OpenBSC

openbsc@lists.osmocom.org

13 participants
4246 discussions

Motorola V3 Force ARFCN
by Caleb Pal 14 Sep '09

14 Sep '09

Hello, While experimenting with a Motorola V3 GSM branded for AT&T, I enabled the Engineering Menu with a SEEM edit. Not a terribly hard procedure once you know where to look. After performing this hack, I looked in the Engineering Menu, and there is an option to force the ARFCN the phone camps on. I think this would be a useful tool if you want to force a handset to camp on your Base Station. I'm not if it will help with the clock issues, but it might alleviate some frustration. The Original V3's (no 3G) can be found on ebay for a decent price. I'm not sure if any other phones include this functionality (I haven't come across any), so I thought I would share it with you all. If you need help performing the SEEM edit, let me know. Caleb

2 1

AW: new release of LCR (linux-call-router)
by Andreas.Eversberg 12 Sep '09

12 Sep '09

hi harald, >Of course this will mean that we need to develop the RTP-to-MNCC integration, since nanoBTS voice channels arrive on RTP. I am willing to look into this, but I presume you also have a big interest in that (and maybe more time?). i am interested having RTP audio available to MNCC interface as well. the audio stream (frames) should be equal for BS11 and nanoBTS, so both streams work for MNCC interface without different handling on the application side. for this i would like to cross-convert the frame coding of BS11 to the actual gsm format inside OpenBSC instead of just forwarding the TRAU frame format. if the TRAU frame is converted inside OpenBSC, calls from BS11 to nanoBTS would also be possible. >Since I now own more nanoBTS, I could send you one for 1-2 months of development of that code. Are you interested in this? yes, i am. this way it is easier to run some tests. regards, andreas

2 1

DTMF processing errors
by Sergey V. Efimoff 12 Sep '09

12 Sep '09

Hello All, While testing DTMF facilities of OpenBSС I've discovered a couple of bugs. The first bug is generic to GSM TS 04.08, minor and is connected with gsm0408_cc_msg_names variable (gsm_04_08_utils.c). I've found that message names order is wrong: in original source it is enumerated as ... "unknown 0x3b", "STATUS", "unknown 0x3c" "NOTIFY" ... while it should be ... "unknown 0x3b" "unknown 0x3c" "STATUS" "NOTIFY" ... thus faling to identify GSM 04.08 STATUS messages. The second problem is connected with DTMF message sequence. According to the GSM TS 04.08, DTMF message flow is the following: MS -----> START_DTMF MNCC_START_DTMF_IND ----> MNCC MNCC_START_DTMF_RSP <---- MNCC MS <---- START_DTMF_ACK MS ----> STOP_DTMF MNCC_STOP_DTMF_IND ----> MNCC MNCC_STOP_DTMF_RSP <---- MNCC MS <---- STOP_DTMF_ACK This is correct, but some mobile equipment (for example, my iPhone and Nokia 6150) do not reply with STOP_DTMF message; instead of this, they reply with STATUS message (type 0x3D). This type of messages is not processed within OpenBSC. Message is left unhandled in this state and further DTMF transactions become impossible because MNCC does not receive DTMF_STOP. GSM standard says that STATUS message reports about some errors occurred during transaction, but I did not explore the message still, though, I can do that if it is interesting for developers. I have no ideas why some of my mobile phones behave wrong, while others work correctly. I still don't know how to deal with STATUS messages properly, so I've simply added processing entry to the datastatelist[] variable in gsm_04_08.c which describes a call to gsm48_cc_rx_stop_dtmf when received a STATUS message. It is incorrect, I know, but, however, temporary helps to process DTMF messages with MS equipment which have wrong DTMF sequence flow. Now it looks like this: MS -----> START_DTMF MNCC_START_DTMF_IND ----> MNCC MNCC_START_DTMF_RSP <---- MNCC MS <---- START_DTMF_ACK MS ----> STATUS MNCC_STOP_DTMF_IND ----> MNCC MNCC_STOP_DTMF_RSP <---- MNCC MS <---- STOP_DTMF_ACK Sergey.

2 1

Siemens born nanoBTS
by WoMax 09 Sep '09

09 Sep '09

I got a few Siemens born nanoBTS, this is OEM from ip.access for project MOGIS. They are new in box. Details on http://umts.zerber.us

1 0

new release of LCR (linux-call-router)
by Andreas.Eversberg 07 Sep '09

07 Sep '09

hi, i just uploaded a new version of linux-call-router at www.linux-call-router.de. this version is equal to the current git. it has fixes, one is about conference creation and release. calls can now be forwarded by joining conference during ringing state: "*3#" and you may hang up, the party on hold will get transfered to the ringing phone. the major reason for a release is that OpenBSC main branch can be compiled with LCR, without any patch. hope you enjoy, andreas

3 2

fragmentation of E1 interfaces
by Andreas.Eversberg 06 Sep '09

06 Sep '09

hi, to connect multiple BS11 to one single E1 interface via cascade, a special patch was required. now it is part of the mISDN GIT. (socket branch) use these module options: modprobe hfcmulti dmask=0x00000042 bmask=0x0000003c,0x00000780 debug=0x40000 the dmask will give a dchannel mask for the first E1 interface. multiple masks can be given for multiple E1 interfaces. the dmask will have bit set for each dchanne. in the example we have two bits set: slot 1 and slot 6. the bmask will give a bchannel mask for each given dchannel bit: for dchannel on slot 1 we use slot 2,3,4,5 for bchannel for dchannel on slot 6 we use slot 7,8,9,10 for bchannel the debug option displays initialization of E1 card on dmesg. misdn_info: Port 1 'hfc-e1.2-1': TE/NT-mode PRI E1 (for phone lines & E1 devices) 4 B-channels: 2-5 -------- Port 2 'hfc-e1.2-2': TE/NT-mode PRI E1 (for phone lines & E1 devices) 4 B-channels: 7-10 regards, andreas

1 0

Re: Some questions about OpenBSC / BS-11
by Dieter Spaar 31 Aug '09

31 Aug '09

Hello Sergey, On Mon, 31 Aug 2009 15:11:26 +0400, "Sergey V. Efimoff" <risky(a)mail.ru> wrote: > > What type of E1 adapter do you use? If you use an accurate clock source, > Work and Set values should be similiar (I have Set Value 1024, Work value 1023, > and I've used Nateks E1 SDH Mux with High-Stability Stratum oscillator when > calibrating). See http://bs11-abis.gnumonks.org/trac/wiki/isdnsync The observed difference of "Work Value 1104" and "Set Value 1082" should be no problem. From my measurements a difference of about 100 of those values means about 0.1 ppm. And 0.1 ppm is good enough that most phones should see the BS-11 and the offical networks. I guess there is some other problem, I would also check if bs11_config shows that the TRX is loaded. And maybe start with a configuration file which uses only one TRX. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

2 1

Some questions about OpenBSC / BS-11
by openbsc＠elxsi.de 31 Aug '09

31 Aug '09

Hi, we have some troubles finding the network on our cell-phones. There are a lot of suspicious messages, we can't really make sense out of. Example: bs11_config_query shows the following line: BS11 Attributes" a line: E1 Channel: Port=255 Timeslot=161 Subslot=39 This looks completely broken (misparsed by bs11_config?) Another issue are the Set- and Work-values of the Phase-Locked-Loop: We synchronized it with the ISDN network (isdnsync) and it leveled off to 1104 for the Work-Value, Set-Value, however, is 1082. I suspect this is ok and set-value is some informational value only (perhaps the value of the last calibration?). One more question about the radio carrier: On startup of bsc_hack we get the following message: OC=RADIO CARRIER(02) INST=(00,01,ff) STATE CHG: OP_STATE=Disabled AVAIL=In test(00) Is this normal behaviour? Apart from all this questions, does anyone have some more hints what we should look at? We tried different cell phones, tried switching them off and on, but without any success. We're using the latest git version of openbsc. Thank you for your help! Martin

2 1

Ericsson RBS Support
by Caleb Pal 28 Aug '09

28 Aug '09

Hello Again, So as my previous post mentioned, I recently acquired an Ericsson RBS 2401. In looking through the configuration, it only allows for a T1 connection, not an E1. The first issue I see with this is I haven't been able to find a mISDN supported T1 card. I assume all of the BS-11 are E1, so I suppose T1 support has never come up. Not a coder myself, I'm not going to be a lot of help in that department. But I can get a T1 card and hook this RBS up to a Linux box and do any debugging that might help move things along. I'm open to any suggestions. I know Harald was looking into getting traces for Ericsson BSC <-> BTS traffic, so hopefully that will help as well. Thanks again, Caleb

3 2

Ericsson BTS's (US Based Testers?)
by Caleb Pal 28 Aug '09

28 Aug '09

Hello all, I'm new to the list, and new to GSM testing, although I've worked with a fair share of RF, Linux, and networks. I recently acquired an Ericsson RBS 2401 for testing. This is a 2 TRX BTS with a T1 interface. It works on the GSM 1900 band, and puts out 300mw at full power. There will be another post about getting started with that... Onto the main purpose of this post..I have a contact who has 5 Ericsson RBS 2308's, which are the same as the unit Harald recently purchased. They are probably a bit bigger than the BS-11, have 4 TRX, output about 2.5 watts, have a T1 interface, and support EDGE. They are banded for GSM 1900. They can be bought for a reasonable price, plus shipping from California. Obviously OpenBSC doesn't support these at the moment, but hopefully support will be added sometime in the future. These would be a great resource for anyone in the US wanting to do testing, or overseas testers, if you're willing to pay shipping. If you want more info on the unit itself, you can download the manual Harald posted to the list earlier this month. If anyone is interested, please contact me off list, and I will get you in contact with the seller. Thanks Caleb

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

OpenBSC