Hello All,
While testing DTMF facilities of OpenBSС I've discovered a couple of
bugs.
The first bug is generic to GSM TS 04.08, minor and is connected with
gsm0408_cc_msg_names variable
(gsm_04_08_utils.c). I've found that message names order is wrong: in
original source it is enumerated as
...
"unknown 0x3b",
"STATUS",
"unknown 0x3c"
"NOTIFY"
...
while it should be
...
"unknown 0x3b"
"unknown 0x3c"
"STATUS"
"NOTIFY"
...
thus faling to identify GSM 04.08 STATUS messages.
The second problem is connected with DTMF message sequence. According
to the GSM TS 04.08, DTMF
message flow is the following:
MS -----> START_DTMF
MNCC_START_DTMF_IND ----> MNCC
MNCC_START_DTMF_RSP <---- MNCC
MS <---- START_DTMF_ACK
MS ----> STOP_DTMF
MNCC_STOP_DTMF_IND ----> MNCC
MNCC_STOP_DTMF_RSP <---- MNCC
MS <---- STOP_DTMF_ACK
This is correct, but some mobile equipment (for example, my iPhone and
Nokia 6150) do not reply with
STOP_DTMF message; instead of this, they reply with STATUS message
(type 0x3D). This type of messages is
not processed within OpenBSC. Message is left unhandled in this state
and further DTMF transactions
become impossible because MNCC does not receive DTMF_STOP.
GSM standard says that STATUS message reports about some errors
occurred during transaction, but I
did not explore the message still, though, I can do that if it is
interesting for developers. I have no ideas why
some of my mobile phones behave wrong, while others work correctly.
I still don't know how to deal with STATUS messages properly, so I've
simply added processing entry to the
datastatelist[] variable in gsm_04_08.c which describes a call to
gsm48_cc_rx_stop_dtmf when received a
STATUS message.
It is incorrect, I know, but, however, temporary helps to process DTMF
messages with MS equipment which
have wrong DTMF sequence flow. Now it looks like this:
MS -----> START_DTMF
MNCC_START_DTMF_IND ----> MNCC
MNCC_START_DTMF_RSP <---- MNCC
MS <---- START_DTMF_ACK
MS ----> STATUS
MNCC_STOP_DTMF_IND ----> MNCC
MNCC_STOP_DTMF_RSP <---- MNCC
MS <---- STOP_DTMF_ACK
Sergey.
hi,
i just uploaded a new version of linux-call-router at
www.linux-call-router.de. this version is equal to the current git.
it has fixes, one is about conference creation and release. calls can
now be forwarded by joining conference during ringing state: "*3#" and
you may hang up, the party on hold will get transfered to the ringing
phone.
the major reason for a release is that OpenBSC main branch can be
compiled with LCR, without any patch.
hope you enjoy,
andreas
hi,
to connect multiple BS11 to one single E1 interface via cascade, a
special patch was required. now it is part of the mISDN GIT. (socket
branch)
use these module options:
modprobe hfcmulti dmask=0x00000042 bmask=0x0000003c,0x00000780
debug=0x40000
the dmask will give a dchannel mask for the first E1 interface. multiple
masks can be given for multiple E1 interfaces.
the dmask will have bit set for each dchanne. in the example we have two
bits set: slot 1 and slot 6.
the bmask will give a bchannel mask for each given dchannel bit:
for dchannel on slot 1 we use slot 2,3,4,5 for bchannel
for dchannel on slot 6 we use slot 7,8,9,10 for bchannel
the debug option displays initialization of E1 card on dmesg.
misdn_info:
Port 1 'hfc-e1.2-1': TE/NT-mode PRI E1 (for phone lines & E1
devices)
4 B-channels: 2-5
--------
Port 2 'hfc-e1.2-2': TE/NT-mode PRI E1 (for phone lines & E1
devices)
4 B-channels: 7-10
regards,
andreas
Hello Sergey,
On Mon, 31 Aug 2009 15:11:26 +0400, "Sergey V. Efimoff" <risky(a)mail.ru> wrote:
>
> What type of E1 adapter do you use? If you use an accurate clock source,
> Work and Set values should be similiar (I have Set Value 1024, Work value 1023,
> and I've used Nateks E1 SDH Mux with High-Stability Stratum oscillator when
> calibrating). See http://bs11-abis.gnumonks.org/trac/wiki/isdnsync
The observed difference of "Work Value 1104" and "Set Value 1082" should
be no problem. From my measurements a difference of about 100 of those
values means about 0.1 ppm. And 0.1 ppm is good enough that most phones
should see the BS-11 and the offical networks.
I guess there is some other problem, I would also check if bs11_config
shows that the TRX is loaded. And maybe start with a configuration file
which uses only one TRX.
Best regards,
Dieter
--
Dieter Spaar, Germany spaar(a)mirider.augusta.de
Hi,
we have some troubles finding the network on our cell-phones. There are
a lot of suspicious messages, we can't really make sense out of.
Example: bs11_config_query shows the following line:
BS11 Attributes" a line: E1 Channel: Port=255 Timeslot=161 Subslot=39
This looks completely broken (misparsed by bs11_config?)
Another issue are the Set- and Work-values of the Phase-Locked-Loop:
We synchronized it with the ISDN network (isdnsync) and it leveled off to
1104 for the Work-Value, Set-Value, however, is 1082. I suspect this is
ok and set-value is some informational value only (perhaps the value
of the last calibration?).
One more question about the radio carrier: On startup of bsc_hack we get
the following message:
OC=RADIO CARRIER(02) INST=(00,01,ff) STATE CHG: OP_STATE=Disabled AVAIL=In test(00)
Is this normal behaviour?
Apart from all this questions, does anyone have some more hints what we
should look at? We tried different cell phones, tried switching them off
and on, but without any success.
We're using the latest git version of openbsc.
Thank you for your help!
Martin
Hello Again,
So as my previous post mentioned, I recently acquired an Ericsson RBS 2401.
In looking through the configuration, it only allows for a T1 connection,
not an E1. The first issue I see with this is I haven't been able to find a
mISDN supported T1 card. I assume all of the BS-11 are E1, so I suppose T1
support has never come up. Not a coder myself, I'm not going to be a lot of
help in that department. But I can get a T1 card and hook this RBS up to a
Linux box and do any debugging that might help move things along. I'm open
to any suggestions. I know Harald was looking into getting traces for
Ericsson BSC <-> BTS traffic, so hopefully that will help as well.
Thanks again,
Caleb
Hello all,
I'm new to the list, and new to GSM testing, although I've worked with a
fair share of RF, Linux, and networks. I recently acquired an Ericsson RBS
2401 for testing. This is a 2 TRX BTS with a T1 interface. It works on the
GSM 1900 band, and puts out 300mw at full power. There will be another post
about getting started with that...
Onto the main purpose of this post..I have a contact who has 5 Ericsson RBS
2308's, which are the same as the unit Harald recently purchased. They are
probably a bit bigger than the BS-11, have 4 TRX, output about 2.5 watts,
have a T1 interface, and support EDGE. They are banded for GSM 1900. They
can be bought for a reasonable price, plus shipping from California.
Obviously OpenBSC doesn't support these at the moment, but hopefully support
will be added sometime in the future. These would be a great resource for
anyone in the US wanting to do testing, or overseas testers, if you're
willing to pay shipping. If you want more info on the unit itself, you can
download the manual Harald posted to the list earlier this month. If anyone
is interested, please contact me off list, and I will get you in contact
with the seller.
Thanks
Caleb
Hi all!
By mistake I deleted the password file for the wiki/trac earlier today, so
all of you will need new accounts
I used this opportunity to enable new account registration, i.e. everyone
can now create an account for themselves - you don't need to go through me
to do that anymore.
So sorry for the inconvenience to existing users, you will have to create
a new account using the 'register' tab on http://openbsc.gnumonks.org/
Regards,
--
- Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
(ETSI EN 300 175-7 Ch. A6)
