OpenBSC

openbsc@lists.osmocom.org

6 participants
4179 discussions

Re: UMA a possibility in the future?
by Dieter Spaar 03 Aug '09

03 Aug '09

Hello Johannes, On Mon, 03 Aug 2009 22:56:08 +0200, "Johannes Schmitz" <jsemail(a)gmx.de> wrote: > > At this point I have got one general question, maybe also towards > Dieter: > How can A3/A8 be proprietary by any operator? How does international > roaming work then if there is no standardized algorithm? As far as I know for roaming the foreign network receives a RAND-Kc-SRES Triple from the home network so there is no need to know A3/A8 used by the other operator. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

1 0

UMA a possibility in the future?
by Dakota C 03 Aug '09

03 Aug '09

Hi, I'm a long time lurker into this project and I've wondered something for a bit of time.Knowing that we can use an ip.access nanoBTS to work on OpenBSC, why not adapt OpenBSC for UMA (unlicensed mobile access) standards? I know over here in the US we currently use UMA with T-Mobile over WiFi to communicate back to the T-Mobile servers and eventually off to the GSM and regular ol' networks. http://www.umatechnology.org/specifications/index.htm is the UMA specification, and to my knowledge T-Mobile US's @Home service uses the 1.0.3 protocol revision. To me it seems like it'd be trivial to make a derived copy of OpenBSC with UMA support up and running, but I'd like some other thoughts into this matter. I'm not a programmer by any means here, so if this is impossible, well, then so be it. -DC

3 5

Re: wireshark, viewing Abis communication
by Dieter Spaar 03 Aug '09

03 Aug '09

Hello Harald, On Mon, 3 Aug 2009 12:49:40 +0200, "Harald Welte" <laforge(a)gnumonks.org> wrote: > > I've been asking Dieter all the time to send patches that we can integrate. > However, nothing has been coming forward yet. Especially if we look at > nanoBTS-only and ignore the HFC-E1/BS11 stuff, it should be pretty easy, > most likely just some different header filee includes here and there. See my other post, basically only one function is missing. There might be issues with the "<linux/xxx>" header files included in mISDNif.h (I am not sure if this affects the current Cygwin version too, if yes, three dummy empty header files are good enough). The rest can be used "out of the box" (I had to create a "bootstrap.sh" file here, not sure how it is done in Linux, in some other projects "bootstrap.sh" seems to be included which runs the automake tools). Because of this I did not see any reason to post something (it might be too trivial and till now there was no real need). So this is preety much straightforward, at least for anyone with Linux experience. If you don't have any Linux experience, you have of course learn everything related to the GNU tools (GCC and so on). Then its most certainly easier to start with Linux, maybe with a "command-line" only version running in a Virtual Machine (which will most certainly work with the nanaoBTS too). Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

1 0

Re: UMA a possibility in the future?
by Dieter Spaar 03 Aug '09

03 Aug '09

Hello Johannes, On Mon, 3 Aug 2009 11:54:17 +0200, "Johannes Schmitz" <jsemail(a)gmx.de> wrote: > > I am thinking for some time now how this could be done. What i have seen so > far, is that A5 is open to the public so implementing it is no problem. But > A3/8 is secret so what is you idea of implementing it? Since it is inside > the SIM I don't see how it could be replaced. You might have a look here: http://lists.gnumonks.org/pipermail/openbsc/2009-July/000584.html Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

1 0

Re: wireshark, viewing Abis communication
by Dieter Spaar 03 Aug '09

03 Aug '09

Hello Nordin, On Mon, 03 Aug 2009 09:50:18 +0200, "Nordin" <bouchtaoui(a)gmail.com> wrote: > > If Dieter has a Windows variant of OpenBSC, it would be great. For me > now, it's still much easier to debug in windows than in Linux, because > I'm not yet comfortable with gdb in comman-line. Just as a clarification: I don't have a Windows variant of OpenBSC, I just compile it with Cygwin. Beside the installation of the required libraries (for the database) all what is needed is a minor modification for a missing function in vty.c (Cygwin does not have it, the following is taken from a Cygwin related posting). The Cygwin version works fine with the nanaoBTS. #if defined(__CYGWIN__) /* Workaround for Cygwin, which is missing cfmakeraw */ /* Pasted from man page; added in serial.c arbitrarily */ void cfmakeraw(struct termios *termios_p) { termios_p->c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP|INLCR|IGNCR|ICRNL|IXON); termios_p->c_oflag &= ~OPOST; termios_p->c_lflag &= ~(ECHO|ECHONL|ICANON|ISIG|IEXTEN); termios_p->c_cflag &= ~(CSIZE|PARENB); termios_p->c_cflag |= CS8; } #endif /* defined(__CYGWIN__) */ For the BS-11 I have a private, experimental modification which is not public, it requires a special Windows driver for the E1 card. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

1 0

Re: wireshark, viewing Abis communication
by Nordin 31 Jul '09

31 Jul '09

Hello Harald, Should the plugin you added for Wireshark decode almost all messages or not? Cause on the OML layer a lot of OML messages are not decoded, is this behaviour normal? I now try to follow the communication flow, but can't seem to understand the multiple OML messages. It starts with 0x00, than a datalen and than protocol (0xFF) and than it starts with 0x80, 0x80,.... But I can't find 0x80 (messagetype) in OpenBSC source. I've checked ipaccess.h and ipaccess.c, but nothing...maybe I lokked at the wrong place.

4 17

Re: How to attack mobile networks with an iPhone (according to Apple)
by Dieter Spaar 31 Jul '09

31 Jul '09

Hello David, On Wed, 29 Jul 2009 11:02:15 -0700, "David A. Burgess" <dburgess(a)jcis.net> wrote: > > So you can jailbreak an iPhone and get direct access to L3 to run a > DOS? That would be very interesting if it were true, but I suspect > it's just horseshit put in there to deceive the court, which isn't > hard to do in technology cases. I don't think its that easy (if it would be, why not modify the TSM30 instead which should be much easier). I just found it very interesting that Apple uses it as an argument. Of course such arguments are also bad for opening the phone GSM stack to a larger group of people (if this ever happens) or developing an open source GSM phone stack which could be used for anything else than research. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

4 4

Re: OpenBSC with 2.5G or 3G mobile devices support? / Tested Phones
by Dieter Spaar 29 Jul '09

29 Jul '09

Hello Nordin, On Tue, 07 Jul 2009 14:08:22 +0200, "Nordin" <bouchtaoui(a)gmail.com> wrote: > > I have good news now, I'm able to register to our bts manually. What I > did is download the latest openbsc sources and compiled the whole > project, that's it. I downloaded the project using git via port 80, I > posted a mail about that. So I guess the GPRS in the Rest Octets have > nothing to do, just the SIs were not complete. I'll analyze what went > wrong with the SIs. You don't mention which git branch you use, so its probably the master branch. If you look at the recent changes you will notice that the SYSTEM INFORMATION 3 and 4 rest octets are now set to the padding bytes which means they contain no information (which also means no GPRS). So this is the most important part where you have to look for differences. I can confirm that a HTC Touch Pro will not register to the BTS if the GPRS indication is set, it will register if it is not set. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

3 4

Re: Dummy load / direct wire connection concept
by Dieter Spaar 29 Jul '09

29 Jul '09

Hello Philipp, On Sun, 26 Jul 2009 21:43:22 +0200, "dexter" <zero-kelvin(a)gmx.de> wrote: > > I have no experience in those things, i never connected a sender and a > receiver directly for measurement proposes. I am afraid to damage BTS > and/or MS by trying the first solution. If you want to connect the BTS and an MS directly, you have to use an attenuator to reduce the signal to some "reasonable" level. To give you some numbers about "reasonable": The maximum RF output level of two different GSM tester which are intended for direct connection to an MS are -14 dBm for one of them and -40 dBm for the other. To be on the safe side I would make sure that the level is below -40 dBm, this is more than enough for good receiption (poor receiption is around -100 dBm). If the signal is too strong, you can damage the MS and/or BTS. Please note that I have not tried to connect a BTS and an MS yet, my experience comes from the GSM testers only. One problem I see with this approach is how to handle the separate RX and TX connectors of the BS-11. > What do you think, what would you do? How do you ensure that you do not > interfere with the with the official GSM networks? I think sometimes it > would be very nice to make 100% sure that no HF signals leave the desktop. I you can't make sure that no RF signal is emitted, you can at least try to cause as little trouble as possible: - use a GSM channel which is not used by an official network, make sure that there is at least one free guard channel in between the channel you use and the official channels. - set the power level of the BTS to its minimum (0.03 Watt for the BS-11) and set the NM_ATT_RF_MAXPOWR_R attribute to its maximum (6 for the BS-11). For the BS-11 the RF output level should then be around 1 dBm. - If you want to further reduce the BTS power, you can put an attenuator between antenna and TX output. - for the MS make sure that the power class is as low as possible when activatig a channel. - set the power for RACH access to a low level (in SYSTEM INFORMATION TYPE 3 and 4). - use an MCC and MNC which is not an official one. - only allow a know MS to register on your network. - To make sure that normal MSs won't be able to see your network, you can set the cell to "barred". However you then need a special MS to test, for example the Nokia Network Monitor allows to set the MS in a mode which allows to access barred cells. And with a special Test SIM it should be possible to access such a cell with other phones too (the "cell test" operation mode has to be enabled on the SIM). Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

2 1

How to attack mobile networks with an iPhone (according to Apple)
by Dieter Spaar 29 Jul '09

29 Jul '09

Hello, not sure if you already noticed this statement from Apple: http://www.wired.com/threatlevel/2009/07/jailbreak/ Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

OpenBSC