Hi,
after receiving an E1 card, I tried (unsuccessfully) to get bsc_hack up and
running:
http://pbot.rmdir.de/19e2baa94ffedfdb814dce0a9346532e
After that, no new network can be found with a mobile phone.
bs11_config is reporting:
PHASE: 3 Normal MBCCU0: Load MBCCU1: Load Abis-link: Up
When bsc_hack is started, the following message appears a huge number
of times in the kernel log:
Mar 1 17:24:51 faui43g kernel: mISDN_send: error -12
and then sometimes messages like:
Mar 1 17:24:52 faui43g kernel: ph_data_indication 0x0 0x3 0x0
The kernel version is 2.6.27.19 (patched), but I also tried the newest git
tree from Linus with the same results.
I think the configuration of my BS-11 is somehow broken, as both TRX seem
to be enabled:
BS11 Power Amplifier 0 ATTRIBUTES:
TRX Power: 30mW (GSM)
BS11 Power Amplifier 1 ATTRIBUTES:
TRX Power: 30mW (GSM)
But running bs11_config delete-trx1 (or create-trx1) just produces
BS11 DELETE OBJECT NACK (respectively BS11 CREATE OBJECT NACK):
http://pbot.rmdir.de/53344f67ed0cb86f24c4a79f0af4fe2e
Trying to reset the standard configuration by deleting and recreating
all objects in create_objects() doesn't work, too:
http://pbot.rmdir.de/13e0b928689c0d527b13fa52698b9391
(Patch: http://pbot.rmdir.de/e549a8a52da6d389326e2e2891c2f289)
It seems to me, that I have to reset the BS-11 to the factory defaults
and recreate the configuration with bs11_config, but I don't know how
to do that (and if I need the firmware files for that...).
Did I miss something obvious, or is the configuration of my BS11 somehow
broken?
Thanks & Regards,
Michael
--
Michael Gernoth Department of Computer Science IV
Martensstrasse 1 D-91058 Erlangen Germany University of Erlangen-Nuremberg
http://www4.informatik.uni-erlangen.de/~gernoth/
Hey guys,
some month ago I added basic support to dump the LAPD frame we send and
receive. This code was disabled in Haralds restructuring of this layer in
order to add support for the IP Access nanoBTS.
The question is now should we repair or nuke this feature. Shortly after
having finished my implementation prom pointed me to the mISDNuser tool[1]. It
looks like this can write pcap files as well and that wireshark should be able
to handle them.
I would be happy if someone could try this tool and see what files are produced
and if we should continue this way or restore the "-p file" functionality.
thanks
z.
PS: Maybe we just need to move the pcap Linux-LAPD header over to this tool...
[1]
http://git.misdn.org/?p=mISDNuser.git;a=blob;f=debugtool/mISDNdebugtool.c;h…
Hi all!
Today I've just committed some code that stores incoming SMS in the SQL
table as soon as they are received. There is also more error handling right
now, i.e. if the SMS is sent to an unknown extension, it is rejected right
away.
What's still missing is the code to actually deliver the SMS from the SQL
table to the destination phone. For this, we need to
* decouple paging from voice calls
* correctly construct TPDU and RP/CP header from actual SMS payload
* trigger SMS delivery of pending messages at LOCATION UPDATING / IMSI ATT
* trigger SMS delivery once the MS tells us it has memory (SMMA)
* regularly iterate over undelivered SMS and try to send them
* decide how to handle SMS while a voice call is ongoing
If anyone has a good idea what to do about UCS2 encoded messages, I'm more
than happy to hear about it. My plan so far is to translate it to UTF-8 and
store it as UTF-8 in the SQL database. This way we have something that
most linux systems (and other tools) can deal with. Disadvantage is that we'd
end up translating a message back and forth...
Also, if somebody is more familiar with the 'regular' SMSC architecture in real
GSM networks, it would probably be good to think of a way how we can integrate
external SMS delivery both incoming and outgoing. SMS is much easier since it
is basically data/signalling only and there's no need to actually route
unstructured voice data like it is the case for regular phone calls.
--
- Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
(ETSI EN 300 175-7 Ch. A6)
Hello Everybody,
my E-1 link now seems to work correctly. at least I can see the LAPD
RR-PingPong on my analyzer.
First Problem:
I'm still having some problems with bs11_config, this happens with
create-trx1 and delete-trx1. If I remember right, this already have been
reported by somebody else. I first disconnected the BTS from the BSC
with 'bs11_config disconnect'.
openbsc:/svn/trunk/openbsc/src# ./bs11_config delete-trx1
bs11_config (C) 2009 by Harald Welte and Dieter Spaar
This is FREE SOFTWARE with ABSOLUTELY NO WARRANTY
LMT LOGON: ACK
PHASE: 2 Maintenance MBCCU0: No Load MBCCU1: Load
Abis-link: Down
Wed Mar 18 15:24:51 2009 <0020> abis_nm.c:689 BS11 DELETE OBJECT NACK
Wed Mar 18 15:24:51 2009 <0020> abis_nm.c:689 BS11 DELETE OBJECT NACK
LMT LOGOFF: ACK
(same for create-trx1).
~
Second problem:
openbsc:/svn/trunk/openbsc/src# ./bsc_hack -a -f 123
Allowing everyone?
DB: Database initialized.
DB: Database prepared.
1 device found
id: 0
Dprotocols: 00000018
Bprotocols: 0000000e
protocol: 4
nrbchan: 30
name: hfc-e1.1
activate bchan
bootstrapping OML
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=0)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=1) E1=(0,2,1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=2) E1=(0,2,2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=3)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=3) E1=(0,2,3)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=4)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=4) E1=(0,3,0)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=5)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=5) E1=(0,3,1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=6)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=6) E1=(0,3,2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=7)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=7) E1=(0,3,3)
bootstrapping RSL MCC=1 MNC=1
bootstrapping OML
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=0)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=1) E1=(0,2,1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=2) E1=(0,2,2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=3)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=3) E1=(0,2,3)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=4)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=4) E1=(0,3,0)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=5)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=5) E1=(0,3,1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=6)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=6) E1=(0,3,2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=7)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=7) E1=(0,3,3)
(...)
'bsc_hack' hangs here, can't get more - even with verbose settings.
Sometimes I get something like a 'Failure Event' (can't remember excact
message) and 'RADIO ... DISABLED'. I don't have loggings of these, Sorry.
Have I missed something?
Best Regards,
Holger
Hello Harald,
On Mon, 23 Mar 2009 15:05:09 -0300, "Harald Welte" <laforge(a)gnumonks.org> wrote:
>
> yes, DELETE OBJECT is currently not working in bs11_config. I or somebody else
> with LMT (Dieter?) need to look at a LMT when deleting an object and compare
> the binary data with what bs11_config generates in order to check for differences
> and fix them.
I think the DELETE OBJECT message is fine, the problem is that an object
has to be locked before it can be deleted. This is how locking/unlocking
looks in LMT (its basically the CHG_ADM_STATE message):
; Lock BBSIG 1
Tx 69A50200010401
Rx 61A5020001040124010701071C0100
Rx 6AA50200010401
; Lock PA 1
Tx 69A50900010401
Rx 61A5090001040124010701071C0100
Rx 6AA50900010401
; Unlock PA 1
Tx 69A50900010402
Rx 61A5090001040224010701071C0100
Rx 6AA50900010402
; Unlock BBSIG 1
Tx 69A50200010402
Rx 61A5020001040224010701071C0100
Rx 6AA50200010402
After the object is locked, it can be deleted:
; Delete BBSIG 1
Tx ACA5020001
Rx ADA5020001
Please note that locking for deleting is enough, unlocking the deleted
object is of course not needed.
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hello everybody,
I would like to know whether it would be possible to obtain some information
about the cable connection. It is written on the website that the Y03 and
Y04 PCM are left open, but I can see on the photo
http://bs11-abis.gnumonks.org/trac/attachment/wiki/BS11_Configuration/bs11_…
that there is a twinax cable between them.
Am I wrong? If not, I would like to know what's the use of this connection.
Thanks a lot
Eric
Hello Holger,
On Thu, 19 Mar 2009 17:25:15 +0100, "Holger Adams" <holger(a)kernreaktor.org> wrote:
>
> I remember that one TRX wasn't ('No Load') loaded. Phase 3 was reached.
If this is the first one, it won't work because this is the one OpenBSC
uses in the moment. If it is not loaded you should switch off and on
the BS-11 and check if it works afterwards. On my BS-11 there seems
to be a temperature related problem which sometimes requires quite a
few restarts to get the first TRX loaded. Additionally it could be
that an attached RS232 cable disturbs the startup process.
All of the above is not 100% sure because its difficult to reproduce,
but maybe it helps to load the first TRX (if the second TRX is not
loaded this should be no problem to get OpenBSC running).
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hello Holger,
On Mon, 23 Mar 2009 09:13:00 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote:
>
> There are still some problems of getting the TRX started (sorry for keep
> bugging, but it doesn't make real fun to start developing without a
> working fundament).
I don't see a problem with the traces, what you receive is the "Channel
Load" Indication from the BS-11, OpenBSC advices the BS-11 to send this
report.
> I except of beeing 'DoSed' by various mobilephones lying around here, but
> nothing happens. I also can't see the 'OpenBSC-Test' provider on my
> mobilephones (manual network select).
A phone normally won't register to the test network as long as it reaches
the network stored on the SIM. You should see the network "001-01" if
you manually search for a network (it could also be "Test01" or similar),
but not the name 'OpenBSC-Test'.
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hello Holger,
On Thu, 19 Mar 2009 14:32:48 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote:
>
> The programm stucks at 'TX TEI(1): 10 1a 1e 06 0b 00 0b 06 1e 00 01 00 f1
> 10 00 01 28 ff' but continues playing LAPD-RR-Pingpong. Should I try to
> reflash the firmware? I also tried restarting 'openbsc' a few times.
>
Does bs11_config show that both TRX are loaded and that the BS-11 is in
Phase 3 ?
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hello Holger,
On Thu, 19 Mar 2009 11:02:05 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote:
>
> Sniffed Abis-Link (with K1103):
> http://www.kernreaktor.org/stuff/bs11-e1.txt
I am not familiar with the K1103. But if I don't misunderstand the traces,
everything should be fine. After the database has been sent to the BS-11,
you won't see any additional traffic on the E1 interface as long as there
is no phone registering to the BS-11 or you advice OpenBSC to send something
to the BS-11. You should now be able to see the network with a phone.
If you want to generate some E1 traffic without a phone, you can
press (or release) the instrusion switch, this should result in a report
sent from the BS-11. However I don't know how long the delay is between
actually changing the switch state and the resulting report.
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hi!
As one of our following steps in OpenBSC will be work on GPRS support,
I would be interested in any GPRS related protocol traces of the A-bis
interface or the Um interface. Particularly interesting obviosuly is
the registration and session setup/teardown.
So if anyone has such traces for GPRS, please don't hesitate to contact me.
The traces will not be publicized but just used as a reference and example for
the further development of OpenBSC.
Thanks in advance!
(yes, I'm still on holidays, but rather wrote that email immediately than to
put it on a TODO list and loose time and/or forget about it)
--
- Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
(ETSI EN 300 175-7 Ch. A6)
Hi,
i am staring at the sources right now, figuring out how openbsc uses
which part of misdn to send/receive frames over the e1 link. I think
it's doing something like this (please correct me if i am wrong:
- use timeslot 1 in hdlc mode for the signalling link
- use misdns layer 2 to handle the TEI assignment, etc
What i am wondering about is:
- which ETSI standard describs layer 2 for GSM abis?
Thanks a lot in advance for your feedback. :-)
Mit freundlichen Grüßen
--
best regards
Klaus-Peter Junghanns
--
Junghanns.NET Gesellschaft fuer Internet-Services & Software-Development
mbH
Breite Str. 13a
12167 Berlin
Germany
Geschaeftsfuehrer : Klaus-Peter Junghanns
Eingetragen beim Amtsgericht Charlottenburg, HRB 79169
Finanzamt fuer Koerperschaften III, Steuernummer 29/409/8978
Umsatzsteuernummer : DE 217621658
WEEE-Reg.-Nr. DE 86102730
Hello,
On Tue, 10 Mar 2009 15:24:00 +0100, "Klaus-Peter Junghanns" <kpj(a)junghanns.net> wrote:
>
> What i am wondering about is:
> - which ETSI standard describs layer 2 for GSM abis?
As far as I am aware, its LAPD as specified by ITU Q.920 and Q.921
(very similar if not equal to what is used in the "D"-channel of
ISDN).
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hello,
does anyone has access to a Racal 6103 ? I have bought a used
one and have some questions. Please drop me a note, private
email is fine. Thank you very much.
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hello everybody,
finally i found some time to unwrap my precious BS-11 and started
playing. Unfortuantely i did not get to far...
I managed to build the power cable, install the antenna, hook up
the serial cable to a debian box and install the openbsc software.
I followed the steps in the wiki, e.g. run "bs11_config -p /dev/ttyS0"
and then turn on the BS-11. The green power LED on the BS-11 is solid
green. But i do not get any output from the bs11_config (e.g. no
booting messages, etc). :-(
Sometimes bs11_config segfaults when i switch on the power to the BS-11:
bs11_config -p /dev/ttyS0
bs11_config (C) 2009 by Harald Welte and Dieter Spaar
This is FREE SOFTWARE with ABSOLUTELY NO WARRANTY
Invalid length in hdr: 0
Segmentation fault
The serial cable is connected to the serial port (1 of 4) which is
closest to the antenna connectors (like i have seen it on the photo).
What did i do wrong?
Thanks in advance for your help. :-)
Mit freundlichen Grüßen
--
best regards
Klaus-Peter Junghanns
--
Junghanns.NET Gesellschaft fuer Internet-Services & Software-Development
mbH
Breite Str. 13a
12167 Berlin
Germany
Geschaeftsfuehrer : Klaus-Peter Junghanns
Eingetragen beim Amtsgericht Charlottenburg, HRB 79169
Finanzamt fuer Koerperschaften III, Steuernummer 29/409/8978
Umsatzsteuernummer : DE 217621658
WEEE-Reg.-Nr. DE 86102730
Hello Holger,
On Sat, 28 Feb 2009 11:53:23 +0100, "Holger Adams" <holger(a)kernreaktor.org> wrote:
>
> Maybe its important to mention:
> - Both LEDs of the E-1 card are blinking red
> - Used cables for the RJ45 plug (CAT5): orange/blue
I can't help with Linux (I use Windows), however I noticed
this in mISDN (hfc_multi.c) a while ago:
case 1: /* HFC-E1 OEM */
/* 2 red blinking: NT mode deactivate
* 2 red steady: TE mode deactivate
* left green: L1 active
* left red: frame sync, but no L1
* right green: L2 active
*/
So I would guess that there is a synchronisation problem which is not
related to the TEI setting. Maybe there is something wrong with the
wire connection. If you can see the signal sent from the E1 card at
the BS-11 and there is also a signal sent from the BS-11, than probably
the signal from the BS-11 is not received by the E1 card so it could
not synchronize on it.
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hello Everybody,
I'm just trying to connect the E-1 host card to the BS-11, but I can't
get it work. The serial connection works fine, I'm also seeing the
"Abis-link: Restoring" message.
My hardware configuration:
1) I removed the green jumpers TB01 - TB04
2) Jumper settings below the Twinax-board: 1-4 ON, 5-8 OFF
3) HFC-E1: NT Mode, Config A (all jumpers on the left side to the left)
4) 'hfcmulti' modprobed with 'dslot=1'
5) Forced the BS-11 to use correct TEI and E1 slot by using 'bs11_config'
Have I missed something? I put a scope upon the rx/tx pins - traffic
flows into both directions, so I think there's no collision (tx->tx, rx->rx)
Thanks,
Holger