First OsmocomBB Connection Tests (Unsuccessful)

Hi all, I am trying to have some OsmocomBB communication and my procedure is following : 1) I start osmocon with layer1 sw : ./osmocon -p /dev/ttyUSB1 -m c123xor ../../target/firmware/board/compal_e88/layer1.compalram.bin It now waits for power on button from the phone 2) In the other terminal I start mobile application : ./mobile -i 127.0.0.1 Copyright (C) 2008-2010 ... Contributions by ... License GPLv2+: GNU GPL version 2 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. VTY available on port 4247. No Mobile Station defined, creating: MS '1' <000e> sim.c:1206 init SIM client <0005> gsm48_cc.c:61 init Call Control <0001> gsm48_rr.c:4944 init Radio Ressource process <0004> gsm48_mm.c:1220 init Mobility Management process <0004> gsm48_mm.c:971 Selecting PLMN SEARCH state, because no SIM. <0002> gsm322.c:3472 init PLMN process <0003> gsm322.c:3473 init Cell Selection process Mobile '1' initialized, please start phone now! 3) Now I press a "power-on" button on the phone and I have logs comming out on the both terminals. I guess that MS is doing various cell power measurements and trying to discass with near-by cells over controle channels. However, in ./osmocon terminal it finishes like this : $ ./osmocon -p /dev/ttyUSB1 -m c123xor ../../target/firmware/board/compal_e88/layer1.compalram.bin got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 81 . got 4 bytes from modem, data looks like: 1b f6 02 00 .... got 1 bytes from modem, data looks like: 41 A got 1 bytes from modem, data looks like: 01 . got 1 bytes from modem, data looks like: 40 @ Received PROMPT1 from phone, responding with CMD read_file(../../target/firmware/board/compal_e88/layer1.compalram.bin): file_size=47700, hdr_len=4, dnload_len=47707 got 1 bytes from modem, data looks like: 1b . got 1 bytes from modem, data looks like: f6 . got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 41 A got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 43 C Received PROMPT2 from phone, starting download handle_write(): 1023 bytes (1023/47707) handle_write(): 768 bytes (1791/47707) handle_write(): 768 bytes (2559/47707) handle_write(): 768 bytes (3327/47707) ... handle_write(): 768 bytes (44031/47707) handle_write(): 768 bytes (44799/47707) handle_write(): 768 bytes (45567/47707) handle_write(): 768 bytes (46335/47707) handle_write(): 768 bytes (47103/47707) handle_write(): 604 bytes (47707/47707) handle_write(): finished got 1 bytes from modem, data looks like: 1b . got 1 bytes from modem, data looks like: f6 . got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 41 A got 1 bytes from modem, data looks like: 03 . got 1 bytes from modem, data looks like: 42 B Received DOWNLOAD ACK from phone, your code is running now! OSMOCOM Layer 1 (revision osmocon_v0.0.0-884-gd76345a) ====================================================================== Device ID code: 0xb4fb Device Version code: 0x0000 ARM ID code: 0xfff3 cDSP ID code: 0x0128 Die ID code: 2c903414df039b3f ====================================================================== REG_DPLL=0x2413 CNTL_ARM_CLK=0xf0a1 CNTL_CLK=0xff91 CNTL_RST=0xfff3 CNTL_ARM_DIV=0xfff9 ====================================================================== THIS FIRMWARE WAS COMPILED WITHOUT TX SUPPORT!!! Assert DSP into Reset Releasing DSP from Reset Setting some dsp_api.ndb values Setting API NDB parameters DSP Download Status: 0x0001 DSP API Version: 0x0000 0x0000 Finishing download phase DSP Download Status: 0x0002 DSP API Version: 0x3606 0x0000 LOST 1201! L1CTL_RESET_REQ: FULL!L1CTL_PM_REQ start=0 end=124 PM MEAS: ARFCN=0, 32 dBm at baseband, -105 dBm at RF PM MEAS: ARFCN=0, 32 dBm at baseband, -105 dBm at RF ... PM MEAS: ARFCN=98, 36 dBm at baseband, -101 dBm at RF PM MEAS: ARFCN=99, 39 dBm at baseband, -98 dBm at RF PM MEAS: ARFCN=100, 31 dBm at baseband, -106 dBm at RF PM MEAS: ARFCN=101, 30 dBm at baseband, -107 dBm at RF PM MEAS: ARFCN=110, 36 dBm at baseband, -101 dBm at RF PM MEAS: ARFCN=111, 34 dBm at baseband, -103 dBm at RF PM MEAS: ARFCN=112, 31 dBm at baseband, -107 dBm at RF PM MEAS: ARFCN=113, 33 dBm at baseband, -104 dBm at RF ... L1CTL_PM_REQ start=955 end=1023 PM MEAS: ARFCN=955, 26 dBm at baseband, -111 dBm at RF PM MEAS: ARFCN=955, 26 dBm at baseband, -111 dBm at RF PM MEAS: ARFCN=956, 27 dBm at baseband, -110 dBm at RF PM MEAS: ARFCN=957, 26 dBm at baseband, -111 dBm at RF PM MEAS: ARFCN=958, 27 dBm at baseband, -110 dBm at RF PM MEAS: ARFCN=959, 25 dBm at baseband, -112 dBm at RF ... PM MEAS: ARFCN=1020, 37 dBm at baseband, -100 dBm at RF PM MEAS: ARFCN=1021, 41 dBm at baseband, -96 dBm at RF PM MEAS: ARFCN=1022, 31 dBm at baseband, -106 dBm at RF PM MEAS: ARFCN=1023, 42 dBm at baseband, -95 dBm at RF L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=121, flags=0x7) Starting FCCH RecognitionFB0 (1735:8): TOA= 9600, Power= -52dBm, Angle= 1218Hz FB1 (1745:8): TOA= 9563, Power= -52dBm, Angle= 174Hz fn_offset=1744 (fn=1745 + attempt=8 + ntdma = 7)m delay=9 (fn_offset=1744 + 11 - fn=1745 - 1 scheduling next FB/SB detection task with delay 9 =>FB @ FNR 1744 fn_offset=1744 qbits=3068 Synchronize_TDMA LOST 3054! What would this LOST 3054! say ? It does not sound good anyway, but at this point I am not skilled enough to read OsmocomBB logs. On the other side, in the ./mobile terminal I have something like this : <0002> gsm322.c:3099 (ms 1) Event 'EVENT_SWITCH_ON' for automatic PLMN selection in state 'A0 null' <000d> gsm322.c:1056 SIM is removed <0002> gsm322.c:1057 SIM is removed <0002> gsm322.c:512 new state 'A0 null' -> 'A6 no SIM inserted' <0003> gsm322.c:3319 (ms 1) Event 'EVENT_SWITCH_ON' for Cell selection in state 'C0 null' <0003> gsm322.c:2992 Switch on without SIM. <0003> gsm322.c:541 new state 'C0 null' -> 'C6 any cell selection' <0003> gsm322.c:2405 Getting PM for frequency 0 twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2416 Found signal (frequency 2 rxlev -105 (5)) <0003> gsm322.c:2416 Found signal (frequency 3 rxlev -106 (4)) <0003> gsm322.c:2416 Found signal (frequency 4 rxlev -86 (24)) <0003> gsm322.c:2416 Found signal (frequency 5 rxlev -68 (42)) <0003> gsm322.c:2416 Found signal (frequency 6 rxlev -86 (24)) ... <0003> gsm322.c:2405 Getting PM for frequency 512 twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2416 Found signal (frequency 512 rxlev -93 (17)) <0003> gsm322.c:2416 Found signal (frequency 516 rxlev -90 (20)) ... <0003> gsm322.c:2416 Found signal (frequency 1023 rxlev -95 (15)) <0003> gsm322.c:2349 Found 201 frequencies. <0003> gsm322.c:258 Sync to ARFCN=121 rxlev=-54 (No sysinfo yet, ccch mode NONE) <0002> gsm322.c:3099 (ms 1) Event 'EVENT_USER_RESEL' for automatic PLMN selection in state 'A6 no SIM inserted' Can somebody explain me what the hell is happening here ? I am watching all these nice Harald's presentations, like one here : http://www.youtube.com/watch?v=H7rNKZdASBE, but I am not obtaining list of cells like presented to which I can synchronize to. Actually, show cell is giving me : OsmocomBB> show cell 1 arfcn |MCC |MNC |LAC |cell ID|forb.LA|prio |min-db |max-pwr|rx-lev -------+-------+-------+-------+-------+-------+-------+-------+-------+------- OsmocomBB> As you can see, I am pretty much lost here and I would highly appreciate helping hand. Thanks and best regards, Drasko