Hi,

is it technically possible to sniff the air traffic (for example with ccch_scan from the osmocombb burst_ind branch) and correlate the relationship between a burst and a paging request (which contains the tmsi of the mobile) ?

Basically: What are the steps to determine which tmsi (mobile) did which burst ?

Thank you for your information!

cheers,
Simian