Sniff Tool Development offer for c118
Hello List, If any one on the list have time to take my assignment to develop tool to tune C118 to sniff it must be able to enter/input parameter with full signalling and voice support also tell me you development Fees and remuneration for this work. 1 ARFCN 2 TS ( time slot) 3 Hoping sequence I would like students or free time programmers to develop custom application for sniffing on c118 it should be cable for manually entries for (as option of command line) means the tool must be able to tune C118 in Mobile application mode( under full voice function) the desired parameter of user's choice 1 ARFCN 2 TS ( time slot) 3 Hoping sequence it is something we can tune C118 in full voice support to our own choice of AFRCN TS and hopping sequence we must be able to manually enter these parameter while MS is in mobile application mode( DSP in full voice support) I would like you to decide your remunerations /expanses/ development fees. http://bb.osmocom.org/trac/wiki/Sniffing Kind Regards, Maten On Mon, Apr 25, 2011 at 5:04 AM, Marten Christophe <technosabby@gmail.com> wrote:
Hello List,
I would like students or free time programmers to develop custom application for sniffing
it should be cable for manually entries for (as option of command line) means the tool must be able to tune C118 in Mobile application mode( under full voice function) the desired parameter of user's choice
1 ARFCN 2 TS ( time slot) 3 Hoping sequence
it is something we can tune C131 in full voice support to our own choice of AFRCN TS and hopping sequence we must be able to manually enter these parameter while MS is in mobile application mode( DSP in full voice support)
I would like you to decide your remunerations /expanses/ development fees.
http://bb.osmocom.org/trac/wiki/Sniffing
Kind Regards, Maten
========== ======== Hi,
Since a lot of people are asking the same questions and there seems to be a rush on the C123 on ebay I tought some clarification is needed.
Short version: - The exact tools I used on stage are _not_ and will _not_ be released (or sold ... several people asked ...) - Any one willing to re-code them without any apriori knowledge of GSM would most likely need months to read/understand both the specifications and the way the code works. (That's thousands of page of GSM spec and thousands of line of code) - Osmocom-BB project is not designed to be a sniffer, it's a baseband implementation, I just used part of it as a base.
So basically, unless you are really interested in GSM and are willing to dedicate time to understand it deeply and to contribute the various projects, there is not much point in you buying phones, or hanging out in the ml/irc or whatever ...
For those who are still reading and interested here's a little more detail:
* The HLR query step: -> Go watch the awesome 25C3 talk about it
* The TMSI recovering step - Won't be published - If you know how paging works, you know what to do anyway and it's trivial. Method is in the talk, there is nothing to it.
* The targeted sniffing application - Won't be published either - Some improvements to the layer23 app frame work will be done but these are generic framework stuff, not app-specific - Again, if you know how L2 works and have looked at several traces, it's obvious what to do. - The 'DSP' part of the sniffer is public for a while with a small demo app (single phone and doesn't exploit the full potential of the DSP patch) and it's perfectly sufficient to debug things on your o wn controlled network. (This is basically what I showed at Deepsec 2010).
* The tool to generate the input to Kraken - Won't be published either - Making the guesses is easy for anyone that knows what he's doing.
* The improved Kraken - No idea about it, see with Karsten / Sacha / Frank, I only got access to it 1 hour or so before the talk :)
* Conversion from burst to audio - This was a hacked software mostly with airprobe code. - The exact app will not be released but I'd like to see the capability put in some clean library we can re-use from airprobe and other application without having to multiply the code each time. - ... But since I'd like it to support AMR and viterbi softoutput before that happens, it could take some time. - Anyone familiar with GSM, airprobe and C could re-hack the same thing in an hour ...
As you can see, everything you need to analyze your own network / your own traffic, even at the burst level is already published and has been for more than a month. The other tools have been written only so that we could demonstrate that what we _say_ is possible for about year, we can now do it _practically_. It's apparently needed to get people attentions, "theoretical" attacks are not enough to get the operators / gsma to react. We'll see if that did it ...
A few advices that are always good:
- Make sure to checkout the a5/1 project ML and airprobe project ML and try to ask your questions in the proper mailing list as much as possible. - Check the wiki and mailing list archives toroughly before asking questions.
Cheers,
Sylvain Munaut
PS: I only posted on this list because it seems a lot of people were pointed here while in fact airprobe would probably be more appropriate to discuss attack scenarios and such, so make sure to answer / start new discussion on the right list.
Hi,
I would like you to decide your remunerations /expanses/ development fees.
Sure thing ... Take a standard chess board ( 8 x 8 ), place 1$ (USD) on the first case, then 2$ on the second, then 4$ on the third, etc ... (double for each case). Do this for all the cases on the chess board and then send that to me and I'll give you a sniffer. Cheers, Sylvain
I'm available to do the same as Sylvain except I take a starting value of 0.5€ EUR :D Cheers, Francisco On Tue, Apr 26, 2011 at 6:24 PM, Sylvain Munaut <246tnt@gmail.com> wrote:
Hi,
I would like you to decide your remunerations /expanses/ development fees.
Sure thing ...
Take a standard chess board ( 8 x 8 ), place 1$ (USD) on the first case, then 2$ on the second, then 4$ on the third, etc ... (double for each case). Do this for all the cases on the chess board and then send that to me and I'll give you a sniffer.
Cheers,
Sylvain
Hi Looking through the source I encountered something I did not entirely understand. In the l1ctl_proto.h header the struct l1ctl_fbsb_conf contains an initial_freq_err. Is there a particular reason for this initial error to be included? I did not find anything like unto it in the GSM specs. Ben
On 26.04.2011 19:39, Francisco Guerreiro wrote:
I'm available to do the same as Sylvain except I take a starting value of 0.5€ EUR :D
Will 0,5€ on the first, 0,25€ on the second, and 0,125€ on the third be okay for you as well? :P Regards, Steve
sure, if in the end you multiply by 10^64 :-) although I might take more time than Sylvain to do the code, so I happily accept just 33% of the money upfront :D would do wonders for my mortgage :/ Cheers, Francisco On Tue, Apr 26, 2011 at 7:25 PM, Steve Markgraf <steve@steve-m.de> wrote:
On 26.04.2011 19:39, Francisco Guerreiro wrote:
I'm available to do the same as Sylvain except I take a starting value of 0.5€ EUR :D
Will 0,5€ on the first, 0,25€ on the second, and 0,125€ on the third be okay for you as well? :P
Regards, Steve
Dear Mr Sylvain and Francisco, I have this money on an account in South Zimbabwe, unfortunately it's locked because my aunt's grandfather's uncle is dead, with no heir. I will happily give you 10% (TEN PERCENT) of this amount if you help me to buy gold bullions with it, then transfer them to my own account in Nigeria in a sealed briefcase. God Bless You Name..... Bank name...... Account Number..... Account Password (for transfer security)..... Phone number..... Sebastien On Tue, Apr 26, 2011 at 8:30 PM, Francisco Guerreiro <francisg@fnop.net>wrote:
sure, if in the end you multiply by 10^64 :-)
although I might take more time than Sylvain to do the code, so I happily accept just 33% of the money upfront :D
would do wonders for my mortgage :/
Cheers, Francisco
On Tue, Apr 26, 2011 at 7:25 PM, Steve Markgraf <steve@steve-m.de> wrote:
On 26.04.2011 19:39, Francisco Guerreiro wrote:
I'm available to do the same as Sylvain except I take a starting value of 0.5€ EUR :D
Will 0,5€ on the first, 0,25€ on the second, and 0,125€ on the third be okay for you as well? :P
Regards, Steve
On Tue, Apr 26, 2011 at 22:25, Steve Markgraf <steve@steve-m.de> wrote:
On 26.04.2011 19:39, Francisco Guerreiro wrote:
I'm available to do the same as Sylvain except I take a starting value of 0.5€ EUR :D
Will 0,5€ on the first, 0,25€ on the second, and 0,125€ on the third be okay for you as well? :P
The idea is not to take square, but to double ;) -- Regards, Alexander Chemeris.
Dear all on the List, I am really serious to get that sniff code developed, please tell me you fee for development, and reasonable fee that I must be able to pay I will give you guarantee that i will not use sniff code or any illegal purpose any where in the world nor disclose it to some one else if you want you can give it under strict license agreement. conditions: I will use it for my project for education broadcasting 2) I will not disclose or distribute to third party or entity or person. you can mention it to your license agreement. Kind Regards, Marten. On Tue, Apr 26, 2011 at 5:24 PM, Sylvain Munaut <246tnt@gmail.com> wrote:
Hi,
I would like you to decide your remunerations /expanses/ development fees.
Sure thing ...
Take a standard chess board ( 8 x 8 ), place 1$ (USD) on the first case, then 2$ on the second, then 4$ on the third, etc ... (double for each case). Do this for all the cases on the chess board and then send that to me and I'll give you a sniffer.
Cheers,
Sylvain
--------------------------------------------------------------------- To unsubscribe, e-mail: main-unsubscribe@lists.airprobe.org For additional commands, e-mail: main-help@lists.airprobe.org
what do you mean by "education broadcasting" ? I don't see an "educational" aproach to GSM interception aside from listening in on people's calls :-) also, if you are not going to use it illegally, why do you need it? i don't see any "legal" ways you could use it that you can't already use with the public code. I do see the profits for private investigators and other "security" industry folks ;) Cheers, Francisco On Tue, Apr 26, 2011 at 9:16 PM, Marten Christophe <technosabby@gmail.com>wrote:
Dear all on the List,
I am really serious to get that sniff code developed, please tell me you fee for development, and reasonable fee that I must be able to pay I will give you guarantee that i will not use sniff code or any illegal purpose any where in the world nor disclose it to some one else if you want you can give it under strict license agreement.
conditions: I will use it for my project for education broadcasting 2) I will not disclose or distribute to third party or entity or person.
you can mention it to your license agreement.
Kind Regards, Marten.
On Tue, Apr 26, 2011 at 5:24 PM, Sylvain Munaut <246tnt@gmail.com> wrote:
Hi,
I would like you to decide your remunerations /expanses/ development fees.
Sure thing ...
Take a standard chess board ( 8 x 8 ), place 1$ (USD) on the first case, then 2$ on the second, then 4$ on the third, etc ... (double for each case). Do this for all the cases on the chess board and then send that to me and I'll give you a sniffer.
Cheers,
Sylvain
--------------------------------------------------------------------- To unsubscribe, e-mail: main-unsubscribe@lists.airprobe.org For additional commands, e-mail: main-help@lists.airprobe.org
Hello Francisco, Pls read my mail archive in Sep and oct months on OsmocomBB mailling list http://lists.osmocom.org/pipermail/baseband-devel/2010-October/date.html one of the mail from that archive pls read ======Q======= Hello Mr. Nordin, So nice of you, thanks it worked perfectly. End Mr. Dieter , Thank you alot No need to tell me about MOC and MTC ,i searched internet and got plenty of understanding, well, i let me introduce you all my work here , i'm assosiated with a NGO, who works for education of poor children specially located to very remote sites of the devloping or under develop poor countries. and students, have travel long distance for there schooling , you wont belive that some of the villages are on mountain, end even childrens have cross rivers tgrogh rope , hanging on a spin roller , can you imagin the situation. and most of the student give up their education. My future plans are : Hence a top Tecchnelogical and Engineering instititute and a Local top IT and computer manafaturing company along with my NGO, are developing a $10 note book computer, just for edcational purpose , and will be distributed them for free .(60% bearing the local govt.) these notebooks will be install with their 6 moth curricular( one semester or term) all course material will be pre-installed. the fedaral goverments will also be helping in this purpose. who will ask local telecommunication athourities , to provide us,at least one ARFCN , without licensing fee, but there is no intrastucture for internet and in some villages no PSTN or mobile network available My planning here is to setup a USRP1( i have to write Matt Ettus to provide it on concessional price , cause it is for charity) based BTS , at each visnity of a village, which might cover near by villages also. I know, Timing Advance and power control will challenge for me, but i'll overcome the same , as far as RX part is concerned , it wont be a huge problem because one village is less then 1 KM redious , if USRP BTS installed in center. will install compal based hardware, within, notebook, pre-tuned it to a fix Time slot (TS), most of the traffic will be from BTS to MS , we will left only one or 2 TX slot , and will be share amoung all the students in token ring fashion ( let say there is 15 students are in one visnity if any on student want to ask any question to their remote teachers (mostly volunteers, or Govt add) located in NGO'S head office) all USRP's backbone pipe/link will be interconnected through RF links ( a Israel based company have very cheap solution for small bandwidth RF connectivity ) finally this backbone pipe/link will terminate at nearest city or place where Internet facility is available. and all the traffic will be routed to NGO's head quarter. so for this we need only 64 KB max bandwidth. that we can afford. thats it , by this we are able to provide secondary education even children are at their home. at first we thout to install a IP DSLAM but the price and copper cost (to provide line to each student is so high and out of budget) in future i can enable GPRS functionality of compal and might able to provide Internet access too, to them but we have to put higher bandwidth Backbone , so its not in my list now. Wish me luck. =========UQ======= On Tue, Apr 26, 2011 at 10:18 PM, Francisco Guerreiro <francisg@fnop.net> wrote:
what do you mean by "education broadcasting" ?
I don't see an "educational" aproach to GSM interception aside from listening in on people's calls :-)
also, if you are not going to use it illegally, why do you need it? i don't see any "legal" ways you could use it that you can't already use with the public code.
I do see the profits for private investigators and other "security" industry folks ;)
Cheers, Francisco
On Tue, Apr 26, 2011 at 9:16 PM, Marten Christophe <technosabby@gmail.com> wrote:
Dear all on the List,
I am really serious to get that sniff code developed, please tell me you fee for development, and reasonable fee that I must be able to pay I will give you guarantee that i will not use sniff code or any illegal purpose any where in the world nor disclose it to some one else if you want you can give it under strict license agreement.
conditions: I will use it for my project for education broadcasting 2) I will not disclose or distribute to third party or entity or person.
you can mention it to your license agreement.
Kind Regards, Marten.
On Tue, Apr 26, 2011 at 5:24 PM, Sylvain Munaut <246tnt@gmail.com> wrote:
Hi,
I would like you to decide your remunerations /expanses/ development fees.
Sure thing ...
Take a standard chess board ( 8 x 8 ), place 1$ (USD) on the first case, then 2$ on the second, then 4$ on the third, etc ... (double for each case). Do this for all the cases on the chess board and then send that to me and I'll give you a sniffer.
Cheers,
Sylvain
--------------------------------------------------------------------- To unsubscribe, e-mail: main-unsubscribe@lists.airprobe.org For additional commands, e-mail: main-help@lists.airprobe.org
Dear Marten, I have read your emails when you wrote them. they still do NOT explain why you need sniffing :-) if only you could explain in one setence what's your need for sniffing, that would be better than going on about poor children and NGO's :-) Cheers, Francisco On Tue, Apr 26, 2011 at 11:37 PM, Marten Christophe <technosabby@gmail.com>wrote:
Hello Francisco,
Pls read my mail archive in Sep and oct months on OsmocomBB mailling list
http://lists.osmocom.org/pipermail/baseband-devel/2010-October/date.html
one of the mail from that archive pls read ======Q======= Hello Mr. Nordin,
So nice of you, thanks it worked perfectly.
End Mr. Dieter , Thank you alot
No need to tell me about MOC and MTC ,i searched internet and got plenty of understanding,
well, i let me introduce you all my work here , i'm assosiated with a NGO, who works for education of poor children specially located to very remote sites of the devloping or under develop poor countries.
and students, have travel long distance for there schooling , you wont belive that some of the villages are on mountain, end even childrens have cross rivers tgrogh rope , hanging on a spin roller , can you imagin the situation.
and most of the student give up their education. My future plans are : Hence a top Tecchnelogical and Engineering instititute and a Local top IT and computer manafaturing company along with my NGO, are developing a $10 note book computer, just for edcational purpose , and will be distributed them for free .(60% bearing the local govt.) these notebooks will be install with their 6 moth curricular( one semester or term) all course material will be pre-installed. the fedaral goverments will also be helping in this purpose. who will ask local telecommunication athourities , to provide us,at least one ARFCN , without licensing fee,
but there is no intrastucture for internet and in some villages no PSTN or mobile network available
My planning here is to setup a USRP1( i have to write Matt Ettus to provide it on concessional price , cause it is for charity) based BTS , at each visnity of a village, which might cover near by villages also.
I know, Timing Advance and power control will challenge for me, but i'll overcome the same , as far as RX part is concerned , it wont be a huge problem because one village is less then 1 KM redious , if USRP BTS installed in center.
will install compal based hardware, within, notebook, pre-tuned it to a fix Time slot (TS), most of the traffic will be from BTS to MS , we will left only one or 2 TX slot , and will be share amoung all the students in token ring fashion ( let say there is 15 students are in one visnity if any on student want to ask any question to their remote teachers (mostly volunteers, or Govt add) located in NGO'S head office)
all USRP's backbone pipe/link will be interconnected through RF links ( a Israel based company have very cheap solution for small bandwidth RF connectivity ) finally this backbone pipe/link will terminate at nearest city or place where Internet facility is available. and all the traffic will be routed to NGO's head quarter.
so for this we need only 64 KB max bandwidth. that we can afford.
thats it , by this we are able to provide secondary education even children are at their home. at first we thout to install a IP DSLAM but the price and copper cost (to provide line to each student is so high and out of budget)
in future i can enable GPRS functionality of compal and might able to provide Internet access too, to them but we have to put higher bandwidth Backbone , so its not in my list now.
Wish me luck.
=========UQ=======
On Tue, Apr 26, 2011 at 10:18 PM, Francisco Guerreiro <francisg@fnop.net> wrote:
what do you mean by "education broadcasting" ?
I don't see an "educational" aproach to GSM interception aside from listening in on people's calls :-)
also, if you are not going to use it illegally, why do you need it? i don't see any "legal" ways you could use it that you can't already use with the public code.
I do see the profits for private investigators and other "security" industry folks ;)
Cheers, Francisco
On Tue, Apr 26, 2011 at 9:16 PM, Marten Christophe < technosabby@gmail.com> wrote:
Dear all on the List,
I am really serious to get that sniff code developed, please tell me you fee for development, and reasonable fee that I must be able to pay I will give you guarantee that i will not use sniff code or any illegal purpose any where in the world nor disclose it to some one else if you want you can give it under strict license agreement.
conditions: I will use it for my project for education broadcasting 2) I will not disclose or distribute to third party or entity or person.
you can mention it to your license agreement.
Kind Regards, Marten.
On Tue, Apr 26, 2011 at 5:24 PM, Sylvain Munaut <246tnt@gmail.com>
wrote:
Hi,
I would like you to decide your remunerations /expanses/ development fees.
Sure thing ...
Take a standard chess board ( 8 x 8 ), place 1$ (USD) on the first case, then 2$ on the second, then 4$ on the third, etc ... (double for each case). Do this for all the cases on the chess board and then send that to me and I'll give you a sniffer.
Cheers,
Sylvain
--------------------------------------------------------------------- To unsubscribe, e-mail: main-unsubscribe@lists.airprobe.org For additional commands, e-mail: main-help@lists.airprobe.org
Dear Francisco, I'm trying to make a cheap two way radio system using off the self Motorola phones and USRP while BTS is transmitting on an ARFCN and let say TS no. X with hopping sequence XYZ, now i want multiple c123 or c139 MS should be able to tune to the same ARFCN and the TS by this, only one teach would be broadcasting on 40 students, if any student have any query to teacher he will use corresponding TX channel to transmit his voice to his remote teacher , even in real class room scenario there used to be one student used to ask question to their teacher not all the class at the same time. benefit of this approach will be to use only single channel ( ARFCN+TS) for multiple students. not 40 channels for 40 MS so existing telcome will grant us that one dedicated channel for free but if i ask any telecom company to provide 40 dedicated channels they will refuse. I just want to tune c123 or c139 to my desired ARFCN, Time Slot, and Hopping sequence ( in signalling mode) , hence i can land all 40 ME to same traffic channel. and this is possible with sniff tool it is my understanding Hope this will clear my application. Kind Regards, Marten On Wed, Apr 27, 2011 at 5:30 AM, Francisco Guerreiro <francisg@fnop.net> wrote:
Dear Marten,
I have read your emails when you wrote them. they still do NOT explain why you need sniffing :-)
if only you could explain in one setence what's your need for sniffing, that would be better than going on about poor children and NGO's :-)
Cheers, Francisco
On Tue, Apr 26, 2011 at 11:37 PM, Marten Christophe <technosabby@gmail.com> wrote:
Hello Francisco,
Pls read my mail archive in Sep and oct months on OsmocomBB mailling list
http://lists.osmocom.org/pipermail/baseband-devel/2010-October/date.html
one of the mail from that archive pls read ======Q======= Hello Mr. Nordin,
So nice of you, thanks it worked perfectly.
End Mr. Dieter , Thank you alot
No need to tell me about MOC and MTC ,i searched internet and got plenty of understanding,
well, i let me introduce you all my work here , i'm assosiated with a NGO, who works for education of poor children specially located to very remote sites of the devloping or under develop poor countries.
and students, have travel long distance for there schooling , you wont belive that some of the villages are on mountain, end even childrens have cross rivers tgrogh rope , hanging on a spin roller , can you imagin the situation.
and most of the student give up their education. My future plans are : Hence a top Tecchnelogical and Engineering instititute and a Local top IT and computer manafaturing company along with my NGO, are developing a $10 note book computer, just for edcational purpose , and will be distributed them for free .(60% bearing the local govt.) these notebooks will be install with their 6 moth curricular( one semester or term) all course material will be pre-installed. the fedaral goverments will also be helping in this purpose. who will ask local telecommunication athourities , to provide us,at least one ARFCN , without licensing fee,
but there is no intrastucture for internet and in some villages no PSTN or mobile network available
My planning here is to setup a USRP1( i have to write Matt Ettus to provide it on concessional price , cause it is for charity) based BTS , at each visnity of a village, which might cover near by villages also.
I know, Timing Advance and power control will challenge for me, but i'll overcome the same , as far as RX part is concerned , it wont be a huge problem because one village is less then 1 KM redious , if USRP BTS installed in center.
will install compal based hardware, within, notebook, pre-tuned it to a fix Time slot (TS), most of the traffic will be from BTS to MS , we will left only one or 2 TX slot , and will be share amoung all the students in token ring fashion ( let say there is 15 students are in one visnity if any on student want to ask any question to their remote teachers (mostly volunteers, or Govt add) located in NGO'S head office)
all USRP's backbone pipe/link will be interconnected through RF links ( a Israel based company have very cheap solution for small bandwidth RF connectivity ) finally this backbone pipe/link will terminate at nearest city or place where Internet facility is available. and all the traffic will be routed to NGO's head quarter.
so for this we need only 64 KB max bandwidth. that we can afford.
thats it , by this we are able to provide secondary education even children are at their home. at first we thout to install a IP DSLAM but the price and copper cost (to provide line to each student is so high and out of budget)
in future i can enable GPRS functionality of compal and might able to provide Internet access too, to them but we have to put higher bandwidth Backbone , so its not in my list now.
Wish me luck.
=========UQ=======
On Tue, Apr 26, 2011 at 10:18 PM, Francisco Guerreiro <francisg@fnop.net> wrote:
what do you mean by "education broadcasting" ?
I don't see an "educational" aproach to GSM interception aside from listening in on people's calls :-)
also, if you are not going to use it illegally, why do you need it? i don't see any "legal" ways you could use it that you can't already use with the public code.
I do see the profits for private investigators and other "security" industry folks ;)
Cheers, Francisco
On Tue, Apr 26, 2011 at 9:16 PM, Marten Christophe <technosabby@gmail.com> wrote:
Dear all on the List,
I am really serious to get that sniff code developed, please tell me you fee for development, and reasonable fee that I must be able to pay I will give you guarantee that i will not use sniff code or any illegal purpose any where in the world nor disclose it to some one else if you want you can give it under strict license agreement.
conditions: I will use it for my project for education broadcasting 2) I will not disclose or distribute to third party or entity or person.
you can mention it to your license agreement.
Kind Regards, Marten.
On Tue, Apr 26, 2011 at 5:24 PM, Sylvain Munaut <246tnt@gmail.com> wrote:
Hi,
I would like you to decide your remunerations /expanses/ development fees.
Sure thing ...
Take a standard chess board ( 8 x 8 ), place 1$ (USD) on the first case, then 2$ on the second, then 4$ on the third, etc ... (double for each case). Do this for all the cases on the chess board and then send that to me and I'll give you a sniffer.
Cheers,
Sylvain
--------------------------------------------------------------------- To unsubscribe, e-mail: main-unsubscribe@lists.airprobe.org For additional commands, e-mail: main-help@lists.airprobe.org
Hi list, Is there any free time programmer or student who can takes-up my proposal Kind Regards, Maten On Wed, Apr 27, 2011 at 10:42 AM, Marten Christophe <technosabby@gmail.com> wrote:
Dear Francisco,
I'm trying to make a cheap two way radio system using off the self Motorola phones and USRP
while BTS is transmitting on an ARFCN and let say TS no. X with hopping sequence XYZ,
now i want multiple c123 or c139 MS should be able to tune to the same ARFCN and the TS by this, only one teach would be broadcasting on 40 students, if any student have any query to teacher he will use corresponding TX channel to transmit his voice to his remote teacher , even in real class room scenario there used to be one student used to ask question to their teacher not all the class at the same time.
benefit of this approach will be to use only single channel ( ARFCN+TS) for multiple students. not 40 channels for 40 MS so existing telcome will grant us that one dedicated channel for free but if i ask any telecom company to provide 40 dedicated channels they will refuse.
I just want to tune c123 or c139
to my desired ARFCN, Time Slot, and Hopping sequence ( in signalling mode) , hence i can land all 40 ME to same traffic channel. and this is possible with sniff tool it is my understanding
Hope this will clear my application.
Kind Regards, Marten
On Wed, Apr 27, 2011 at 5:30 AM, Francisco Guerreiro <francisg@fnop.net> wrote:
Dear Marten,
I have read your emails when you wrote them. they still do NOT explain why you need sniffing :-)
if only you could explain in one setence what's your need for sniffing, that would be better than going on about poor children and NGO's :-)
Cheers, Francisco
On Tue, Apr 26, 2011 at 11:37 PM, Marten Christophe <technosabby@gmail.com> wrote:
Hello Francisco,
Pls read my mail archive in Sep and oct months on OsmocomBB mailling list
http://lists.osmocom.org/pipermail/baseband-devel/2010-October/date.html
one of the mail from that archive pls read ======Q======= Hello Mr. Nordin,
So nice of you, thanks it worked perfectly.
End Mr. Dieter , Thank you alot
No need to tell me about MOC and MTC ,i searched internet and got plenty of understanding,
well, i let me introduce you all my work here , i'm assosiated with a NGO, who works for education of poor children specially located to very remote sites of the devloping or under develop poor countries.
and students, have travel long distance for there schooling , you wont belive that some of the villages are on mountain, end even childrens have cross rivers tgrogh rope , hanging on a spin roller , can you imagin the situation.
and most of the student give up their education. My future plans are : Hence a top Tecchnelogical and Engineering instititute and a Local top IT and computer manafaturing company along with my NGO, are developing a $10 note book computer, just for edcational purpose , and will be distributed them for free .(60% bearing the local govt.) these notebooks will be install with their 6 moth curricular( one semester or term) all course material will be pre-installed. the fedaral goverments will also be helping in this purpose. who will ask local telecommunication athourities , to provide us,at least one ARFCN , without licensing fee,
but there is no intrastucture for internet and in some villages no PSTN or mobile network available
My planning here is to setup a USRP1( i have to write Matt Ettus to provide it on concessional price , cause it is for charity) based BTS , at each visnity of a village, which might cover near by villages also.
I know, Timing Advance and power control will challenge for me, but i'll overcome the same , as far as RX part is concerned , it wont be a huge problem because one village is less then 1 KM redious , if USRP BTS installed in center.
will install compal based hardware, within, notebook, pre-tuned it to a fix Time slot (TS), most of the traffic will be from BTS to MS , we will left only one or 2 TX slot , and will be share amoung all the students in token ring fashion ( let say there is 15 students are in one visnity if any on student want to ask any question to their remote teachers (mostly volunteers, or Govt add) located in NGO'S head office)
all USRP's backbone pipe/link will be interconnected through RF links ( a Israel based company have very cheap solution for small bandwidth RF connectivity ) finally this backbone pipe/link will terminate at nearest city or place where Internet facility is available. and all the traffic will be routed to NGO's head quarter.
so for this we need only 64 KB max bandwidth. that we can afford.
thats it , by this we are able to provide secondary education even children are at their home. at first we thout to install a IP DSLAM but the price and copper cost (to provide line to each student is so high and out of budget)
in future i can enable GPRS functionality of compal and might able to provide Internet access too, to them but we have to put higher bandwidth Backbone , so its not in my list now.
Wish me luck.
=========UQ=======
On Tue, Apr 26, 2011 at 10:18 PM, Francisco Guerreiro <francisg@fnop.net> wrote:
what do you mean by "education broadcasting" ?
I don't see an "educational" aproach to GSM interception aside from listening in on people's calls :-)
also, if you are not going to use it illegally, why do you need it? i don't see any "legal" ways you could use it that you can't already use with the public code.
I do see the profits for private investigators and other "security" industry folks ;)
Cheers, Francisco
On Tue, Apr 26, 2011 at 9:16 PM, Marten Christophe <technosabby@gmail.com> wrote:
Dear all on the List,
I am really serious to get that sniff code developed, please tell me you fee for development, and reasonable fee that I must be able to pay I will give you guarantee that i will not use sniff code or any illegal purpose any where in the world nor disclose it to some one else if you want you can give it under strict license agreement.
conditions: I will use it for my project for education broadcasting 2) I will not disclose or distribute to third party or entity or person.
you can mention it to your license agreement.
Kind Regards, Marten.
On Tue, Apr 26, 2011 at 5:24 PM, Sylvain Munaut <246tnt@gmail.com> wrote:
Hi,
> I would like you to decide your remunerations /expanses/ development > fees.
Sure thing ...
Take a standard chess board ( 8 x 8 ), place 1$ (USD) on the first case, then 2$ on the second, then 4$ on the third, etc ... (double for each case). Do this for all the cases on the chess board and then send that to me and I'll give you a sniffer.
Cheers,
Sylvain
--------------------------------------------------------------------- To unsubscribe, e-mail: main-unsubscribe@lists.airprobe.org For additional commands, e-mail: main-help@lists.airprobe.org
participants (7)
-
Alexander Chemeris -
Francisco Guerreiro -
Marten Christophe -
Steve Markgraf -
Sylvain Munaut -
Sébastien Lorquet -
weberbe＠ee.ethz.ch