TYvYJSeqcDr7wmOlr2QJih9T+NxxLiWE6VFvvTdh1cu9+wCJmkQBRC ZaqipE43nZxJ8CwRsZtu =3eYr -----END PGP SIGNATURE-----

2 1

[PATCH] Fix build
by Christian Inci 12 Jul '12

12 Jul '12

Remember to change the header too. ;-) Signed-off-by: Christian Inci <chris.pcguy.inci(a)gmail.com> --- src/logging.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/logging.c b/src/logging.c index 8dfc31e..b92a54c 100644 --- a/src/logging.c +++ b/src/logging.c @@ -314,7 +314,7 @@ void osmo_vlogp(int subsys, int level, char *file, int line, } } -void logp(int subsys, char *file, int line, int cont, +void logp(int subsys, const char *file, int line, int cont, const char *format, ...) { va_list ap; @@ -324,7 +324,7 @@ void logp(int subsys, char *file, int line, int cont, va_end(ap); } -void logp2(int subsys, unsigned int level, char *file, int line, int cont, const char *format, ...) +void logp2(int subsys, unsigned int level, const char *file, int line, int cont, const char *format, ...) { va_list ap; -- 1.7.8.6 --------------050502050900090804030106 Content-Type: application/pgp-signature; name="0001-Fix-build.patch.sig" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="0001-Fix-build.patch.sig" iQIcBAABAgAGBQJP/nwYAAoJEC7OUg5VIFIFwBUQAK4CHbDqHOd+ljCt/g/KHakum5u+/7oG htAlPb8NBvxQp4ao3Ui7QRHwn1HVw+X7l6sr8Aa0A03lljvm92emoeoGo+sFLosMR9sCBo/x gnGxZVAmkHsF+DM65r7C7XC07KcqH+dlDtUxlkAWBRf3ODl0sdTUiXY7qnz2tybvd5BB+M0k 1MtsA/zg+0bSFpspBZHcOSDJRn1kRP3/0RflWHH6rEjhvpIA7c5WFj6mPoS5btGfcOGUNOXj stLiusgQgzdOjHXsFpI5Of5BnGHAWooW0oEyuPpRi+c+FhFllD7EMaFrnBnkDugS92cpy3r7 6G+ByfQ6YMikyZErkc5KG9HLPqsNavMTz1AhU9w9vH22C8YWEyIQ6M0JZApiQVwHbezrwWFu qHU5ldv9ezPQ3VLzofldxvJx5ysheA65rpSaaI0EGH9/zw5/7zmpO56gJbWbYIFezOLmyEcI A4vB3ibuiFVJhEeEad221cAXv2QRLusNzhrhEHmCyRPBKjyzBFlarplspbOq2XB4pKa1mph0 oc4T5QWuvBjKznbhdSnFN99ON6UksYjQb9zBdlmkEhm+RjjwUuG9W3hleu2qhPbzlXtImGC5 nm2eT/IX+HcVaDFa9CFbqd2u4mXEi3LAl7MdHhhJTJsy/1DbLPTjS/0JvjOEeEY/93CEQvP2 SuSV --------------050502050900090804030106--

1 0

moto C118 who can give me a the phone UART connects PC USb PL2303
by 麦田守望者 12 Jul '12

12 Jul '12

On the C123 the following pads are usable TP27 -- DLPWR (download power on), connects to Iota:RPWON TP14 -- RxD Modem TP13 -- TxD Modem TP9 -- CTS Modem TP39 -- GND can you give me a picture thanks

2 1

T-Mobile SIM card trouble / OsmocomBB
by Harald Welte 12 Jul '12

12 Jul '12

Hi Tobias! Regarding the problem with your current German T-Mobile SIM and OsmocomBB: The 0x60 that was received at startup is actually a "waiting time extension" byte. A quick read through the calypso SIM driver by dexter reveals that procedure byte handling is not implemented completely (only in the special case of RUN GSM ALGO). So basically what happens is that the card sends 0x60 to let the reader know that it is alive, but that it needs some more time to respond. The next byte 0x9f was then the first half of the status word. However, due to the incomplete SIM driver, the code thinks 0x60 0x9F is the status word, which of course is unknown. I'm not able to look into fixing this myself right now, but maybe somebody on the list has an interest in looking into the bug. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

A TCH sniffer demo
by bob wisebob 11 Jul '12

11 Jul '12

Hi,List who can can me a TCH sniffer demo like the app_ccch_scan.c in the burst_id? I am try to do it but not work well ! Thanks!

1 0

burst_ind and TCH
by Mad 11 Jul '12

11 Jul '12

Hi Sylvain, hi list! I'm experimenting with burst_ind and TCHs right now and ran into some problem I couldn't solve yet. After receiving an Assignment Command for a hopping TCH/F I call l1ctl_tx_dm_est_req_h1() with all necessary parameters and tch_mode GSM48_CMODE_SPEECH_V1 or _EFR. After that I do get burst indications containing the received bits on up- and downlink for the active arfcn on each consecutive frame number. BUT the rx level measurements are most of the time very low and sporadic higher, surely not from that nearby bts and the very close cellphone. It looks like the layer1 doesn't "hit" the right timeslot on the right arfcn at the right time. There are some possible sources of error leading to that, like hopping parameters, channel number and MA list. But I checked these and I took all of them directly from the ASS CMD, the MA as word list in ascending order, like in layer23 IMM ASS handling. The specific AC doesn't have any specialties like Starting Time or "before time" parameters. So my question is if there is some obvious pitfall I'm missing and are there any suggestions how to debug that? Regards, Mad

4 5

TODAY: Jul 11, 8pm / Osmocom meeting in Berlin
by Harald Welte 11 Jul '12

11 Jul '12

Hi all! This is the announcement for the next Osmocom Berlin meeting. Jul 11, 8pm @ CCC Berlin, Marienstr. 11, 10113 Berlin There is no formal presentation scheduled for this meeting. However, updates will be provided on various current developments, such as * Progress in development of GPRS PCU * Status of Osmocom UMA/GAN controller development * Planning phase of custom calypso board * OsmoSDR roadmap If you are interested to show up, feel free to do so. There is no registration required. The meeting is free as in "free beer", despite no actual free beer being around. Updates and the blog post can be found here: http://openbsc.osmocom.org/trac/blog/osmug-20120711 Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

Open GSM firmware - OsmocomBB supports Neo FreeRunner
by Martix 10 Jul '12

10 Jul '12

Hi! There is some GTA02 support in OsmocomBB project. You can flash open source firmware for TI Calypso GSM modem. http://bb.osmocom.org/trac/wiki/OpenMoko Did anybody tried this firmware on his Neo FreeRunner? What's your experience? Is it usable with SHR or Qt Moko like old proprietary firmware? Calls, SMS, GPRS, SIM load/store (contacts, SMSs) works? How many successfully flashed devices are here? And how many bricks? ;-) I know about OsmocomBB from beginning, but Openmoko smartphones support wasn't priority for them. I'm glad to see some progress on GTA02. Did leaked documentation and proprietary firmware source codes helped OsmocomBB? http://lists.openmoko.org/pipermail/community/2011-November/065731.html Best Regards, Martix

4 4

Re: [PATCH] firmware/rssi: attempt to resync on sync errors
by Andreas Eversberg 10 Jul '12

10 Jul '12

Nico Golde wrote: > +static void retry_sync(void) > +{ > + exit_sync(); > + toggle_dcs_pcs(); > + enter_sync(); > +} > + hi nico, i see 2 problems: why do you toggle dcs/pcs? if you select dcs (default), but like to sync to pcs, just push the function key, then sync. if no sync is possible at all, your patch ends up in an endless loop. (or am i wrong?) regards, andreas

2 1

the amr codec test result
by bob 10 Jul '12

10 Jul '12

Hi List! I test the AMR codec in my GSM network, and it is so strange, the code mode is jump between codec gsm690_12_2 and codec gsm690_4_75, why? codec gsm690_4_75 length is 13 voice[0] is 20 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c SACCH fn = 1682888 fn_report = 90 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c SACCH fn = 1682914 fn_report = 12 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c SACCH fn = 1682940 fn_report = 38 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c SACCH fn = 1682966 fn_report = 64 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c SACCH fn = 1682992 fn_report = 90 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c SACCH fn = 1683018 fn_report = 12 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c SACCH fn = 1683044 fn_report = 38 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 1 codec gsm690_4_75 length is 13 voice[0] is 20 codec 4 codec gsm690_12_2 length is 32 voice[0] is 3c SACCH fn = 1683070 fn_report = 64 codec 1 codec gsm690_4_75 length is 13 -- View this message in context: http://baseband-devel.722152.n3.nabble.com/the-amr-codec-test-result-tp4025… Sent from the baseband-devel mailing list archive at Nabble.com.

1 0

Which (phone, cable) should I choose?
by tarik benaddi 09 Jul '12

09 Jul '12

Hi all, I want to join the adventure. First, I need to make my hardware. I saw on the project website that different mobiles are compatible with osmocombb ( http://bit.ly/MaSR5T). Which one do you advice and where can I buy it? Thanks :)

3 3

[PATCH] firmware/rssi: attempt to resync on sync errors
by Nico Golde 09 Jul '12

09 Jul '12

--- src/target/firmware/apps/rssi/main.c | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/src/target/firmware/apps/rssi/main.c b/src/target/firmware/apps/rssi/main.c index b2cafae..8907cce 100644 --- a/src/target/firmware/apps/rssi/main.c +++ b/src/target/firmware/apps/rssi/main.c @@ -763,6 +763,7 @@ static int inc_dec_spectrum(int inc) static void enter_sync(void); static void exit_sync(void); +static void retry_sync(void); static void enter_rach(void); static void exit_rach(void); @@ -987,6 +988,13 @@ static void handle_pm(void) /* sync / SI */ +static void retry_sync(void) +{ + exit_sync(); + toggle_dcs_pcs(); + enter_sync(); +} + static void enter_sync(void) { struct msgb *msg = l1ctl_msgb_alloc(L1CTL_FBSB_REQ); @@ -1414,8 +1422,10 @@ static void l1a_l23_tx(struct msgb *msg) sb = (struct l1ctl_fbsb_conf *) dl->payload; if (sb->result == 0) sync_result = "ok"; - else + else { sync_result = "error"; + retry_sync(); + } bsic = sb->bsic; break; case L1CTL_DATA_IND: -- 1.7.10

1 0

the layer1 FN count
by bob wisebob 09 Jul '12

09 Jul '12

Hi, List: I am puzzled about the variation of gsmtime when the channel iump to sdcch or tch, how does the gsmtime change? I am decode the tch in the burst_id, but I think I can`t capture the TCH frame correctly?anyone who is familiar with it can help me?

3 2

replacing sercomm tranfer with direct function
by Akib Sayyed 08 Jul '12

08 Jul '12

l1_queue_for_l2(struct msgb *msg) will queue data from layer1 for layer2 and will send via serial to host now if i directly replace all layer2_read content and pass msg to l1ctlrecv will it work on target host == host pc target == phone any suggestion on this and l1a_l23_rx this will receive data from l23 from host is it correct Note: I am trying to implement l2l3 on phone it self -- Akib Sayyed Matrix-Shell akibsayyed(a)gmail.com akibsayyed(a)matrixshell.com Mob:- +91-966-514-2243

1 0

GSM Paging Request
by Ryan Hayes 08 Jul '12

08 Jul '12

Hi, I am confused about the paging request when monitoring channel bursts, is the return downlink say from TMSI only reviewed by the BTS or is it accessible from the layer23 forwarding wireshark? more mods needed in development kit? Thanks

1 0

Re: Pirelli DP-L10 keypad
by Steve Markgraf 07 Jul '12

07 Jul '12

Hi Kevin, On 07.07.2012 11:15, Kevin Redon wrote: > - the additional volume up/down and camera buttons press are detected > by keypad_poll(), but not visible in KBR_LATCH_REG Yes, for that you need to increase the number of rows/columns that are scanned (can exactly remember which one). The Compal phones don't use all of them. > - the power button press is not detected by keypad_poll() (or ignored > by > "with_interrupts && !polling") As it seems the power button is not connected to the keyboard scan matrix. You get an interrupt from Iota though when the button is pressed, see [2]. That code was removed again from master. > - the keypad.h file is in target/firmware/include/, but it's board > dependent. is there a clean way to handle that? Did you check out the steve-m/pirelli branch [2]? It already contains the modified keypad header. Those changes should definitely be cleaned up and put into master, especially make the UARTs runtime configurable to have them swapped for the DP-L10. Regards, Steve [1] http://cgit.osmocom.org/cgit/osmocom-bb/commit/?id=4f0825a352af5499beee068d… [2] http://cgit.osmocom.org/cgit/osmocom-bb/commit/?h=steve-m/pirelli

1 0

Pirelli DP-L10 keypad
by Kevin Redon 07 Jul '12

07 Jul '12

Hi, I changed the keypad bit mask so to match for the Pirelli DP-L10 (patch attached). some remarks: - the additional volume up/down and camera buttons press are detected by keypad_poll(), but not visible in KBR_LATCH_REG - the power button press is not detected by keypad_poll() (or ignored by "with_interrupts && !polling") - the keypad.h file is in target/firmware/include/, but it's board dependent. is there a clean way to handle that? thanks, kevin

1 0

TCH AMR codec in GSM
by bob wisebob 06 Jul '12

06 Jul '12

Hi List! I am studying the AMR codec in GSM.but I met some problem. I use burst_id to capture TCH in my test network,and in my programmm, I use the firsrt 8 bits of a TCH block to decide whether it is a tch or not and also get the codec mode of a AFS,and than other operations,but it is not to work , I am struggled to this, any one can help me? this is my code: static void process_tch_amr(struct osmocom_ms *ms,struct l1ctl_burst_ind *bi) { int16_t rx_dbm; uint16_t arfcn; uint32_t fn,B; uint8_t cbits, tn, lch_idx; int ul, bid, i, k, length; sbit_t *bursts, mC[456]; ubit_t steal_bit[2], bt[114],convu[260],convd[260],EFRBits[244],EFRAMR[8 + 244]; pbit_t voice[33]; unsigned char mode; arfcn = ntohs(bi->band_arfcn); rx_dbm = rxlev2dbm(bi->rx_level); fn = ntohl(bi->frame_nr); ul = !!(arfcn & ARFCN_UPLINK); cbits = bi->chan_nr >> 3; tn = bi->chan_nr & 7; B = -1; if((fn%13)%4 == 0) flag= 1; if(!flag) return; B = count_tch % 8; if (B == -1) return; if (B == 0){ for(i=0; i<4; i++){ memset(app_state.mI[i], 0x00, 114); } }else if(B == 4){ for(i=4; i<8; i++){ memset(app_state.mI[i], 0x00, 114); } } /* Unpack (ignore hu/hl) */ osmo_pbit2ubit_ext(bt, 0, bi->bits, 0, 57, 0); osmo_pbit2ubit_ext(bt, 57, bi->bits, 57, 57, 0); /* Convert to softbits */ for (i=0; i<114; i++) app_state.mI[B][i] = bt[i] ? - (bi->snr >> 1) : (bi->snr >> 1); count_tch++; // Deinterleaves i[] to c[] if((B % 4 ==3)&&(count_tch >= 7)){ if(B == 3) { tch_deinterleave(mC, 4); }else{ tch_deinterleave(mC, 0); } //abstract the codec mode for(i = 0;i<8;i++) { //printf("%x ",mC[i]); if(mC[i] < 0) mode = ( mode | (1 << i)); else mode = ( mode & (~(1 << i))); } //printf("mode %x\n",mode); switch(mode){ case CODEC_MODE_1: printf("codec 1\n"); i = find_speech_mode(app_state.amr_arg.amr_acs, 1); break; case CODEC_MODE_2: printf("codec 2\n"); i = find_speech_mode(app_state.amr_arg.amr_acs, 2); break; case CODEC_MODE_3: printf("codec 3\n"); i = find_speech_mode(app_state.amr_arg.amr_acs, 3); break; case CODEC_MODE_4: printf("codec 4\n"); i = find_speech_mode(app_state.amr_arg.amr_acs, 4); break; default: { //printf("unkown codec\n"); return; } } memset(voice,0,32); switch( 1 << i ){ case gsm690_4_75: printf("codec gsm690_4_75\n"); osmo_conv_decode(&conv_tch_afs_4_75, &mC[8], convu); memcpy(convd,convu,39); memcpy(convd,&convu[45],56); tch_map(gsm690_4_75_bitorder, gsm690_4_75_len, EFRAMR + 8,convd); fillField(EFRAMR, 0, 0x04, 8); length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_4_75_len, 1); break; case gsm690_5_15: printf("codec gsm690_5_15\n"); osmo_conv_decode(&conv_tch_afs_5_15, &mC[8], convu); memcpy(convd,convu,49); memcpy(convd,&convu[55],54); tch_map(gsm690_5_15_bitorder, gsm690_5_15_len, EFRAMR + 8,convd); fillField(EFRAMR, 0, 0x0c, 8); length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_5_15_len, 1); break; case gsm690_5_90: printf("codec gsm690_5_90\n"); osmo_conv_decode(&conv_tch_afs_5_9, &mC[8], convu); memcpy(convd,convu,55); memcpy(convd,&convu[61],63); tch_map(gsm690_5_9_bitorder, gsm690_5_90_len, EFRAMR + 8,convd); fillField(EFRAMR, 0, 0x14, 8); length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_5_90_len, 1); break; case gsm690_6_70: printf("codec gsm690_6_70\n"); osmo_conv_decode(&conv_tch_afs_6_7, &mC[8], convu); memcpy(convd,convu,55); memcpy(convd,&convu[61],79); tch_map(gsm690_6_7_bitorder, gsm690_6_70_len, EFRAMR + 8,convd); fillField(EFRAMR, 0, 0x1c, 8); length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_6_70_len, 1); break; case gsm690_7_40: printf("codec gsm690_7_40\n"); osmo_conv_decode(&conv_tch_afs_7_4, &mC[8], convu); memcpy(convd,convu,61); memcpy(convd,&convu[67],87); tch_map(gsm690_7_4_bitorder, gsm690_7_40_len, EFRAMR + 8,convd); fillField(EFRAMR, 0, 0x24, 8); length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_7_40_len, 1); break; case gsm690_7_95: printf("codec gsm690_7_95\n"); osmo_conv_decode(&conv_tch_afs_7_95, &mC[8], convu); memcpy(convd,convu,75); memcpy(convd,&convu[81],84); tch_map(gsm690_7_95_bitorder, gsm690_7_95_len, EFRAMR + 8,convd); fillField(EFRAMR, 0, 0x2c, 8); length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_7_95_len, 1); break; case gsm690_10_2: printf("codec gsm690_10_2\n"); osmo_conv_decode(&conv_tch_afs_10_2, &mC[8], convu); memcpy(convd,convu,65); memcpy(convd,&convu[71],139); tch_map(gsm690_10_2_bitorder, gsm690_10_2_len, EFRAMR + 8,convd); fillField(EFRAMR, 0, 0x34, 8); length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_10_2_len, 1); break; case gsm690_12_2: printf("codec gsm690_12_2\n"); osmo_conv_decode(&conv_tch_afs_12_2, &mC[8], convu); memcpy(convd,convu,81); memcpy(convd,&convu[87],163); tch_map(gsm690_12_2_bitorder, gsm690_12_2_len, EFRAMR + 8,convd); fillField(EFRAMR, 0, 0x3c, 8); length = osmo_ubit2pbit_ext(voice, 0, EFRAMR, 0, 8 + gsm690_12_2_len, 1); break; default: { printf("unkown gsm690 codec\n"); return; } } printf("length is %d\n",length); printf("voice[0] is %x\n",voice[0]); fwrite(voice, 1, length, d_speech_file); }

1 0

the airprobe port to BB
by Chengcheng Gou 05 Jul '12

05 Jul '12

Hi, I am studying the GSM voice interception of airprobe,and want to port to BB,using the ccch_scan.c .the problem is that, the airprobe is written by C++,and the BB is C; I find the useful part of airport is airprobe/gsm-receiver/src/lib/decoder/openbtsstuff, and how to modify the makefile of BB to use the source of openbtsstuff? Thanks!

4 4

re: Clock from phone
by Dario Lombardo 03 Jul '12

03 Jul '12

On Tue, Jul 3, 2012 at 3:27 PM, Alexander Huemer <alexander.huemer(a)xx.vu> wrote: > On Tue, Jul 03, 2012 at 03:08:02PM +0200, Dario Lombardo wrote: >> On Tue, Jul 3, 2012 at 1:44 PM, Sylvain Munaut <246tnt(a)gmail.com> wrote: >> >> In some past post of the ML, I've read that someone was trying to get >> >> the GSM 10MHz clock reference from the motorola phones. >> >> This aimed at feeding usrp with a stable reference, if I'm not wrong. >> >> Anything new this side? This would be extremely useful if GPS signal >> >> can't be got but GSM cell can. >> > >> > 1) It's not 10 MHz but 26 MHz >> >> Mmm... but the front panel of usrp is fed by 10 MHz/1pps... isn't it? >> > There are different revisions of the USRP. Sylvain is talking about the > USRP1, you of a later rev. > The USRP1 has an (unpopulated) direct clock input. > The other USRP revisions have a reference clock input, which is > something different. > You are definitly right. I was taling about N210, which can be fed by reference clock input. >> > 2) Yes it works, but you can't feed the USRP directly, you need to >> > multiply it by 2 (using a PLL chip) to get 52 MHz for the USRP. >> >> Can you provide some link to read something about it? >> > See [1,2,3] >> Don't you think that this way could be much more preferrable than the >> GPS way, if USRP is under GSM coverage? I mean: the clock from GSM is >> next to us... why just don't use it? Probably there's something I'm >> missing, since this approach is much less used than GPS clocking... >> > > There are many ways to provide a stable reference clock. A OCXO (e.g. > [4]), a cheap rubidium standard, the clock tamer[5], ... > Every option has up and downsides. > Just the "pirelli" way uses clock from existing GSM network. As said before I think that "reusing" the clock from network could be very useful, but I don't know if it is more difficult than generate the signal itself. Is that possible using motorola phones? Did anyone investigate that possibility?

1 0

Clock from phone
by Dario Lombardo 03 Jul '12

03 Jul '12

In some past post of the ML, I've read that someone was trying to get the GSM 10MHz clock reference from the motorola phones. This aimed at feeding usrp with a stable reference, if I'm not wrong. Anything new this side? This would be extremely useful if GPS signal can't be got but GSM cell can. Dario.

3 3

little confusion while studying l1l2 interface via sercomm
by Akib Sayyed 03 Jul '12

03 Jul '12

in layer23 apps we open local unix socket in layer23 app and one in osmocon another socket to communicate in between. now in layer23 we just send (write) or receive (read) msg. but we handle actual communication with phone is handled in osmocon. now flow of functions is main ->register_tool_server->tool_accept->un_tool_read->hdlc_send_to_phone->sercomm_sendmsg then sercomm handles all transmission in details then layer1 accept all data via so i wanted to ask that how does rssi firmware is sending data directly to l1 -l2 and i would also like to ask what is actual protocol used in communication between l1 and l2 -- Akib Sayyed Matrix-Shell akibsayyed(a)gmail.com akibsayyed(a)matrixshell.com Mob:- +91-966-514-2243

2 1

help on sim.c
by Gabriele.rago 02 Jul '12

02 Jul '12

Hello all, I am using osmocomm (branch sylvain) on a motorola C140. I have uncommented the line "#define DEBUG" on src/target/firmware/calypso/sim.c and recompiled. I have connected an interface between my PC and phone sim slot ( a pl2303 usb module, with a diode between TXD and RXD and a 22K resistor between +5V and RXD). Now I have opened the serial port on my PC with these settings: baud rate = 9600 databits = 8 parity = even stopbits = 2 and I am sending the byte "3B" to the phone, but I see in osmocon console: "SIM-ISR:  Waiting for read (9B)..." (id est the phone seems like to receive "9B" instead of "3B"), where I am wrong?

1 0

Trying to understand talloc.h
by Akib Sayyed 30 Jun '12

30 Jun '12

i am trying to understand talloc* functions. in layer23 app. i want to know what exact role they perform in these apps. its ok about allocating memory and freeing them but logically why they are used. -- Akib Sayyed Matrix-Shell akibsayyed(a)gmail.com akibsayyed(a)matrixshell.com Mob:- +91-966-514-2243

2 1

TOMORROW: Jun 27, 8pm / Osmocom meeting in Berlin
by Holger Hans Peter Freyther 26 Jun '12

26 Jun '12

Hi all! This is the announcement for the next Osmocom Berlin meeting. Jun 27, 8pm @ CCC Berlin, Marienstr. 11, 10113 Berlin Nico will talk about SAP (SIM Access Profile) in osmocomBB. If you are interested to show up, feel free to do so. There is no registration required. The meeting is free as in "free beer", despite no actual free beer being around. Updates and the blog post can be found here[1]. Regards, Holger [1] http://openbsc.osmocom.org/trac/blog/osmug-20120627

1 0

the building of /src/shared/libosmocore
by bob wisebob 26 Jun '12

26 Jun '12

3 3

Need guidance for layer1 and layer 2 connection in firmware
by Akib Sayyed 26 Jun '12

26 Jun '12

i am trying to port mobile app on phone it self as a firmware but unable to find out how exactly L1 on phone communicate with L2 L3 on pc. please help me with that. -- Akib Sayyed Matrix-Shell akibsayyed(a)gmail.com akibsayyed(a)matrixshell.com Mob:- +91-966-514-2243

1 0

LCD is going off after custom RSSI loading
by Akib Sayyed 23 Jun '12

23 Jun '12

i have been trying to load RSSI and run it. all went well. but after all of sudden LCD went off tried to debug but didnt understand much. here is log OSMOCOM Loader (revision osmocon_v0.0.0-1347-g4f0acac) ====================================================================== Running on compal_e88 in environment compalram Found flash of 2097152 bytes at 0x0 with 2 regions fb_td014_init: initializing LCD. //after above msg LCD is going off and firmware is giving output correct as it was giving before then i created custom program kept only board_init(); then compiled and uploaded in phone and started but still same issue. then fetched fresh git and tried to compile then also same issue. steps taken to compile test.c created folder test in target/firmware/apps/ added test in make file application list renamed test.c to main.c steps taken to load code in c118 ./host/osmocon/osmoload memload 0x820000 ./target/firmware/board/compal_e86/test.highram.bin ./host/osmocon/osmoload jump 0x820000 please help me with that -- Akib Sayyed Matrix-Shell akibsayyed(a)gmail.com akibsayyed(a)matrixshell.com Mob:- +91-966-514-2243

2 2

osmocon idling with C155 when using bus pirate
by Ian Kinsey 21 Jun '12

21 Jun '12

A Motorola C155 is hooked up to my computer via a bus pirate as per the official instructions, everything is properly wired and the phone seems to work. However, Osmocon neither indicates the presence of any data being sent or received when attempting to communicate with the phone; it just idles. Is there any extra logic in the cable? Any help would be appreciated.

2 1

Flashing Layer1 to GTA02
by Arno Onken 21 Jun '12

21 Jun '12

Hello everyone! I got osmocom-bb running on a gta02 with a self-built Debian image. osmocon-bb was compiled natively on the gta02. Everything works great using: $ ./osmocon -i 13 -m romload -p /dev/ttySAC0 layer1.highram.bin as described at: http://bb.osmocom.org/trac/wiki/OpenMoko It bugs me, however, that the proprietary openmoko 11 firmware is still lingering in the baseband flash. So I would like to replace it permanently with the osmocom-bb layer 1 firmware. That didn't work so far. First, I attempted to use the FLUID binary to flash layer1.highram.bin. The manual firmware update that is described at: http://wiki.openmoko.org/wiki/Flashing_the_GSM_Firmware suggests to use the FLUID binary from the package: http://people.openmoko.org/joerg/calypso_moko_FW/fluid_0.0+svn20070817-r2_a… I tried to run: $ FLUID_PORT=/dev/ttySAC0 ./fluid.exe -oo -od13,13 -b 115200 -f layer1.highram.bin This gives me: FLUID Revision 2.27, (23 Aug 2004). Copyright Texas Instruments, 2001-2004. Reading image file: '/usr/local/src/osmocom-bb/src/target/firmware/board/gta0x/layer1.highram.bin'WARNING: Illegal hex line: ERROR(55): File format/syntax error I also played with the options but to no avail. So apparently fluid expects the firmware image to be in a particular format. Then I tried the osmoload utility. For that I started osmocon with: $ ./osmocon -i 13 -l /tmp/osmocom_loader -m romload -p /dev/ttySAC0 loader.highram.bin osmocon then says: Sending Calypso romloader beacon... On another console I then turned on the GSM device and tried to request information about flash using: $ ./osmoload -l /tmp/osmocom_loader finfo This gives me: Requesting flash layout info Query timed out. What am I doing wrong? Are there fundamental reasons why this cannot work? Any hints would be much appreciated! Thanks, Arno

4 5

my patch for decode using burst_id
by bob wisebob 19 Jun '12

19 Jun '12

Hi,List I found BB is a great project,and I want to study it. In my test network without encryption, I test the burst_id with dsp patch to capture the SMS, and also ,I patch the ccch_scan to capture the voice,but I met a few difficulty, but the amr voice file seems not good, I found it hard to find the error, anyone can help me? Thanks! the patch is following: static struct { int has_si1; int has_si3; int ccch_mode; int neci; int sys_count; enum dch_state_t dch_state; uint8_t dch_nr; int dch_badcnt; int dch_ciph; FILE * fh; sbit_t bursts_dl[116 * 4]; sbit_t bursts_ul[116 * 4]; sbit_t bursts_ccch[4][116*4]; sbit_t mI[8][114]; struct gsm_sysinfo_freq cell_arfcns[1024]; uint8_t kc[8]; } app_state; static char * void layer3_rx_burst(struct osmocom_ms *ms, struct msgb *msg) { struct l1ctl_burst_ind *bi; int16_t rx_dbm; uint16_t arfcn; int ul,do_rel=0; /* Header handling */ bi = (struct l1ctl_burst_ind *) msg->l1h; arfcn = ntohs(bi->band_arfcn); rx_dbm = rxlev2dbm(bi->rx_level); ul = !!(arfcn & ARFCN_UPLINK); if (app_state.dch_state == DCH_NONE) local_ccch_burst_decode(bi,ms); /* Check for channel start */ if (app_state.dch_state == DCH_WAIT_EST) { if (bi->chan_nr == app_state.dch_nr) { if (bi->snr > 64) { /* Change state */ app_state.dch_state = DCH_ACTIVE; app_state.dch_badcnt = 0; /* Open output */ //app_state.fh = fopen(gen_filename(ms, bi), "wb"); } else { /* Abandon ? */ do_rel = (app_state.dch_badcnt++) >= 4; } } } /* Check for channel end */ if (app_state.dch_state == DCH_ACTIVE) { if (!ul) { /* Bad burst counting */ if (bi->snr < 64) { app_state.dch_badcnt++; printf("sdcch app_state.dch_badcnt++\n"); } else if (app_state.dch_badcnt >= 2) app_state.dch_badcnt -= 2; else app_state.dch_badcnt = 0; /* Release condition */ do_rel = app_state.dch_badcnt >= 6; } } // when in TCH mode, we only measure the SACCH to kown the link quanlity if (app_state.dch_state == DCH_TCH) { //printf("app_state.dch_state == DCH_TCH\n"); if (!ul && (bi->flags & BI_FLG_SACCH)) { //printf("TCH SACCH\n"); /* Bad burst counting */ if (bi->snr < 40) { app_state.dch_badcnt++; printf("sacch app_state.dch_badcnt++\n"); } else if (app_state.dch_badcnt >= 2) app_state.dch_badcnt -= 2; else app_state.dch_badcnt = 0; /* Release condition */ do_rel = app_state.dch_badcnt >= 6; } } /* Release ? */ if (do_rel) { printf("The Delicate Channel is released because of bad SNR!\n"); /* L1 release */ l1ctl_tx_dm_rel_req(ms); l1ctl_tx_fbsb_req(ms, ms->test_arfcn, L1CTL_FBSB_F_FB01SB, 100, 0, app_state.ccch_mode); /* Change state */ app_state.dch_state = DCH_WAIT_REL; app_state.dch_badcnt = 0; app_state.dch_ciph = 0; /* Close output */ if (app_state.fh) { fclose(app_state.fh); app_state.fh = NULL; } } /* Save the burst */ if (app_state.dch_state == DCH_ACTIVE || app_state.dch_state == DCH_TCH) //fwrite(bi, sizeof(*bi), 1, app_state.fh); /* Try local decoding */ if (!ul && (app_state.dch_state == DCH_ACTIVE || app_state.dch_state == DCH_TCH)) local_burst_decode(ms,bi); } static void local_burst_decode(struct osmocom_ms *ms,struct l1ctl_burst_ind *bi) { int16_t rx_dbm; uint16_t arfcn; uint32_t fn; uint8_t cbits, tn, lch_idx; int ul, bid, i, d_tch_mode; sbit_t *bursts; ubit_t bt[116]; /* Get params (Only for SDCCH and SACCH/{4,8,F,H}) */ arfcn = ntohs(bi->band_arfcn); rx_dbm = rxlev2dbm(bi->rx_level); fn = ntohl(bi->frame_nr); ul = !!(arfcn & ARFCN_UPLINK); bursts = ul ? app_state.bursts_ul : app_state.bursts_dl; cbits = bi->chan_nr >> 3; tn = bi->chan_nr & 7; bid = -1; if (cbits == 0x01) { /* TCH/F */ lch_idx = 0; if (bi->flags & BI_FLG_SACCH) { uint32_t fn_report; fn_report = (fn - (tn * 13) + 104) % 104; bid = (fn_report - 12) / 26; printf(" SACCH fn = %d fn_report = %d\n",fn,fn_report); }else{ //printf(" TCH/F \n"); process_tch_f(ms,bi); } } else if ((cbits & 0x1e) == 0x02) { /* TCH/H */ lch_idx = cbits & 1; if (bi->flags & BI_FLG_SACCH) { uint32_t fn_report; uint8_t tn_report = (tn & ~1) | lch_idx; fn_report = (fn - (tn_report * 13) + 104) % 104; bid = (fn_report - 12) / 26; } } else if ((cbits & 0x1c) == 0x04) { /* SDCCH/4 */ lch_idx = cbits & 3; bid = bi->flags & 3; printf(" SDCCH/4\n"); } else if ((cbits & 0x18) == 0x08) { /* SDCCH/8 */ lch_idx = cbits & 7; bid = bi->flags & 3; //printf(" SDCCH/8\n"); } if (bid == -1) return; /* Clear if new set */ if (bid == 0) memset(bursts, 0x00, 116 * 4); /* Unpack (ignore hu/hl) */ osmo_pbit2ubit_ext(bt, 0, bi->bits, 0, 57, 0); osmo_pbit2ubit_ext(bt, 59, bi->bits, 57, 57, 0); bt[57] = bt[58] = 1; /* A5/x */ if (app_state.dch_ciph) { ubit_t ks_dl[114], ks_ul[114], *ks = ul ? ks_ul : ks_dl; osmo_a5(app_state.dch_ciph, app_state.kc, fn, ks_dl, ks_ul); for (i= 0; i< 57; i++) bt[i] ^= ks[i]; for (i=59; i<116; i++) bt[i] ^= ks[i-2]; } /* Convert to softbits */ for (i=0; i<116; i++) bursts[(116*bid)+i] = bt[i] ? - (bi->snr >> 1) : (bi->snr >> 1); /* If last, decode */ if (bid == 3) { uint8_t l2[23]; int rv,i; struct gsm48_ass_cmd *ia; uint8_t ch_type, ch_subch, ch_ts; uint8_t chan_req_val, chan_req_mask, ra; rv = xcch_decode(l2, bursts); if((l2[0] == 0x03) && (l2[4] == 0x2e)) { ia =(struct gsm48_ass_cmd *)&l2[5]; rsl_dec_chan_nr(ia->chan_desc.chan_nr, &ch_type, &ch_subch, &ch_ts); //l1ctl_tx_reset_req(ms, L1CTL_RES_T_SCHED); printf("Jump to TCH Channel\n"); d_tch_mode = GSM48_CMODE_SPEECH_EFR; /* open speech file and configure d_tch_decoders */ switch (d_tch_mode) { case GSM48_CMODE_SPEECH_V1: d_speech_file = fopen( "speech.au.gsm", "wb" ); break; case GSM48_CMODE_SPEECH_EFR: d_speech_file = fopen( gen_filename(ms,bi), "wb" ); fwrite(amr_nb_magic, 1, 6, d_speech_file); /* Write header */ break; default: d_speech_file = NULL; } app_state.dch_state = DCH_TCH; if (!ia->chan_desc.h0.h) { /* Non-hopping */ uint16_t arfcn; arfcn = ia->chan_desc.h0.arfcn_low | (ia->chan_desc.h0.arfcn_high << 8); LOGP(DRR, LOGL_NOTICE, "ASS CMD(chan_nr=0x%02x, " "ARFCN=%u, TS=%u, SS=%u, TSC=%u) ", ia->chan_desc.chan_nr, arfcn, ch_ts, ch_subch, ia->chan_desc.h0.tsc); /* request L1 to go to dedicated mode on assigned channel */ rv = l1ctl_tx_dm_est_req_h0(ms, arfcn, ia->chan_desc.chan_nr, ia->chan_desc.h0.tsc, GSM48_CMODE_SPEECH_EFR, 0); } #ifdef TCH_HOPPING else { /* Hopping is not support now! */ uint8_t maio, hsn, ma_len; uint16_t ma[64], arfcn; int i, j, k; hsn = ia->chan_desc.h1.hsn; maio = ia->chan_desc.h1.maio_low | (ia->chan_desc.h1.maio_high << 2); LOGP(DRR, LOGL_NOTICE, "ASS CMD( chan_nr=0x%02x, " "HSN=%u, MAIO=%u, TS=%u, SS=%u, TSC=%u) ", ia->chan_desc.chan_nr, hsn, maio, ch_ts, ch_subch, ia->chan_desc.h1.tsc); /* decode mobile allocation */ ma_len = 0; for (i=1, j=0; i<=1024; i++) { arfcn = i & 1023; if (app_state.cell_arfcns[arfcn].mask & 0x01) { k = ia->mob_alloc_len - (j>>3) - 1; if (ia->mob_alloc[k] & (1 << (j&7))) { ma[ma_len++] = arfcn; } j++; } } /* request L1 to go to dedicated mode on assigned channel */ rv = l1ctl_tx_dm_est_req_h1(ms, maio, hsn, ma, ma_len, ia->chan_desc.chan_nr, ia->chan_desc.h1.tsc, GSM48_CMODE_SPEECH_EFR, 0); } #endif } if (rv == 0) { uint8_t chan_type, chan_ts, chan_ss; uint8_t gsmtap_chan_type; /* Send to GSMTAP */ rsl_dec_chan_nr(bi->chan_nr, &chan_type, &chan_ss, &chan_ts); gsmtap_chan_type = chantype_rsl2gsmtap( chan_type, bi->flags & BI_FLG_SACCH ? 0x40 : 0x00 ); gsmtap_send(gsmtap_inst, arfcn, chan_ts, gsmtap_chan_type, chan_ss, ntohl(bi->frame_nr), bi->rx_level, bi->snr, l2, sizeof(l2) ); /* Crude CIPH.MOD.COMMAND detect */ if ((l2[3] == 0x06) && (l2[4] == 0x35) && (l2[5] & 1)) app_state.dch_ciph = 1 + ((l2[5] >> 1) & 7); } } } void tch_deinterleave(ubit_t *mC, int blockOffset) { int k; for (k = 0; k < 456; k++) { int B = ( k + blockOffset ) % 8; int j = 2 * ((49 * k) % 57) + ((k % 8) / 4); mC[k] = app_state.mI[B][j]; app_state.mI[B][j] = 0; //OBJDCOUT("deinterleave k="<<k<<" B="<<B<<" j="<<j); } } void tch_unmap(const uint16_t *map, size_t mapSize, ubit_t * dest, ubit_t * soure) { unsigned int i; for(i=0; i<mapSize; i++) { dest[map[i]] = soure[i]; } } void tch_map(const uint16_t *map, size_t mapSize, ubit_t * dest, ubit_t * soure) { unsigned int i; for(i=0; i<mapSize; i++) { dest[i] = soure[map[i]]; } } void fillField(ubit_t *mStart, size_t writeIndex, uint64_t value, unsigned length) { char *dpBase = mStart + writeIndex; char *dp = dpBase + length - 1; while (dp>=dpBase) { *dp-- = value & 0x01; value >>= 1; } } uint64_t count_tch = 0; static void process_tch_f(struct osmocom_ms *ms,struct l1ctl_burst_ind *bi) { int16_t rx_dbm; uint16_t arfcn; uint32_t fn,B; uint8_t cbits, tn, lch_idx; int ul, bid, i, k, length; sbit_t *bursts, mC[456]; ubit_t bt[114],convu[189],convd[189],tch_raw[260],TCHW[260],EFRBits[244],EFRAMR[8 + 244]; pbit_t voice[33]; /* Get params (Only for SDCCH and SACCH/{4,8,F,H}) */ arfcn = ntohs(bi->band_arfcn); rx_dbm = rxlev2dbm(bi->rx_level); fn = ntohl(bi->frame_nr); ul = !!(arfcn & ARFCN_UPLINK); cbits = bi->chan_nr >> 3; tn = bi->chan_nr & 7; B = -1; B = count_tch % 8; if (B == -1) return; /* Clear if new set */ if (B == 0){ for(i=0; i<4; i++){ memset(app_state.mI[i], 0x00, 114); } }else if(B == 4){ for(i=4; i<8; i++){ memset(app_state.mI[i], 0x00, 114); } } /* Unpack (ignore hu/hl) */ osmo_pbit2ubit_ext(bt, 0, bi->bits, 0, 57, 0); osmo_pbit2ubit_ext(bt, 57, bi->bits, 57, 57, 0); /* Convert to softbits */ for (i=0; i<114; i++) app_state.mI[B][i] = bt[i] ? - (bi->snr >> 1) : (bi->snr >> 1); count_tch++; // Deinterleave according to the diagonal "phase" of B. // See GSM 05.03 3.1.3. // Deinterleaves i[] to c[] if((B % 4 ==3)&&(count_tch >= 7)){ if(B == 3) { tch_deinterleave(mC, 4); }else{ tch_deinterleave(mC, 0); } for (k = 0; k < 78; k++) { tch_raw[182 + k] = mC[378 +k]; } osmo_conv_decode(&conv_tch_afs_12_2, mC, convu); // 3.1.2.1 // copy class 1 bits u[] to d[] for (k = 0; k <= 90; k++) { convd[2*k] = convu[k]; convd[2*k+1] = convu[184-k]; } memcpy(tch_raw,convd,182); // the last 78 bit has been stored! //now only process EFR or AMR 12_2, fix me! tch_unmap(gsm660_bitorder, 260, TCHW, tch_raw); // Remove repeating bits and CRC to get raw EFR frame (244 bits) for (k=0; k<71; k++) EFRBits[k] = TCHW[k] & 1; for (k=73; k<123; k++) EFRBits[k-2] = TCHW[k] & 1; for (k=125; k<178; k++) EFRBits[k-4] = TCHW[k] & 1; for (k=180; k<230; k++) EFRBits[k-6] = TCHW[k] & 1; for (k=232; k<252; k++) EFRBits[k-8] = TCHW[k] & 1; // Map bits as AMR 12.2k tch_map(gsm690_12_2_bitorder, 244, EFRAMR + 8,EFRBits); // Put the whole frame (hdr + payload) //mVFrameAMR.pack(mPrevGoodFrame); //mPrevGoodFrameLength = 32; fillField(EFRAMR, 0, 0x3c, 8); voice[32] = 0; length = osmo_ubit2pbit(voice, EFRAMR, 8 + 244); fwrite(voice, 1, 32, d_speech_file); } }

5 9

Osmocom user group meetings in Berlin
by Harald Welte 19 Jun '12

19 Jun '12

Hi all, I have upated the wiki page at http://openbsc.osmocom.org/trac/wiki/OsmoUserGroup/Berlin to indicate the meeting dates for the next couple of months. So now it is clear that even without any explicit separate announcement, we will be meeting at the indicated date: June 13, 2012 June 27, 2012 July 11, 2012 July 25, 2012 August 8, 2012 August 22, 2012 It had been requested to start a bit later (8pm instead of 7pm), and from the next meeting onwards we will follow that request. Looking forward to meeting you! Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

2 1

Re: AT+CMMS command
by Gabriele.rago 18 Jun '12

18 Jun '12

Soory, but I don't know how, anyone can give me some help? --------- Original Message -------- Da: "Gabriele.rago" <gabriele.rago(a)email.it> To: "baseband-devel(a)lists.osmocom.org" <baseband-devel(a)lists.osmocom.org> Oggetto: AT+CMMS command Data: 18/06/12 00:16 Hello, there is an AT command, AT+CMMS, wich description I report below: "This  command controls the continuity of SMS relay protocol link.   When feature is enabled (and supported by network) multiple messages can besent much faster as link is kept open." I tested this command on motorola E770 (UMTS) and really when I enable this feature it is much faster in sending sms. Is it possible to implent such feature  in application "mobile" of osmocom-bb project?

1 0

AT+CMMS command
by Gabriele.rago 18 Jun '12

18 Jun '12

Hello, there is an AT command, AT+CMMS, wich description I report below: "This  command controls the continuity of SMS relay protocol link.   When feature is enabled (and supported by network) multiple messages can besent much faster as link is kept open." I tested this command on motorola E770 (UMTS) and really when I enable this feature it is much faster in sending sms. Is it possible to implent such feature  in application "mobile" of osmocom-bb project?

2 1

issue with burst_ind
by Akib Sayyed 17 Jun '12

17 Jun '12

i am trying to run ccch_scan on OpenBTS network. but problem i am facing if i am running ccch_scan i cant see any IMM ASS. but when i run ccch_scan from non burst_ind (testing branch) then it does show IMM ASS. is it problem with burst_ind . -- Akib Sayyed Matrix-Shell akibsayyed(a)gmail.com akibsayyed(a)matrixshell.com Mob:- +91-966-514-2243

2 4

Re: about osmocon on gta02 (Solved)
by Aegean Chou 14 Jun '12

14 Jun '12

Hi lists, I spend one day, finally solved it myself. 1) i checked the schematic of gta02 carefully, and found the PCF50633 use GPIO2(gsm_on) to control the power of GSM actually, and it have a test point H-TP1706. 2) i disassembled my gta02, then line out the H-TP1706 to my oscilloscope, i found the gsm_on signal always LOW 1s, and HIGH 4.2s, it's very strange. 3) i checked the service list, i found the fsogsmd (it's ogsmd?), maybe it's the background program. but i can't kill it. 4) finally, i try to set "disable = 0" in /etc/frameworkd.conf, reboot, my god, it solved. but the http://bb.osmocom.org/trac/wiki/OpenMoko only says: “disable ogsmd, ousaged, ophoned via /etc/frameworkd.conf” i always think "disable = 1" should DISABLE it. but actually, "disable = 0" = DISABLE it; and "disable = 1" = ENABLE it? why it misleaded me so long, anybody can change it? thanks. Aegean ======= 2012-06-14 09:40:32 ======= >Dear lists, > > i want porting rssi and osmocon to GTA02, let them run on GTA02 stand-alone. > then i'll try to write a program to decoding the received data. > > i already cross-compiled the latest osmocon to GTA02, > then i disabled "ogsmd，ousaged and ophoned" in /etc/frameworkd.conf (actually, them are disabled default), > and i commented "device_port and modem_access" in fsogsmd.conf to disable everything accessed to the modem, > after rebooting, the "fuser /dev/ttySAC0" shows none. > > but when i use "./osmocon -i 13 -m romload -p /dev/ttySAC0 rssi.highram.bin", and > "echo 0 > /sys/bus/platform/devices/gta02-pm-gsm.0/power_on && echo 1 > ..." > /\ my SHR kernel use this device name for GSM power > the osmocon always stalls about at the block 40, for example: > ... ... > Preparing block 39, block checksum is 0x4c > handle_write_block(): 1024 bytes (1024/1024) > handle_write_block(): Block 39 finished > Received block ack from phone > Preparing block 40, block checksum is 0xd5 > handle_write_block(): 1024 bytes (1024/1024) > handle_write_block(): Block 40 finished > and i found that the osmocon start to download codes before my "GSM power reset", very strange, > > i tried the latest "SHR-core 20120427" and "unstable SHR-lite 20110822", > i searched the list log, found "Dave" encounter the same problem, but he solved it after "re-flashing of the phone" > i re-flashed the GSM firmware to latest Moko11 (before it's Moko10), but it's the same. > > BTW, i found that it always shows '1' when "cat /sys/bus/platform/devices/gta02-pm-gsm.0/power_on" > even after "echo 0 >/sys/bus/platform/devices/gta02-pm-gsm.0/power_on", what's wrong? > > anyone can help help me? > thanks very much. > >Best Regards >Aegean >2012-06-13 > = = = = = = = = = = = = = = = = = = = = Best regards 　　　　　　　　Aegean Chou 　　　　　　　　aegean2000(a)21cn.com 　　　　　　　　　　2012-06-14

2 1

about osmocon on gta02
by Aegean Chou 14 Jun '12

14 Jun '12

Dear lists, i want porting rssi and osmocon to GTA02, let them run on GTA02 stand-alone. then i'll try to write a program to decoding the received data. i already cross-compiled the latest osmocon to GTA02, then i disabled "ogsmd，ousaged and ophoned" in /etc/frameworkd.conf (actually, them are disabled default), and i commented "device_port and modem_access" in fsogsmd.conf to disable everything accessed to the modem, after rebooting, the "fuser /dev/ttySAC0" shows none. but when i use "./osmocon -i 13 -m romload -p /dev/ttySAC0 rssi.highram.bin", and "echo 0 > /sys/bus/platform/devices/gta02-pm-gsm.0/power_on && echo 1 > ..." /\ my SHR kernel use this device name for GSM power the osmocon always stalls about at the block 40, for example: ... ... Preparing block 39, block checksum is 0x4c handle_write_block(): 1024 bytes (1024/1024) handle_write_block(): Block 39 finished Received block ack from phone Preparing block 40, block checksum is 0xd5 handle_write_block(): 1024 bytes (1024/1024) handle_write_block(): Block 40 finished and i found that the osmocon start to download codes before my "GSM power reset", very strange, i tried the latest "SHR-core 20120427" and "unstable SHR-lite 20110822", i searched the list log, found "Dave" encounter the same problem, but he solved it after "re-flashing of the phone" i re-flashed the GSM firmware to latest Moko11 (before it's Moko10), but it's the same. BTW, i found that it always shows '1' when "cat /sys/bus/platform/devices/gta02-pm-gsm.0/power_on" even after "echo 0 >/sys/bus/platform/devices/gta02-pm-gsm.0/power_on", what's wrong? anyone can help help me? thanks very much. Best Regards Aegean 2012-06-13

1 0

bug in local_burst_decode() of burst_ind
by lonelysurfer 12 Jun '12

12 Jun '12

I reused the local_burst_decode function to decrypt the bursts offline. If I filter bi->flags & BI_FLG_SACCH, the sms decryption is working: local_burst_decode(struct l1ctl_burst_ind *bi) ... if (bid == -1) return; /* new */ if (bi->flags & BI_FLG_SACCH) return; ... -- View this message in context: http://baseband-devel.722152.n3.nabble.com/bug-in-local-burst-decode-of-bur… Sent from the baseband-devel mailing list archive at Nabble.com.

1 0

SuperSIM
by Arturo Rivas 08 Jun '12

08 Jun '12

Hi! How can I to know the number phone of my SuperSIM to use it in OpenBSC? I need to know for probe telephone calls in OpenBSC because in this SIMs I can know IMSI to register in HLR. BS, Arturo Rivas.

1 0

open source 3G baseband process on MTK6575
by Chengcheng Gou 07 Jun '12

07 Jun '12

hi, lists the MTK has launched a 3G chip solution MTK6575. I think it `s time to develop a 3G BB. does anyone interest in it?

1 0

bursts****.dat
by Victor P 06 Jun '12

06 Jun '12

Hi, I am trying to use burst_ind branch of osmocom. I have noticed that layer23 creates bursts****.dat files when it indicates uplink. What data are written to these files and what should I use to see its data? Thank you.

5 6

TCH Viterbi decode Parameter
by Chengcheng Gou 06 Jun '12

06 Jun '12

Hi： I am studying the tch code, and want to decode the Convolutional code of TCH using xcch.c; and how to set the parameters; 1. conv_xcch_next_output 2. conv_xcch_next_state 3. N = 2, 4. K = 5, static const uint8_t conv_xcch_next_output[][2] = { { 0, 3 }, { 1, 2 }, { 0, 3 }, { 1, 2 }, { 3, 0 }, { 2, 1 }, { 3, 0 }, { 2, 1 }, { 3, 0 }, { 2, 1 }, { 3, 0 }, { 2, 1 }, { 0, 3 }, { 1, 2 }, { 0, 3 }, { 1, 2 }, }; static const uint8_t conv_xcch_next_state[][2] = { { 0, 1 }, { 2, 3 }, { 4, 5 }, { 6, 7 }, { 8, 9 }, { 10, 11 }, { 12, 13 }, { 14, 15 }, { 0, 1 }, { 2, 3 }, { 4, 5 }, { 6, 7 }, { 8, 9 }, { 10, 11 }, { 12, 13 }, { 14, 15 }, }; const struct osmo_conv_code conv_xcch = { .N = 2, .K = 5, .len = 224, .next_output = conv_xcch_next_output, .next_state = conv_xcch_next_state, }; Thanks!

2 1

Can bb switch from SACCH to TCH directly?
by Chengcheng Gou 04 Jun '12

04 Jun '12

hi, i am studying the TCH ,and can get the channel discription from SACCH, and My question is when I receive the ASS_CMD, I use l1ctl_tx_dm_est_req_h0 and jump to the new channel,but I can`t capture the TCH,why? Thanks!

2 1

the structure of "TCH + SACCH" is depend on timeslot?
by Chengcheng Gou 30 May '12

30 May '12

Hi, I am studying the TCH channel, and read the BB source. I find that the structure of "TCH + SACCH" is depend on ts.that is when the timeslot is even, the 12 of a TCH multiframes is SACCH,and the 25 is idle;and When the timeslot is odd, the 25 of a TCH multiframes is SACCH,and the12 is idle. is that right? if that`s right, why ? I can`t find any Material about it. Thanks!

2 1

Unfix BUG in GSM322.c and prim_pm.c
by rola 29 May '12

29 May '12

Hi All, Many of us are striving to find a way to make use of OBB but due to limited knowledge of programming we get stuck at one point or the other. I've tried to make OBB work for me but nothing has happened. I've passed through the level of installation and file configuration with everything set except for an assuming bug left unfix in gsm322.c or prim_pm.c. This bug is at the point of power measurement when cell selection is in the state of any cell. The first band is always measured accurately while the next band range works at layer1 with no response back to mobile. Due to this, the same second band range power is measured twice and that leads to overwriting error. I've look through the code to figure out where it is appropriate to make correction in order for the process to flow accordingly. But, in as much as I try, I end back at the same spot of not knowing where to effect a change. Two conspicuous identifiable issues are: 1. PCS arfcn range calculation seems to be incorrect. The initial arfcn and final are passed with extremely high range values in reverse order. 2. Perhaps as a result of the above, no response of measured power is feed back to mobile and that breakdown the program flow in gsm322.c. Thereby causing the same erring band to be measured twice and stuck in that cycle of measurement. I just need a guidance on what changes to make in order to fix these issues. I will greatly appreciate it if the only response is just to confirm if I'm right or wrong in my assumptions. Thanks. Sincerely, Rasaki -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Unfix-BUG-in-GSM322-c-and-prim-p… Sent from the baseband-devel mailing list archive at Nabble.com.

2 2

TODAY: May 23, 7pm / Osmocom meeting in Berlin
by Harald Welte 25 May '12

25 May '12

Hi all! This is the announcement for the 4th incarnation of our bi-weekly Osmocom Berlin meeting. May 23, 7pm @ CCC Berlin, Marienstr. 11, 10113 Berlin There is no particular schedule for now, but if there is interest we can do an introduction + demo of the new sysmoBTS. Also, I'll have my SIMtrace with me, to read out TERMINAL PROFILE from phones for https://terminal-profile.osmocom.org/ . So if you have any phones to read out: Please bring them (with charged battery or charger!) So we'll just meet + talk. There seem to be some SMSC related questions that we would want to adress, so you have been warned ;) If you are interested to show up, feel free to do so. There is no registration required. The meeting is free as in "free beer", despite no actual free beer being around ;) Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

3 2

the Paging response can be received every time I get SMS?
by Chengcheng Gou 22 May '12

22 May '12

the Paging response is uplink, How can I received it?

4 3

How to transmit burst in different time slots at the same time
by Chengcheng Gou 22 May '12

22 May '12

Hi The BB can transmit burst in different time slots at the same time? Thanks!

3 2

Osmocom-bb Making a call
by Altaf 21 May '12

21 May '12

Hello. *Can someone help me out at this point of the Osmocom-bb project [making a call].... I am done with all the steps involved in the project. 1. i have added the /.osmocom/bb/mobile.cfg 2. i am in the branch sylvian/testing I used git checkout --track -b remotes/origin/sylvian/testing command to enter this branch. It worked right... Am i RIGHT here? 3. when i download the firmware layer 1 on the phone it worked pretty good. it says..* handle_write(): finished got 1 bytes from modem, data looks like: 1b . got 1 bytes from modem, data looks like: f6 . got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 41 A got 1 bytes from modem, data looks like: 03 . got 1 bytes from modem, data looks like: 42 B Received DOWNLOAD ACK from phone, your code is running now! battery_compal_e88_init: starting up OSMOCOM Layer 1 (revision osmocon_v0.0.0-1348-g083a2dc) ====================================================================== Device ID code: 0xb4fb Device Version code: 0x0000 ARM ID code: 0xfff3 cDSP ID code: 0x0128 Die ID code: f2d81c119e039be2 ====================================================================== REG_DPLL=0x2413 CNTL_ARM_CLK=0xf0a1 CNTL_CLK=0xff91 CNTL_RST=0xfff3 CNTL_ARM_DIV=0xfff9 ====================================================================== Power up simcard: Assert DSP into Reset Releasing DSP from Reset Setting some dsp_api.ndb values Setting API NDB parameters DSP Download Status: 0x0001 DSP API Version: 0x0000 0x0000 Finishing download phase DSP Download Status: 0x0002 DSP API Version: 0x3606 0x0000 LOST 1161! BAT-ADC: 549 6 0 0 1023 349 328 204 Charger at 51 mV. Battery at 3753 mV. Charging at 0 mA. Battery capacity is 69%. Battery range is 3199..3999 mV. Battery full at 468 LSB .. full at 585 LSB Charging at 239 LSB (204 mA). BCICTL2=0x3ff battery-info.flags=0x00000000 bat_compal_e88_chg_state=0 * 4. when i launch the MOBILE application it says like* 000f> sim.c:1223 init SIM client <0006> gsm48_cc.c:63 init Call Control <0007> gsm480_ss.c:231 init SS <0017> gsm411_sms.c:63 init SMS <0001> gsm48_rr.c:5479 init Radio Ressource process <0005> gsm48_mm.c:1315 init Mobility Management process <0005> gsm48_mm.c:1037 Selecting PLMN SEARCH state, because no SIM. <0002> gsm322.c:5025 init PLMN process <0003> gsm322.c:5026 init Cell Selection process Mobile '1' initialized, please start phone now! VTY available on port 4247. <0005> subscriber.c:601 Requesting SIM file 0x2fe2 <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:697 go MF <000f> sim.c:241 SELECT (file=0x3f00) 000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:360 received SMSP from SIM (sca=+49232********000) <0005> subscriber.c:561 (ms 1) Done reading SIM card (IMSI=26****************654 Germany, E-Plus) <0005> subscriber.c:573 -> SIM card registered to 262 03 (Germany, E-Plus) <0005> gsm48_mm.c:4379 (ms 1) Received 'MMR_REG_REQ' event <0002> gsm322.c:3806 (ms 1) Event 'EVENT_SIM_INSERT' for automatic PLMN selection in state 'A0 null' <000e> gsm322.c:1372 Start search of last registered PLMN (mcc=262 mnc=03 Germany, E-Plus) <0002> gsm322.c:1376 Use RPLMN (mcc=262 mnc=03 Germany, E-Plus) <0002> gsm322.c:800 new state 'A0 null' -> 'A1 trying RPLMN' <0003> gsm322.c:4037 (ms 1) Event 'EVENT_NEW_PLMN' for Cell selection in state 'C0 null' <000e> gsm322.c:3619 Selecting PLMN (mcc=262 mnc=03 Germany, E-Plus) <0003> gsm322.c:3628 Start normal cell selection. <0003> gsm322.c:823 new state 'C0 null' -> 'C1 normal cell selection' <0003> gsm322.c:2791 Scanning power for all frequencies. * Here its starts to search for frequencies and cells..... and see what happens.... * <0003> gsm322.c:2852 Scanning frequencies. (0..0) <0003> gsm322.c:2913 Done with power scanning range. <0003> gsm322.c:2791 Scanning power for all frequencies. <0003> gsm322.c:2852 Scanning frequencies. (512(DCS)..512(DCS)) <0003> gsm322.c:2913 Done with power scanning range. <0003> gsm322.c:2791 Scanning power for all frequencies. <0003> gsm322.c:2852 Scanning frequencies. (975..975) <0003> gsm322.c:2913 Done with power scanning range. <0003> gsm322.c:2791 Scanning power for all frequencies. <0003> gsm322.c:2813 Found no frequency. This repeats all the TIME........ *I am able to login to the vty terminal and able to execute some instructions..... * enable show ms show subscriber etc* when I try to make a call..... see what happens* <0009> mnccms.c:570 Make call to 01747180018 <0009> mnccms.c:150 support TCH/H also <0009> mnccms.c:174 support full rate v2 <0009> mnccms.c:178 support full rate v1 <0009> mnccms.c:187 support half rate v1 <0006> transaction.c:76 ms 1 allocates transaction (proto 3 trans_id 255 callref 1 mem 0x8cf7370) <0006> gsm48_cc.c:243 new state NULL -> MM_CONNECTION_PEND <0006> gsm48_cc.c:507 Sending MMCC_EST_REQ <0005> gsm48_mm.c:3774 (ms 1) Received 'MMCC_EST_REQ' event in state MM idle <0005> gsm48_mm.c:3777 -> substate PLMN search <0005> gsm48_mm.c:3779 -> callref 1, transaction_id 255 <0005> gsm48_mm.c:3042 Init MM Connection, not in normal state. <0006> gsm48_cc.c:2161 (ms 1) Received 'MMCC_REL_IND' in CC state MM_CONNECTION_PEND <0006> gsm48_cc.c:196 (ms 1 ti ff) Sending 'MNCC_REL_IND' to MNCC. <0006> gsm48_cc.c:243 new state MM_CONNECTION_PEND -> NULL <0006> transaction.c:104 ms 1 frees transaction (mem 0x8cf7370) <0009> mnccms.c:372 Call has been released (cause 21) <0009> mnccms.c:71 (call 1) Call removed. 0003> gsm322.c:2889 Getting PM for ARFCN 858(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 859(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 860(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 861(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 862(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 863(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 864(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 865(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 866(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 867(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 868(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 869(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 870(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 871(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 872(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 873(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 874(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 875(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 876(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 877(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 878(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 879(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 880(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 881(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 882(DCS) twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2889 Getting PM for ARFCN 883(DCS) twice I even find this sometimes................ can someone fix this for me.... where could be the error...... Looking forward for a helping hand..... Thank you.. -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Osmocom-bb-Making-a-call-tp39972… Sent from the baseband-devel mailing list archive at Nabble.com.

10 26

the cause of error "l1ctl.c:238 Dropping frame with 93 bit errors"
by Chengcheng Gou 21 May '12

21 May '12

I am running the ccch_scan, and the error occurs: <000c> l1ctl.c:238 Dropping frame with 93 bit errors Dropping frame with 84 bit errors <000c> l1ctl.c:238 Dropping frame with 84 bit errors Dropping frame with 83 bit errors <000c> l1ctl.c:238 Dropping frame with 83 bit errors Dropping frame with 86 bit errors <000c> l1ctl.c:238 Dropping frame with 86 bit errors Dropping frame with 85 bit errors <000c> l1ctl.c:238 Dropping frame with 85 bit errors Dropping frame with 71 bit errors <000c> l1ctl.c:238 Dropping frame with 71 bit errors Dropping frame with 78 bit errors <000c> l1ctl.c:238 Dropping frame with 78 bit errors Dropping frame with 80 bit errors <000c> l1ctl.c:238 Dropping frame with 80 bit errors in which situations the error may appear? Does anyone know? Thanks!

2 1

Re: The SMOS project / 72h civil emergency communications system
by Kalle Pietila 20 May '12

20 May '12

Thanks Paul for pointing to this Softbank's press release. Japanese have recently witnessed their local need for civil emergency communications and they also have money to make it happen, not to mention good supporting infrastructure already in place. So it was just matter of time to see someone there addressing this problem. I guess in Japan there is no such earthquake that could compromise the functionality of their mobile core (or at least locals think so). So it is then "just" matter of deploying new balloon-basestations to the disaster area. Someone will go there to the washed-out area with all the required gear, and raise a new BTS-balloon every 3km. On poor countries it will remain as a different story however. it would be interesting to see what kind is that Softbank Mobile's Balloon-BTS proof of concept. I do not know about Softbank but I just directly assume that an operator do not have their own BTS R&D. They must be relying on some existing technology and just make it fly with the balloon. Keeping in mind that one weather sounding balloon can raise 500g payload and probably they will need to feed the power via some sort of cable from the ground level up to the high. So very interesting to follow-up how this all will be implemented in practice. Best Wishes, - Kalle > ---------- Forwarded message ---------- > From: Paul Dart <pauldart(a)gmail.com> > To: baseband-devel(a)lists.osmocom.org > Cc: > Date: Fri, 18 May 2012 09:24:18 +0100 > Subject: Re: The SMOS project / 72h civil emergency communications system > On 17 May 2012 08:17, Alexander Chemeris <alexander.chemeris(a)gmail.com> wrote: >> Have you thought about using a balloon for carrying a BTS instead of >> dropping to a ground? This would give you much better coverage easily >> then on-the-ground installation. > > http://www.cellular-news.com/story/54354.php?s=h > > It appears Softbank Mobile have! > > (also I emailed the OP about Telecom Sans Frontier http://www.tsfi.org ) > > Good luck, > > Paul

1 0

Return value for fucntion class_of_band in gsm322.c
by rola 18 May '12

18 May '12

Hi All, I just need a quick clarification on the return value of the function class_of_band in gsm332.c. The switch portion of the function takes care of other bands except 900 band which happen to be isolated separately after the switch statement. By that the 900 band is set to be default and only band to be used. I just want to know if this is deliberate or an oversight. If this situation is actually what I have in mind, I think it will definitely have effect on anyone trying to use Osmocom-bb for other band beside 900. I've been trying to get OBB work for PCS that happen to be only working GSM band in my location with no avail. For this, I need to know if including the 900 band as part of the switch statement will resolve the problem of having PCS band not working. Also is that the only section that need to be corrected in order for PCS band to camp and register with any approved cell in a location. Thank you. Sincerely, Rasak. -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Return-value-for-fucntion-class-… Sent from the baseband-devel mailing list archive at Nabble.com.

1 0

the problem of burst_ind receive SMS in a cell
by Chengcheng Gou 18 May '12

18 May '12

first,the network is not encrypt. I test burst_ind to receive SMS in a cell, but I can`t receive the SMS transfered in my two phone, the two phone is lock to the cell, do I miss anything ? Another problem I am only interest in SMS but not voice,and how to difference the two types of SDCCH? thanks!

3 3

The SMOS project / 72h civil emergency communications system
by Kalle Pietila 18 May '12

18 May '12

Dear baseband enthusiasts, on SMOS project we had this crazy idea for catastrophe communications in which cellular base stations would be miniaturized enough to be airdropped into disaster zones. We felt that this might be possible if all functionality except SMS was stripped from the base stations (hence SMOS, SMS Our Souls). Most ideally such technology would come in near cellphone size (excluding batteries), something like osmocom's earlier "Phone acting as BTS" hackwork. We did not have the guts nor skills to start doing this by ourselves, so we just published our findings and studies under Creative Commons BY license. As we wish to keep this idea open to everyone, our web-documentation would benefit on this regard from some more in-depth HW-related analysis and suggestions (our team fell short on this area). Once it's all published, it cannot be patented. I personally see some humanitarian & karma-improving angle in doing it this way. Helping human kinds in disaster should not be bound by patent laws. So I'm asking for constructive criticism and also offering possibility to write some informal blogs about your views on www.zygomatica.com/smos (with our team's editorial support) . At the same time it should be noted that such technically oriented blog writings at my friends' site zygomatica.com would likely reach 50 readers at most. To put it more nicely, reaching the widest possible audience is not our focus here anyways. My technical vision is presented at http://www.zygomatica.com/wp-content/uploads/2012/04/SMOS6-Technical-goals-… .. and the full list of formal documents at end of http://www.zygomatica.com/smos/ . The other provided background material might be even more valuable to those that start considering this idea more seriously. So, For instance, can stripping down the functionality just to supporting SMS delivery bring down the power consumption in any significant manner? Thanks and regards, Kalle Pietilä P.S. Mailed to this list as suggested by Harald.

3 4

What does FBSB RESP: result=255 mean?
by Joshua Pereyda 16 May '12

16 May '12

Hello, Hopefully this question is appropriate on this list (please let me know otherwise). Running ccch_scan or bcch_scan in the sylvain/burst_ind branch, I keep getting this error: <000c> l1ctl.c:114 FBSB RESP: result=255 I tried checking the code, but I can't quite figure out what's going on. It looks like 255 is an error code, but I don't know where to go from there. This may be related to my SIM card being locked (I think). Running mobile on the sylvain/testing branch, I get: <0005> subscriber.c:625 PIN is required, 3 tries left Will not having the PIN intefere with ccch_scan as well? Thanks, Josh Pereyda

2 2

Has the TMSI has the limitation of using count?
by Chengcheng Gou 15 May '12

15 May '12

I stat the TMSI of my near cell in CCCH, and not find a TMSI occurs more than 6 times; that`s Why?

1 0

How to construct a "Slient SMS"
by Chengcheng Gou 15 May '12

15 May '12

I want to study the Slient SMS, How can it be constructed? Anyone kowns?

4 3

alcatel bic phone?
by Sebastien Lorquet 15 May '12

15 May '12

hello, what do you specialist think of the "bic phone" as an osmocombb candidate? it's very cheap and available in france at various suppliers (including grocery shops!). It seems to be an Alcaltel OneTouch S210 (1) and this wikipedia page (2), even if it does not mention this model, have several models with a MTK or Calypso chipset indication. I searched the best as I could but I didn't find any accurate info. Maybe one of you may have already investigated this thing? (1) http://en.wikipedia.org/wiki/Bic_Phone (2) http://en.wikipedia.org/wiki/Alcatel_Mobile_Phones Regards, Sebastien

2 1

BB can`t send SMS successfully 100%?
by Chengcheng Gou 15 May '12

15 May '12

I use the BB sending SMS, but it can`t be success to do it 100%, Why?

2 1

[nuttx] data abort issues(maybe linker script issues)
by Denis 'GNUtoo' Carikli 13 May '12

13 May '12

Hi, Since there is only 256k of internal memory(starting from 0x00800000 and finishing at 0x00840000 ) on the compal_e99, And that in nuttx we went over 0x00840000(which is bad and may be cause a similar data abort than the follownig one), I wonder if we could use the external RAM like in the attached patch(we're a bit short on memory). However the patch may still be wrong because it still produces a data abort: nsh> nxtext nxtext [2:100] nsh> nxtext_initialize: Initializing external graphics device nxtext_initialize: Open NX [...] nxtext_main: NX handle=1006ea0 nxtext_main: Set background color=32 [...] row: 60 col: 0 npixels: 98 row: 61 col: 0 npixels: 98 row: 62 col: 0 npixels: 98 row: 63 col: 0 npixels: 98 row: 64 col: 0 npixels: 98 row: 65 col: 0 npixels: 98 row: 66 col: 0 npixels: 98 [...] row: 50 col: 0 npixels: 98 rowData abort. PC: 00826090 Assertion failed at file:arm/up_dataabort.c line: 198 error code: 32773 sp: 01006d78 IRQ stack: base: 010003fc size: 000003fc User stack: base: 01006e88 size: 000007fc 01006d60: 00008005 000000b0 008212d4 008318f0 01006d80 000000c6 00008005 000000b0 01006d80: 00000055 0100104c 008210ec a0000053 00821128 00826090 0082012c 01001444 01006da0: 00000000 e1d2c0b0 e20c10ff 00000020 000000b0 00000055 0100104c 00832df8 01006dc0: 01006ea4 00000000 00000000 0100104c 01006de0 00826014 00826090 a0000053 01006de0: 00000011 01001058 01000d24 0082ac98 00832c48 01000d24 01000d24 00832c48 01006e00: 01006ea4 01000d52 01006ea4 0082aef0 01006ea4 01000d24 00832c48 00000018 01006e20: 008327d0 00000006 008327cd 0082a744 01006ea4 008327cd 00000008 008327d6 01006e40: 00000001 00000001 00000000 008327cd 01006ea4 00000000 00000000 0082a3c4 01006e60: 00000001 00000020 00000000 00000000 00000000 00000000 00000000 00823c54 01006e80: 00000000 00000000 00000000 00000000 00000000 00000000 00000060 80000810 R0: 01001444 00000000 e1d2c0b0 e20c10ff 00000020 000000b0 00000055 0100104c R8: 00832df8 01006ea4 00000000 00000000 0100104c 01006de0 00826014 00826090 CPSR: a0000053 The PC is in the following malloc, but sometimes it was previously in semaphores... 00825fec <malloc>: 825fec: e92d4038 push {r3, r4, r5, lr} 825ff0: e2504000 subs r4, r0, #0 825ff4: 0a000020 beq 82607c <malloc+0x90> 825ff8: e2844017 add r4, r4, #23 825ffc: e3c4500f bic r5, r4, #15 826000: ebffffa2 bl 825e90 <mm_takesemaphore> 826004: e3550501 cmp r5, #4194304 ; 0x400000 826008: 23a00012 movcs r0, #18 82600c: 31a00005 movcc r0, r5 826010: 3bffffe9 blcc 825fbc <mm_size2ndx> 826014: e59f309c ldr r3, [pc, #156] ; 8260b8 <malloc+0xcc> 826018: e0830200 add r0, r3, r0, lsl #4 82601c: e5904008 ldr r4, [r0, #8] 826020: ea000000 b 826028 <malloc+0x3c> 826024: e5944008 ldr r4, [r4, #8] 826028: e3540000 cmp r4, #0 82602c: 0a000011 beq 826078 <malloc+0x8c> 826030: e5943000 ldr r3, [r4] 826034: e1530005 cmp r3, r5 826038: 3afffff9 bcc 826024 <malloc+0x38> 82603c: ea000011 b 826088 <malloc+0x9c> 826040: e0840005 add r0, r4, r5 826044: e7843005 str r3, [r4, r5] 826048: e5805004 str r5, [r0, #4] 82604c: e5845000 str r5, [r4] 826050: e0842002 add r2, r4, r2 826054: e5921004 ldr r1, [r2, #4] 826058: e2011102 and r1, r1, #-2147483648 ; 0x80000000 82605c: e1833001 orr r3, r3, r1 826060: e5823004 str r3, [r2, #4] 826064: ebffffba bl 825f54 <mm_addfreechunk> 826068: e5943004 ldr r3, [r4, #4] 82606c: e3833102 orr r3, r3, #-2147483648 ; 0x80000000 826070: e5843004 str r3, [r4, #4] 826074: e2844008 add r4, r4, #8 826078: ebffffa1 bl 825f04 <mm_givesemaphore> 82607c: e1a00004 mov r0, r4 826080: e8bd4038 pop {r3, r4, r5, lr} 826084: e12fff1e bx lr 826088: e2842008 add r2, r4, #8 82608c: e892000c ldm r2, {r2, r3} 826090: e5832008 str r2, [r3, #8] 826094: e5943008 ldr r3, [r4, #8] 826098: e3530000 cmp r3, #0 82609c: 1594200c ldrne r2, [r4, #12] 8260a0: 1583200c strne r2, [r3, #12] 8260a4: e5942000 ldr r2, [r4] 8260a8: e0653002 rsb r3, r5, r2 8260ac: e353000f cmp r3, #15 8260b0: 9affffec bls 826068 <malloc+0x7c> 8260b4: eaffffe1 b 826040 <malloc+0x54> 8260b8: 01001414 tsteq r0, r4, lsl r4 The data abort prevents us from testing the lcd with the nuttx examples applications that makes use of the LCD.... (for now it only draws a background and then crash like mentioned above). I've also attached the appconfig and the defconfig. What other informations should I give? The branch I'm using is here: https://gitorious.org/gnutoo-s-for-upstream-osmocom-bb-and-nuttx-bb/nuttx-b… gta02/commits/lcd-cleanup (which will be rebased for cleanup purposes). Denis.

1 0

[PATCH] [for upstream ???]: fix linker script for compal_e99 highram
by Denis 'GNUtoo' Carikli 13 May '12

13 May '12

Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo(a)no-log.org> --- nuttx/configs/compal_e99/nsh_highram/ld.script | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/nuttx/configs/compal_e99/nsh_highram/ld.script b/nuttx/configs/compal_e99/nsh_highram/ld.script index 7096a61..34ce015 100644 --- a/nuttx/configs/compal_e99/nsh_highram/ld.script +++ b/nuttx/configs/compal_e99/nsh_highram/ld.script @@ -16,7 +16,7 @@ MEMORY LRAM (rw) : ORIGIN = 0x00800000, LENGTH = 0x00020000 TRAM (rw) : ORIGIN = 0x00820000, LENGTH = 0x00020000 /* compal-loaded binary: our unitialized data, stacks, heap */ - IRAM (rw) : ORIGIN = 0x00840000, LENGTH = 0x00010000 + IRAM (rw) : ORIGIN = 0x01000000, LENGTH = 0x011fffff } SECTIONS { -- 1.7.5.4 --nextPart2762333.I70qBvf3Po Content-Disposition: attachment; filename="appconfig" Content-Transfer-Encoding: 7Bit Content-Type: text/x-matlab; charset="UTF-8"; name="appconfig" ############################################################################ # configs/compal_e99/nsh_highram/appconfig # # Copyright (C) 2011 Gregory Nutt. All rights reserved. # Author: Gregory Nutt <spudmonkey(a)racsa.co.cr> # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions # are met: # # 1. Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # 2. Redistributions in binary form must reproduce the above copyright # notice, this list of conditions and the following disclaimer in # the documentation and/or other materials provided with the # distribution. # 3. Neither the name NuttX nor the names of its contributors may be # used to endorse or promote products derived from this software # without specific prior written permission. # # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS # "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT # LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS # FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE # COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, # INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, # BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS # OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED # AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN # ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE # POSSIBILITY OF SUCH DAMAGE. # ############################################################################ # NSH shell CONFIGURED_APPS += examples/nsh CONFIGURED_APPS += system/readline CONFIGURED_APPS += nshlib # Path to example in apps/examples #CONFIGURED_APPS += examples/hello CONFIGURED_APPS += vsn/poweroff #CONFIGURED_APPS += examples/ostest CONFIGURED_APPS += examples/nxtext #CONFIGURED_APPS += examples/nxhello #CONFIGURED_APPS += examples/nxlines #CONFIGURED_APPS += examples/nximage --nextPart2762333.I70qBvf3Po Content-Disposition: attachment; filename="defconfig" Content-Transfer-Encoding: 7Bit Content-Type: text/x-matlab; charset="UTF-8"; name="defconfig" ############################################################################ # configs/compal_e99/nsh_highram/defconfig # # Copyright (C) 2007-2012 Gregory Nutt. All rights reserved. # Author: Gregory Nutt <gnutt(a)nuttx.org> # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions # are met: # # 1. Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # 2. Redistributions in binary form must reproduce the above copyright # notice, this list of conditions and the following disclaimer in # the documentation and/or other materials provided with the # distribution. # 3. Neither the name NuttX nor the names of its contributors may be # used to endorse or promote products derived from this software # without specific prior written permission. # # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS # "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT # LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS # FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE # COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, # INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, # BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS # OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED # AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN # ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE # POSSIBILITY OF SUCH DAMAGE. # ############################################################################ # # architecture selection # # CONFIG_ARCH - identifies the arch subdirectory and, hence, the # processor architecture. # CONFIG_ARCH_family - for use in C code. This identifies the # particular chip family that the architecture is implemented # in. # CONFIG_ARCH_architecture - for use in C code. This identifies the # specific architecture within the chip familyl. # CONFIG_ARCH_CHIP - Identifies the arch/*/chip subdirectory # CONFIG_ARCH_CHIP_name - For use in C code # CONFIG_ARCH_BOARD - identifies the configs subdirectory and, hence, # the board that supports the particular chip or SoC. # CONFIG_ARCH_BOARD_name - for use in C code # CONFIG_BOARD_LOOPSPERMSEC - for delay loops # CONFIG_ENDIAN_BIG - define if big endian (default is little endian) # CONFIG_ROM_VECTORS - unique to c5471 # CONFIG_DRAM_END - the size of installed DRAM. # Unique to c5471 # CONFIG_ARCH_LEDS - Use LEDs to show state. Unique to c5471. # CONFIG_ARCH_INTERRUPTSTACK - This architecture supports an interrupt # stack. If defined, this symbol is the size of the interrupt # stack in bytes. If not defined, the user task stacks will be # used during interrupt handling. # CONFIG_ARCH_STACKDUMP - Do stack dumps after assertions # CONFIG_ARCH=arm CONFIG_ARCH_ARM=y CONFIG_ARCH_ARM7TDMI=y CONFIG_ARCH_CHIP=calypso CONFIG_ARCH_CHIP_CALYPSO=y CONFIG_ARCH_BOARD=compal_e99 CONFIG_ARCH_BOARD_COMPALE99=y CONFIG_BOARD_LOOPSPERMSEC=1250 CONFIG_ROM_VECTORS=n CONFIG_DRAM_END=0x00840000 CONFIG_ARCH_LEDS=n CONFIG_ARCH_INTERRUPTSTACK=1024 CONFIG_ARCH_STACKDUMP=y # # C5471 specific device driver settings # # CONFIG_SERIAL_IRDA_CONSOLE - selects the IRDA UART for the # console ant ttys0 (default is the modem UART). # CONFIG_UART_*_HWFLOWCONTROL - enables hardware flow control # CONFIG_UART_*_RXBUFSIZE - Characters are buffered as received. # This specific the size of the receive buffer # CONFIG_UART_*_TXBUFSIZE - Characters are buffered before # being sent. This specific the size of the transmit buffer # CONFIG_UART_*_BAUD - The configure BAUD of the UART. Must be # CONFIG_UART_*_BITS - The number of bits. Must be either 7 or 8. # CONFIG_UART_*_PARTIY - 0=no parity, 1=odd parity, 2=even parity # CONFIG_UART_*_2STOP - Two stop bits # CONFIG_SERIAL_IRDA_CONSOLE=n CONFIG_UART_IRDA_HWFLOWCONTROL=n CONFIG_UART_MODEM_HWFLOWCONTROL=n CONFIG_UART_IRDA_RXBUFSIZE=256 CONFIG_UART_MODEM_RXBUFSIZE=256 CONFIG_UART_IRDA_TXBUFSIZE=256 CONFIG_UART_MODEM_TXBUFSIZE=256 CONFIG_UART_IRDA_BAUD=115200 CONFIG_UART_MODEM_BAUD=115200 CONFIG_UART_IRDA_BITS=8 CONFIG_UART_MODEM_BITS=8 CONFIG_UART_IRDA_PARITY=0 CONFIG_UART_MODEM_PARITY=0 CONFIG_UART_IRDA_2STOP=0 CONFIG_UART_MODEM_2STOP=0 # # C5471 Ethernet Driver settings CONFIG_C5471_NET_STATS=n ETHERNET_PHY_LU3X31T_T64=1 ETHERNET_PHY_AC101L=2 CONFIG_C5471_ETHERNET_PHY=ETHERNET_PHY_LU3X31T_T64 CONFIG_NET_C5471_AUTONEGOTIATION=y CONFIG_NET_C5471_BASET100=n CONFIG_NET_C5471_BASET10=n # # General build options # # CONFIG_RRLOAD_BINARY - make the rrload binary format used with # BSPs from www.ridgerun.com using the tools/mkimage.sh script # CONFIG_INTELHEX_BINARY - make the Intel HEX binary format # used with many different loaders using the GNU objcopy program # Should not be selected if you are not using the GNU toolchain. # CONFIG_RAW_BINARY - make a raw binary format file used with many # different loaders using the GNU objcopy program. This option # should not be selected if you are not using the GNU toolchain. # CONFIG_HAVE_LIBM - toolchain supports libm.a # CONFIG_RRLOAD_BINARY=n CONFIG_INTELHEX_BINARY=n CONFIG_RAW_BINARY=y CONFIG_HAVE_LIBM=n # # General OS setup # # CONFIG_APPS_DIR - Identifies the relative path to the directory # that builds the application to link with NuttX. Default: ../apps # CONFIG_DEBUG - enables built-in debug options # CONFIG_DEBUG_VERBOSE - enables verbose debug output # CONFIG_DEBUG_SYMBOLS - build without optimization and with # debug symbols (needed for use with a debugger). # CONFIG_MM_REGIONS - If the architecture includes multiple # regions of memory to allocate from, this specifies the # number of memory regions that the memory manager must # handle and enables the API mm_addregion(start, end); # CONFIG_ARCH_LOWPUTC - architecture supports low-level, boot # time console output # CONFIG_TICKS_PER_MSEC - The default system timer is 100Hz # or TICKS_PER_MSEC=10. This setting may be defined to # inform NuttX that the processor hardware is providing # system timer interrupts at some interrupt interval other # than 10 msec. # CONFIG_RR_INTERVAL - The round robin timeslice will be set # this number of milliseconds; Round robin scheduling can # be disabled by setting this value to zero. # CONFIG_SCHED_INSTRUMENTATION - enables instrumentation in # scheduler to monitor system performance # CONFIG_TASK_NAME_SIZE - Spcifies that maximum size of a # task name to save in the TCB. Useful if scheduler # instrumentation is selected. Set to zero to disable. # CONFIG_START_YEAR, CONFIG_START_MONTH, CONFIG_START_DAY - # Used to initialize the internal time logic. # CONFIG_JULIAN_TIME - Enables Julian time conversions # CONFIG_DEV_CONSOLE - Set if architecture-specific logic # provides /dev/console. Enables stdout, stderr, stdin. # CONFIG_DEV_LOWCONSOLE - Use the simple, low-level serial console # driver (minimul support) # CONFIG_MUTEX_TYPES: Set to enable support for recursive and # errorcheck mutexes. Enables pthread_mutexattr_settype(). # CONFIG_PRIORITY_INHERITANCE : Set to enable support for priority # inheritance on mutexes and semaphores. # CONFIG_SEM_PREALLOCHOLDERS: This setting is only used if priority # inheritance is enabled. It defines the maximum number of # different threads (minus one) that can take counts on a # semaphore with priority inheritance support. This may be # set to zero if priority inheritance is disabled OR if you # are only using semaphores as mutexes (only one holder) OR # if no more than two threads participate using a counting # semaphore. # CONFIG_SEM_NNESTPRIO. If priority inheritance is enabled, # then this setting is the maximum number of higher priority # threads (minus 1) than can be waiting for another thread # to release a count on a semaphore. This value may be set # to zero if no more than one thread is expected to wait for # a semaphore. # CONFIG_FDCLONE_DISABLE. Disable cloning of all file descriptors # by task_create() when a new task is started. If set, all # files/drivers will appear to be closed in the new task. # CONFIG_FDCLONE_STDIO. Disable cloning of all but the first # three file descriptors (stdin, stdout, stderr) by task_create() # when a new task is started. If set, all files/drivers will # appear to be closed in the new task except for stdin, stdout, # and stderr. # CONFIG_SDCLONE_DISABLE. Disable cloning of all socket # desciptors by task_create() when a new task is started. If # set, all sockets will appear to be closed in the new task. # CONFIG_NXFLAT. Enable support for the NXFLAT binary format. # This format will support execution of NuttX binaries located # in a ROMFS filesystem (see examples/nxflat). # #CONFIG_APPS_DIR= CONFIG_DEBUG=n CONFIG_DEBUG_VERBOSE=n CONFIG_DEBUG_SYMBOLS=n CONFIG_MM_REGIONS=2 CONFIG_ARCH_LOWPUTC=y CONFIG_RR_INTERVAL=200 CONFIG_SCHED_INSTRUMENTATION=n CONFIG_TASK_NAME_SIZE=0 CONFIG_START_YEAR=2007 CONFIG_START_MONTH=2 CONFIG_START_DAY=13 CONFIG_JULIAN_TIME=n CONFIG_DEV_CONSOLE=y CONFIG_DEV_LOWCONSOLE=n CONFIG_MUTEX_TYPES=n CONFIG_PRIORITY_INHERITANCE=n CONFIG_SEM_PREALLOCHOLDERS=0 CONFIG_SEM_NNESTPRIO=0 CONFIG_FDCLONE_DISABLE=n CONFIG_FDCLONE_STDIO=n CONFIG_SDCLONE_DISABLE=y CONFIG_NXFLAT=n # # The following can be used to disable categories of # APIs supported by the OS. If the compiler supports # weak functions, then it should not be necessary to # disable functions unless you want to restrict usage # of those APIs. # # There are certain dependency relationships in these # features. # # o mq_notify logic depends on signals to awaken tasks # waiting for queues to become full or empty. # o pthread_condtimedwait() depends on signals to wake # up waiting tasks. # CONFIG_DISABLE_CLOCK=n CONFIG_DISABLE_POSIX_TIMERS=n CONFIG_DISABLE_PTHREAD=n CONFIG_DISABLE_SIGNALS=n CONFIG_DISABLE_MQUEUE=y CONFIG_DISABLE_MOUNTPOINT=n CONFIG_DISABLE_ENVIRON=n CONFIG_STDIO_LINE_BUFFER=y CONFIG_DISABLE_POLL=y # # FAT filesystem configuration # CONFIG_FS_FAT - Enable FAT filesystem support # CONFIG_FAT_SECTORSIZE - Max supported sector size # CONFIG_FS_ROMFS - Enable ROMFS filesystem support CONFIG_FS_FAT=n CONFIG_FS_ROMFS=n # # Misc libc settings # # CONFIG_NOPRINTF_FIELDWIDTH - sprintf-related logic is a # little smaller if we do not support fieldwidthes # CONFIG_NOPRINTF_FIELDWIDTH=n # # Allow for architecture optimized implementations # # The architecture can provide optimized versions of the # following to improve sysem performance # CONFIG_ARCH_MEMCPY=n CONFIG_ARCH_MEMCMP=n CONFIG_ARCH_MEMMOVE=n CONFIG_ARCH_MEMSET=n CONFIG_ARCH_STRCMP=n CONFIG_ARCH_STRCPY=n CONFIG_ARCH_STRNCPY=n CONFIG_ARCH_STRLEN=n CONFIG_ARCH_STRNLEN=n CONFIG_ARCH_BZERO=n # # Sizes of configurable things (0 disables) # # CONFIG_MAX_TASKS - The maximum number of simultaneously # active tasks. This value must be a power of two. # CONFIG_MAX_TASK_ARGS - This controls the maximum number of # of parameters that a task may receive (i.e., maxmum value # of 'argc') # CONFIG_NPTHREAD_KEYS - The number of items of thread- # specific data that can be retained # CONFIG_NFILE_DESCRIPTORS - The maximum number of file # descriptors (one for each open) # CONFIG_NFILE_STREAMS - The maximum number of streams that # can be fopen'ed # CONFIG_NAME_MAX - The maximum size of a file name. # CONFIG_STDIO_BUFFER_SIZE - Size of the buffer to allocate # on fopen. (Only if CONFIG_NFILE_STREAMS > 0) # CONFIG_NUNGET_CHARS - Number of characters that can be # buffered by ungetc() (Only if CONFIG_NFILE_STREAMS > 0) # CONFIG_PREALLOC_MQ_MSGS - The number of pre-allocated message # structures. The system manages a pool of preallocated # message structures to minimize dynamic allocations # CONFIG_MQ_MAXMSGSIZE - Message structures are allocated with # a fixed payload size given by this settin (does not include # other message structure overhead. # CONFIG_MAX_WDOGPARMS - Maximum number of parameters that # can be passed to a watchdog handler # CONFIG_PREALLOC_WDOGS - The number of pre-allocated watchdog # structures. The system manages a pool of preallocated # watchdog structures to minimize dynamic allocations # CONFIG_PREALLOC_TIMERS - The number of pre-allocated POSIX # timer structures. The system manages a pool of preallocated # timer structures to minimize dynamic allocations. Set to # zero for all dynamic allocations. # CONFIG_MAX_TASKS=16 CONFIG_MAX_TASK_ARGS=4 CONFIG_NPTHREAD_KEYS=4 CONFIG_NFILE_DESCRIPTORS=8 CONFIG_NFILE_STREAMS=8 CONFIG_NAME_MAX=32 CONFIG_STDIO_BUFFER_SIZE=1024 CONFIG_NUNGET_CHARS=2 CONFIG_PREALLOC_MQ_MSGS=0 CONFIG_MQ_MAXMSGSIZE=32 CONFIG_MAX_WDOGPARMS=4 CONFIG_PREALLOC_WDOGS=8 CONFIG_PREALLOC_TIMERS=8 # SPI driver # CONFIG_SPI_OWNBUS - Set if there is only one active device # on the SPI bus. No locking or SPI configuration will be performed. # It is not necessary for clients to lock, re-configure, etc.. # CONFIG_SPI_EXCHANGE - Driver supports a single exchange method # (vs a recvblock() and sndblock ()methods) # CONFIG_SPI_OWNBUS=y CONFIG_SPI_EXCHANGE=y # # TCP/IP and UDP support via uIP # CONFIG_NET - Enable or disable all network features # CONFIG_NET_IPv6 - Build in support for IPv6 # CONFIG_NSOCKET_DESCRIPTORS - Maximum number of socket descriptors per task/thread. # CONFIG_NET_SOCKOPTS - Enable or disable support for socket options # CONFIG_NET_BUFSIZE - uIP buffer size # CONFIG_NET_TCP - TCP support on or off # CONFIG_NET_TCP_CONNS - Maximum number of TCP connections (all tasks) # CONFIG_NET_TCP_READAHEAD_BUFSIZE - Size of TCP read-ahead buffers # CONFIG_NET_NTCP_READAHEAD_BUFFERS - Number of TCP read-ahead buffers (may be zero) # CONFIG_NET_TCPBACKLOG - Incoming connections pend in a backlog until # accept() is called. The size of the backlog is selected when listen() is called. # CONFIG_NET_MAX_LISTENPORTS - Maximum number of listening TCP ports (all tasks) # CONFIG_NET_UDP - UDP support on or off # CONFIG_NET_UDP_CHECKSUMS - UDP checksums on or off # CONFIG_NET_UDP_CONNS - The maximum amount of concurrent UDP connections # CONFIG_NET_ICMP - ICMP ping response support on or off # CONFIG_NET_ICMP_PING - ICMP ping request support on or off # CONFIG_NET_PINGADDRCONF - Use "ping" packet for setting IP address # CONFIG_NET_STATISTICS - uIP statistics on or off # CONFIG_NET_RECEIVE_WINDOW - The size of the advertised receiver's window # CONFIG_NET_ARPTAB_SIZE - The size of the ARP table # CONFIG_NET_BROADCAST - Broadcast support # CONFIG_NET_FWCACHE_SIZE - number of packets to remember when looking for duplicates # CONFIG_NET=n CONFIG_NET_IPv6=n CONFIG_NSOCKET_DESCRIPTORS=8 CONFIG_NET_SOCKOPTS=y CONFIG_NET_BUFSIZE=420 CONFIG_NET_TCP=y CONFIG_NET_TCP_CONNS=8 CONFIG_NET_NTCP_READAHEAD_BUFFERS=32 CONFIG_NET_TCPBACKLOG=n CONFIG_NET_MAX_LISTENPORTS=8 CONFIG_NET_UDP=y CONFIG_NET_UDP_CHECKSUMS=y #CONFIG_NET_UDP_CONNS=4 CONFIG_NET_ICMP=y CONFIG_NET_ICMP_PING=n #CONFIG_NET_PINGADDRCONF=0 CONFIG_NET_STATISTICS=y #CONFIG_NET_RECEIVE_WINDOW= #CONFIG_NET_ARPTAB_SIZE=8 CONFIG_NET_BROADCAST=n #CONFIG_NET_FWCACHE_SIZE=2 # # UIP Network Utilities # CONFIG_NET_DHCP_LIGHT - Reduces size of DHCP # CONFIG_NET_RESOLV_ENTRIES - Number of resolver entries CONFIG_NET_DHCP_LIGHT=n CONFIG_NET_RESOLV_ENTRIES=4 # # Settings for examples/uip CONFIG_EXAMPLE_UIP_NOMAC=y CONFIG_EXAMPLE_UIP_IPADDR=(10<<24|0<<16|0<<8|2) CONFIG_EXAMPLE_UIP_DRIPADDR=(10<<24|0<<16|0<<8|1) CONFIG_EXAMPLE_UIP_NETMASK=(255<<24|255<<16|255<<8|0) CONFIG_EXAMPLE_UIP_DHCPC=n # # Settings for examples/nettest CONFIG_EXAMPLE_NETTEST_SERVER=n CONFIG_EXAMPLE_NETTEST_PERFORMANCE=n CONFIG_EXAMPLE_NETTEST_NOMAC=y CONFIG_EXAMPLE_NETTEST_IPADDR=(10<<24|0<<16|0<<8|2) CONFIG_EXAMPLE_NETTEST_DRIPADDR=(10<<24|0<<16|0<<8|1) CONFIG_EXAMPLE_NETTEST_NETMASK=(255<<24|255<<16|255<<8|0) CONFIG_EXAMPLE_NETTEST_CLIENTIP=(10<<24|0<<16|0<<8|1) # # Settings for examples/nsh CONFIG_NSH_CONSOLE=y CONFIG_NSH_TELNET=n CONFIG_NSH_IOBUFFER_SIZE=512 CONFIG_NSH_CMD_SIZE=40 CONFIG_NSH_STACKSIZE=4096 CONFIG_NSH_DHCPC=n CONFIG_NSH_NOMAC=y CONFIG_NSH_IPADDR=(10<<24|0<<16|0<<8|2) CONFIG_NSH_DRIPADDR=(10<<24|0<<16|0<<8|1) CONFIG_NSH_NETMASK=(255<<24|255<<16|255<<8|0) CONFIG_NSH_BUILTIN_APPS=y # # LCD Drivers settings CONFIG_NX_LCDDRIVER=y CONFIG_LCD_SSD1783=y # # Graphics CONFIG_NX=y CONFIG_NXCONSOLE=n CONFIG_NX_KBD=y CONFIG_LCD_MAXPOWER=1 CONFIG_NX_BLOCKING=y CONFIG_NX_DISABLE_1BPP=y CONFIG_NX_DISABLE_2BPP=y CONFIG_NX_DISABLE_4BPP=y CONFIG_NX_DISABLE_8BPP=n CONFIG_NX_DISABLE_16BPP=y CONFIG_NX_DISABLE_32BPP=y CONFIG_NXCONSOLE_BPP=8 CONFIG_NXCONSOLE_NOGETRUN=y CONFIG_NXFONT_SANS17X22=y CONFIG_NX_MULTIUSER=n CONFIG_EXAMPLES_NXTEXT_BPP=8 CONFIG_EXAMPLES_NXTEXT_DEVNO=0 # # Settings for examples/hello CONFIG_EXAMPLES_HELLO_BUILTIN=y CONFIG_EXAMPLES_NXHELLO_BUILTIN=y CONFIG_EXAMPLES_NXTEXT_BUILTIN=y CONFIG_EXAMPLES_NXIMAGE_BUILTIN=y CONFIG_EXAMPLES_NXLINES_BUILTIN=y CONFIG_EXAMPLES_NXLINES_EXTERNINIT=y CONFIG_EXAMPLES_NXHELLO_EXTERNINIT=y CONFIG_EXAMPLES_NXTEXT_EXTERNINIT=y CONFIG_EXAMPLES_NXIMAGE_EXTERNINIT=y # # Settings for examples/wget # CONFIG_EXAMPLE_WGET_URL - The URL of the file to get # CONFIG_EXAMPLE_WGET_NOMAC - (May be defined to use software assigned MAC) # CONFIG_EXAMPLE_WGET_IPADDR - Target IP address # CONFIG_EXAMPLE_WGET_DRIPADDR - Default router IP addess # CONFIG_EXAMPLE_WGET_NETMASK - Network mask CONFIG_EXAMPLE_WGET_URL="http://www.nuttx.org/index.html" CONFIG_EXAMPLE_WGET_NOMAC=y CONFIG_EXAMPLE_WGET_IPADDR=(10L<<24|0L<<16|0L<<8|2L) CONFIG_EXAMPLE_WGET_DRIPADDR=(10L<<24|0L<<16|0L<<8|1L) CONFIG_EXAMPLE_WGET_NETMASK=(255L<<24|255L<<16|255L<<8|0L) # # Stack and heap information # # CONFIG_BOOT_RUNFROMFLASH - Some configurations support XIP # operation from FLASH but must copy initialized .data sections to RAM. # CONFIG_BOOT_COPYTORAM - Some configurations boot in FLASH # but copy themselves entirely into RAM for better performance. # CONFIG_CUSTOM_STACK - The up_ implementation will handle # all stack operations outside of the nuttx model. # CONFIG_STACK_POINTER - The initial stack pointer (arm7tdmi only) # CONFIG_IDLETHREAD_STACKSIZE - The size of the initial stack. # This is the thread that (1) performs the inital boot of the system up # to the point where user_start() is spawned, and (2) there after is the # IDLE thread that executes only when there is no other thread ready to # run. # CONFIG_USERMAIN_STACKSIZE - The size of the stack to allocate # for the main user thread that begins at the user_start() entry point. # CONFIG_PTHREAD_STACK_MIN - Minimum pthread stack size # CONFIG_PTHREAD_STACK_DEFAULT - Default pthread stack size # CONFIG_HEAP_BASE - The beginning of the heap # CONFIG_HEAP_SIZE - The size of the heap # CONFIG_BOOT_RUNFROMFLASH=n CONFIG_BOOT_COPYTORAM=n CONFIG_CUSTOM_STACK=n #CONFIG_STACK_POINTER CONFIG_IDLETHREAD_STACKSIZE=4096 CONFIG_USERMAIN_STACKSIZE=4096 CONFIG_PTHREAD_STACK_MIN=256 CONFIG_PTHREAD_STACK_DEFAULT=4096 CONFIG_HEAP_BASE= CONFIG_HEAP_SIZE= # Application configuration CONFIG_APPS_DIR="../apps" --nextPart2762333.I70qBvf3Po--

1 0

jtag trouble j100i
by Mathias K. 09 May '12

09 May '12

Hello, i try to connect the j100i with the latest openocd (git) but there is always something wrong with the embedded ice module. My configuration script is based on openocd_calypso.cfg and the calypso_magic.svf. The main difference i can see is the idcode and the irlen. My changes in the script looks like this: set _CPUTAPID 0xf9001807 jtag newtap $_CHIPNAME dsp -expected-id 0x00000000 -irlen 5 jtag newtap $_CHIPNAME arm -irlen 4 -ircapture 0x1 -irmask 0xf -expected-id $_CPUTAPID This changes are based on some appended svf scripts that simple scan the jtag chain to get more informations. The jtag_idcodes.svf returns the shifted idcodes like this: SDR 32 TDI(ffffffff); length = 32 TDI = 0xFFFFFFFF TDO read = 0xF200300E SDR 32 TDI(ffffffff); length = 32 TDI = 0xFFFFFFFF TDO read = 0xFFFFFFFF The jtag_devices.svf told me the device count and the possible ir register count/length: SIR 32 TDI(ffffffff); length = 32 TDI = 0xFFFFFFFF TDO read = 0xFFFFFE25 TDO: 11...11000100101 Looks like 3 ir registers with 4,3 and 2 bit length SDR 32 TDI(ffffffff); length = 32 TDI = 0xFFFFFFFF TDO read = 0xFFFFFFFC TDO: 11...1100 Looks like 2 devices But every access to the embedded ice registers (they are located in the internal scan chain 2) result in random (most time zero) values for the comms ctrl register and a cpu halt state. Is there anything wrong? Is there a different "magic" 0x0b jtag command or argument for this kind of cpu? Thanks & Regards, Mathias

2 4

Re: How to send a sms using BB
by Henk 09 May '12

09 May '12

It works Chengcheng Gou <gouchengcheng(a)gmail.com>schreef: >Hi, >anyone did try it? >

1 0

How to send a sms using BB
by Chengcheng Gou 09 May '12

09 May '12

Hi, anyone did try it?

1 0

Re: Sagem OT-290 trace phone / GSMTAP integration
by Tyson Key 08 May '12

08 May '12

Hi list, It's my first time posting here, and I've just subscribed - so apologies for totally wrecking archive threading. I've just received a copy of the e-mail regarding the OT-290, thanks to Andrew Back; and I'm wondering it's possible to discuss the feasibility of implementing this functionality with Harald - since it doesn't seem to have generated much interest from others, and I'm "fortunate" enough to live in a small British town without EDGE coverage (which should make it easier to test GPRS-related tracing functionality). Although I'm unfamiliar with how things work in Osmocom, I've previously worked on Wireshark dissectors for USB-encapsulated AT commands, and various NFC/smartcard-related protocols (PN532, FeliCa and MiFare); and am also familiar with Nokia's proprietary ISI baseband protocol, and parts of ETSI's GSM/UMTS specifications - so this sort of stuff isn't totally alien to me. I'm also currently studying Computer Science as an undergraduate (at the University of Bradford) - but I should be able to make time to work on this. Thanks, Tyson. -- Fight Internet Censorship! http://www.eff.org http://vmlemon.wordpress.com | Twitter/FriendFeed/Skype: vmlemon | 00447934365844

3 2

[PATCH] Adding the manufacturer id of STMicroelectronics (try 2)
by Christian Inci 07 May '12

07 May '12

For supporting the flash on a Motorola C118. Note: Flashing rssi on it worked fine. Signed-off-by: Christian Inci <chris.pcguy.inci(a)gmail.com>

2 1

key generation on SIM failed (cause 2)
by Alojzij Sinur 07 May '12

07 May '12

Hi, I have a question. When using osmocombb with C118, we are getting error when SIM tries to authenticate itself to the network. Here are the messages: <0005> gsm48_mm.c:3902 (ms 1) Received 'RR_DATA_IND' from RR in state location updating initiated (sapi 0) <0005> gsm48_mm.c:4091 (ms 1) Received 'MT_MM_AUTH_REQ' in MM state location updating initiated <0005> gsm48_mm.c:1637 AUTHENTICATION REQUEST (seq 2) <0005> subscriber.c:955 Generating KEY at SIM <000f> sim.c:209 got new job: SIM_JOB_RUN_GSM_ALGO (handle=00000006) <000f> sim.c:697 go MF <000f> sim.c:241 SELECT (file=0x3f00) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x00 sw2=0x00) <000f> sim.c:952 command failed <000f> sim.c:151 sending result to callback function (type=1) <0005> subscriber.c:990 key generation on SIM failed (cause 2) SIM is new. It works if you start phone without osmocom. And It also works if you start without osmocom and when SIM logs into network you restart the phone with osmocom. We tried several new cards and there was always same result. There is also no PIN set up (SIM is not locked). We tried with USIM. When we try old cards (>2 years old) osmocom works without problem. Have you ever encountered this kind of trouble? Is there any fix for it? Thank you. Regards, Alojzij

4 9

Sagem OT-290 trace phone / GSMTAP integration
by Harald Welte 07 May '12

07 May '12

Hi all! Thanks to a generous donor, we have received a couple of OT-290 trace phones. These are commercial products intended for taking L2/L3 air interface traces. If you've read any of the fabulous GSM papers by Prof. Dr.-Ing. Joachim Goeller: The OT-phones is what he used to generate all his traces. The majority of what those phones can do is now also possible with OsmocomBB. However, OT-290 support GPRS tracing/testing - for CS-1 throguh CS-4. I would be willing to give away one of the two remaining OT-290 (for free) to anyone who would in return commit to developing a GSMTAP interface for it. The message format on the serial UART between phone and PC is documented (PDF documentation by Sagem included with the phones). So based on this documentation and an OT-290 phone, it should be possible to write a small command-line program that receives the GSM/GPRS messages from the OT-290 and sends them via GSMTAP into wireshark. The result would then be similar to what http://cgit.osmocom.org/cgit/dct3-gsmtap/ is for DCT-3 phones. If you're interested, please respond to this message. Please don't apply for the phone if you are not able to find the required time and interest for actually doing the GSMTAP integration. Thanks! -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

2 2

Adding the manufacturer id of STMicroelectronics
by Christian Inci 06 May '12

06 May '12

For supporting the flash on a Motorola C118. Note: Flashing rssi on it worked fine. Signed-off-by: Christian Inci <chris.pcguy.inci(a)gmail.com> --- src/target/firmware/flash/cfi_flash.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/target/firmware/flash/cfi_flash.c b/src/target/firmware/flash/cfi_flash.c index 69369d5..8ecd206 100644 --- a/src/target/firmware/flash/cfi_flash.c +++ b/src/target/firmware/flash/cfi_flash.c @@ -71,6 +71,7 @@ struct cfi_query { /* manufacturer ids */ enum cfi_manuf { + CFI_MANUF_ST = 0x0020, CFI_MANUF_INTEL = 0x0089, }; @@ -532,8 +533,7 @@ int flash_init(flash_t * flash, void *base_addr) if (res) { return res; } - if (m_id != CFI_MANUF_INTEL) { - /* we only support intel devices */ + if (m_id != CFI_MANUF_INTEL && m_id != CFI_MANUF_ST) { return -ENOTSUP; } -- 1.7.8.6 --------------090106030808000805030408--

1 0

[PATCH] Adding the manufacturer id of STMicroelectronics (resend)
by Christian Inci 06 May '12

06 May '12

For supporting the flash on a Motorola C118. Signed-off-by: Christian Inci <chris.pcguy.inci(a)gmail.com>

2 1

[ticket] RSSI fails to sync on 1800Mhz bands
by Henk 06 May '12

06 May '12

Version: OSMOCOM Monitor Tool (revision osmocon_v0.0.0-1346-g186fefc-modified) RSSI is running from flash There seems to be a problem when trying to sync to the DCS bands also the spectum window is not that what you expect. There seem to be a few very strong peaks but the rest is flat.

1 1

Ramblings of a Osmocom supporter
by Henk 06 May '12

06 May '12

Hi all, First of all, what an exciting piece of hacking, well done guys! So after one year I revisited the osmocom and flashed the bootloader and the RSSI on my C116 device. I was wondering is there something of a TODO of sorts in order to get users of different skill levels involved? One thing I can think of is extending the loader with functions to access the DSP: read (p)rom, read write regs & memory, potentially adding DSP patching support. Regards, Henk

1 0

Adding the manufacturer id of STMicroelectronics
by Christian Inci 04 May '12

04 May '12

For supporting the flash on a Motorola C118. Signed-off-by: Christian Inci <chris.pcguy.inci(a)gmail.com> --- src/target/firmware/flash/cfi_flash.c | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/src/target/firmware/flash/cfi_flash.c b/src/target/firmware/flash/cfi_flash.c index 69369d5..474dcbb 100644 --- a/src/target/firmware/flash/cfi_flash.c +++ b/src/target/firmware/flash/cfi_flash.c @@ -71,6 +71,7 @@ struct cfi_query { /* manufacturer ids */ enum cfi_manuf { + CFI_MANUF_ST = 0x0020, CFI_MANUF_INTEL = 0x0089, }; @@ -532,7 +533,7 @@ int flash_init(flash_t * flash, void *base_addr) if (res) { return res; } - if (m_id != CFI_MANUF_INTEL) { + if (m_id != CFI_MANUF_INTEL && m_id != CFI_MANUF_ST) { /* we only support intel devices */ return -ENOTSUP; } -- 1.7.8.6 --------------020907080906030400030607--

1 0

uwire.c relicensing
by Denis 'GNUtoo' Carikli 02 May '12

02 May '12

Hi, We(Alan Carvalho de Assis and me) also need the permission of Sylvain Munaut and Steve Markgraf for the relicensing of src/target/firmware/ of osmocombb for inclusion in nuttx(BSD licensed). What we need right now is to get the permission on that file: src/target/firmware/calypso/uwire.c Basically we want to add LCD support as quickly as possible to the compal e99(And in parallel to fix the configs and the linker scripts to get more space). Denis.

2 1

May 09, 7pm / Osmocom meeting in Berlin
by Harald Welte 02 May '12

02 May '12

Hi all! This is the announcement for the 3rd incarnation of our bi-weekly Osmocom Berlin meeting. May 09, 7pm @ CCC Berlin, Marienstr. 11, 10113 Berlin The schedule is as follows: 19:00 Introduction / Workshop on Osmocom SIMtrace (Kevin Redon) Kevin will introduce SIM/USIM/UICC cards, present what SIMtrace is and how it works, as well as how to use it to trace communication between SIM card and phone. 20:00 Informal discussions If you are interested to show up, feel free to do so. There is no registration required. If the initial part is not interesting to you, feel free to join us later at 20:00. The meeting is free as in "free beer", despite no actual free beer being around ;) Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

BER
by Micka A. 01 May '12

01 May '12

Hello, there is one question, how in layer23 calculates BER?? for example it shows 143.. 120 .. and so on, there for sure not percent.

1 0

should we continue to focus on nuttx?
by Denis 'GNUtoo' Carikli 30 Apr '12

30 Apr '12

The other day on IRC I was told that: >Apr 29 00:34:36 <Hoernchen> last thing i heard was that nuttx was superseded in favor of a more lightweight solution And: >Apr 29 00:41:03 <steve|m> http://openbsc.osmocom.org/trac/wiki/OsmoDevCon2012/Minutes#a18:30roundtabl… which was made back in march(we also started working on nuttx near march) and contains the following: >laf: summary we could not gain much from nuttx, rockbox could provide use with UI (inspiration)? steve: framebuffer is mosly compatible I wasn't aware of all that. Also I don't have much details on what was said since I wans't there... Should me and Alan Carvalho de Assis continue the work we are doing? What is the current plan? our status is here: http://bb.osmocom.org/trac/wiki/nuttx-bb/drivers The current work on my side is to: * make serial work without sercomm(done locally,just some configuration change) * unbreak the booting of the calypso(require serial to work without sercomm,the commit that created the problem has been identified, how to fix is a work in progress) * I also tried to change toolchain(I generated a toolchain with openembedded) to see if it fixed the issue but according to Gregory it's not the right fix. * I also identified some dummy functions in the nuttx version of sercomm that we should get rid of. On Alan Carvalho de Assis side : he's trying to make the keypad work but he has some difficulties with it. Denis.

4 5

Arkmicro Technologies Inc. ARK3116 Serial
by Darran.Lee 28 Apr '12

28 Apr '12

Hi I am trying to use an Arkmicro Technologies ARK3116 USB to serial cable to communicate with my C118. I have compiled Osmocom-bb successfully on my Debian Squeeze laptop. When I try to run the osmocon utility I get an error "Cannot open serial device /dev/ttyUSB0" My dmesg etc output is: [ 769.752182] usb 5-2: new full speed USB device using uhci_hcd and address 5 [ 769.908979] usb 5-2: New USB device found, idVendor=6547, idProduct=0232 [ 769.908988] usb 5-2: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 769.908995] usb 5-2: Product: USB-UART Controller [ 769.909000] usb 5-2: Manufacturer: ArkMicroChips [ 769.909192] usb 5-2: configuration #1 chosen from 1 choice [ 770.029492] usbcore: registered new interface driver usbserial [ 770.029740] USB Serial support registered for generic [ 770.030002] usbcore: registered new interface driver usbserial_generic [ 770.030005] usbserial: USB Serial Driver core [ 770.047650] USB Serial support registered for ark3116 [ 770.048263] ark3116 5-2:1.0: ark3116 converter detected [ 770.076254] usb 5-2: ark3116 converter now attached to ttyUSB0 [ 770.076305] usbcore: registered new interface driver ark3116 ls -l /dev/tty* crw-rw---- 1 root dialout 4, 64 Apr 27 21:01 /dev/ttyS0 crw-rw---- 1 root dialout 4, 65 Apr 27 21:01 /dev/ttyS1 crw-rw---- 1 root dialout 4, 66 Apr 27 21:01 /dev/ttyS2 crw-rw---- 1 root dialout 4, 67 Apr 27 21:01 /dev/ttyS3 crw-rw---- 1 root dialout 188, 0 Apr 27 21:14 /dev/ttyUSB0 lsusb Bus 005 Device 005: ID 6547:0232 Arkmicro Technologies Inc. ARK3116 Serial Bus 005 Device 004: ID 09da:0006 A4 Tech Co., Ltd Optical Mouse WOP-35 / Trust 450L Optical Mouse Bus 005 Device 003: ID 1631:5002 Good Way Technology Bus 005 Device 002: ID 1631:5400 Good Way Technology Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub So I am assuming the drivers are installed correctly but if I run osmocon I get: ./osmocon -p /dev/ttyUSB0 -m c123xor ../../target/firmware/board/compal_e88/loader.compalram.bin Cannot open serial device /dev/ttyUSB0 My Question is, does anyone here have any experience with the Arkmicro Technologies ARK3116 Serial cable? Is there something I have missed? Thanks Tokala

2 1

How one can get the address of the functions and Variables in the DSP assemble code
by Chengcheng Gou 28 Apr '12

28 Apr '12

hello, I have the problem ,such as how to get the address of the functions and Variables in the DSP assemble code,such as in +; DSP Sniffing task patch +; ---------------------------------------------------------------------------- +; Known symbols +; ---------------------------------------------------------------------------- + + ; Variables +patch_install_fptr .equ 0x3F6B ; Patch install function ptr +dsp_page .equ 0x3FB0 ; Current ndb.d_dsp_page +task_fn_entry .equ 0x4387 + 23 ; Task 23 index in JT_4387 + + ; Functions +a5_setup .equ 0xB12C +dma_queue_setup .equ 0xB74C + +jt4387_exec .equ 0xA9EA + +fq_4320_push .equ 0xAA9F +fq_4330_push .equ 0xAA6C +fq_4340_push .equ 0xAAC3 + Can anyone tell me the way to do that?! thanks!

2 1

Frequency hopping
by Dario Lombardo 27 Apr '12

27 Apr '12

Hello everybody What happens when a mobile station is in a cell that uses hopping, but the mobile locks to that cell (for instance using the function of the engineering menu of a BB)? Is the hopping mandatory or the ms can continue working also without it? Does osmocom support hopping? What are the commands of the mobile interface (if they exist) to show how the hopping is going? Is it possible to lock with osmocom too? Thanks for the answers. Dario.

2 1

Whats the best recommended Sim Card R/W for the SysmoSim Card
by Martin O'Shield 27 Apr '12

27 Apr '12

Hello All, What is the preferred Sim Card Reader/Writer for the SysmoSim Card, A.K.A., the GrCard Sim? And is the following known to work reliably with the SysmoSim Card? SIM Reader kit - v1.0http://www.adafruit.com/products/101I contacted Adafruit.com yesterday and they explained that their device doesn't work on all Sim Cards. Any assistance would be greatly appreciated. Sincerely, Martin

3 2

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

baseband-devel