Hi all,
I am trying to have some OsmocomBB communication and my procedure is following :
1) I start osmocon with layer1 sw :
./osmocon -p /dev/ttyUSB1 -m c123xor
../../target/firmware/board/compal_e88/layer1.compalram.bin
It now waits for power on button from the phone
2) In the other terminal I start mobile application :
./mobile -i 127.0.0.1
Copyright (C) 2008-2010 ...
Contributions by ...
License GPLv2+: GNU GPL version 2 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
VTY available on port 4247.
No Mobile Station defined, creating: MS '1'
<000e> sim.c:1206 init SIM client
<0005> gsm48_cc.c:61 init Call Control
<0001> gsm48_rr.c:4944 init Radio Ressource process
<0004> gsm48_mm.c:1220 init Mobility Management process
<0004> gsm48_mm.c:971 Selecting PLMN SEARCH state, because no SIM.
<0002> gsm322.c:3472 init PLMN process
<0003> gsm322.c:3473 init Cell Selection process
Mobile '1' initialized, please start phone now!
3) Now I press a "power-on" button on the phone and I have logs
comming out on the both terminals.
I guess that MS is doing various cell power measurements and trying to
discass with near-by cells over controle channels.
However, in ./osmocon terminal it finishes like this :
$ ./osmocon -p /dev/ttyUSB1 -m c123xor
../../target/firmware/board/compal_e88/layer1.compalram.bin
got 1 bytes from modem, data looks like: 00 .
got 1 bytes from modem, data looks like: 00 .
got 1 bytes from modem, data looks like: 81 .
got 4 bytes from modem, data looks like: 1b f6 02 00 ....
got 1 bytes from modem, data looks like: 41 A
got 1 bytes from modem, data looks like: 01 .
got 1 bytes from modem, data looks like: 40 @
Received PROMPT1 from phone, responding with CMD
read_file(../../target/firmware/board/compal_e88/layer1.compalram.bin):
file_size=47700, hdr_len=4, dnload_len=47707
got 1 bytes from modem, data looks like: 1b .
got 1 bytes from modem, data looks like: f6 .
got 1 bytes from modem, data looks like: 02 .
got 1 bytes from modem, data looks like: 00 .
got 1 bytes from modem, data looks like: 41 A
got 1 bytes from modem, data looks like: 02 .
got 1 bytes from modem, data looks like: 43 C
Received PROMPT2 from phone, starting download
handle_write(): 1023 bytes (1023/47707)
handle_write(): 768 bytes (1791/47707)
handle_write(): 768 bytes (2559/47707)
handle_write(): 768 bytes (3327/47707)
...
handle_write(): 768 bytes (44031/47707)
handle_write(): 768 bytes (44799/47707)
handle_write(): 768 bytes (45567/47707)
handle_write(): 768 bytes (46335/47707)
handle_write(): 768 bytes (47103/47707)
handle_write(): 604 bytes (47707/47707)
handle_write(): finished
got 1 bytes from modem, data looks like: 1b .
got 1 bytes from modem, data looks like: f6 .
got 1 bytes from modem, data looks like: 02 .
got 1 bytes from modem, data looks like: 00 .
got 1 bytes from modem, data looks like: 41 A
got 1 bytes from modem, data looks like: 03 .
got 1 bytes from modem, data looks like: 42 B
Received DOWNLOAD ACK from phone, your code is running now!
OSMOCOM Layer 1 (revision osmocon_v0.0.0-884-gd76345a)
======================================================================
Device ID code: 0xb4fb
Device Version code: 0x0000
ARM ID code: 0xfff3
cDSP ID code: 0x0128
Die ID code: 2c903414df039b3f
======================================================================
REG_DPLL=0x2413
CNTL_ARM_CLK=0xf0a1
CNTL_CLK=0xff91
CNTL_RST=0xfff3
CNTL_ARM_DIV=0xfff9
======================================================================
THIS FIRMWARE WAS COMPILED WITHOUT TX SUPPORT!!!
Assert DSP into Reset
Releasing DSP from Reset
Setting some dsp_api.ndb values
Setting API NDB parameters
DSP Download Status: 0x0001
DSP API Version: 0x0000 0x0000
Finishing download phase
DSP Download Status: 0x0002
DSP API Version: 0x3606 0x0000
LOST 1201!
L1CTL_RESET_REQ: FULL!L1CTL_PM_REQ start=0 end=124
PM MEAS: ARFCN=0, 32 dBm at baseband, -105 dBm at RF
PM MEAS: ARFCN=0, 32 dBm at baseband, -105 dBm at RF
...
PM MEAS: ARFCN=98, 36 dBm at baseband, -101 dBm at RF
PM MEAS: ARFCN=99, 39 dBm at baseband, -98 dBm at RF
PM MEAS: ARFCN=100, 31 dBm at baseband, -106 dBm at RF
PM MEAS: ARFCN=101, 30 dBm at baseband, -107 dBm at RF
PM MEAS: ARFCN=110, 36 dBm at baseband, -101 dBm at RF
PM MEAS: ARFCN=111, 34 dBm at baseband, -103 dBm at RF
PM MEAS: ARFCN=112, 31 dBm at baseband, -107 dBm at RF
PM MEAS: ARFCN=113, 33 dBm at baseband, -104 dBm at RF
...
L1CTL_PM_REQ start=955 end=1023
PM MEAS: ARFCN=955, 26 dBm at baseband, -111 dBm at RF
PM MEAS: ARFCN=955, 26 dBm at baseband, -111 dBm at RF
PM MEAS: ARFCN=956, 27 dBm at baseband, -110 dBm at RF
PM MEAS: ARFCN=957, 26 dBm at baseband, -111 dBm at RF
PM MEAS: ARFCN=958, 27 dBm at baseband, -110 dBm at RF
PM MEAS: ARFCN=959, 25 dBm at baseband, -112 dBm at RF
...
PM MEAS: ARFCN=1020, 37 dBm at baseband, -100 dBm at RF
PM MEAS: ARFCN=1021, 41 dBm at baseband, -96 dBm at RF
PM MEAS: ARFCN=1022, 31 dBm at baseband, -106 dBm at RF
PM MEAS: ARFCN=1023, 42 dBm at baseband, -95 dBm at RF
L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=121, flags=0x7)
Starting FCCH RecognitionFB0 (1735:8): TOA= 9600, Power= -52dBm, Angle= 1218Hz
FB1 (1745:8): TOA= 9563, Power= -52dBm, Angle= 174Hz
fn_offset=1744 (fn=1745 + attempt=8 + ntdma = 7)m delay=9
(fn_offset=1744 + 11 - fn=1745 - 1
scheduling next FB/SB detection task with delay 9
=>FB @ FNR 1744 fn_offset=1744 qbits=3068
Synchronize_TDMA
LOST 3054!
What would this LOST 3054! say ? It does not sound good anyway, but at
this point I am not skilled enough to read OsmocomBB logs.
On the other side, in the ./mobile terminal I have something like this :
<0002> gsm322.c:3099 (ms 1) Event 'EVENT_SWITCH_ON' for automatic PLMN
selection in state 'A0 null'
<000d> gsm322.c:1056 SIM is removed
<0002> gsm322.c:1057 SIM is removed
<0002> gsm322.c:512 new state 'A0 null' -> 'A6 no SIM inserted'
<0003> gsm322.c:3319 (ms 1) Event 'EVENT_SWITCH_ON' for Cell selection
in state 'C0 null'
<0003> gsm322.c:2992 Switch on without SIM.
<0003> gsm322.c:541 new state 'C0 null' -> 'C6 any cell selection'
<0003> gsm322.c:2405 Getting PM for frequency 0 twice. Overwriting the
first! Please fix prim_pm.c
<0003> gsm322.c:2416 Found signal (frequency 2 rxlev -105 (5))
<0003> gsm322.c:2416 Found signal (frequency 3 rxlev -106 (4))
<0003> gsm322.c:2416 Found signal (frequency 4 rxlev -86 (24))
<0003> gsm322.c:2416 Found signal (frequency 5 rxlev -68 (42))
<0003> gsm322.c:2416 Found signal (frequency 6 rxlev -86 (24))
...
<0003> gsm322.c:2405 Getting PM for frequency 512 twice. Overwriting
the first! Please fix prim_pm.c
<0003> gsm322.c:2416 Found signal (frequency 512 rxlev -93 (17))
<0003> gsm322.c:2416 Found signal (frequency 516 rxlev -90 (20))
...
<0003> gsm322.c:2416 Found signal (frequency 1023 rxlev -95 (15))
<0003> gsm322.c:2349 Found 201 frequencies.
<0003> gsm322.c:258 Sync to ARFCN=121 rxlev=-54 (No sysinfo yet, ccch mode NONE)
<0002> gsm322.c:3099 (ms 1) Event 'EVENT_USER_RESEL' for automatic
PLMN selection in state 'A6 no SIM inserted'
Can somebody explain me what the hell is happening here ?
I am watching all these nice Harald's presentations, like one here :
http://www.youtube.com/watch?v=H7rNKZdASBE, but I am not obtaining
list of cells like presented to which I can synchronize to. Actually,
show cell is giving me :
OsmocomBB> show cell 1
arfcn |MCC |MNC |LAC |cell ID|forb.LA|prio |min-db |max-pwr|rx-lev
-------+-------+-------+-------+-------+-------+-------+-------+-------+-------
OsmocomBB>
As you can see, I am pretty much lost here and I would highly
appreciate helping hand.
Thanks and best regards,
Drasko
