OpenBSC March 2009

openbsc@lists.osmocom.org

9 participants
17 discussions

by Michael Gernoth

Hi, after receiving an E1 card, I tried (unsuccessfully) to get bsc_hack up and running: http://pbot.rmdir.de/19e2baa94ffedfdb814dce0a9346532e After that, no new network can be found with a mobile phone. bs11_config is reporting: PHASE: 3 Normal MBCCU0: Load MBCCU1: Load Abis-link: Up When bsc_hack is started, the following message appears a huge number of times in the kernel log: Mar 1 17:24:51 faui43g kernel: mISDN_send: error -12 and then sometimes messages like: Mar 1 17:24:52 faui43g kernel: ph_data_indication 0x0 0x3 0x0 The kernel version is 2.6.27.19 (patched), but I also tried the newest git tree from Linus with the same results. I think the configuration of my BS-11 is somehow broken, as both TRX seem to be enabled: BS11 Power Amplifier 0 ATTRIBUTES: TRX Power: 30mW (GSM) BS11 Power Amplifier 1 ATTRIBUTES: TRX Power: 30mW (GSM) But running bs11_config delete-trx1 (or create-trx1) just produces BS11 DELETE OBJECT NACK (respectively BS11 CREATE OBJECT NACK): http://pbot.rmdir.de/53344f67ed0cb86f24c4a79f0af4fe2e Trying to reset the standard configuration by deleting and recreating all objects in create_objects() doesn't work, too: http://pbot.rmdir.de/13e0b928689c0d527b13fa52698b9391 (Patch: http://pbot.rmdir.de/e549a8a52da6d389326e2e2891c2f289) It seems to me, that I have to reset the BS-11 to the factory defaults and recreate the configuration with bs11_config, but I don't know how to do that (and if I need the firmware files for that...). Did I miss something obvious, or is the configuration of my BS11 somehow broken? Thanks & Regards, Michael -- Michael Gernoth Department of Computer Science IV Martensstrasse 1 D-91058 Erlangen Germany University of Erlangen-Nuremberg http://www4.informatik.uni-erlangen.de/~gernoth/

16 years, 1 month

RequestForHelp on mISDNUser

by Holger Freyther

Hey guys, some month ago I added basic support to dump the LAPD frame we send and receive. This code was disabled in Haralds restructuring of this layer in order to add support for the IP Access nanoBTS. The question is now should we repair or nuke this feature. Shortly after having finished my implementation prom pointed me to the mISDNuser tool[1]. It looks like this can write pcap files as well and that wireshark should be able to handle them. I would be happy if someone could try this tool and see what files are produced and if we should continue this way or restore the "-p file" functionality. thanks z. PS: Maybe we just need to move the pcap Linux-LAPD header over to this tool... [1] http://git.misdn.org/?p=mISDNuser.git;a=blob;f=debugtool/mISDNdebugtool.c;h…

16 years, 1 month

SMS are now stored in SQL table

by Harald Welte

Hi all! Today I've just committed some code that stores incoming SMS in the SQL table as soon as they are received. There is also more error handling right now, i.e. if the SMS is sent to an unknown extension, it is rejected right away. What's still missing is the code to actually deliver the SMS from the SQL table to the destination phone. For this, we need to * decouple paging from voice calls * correctly construct TPDU and RP/CP header from actual SMS payload * trigger SMS delivery of pending messages at LOCATION UPDATING / IMSI ATT * trigger SMS delivery once the MS tells us it has memory (SMMA) * regularly iterate over undelivered SMS and try to send them * decide how to handle SMS while a voice call is ongoing If anyone has a good idea what to do about UCS2 encoded messages, I'm more than happy to hear about it. My plan so far is to translate it to UTF-8 and store it as UTF-8 in the SQL database. This way we have something that most linux systems (and other tools) can deal with. Disadvantage is that we'd end up translating a message back and forth... Also, if somebody is more familiar with the 'regular' SMSC architecture in real GSM networks, it would probably be good to think of a way how we can integrate external SMS delivery both incoming and outgoing. SMS is much easier since it is basically data/signalling only and there's no need to actually route unstructured voice data like it is the case for regular phone calls. -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

16 years, 1 month

Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Holger Adams

Hello Everybody, my E-1 link now seems to work correctly. at least I can see the LAPD RR-PingPong on my analyzer. First Problem: I'm still having some problems with bs11_config, this happens with create-trx1 and delete-trx1. If I remember right, this already have been reported by somebody else. I first disconnected the BTS from the BSC with 'bs11_config disconnect'. openbsc:/svn/trunk/openbsc/src# ./bs11_config delete-trx1 bs11_config (C) 2009 by Harald Welte and Dieter Spaar This is FREE SOFTWARE with ABSOLUTELY NO WARRANTY LMT LOGON: ACK PHASE: 2 Maintenance MBCCU0: No Load MBCCU1: Load Abis-link: Down Wed Mar 18 15:24:51 2009 <0020> abis_nm.c:689 BS11 DELETE OBJECT NACK Wed Mar 18 15:24:51 2009 <0020> abis_nm.c:689 BS11 DELETE OBJECT NACK LMT LOGOFF: ACK (same for create-trx1). ~ Second problem: openbsc:/svn/trunk/openbsc/src# ./bsc_hack -a -f 123 Allowing everyone? DB: Database initialized. DB: Database prepared. 1 device found id: 0 Dprotocols: 00000018 Bprotocols: 0000000e protocol: 4 nrbchan: 30 name: hfc-e1.1 activate bchan bootstrapping OML Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=0) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=1) E1=(0,2,1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=2) E1=(0,2,2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=3) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=3) E1=(0,2,3) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=4) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=4) E1=(0,3,0) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=5) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=5) E1=(0,3,1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=6) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=6) E1=(0,3,2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=7) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=7) E1=(0,3,3) bootstrapping RSL MCC=1 MNC=1 bootstrapping OML Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=0) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=1) E1=(0,2,1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=2) E1=(0,2,2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=3) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=3) E1=(0,2,3) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=4) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=4) E1=(0,3,0) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=5) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=5) E1=(0,3,1) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=6) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=6) E1=(0,3,2) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1405 Set Chan Attr (bts=0,trx=0,ts=7) Wed Mar 18 15:23:37 2009 <0020> abis_nm.c:1344 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=7) E1=(0,3,3) (...) 'bsc_hack' hangs here, can't get more - even with verbose settings. Sometimes I get something like a 'Failure Event' (can't remember excact message) and 'RADIO ... DISABLED'. I don't have loggings of these, Sorry. Have I missed something? Best Regards, Holger

16 years, 1 month

Re: Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Dieter Spaar

Hello Harald, On Mon, 23 Mar 2009 15:05:09 -0300, "Harald Welte" <laforge(a)gnumonks.org> wrote: > > yes, DELETE OBJECT is currently not working in bs11_config. I or somebody else > with LMT (Dieter?) need to look at a LMT when deleting an object and compare > the binary data with what bs11_config generates in order to check for differences > and fix them. I think the DELETE OBJECT message is fine, the problem is that an object has to be locked before it can be deleted. This is how locking/unlocking looks in LMT (its basically the CHG_ADM_STATE message): ; Lock BBSIG 1 Tx 69A50200010401 Rx 61A5020001040124010701071C0100 Rx 6AA50200010401 ; Lock PA 1 Tx 69A50900010401 Rx 61A5090001040124010701071C0100 Rx 6AA50900010401 ; Unlock PA 1 Tx 69A50900010402 Rx 61A5090001040224010701071C0100 Rx 6AA50900010402 ; Unlock BBSIG 1 Tx 69A50200010402 Rx 61A5020001040224010701071C0100 Rx 6AA50200010402 After the object is locked, it can be deleted: ; Delete BBSIG 1 Tx ACA5020001 Rx ADA5020001 Please note that locking for deleting is enough, unlocking the deleted object is of course not needed. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

16 years, 1 month

BTS connections

by Eric Cathelinaud

Hello everybody, I would like to know whether it would be possible to obtain some information about the cable connection. It is written on the website that the Y03 and Y04 PCM are left open, but I can see on the photo http://bs11-abis.gnumonks.org/trac/attachment/wiki/BS11_Configuration/bs11_… that there is a twinax cable between them. Am I wrong? If not, I would like to know what's the use of this connection. Thanks a lot Eric

16 years, 1 month

Re: Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Dieter Spaar

Hello Holger, On Thu, 19 Mar 2009 17:25:15 +0100, "Holger Adams" <holger(a)kernreaktor.org> wrote: > > I remember that one TRX wasn't ('No Load') loaded. Phase 3 was reached. If this is the first one, it won't work because this is the one OpenBSC uses in the moment. If it is not loaded you should switch off and on the BS-11 and check if it works afterwards. On my BS-11 there seems to be a temperature related problem which sometimes requires quite a few restarts to get the first TRX loaded. Additionally it could be that an attached RS232 cable disturbs the startup process. All of the above is not 100% sure because its difficult to reproduce, but maybe it helps to load the first TRX (if the second TRX is not loaded this should be no problem to get OpenBSC running). Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

16 years, 1 month

Re: Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Dieter Spaar

Hello Holger, On Mon, 23 Mar 2009 09:13:00 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote: > > There are still some problems of getting the TRX started (sorry for keep > bugging, but it doesn't make real fun to start developing without a > working fundament). I don't see a problem with the traces, what you receive is the "Channel Load" Indication from the BS-11, OpenBSC advices the BS-11 to send this report. > I except of beeing 'DoSed' by various mobilephones lying around here, but > nothing happens. I also can't see the 'OpenBSC-Test' provider on my > mobilephones (manual network select). A phone normally won't register to the test network as long as it reaches the network stored on the SIM. You should see the network "001-01" if you manually search for a network (it could also be "Test01" or similar), but not the name 'OpenBSC-Test'. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

16 years, 1 month

Re: Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Dieter Spaar

Hello Holger, On Thu, 19 Mar 2009 14:32:48 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote: > > The programm stucks at 'TX TEI(1): 10 1a 1e 06 0b 00 0b 06 1e 00 01 00 f1 > 10 00 01 28 ff' but continues playing LAPD-RR-Pingpong. Should I try to > reflash the firmware? I also tried restarting 'openbsc' a few times. > Does bs11_config show that both TRX are loaded and that the BS-11 is in Phase 3 ? Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

16 years, 1 month

Re: Problems with bs11_config ('BS11 DELETE OBJECT NACK') and bsc_hack

by Dieter Spaar

Hello Holger, On Thu, 19 Mar 2009 11:02:05 +0100 (CET), "Holger Adams" <holger(a)kernreaktor.org> wrote: > > Sniffed Abis-Link (with K1103): > http://www.kernreaktor.org/stuff/bs11-e1.txt I am not familiar with the K1103. But if I don't misunderstand the traces, everything should be fine. After the database has been sent to the BS-11, you won't see any additional traffic on the E1 interface as long as there is no phone registering to the BS-11 or you advice OpenBSC to send something to the BS-11. You should now be able to see the network with a phone. If you want to generate some E1 traffic without a phone, you can press (or release) the instrusion switch, this should result in a report sent from the BS-11. However I don't know how long the delay is between actually changing the switch state and the resulting report. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

16 years, 1 month

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

OpenBSC March 2009