Dear all, I vae the C115 with a T1 USB to Serial cable with the Prolific
chipset.
When i run osmocon i get :- an its just sits there with no further
processing.
./osmocon -p /dev/ttyUSB0 -m c123xor
../../target/firmware/board/compal_e88/loader.compalram.bin
read_file(../../target/firmware/board/compal_e88/loader.compalram.bin):
file_size=17120, hdr_len=4, dnload_len=17127
read_file(../../target/firmware/board/compal_e88/loader.compalram.bin):
file_size=17120, hdr_len=4, dnload_len=17127
got 1 bytes from modem, data looks like: 00 .
got 2 bytes from modem, data looks like: 2f 00 /.
got 1 bytes from modem, data looks like: 1b .
got 3 bytes from modem, data looks like: f6 02 00 ...
got 1 bytes from modem, data looks like: 41 A
got 1 bytes from modem, data looks like: 01 .
got 1 bytes from modem, data looks like: 40 @
Received PROMPT1 from phone, responding with CMD
got 1 bytes from modem, data looks like: 66 f
got 1 bytes from modem, data looks like: 74 t
got 1 bytes from modem, data looks like: 6d m
got 1 bytes from modem, data looks like: 74 t
got 1 bytes from modem, data looks like: 6f o
got 1 bytes from modem, data looks like: 6f o
got 1 bytes from modem, data looks like: 6c l
Received FTMTOOL from phone, ramloader has aborted
got 1 bytes from modem, data looks like: 65 e
got 1 bytes from modem, data looks like: 72 r
got 1 bytes from modem, data looks like: 72 r
got 1 bytes from modem, data looks like: 6f o
got 1 bytes from modem, data looks like: 72 r
got 1 bytes from modem, data looks like: 00 .
got 1 bytes from modem, data looks like: 00 .
I think the cable is ok as when i run my fingers on the tip i get random
Zeros so it appears to be talking to the cable.
Also when i tried to run Mobile i get the :- even though i created the
Mobile.cfg file in /etc/osmoco
Failed to parse the config file: '/home/raz/.osmocom/bb/mobile.cfg'
Please check or create config file using: 'touch
/home/raz/.osmocom/bb/mobile.cfg'
I have spent some hours researching the lists and trying various things to
no avail but I want to continue until I resolve this issues and use this
great stack to learn about the GSM network.
Please advise.
Great full for any help or pointers but this maybe a timing issue that is
difficult to debug.
Thanks
Raz
hi,
i did a lot of resarch and testing on cell selection and re-selection
process the last two week.
the cell selection process, network selection process (manual and
automatic) and mobility management process were already implemented in
OsmocomBB a long time, but turned out to be buggy and incomplete. i made
test drives to check the process and debugged it.
the re-selection process is new. it is used to track surrounding cells
while listening to the BCCH of the current cell (camping on a cell).
special extension to the layer1 firmare is used to measure neighbour
cells. if an neighbour cell becomes 'better', the mobile switches to
that cell, depening on different criteria. now it is possible to move
with OsmocomBB.
the re-selection process is not handover! handover is a process where a
phone switches between cells while doing a call. handover is one next
step to implement. the process is a little more complex, because it
requires not only neighbour cell measurements, but also syncing to them
without interrupting the traffic channel. most layer 3 stuff of handover
is already implemented.
if you like to play and test your moving OsmocomBB, you can check out
the "jolly/roaming" branch. it contains the extension to layer1, as well
as sim reader and fixes from "sylvain/testing" branch. use both "mobile"
and "layer1" firmware from this branch.
in order to see some process at VTY, you can do:
enable
monitor network 1 (continously display the strongest cell and neighbour
cells)
show ms 1 (to see current states)
show neighbour-cells 1 (to see a more detailed current list of
neighbours)
andreas
Hi,
in the osmocom bb mobile.cfg I don't see any posibility to set a fixed
Kc encryption key and the tmsi.
How could I achieve that osmocom uses my defined Kc and tmsi?
cheers,
Simian
hi josephli,
> Read stored BA list mnc=01
the mobile application stores the last cells and neighbour cells (band
allocation) of each network. this way the scanning is much
faster when restarting. because you use the SIM card with MNC == 02 the
first time, there is no band allocation stored for that. the mobile will
do a full scan in this case.
> while the sim card service I am tesing is actually with mnc 00 and 02.
i know that MNC == 0 will not work until i commited improvements of cell
selection process last sunday. you should retry that, but first try with
an MNC > 0.
can you provide debug output when trying a call?
also can you provide VTY output of "show ms" before you make the call?
regards,
andreas
hi,
i just fixed some locking issues the last days. fix will follow. it took
a bit longer, because there were some race conditions. it took up to
about one hour until it crashed. my way to detect the area where the
crash happened, was to turn on buzzer before that area, and turn it off
after that area. after many hours of approximation, i finally found out
that the major crash happend during _talloc_zero. (first it looks for a
free memory chunk, then it allocates it.) since it can be called from
all contexts (main, irq, fiq), it need to be locked against any
interrupt, otherwise the memory chunk can be assigned multiple times.
(the process of _talloc_free is "atomic" and requires no locking.)
because it seems pretty stable, i think it is time to merge some
branches into the master. (i made a 6 hours call yesterday. and no crash
after bugfix ever since.) i will do that together with sylvain, if we
find the time this weekend.
currently i use the jolly/voice together with the sylvain/traffic
branch. i am able to use an isdn phone togehter with linux-call-router
and make/receive calls. audio is passed both ways. i think this is a
stage where it actually become "usable". (if not moving arround.)
one of my major work for the next weeks/months will be the neighbour
cell measurement, cell re-selection, and handover. this is essential
when moving with the phone.
regards,
andreas
I've pulled git repo today, but the RSSI firmware gets an error.
apps/rssi/main.c: In function `main':
apps/rssi/main.c:896: warning: 'a' might be used uninitialized in this
function
apps/rssi/main.c:896: warning: 'e' might be used uninitialized in this
function
CC board/compal_e88/rssi.compalram.manifest.o
LD board/compal_e88/rssi.compalram.elf
OBJ board/compal_e88/rssi.compalram.bin
CC board/compal_e88/rssi.highram.manifest.o
LD board/compal_e88/rssi.highram.elf
OBJ board/compal_e88/rssi.highram.bin
CC board/compal_e88/rssi.e88loader.manifest.o
LD board/compal_e88/rssi.e88loader.elf
OBJ board/compal_e88/rssi.e88loader.bin
CC board/compal_e88/rssi.e88flash.manifest.o
LD board/compal_e88/rssi.e88flash.elf
OBJ board/compal_e88/rssi.e88flash.bin
CC board/compal_e86/rssi.compalram.manifest.o
LD board/compal_e86/rssi.compalram.elf
arm-elf-ld: region LRAM is full (board/compal_e86/rssi.compalram.elf
section .data)
make[1]: *** [board/compal_e86/rssi.compalram.elf] Error 1
make[1]: Leaving directory src/target/firmware'
make: *** [firmware] Error 2
$ git pull
Already up-to-date.
$
Anyone experiencing the same issue?
...a never ending story:
i have a working ftdi-ttl, but the cp2102-adapters
(http://www.ebay.de/itm/USB-2-0-to-UART-TTL-6PIN-Module-Serial-Converter-CP2…)
with the same cable dont work under ubuntu or windows.
if i rub the top of the 2.55mm with my finger random data appears. but the
loader doesnt upload the firmware.
i used the txd, rxd and gnd pins and checked the connections with a
multimeter.
i tested -m c123xor, -m c123 and the default firmware. flashing custom
baudrates was no problem.
rivers are installed correctly (stady ttyusb0 under ubuntu/ com1 under win).
is there any hint?
--
View this message in context: http://baseband-devel.722152.n3.nabble.com/cp2102-betemcu-B75937-tp3489336p…
Sent from the baseband-devel mailing list archive at Nabble.com.
Hi,
I've hacked something together to quickly test non-combined CCCH.
However, I've hit a problem when trying to receive anything on another
timeslot than 0.
The TX side seems to work fine as the BTS can see my location update
request and answers with a reject, but on the MS side, I never see the
reject and wireshark only shows invalid incohrent data on the RX.
The frames for SDCCH/8 show really nothing valid (looks like random
bytes), things like
09 80 7f 47 49 06 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09 00 47 d5 2d 06 1e 00 00 69 7c a0 91 3d 22 ff ab fe 6c 4f 56 4f 36
...
while the frames for the associated SAACH show at least something gsm-like :
03 03 01 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b
but that's not quite a SI5/6 ...
To RX/TX on TS=1, I just delayed the RX/TX window by 625 bits (4 *
156.25) when I'm in dedicated channel mode by chaning the 'start' in
l1s_tx_win_ctrl / l1s_rx_win_ctrl
Is there something else that should be done ?
Cheers,
Sylvain
Hi Sylvain, hi list!
I'm experimenting with burst_ind and TCHs right now and ran
into some problem I couldn't solve yet.
After receiving an Assignment Command for a hopping TCH/F I
call l1ctl_tx_dm_est_req_h1() with all necessary parameters
and tch_mode GSM48_CMODE_SPEECH_V1 or _EFR.
After that I do get burst indications containing the received
bits on up- and downlink for the active arfcn on each
consecutive frame number.
BUT the rx level measurements are most of the time very low
and sporadic higher, surely not from that nearby bts and the
very close cellphone.
It looks like the layer1 doesn't "hit" the right timeslot
on the right arfcn at the right time.
There are some possible sources of error leading to that, like
hopping parameters, channel number and MA list.
But I checked these and I took all of them directly from the
ASS CMD, the MA as word list in ascending order, like in layer23
IMM ASS handling.
The specific AC doesn't have any specialties like Starting Time
or "before time" parameters.
So my question is if there is some obvious pitfall I'm missing
and are there any suggestions how to debug that?
Regards,
Mad
Hi,
I am studying the GSM voice interception of airprobe,and want to port
to BB,using
the ccch_scan.c .the problem is that,
the airprobe is written by C++,and the BB is C;
I find the useful part of airport is
airprobe/gsm-receiver/src/lib/decoder/openbtsstuff,
and how to modify the makefile of BB to use the source of openbtsstuff?
Thanks!
i am trying to understand talloc* functions. in layer23 app. i want to know
what exact role they perform in these apps.
its ok about allocating memory and freeing them but logically why they are
used.
--
Akib Sayyed
Matrix-Shell
akibsayyed(a)gmail.com
akibsayyed(a)matrixshell.com
Mob:- +91-966-514-2243
Hi all!
This is the announcement for the next Osmocom Berlin meeting.
Jun 27, 8pm @ CCC Berlin, Marienstr. 11, 10113 Berlin
Nico will talk about SAP (SIM Access Profile) in osmocomBB.
If you are interested to show up, feel free to do so. There is no
registration required. The meeting is free as in "free beer", despite
no actual free beer being around.
Updates and the blog post can be found here[1].
Regards,
Holger
[1] http://openbsc.osmocom.org/trac/blog/osmug-20120627
i am trying to port mobile app on phone it self as a firmware but unable to
find out how exactly L1 on phone communicate with L2 L3 on pc.
please help me with that.
--
Akib Sayyed
Matrix-Shell
akibsayyed(a)gmail.com
akibsayyed(a)matrixshell.com
Mob:- +91-966-514-2243
i have been trying to load RSSI and run it. all went well. but after all of
sudden LCD went off tried to debug but didnt understand much.
here is log
OSMOCOM Loader (revision osmocon_v0.0.0-1347-g4f0acac)
======================================================================
Running on compal_e88 in environment compalram
Found flash of 2097152 bytes at 0x0 with 2 regions
fb_td014_init: initializing LCD.
//after above msg LCD is going off and firmware is giving output correct as
it was giving before
then i created custom program kept only board_init(); then compiled and
uploaded in phone and started but still same issue.
then fetched fresh git and tried to compile then also same issue.
steps taken to compile test.c
created folder test in target/firmware/apps/
added test in make file application list
renamed test.c to main.c
steps taken to load code in c118
./host/osmocon/osmoload memload 0x820000
./target/firmware/board/compal_e86/test.highram.bin
./host/osmocon/osmoload jump 0x820000
please help me with that
--
Akib Sayyed
Matrix-Shell
akibsayyed(a)gmail.com
akibsayyed(a)matrixshell.com
Mob:- +91-966-514-2243
A Motorola C155 is hooked up to my computer via a bus pirate as per the
official instructions, everything is properly wired and the phone seems to
work. However, Osmocon neither indicates the presence of any data being
sent or received when attempting to communicate with the phone; it just
idles. Is there any extra logic in the cable? Any help would be appreciated.
Hello everyone!
I got osmocom-bb running on a gta02 with a self-built Debian image.
osmocon-bb was compiled natively on the gta02. Everything works great using:
$ ./osmocon -i 13 -m romload -p /dev/ttySAC0 layer1.highram.bin
as described at:
http://bb.osmocom.org/trac/wiki/OpenMoko
It bugs me, however, that the proprietary openmoko 11 firmware is still
lingering in the baseband flash. So I would like to replace it
permanently with the osmocom-bb layer 1 firmware. That didn't work so far.
First, I attempted to use the FLUID binary to flash layer1.highram.bin.
The manual firmware update that is described at:
http://wiki.openmoko.org/wiki/Flashing_the_GSM_Firmware
suggests to use the FLUID binary from the package:
http://people.openmoko.org/joerg/calypso_moko_FW/fluid_0.0+svn20070817-r2_a…
I tried to run:
$ FLUID_PORT=/dev/ttySAC0 ./fluid.exe -oo -od13,13 -b 115200 -f
layer1.highram.bin
This gives me:
FLUID Revision 2.27, (23 Aug 2004). Copyright Texas Instruments, 2001-2004.
Reading image file:
'/usr/local/src/osmocom-bb/src/target/firmware/board/gta0x/layer1.highram.bin'WARNING:
Illegal hex line:
ERROR(55): File format/syntax error
I also played with the options but to no avail. So apparently fluid
expects the firmware image to be in a particular format.
Then I tried the osmoload utility. For that I started osmocon with:
$ ./osmocon -i 13 -l /tmp/osmocom_loader -m romload -p /dev/ttySAC0
loader.highram.bin
osmocon then says:
Sending Calypso romloader beacon...
On another console I then turned on the GSM device and tried to request
information about flash using:
$ ./osmoload -l /tmp/osmocom_loader finfo
This gives me:
Requesting flash layout info
Query timed out.
What am I doing wrong? Are there fundamental reasons why this cannot
work? Any hints would be much appreciated!
Thanks,
Arno
Hi all,
I have upated the wiki page at
http://openbsc.osmocom.org/trac/wiki/OsmoUserGroup/Berlin to indicate
the meeting dates for the next couple of months. So now it is clear
that even without any explicit separate announcement, we will be meeting
at the indicated date:
June 13, 2012
June 27, 2012
July 11, 2012
July 25, 2012
August 8, 2012
August 22, 2012
It had been requested to start a bit later (8pm instead of 7pm), and
from the next meeting onwards we will follow that request.
Looking forward to meeting you!
Regards,
Harald
--
- Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
(ETSI EN 300 175-7 Ch. A6)
Soory, but I don't know how,
anyone can give me some help?
--------- Original Message --------
Da: "Gabriele.rago" <gabriele.rago(a)email.it>
To: "baseband-devel(a)lists.osmocom.org"
<baseband-devel(a)lists.osmocom.org>
Oggetto: AT+CMMS command
Data: 18/06/12 00:16
Hello,
there is an AT command, AT+CMMS, wich description I report below:
"This command controls the continuity of SMS relay protocol link.
When feature is enabled (and supported by network) multiple messages
can besent much faster as link is kept open."
I tested this command on motorola E770 (UMTS) and really when I enable this
feature it is much faster in sending sms.
Is it possible to implent such feature in application "mobile" of
osmocom-bb project?
Hello,
there is an AT command, AT+CMMS, wich description I report below:
"This command controls the continuity of SMS relay protocol link.
When feature is enabled (and supported by network) multiple messages
can besent much faster as link is kept open."
I tested this command on motorola E770 (UMTS) and really when I enable this
feature it is much faster in sending sms.
Is it possible to implent such feature in application "mobile" of
osmocom-bb project?
i am trying to run ccch_scan on OpenBTS network. but problem i am facing if
i am running ccch_scan i cant see any IMM ASS.
but when i run ccch_scan from non burst_ind (testing branch) then it does
show IMM ASS.
is it problem with burst_ind .
--
Akib Sayyed
Matrix-Shell
akibsayyed(a)gmail.com
akibsayyed(a)matrixshell.com
Mob:- +91-966-514-2243
Hi lists,
I spend one day, finally solved it myself.
1) i checked the schematic of gta02 carefully, and found the PCF50633 use GPIO2(gsm_on)
to control the power of GSM actually, and it have a test point H-TP1706.
2) i disassembled my gta02, then line out the H-TP1706 to my oscilloscope, i found the
gsm_on signal always LOW 1s, and HIGH 4.2s, it's very strange.
3) i checked the service list, i found the fsogsmd (it's ogsmd?), maybe it's the background
program. but i can't kill it.
4) finally, i try to set "disable = 0" in /etc/frameworkd.conf, reboot, my god, it solved.
but the http://bb.osmocom.org/trac/wiki/OpenMoko only says:
“disable ogsmd, ousaged, ophoned via /etc/frameworkd.conf”
i always think "disable = 1" should DISABLE it.
but actually, "disable = 0" = DISABLE it; and "disable = 1" = ENABLE it? why
it misleaded me so long, anybody can change it? thanks.
Aegean
======= 2012-06-14 09:40:32 =======
>Dear lists,
>
> i want porting rssi and osmocon to GTA02, let them run on GTA02 stand-alone.
> then i'll try to write a program to decoding the received data.
>
> i already cross-compiled the latest osmocon to GTA02,
> then i disabled "ogsmd,ousaged and ophoned" in /etc/frameworkd.conf (actually, them are disabled default),
> and i commented "device_port and modem_access" in fsogsmd.conf to disable everything accessed to the modem,
> after rebooting, the "fuser /dev/ttySAC0" shows none.
>
> but when i use "./osmocon -i 13 -m romload -p /dev/ttySAC0 rssi.highram.bin", and
> "echo 0 > /sys/bus/platform/devices/gta02-pm-gsm.0/power_on && echo 1 > ..."
> /\ my SHR kernel use this device name for GSM power
> the osmocon always stalls about at the block 40, for example:
> ... ...
> Preparing block 39, block checksum is 0x4c
> handle_write_block(): 1024 bytes (1024/1024)
> handle_write_block(): Block 39 finished
> Received block ack from phone
> Preparing block 40, block checksum is 0xd5
> handle_write_block(): 1024 bytes (1024/1024)
> handle_write_block(): Block 40 finished
> and i found that the osmocon start to download codes before my "GSM power reset", very strange,
>
> i tried the latest "SHR-core 20120427" and "unstable SHR-lite 20110822",
> i searched the list log, found "Dave" encounter the same problem, but he solved it after "re-flashing of the phone"
> i re-flashed the GSM firmware to latest Moko11 (before it's Moko10), but it's the same.
>
> BTW, i found that it always shows '1' when "cat /sys/bus/platform/devices/gta02-pm-gsm.0/power_on"
> even after "echo 0 >/sys/bus/platform/devices/gta02-pm-gsm.0/power_on", what's wrong?
>
> anyone can help help me?
> thanks very much.
>
>Best Regards
>Aegean
>2012-06-13
>
= = = = = = = = = = = = = = = = = = = =
Best regards
Aegean Chou
aegean2000(a)21cn.com
2012-06-14
Dear lists,
i want porting rssi and osmocon to GTA02, let them run on GTA02 stand-alone.
then i'll try to write a program to decoding the received data.
i already cross-compiled the latest osmocon to GTA02,
then i disabled "ogsmd,ousaged and ophoned" in /etc/frameworkd.conf (actually, them are disabled default),
and i commented "device_port and modem_access" in fsogsmd.conf to disable everything accessed to the modem,
after rebooting, the "fuser /dev/ttySAC0" shows none.
but when i use "./osmocon -i 13 -m romload -p /dev/ttySAC0 rssi.highram.bin", and
"echo 0 > /sys/bus/platform/devices/gta02-pm-gsm.0/power_on && echo 1 > ..."
/\ my SHR kernel use this device name for GSM power
the osmocon always stalls about at the block 40, for example:
... ...
Preparing block 39, block checksum is 0x4c
handle_write_block(): 1024 bytes (1024/1024)
handle_write_block(): Block 39 finished
Received block ack from phone
Preparing block 40, block checksum is 0xd5
handle_write_block(): 1024 bytes (1024/1024)
handle_write_block(): Block 40 finished
and i found that the osmocon start to download codes before my "GSM power reset", very strange,
i tried the latest "SHR-core 20120427" and "unstable SHR-lite 20110822",
i searched the list log, found "Dave" encounter the same problem, but he solved it after "re-flashing of the phone"
i re-flashed the GSM firmware to latest Moko11 (before it's Moko10), but it's the same.
BTW, i found that it always shows '1' when "cat /sys/bus/platform/devices/gta02-pm-gsm.0/power_on"
even after "echo 0 >/sys/bus/platform/devices/gta02-pm-gsm.0/power_on", what's wrong?
anyone can help help me?
thanks very much.
Best Regards
Aegean
2012-06-13
I reused the local_burst_decode function to decrypt the bursts offline.
If I filter bi->flags & BI_FLG_SACCH, the sms decryption is working:
local_burst_decode(struct l1ctl_burst_ind *bi)
...
if (bid == -1)
return;
/* new */
if (bi->flags & BI_FLG_SACCH)
return;
...
--
View this message in context: http://baseband-devel.722152.n3.nabble.com/bug-in-local-burst-decode-of-bur…
Sent from the baseband-devel mailing list archive at Nabble.com.
Hi!
How can I to know the number phone of my SuperSIM to use it in OpenBSC?
I need to know for probe telephone calls in OpenBSC because in this SIMs I
can know IMSI to register in HLR.
BS,
Arturo Rivas.
Hi,
I am trying to use burst_ind branch of osmocom. I have noticed that layer23 creates bursts****.dat files when it indicates uplink. What data are written to these files and what should I use to see its data? Thank you.
hi,
i am studying the TCH ,and can get the channel discription from SACCH,
and My question is when I receive the ASS_CMD, I use l1ctl_tx_dm_est_req_h0
and jump to the new channel,but I can`t capture the TCH,why?
Thanks!