- OpenBSC - lists.osmocom.org

AW: Update on GSM network at 26C3
by Andreas.Eversberg 16 Dec '09

16 Dec '09

> Does it means that we won't be able to do OpenBTS experiments there? > We planned to test new USSD code in OpenBTS and it will be a shame to > cancel this plans. i think, if you don't transmit "too loud", i.e ranges lower than a few meters, no one would care. i use a leaky dummy load for testing.

2 1

somes problems running OpenBSC with nanoBTS (1800)
by Fabrice Ismael Poundeu Tchouatieu 13 Dec '09

13 Dec '09

Hye everyone, i'm trying to build a small GSM Network using OpenBSC and nanoBTS. After the start of bsc_hack, when i try to scanned the network with my mobile station, i do find the right network. But when i try to register into this network, i'm not coming through. It's the first time that i'm trying to used OpenBSC and i do not exactly known how it works. below, a part of the output coming out after the start of bsc_hack: <0002> gsm_04_08_utils.c:144 (bts 0 trx 0 ts 0 pd 05) Sending 0x18 to MS. DB: Failed to find the Subscriber. '0' '262##########' DB: Failed to find the Subscriber. '0' '262##########' DB: New Subscriber: ID 28, IMSI 262########## DB: Allocated extension 43234 for IMSI 262##########. <0001> abis_rsl.c:1377 channel=(bts=0,trx=0,ts=0) chan_nr=0x20 sapi=0 DATA INDICATION <0004> gsm_04_08.c:948 IDENTITY RESPONSE: mi_type=0x02 MI(35#############) DB: New Equipment: ID 124, IMEI 35############# DB: New EquipmentWatch: ID 124, IMSI 262##########, IMEI 35############# DB: Sync Equipment IMEI=35#############, classmark1=30 <0010> abis_rsl.c:1273 Activating ARFCN(514) TS(0) SS(1) lctype SDCCH chan_nr=0x28 r=LOCATION_UPDATE ra=0x10 <0010> abis_rsl.c:1088 channel=(bts=0,trx=0,ts=0) chan_nr=0x28 CHANNEL ACTIVATE ACK <0001> abis_rsl.c:1377 channel=(bts=0,trx=0,ts=0) chan_nr=0x28 sapi=0 ESTABLISH INDICATION <0004> gsm_04_08.c:1402 LOCATION UPDATING REQUEST: mi_type=0x04 MI(23########) type=NORMAL <0002> gsm_04_08.c:293 lchan (bts=0,trx=0,ts=0,ch=1) increases usage to: 1 <0002> gsm_04_08_utils.c:144 (bts 0 trx 0 ts 0 pd 05) Sending 0x18 to MS. DB: Found Subscriber: ID 28, IMSI 262############, NAME '', TMSI 42########, EXTEN '43234', LAC 0, AUTH 0 DBI: The requested variable type does not match what libdbi thinks it should be libdbi: dbi_result_get_int_idx: field `classmark1` is not integer type <0001> abis_rsl.c:1377 channel=(bts=0,trx=0,ts=0) chan_nr=0x20 sapi=0 DATA INDICATION <0004> gsm_04_08.c:948 IDENTITY RESPONSE: mi_type=0x02 MI(35#############) DB: Updated EquipmentWatch: ID 124, IMSI 262############, IMEI 35############# DB: Sync Equipment IMEI=35#############, classmark1=30, classmark2=13 25 , classmark3=13 25 <0010> abis_rsl.c:1273 Activating ARFCN(514) TS(0) SS(1) lctype SDCCH chan_nr=0x28 r=LOCATION_UPDATE ra=0x06 <0010> abis_rsl.c:1088 channel=(bts=0,trx=0,ts=0) chan_nr=0x28 CHANNEL ACTIVATE ACK <0001> abis_rsl.c:1377 channel=(bts=0,trx=0,ts=0) chan_nr=0x28 sapi=0 ESTABLISH INDICATION <0004> gsm_04_08.c:1402 LOCATION UPDATING REQUEST: mi_type=0x01 MI(262############) type=NORMAL <0002> gsm_04_08.c:293 lchan (bts=0,trx=0,ts=0,ch=1) increases usage to: 1 can someone please explains me if those outputs (about the Subscriber ID '28') are OK? Best regards; -- Fabrice Ismael Poundeu Tchouatieu ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

5 7

nanoBTS 900
by Axel Walsleben 08 Dec '09

08 Dec '09

Hi List, i am searching for a used or new nanoBTS. Best would be an 900Mhz Model, but i take 'everything' i can get. I tried the Haralds Contact, but from there i didn't get any response. It seems that they are not willing to sell anything. :( Regards Axel

1 0

ip.access BTS IML dissector for wireshark
by Jai Menon 07 Dec '09

07 Dec '09

Hi, Attached is a direct port of the IML dissector code from the ip.access code to wireshark SVN head with a few changes to make it work with the current API. This was done as part of Harald's GSM workout during FOSS.IN and he suggested I post it to this list. I haven't really tested this code since I dont have access to IML traces, but assuming the original code worked, this one should too. Hope this is possibly useful to someone :) -- Jai Menon

2 2

[PATCH] bugfix: additional functionality indicator only appears in TP_VPF_ENHANCED
by Steffen 'stefreak' Neubauer 06 Dec '09

06 Dec '09

The patch is attached ("bugfix"). You can simply merge the stefreak/trivia branch (but there is one more change in it, see the second patch attached. abis_nm.c was executable, that's a really trivial change). Greetings, Steffen

2 2

Re: Issues on initial setup with BS-11
by Dieter Spaar 06 Dec '09

06 Dec '09

Hello Paul, On Thu, 03 Dec 2009 17:51:45 +0000, "Paul Dolan" <paul(a)dolan.ie> wrote: > > Any other ideas/things to try/etc. would be greatly appreciated! Can you check the "PLL set" and "PLL work" values with bs11_config ? If the BS-11 is locked to the E1 clock, it could be that the clock of the BS-11 is too far away from the correct value so that a phone will only find the official networks but not the one of the BS-11. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

1 0

packet_gsm-ipa update patch
by Anand Raj Manickam 06 Dec '09

06 Dec '09

Hi , Please find the patch for packet_gsm-ipa.c attached . This patch updates few fields. Thanks, Anand

2 1

Re: Issues on initial setup with BS-11
by Dieter Spaar 06 Dec '09

06 Dec '09

Hello Paul, On Wed, 02 Dec 2009 22:36:53 +0000, s4dd(a)losers.yore.ma wrote: > Any help you guys could give is much appreciated! I think the problem is the "Invalid Channel Combination!!!" error message. Try to change "phys_chan_config" of timeslot 1 from "SDCCH8" to "TCH/F". From my understanding of verify_chan_comb() "SDCCH8" is not allowed on the same TRX that already has "CCCH+SDCCH4" so I wonder why it is set in the config file (this only applies to the BS11). Sorry, I don't have a ready BS11 configuration at hand right now, so I can't test it. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

6 10

Issues on initial setup with BS-11
by s4dd＠losers.yore.ma 06 Dec '09

06 Dec '09

Hello all, I seem to have fallen at the last hurdle to achieving my first milestone - being able to see an available network from our BS-11/OpenBSC combi on a variety of MEs. Fingers crossed it's something trivial that has been overlooked. I've included some output from bs11_config and bsc_hack below in the hope that someone may spot the issue. Output from bs11_config during bootup: PHASE: 1 Load SMU Intended Abis-link: Down PHASE: 1 Load SMU Intended Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: No Load MBCCU1: No Load Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load BTSCAC MBCCU1: No Load Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load BTSCAC MBCCU1: Load BTSCAC Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load BTSDRX MBCCU1: Load BTSCAC Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load BTSDRX MBCCU1: Load BTSDRX Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load BTSBBX MBCCU1: Load BTSDRX Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load BTSBBX MBCCU1: Load BTSBBX Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load BTSBBX MBCCU1: Load BTSBBX Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load BTSARC MBCCU1: Load BTSBBX Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load BTSARC MBCCU1: Load BTSARC Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load MBCCU1: Load BTSARC Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load MBCCU1: Load BTSARC Abis-link: Down PHASE: 2 Load MBCCU MBCCU0: Load MBCCU1: Load Abis-link: Down PHASE: 3 Normal MBCCU0: Load MBCCU1: Load Abis-link: Restoring BS11 ATTRIBUTES: SITE MANAGER ATTRIBUTES: E1 Channel: Port=0 Timeslot=1 (Full Slot) TEI: 25 BS11 Line Interface ATTRIBUTES: PLL Mode: E1 Locked BS11 CCLK ATTRIBUTES: BS11 Power Amplifier 0 ATTRIBUTES: TRX Power: 30mW (GSM) LMT LOGOFF: ACK ************************************************************ Output from bs11_config with query: LMT LOGON: ACK PHASE: 3 Normal MBCCU0: Load MBCCU1: Load Abis-link: Up BS11 ATTRIBUTES: SITE MANAGER ATTRIBUTES: E1 Channel: Port=0 Timeslot=1 (Full Slot) TEI: 25 BS11 Line Interface ATTRIBUTES: PLL Mode: Standalone BS11 CCLK ATTRIBUTES: BS11 Power Amplifier 0 ATTRIBUTES: TRX Power: 30mW (GSM) LMT LOGOFF: ACK ************************************************************ bsc_hack startup: DB: Database initialized. DB: Database prepared. e1_reconfig_bts(0) e1_reconfig_ts(0,0,0) e1_reconfig_ts(0,0,1) e1_reconfig_ts(0,0,2) e1_reconfig_ts(0,0,3) e1_reconfig_ts(0,0,4) e1_reconfig_ts(0,0,5) e1_reconfig_ts(0,0,6) e1_reconfig_ts(0,0,7) 1 device found id: 0 Dprotocols: 00000018 Bprotocols: 0000000e protocol: 4 nrbchan: 30 name: hfc-e1.1 activate bchan activate bchan bootstrapping OML for BTS 0 <0020> abis_nm.c:1724 Set BTS Attr (bts=0) <0020> abis_nm.c:1741 Set TRX Attr (bts=0,trx=0) <0020> abis_nm.c:1821 Set Chan Attr (bts=0,trx=0,ts=0) <0020> abis_nm.c:1821 Set Chan Attr (bts=0,trx=0,ts=1) <0020> abis_nm.c:1824 Invalid Channel Combination!!! <0020> abis_nm.c:1821 Set Chan Attr (bts=0,trx=0,ts=2) <0020> abis_nm.c:1704 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=2) E1=(0,2,2) <0020> abis_nm.c:1821 Set Chan Attr (bts=0,trx=0,ts=3) <0020> abis_nm.c:1704 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=3) E1=(0,2,3) <0020> abis_nm.c:1821 Set Chan Attr (bts=0,trx=0,ts=4) <0020> abis_nm.c:1704 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=4) E1=(0,3,0) <0020> abis_nm.c:1821 Set Chan Attr (bts=0,trx=0,ts=5) <0020> abis_nm.c:1704 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=5) E1=(0,3,1) <0020> abis_nm.c:1821 Set Chan Attr (bts=0,trx=0,ts=6) <0020> abis_nm.c:1704 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=6) E1=(0,3,2) <0020> abis_nm.c:1821 Set Chan Attr (bts=0,trx=0,ts=7) <0020> abis_nm.c:1704 CONNECT TERR TRAF Um=(bts=0,trx=0,ts=7) E1=(0,3,3) bootstrapping RSL for BTS/TRX (0/0) using MCC=1 MNC=1 BSIC=63 TSC=7 <0020> abis_nm.c:606 OC=RACK(a4) INST=(00,ff,ff) STATE CHG: OP_STATE=Enabled <0020> abis_nm.c:985 LMT Event LOGON Level=2 Username=FACTORY <0020> abis_nm.c:985 LMT Event LOGOFF Level=2 Username=FACTORY ************************************************************ bsc_hack config used was the vanilla cfg included with the source (openbsc.cfg.1-1). Any help you guys could give is much appreciated! Regards, Paul

2 3

Re: Issues on initial setup with BS-11
by Dieter Spaar 03 Dec '09

03 Dec '09

Hello David, On Thu, 3 Dec 2009 01:07:56 -0800, "David A. Burgess" <dburgess(a)jcis.net> wrote: > > I don't know if that's valid by the spec or not, but it's part of a > pretty standard configuration in IMSI-catchers: CCCH+SDCCH4 + > 6*SDCCH8 + TCH/F. That maximizes location updating capacity and > leaves one TCH/F for other ... mischief. Most of those IMSI-catchers > are based on commercial mini/nano-BTS equipment. Thanks for this input. I think this a limitation of the BS11 only, I have read that there are some limitations related to the SDCCH/8 of the BS11: - only one SDCCH/8 per TRX - not allowed together with SDCCH/4 on BCCH-TRX Maybe the BS11 does not have enough processing power to handle it ? Of course it could be that the documentation is wrong and it would work, I have not yet tried it. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

1 0