From osmocom at ehlers.info Wed Apr 4 17:54:57 2012 From: osmocom at ehlers.info (Tim Ehlers) Date: Wed, 4 Apr 2012 19:54:57 +0200 (CEST) Subject: Reliablility problem in current git? In-Reply-To: References: <4F422AD1.9090301@uclouvain.be> <4F436AC1.1000603@uclouvain.be> Message-ID: On Thu, 23 Feb 2012, Tim Ehlers wrote: Hi, >>>> So reverting that commit fixes your issues ? >>> >>> yes, it seems so. I mean I don't have longterm tests now, but cloning >>> current git, reverting the part from the commit I wrote, I made 10 >>> "service 2 *#21#" in a row without problems. >>> >>> So I assume, that this fixes the issue. >> I tested it also. Service and SMS sending is working, but regular call >> is still broken (still plenty DSP Error Status in Layer1 output). > > yesterday I made a quick call test and you are right, calling is still > broken. I could call a number, it is ringing and after pickup the call is > released (that happend in my quick test yesterday; I didn't have the time to > test more/again). > > Could someone check this too? Is there someone, not having problems in the > current git? just to acknowledge this patch from Andreas: http://bb.osmocom.org/trac/changeset/e7997163b240168301d7d2988f2cd74ae1f397e9/ it fixes the issues I had. Now everything is working again. Thanks Andreas. Tim From khorben at defora.org Mon Apr 2 09:18:59 2012 From: khorben at defora.org (Pierre Pronchery) Date: Mon, 02 Apr 2012 11:18:59 +0200 Subject: Regular Osmocom meeting in Berlin? In-Reply-To: References: <20120329152016.GN19456@prithivi.gnumonks.org> <20120329194120.30742.qmail@stuge.se> <4F7585B3.5090006@tobias.org> Message-ID: <4F796F03.6010603@defora.org> Hi, On 30/03/2012 13:37, Sergio 'shadown' Alvarez wrote: > The idea sounds great to me too. and to me as well of course. > On Mar 30, 2012, at 12:06 PM, Tobias Engel wrote: > >> On 29.03.2012 21:41, Peter Stuge wrote: >>> Harald Welte wrote: >>>> I was pondering to start a regular Osmocom meeting (monthly or >>>> bi-weekly) in Berlin. > > Bi-weekly would give more chances to people who travel a lot, to at least make it to it once a month. +1 Cheers, -- khorben From laforge at gnumonks.org Tue Apr 3 16:03:48 2012 From: laforge at gnumonks.org (Harald Welte) Date: Tue, 3 Apr 2012 18:03:48 +0200 Subject: April 11, 7pm / Re: Regular Osmocom meeting in Berlin? In-Reply-To: <20120330100042.GP27922@prithivi.gnumonks.org> References: <20120329152016.GN19456@prithivi.gnumonks.org> <20120330074236.GA4863@nybble.binarybase.org> <20120330100042.GP27922@prithivi.gnumonks.org> Message-ID: <20120403160348.GA11263@prithivi.gnumonks.org> To quote myself... On Fri, Mar 30, 2012 at 12:00:42PM +0200, Harald Welte wrote: > > I would probably be in favor of Wednesday > > Great, then we have already three people in favor of Wednesday (which > would also work out fine for me). I've now inquired with CCC Berlin, people there seem to be fine with a bi-weekly meeting on wednesday. I told them that one CCCB member would be present at every meeting. This would likely be me (unless I'm travelling) so we have to see that somebody else (dexter, prom, roh, zecke, ...) can fulfill that role during other meetings. The first meeting thus will be next wednesday, April 11. I suggest we meet at 7pm. A more official announcement will follow. -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From luca at srlabs.de Wed Apr 11 12:18:42 2012 From: luca at srlabs.de (Luca Melette) Date: Wed, 11 Apr 2012 14:18:42 +0200 Subject: April 11, 7pm / Re: Regular Osmocom meeting in Berlin? In-Reply-To: <20120403160348.GA11263@prithivi.gnumonks.org> References: <20120329152016.GN19456@prithivi.gnumonks.org> <20120330074236.GA4863@nybble.binarybase.org> <20120330100042.GP27922@prithivi.gnumonks.org> <20120403160348.GA11263@prithivi.gnumonks.org> Message-ID: <20120411141842.58a8d293@c7h5n3o6.sofago.net> On Tue, 3 Apr 2012 18:03:48 +0200 Harald Welte wrote: Hi Harald, > The first meeting thus will be next wednesday, April 11. I suggest we > meet at 7pm. A more official announcement will follow. Is this meeting confirmed? I would really like to see what's going on and contribute. Cheers, LM From peter at stuge.se Wed Apr 11 12:34:36 2012 From: peter at stuge.se (Peter Stuge) Date: Wed, 11 Apr 2012 14:34:36 +0200 Subject: April 11, 7pm / Re: Regular Osmocom meeting in Berlin? In-Reply-To: <20120411141842.58a8d293@c7h5n3o6.sofago.net> References: <20120329152016.GN19456@prithivi.gnumonks.org> <20120330074236.GA4863@nybble.binarybase.org> <20120330100042.GP27922@prithivi.gnumonks.org> <20120403160348.GA11263@prithivi.gnumonks.org> <20120411141842.58a8d293@c7h5n3o6.sofago.net> Message-ID: <20120411123436.2593.qmail@stuge.se> Luca Melette wrote: > > The first meeting thus will be next wednesday, April 11. I suggest > > we meet at 7pm. A more official announcement will follow. > > Is this meeting confirmed? Yes, I believe so. > I would really like to see what's going on and contribute. See you then! //Peter From arback at gmail.com Wed Apr 4 11:11:37 2012 From: arback at gmail.com (Andrew Back) Date: Wed, 4 Apr 2012 12:11:37 +0100 Subject: Basic build problem. Message-ID: Hello, I'm experiencing problems getting started with building BB and wondered if someone might be able to advise. Seems that whenever I specify a toolchain prefix it is ignored. E.g. $make -e CROSS_TOOL_PREFIX=arm-none-linux-gnueabi- Results in an error: "configure: error: in `/home/andrew/Work/AB Open/Projects/GSM/Osmocom/osmocom-bb/src/shared/libosmocore/build-target': configure: error: C compiler cannot create executables See `config.log' for more details" If I check ./shared/libosmocore/build-target/config.log for instances of "arm" these are all still "arm-none-eabi", which I do not have. The prefix example above was to attempt to use CodeSourcery Lite tools. I've also tried with a prefix of "arm-linux-gnueabi-" to use a toolchain installed from Emdebian via apt-get, and I experience the same problem. Although in searching for a fix I read something which suggested that the Emdebian toolchains may be no use. So, am I doing something wrong in the first step? And is there perhaps another toolchain I should be using? Apologies if this has already been answered ? I have done a bit of searching but only found similar errors where a prefix was not being specified. Regards, Andrew -- Andrew Back http://carrierdetect.com From 246tnt at gmail.com Wed Apr 4 11:53:06 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Wed, 4 Apr 2012 13:53:06 +0200 Subject: Basic build problem. In-Reply-To: References: Message-ID: > I'm experiencing problems getting started with building BB and > wondered if someone might be able to advise. Seems that whenever I > specify a toolchain prefix it is ignored. E.g. > > $make -e CROSS_TOOL_PREFIX=arm-none-linux-gnueabi- Try with make CROSS_HOST=arm-none-linux-gnueabi Cheers, Sylvain From arback at gmail.com Wed Apr 4 12:12:31 2012 From: arback at gmail.com (Andrew Back) Date: Wed, 4 Apr 2012 13:12:31 +0100 Subject: Basic build problem. In-Reply-To: References: Message-ID: Hi Sylvain, On 4 April 2012 12:53, Sylvain Munaut <246tnt at gmail.com> wrote: >> I'm experiencing problems getting started with building BB and >> wondered if someone might be able to advise. Seems that whenever I >> specify a toolchain prefix it is ignored. E.g. >> >> $make -e CROSS_TOOL_PREFIX=arm-none-linux-gnueabi- > > Try with > > make CROSS_HOST=arm-none-linux-gnueabi It now gets further. Additional errors below. Regards, Andrew -- Thread model: posix gcc version 4.6.1 (Sourcery CodeBench Lite 2011.09-70) configure:3229: $? = 0 configure:3218: arm-none-linux-gnueabi-gcc -V >&5 arm-none-linux-gnueabi-gcc: error: unrecognized option '-V' arm-none-linux-gnueabi-gcc: fatal error: no input files compilation terminated. configure:3229: $? = 1 configure:3218: arm-none-linux-gnueabi-gcc -qversion >&5 arm-none-linux-gnueabi-gcc: error: unrecognized option '-qversion' arm-none-linux-gnueabi-gcc: fatal error: no input files compilation terminated. configure:3229: $? = 1 configure:3249: checking whether the C compiler works configure:3271: arm-none-linux-gnueabi-gcc -Os -ffunction-sections -I/home/andrew/Work/AB Open/Projects/GSM/Osmocom/osmocom-bb/src/target/firmware/include -nostartfiles -nodefaultlibs conftest.c >&5 arm-none-linux-gnueabi-gcc: error: Open/Projects/GSM/Osmocom/osmocom-bb/src/target/firmware/include: No such file or directory configure:3275: $? = 1 configure:3313: result: no configure: failed program was: | /* confdefs.h */ | #define PACKAGE_NAME "libosmocore" | #define PACKAGE_TARNAME "libosmocore" | #define PACKAGE_VERSION "UNKNOWN" | #define PACKAGE_STRING "libosmocore UNKNOWN" | #define PACKAGE_BUGREPORT "openbsc at lists.osmocom.org" | #define PACKAGE_URL "" | #define PACKAGE "libosmocore" | #define VERSION "UNKNOWN" | /* end confdefs.h. */ | | int | main () | { | | ; | return 0; | } configure:3318: error: in `/home/andrew/Work/AB Open/Projects/GSM/Osmocom/osmocom-bb/src/shared/libosmocore/build-target': configure:3320: error: C compiler cannot create executables See `config.log' for more details ## ---------------- ## ## Cache variables. ## ## ---------------- ## ac_cv_env_CC_set= ac_cv_env_CC_value= ac_cv_env_CFLAGS_set=set ac_cv_env_CFLAGS_value='-Os -ffunction-sections -I/home/andrew/Work/AB Open/Projects/GSM/Osmocom/osmocom-bb/src/target/firmware/include -nostartfiles -nodefaultlibs' ac_cv_env_CPPFLAGS_set= ac_cv_env_CPPFLAGS_value= ac_cv_env_CPP_set= ac_cv_env_CPP_value= ac_cv_env_LDFLAGS_set= ac_cv_env_LDFLAGS_value= ac_cv_env_LIBS_set= ac_cv_env_LIBS_value= ac_cv_env_build_alias_set= ac_cv_env_build_alias_value= ac_cv_env_host_alias_set=set ac_cv_env_host_alias_value=arm-none-linux-gnueabi ac_cv_env_target_alias_set= ac_cv_env_target_alias_value= ac_cv_header_sys_select_h=no ac_cv_header_sys_socket_h=no ac_cv_path_install='/usr/bin/install -c' ac_cv_path_mkdir=/bin/mkdir ac_cv_prog_AWK=mawk ac_cv_prog_CC=arm-none-linux-gnueabi-gcc ac_cv_prog_STRIP=arm-none-linux-gnueabi-strip ac_cv_prog_make_make_set=yes -- Andrew Back http://carrierdetect.com From 246tnt at gmail.com Wed Apr 4 12:32:14 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Wed, 4 Apr 2012 14:32:14 +0200 Subject: Basic build problem. In-Reply-To: References: Message-ID: > It now gets further. Additional errors below. It's now official: your toolchain sucks for this purpose. Build one as described here : http://bb.osmocom.org/trac/wiki/GnuArmToolchain Cheers, Sylvain From arback at gmail.com Wed Apr 4 14:07:03 2012 From: arback at gmail.com (Andrew Back) Date: Wed, 4 Apr 2012 15:07:03 +0100 Subject: Basic build problem. In-Reply-To: References: Message-ID: On 4 April 2012 13:32, Sylvain Munaut <246tnt at gmail.com> wrote: >> It now gets further. Additional errors below. > > It's now official: your toolchain sucks for this purpose. > > Build one as described here : > http://bb.osmocom.org/trac/wiki/GnuArmToolchain Thanks for the link. I've done that and was still getting what appeared to be the same error, and then discovered that this could be fixed by building from a different directory. Looks like something doesn't like builds being run from a dir where path has spaces in its name... See "No such file or directory" error where the path has been truncated. Regards, Andrew -- arm-elf-gcc (GCC) 4.5.2 Copyright (C) 2010 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. configure:3229: $? = 0 configure:3218: arm-elf-gcc -v >&5 Using built-in specs. COLLECT_GCC=arm-elf-gcc COLLECT_LTO_WRAPPER=/home/andrew/SW/gnu-arm/install/libexec/gcc/arm-elf/4.5.2/lto-wrapper Target: arm-elf Configured with: /home/andrew/SW/gnu-arm/src/gcc-4.5.2/configure --target=arm-elf --prefix=/home/andrew/SW/gnu-arm/install --enable-interwork --enable-multilib --with-float=soft --disable-werror --enable-languages=c,c++ --with-newlib --with-headers=/home/andrew/SW/gnu-arm/src/newlib-1.19.0/newlib/libc/include --with-system-zlib --disable-shared Thread model: single gcc version 4.5.2 (GCC) configure:3229: $? = 0 configure:3218: arm-elf-gcc -V >&5 arm-elf-gcc: '-V' option must have argument configure:3229: $? = 1 configure:3218: arm-elf-gcc -qversion >&5 arm-elf-gcc: unrecognized option '-qversion' arm-elf-gcc: no input files configure:3229: $? = 1 configure:3249: checking whether the C compiler works configure:3271: arm-elf-gcc -Os -ffunction-sections -I/home/andrew/Work/AB Open/Projects/GSM/Osmocom/osmocom-bb/src/target/firmware/include -nostartfiles -nodefaultlibs conftest.c >&5 arm-elf-gcc: Open/Projects/GSM/Osmocom/osmocom-bb/src/target/firmware/include: No such file or directory configure:3275: $? = 1 configure:3313: result: no | /* confdefs.h */ | #define PACKAGE_NAME "libosmocore" | #define PACKAGE_TARNAME "libosmocore" | #define PACKAGE_VERSION "UNKNOWN" | #define PACKAGE_STRING "libosmocore UNKNOWN" | #define PACKAGE_BUGREPORT "openbsc at lists.osmocom.org" | #define PACKAGE_URL "" | #define PACKAGE "libosmocore" | #define VERSION "UNKNOWN" | /* end confdefs.h. */ | | int | main () | { | | ; | return 0; | } configure:3318: error: in `/home/andrew/Work/AB Open/Projects/GSM/Osmocom/osmocom-bb/src/shared/libosmocore/build-target': configure:3320: error: C compiler cannot create executables See `config.log' for more details -- -- Andrew Back http://carrierdetect.com From gouchengcheng at gmail.com Thu Apr 5 03:10:09 2012 From: gouchengcheng at gmail.com (Chengcheng Gou) Date: Thu, 5 Apr 2012 11:10:09 +0800 Subject: how to identify the BTS belong to which BSC Message-ID: I want to know if there is a method for that, Thanks! From Alojzij.Sinur at mobik.si Thu Apr 5 11:44:00 2012 From: Alojzij.Sinur at mobik.si (Alojzij Sinur) Date: Thu, 5 Apr 2012 11:44:00 +0000 Subject: key generation on SIM failed (cause 2) Message-ID: <726B505068782D49BB803FB7949E62370173A7A94B@MARY.main.mobik.si> Hi, I have a question. When using osmocombb with C118, we are getting error when SIM tries to authenticate itself to the network. Here are the messages: <0005> gsm48_mm.c:3902 (ms 1) Received 'RR_DATA_IND' from RR in state location updating initiated (sapi 0) <0005> gsm48_mm.c:4091 (ms 1) Received 'MT_MM_AUTH_REQ' in MM state location updating initiated <0005> gsm48_mm.c:1637 AUTHENTICATION REQUEST (seq 2) <0005> subscriber.c:955 Generating KEY at SIM <000f> sim.c:209 got new job: SIM_JOB_RUN_GSM_ALGO (handle=00000006) <000f> sim.c:697 go MF <000f> sim.c:241 SELECT (file=0x3f00) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x00 sw2=0x00) <000f> sim.c:952 command failed <000f> sim.c:151 sending result to callback function (type=1) <0005> subscriber.c:990 key generation on SIM failed (cause 2) SIM is new. It works if you start phone without osmocom. And It also works if you start without osmocom and when SIM logs into network you restart the phone with osmocom. We tried several new cards and there was always same result. There is also no PIN set up (SIM is not locked). We tried with USIM. When we try old cards (>2 years old) osmocom works without problem. Have you ever encountered this kind of trouble? Is there any fix for it? Thank you. Regards, Alojzij -------------- next part -------------- An HTML attachment was scrubbed... URL: From 246tnt at gmail.com Thu Apr 5 12:16:08 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Thu, 5 Apr 2012 14:16:08 +0200 Subject: key generation on SIM failed (cause 2) In-Reply-To: <726B505068782D49BB803FB7949E62370173A7A94B@MARY.main.mobik.si> References: <726B505068782D49BB803FB7949E62370173A7A94B@MARY.main.mobik.si> Message-ID: Hi, > SIM is new. It works if you start phone without osmocom. And It also works > if you start without osmocom and when SIM logs into network you restart the > phone with osmocom. > > We tried several new cards and there was always same result. There is also > no PIN set up (SIM is not locked). We tried with USIM. > > When we try old cards (>2 years old) osmocom works without problem. > > Have you ever encountered this kind of trouble? Is there any fix for it? Interesting. Purely from the "symptoms", I'd guess that the sim starts in USIM mode and somehow needs to switch into SIM mode to work with plain old GSM. My understanding is that the SIM should do that on its own, but apparently doesn't. And then when you start the official fw, it's properly switched to SIM mode and then you can start osmocom. (I guess maybe capacitors keep VCC high enough for the sim to survive a reboot ? altough it still should be reset). Just a theory ... (and not a perfect one at that). Do you have a simtrace to make captures of what's on the wire when talking to the original fw / osmocom and compare ? Can you spare a SIM ? Cheers, Sylvain From Alojzij.Sinur at mobik.si Thu Apr 5 12:23:15 2012 From: Alojzij.Sinur at mobik.si (Alojzij Sinur) Date: Thu, 5 Apr 2012 12:23:15 +0000 Subject: key generation on SIM failed (cause 2) In-Reply-To: References: <726B505068782D49BB803FB7949E62370173A7A94B@MARY.main.mobik.si> Message-ID: <726B505068782D49BB803FB7949E62370173A7A97D@MARY.main.mobik.si> Hi, we do not have simtrace. Yet. When we receive simtrace we will be able to read and update you with captures of what is on wire. We can spare the SIM. It is a prepaid SIM. Why? Regards, Alojzij -----Original Message----- From: Sylvain Munaut [mailto:246tnt at gmail.com] Sent: Thursday, April 05, 2012 2:16 PM To: Alojzij Sinur Cc: baseband-devel at lists.osmocom.org; Jaka Nemanic Subject: Re: key generation on SIM failed (cause 2) Hi, > SIM is new. It works if you start phone without osmocom. And It also > works if you start without osmocom and when SIM logs into network you > restart the phone with osmocom. > > We tried several new cards and there was always same result. There is > also no PIN set up (SIM is not locked). We tried with USIM. > > When we try old cards (>2 years old) osmocom works without problem. > > Have you ever encountered this kind of trouble? Is there any fix for it? Interesting. Purely from the "symptoms", I'd guess that the sim starts in USIM mode and somehow needs to switch into SIM mode to work with plain old GSM. My understanding is that the SIM should do that on its own, but apparently doesn't. And then when you start the official fw, it's properly switched to SIM mode and then you can start osmocom. (I guess maybe capacitors keep VCC high enough for the sim to survive a reboot ? altough it still should be reset). Just a theory ... (and not a perfect one at that). Do you have a simtrace to make captures of what's on the wire when talking to the original fw / osmocom and compare ? Can you spare a SIM ? Cheers, Sylvain From 246tnt at gmail.com Thu Apr 5 12:34:41 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Thu, 5 Apr 2012 14:34:41 +0200 Subject: key generation on SIM failed (cause 2) In-Reply-To: <726B505068782D49BB803FB7949E62370173A7A97D@MARY.main.mobik.si> References: <726B505068782D49BB803FB7949E62370173A7A94B@MARY.main.mobik.si> <726B505068782D49BB803FB7949E62370173A7A97D@MARY.main.mobik.si> Message-ID: Hi, > we do not have simtrace. Yet. > When we receive simtrace we will be able to read and update you with captures of what is on wire. I guess you can find a card reader. Try to generate a Kc with pySim with the script below : (uncomment the right transport serial/pcsc) ------ #!/usr/bin/env python import sys from pySim.commands import SimCardCommands from pySim.transport.serial import SerialSimLink sl = SerialSimLink(device='/dev/ttyUSB0', baudrate=9600) # from pySim.transport.pcsc import PcscSimLink # sl = PcscSimLink(0) sc = SimCardCommands(sl) sc.reset_card() print sc.select_file(['3f00', '7f20']) print sc.run_gsm('00112233445566778899aabbccddeeff') -------- > We can spare the SIM. It is a prepaid SIM. Why? As a last resort, if remote debug doesn't work you can ship one to me to investigate what makes it special. But we're not there yet. Cheers, Sylvain From 246tnt at gmail.com Thu Apr 5 12:41:52 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Thu, 5 Apr 2012 14:41:52 +0200 Subject: key generation on SIM failed (cause 2) In-Reply-To: References: <726B505068782D49BB803FB7949E62370173A7A94B@MARY.main.mobik.si> <726B505068782D49BB803FB7949E62370173A7A97D@MARY.main.mobik.si> Message-ID: BTW, in the logs, do any of the other SIM access work ? Because what fails in those log is the "go back to MF" part which should happen a lot of time before as well. Cheers, Sylvain From Alojzij.Sinur at mobik.si Fri Apr 6 08:47:18 2012 From: Alojzij.Sinur at mobik.si (Alojzij Sinur) Date: Fri, 6 Apr 2012 08:47:18 +0000 Subject: key generation on SIM failed (cause 2) In-Reply-To: References: <726B505068782D49BB803FB7949E62370173A7A94B@MARY.main.mobik.si> <726B505068782D49BB803FB7949E62370173A7A97D@MARY.main.mobik.si> Message-ID: <726B505068782D49BB803FB7949E62370173A7B6EC@MARY.main.mobik.si> Hi. We found a card reader but it is not working. We are waiting for a new one. SIM works if there is no request for PIN or request from network for authentication. If there is a PIN or authentication request than it does not work. Would it help if we would send you log files? Regards, Alojzij -----Original Message----- From: Sylvain Munaut [mailto:246tnt at gmail.com] Sent: Thursday, April 05, 2012 2:42 PM To: Alojzij Sinur Cc: baseband-devel at lists.osmocom.org; Jaka Nemanic Subject: Re: key generation on SIM failed (cause 2) BTW, in the logs, do any of the other SIM access work ? Because what fails in those log is the "go back to MF" part which should happen a lot of time before as well. Cheers, Sylvain From peter at stuge.se Sat Apr 7 01:29:33 2012 From: peter at stuge.se (Peter Stuge) Date: Sat, 7 Apr 2012 03:29:33 +0200 Subject: key generation on SIM failed (cause 2) In-Reply-To: <726B505068782D49BB803FB7949E62370173A7B6EC@MARY.main.mobik.si> References: <726B505068782D49BB803FB7949E62370173A7A94B@MARY.main.mobik.si> <726B505068782D49BB803FB7949E62370173A7A97D@MARY.main.mobik.si> <726B505068782D49BB803FB7949E62370173A7B6EC@MARY.main.mobik.si> Message-ID: <20120407012933.13318.qmail@stuge.se> Alojzij Sinur wrote: > Would it help if we would send you log files? It can certainly not hurt, and it can help. Please always include *full* log files whenever you discuss any issue with someone else over the internet. Thanks. //Peter From Alojzij.Sinur at mobik.si Thu Apr 26 06:51:58 2012 From: Alojzij.Sinur at mobik.si (Alojzij Sinur) Date: Thu, 26 Apr 2012 06:51:58 +0000 Subject: key generation on SIM failed (cause 2) In-Reply-To: References: <726B505068782D49BB803FB7949E62370173A7A94B@MARY.main.mobik.si> <726B505068782D49BB803FB7949E62370173A7A97D@MARY.main.mobik.si> Message-ID: <726B505068782D49BB803FB7949E62370173A8726F@MARY.main.mobik.si> Hi. We received SIMTRACE and made some traces. I attached them. We tried to open it but there was no success with wireshark. Even with your plugin. In both cases the phone was just turned on. PIN was disabled. Please check if you see anything unusual in it. Thank You. Regards, Alojzij. -----Original Message----- From: Sylvain Munaut [mailto:246tnt at gmail.com] Sent: Thursday, April 05, 2012 2:42 PM To: Alojzij Sinur Cc: baseband-devel at lists.osmocom.org; Jaka Nemanic Subject: Re: key generation on SIM failed (cause 2) BTW, in the logs, do any of the other SIM access work ? Because what fails in those log is the "go back to MF" part which should happen a lot of time before as well. Cheers, Sylvain -------------- next part -------------- A non-text attachment was scrubbed... Name: simtrace.pcap Type: application/octet-stream Size: 51046 bytes Desc: simtrace.pcap URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: simtrace2.pcap Type: application/octet-stream Size: 1198 bytes Desc: simtrace2.pcap URL: From dzesve at ymail.com Fri Apr 6 19:23:01 2012 From: dzesve at ymail.com (Simian Denson) Date: Fri, 06 Apr 2012 21:23:01 +0200 Subject: Set fixed TMSI and Kc Message-ID: <4F7F4295.7010005@ymail.com> Hi, in the osmocom bb mobile.cfg I don't see any posibility to set a fixed Kc encryption key and the tmsi. How could I achieve that osmocom uses my defined Kc and tmsi? cheers, Simian From dzesve at ymail.com Sun Apr 8 00:20:56 2012 From: dzesve at ymail.com (Simian Denson) Date: Sun, 08 Apr 2012 02:20:56 +0200 Subject: detecting TMSI and Bursts relation? Message-ID: <4F80D9E8.7080701@ymail.com> Hi, is it technically possible to sniff the air traffic (for example with ccch_scan from the osmocombb burst_ind branch) and correlate the relationship between a burst and a paging request (which contains the tmsi of the mobile) ? Basically: What are the steps to determine which tmsi (mobile) did which burst ? Thank you for your information! cheers, Simian -------------- next part -------------- An HTML attachment was scrubbed... URL: From gouchengcheng at gmail.com Sun Apr 8 13:07:29 2012 From: gouchengcheng at gmail.com (Chengcheng Gou) Date: Sun, 8 Apr 2012 21:07:29 +0800 Subject: the ccch number Message-ID: hello 1.if a cell has multiple TRX, and the CCCH number >1,then can the phone request channel on other timeslot but timeslot 0 in the uplink; how does a real phone deal with it? 2.how to mitigate the RACH DOS in the GSM network? anyone can help me? From andreas at eversberg.eu Sun Apr 8 14:49:27 2012 From: andreas at eversberg.eu (jolly) Date: Sun, 08 Apr 2012 16:49:27 +0200 Subject: unmerged patches Message-ID: <4F81A577.6030109@eversberg.eu> hi, i just collected all my patches together that i would have merged: 1. i added two patches to jolly/battery branch of osmocombb. it will add a font with symbols and display them at rssi. since i did not receive a reply about that from christian, i pushed it in this seperate branch so far. christian, if you find the time, just look at it. 2. there are several patches in my "testing" branch at jolly/ui of osmocombb. these patches are tested and work quite well. the are not related to the ui. i think they could me mergend: commit 66c21b3b7d30db205202d46893032ae2a73992a2 layer23: Send SIM APDUs via GSMTAP Usefull to trace SIM messages together with Um messages. commit b9ff5044a5fcbd07e6a295d75e14c7c504259914 layer23: Be sure to close mncc socket on exit of mobile instance commit e30e351d66f07e6effee768412a9d8f31202b4ed layer1: Retry fist power measurement, if it seems to fail In some cases (e.g. after a call with TCH) the first power measurement after a full reset will always return 0 (-110dbm). In this case the measurment is repeated once again. This is just a workarround, and it will not fix the actual cause. 3. there are several additions and fixes at jolly/rtpmux branch of openbsc. commit db3a7dd357bd7cd842a80655e734a1b4afdb6f7c and commit 872c6c002add0a741514aa505df9379a6fcdb955 allow to exchange traffic via rtp with a given rtp endpoint. the destination can be controlled via mncc interface. the result is that the traffic is not routed via mncc interface, but directly exchanged with the given rtp endpoint. lcr supports that, so traffic between sip and openbsc is directly forwarded and not routed through lcr and mncc interface. commit 3d407e7c8e5c4e01dc07a530f910d29fac687809 and commit f47d13e55888576c9201a3a7fee04fc58f98ff66 will handle bad frames from e1 bts. if a frame is bad, the rtp packet is dropped (if forwarded via rtp). if the bad frame is received by lcr via mncc interface, lcr will extrapolate the missing audio by repeating last valid frame with reduced value. instead of having a distrorted sound, the audio stream will now be clear, even if some frames are bad. commit 0193b8a76824cdce9d9da3f7374a928efac6f96c allows dynamic payload types when forwarding rtp traffic to a given rtp endpoint. (used for EFR/AMR/HR) commit ea724c6af9e1a5b6df8d0e5965f357896834d3ce and commit a22e598c0a93f88433c6a00bd2acdde5c2f496d5 will fix the problems with delay and loosing audio at nanobts. it uses system clock as a basis to correct timestamp and sequence number of frames transmitted to the bts. commit bf14b25358f7ceb021e2397e90c2fb9484245b7b fixes problem with interruption of traffic, if packet transmission via rtp fails in the beginning. the result of all these patches is a reliable audio stream. the call waiting works, as well as hold/retrieve of calls without audio interruption or increasing/high delay. (even if database access makes openbsc stop for some time.) in conjuction with lcr, a sip gateway can directly exchange audio traffic with openbsc. the codec to be used is negotiated between SIP gateway and MS. (depending on support and preference) 4. long time ago i extraced the sms protocols "smc" and "smr" (TS 11.11) from openbsc and added a state machines. they are now part of libosmocore and are used for sending/receiving sms via osmocombb. i removed all that code from openbsc and use libosmocore instead. see jolly/sms for the 4 patches. i hope that was not too much at a time :) regards, andreas From kristen.eisenberg at yahoo.com Sun Apr 8 15:20:32 2012 From: kristen.eisenberg at yahoo.com (Kristen Eisenberg) Date: Sun, 8 Apr 2012 08:20:32 -0700 (PDT) Subject: 900MHz packet radio? Message-ID: <1333898432.70641.YahooMailNeo@web122304.mail.ne1.yahoo.com> I hear what you are saying, and we are working to support inter-BTS meshing for OpenBTS and OpenBSC. However, there is also value in getting the phones to mesh, if only because there are plenty situations where you might not be able to get a BTS, or be able to use any BTS that is around. Kristen Eisenberg Billige Fl?ge Marketing GmbH Emanuelstr. 3, 10317 Berlin Deutschland Telefon: +49 (33) 5310967 Email: utebachmeier at gmail.com Site: http://flug.airego.de - Billige Fl?ge vergleichen -------------- next part -------------- An HTML attachment was scrubbed... URL: From gouchengcheng at gmail.com Mon Apr 9 08:43:57 2012 From: gouchengcheng at gmail.com (Chengcheng Gou) Date: Mon, 9 Apr 2012 16:43:57 +0800 Subject: Layer1 reset type Message-ID: hello can anyone explain the different in the three reset types? L1CTL_RES_T_BOOT L1CTL_RES_T_FULL L1CTL_RES_T_SCHED thanks! From nicki240 at yahoo.de Mon Apr 9 11:55:59 2012 From: nicki240 at yahoo.de (nicki240) Date: Mon, 9 Apr 2012 04:55:59 -0700 (PDT) Subject: Call has been rejected Message-ID: <1333972559096-3896636.post@n3.nabble.com> hi If I try to call someboady , I'll get in the telnet connection this Error : OsmocomBB# call 1 0176********** OsmocomBB# % (MS 1) % Call has been rejected .mobile : <0009> mnccms.c:570 Make call to 0176********** <0009> mnccms.c:150 support TCH/H also <0009> mnccms.c:174 support full rate v2 <0009> mnccms.c:178 support full rate v1 <0009> mnccms.c:187 support half rate v1 <0006> transaction.c:76 ms 1 allocates transaction (proto 3 trans_id 255 callref 2 mem 0x8cfdd28) <0006> gsm48_cc.c:243 new state NULL -> MM_CONNECTION_PEND <0006> gsm48_cc.c:507 Sending MMCC_EST_REQ <0005> gsm48_mm.c:3774 (ms 1) Received 'MMCC_EST_REQ' event in state MM idle <0005> gsm48_mm.c:3777 -> substate PLMN search <0005> gsm48_mm.c:3779 -> callref 2, transaction_id 255 <0005> gsm48_mm.c:3042 Init MM Connection, not in normal state. <0006> gsm48_cc.c:2161 (ms 1) Received 'MMCC_REL_IND' in CC state MM_CONNECTION_PEND <0006> gsm48_cc.c:196 (ms 1 ti ff) Sending 'MNCC_REL_IND' to MNCC. <0006> gsm48_cc.c:243 new state MM_CONNECTION_PEND -> NULL <0006> transaction.c:104 ms 1 frees transaction (mem 0x8cfdd28) <0009> mnccms.c:372 Call has been released (cause 21) <0009> mnccms.c:71 (call 2) Call removed. osmocon : 8a 00 80 00 00 00 00 00 00 90 00 SIM Request (7): a0 a4 00 00 02 7f 10 SIM Response (2): 9f 1e SIM Request (5): a0 c0 00 00 1e SIM Response (32): 00 00 00 20 7f 10 02 00 f4 4f ff 01 11 bb 01 0f 05 00 83 8a 83 8a 00 80 00 00 00 00 00 00 90 00 SIM Request (7): a0 a4 00 00 02 6f 40 SIM Response (2): 9f 0f SIM Request (5): a0 c0 00 00 0f SIM Response (17): 00 00 00 7c 6f 40 04 00 11 ff 44 01 02 01 1f 90 00 SIM Request (5): a0 b2 01 04 1f SIM Response (33): ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 90 00 SIM Request (7): a0 a4 00 00 02 6f 42 SIM Response (2): 9f 0f SIM Request (5): a0 c0 00 00 0f SIM Response (17): 00 00 00 e1 6f 42 04 00 11 ff 44 01 02 01 2d 90 00 SIM Request (5): a0 b2 01 04 2d SIM Response (47): ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 ff ff ff ff ff ff ff ff ff ff ff ff 07 91 94 71 07 16 00 00 ff ff ff ff 00 00 ff 90 00 Can somebody help me ? thx nicki240 -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Call-has-been-rejected-tp3896636p3896636.html Sent from the baseband-devel mailing list archive at Nabble.com. From laforge at gnumonks.org Mon Apr 9 13:16:37 2012 From: laforge at gnumonks.org (Harald Welte) Date: Mon, 9 Apr 2012 15:16:37 +0200 Subject: Sagem OT-290 trace phone / GSMTAP integration Message-ID: <20120409131637.GE7895@prithivi.gnumonks.org> Hi all! Thanks to a generous donor, we have received a couple of OT-290 trace phones. These are commercial products intended for taking L2/L3 air interface traces. If you've read any of the fabulous GSM papers by Prof. Dr.-Ing. Joachim Goeller: The OT-phones is what he used to generate all his traces. The majority of what those phones can do is now also possible with OsmocomBB. However, OT-290 support GPRS tracing/testing - for CS-1 throguh CS-4. I would be willing to give away one of the two remaining OT-290 (for free) to anyone who would in return commit to developing a GSMTAP interface for it. The message format on the serial UART between phone and PC is documented (PDF documentation by Sagem included with the phones). So based on this documentation and an OT-290 phone, it should be possible to write a small command-line program that receives the GSM/GPRS messages from the OT-290 and sends them via GSMTAP into wireshark. The result would then be similar to what http://cgit.osmocom.org/cgit/dct3-gsmtap/ is for DCT-3 phones. If you're interested, please respond to this message. Please don't apply for the phone if you are not able to find the required time and interest for actually doing the GSMTAP integration. Thanks! -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From mstopka at opensuse.org Mon Apr 9 21:18:39 2012 From: mstopka at opensuse.org (Marek Stopka) Date: Mon, 9 Apr 2012 22:18:39 +0100 Subject: Encrypted GSM phone Message-ID: Hi, I have been just wondering... would it be possible to use your project as a base for DIY encrypted cellphone? My idea is that if I could get hold to output data after voice is encoded by GSM EFR codec, I might just easily encrypt this digital stream using AES128 and build trully encrypted cellphone. Where does actual "analog voice from microphone to digital data" conversion happends? In a layer1 that runs in a chip, or layer23 that runs on a PC? If it would be in layer23, encrypting a data stream with AES 128 whould be doable, am I missing something? Thanks Marek -- S pozdravem / Best regards Marek Stopka Kontakty / Contacts Mobil/Cell phone:+420 608 149 955 WEB: www.stopkaconsulting.eu From 246tnt at gmail.com Mon Apr 9 22:04:14 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Tue, 10 Apr 2012 00:04:14 +0200 Subject: Encrypted GSM phone In-Reply-To: References: Message-ID: Hi, > I have been just wondering... would it be possible to use your project > as a base for DIY encrypted cellphone? My idea is that if I could get > hold to output data after voice is encoded by GSM EFR codec, I might > just easily encrypt this digital stream using AES128 and build trully > encrypted cellphone. Yes, the idea has been raised many times before. The problem is that in a lot of network the voice is going to be decompressed in the network, transferred as PCM and then recompressed. > Where does actual "analog voice from microphone to digital data" > conversion happends? In a layer1 that runs in a chip, or layer23 that > runs on a PC? If it would be in layer23, encrypting a data stream with > AES 128 whould be doable, am I missing something? It's actually done lower than layer1, inside the DSP itself. It is however possible to send custom data (taken from the PC microphone for eg.). That's what the LCR integration does. Cheers, Sylvain From gaus-tigris at gmx.de Tue Apr 10 07:04:04 2012 From: gaus-tigris at gmx.de (Jama Solomo) Date: Tue, 10 Apr 2012 09:04:04 +0200 Subject: Encrypted GSM phone In-Reply-To: References: Message-ID: <4F83DB64.2080304@gmx.de> > Yes, the idea has been raised many times before. > > The problem is that in a lot of network the voice is going to be > decompressed in the network, transferred as PCM and then recompressed. > > The crypt phones, which are used from our politicians today, establishing a CSD connection for voice crypt transmission. From dburgess at jcis.net Tue Apr 10 17:15:02 2012 From: dburgess at jcis.net (David A. Burgess) Date: Tue, 10 Apr 2012 10:15:02 -0700 Subject: Encrypted GSM phone In-Reply-To: <4F83DB64.2080304@gmx.de> References: <4F83DB64.2080304@gmx.de> Message-ID: <53ED53E7-A644-4403-81D3-1778FDFF4341@jcis.net> Yes, and in most networks that CSD connection is a kind of beacon, screaming to the network operator, "Hey! Look at me! I'm using a cryptophone! Pay extra special attention to my movements and calling patterns!" On Apr 10, 2012, at 12:04 AM, Jama Solomo wrote: > >> Yes, the idea has been raised many times before. >> >> The problem is that in a lot of network the voice is going to be >> decompressed in the network, transferred as PCM and then recompressed. >> >> > The crypt phones, which are used from our politicians today, > establishing a CSD connection for voice crypt transmission. > > From lists at infosecurity.ch Tue Apr 10 17:19:17 2012 From: lists at infosecurity.ch (Fabio Pietrosanti (naif)) Date: Tue, 10 Apr 2012 19:19:17 +0200 Subject: Encrypted GSM phone In-Reply-To: <53ED53E7-A644-4403-81D3-1778FDFF4341@jcis.net> References: <4F83DB64.2080304@gmx.de> <53ED53E7-A644-4403-81D3-1778FDFF4341@jcis.net> Message-ID: <4F846B95.3000902@infosecurity.ch> On 4/10/12 7:15 PM, David A. Burgess wrote: > > Yes, and in most networks that CSD connection is a kind of beacon, screaming to the network operator, "Hey! Look at me! I'm using a cryptophone! Pay extra special attention to my movements and calling patterns!" Yeah, CSD is the PITA of the inter-working now that most Mobile Carries does trunking via Packet Switched and Compressed link. CSD is dead! Evviva CSD over CS (Voice)! :P -naif From lists at infosecurity.ch Tue Apr 10 07:15:00 2012 From: lists at infosecurity.ch (Fabio Pietrosanti (naif)) Date: Tue, 10 Apr 2012 09:15:00 +0200 Subject: Encrypted GSM phone In-Reply-To: References: Message-ID: <4F83DDF4.8010702@infosecurity.ch> On 4/9/12 11:18 PM, Marek Stopka wrote: > Hi, > I have been just wondering... would it be possible to use your project > as a base for DIY encrypted cellphone? My idea is that if I could get > hold to output data after voice is encoded by GSM EFR codec, I might > just easily encrypt this digital stream using AES128 and build trully > encrypted cellphone. > > Where does actual "analog voice from microphone to digital data" > conversion happends? In a layer1 that runs in a chip, or layer23 that > runs on a PC? If it would be in layer23, encrypting a data stream with > AES 128 whould be doable, am I missing something? Yeah, it has been discussed in this thread: http://lists.osmocom.org/pipermail/baseband-devel/2011-January/000991.html It would be really nice if you would make some experiment and post the patch and result. Especially it would be nice to know the experience when there is transcoding and when there's no-transcoding between various operator. It would be very nice to have a 13kbit/s raw channel to be used to transport encrypted AMR 4.75 audio samples :-) -naif From nicki240 at yahoo.de Tue Apr 10 14:40:37 2012 From: nicki240 at yahoo.de (nicki240) Date: Tue, 10 Apr 2012 07:40:37 -0700 (PDT) Subject: Looks connected but no cells avaible ? Message-ID: <1334068837158-3899846.post@n3.nabble.com> Hi If I insert show cell 1 , it will show me no cells . show cell 1 : ARFCN |MCC |MNC |LAC |cell ID|forb.LA|prio |min-db |max-pwr|rx-lev -------+-------+-------+-------+-------+-------+-------+-------+-------+------- OsmocomBB# But It found a signal and I have an IMSI For more Information and help with the Call rejected Problem here : http://baseband-devel.722152.n3.nabble.com/Call-has-been-rejected-tt3896636.html Thanks and Sorry for bad English -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Looks-connected-but-no-cells-avaible-tp3899846p3899846.html Sent from the baseband-devel mailing list archive at Nabble.com. From gouchengcheng at gmail.com Fri Apr 13 00:39:03 2012 From: gouchengcheng at gmail.com (Chengcheng Gou) Date: Fri, 13 Apr 2012 08:39:03 +0800 Subject: The mobile app error Message-ID: hello I run the mobile app, but the error occur: What about the cause of the error,and how to solve it? Thanks? LOSS counter for ACCH 31 Dropping frame with 86 bit errors Dropping frame with 84 bit errors Dropping frame with 79 bit errors LOSS counter for ACCH 30 Dropping frame with 82 bit errors Dropping frame with 82 bit errors Dropping frame with 89 bit errors LOSS counter for ACCH 29 Dropping frame with 86 bit errors Dropping frame with 76 bit errors Dropping frame with 70 bit errors LOSS counter for ACCH 28 Dropping frame with 88 bit errors Dropping frame with 79 bit errors Dropping frame with 70 bit errors LOSS counter for ACCH 27 From heiko at sntech.de Fri Apr 13 13:47:41 2012 From: heiko at sntech.de (Heiko =?iso-8859-1?q?St=FCbner?=) Date: Fri, 13 Apr 2012 15:47:41 +0200 Subject: Interest in a driver for MT5921 wifi chip? Message-ID: <201204131547.42617.heiko@sntech.de> Hi, Synopsis -------- I started on a driver for the MT5921 wlan chip from MediaTek and am now trying to find developers wo would be interested in this, as I don't have the necessary knowledge of the whole wireless part, or to determine if trying this is completely futile. Available is: - a (hopefully) nearly complete register-map of the chip - my initial work of basic communication through its spi interface up to and including reading the chips eeprom - a proprietary driver through which it's possible to log the spi-traffic Also it seems I would be able to provide hardware to interested parties. MT5921 and MediaTek ------------------- The MT5921 [1] can be connected via SPI, SDIO, HPI and compact flash. It seems to be used mostly in phones based on MediaTek SoCs, but also gained a relatively wide spread through the ebook readers from Qisda (Oyo in germany, Fnacbook / Sagem Binder in france, bq Avant in spain, Positivo Alfa in brazil, Mr. Book in russia, ...). MediaTek itself does not provide any information about the chip and also does not seem to answer inquiries [via various channels] at all. From talks to some of the device makers, I gathered that MediaTek also completely refuses to release any material to them. The proprietary driver mentioned above also seems to have been made by MediaTek directly. The device ---------- I'm working on the Qisda ebook readers mentioned above (S3C2416 with 400MHz or S3C2450 with 533MHz depending on the device). The overall support at this point is quite good, including the driver for the epd controller, multitouch- capable capacitive touchscreen, suspending and resuming the device. Impressions of these devices can be found on [2]. I have a spare "Oyo 1" that was donated to me, that I could redonate for this and it seems I could gain the support of one of the device makers, who will also supply a small number of devices, if I can find interested developers for this endavour. State of the driver ------------------- The kernel release by Alcatel of their OT890 [3] did include headers describing most of the chips registers and the eeprom structure of the sdio version. It explicitly did non include sources for the wifi driver itself. For things like chip signature and mac address, the eeprom struct also matches the spi version, so I guess it could match also for most of the non-sdio stuff On the Qisda devices modifying the underlying spi-dev driver makes it possible to log the traffic the module sends to and receives from the chip.There also exists a debug-version of the proprietary module that emits more in-depth information on what it's currently doing [4]. I also build a crude script [5] to convert these dumps to a representation of registers and constants form the header. There are probably better tools around to do such things, but it made the reading of the dumps easier, like: Array ( [mode] => write [register] => MCR_RFCR [reg-desc] => Receive Filter Control Register [valstr] => RFCR_RX_SAMEBSSIDPRORESP_CTRL | RFCR_RX_SAMEBSSIDBCN_CTRL [unmatched] => 0x0 ) As written above, bringup of and basic communication with the device works and I'm lacking the necessary knowledge of the whole wireless part. So, if anybody is interested in this I would be very happy :-) . Thanks Heiko [1] http://www.mediatek.com/en/Products/product_content.php?sn=48 [2] http://www.youtube.com/user/MMind81 [3] http://sourceforge.net/projects/alcatel/files/ [4] examples in https://gitorious.org/oyo-hack/kernel/blobs/topic/board/sg060/drivers/net/wireless/mt592x/mt5921-modprobe.log https://gitorious.org/oyo-hack/kernel/blobs/topic/board/sg060/drivers/net/wireless/mt592x/mt5921-scan.log [5] https://gitorious.org/oyo-hack/kernel/blobs/topic/board/sg060/drivers/net/wireless/mt592x/dump-to-defs.php From gouchengcheng at gmail.com Mon Apr 16 02:18:23 2012 From: gouchengcheng at gmail.com (Chengcheng Gou) Date: Mon, 16 Apr 2012 10:18:23 +0800 Subject: how to establish a dedicated channel using OsmocomBB Message-ID: hello anyone can give a demo in the misc floder? From wojenge at strathmore.edu Mon Apr 16 16:37:24 2012 From: wojenge at strathmore.edu (Winston Ojenge) Date: Mon, 16 Apr 2012 19:37:24 +0300 Subject: Mobile phone to act as RF frequency sesnor and detector Message-ID: Dear all, I lecture at strathmore university, Kenya, East Africa. For my PhD, i need to develop a cell-phone model that senses and recognizes a specific RF frequency from a source. It then submits the value of that frequency by SMS. Is it possible to use the OsmocomBB platform to program such a device using motorola C123? Ojenge From wojenge at strathmore.edu Mon Apr 16 17:31:33 2012 From: wojenge at strathmore.edu (Winston Ojenge) Date: Mon, 16 Apr 2012 20:31:33 +0300 Subject: Mobile phone to act as RF frequency sesnor and detector In-Reply-To: References: Message-ID: Dear all, I lecture at strathmore university, Kenya, East Africa. For my PhD, i need to develop a cell-phone model that senses and recognizes a specific RF frequency from a source. It then submits the value of that frequency by SMS. Is it possible to use the OsmocomBB platform to program such a device using motorola C123? Ojenge On 4/16/12, Winston Ojenge wrote: > Dear all, > I lecture at strathmore university, Kenya, East Africa. For my PhD, i > need to develop a cell-phone model that senses and recognizes a > specific RF frequency from a source. It then submits the value of that > frequency by SMS. > > Is it possible to use the OsmocomBB platform to program such a device > using motorola C123? > > Ojenge > From andreas at eversberg.eu Mon Apr 16 19:30:48 2012 From: andreas at eversberg.eu (Andreas Eversberg) Date: Mon, 16 Apr 2012 21:30:48 +0200 Subject: Mobile phone to act as RF frequency sesnor and detector In-Reply-To: References: Message-ID: <4F8C7368.3030800@eversberg.eu> Winston Ojenge wrote: > Dear all, > I lecture at strathmore university, Kenya, East Africa. For my PhD, i > need to develop a cell-phone model that senses and recognizes a > specific RF frequency from a source. It then submits the value of that > frequency by SMS. > > Is it possible to use the OsmocomBB platform to program such a device > using motorola C123? > > Ojenge > > > On 4/16/12, Winston Ojenge wrote: >> Dear all, >> I lecture at strathmore university, Kenya, East Africa. For my PhD, i >> need to develop a cell-phone model that senses and recognizes a >> specific RF frequency from a source. It then submits the value of that >> frequency by SMS. >> >> Is it possible to use the OsmocomBB platform to program such a device >> using motorola C123? >> >> Ojenge >> hi ojenge, osmocombb supports sms. you can also "sense" RF frequence, but you need to add some feature to do measurement at the first plane and then send the sms with the results. c123 is capable of receiving GSM downlink frequencies only. you may also receive uplink and even (with modifications to the firmware) receive frequencies a bit outside GSM bands. in this case you need to replace filters or your signal level is reduced. the osmocombb firmware is capable of measuring rx levels of given frequencies while being idle on a gsm cell. what do you want to "sense"? regards, andreas From wojenge at strathmore.edu Thu Apr 19 08:41:56 2012 From: wojenge at strathmore.edu (Winston Ojenge) Date: Thu, 19 Apr 2012 11:41:56 +0300 Subject: Mobile phone to act as RF frequency sesnor and detector In-Reply-To: <4F8C7368.3030800@eversberg.eu> References: <4F8C7368.3030800@eversberg.eu> Message-ID: Hi Andreas, Is my line of interest irrelevant to the OsmocomBB project? In short, is the project intending to explore use of the phone for anything besides the conventional calling and conventional SMS. If you recall, my interest was to write code to enable the phone to 'sense' and detect signal from a remote source of few metres. I need to be able to write the code. Can i? I need a response desperately so that i stop cluttering the forum. Ojenge On 4/16/12, Andreas Eversberg wrote: > Winston Ojenge wrote: >> Dear all, >> I lecture at strathmore university, Kenya, East Africa. For my PhD, i >> need to develop a cell-phone model that senses and recognizes a >> specific RF frequency from a source. It then submits the value of that >> frequency by SMS. >> >> Is it possible to use the OsmocomBB platform to program such a device >> using motorola C123? >> >> Ojenge >> >> >> On 4/16/12, Winston Ojenge wrote: >>> Dear all, >>> I lecture at strathmore university, Kenya, East Africa. For my PhD, i >>> need to develop a cell-phone model that senses and recognizes a >>> specific RF frequency from a source. It then submits the value of that >>> frequency by SMS. >>> >>> Is it possible to use the OsmocomBB platform to program such a device >>> using motorola C123? >>> >>> Ojenge >>> > hi ojenge, > > osmocombb supports sms. you can also "sense" RF frequence, but you need > to add some feature to do measurement at the first plane and then send > the sms with the results. c123 is capable of receiving GSM downlink > frequencies only. you may also receive uplink and even (with > modifications to the firmware) receive frequencies a bit outside GSM > bands. in this case you need to replace filters or your signal level is > reduced. the osmocombb firmware is capable of measuring rx levels of > given frequencies while being idle on a gsm cell. what do you want to > "sense"? > > regards, > > andreas > > From wojenge at strathmore.edu Thu Apr 19 08:43:25 2012 From: wojenge at strathmore.edu (Winston Ojenge) Date: Thu, 19 Apr 2012 11:43:25 +0300 Subject: Mobile phone to act as RF frequency sesnor and detector In-Reply-To: References: <4F8C7368.3030800@eversberg.eu> Message-ID: On 4/19/12, Winston Ojenge wrote: > Hi Andreas, I need to develop a model that identifies human interaction. I need to identify the mobile phones that communicate next to a specific mobile phone consistently. it would show the acquintances of the owner of the specific mobile phone. The specific mobile phone should therefore be able to sense signals from the nearby phones. those phones which signals are always powerful must be next to it always. I need to harvest the received signal of the specific phone. The received signal must have been down-converted and digitized in order to be accessible to a program that i design. The program would detect the identity of the nearby phones and send an SMS to a control centre for analysis. the c123 must enable me do this. > Is my line of interest irrelevant to the OsmocomBB project? In short, > is the project intending to explore use of the phone for anything > besides the conventional calling and conventional SMS. If you recall, > my interest was to write code to enable the phone to 'sense' and > detect signal from a remote source of few metres. I need to be able to > write the code. Can i? > I need a response desperately so that i stop cluttering the forum. > > Ojenge > > > > On 4/16/12, Andreas Eversberg wrote: >> Winston Ojenge wrote: >>> Dear all, >>> I lecture at strathmore university, Kenya, East Africa. For my PhD, i >>> need to develop a cell-phone model that senses and recognizes a >>> specific RF frequency from a source. It then submits the value of that >>> frequency by SMS. >>> >>> Is it possible to use the OsmocomBB platform to program such a device >>> using motorola C123? >>> >>> Ojenge >>> >>> >>> On 4/16/12, Winston Ojenge wrote: >>>> Dear all, >>>> I lecture at strathmore university, Kenya, East Africa. For my PhD, i >>>> need to develop a cell-phone model that senses and recognizes a >>>> specific RF frequency from a source. It then submits the value of that >>>> frequency by SMS. >>>> >>>> Is it possible to use the OsmocomBB platform to program such a device >>>> using motorola C123? >>>> >>>> Ojenge >>>> >> hi ojenge, >> >> osmocombb supports sms. you can also "sense" RF frequence, but you need >> to add some feature to do measurement at the first plane and then send >> the sms with the results. c123 is capable of receiving GSM downlink >> frequencies only. you may also receive uplink and even (with >> modifications to the firmware) receive frequencies a bit outside GSM >> bands. in this case you need to replace filters or your signal level is >> reduced. the osmocombb firmware is capable of measuring rx levels of >> given frequencies while being idle on a gsm cell. what do you want to >> "sense"? >> >> regards, >> >> andreas >> >> > From andreas at eversberg.eu Thu Apr 19 14:51:55 2012 From: andreas at eversberg.eu (Andreas Eversberg) Date: Thu, 19 Apr 2012 16:51:55 +0200 Subject: Mobile phone to act as RF frequency sesnor and detector In-Reply-To: References: <4F8C7368.3030800@eversberg.eu> Message-ID: <4F90268B.6020807@eversberg.eu> hi ojenge, you need to perform two steps: 1. you need to alter the neighbour cell measurement task in mobile/gsm322.c, so it will not measure neighbour cells in idle mode, but measure whatever you like. you can define up to 32 frequencies. after you've received the results, you can keep them, change them or change them back to start over, until you have measured the full range you want. you must give + ARFCN_UPLINK in order to measure other phones. 2. as you have a complete set of frequencies you wanted to scan, you need to generate an sms with these results. note that you cannot sync nor read any messages from the surrounding phones with the neighbour cell measurement task. you just get the rx level of what passes through the filters. also note that the current code will only run on a host, so you need a laptop/netbook/embedded hardware to use the c123 with osmocombb. i suggest start reading the gsm322.c, it does most of the idle process. regards, andreas From wojenge at strathmore.edu Fri Apr 20 07:10:21 2012 From: wojenge at strathmore.edu (Winston Ojenge) Date: Fri, 20 Apr 2012 10:10:21 +0300 Subject: Mobile phone to act as RF frequency sesnor and detector In-Reply-To: <4F90268B.6020807@eversberg.eu> References: <4F8C7368.3030800@eversberg.eu> <4F90268B.6020807@eversberg.eu> Message-ID: Hi Andreas, Much appreciation. I have to do it as long as it's possible. Thanks. Will update forum on my results progress. Ojenge On 4/19/12, Andreas Eversberg wrote: > hi ojenge, > > you need to perform two steps: > > 1. you need to alter the neighbour cell measurement task in > mobile/gsm322.c, so it will not measure neighbour cells in idle mode, > but measure whatever you like. you can define up to 32 frequencies. > after you've received the results, you can keep them, change them or > change them back to start over, until you have measured the full range > you want. you must give + ARFCN_UPLINK in order to measure other > phones. > > 2. as you have a complete set of frequencies you wanted to scan, you > need to generate an sms with these results. > > note that you cannot sync nor read any messages from the surrounding > phones with the neighbour cell measurement task. you just get the rx > level of what passes through the filters. > > also note that the current code will only run on a host, so you need a > laptop/netbook/embedded hardware to use the c123 with osmocombb. > > i suggest start reading the gsm322.c, it does most of the idle process. > > regards, > > andreas > > From wojenge at strathmore.edu Fri Apr 20 08:08:21 2012 From: wojenge at strathmore.edu (Winston Ojenge) Date: Fri, 20 Apr 2012 11:08:21 +0300 Subject: Mobile phone to act as RF frequency sesnor and detector In-Reply-To: References: <4F8C7368.3030800@eversberg.eu> <4F90268B.6020807@eversberg.eu> Message-ID: Hi Andreas. Much appreciation, but one more question. Can OsmocomBB code recognize any other signals which are non-GSM in the neighborhood of the c123, for instance, signals generated by radio/TV receivers? How can it be made to recognize them? Ojenge On 4/20/12, Winston Ojenge wrote: > Hi Andreas, > Much appreciation. I have to do it as long as it's possible. Thanks. > Will update forum on my results progress. > Ojenge > > On 4/19/12, Andreas Eversberg wrote: >> hi ojenge, >> >> you need to perform two steps: >> >> 1. you need to alter the neighbour cell measurement task in >> mobile/gsm322.c, so it will not measure neighbour cells in idle mode, >> but measure whatever you like. you can define up to 32 frequencies. >> after you've received the results, you can keep them, change them or >> change them back to start over, until you have measured the full range >> you want. you must give + ARFCN_UPLINK in order to measure other >> phones. >> >> 2. as you have a complete set of frequencies you wanted to scan, you >> need to generate an sms with these results. >> >> note that you cannot sync nor read any messages from the surrounding >> phones with the neighbour cell measurement task. you just get the rx >> level of what passes through the filters. >> >> also note that the current code will only run on a host, so you need a >> laptop/netbook/embedded hardware to use the c123 with osmocombb. >> >> i suggest start reading the gsm322.c, it does most of the idle process. >> >> regards, >> >> andreas >> >> > From gouchengcheng at gmail.com Tue Apr 17 01:42:04 2012 From: gouchengcheng at gmail.com (Chengcheng Gou) Date: Tue, 17 Apr 2012 09:42:04 +0800 Subject: bug report about mobile Message-ID: I am testing mobile app and when the program exit, it occur the flowing errors: Dropping frame with 85 bit errors LOSS counter for ACCH 31 Dropping frame with 85 bit errors Dropping frame with 86 bit errors Dropping frame with 78 bit errors LOSS counter for ACCH 30 Dropping frame with 79 bit errors Dropping frame with 77 bit errors Dropping frame with 86 bit errors From gouchengcheng at gmail.com Wed Apr 18 11:54:04 2012 From: gouchengcheng at gmail.com (Chengcheng Gou) Date: Wed, 18 Apr 2012 19:54:04 +0800 Subject: How to implement HLR lookup free Message-ID: hello How to implement HLR lookup free ? From holger at freyther.de Wed Apr 18 12:16:59 2012 From: holger at freyther.de (Holger Hans Peter Freyther) Date: Wed, 18 Apr 2012 14:16:59 +0200 Subject: How to implement HLR lookup free In-Reply-To: References: Message-ID: <4F8EB0BB.7030907@freyther.de> On 04/18/2012 01:54 PM, Chengcheng Gou wrote: > hello Dear Chengcheng, it is nice you are interested in OsmocomBB but please be more verbose in your emails. E.g. how does OsmocomBB (the wiki, the code, the documentation, the awareness) benefit from somebody giving you free support? Regarding your question, the Mobile Station has no direct connection to the SS7 network, so a phone can not query a HLR. holger From gouchengcheng at gmail.com Wed Apr 18 12:49:43 2012 From: gouchengcheng at gmail.com (gcc) Date: Wed, 18 Apr 2012 05:49:43 -0700 (PDT) Subject: How to implement HLR lookup free In-Reply-To: <4F8EB0BB.7030907@freyther.de> References: <4F8EB0BB.7030907@freyther.de> Message-ID: <1334753383685-3919849.post@n3.nabble.com> I am sorry for my bad english, I want to implement a HLR lookup for some information. such as the site RoutoMessaging.com provides the service for charge,so I want to know how to implement by myself and not rely on the site. -- View this message in context: http://baseband-devel.722152.n3.nabble.com/How-to-implement-HLR-lookup-free-tp3919745p3919849.html Sent from the baseband-devel mailing list archive at Nabble.com. From laforge at gnumonks.org Wed Apr 18 12:52:30 2012 From: laforge at gnumonks.org (Harald Welte) Date: Wed, 18 Apr 2012 14:52:30 +0200 Subject: How to implement HLR lookup free In-Reply-To: <1334753383685-3919849.post@n3.nabble.com> References: <4F8EB0BB.7030907@freyther.de> <1334753383685-3919849.post@n3.nabble.com> Message-ID: <20120418125230.GW8268@prithivi.gnumonks.org> On Wed, Apr 18, 2012 at 05:49:43AM -0700, gcc wrote: > I am sorry for my bad english, I want to implement a HLR lookup for some > information. > such as the site RoutoMessaging.com provides the service for charge,so I > want to know how to implement by myself and not rely on the site. you cannot implement it as you need SCCP access, i.e. be a mobile operator. Also, this is off-topic on this mailing list, as it is completely unrelated to development of a Free Software baseband protocol stack. -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From Max.Suraev at fairwaves.ru Fri Apr 20 15:09:25 2012 From: Max.Suraev at fairwaves.ru (Max) Date: Fri, 20 Apr 2012 23:09:25 +0800 Subject: CKSN clarification Message-ID: <4F917C25.5000707@fairwaves.ru> Hello. CKSN - Ciphering Key Sequence Number is associated with Kc and is a bit trickier than trivial counter. According to GSM 04.08 (p. 278 in v5.3.0 in my case) it's comprised as follows: * 3 bits - actual key sequence (value 111 seems to be reserved) * 1 bit - always 0 * 3 bits - CKSN IEI Could you help me to understand how to properly generate it: - the last bit (8th) is not specified - does it mean it's always 0? - what is CKSN IEI and how do I calculate\use it? - am I right that 3-bit key seq. value is simple counter that I increment with each Kc generation? - what do I do when key seq. reach 6 - start over with 0 again? And of course I'm interested if CKSN-related code is available as part of libosmogsm or some other open source project: the code is always helpful in understanding and I don't have to reinvent the wheel :) best regards, Max. From 246tnt at gmail.com Fri Apr 20 15:30:19 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Fri, 20 Apr 2012 17:30:19 +0200 Subject: [Openbts-discuss] CKSN clarification In-Reply-To: <4F917C25.5000707@fairwaves.ru> References: <4F917C25.5000707@fairwaves.ru> Message-ID: > CKSN - Ciphering Key Sequence Number is associated with Kc and is a bit trickier than > trivial counter. No it's not ... it's really just a counter. Just with 1 bit fixed to 0 and a a reserved value. 7 is reserved as "invalid". When the MS sends that, it means it has no Kc whatsoever to re-use. > - what is CKSN IEI and how do I calculate\use it? It's nothing. Really. For whatever reason when they describe an IE they add this "IEI" field which is nothing but documentation. Don't worry about it, just consider it's not there and the CKSN is 4 bits only. > - am I right that 3-bit key seq. value is simple counter that I increment with each > Kc generation? > - what do I do when key seq. reach 6 - start over with 0 again? Sure. But you can actually count in any way you'd like. The only requirement is that you don't reuse the one sent by the phone and you don't use 7. > And of course I'm interested if CKSN-related code is available as part of libosmogsm > or some other open source project: the code is always helpful in understanding and I > don't have to reinvent the wheel :) OpenBSC handles the key_seq in the authentication procedure. But there is really nothing to it. Cheers, Sylvain From alexander.chemeris at gmail.com Fri Apr 20 15:33:41 2012 From: alexander.chemeris at gmail.com (Alexander Chemeris) Date: Fri, 20 Apr 2012 19:33:41 +0400 Subject: [Openbts-discuss] CKSN clarification In-Reply-To: <4F917C25.5000707@fairwaves.ru> References: <4F917C25.5000707@fairwaves.ru> Message-ID: Max, On Fri, Apr 20, 2012 at 19:09, Max wrote: > - what is CKSN IEI and how do I calculate\use it? IEI is a Information Element Identi?er, which is a part of TLV-coded (Type-Length-Value) Information Elements (IEs). In other words, IEI represents type (T) of the data payload which follows it. TLV is an encoding used in most of the classical GSM protocols. I don't recall where it is described in the Standard, but here is a nice paper which you easily find on Google which describes ciphering and described TLV structure as well (section 6.1.2): http://www.cs.ru.nl/~fabianbr/scriptie.pdf -- Regards, Alexander Chemeris. CEO, Fairwaves LLC / ??? ??????? http://fairwaves.ru From alexander.chemeris at gmail.com Fri Apr 20 15:44:41 2012 From: alexander.chemeris at gmail.com (Alexander Chemeris) Date: Fri, 20 Apr 2012 19:44:41 +0400 Subject: [Openbts-discuss] CKSN clarification In-Reply-To: References: <4F917C25.5000707@fairwaves.ru> Message-ID: On Fri, Apr 20, 2012 at 19:33, Alexander Chemeris wrote: > Max, > > On Fri, Apr 20, 2012 at 19:09, Max wrote: >> - what is CKSN IEI and how do I calculate\use it? > > IEI is a Information Element Identi?er, which is a part of TLV-coded > (Type-Length-Value) Information Elements (IEs). In other words, IEI > represents type (T) of the data payload which follows it. TLV is an > encoding used in most of the classical GSM protocols. I don't recall > where it is described in the Standard, but here is a nice paper which > you easily find on Google which describes ciphering and described TLV > structure as well (section 6.1.2): > http://www.cs.ru.nl/~fabianbr/scriptie.pdf But as Sylvain mentioned, in almost all cases CKSN is sent as "V" IE, so no IEI is needed. The only place where you seem to need CKSN IEI is in GPRS Mobility Management Messages "Authentication and ciphering request" (section 9.4.9), where it CKSN is sent as "TV" IE. And there in the table left column you see the IEI value "8-", meaning that it's "8-in-the-MSB". -- Regards, Alexander Chemeris. CEO, Fairwaves LLC / ??? ??????? http://fairwaves.ru From roladunjoye at gmail.com Sat Apr 21 10:47:57 2012 From: roladunjoye at gmail.com (rola) Date: Sat, 21 Apr 2012 03:47:57 -0700 (PDT) Subject: Basic Set Up For PCS 1900 Message-ID: <1335005277867-3927952.post@n3.nabble.com> Hi all: I've been on and off trying to set up Osmocom-BB for quite a while now. I've tried using several Cxxx with no luck of being able to lock on to a cell. I shifted to Pirelli_dpl10 hoping to avoid configuration change required of dual-band phones to work with Osmocom-BB but no positive outcome. I'm using Sylvain testing branch with transmit enabled; create mobile config file with PCS1900 and GSM850 as the only bands to be supported. For US Motorola dual band phones c139 and c155, I modified the required section of the rffe file to support PCS1900; and for Pirelli, I made the recommended modification to UART option before being able to communicate with the device. I guess I did all what need to be done for preliminary setting. Layer1 load perfectly but mobile application never work. Sim reader worked perfectly; Sim information was read, mobile app used the previous PLMN information to start power measurement. I was able to get average power of -92dB with Pirelli but while still performing the scanning the result output repeatedly fix prim_pm.c file with value to be overwrite message. I guess the issue has to do with passing the right parameters to layer1 to perform ARFCN scanning in order to obtain power measurement of the available channels. I'm not really sure if there is need to modify any part of layer1 or Rita files before accurate measurement could be done for PCS1900. I'm not that deeply knowledgeable in GSM standard but I can still figure out what to do if any hint is given toward what need to be done before PCS1900 band will work with any osmocom-compatible phone. I know that some people have worked on PCS1900 and GSM850 but there is no information towards what need to be done in terms of specific file to hack to change default GSM900 and DCS1800 bands configurations to GSM850 and PCS1900. I am pretty much sure that If I were in Europe I would by now step up from trying to make Osmocom lock to a serving cell to the point studying the code to work for a specific purpose. I am using the project as part of thesis work to analyze the Um interface and to explain processes that occur between BTS and mobile station. I will so much appreciate it if anyone could be of any help. Thanks. Rasak -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Basic-Set-Up-For-PCS-1900-tp3927952p3927952.html Sent from the baseband-devel mailing list archive at Nabble.com. From laforge at gnumonks.org Mon Apr 23 20:54:51 2012 From: laforge at gnumonks.org (Harald Welte) Date: Mon, 23 Apr 2012 22:54:51 +0200 Subject: April 25, 7pm / Regular Osmocom meeting in Berlin? Message-ID: <20120423205451.GS4592@prithivi.gnumonks.org> Hi all! This is the announcement for the 2nd incarnation of our bi-weekly Osmocom Berlin meeting. April 25, 7pm @ CCC Berlin, Marienstr. 11, 10113 Berlin The schedule is as follows: 19:00 Introduction into the TETRA base station located @ CCCB For quite some time, there is a full TETRA base station located in the Berlin CCC, consisting of two base radios (BR), a site controller (TSC), an auto-tuning cavity combiner and other equipment. The talk will introduce the architecture of the system and the current status of getting it running. 20:00 Presenting the CC32RS512 / towards an Osmocom Card OS The CC32RS512 is a flash-based smart card controller to which the documentation is available without NDA. This means that we finally are able to implement a Smart Card OS (COS) as free software. 20:30 Informal discussions If you are interested to show up, feel free to do so. There is no registration required. If the initial part is not interesting to you, feel free to join us later at 20:30. The meeting is free as in "free beer", despite no actual free beer being around ;) Regards, Harald -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From maxfeldman14 at berkeley.edu Mon Apr 23 23:48:43 2012 From: maxfeldman14 at berkeley.edu (maxfeldman14 at berkeley.edu) Date: Mon, 23 Apr 2012 16:48:43 -0700 Subject: Osmocom RRLP Message-ID: <66a74c18caeeefb9163aff0b7beea11a.squirrel@calmail.berkeley.edu> To whom it may concern: Has anyone implemented RRLP request handling in osmocombb's layer 3? We are particularly interested in the transmission of GPS data. Additionally, if anyone has any helpful advice/documentation on the message format which is more detailed or useful than the gsm 04.31 spec we would greatly appreciate it. Thanks you, Max Feldman From kheimerl at cs.berkeley.edu Tue Apr 24 06:00:52 2012 From: kheimerl at cs.berkeley.edu (Kurtis Heimerl) Date: Mon, 23 Apr 2012 23:00:52 -0700 Subject: PLMN Scan Rate when off network Message-ID: Hi Baseband, I'm trying to figure out if there's any standard set for how often a handset should scan for signal when out of coverage. I haven't been able to find much, just the following in 3GPP TS 22.011: 3.2.2.2 At switch-on or recovery from lack of coverage If registration cannot be achieved on any PLMN, the UE shall indicate "no service" to the user, wait until a new PLMN is detected, or new location areas of an allowed PLMN are found which are not in the forbidden LA list(s), and then repeat the procedure. When registration cannot be achieved, different (discontinuous) PLMN search schemes may be used in order to minimize the access time while maintaining battery life, e.g. by prioritising the search in favour of BCCH carriers which have a high probability of belonging to an available and allowable PLMN. Sounds like it's up to each manufacturer to just pick a delay? Any other thoughts/intuitions which might help us bound this number? Thanks! From pere5027 at vandals.uidaho.edu Wed Apr 25 21:30:08 2012 From: pere5027 at vandals.uidaho.edu (Joshua Pereyda) Date: Wed, 25 Apr 2012 14:30:08 -0700 Subject: What does FBSB RESP: result=255 mean? Message-ID: Hello, Hopefully this question is appropriate on this list (please let me know otherwise). Running ccch_scan or bcch_scan in the sylvain/burst_ind branch, I keep getting this error: <000c> l1ctl.c:114 FBSB RESP: result=255 I tried checking the code, but I can't quite figure out what's going on. It looks like 255 is an error code, but I don't know where to go from there. This may be related to my SIM card being locked (I think). Running mobile on the sylvain/testing branch, I get: <0005> subscriber.c:625 PIN is required, 3 tries left Will not having the PIN intefere with ccch_scan as well? Thanks, Josh Pereyda From 246tnt at gmail.com Wed Apr 25 23:45:42 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Thu, 26 Apr 2012 01:45:42 +0200 Subject: What does FBSB RESP: result=255 mean? In-Reply-To: References: Message-ID: Hi, > Running ccch_scan or bcch_scan in the sylvain/burst_ind branch, I keep > getting this error: bcch_scan doesn't make sense on burst_ind. Only ccch_scan is meant to do anything useful, all the other apps may do random things becaue they're not meant for use in burst_ind. > <000c> l1ctl.c:114 FBSB RESP: result=255 > > I tried checking the code, but I can't quite figure out what's going on. ?It > looks like 255 is an error code, but I don't know where to go from there. It just means failure to sync ... Most likely the ARFCN you gave doesn't carry a valid C0. Note that it's only tested on 900/1800. US band support is not tested and probably not functional especially in burst_ind. Fixing it is left as an exercise to the reader ... > This may be related to my SIM card being locked (I think). ?Running mobile on > the sylvain/testing branch, I get: > > <0005> subscriber.c:625 PIN is required, 3 tries left > > Will not having the PIN intefere with ccch_scan as well? No. Cheers, Sylvain From martin at windycitysdr.com Thu Apr 26 21:05:11 2012 From: martin at windycitysdr.com (Martin O'Shield) Date: Thu, 26 Apr 2012 16:05:11 -0500 Subject: Whats the best recommended Sim Card R/W for the SysmoSim Card Message-ID: Hello All, What is the preferred Sim Card Reader/Writer for the SysmoSim Card, A.K.A., the GrCard Sim? And is the following known to work reliably with the SysmoSim Card? SIM Reader kit - v1.0http://www.adafruit.com/products/101I contacted Adafruit.com yesterday and they explained that their device doesn't work on all Sim Cards. Any assistance would be greatly appreciated. Sincerely, Martin -------------- next part -------------- An HTML attachment was scrubbed... URL: From ml at mail.tsaitgaist.info Thu Apr 26 22:07:00 2012 From: ml at mail.tsaitgaist.info (Kevin Redon) Date: Fri, 27 Apr 2012 00:07:00 +0200 Subject: Whats the best recommended Sim Card R/W for the SysmoSim Card In-Reply-To: References: Message-ID: <1335477323-sup-3935@dennou> Excerpts from Martin O'Shield's message of Thu Apr 26 23:05:11 +0200 2012: > What is the preferred Sim Card Reader/Writer for the SysmoSim Card, > A.K.A., the GrCard Sim? You can use just any PCSC supported smart card reader, preferably a CCID compliant USB reader. OmniKey is a reference, but the pkey smartcard reader (a bit cheaper, with lots of clones) is also very handy. tsaitgaist From laforge at gnumonks.org Fri Apr 27 08:07:54 2012 From: laforge at gnumonks.org (Harald Welte) Date: Fri, 27 Apr 2012 10:07:54 +0200 Subject: Whats the best recommended Sim Card R/W for the SysmoSim Card In-Reply-To: References: Message-ID: <20120427080754.GC31632@prithivi.gnumonks.org> Hi Martin, On Thu, Apr 26, 2012 at 04:05:11PM -0500, Martin O'Shield wrote: > What is the preferred Sim Card Reader/Writer for the SysmoSim Card, > A.K.A., the GrCard Sim? There is no "preferred reader". Any reader compatible with ISO 7816-2 an -3 should work with the SIM Card. Otherwise, how would one make sure that the sim card works in all phones? > And is the following known to work reliably with the SysmoSim Card? > SIM Reader kit - v1.0http://www.adafruit.com/products/101I contacted > Adafruit.com yesterday and they explained that their device > doesn't work on all Sim Cards. Well, then _they_ should be able to explain why that is, and what exactly those restrictions are. I would strongly recommend for a device that claims compliance to the ISO 7816 specs. And I would go for a reader that supports USB-CCID and is compatible with libccid / pcsc-lite on Linux: http://pcsclite.alioth.debian.org/ccid/supported.html Regards, Harald -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From dario.lombardo at libero.it Fri Apr 27 09:24:30 2012 From: dario.lombardo at libero.it (Dario Lombardo) Date: Fri, 27 Apr 2012 11:24:30 +0200 Subject: Frequency hopping Message-ID: Hello everybody What happens when a mobile station is in a cell that uses hopping, but the mobile locks to that cell (for instance using the function of the engineering menu of a BB)? Is the hopping mandatory or the ms can continue working also without it? Does osmocom support hopping? What are the commands of the mobile interface (if they exist) to show how the hopping is going? Is it possible to lock with osmocom too? Thanks for the answers. Dario. -------------- next part -------------- An HTML attachment was scrubbed... URL: From 246tnt at gmail.com Fri Apr 27 12:31:31 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Fri, 27 Apr 2012 14:31:31 +0200 Subject: Frequency hopping In-Reply-To: References: Message-ID: Hi, > What happens when a mobile station is in a cell that uses hopping, but the > mobile locks to that cell (for instance using the function of the > engineering menu of a BB)? "Cell Locking" is only for IDLE mode, when selection which ARFCN to camp on (broadcast channel). Hopping is only for dedicated channels. One has no influence on the other. > Is the hopping mandatory ?or the ms can continue working also without it? Mandatory. If the MS received an ASSIGNEMENT command with hopping enabled it has to follow it. (or loose signal ...) > Does osmocom support hopping? Yes > What are the commands of the mobile interface > (if they exist) to show how the hopping is going? I don't think there is any. But in the log when following the assignement command you should see some info about the multiple ARFCN if there is hopping. > Is it possible to lock with osmocom too? Look at the 'stick' option in config. Cheers, Sylvain From darranpr at yahoo.com Fri Apr 27 23:19:50 2012 From: darranpr at yahoo.com (Darran.Lee) Date: Fri, 27 Apr 2012 16:19:50 -0700 (PDT) Subject: Arkmicro Technologies Inc. ARK3116 Serial Message-ID: <1335568790.74122.YahooMailClassic@web160506.mail.bf1.yahoo.com> Hi I am trying to use an Arkmicro Technologies ARK3116 USB to serial cable to communicate with my C118. I have compiled Osmocom-bb successfully on my Debian Squeeze laptop. When I try to run the osmocon utility I get an error "Cannot open serial device /dev/ttyUSB0" My dmesg etc output is: [ 769.752182] usb 5-2: new full speed USB device using uhci_hcd and address 5 [ 769.908979] usb 5-2: New USB device found, idVendor=6547, idProduct=0232 [ 769.908988] usb 5-2: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 769.908995] usb 5-2: Product: USB-UART Controller [ 769.909000] usb 5-2: Manufacturer: ArkMicroChips [ 769.909192] usb 5-2: configuration #1 chosen from 1 choice [ 770.029492] usbcore: registered new interface driver usbserial [ 770.029740] USB Serial support registered for generic [ 770.030002] usbcore: registered new interface driver usbserial_generic [ 770.030005] usbserial: USB Serial Driver core [ 770.047650] USB Serial support registered for ark3116 [ 770.048263] ark3116 5-2:1.0: ark3116 converter detected [ 770.076254] usb 5-2: ark3116 converter now attached to ttyUSB0 [ 770.076305] usbcore: registered new interface driver ark3116 ls -l /dev/tty* crw-rw---- 1 root dialout 4, 64 Apr 27 21:01 /dev/ttyS0 crw-rw---- 1 root dialout 4, 65 Apr 27 21:01 /dev/ttyS1 crw-rw---- 1 root dialout 4, 66 Apr 27 21:01 /dev/ttyS2 crw-rw---- 1 root dialout 4, 67 Apr 27 21:01 /dev/ttyS3 crw-rw---- 1 root dialout 188, 0 Apr 27 21:14 /dev/ttyUSB0 lsusb Bus 005 Device 005: ID 6547:0232 Arkmicro Technologies Inc. ARK3116 Serial Bus 005 Device 004: ID 09da:0006 A4 Tech Co., Ltd Optical Mouse WOP-35 / Trust 450L Optical Mouse Bus 005 Device 003: ID 1631:5002 Good Way Technology Bus 005 Device 002: ID 1631:5400 Good Way Technology Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub So I am assuming the drivers are installed correctly but if I run osmocon I get: ./osmocon -p /dev/ttyUSB0 -m c123xor ../../target/firmware/board/compal_e88/loader.compalram.bin Cannot open serial device /dev/ttyUSB0 My Question is, does anyone here have any experience with the Arkmicro Technologies ARK3116 Serial cable? Is there something I have missed? Thanks Tokala -------------- next part -------------- An HTML attachment was scrubbed... URL: From holger at freyther.de Sat Apr 28 16:00:58 2012 From: holger at freyther.de (Holger Hans Peter Freyther) Date: Sat, 28 Apr 2012 18:00:58 +0200 Subject: Arkmicro Technologies Inc. ARK3116 Serial In-Reply-To: <1335568790.74122.YahooMailClassic@web160506.mail.bf1.yahoo.com> References: <1335568790.74122.YahooMailClassic@web160506.mail.bf1.yahoo.com> Message-ID: <4F9C143A.3000902@freyther.de> On 04/28/2012 01:19 AM, Darran.Lee wrote: > crw-rw---- 1 root dialout 188, 0 Apr 27 21:14 /dev/ttyUSB0 you are not in the dialout group? type "id" in a shell and see which groups you are in. From gouchengcheng at gmail.com Sat Apr 28 00:54:06 2012 From: gouchengcheng at gmail.com (Chengcheng Gou) Date: Sat, 28 Apr 2012 08:54:06 +0800 Subject: How one can get the address of the functions and Variables in the DSP assemble code In-Reply-To: References: Message-ID: hello, I have the problem ,such as how to get the address of the functions and Variables in the DSP assemble code,such as in +; DSP Sniffing task patch +; ---------------------------------------------------------------------------- +; Known symbols +; ---------------------------------------------------------------------------- + + ; Variables +patch_install_fptr .equ 0x3F6B ; Patch install function ptr +dsp_page .equ 0x3FB0 ; Current ndb.d_dsp_page +task_fn_entry .equ 0x4387 + 23 ; Task 23 index in JT_4387 + + ; Functions +a5_setup .equ 0xB12C +dma_queue_setup .equ 0xB74C + +jt4387_exec .equ 0xA9EA + +fq_4320_push .equ 0xAA9F +fq_4330_push .equ 0xAA6C +fq_4340_push .equ 0xAAC3 + Can anyone tell me the way to do that?! thanks! From 246tnt at gmail.com Sat Apr 28 07:45:53 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Sat, 28 Apr 2012 09:45:53 +0200 Subject: How one can get the address of the functions and Variables in the DSP assemble code In-Reply-To: References: Message-ID: > Can anyone tell me the way to do that?! Spend a lot of hours starring at the disassembled DSP code and eventually it will make sense. (YMMV) Cheers, Sylvain From GNUtoo at no-log.org Mon Apr 30 14:38:42 2012 From: GNUtoo at no-log.org (Denis 'GNUtoo' Carikli) Date: Mon, 30 Apr 2012 16:38:42 +0200 Subject: should we continue to focus on nuttx? Message-ID: <12150909.QP7hAsS4GH@gnutoo-desktop> The other day on IRC I was told that: >Apr 29 00:34:36 last thing i heard was that nuttx was superseded in favor of a more lightweight solution And: >Apr 29 00:41:03 http://openbsc.osmocom.org/trac/wiki/OsmoDevCon2012/Minutes#a18:30roundtablerectangulartableonOsmocomBB which was made back in march(we also started working on nuttx near march) and contains the following: >laf: summary we could not gain much from nuttx, rockbox could provide use with UI (inspiration)? steve: framebuffer is mosly compatible I wasn't aware of all that. Also I don't have much details on what was said since I wans't there... Should me and Alan Carvalho de Assis continue the work we are doing? What is the current plan? our status is here: http://bb.osmocom.org/trac/wiki/nuttx-bb/drivers The current work on my side is to: * make serial work without sercomm(done locally,just some configuration change) * unbreak the booting of the calypso(require serial to work without sercomm,the commit that created the problem has been identified, how to fix is a work in progress) * I also tried to change toolchain(I generated a toolchain with openembedded) to see if it fixed the issue but according to Gregory it's not the right fix. * I also identified some dummy functions in the nuttx version of sercomm that we should get rid of. On Alan Carvalho de Assis side : he's trying to make the keypad work but he has some difficulties with it. Denis. From laforge at gnumonks.org Mon Apr 30 16:02:16 2012 From: laforge at gnumonks.org (Harald Welte) Date: Mon, 30 Apr 2012 18:02:16 +0200 Subject: should we continue to focus on nuttx? In-Reply-To: <12150909.QP7hAsS4GH@gnutoo-desktop> References: <12150909.QP7hAsS4GH@gnutoo-desktop> Message-ID: <20120430160216.GG15890@prithivi.gnumonks.org> Hi Denis, there was no decision on OsmoDevCon, apart from some opinions. I'm not aware of anyone actually having reviewed/evaluated rockbox at this point. The general point was that we apparently don't really _need_ a "full OS" like NuttX, but there are other solutions like rockbox that may bring in other useful parts like a UI for low-resolution dot-matrix displays. I guess until somebody actually tries and experiments with an early port of rockbox to the calypso, we won't know what is the best way to move forward :/ And in general, everybody seems to be busy with lots of other things, so I'm not sure if (and when) that might happen. Regards, Harald -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From spudarnia at yahoo.com Mon Apr 30 17:14:28 2012 From: spudarnia at yahoo.com (Gregory Nutt) Date: Mon, 30 Apr 2012 10:14:28 -0700 (PDT) Subject: should we continue to focus on nuttx? In-Reply-To: <20120430160216.GG15890@prithivi.gnumonks.org> References: <12150909.QP7hAsS4GH@gnutoo-desktop> <20120430160216.GG15890@prithivi.gnumonks.org> Message-ID: <1335806068.61062.YahooMailNeo@web31816.mail.mud.yahoo.com> Hi, all, Of course, I am not impartial, but I do want to point out two things.? First, there appears to be some misconception that NuttX is big and heavyweight.? That is certainly not true.? Most implementations use only about 40Kb or so (depending on the features that you incorporate).? And you can get it as small as 12Kb; it will run on a z8 or an 8051 or an AVR with 4Kb of RAM.? That 40Kb footprint is for a complete environment that might include displays, USB, networking, filesystem, support etc.? Well, if you include everything it pushes about 50Kb. So I have trouble understanding that the issue there.? And secondly, NuttX does have a rather complete graphics capability.? Probably the best in class: 1. A window system like a tiny X? that is scalable from a single thread solution to a full multiple NX server (see http://nuttx.sourceforge.net/NXGraphicsSubsystem.html and http://nuttx.svn.sourceforge.net/viewvc/nuttx/trunk/nuttx/graphics/), 2. An extensive "widget" for adding buttons, textboxes, etc. to NuttX.? This has only been released to open source recently but is fairly matured because it has been integrated into commercial products (http://nuttx.sourceforge.net/NxWidgets.html and http://nuttx.svn.sourceforge.net/viewvc/nuttx/trunk/NxWidgets/). 3. Finally, I am currently developing a tiny window manager that I am calling nxwm.? This was inspired by the Matchbox Window Manager concept:? That is, it is truly multiple window manager but only one window is display in time.? This simplification helps performance on LCD based products (in the same way that a tiled window manager helps) and also makes the best use of small displays.? It is awkward trying to manage multiple windows on a small display. nxwm is oriented toward tiny screens with touch capability.? It supports a task bar and a start menu with the normal meanings.? I have only been working on this for about 3-4 days,and I don't expect to have this complete for another week or so.? But it is something else that you should be aware of if graphics support is important to you. The code is growing here:? http://nuttx.svn.sourceforge.net/viewvc/nuttx/trunk/NxWidgets/nxwm/. But I find that RTOSs tend to be religious topics.? People get strong opinions with very little information. So other than providing all of the information that I can and providing the best support that I can, I am not involved in this decision. Greg ________________________________ From: Harald Welte To: Denis 'GNUtoo' Carikli Cc: baseband-devel at lists.osmocom.org; Alan Carvalho de Assis ; Gregory N Sent: Monday, April 30, 2012 10:02 AM Subject: Re: should we continue to focus on nuttx? Hi Denis, there was no decision on OsmoDevCon, apart from some opinions. I'm not aware of anyone actually having reviewed/evaluated rockbox at this point. The general point was that we apparently don't really _need_ a "full OS" like NuttX, but there are other solutions like rockbox that may bring in other useful parts like a UI for low-resolution dot-matrix displays. I guess until somebody actually tries and experiments with an early port of rockbox to the calypso, we won't know what is the best way to move forward :/ And in general, everybody seems to be busy with lots of other things, so I'm not sure if (and when) that might happen. Regards, ??? Harald -- - Harald Welte ? ? ? ? ? http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? (ETSI EN 300 175-7 Ch. A6) -------------- next part -------------- An HTML attachment was scrubbed... URL: From acassis at gmail.com Mon Apr 30 17:30:47 2012 From: acassis at gmail.com (Alan Carvalho de Assis) Date: Mon, 30 Apr 2012 14:30:47 -0300 Subject: should we continue to focus on nuttx? In-Reply-To: <20120430160216.GG15890@prithivi.gnumonks.org> References: <12150909.QP7hAsS4GH@gnutoo-desktop> <20120430160216.GG15890@prithivi.gnumonks.org> Message-ID: Hi Harald, First all sorry top-posting... NuttX also have support to dot-matrix displays, see this "mp3 player" running NuttX: http://www.youtube.com/watch?v=A39rsIf07AA Best Regards, Alan On 4/30/12, Harald Welte wrote: > Hi Denis, > > there was no decision on OsmoDevCon, apart from some opinions. > > I'm not aware of anyone actually having reviewed/evaluated rockbox at > this point. > > The general point was that we apparently don't really _need_ a "full OS" > like NuttX, but there are other solutions like rockbox that may bring in > other useful parts like a UI for low-resolution dot-matrix displays. > > I guess until somebody actually tries and experiments with an early port > of rockbox to the calypso, we won't know what is the best way to move > forward :/ > > And in general, everybody seems to be busy with lots of other things, so > I'm not sure if (and when) that might happen. > > Regards, > Harald > > -- > - Harald Welte > http://laforge.gnumonks.org/ > ============================================================================ > "Privacy in residential applications is a desirable marketing option." > (ETSI EN 300 175-7 Ch. > A6) > From spudarnia at yahoo.com Mon Apr 30 21:14:23 2012 From: spudarnia at yahoo.com (Gregory Nutt) Date: Mon, 30 Apr 2012 14:14:23 -0700 (PDT) Subject: should we continue to focus on nuttx? In-Reply-To: References: <12150909.QP7hAsS4GH@gnutoo-desktop> <20120430160216.GG15890@prithivi.gnumonks.org> Message-ID: <1335820463.80082.YahooMailNeo@web31801.mail.mud.yahoo.com> > First all sorry top-posting... Hmmm... I did that too. > NuttX also have support to dot-matrix displays, see this "mp3 player" running NuttX: > > http://www.youtube.com/watch?v=A39rsIf07AA I'm not certain, but I don't think that this example is using any of the NuttX graphics facilities.? I am not sure what he is doing, but the fonts don't look familiar (NuttX supports 17 different? Helvetica and Times Roman fonts) and the drawing certainly does not come from Nuttx.? I don't have any good demos of the graphics from NuttX but they are all rendered as "3-D" images.? I've attached the output of the button array unit test to give you a better idea of what I mean. (That attached PNG came from here: http://nuttx.svn.sourceforge.net/viewvc/nuttx/trunk/NxWidgets/UnitTests/CButtonArray/cbuttonarray.png?view=log) This button array, by the way, can used with a touchscreen as an on-screen keyboard (with the output going to an edit box).? "Widgets" like this have already been used to implement the complete GUI for a medical device. Greg -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: cbuttonarray.png Type: image/png Size: 35615 bytes Desc: not available URL: