- OpenBSC - lists.osmocom.org

THC hacked Vodafone UMTS Femto cell
by Benjamin Hagemann 14 Jul '11

14 Jul '11

hello, a friend pointed me to this news: "Hackers crack Vodafone's network, can listen to all calls" http://www.tecca.com/news/2011/07/13/hackers-crack-vodafones-network-can-li… so I jumped to the THC blog: http://thcorg.blogspot.com/2011/07/vodafone-hacked-root-password-published.… and THC wiki with more information about the FemtoMod, protocolls and so on: http://wiki.thc.org/vodafone have fun :) -- regards, benny gpg 0xFC505AB0 jabber benny(a)benny.de sip benny(a)benny.de

2 1

Licensing of the wiki
by Harald Welte 13 Jul '11

13 Jul '11

Hi all, so far we do not have any statement about the licensing of the content on our wiki. This means the default copyright rules apply: All the content is copyrighted, and nobody has any rgiht to reproduce it at all. I would like to propose an official license for the content in the wiki: Create Commons CC-BY-SA. The alternative would be to go for CC-BY-NC-SA, disallowing commercial use of the content. I'm not certain if NC is really what we want. After all, even somebody using OpenBSC in a commercial environment should be able to make copies of the reference documentation we have available - as long as he will releas the result again (which the SA part already covers). If the major contributors to the wiki would agree to a license, I would update the wiki accordingly. Thanks, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

3 3

NanoBTS reset
by Seungju Kim 12 Jul '11

12 Jul '11

Is there any other way to reset a NanoBTS without building a reset dongle? My NanoBTS is acting strangely after a segfault of OpenBSC. I can connect and beacon my network with the BTS but it won't enable data for some reason. It was working fine before. Now it says something like this <000d> input/ipaccess.c:696 accept()ed new OML link from 192.168.1.139 SET ATTR NACK CAUSE=Message cannot be performed <000d> input/ipaccess.c:758 accept()ed new RSL link from 192.168.1.139 The NanoBTS doesn't even make a connection to the SGSN when this happens. Thank you I want to kno if there is a way to reset the nanobts without making the reset dongle? ./ipaccess-config works at the moment.

3 2

Hardware required to setup an SGSN
by Naveen Kumar 12 Jul '11

12 Jul '11

I am trying to validate some functionality of a BSC that we have. The BSC will be connected via Gb interface(over E1) to an SGSN. What kind of hardware(processor/E1 card) would I need to support the SGSN ? I am mainly interested in testing ns/bssgp functionality. Thanks in advance. Naveen

3 2

Re: OpenBSC Digest, Vol 31, Issue 6
by Naveen Kumar 11 Jul '11

11 Jul '11

>> Can you provide some details about the BSC? Hans if you mean what brand this is a custom BSC that our company(Hughes) developed for a customer. This BSC is connected to a customer provided SGSN via 2 E1 links. Naveen

2 1

[PATCH 0/4] use standalone libtalloc instead of own copy
by pablo＠gnumonks.org 05 Jul '11

05 Jul '11

From: Pablo Neira Ayuso <pablo(a)gnumonks.org> Hi! With these patches, libosmocore, libosmo-sccp, openbsc and osmo-tetra does not use anymore our own copy of talloc and they rely on the standalone library that is provided by major distributors. The osmocom-bb part is still missing, my idea is to include a copy of libtalloc in the tree in the shared/ directory via rsync. This patch will follow later since we can still rely on the outdated copy of libosmocore. Please, apply.

2 5

[PATCH 0/2] libosmocore: logging and signal support for libraries
by pablo＠gnumonks.org 04 Jul '11

04 Jul '11

From: Pablo Neira Ayuso <pablo(a)gnumonks.org> Hi Harald! These are the two patches that I'm using to support signalling and logging in the libraries. The patch that adds the logging support reworks your previous contribution so we only keep the logging subsystem in libosmocore, instead of the full definition of the logging subsystem. See patches descriptions for further details. Let me know if you're OK with these changes. Pablo Neira Ayuso (2): signal: reserve signal subsystems >= 64 for libraries logging: rework definition of logging subsystems for libraries include/osmocom/core/logging.h | 22 ++++++-- include/osmocom/core/signal.h | 23 +++++++++ include/osmocom/gsm/gsm.h | 6 ++ src/gsm/Makefile.am | 2 +- src/gsm/init.c | 22 ++++++++ src/logging.c | 107 ++++++++++++++++++++++----------------- 6 files changed, 129 insertions(+), 53 deletions(-) create mode 100644 include/osmocom/gsm/gsm.h create mode 100644 src/gsm/init.c -- 1.7.2.5

2 4

Question about how to read / send SMS from an external program
by Kang-min Liu 03 Jul '11

03 Jul '11

Hi all, I have been working on a project involved using osmo-nitb and trying to read / send SMS by doing SQL queries directly hlr.sqlite3 in a perl program, but I cannot figure out the encode/decode process on the "user_data" field. From "sms_from_text" function in libmsc/gsm_04_11.c, it appears to me that the content of user_data is a gsm_7bit_encode-ed of text if the SMS is sent with VTY interface. I then tried to port gsm_7bit_decode to perl and the implementation successfully decoded two test strings in libosmocore/tests/sms/sms_test.c. However it does not successfully decode any SMS user_data record in hlr.sqlite3 to the original text. The result looks like just a piece of garbled text, not even close to any human-readable text at all. I also tried briefly to include gsm0338 decoding process, or some other perl-based implementation from CPAN, no success at all. I am currently out of ideas to try. It will be really appreciated if anyone with similar experience can offer insight to my issue here.

4 4

libosmocore / logging from within libraries
by Harald Welte 27 Jun '11

27 Jun '11

Hi! As more and more code is moving into libraries (like I just did with the LAPDm code, and like pablo is working on with libosmo-abis), we needed a solution how to allocate and use the LOGP subsystem constants like DRSL, DRR, ... from within libraries. The existing logging code wasn't really prepared for that. I've now come um with a hack to extend it while preserving compatibility to applications: * we use negative numbers starting from -1 for library-internal subsystems * those numbers get converted to a positive index into the various arrays at run-time. So -1 ends up one entry higher in the array than the last application-providede log category/subsystem. As part of this change, the array allocations are now dynamic, i.e there is no maximum limit for the number of log categories that an application can register with the core. Only for libraries (even outside libosmocore), we have compile-time registration, i.e. the 'struct log_info_cat' and the D* constant need to be defined inside libosmocore. I think this is an acceptable compromise. Furthermore, if LOGP()/DEBUGP() ever see a subsystem number that it doesn't know, it will assign it to the new 'DLGLOBAL' (Debug Library GLOBAL) category, i.e. there cna be no array overflows. This ensures that even an external library using a 'newer' D* constant will not crash or otherwise fail, it will simply log in a slightly different way. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

2 1

Complete test of a PDP Context activation process
by Guido Cilia 22 Jun '11

22 Jun '11

Hi everybody! I need to replicate in my private network the functionalities of an SGSN and a GGSN for academic purpose. I see the openGGSN project and I understand that it's composed by two components: sgsnemu and ggsn. What I want to ask to you is if I could test all the PDP Context activation process with these two components and how. This is the real (very semplified) process: Mobile Phone ---> SGSN ---> GGSN ---> SGSN ---> Mobile Phone (for a full description of the process see here<http://www.eventhelix.com/RealtimeMantra/Telecom/gprs_attach_pdp_sequence_d…> ) My suspicion, tell me if I'm wrong, is that sgsnemu component allow to test only this part of the complete process: SGSN ---> GGSN ---> SGSN (simulating the mobile terminal request but not really accepting it from an external module/device). Is it right? How could I test all the process? Consider that I could use a linux pc instead of a mobile phone. Thank you very much!!! -- Guido Cilia Web: http://www.guidocilia.it E-Mail: guidocx84(a)gmail.com Skype: guidocx84

2 1