Hi,
after receiving an E1 card, I tried (unsuccessfully) to get bsc_hack up and
running:
http://pbot.rmdir.de/19e2baa94ffedfdb814dce0a9346532e
After that, no new network can be found with a mobile phone.
bs11_config is reporting:
PHASE: 3 Normal MBCCU0: Load MBCCU1: Load Abis-link: Up
When bsc_hack is started, the following message appears a huge number
of times in the kernel log:
Mar 1 17:24:51 faui43g kernel: mISDN_send: error -12
and then sometimes messages like:
Mar 1 17:24:52 faui43g kernel: ph_data_indication 0x0 0x3 0x0
The kernel version is 2.6.27.19 (patched), but I also tried the newest git
tree from Linus with the same results.
I think the configuration of my BS-11 is somehow broken, as both TRX seem
to be enabled:
BS11 Power Amplifier 0 ATTRIBUTES:
TRX Power: 30mW (GSM)
BS11 Power Amplifier 1 ATTRIBUTES:
TRX Power: 30mW (GSM)
But running bs11_config delete-trx1 (or create-trx1) just produces
BS11 DELETE OBJECT NACK (respectively BS11 CREATE OBJECT NACK):
http://pbot.rmdir.de/53344f67ed0cb86f24c4a79f0af4fe2e
Trying to reset the standard configuration by deleting and recreating
all objects in create_objects() doesn't work, too:
http://pbot.rmdir.de/13e0b928689c0d527b13fa52698b9391
(Patch: http://pbot.rmdir.de/e549a8a52da6d389326e2e2891c2f289)
It seems to me, that I have to reset the BS-11 to the factory defaults
and recreate the configuration with bs11_config, but I don't know how
to do that (and if I need the firmware files for that...).
Did I miss something obvious, or is the configuration of my BS11 somehow
broken?
Thanks & Regards,
Michael
--
Michael Gernoth Department of Computer Science IV
Martensstrasse 1 D-91058 Erlangen Germany University of Erlangen-Nuremberg
http://www4.informatik.uni-erlangen.de/~gernoth/
Hey guys,
some month ago I added basic support to dump the LAPD frame we send and
receive. This code was disabled in Haralds restructuring of this layer in
order to add support for the IP Access nanoBTS.
The question is now should we repair or nuke this feature. Shortly after
having finished my implementation prom pointed me to the mISDNuser tool[1]. It
looks like this can write pcap files as well and that wireshark should be able
to handle them.
I would be happy if someone could try this tool and see what files are produced
and if we should continue this way or restore the "-p file" functionality.
thanks
z.
PS: Maybe we just need to move the pcap Linux-LAPD header over to this tool...
[1]
http://git.misdn.org/?p=mISDNuser.git;a=blob;f=debugtool/mISDNdebugtool.c;h…
Hi all!
Today I've just committed some code that stores incoming SMS in the SQL
table as soon as they are received. There is also more error handling right
now, i.e. if the SMS is sent to an unknown extension, it is rejected right
away.
What's still missing is the code to actually deliver the SMS from the SQL
table to the destination phone. For this, we need to
* decouple paging from voice calls
* correctly construct TPDU and RP/CP header from actual SMS payload
* trigger SMS delivery of pending messages at LOCATION UPDATING / IMSI ATT
* trigger SMS delivery once the MS tells us it has memory (SMMA)
* regularly iterate over undelivered SMS and try to send them
* decide how to handle SMS while a voice call is ongoing
If anyone has a good idea what to do about UCS2 encoded messages, I'm more
than happy to hear about it. My plan so far is to translate it to UTF-8 and
store it as UTF-8 in the SQL database. This way we have something that
most linux systems (and other tools) can deal with. Disadvantage is that we'd
end up translating a message back and forth...
Also, if somebody is more familiar with the 'regular' SMSC architecture in real
GSM networks, it would probably be good to think of a way how we can integrate
external SMS delivery both incoming and outgoing. SMS is much easier since it
is basically data/signalling only and there's no need to actually route
unstructured voice data like it is the case for regular phone calls.
--
- Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
(ETSI EN 300 175-7 Ch. A6)
Hello Everybody,
my E-1 link now seems to work correctly. at least I can see the LAPD
RR-PingPong on my analyzer.
First Problem:
I'm still having some problems with bs11_config, this happens with
create-trx1 and delete-trx1. If I remember right, this already have been
reported by somebody else. I first disconnected the BTS from the BSC
with 'bs11_config disconnect'.
openbsc:/svn/trunk/openbsc/src# ./bs11_config delete-trx1
bs11_config (C) 2009 by Harald Welte and Dieter Spaar
This is FREE SOFTWARE with ABSOLUTELY NO WARRANTY
LMT LOGON: ACK
PHASE: 2 Maintenance MBCCU0: No Load MBCCU1: Load
Abis-link: Down
Wed Mar 18 15:24:51 2009 <0020> abis_nm.c:689 BS11 DELETE OBJECT NACK
Wed Mar 18 15:24:51 2009 <0020> abis_nm.c:689 BS11 DELETE OBJECT NACK
LMT LOGOFF: ACK
(same for create-trx1).
~
Second problem:
openbsc:/svn/trunk/openbsc/src# ./bsc_hack -a -f 123
Allowing everyone?
DB: Database initialized.
DB: Database prepared.
1 device found
id: 0
Dprotocols: 00000018
Bprotocols: 0000000e
protocol: 4
nrbchan: 30
name: hfc-e1.1
activate bchan
bootstrapping OML
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=0)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=1) E1=(0,2,1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=2) E1=(0,2,2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=3)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=3) E1=(0,2,3)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=4)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=4) E1=(0,3,0)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=5)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=5) E1=(0,3,1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=6)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=6) E1=(0,3,2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=7)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=7) E1=(0,3,3)
bootstrapping RSL MCC=1 MNC=1
bootstrapping OML
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=0)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=1) E1=(0,2,1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=2) E1=(0,2,2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=3)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=3) E1=(0,2,3)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=4)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=4) E1=(0,3,0)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=5)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=5) E1=(0,3,1)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=6)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=6) E1=(0,3,2)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr
(bts=0,trx=0,ts=7)
Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF
Um=(bts=0,trx=0,ts=7) E1=(0,3,3)
(...)
'bsc_hack' hangs here, can't get more - even with verbose settings.
Sometimes I get something like a 'Failure Event' (can't remember excact
message) and 'RADIO ... DISABLED'. I don't have loggings of these, Sorry.
Have I missed something?
Best Regards,
Holger
Hello Harald,
On Mon, 23 Mar 2009 15:05:09 -0300, "Harald Welte" <laforge(a)gnumonks.org> wrote:
>
> yes, DELETE OBJECT is currently not working in bs11_config. I or somebody else
> with LMT (Dieter?) need to look at a LMT when deleting an object and compare
> the binary data with what bs11_config generates in order to check for differences
> and fix them.
I think the DELETE OBJECT message is fine, the problem is that an object
has to be locked before it can be deleted. This is how locking/unlocking
looks in LMT (its basically the CHG_ADM_STATE message):
; Lock BBSIG 1
Tx 69A50200010401
Rx 61A5020001040124010701071C0100
Rx 6AA50200010401
; Lock PA 1
Tx 69A50900010401
Rx 61A5090001040124010701071C0100
Rx 6AA50900010401
; Unlock PA 1
Tx 69A50900010402
Rx 61A5090001040224010701071C0100
Rx 6AA50900010402
; Unlock BBSIG 1
Tx 69A50200010402
Rx 61A5020001040224010701071C0100
Rx 6AA50200010402
After the object is locked, it can be deleted:
; Delete BBSIG 1
Tx ACA5020001
Rx ADA5020001
Please note that locking for deleting is enough, unlocking the deleted
object is of course not needed.
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hello everybody,
I would like to know whether it would be possible to obtain some information
about the cable connection. It is written on the website that the Y03 and
Y04 PCM are left open, but I can see on the photo
http://bs11-abis.gnumonks.org/trac/attachment/wiki/BS11_Configuration/bs11_…
that there is a twinax cable between them.
Am I wrong? If not, I would like to know what's the use of this connection.
Thanks a lot
Eric
Hello Holger,
On Thu, 19 Mar 2009 17:25:15 +0100, "Holger Adams" <holger(a)kernreaktor.org> wrote:
>
> I remember that one TRX wasn't ('No Load') loaded. Phase 3 was reached.
If this is the first one, it won't work because this is the one OpenBSC
uses in the moment. If it is not loaded you should switch off and on
the BS-11 and check if it works afterwards. On my BS-11 there seems
to be a temperature related problem which sometimes requires quite a
few restarts to get the first TRX loaded. Additionally it could be
that an attached RS232 cable disturbs the startup process.
All of the above is not 100% sure because its difficult to reproduce,
but maybe it helps to load the first TRX (if the second TRX is not
loaded this should be no problem to get OpenBSC running).
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hello Holger,
On Mon, 23 Mar 2009 09:13:00 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote:
>
> There are still some problems of getting the TRX started (sorry for keep
> bugging, but it doesn't make real fun to start developing without a
> working fundament).
I don't see a problem with the traces, what you receive is the "Channel
Load" Indication from the BS-11, OpenBSC advices the BS-11 to send this
report.
> I except of beeing 'DoSed' by various mobilephones lying around here, but
> nothing happens. I also can't see the 'OpenBSC-Test' provider on my
> mobilephones (manual network select).
A phone normally won't register to the test network as long as it reaches
the network stored on the SIM. You should see the network "001-01" if
you manually search for a network (it could also be "Test01" or similar),
but not the name 'OpenBSC-Test'.
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hello Holger,
On Thu, 19 Mar 2009 14:32:48 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote:
>
> The programm stucks at 'TX TEI(1): 10 1a 1e 06 0b 00 0b 06 1e 00 01 00 f1
> 10 00 01 28 ff' but continues playing LAPD-RR-Pingpong. Should I try to
> reflash the firmware? I also tried restarting 'openbsc' a few times.
>
Does bs11_config show that both TRX are loaded and that the BS-11 is in
Phase 3 ?
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hello Holger,
On Thu, 19 Mar 2009 11:02:05 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote:
>
> Sniffed Abis-Link (with K1103):
> http://www.kernreaktor.org/stuff/bs11-e1.txt
I am not familiar with the K1103. But if I don't misunderstand the traces,
everything should be fine. After the database has been sent to the BS-11,
you won't see any additional traffic on the E1 interface as long as there
is no phone registering to the BS-11 or you advice OpenBSC to send something
to the BS-11. You should now be able to see the network with a phone.
If you want to generate some E1 traffic without a phone, you can
press (or release) the instrusion switch, this should result in a report
sent from the BS-11. However I don't know how long the delay is between
actually changing the switch state and the resulting report.
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de