From altaf329 at gmail.com Wed Jun 6 15:06:38 2012 From: altaf329 at gmail.com (Altaf) Date: Wed, 6 Jun 2012 08:06:38 -0700 (PDT) Subject: bursts****.dat In-Reply-To: <296655.56965.qm@web45801.mail.sp1.yahoo.com> References: <296655.56965.qm@web45801.mail.sp1.yahoo.com> Message-ID: <1338995198135-4025041.post@n3.nabble.com> Hai list.. when I run both Mobile application and ccch_scan, the mobile application is getting freezed... what could be the reason. Were you able to get the raw bursts.? -- View this message in context: http://baseband-devel.722152.n3.nabble.com/bursts-dat-tp2660735p4025041.html Sent from the baseband-devel mailing list archive at Nabble.com. From 246tnt at gmail.com Wed Jun 6 15:13:56 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Wed, 6 Jun 2012 17:13:56 +0200 Subject: bursts****.dat In-Reply-To: <1338995198135-4025041.post@n3.nabble.com> References: <296655.56965.qm@web45801.mail.sp1.yahoo.com> <1338995198135-4025041.post@n3.nabble.com> Message-ID: > when I run both Mobile application and ccch_scan, ?the mobile application is > getting freezed... what could be the reason. 1) You can run two applications at the same time .... duh ... 2) The mobile application won't even work in the burst_ind branch. only ccch_scan is usage in that branch. From 246tnt at gmail.com Wed Jun 6 15:14:29 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Wed, 6 Jun 2012 17:14:29 +0200 Subject: bursts****.dat In-Reply-To: References: <296655.56965.qm@web45801.mail.sp1.yahoo.com> <1338995198135-4025041.post@n3.nabble.com> Message-ID: > 1) You can run two applications at the same time .... duh ... " can't " typed to fast ... From lonelysurfer at web.de Wed Jun 6 15:56:33 2012 From: lonelysurfer at web.de (lonelysurfer) Date: Wed, 6 Jun 2012 08:56:33 -0700 (PDT) Subject: bursts****.dat In-Reply-To: <296655.56965.qm@web45801.mail.sp1.yahoo.com> References: <296655.56965.qm@web45801.mail.sp1.yahoo.com> Message-ID: <1338998193344-4025045.post@n3.nabble.com> struct l1ctl_burst_ind { uint32_t frame_nr; uint16_t band_arfcn; /* ARFCN + band + ul indicator */ uint8_t chan_nr; /* GSM 08.58 channel number (9.3.1) */ uint8_t flags; /* BI_FLG_xxx + burst_id = 2LSBs */ uint8_t rx_level; /* 0 .. 63 in typical GSM notation (dBm+110) */ uint8_t snr; /* Reported SNR >> 8 (0-255) */ uint8_t bits[15]; /* 114 bits + 2 steal bits. Filled MSB first */ } __attribute__((packed)); -- View this message in context: http://baseband-devel.722152.n3.nabble.com/bursts-dat-tp2660735p4025045.html Sent from the baseband-devel mailing list archive at Nabble.com. From altaf329 at gmail.com Thu Jun 7 11:22:19 2012 From: altaf329 at gmail.com (Altaf) Date: Thu, 7 Jun 2012 04:22:19 -0700 (PDT) Subject: Osmocom-bb Making a call In-Reply-To: <1338309066299-4021037.post@n3.nabble.com> References: <1337179742649-3997264.post@n3.nabble.com> <1337481180142-4002984.post@n3.nabble.com> <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> Message-ID: <1339068139245-4025047.post@n3.nabble.com> Hai list. I am actually working on a test network which does not have the encryption. when we sniff the data using the dsp_sniff and receive bursts, if these bursts contains SMS, they can read and decoded from Wireshark Gsmtap... right..? Incase if the bursts contain voice samples we need code from airprobe in order to convert from bursts to audio.. right.? thanx Altaf -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Osmocom-bb-Making-a-call-tp3997264p4025047.html Sent from the baseband-devel mailing list archive at Nabble.com. From 246tnt at gmail.com Thu Jun 7 11:29:27 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Thu, 7 Jun 2012 13:29:27 +0200 Subject: Osmocom-bb Making a call In-Reply-To: <1339068139245-4025047.post@n3.nabble.com> References: <1337179742649-3997264.post@n3.nabble.com> <1337481180142-4002984.post@n3.nabble.com> <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> Message-ID: > when we sniff the data using the dsp_sniff ?and receive bursts, if these > bursts contains SMS, they can read and decoded from Wireshark Gsmtap... > right..? Yes > Incase if the bursts contain voice samples we need code from airprobe in > order to convert from bursts to audio.. right.? Yes Cheers, Sylvain From altaf329 at gmail.com Fri Jun 8 12:20:39 2012 From: altaf329 at gmail.com (Altaf) Date: Fri, 8 Jun 2012 05:20:39 -0700 (PDT) Subject: Osmocom-bb Making a call In-Reply-To: References: <1337179742649-3997264.post@n3.nabble.com> <1337481180142-4002984.post@n3.nabble.com> <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> Message-ID: <1339158039487-4025049.post@n3.nabble.com> The Wireshark is unable to display the voice frames that are carried on TCH. I am able to see the SI 5 and 6..... I can see the SMS decoded clearly. but not the voice frames. How can I also see the voice frames. thanx Altaf -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Osmocom-bb-Making-a-call-tp3997264p4025049.html Sent from the baseband-devel mailing list archive at Nabble.com. From altaf329 at gmail.com Fri Jun 8 12:33:07 2012 From: altaf329 at gmail.com (Altaf) Date: Fri, 8 Jun 2012 05:33:07 -0700 (PDT) Subject: Osmocom-bb Making a call In-Reply-To: References: <1337179742649-3997264.post@n3.nabble.com> <1337481180142-4002984.post@n3.nabble.com> <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> Message-ID: <1339158787030-4025050.post@n3.nabble.com> Hai...... The Wireshark with GSMtap i use is unable to display the voice frames that are carried on TCH. I am able to see the SI 5 and 6..... and all other measurement reports... between the initiation and termination of a call..... I can see the SMS decoded clearly..... but not sign voice frames. Could it be the problem with the Hardware/serial cable i use.....? How can I also see the voice frames. ? Thanx Altaf -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Osmocom-bb-Making-a-call-tp3997264p4025050.html Sent from the baseband-devel mailing list archive at Nabble.com. From altaf329 at gmail.com Fri Jun 8 12:42:42 2012 From: altaf329 at gmail.com (Altaf) Date: Fri, 8 Jun 2012 05:42:42 -0700 (PDT) Subject: Osmocom-bb Making a call In-Reply-To: References: <1337179742649-3997264.post@n3.nabble.com> <1337481180142-4002984.post@n3.nabble.com> <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> Message-ID: <1339159362602-4025051.post@n3.nabble.com> Hai all...... The Wireshark with GSMtap i use is unable to display the voice frames that are carried on TCH. I am able to see the SI 5 and 6..... and all other measurement reports... between the initiation and termination of a call..... I can see the SMS decoded clearly..... but not sign voice frames. Could it be the problem with the Hardware/serial cable i use.....? or Running osmocombb, mobile application and wireshark is not sufficient to get the voice frames?? How can I also see the voice frames. ? Thanx Altaf -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Osmocom-bb-Making-a-call-tp3997264p4025051.html Sent from the baseband-devel mailing list archive at Nabble.com. From andreas at eversberg.eu Fri Jun 8 13:03:03 2012 From: andreas at eversberg.eu (Andreas Eversberg) Date: Fri, 08 Jun 2012 15:03:03 +0200 Subject: Osmocom-bb Making a call In-Reply-To: <1339159362602-4025051.post@n3.nabble.com> References: <1337179742649-3997264.post@n3.nabble.com> <1337481180142-4002984.post@n3.nabble.com> <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> <1339159362602-4025051.post@n3.nabble.com> Message-ID: <4FD1F807.6090302@eversberg.eu> Altaf wrote: > How can I also see the voice frames. ? > voice frames are only received, if osmocombb is used with external application, like LCR. even when they are received, they are not forwarded to wireshark. i doubt that wireshark will handle them. From altaf329 at gmail.com Mon Jun 11 08:40:34 2012 From: altaf329 at gmail.com (Altaf) Date: Mon, 11 Jun 2012 01:40:34 -0700 (PDT) Subject: Osmocom-bb Making a call In-Reply-To: <4FD1F807.6090302@eversberg.eu> References: <1337179742649-3997264.post@n3.nabble.com> <1337481180142-4002984.post@n3.nabble.com> <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> <1339159362602-4025051.post@n3.nabble.com> <4FD1F807.6090302@eversberg.eu> Message-ID: <1339404034989-4025054.post@n3.nabble.com> Is there any Howto connect OsmocomBB with LCR guide available..? -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Osmocom-bb-Making-a-call-tp3997264p4025054.html Sent from the baseband-devel mailing list archive at Nabble.com. From altaf329 at gmail.com Tue Jun 12 12:02:05 2012 From: altaf329 at gmail.com (Altaf) Date: Tue, 12 Jun 2012 05:02:05 -0700 (PDT) Subject: Osmocom-bb Making a call In-Reply-To: <1339404034989-4025054.post@n3.nabble.com> References: <1337481180142-4002984.post@n3.nabble.com> <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> <1339159362602-4025051.post@n3.nabble.com> <4FD1F807.6090302@eversberg.eu> <1339404034989-4025054.post@n3.nabble.com> Message-ID: <1339502525325-4025058.post@n3.nabble.com> Hello... I read in the ML that a voice.raw file is generated when we make a call and when i am using sylvain/testing branch. But i dont get that file.. Where is it generated.? The dsp_sniff patch is removed from the source code.. /src/target_dsp/calypso/dsp_sniff.patch... Is it true.? Thanx Altaf -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Osmocom-bb-Making-a-call-tp3997264p4025058.html Sent from the baseband-devel mailing list archive at Nabble.com. From 246tnt at gmail.com Tue Jun 12 12:08:53 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Tue, 12 Jun 2012 14:08:53 +0200 Subject: Osmocom-bb Making a call In-Reply-To: <1339502525325-4025058.post@n3.nabble.com> References: <1337481180142-4002984.post@n3.nabble.com> <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> <1339159362602-4025051.post@n3.nabble.com> <4FD1F807.6090302@eversberg.eu> <1339404034989-4025054.post@n3.nabble.com> <1339502525325-4025058.post@n3.nabble.com> Message-ID: Hi, > I read in the ML that a voice.raw file is generated when we make a call and > when i am using sylvain/testing branch. But i dont get that file.. Where is > it generated.? Nowhere, that was some test code from a long time ago. That was for sending/receiving voice frames when you use the _normal_ firmware to make a phone call. The capability is now merged and can be used if you use your own custom MNCC control application (i.e. like the LCR integration). > The dsp_sniff patch is removed from the source code.. > /src/target_dsp/calypso/dsp_sniff.patch... > ?Is it true.? The sniff patch is only in the burst_ind branch and that branch is _NOT_ usable as a normal phone (i.e. the 'mobile' application won't do anything coherent), only the ccch_scan application will do some sniffing demo (and I emphasize _DEMO_, it's by no mean a complete tool). See the http://bb.osmocom.org/trac/wiki/Sniffing and the linked pages for details. Cheers, Sylvain From altaf329 at gmail.com Fri Jun 29 09:35:55 2012 From: altaf329 at gmail.com (Altaf) Date: Fri, 29 Jun 2012 02:35:55 -0700 (PDT) Subject: Osmocom-bb Making a call In-Reply-To: References: <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> <1339159362602-4025051.post@n3.nabble.com> <4FD1F807.6090302@eversberg.eu> <1339404034989-4025054.post@n3.nabble.com> <1339502525325-4025058.post@n3.nabble.com> Message-ID: <1340962555365-4025103.post@n3.nabble.com> Hello everybody. I make the LCR integration and encounter this error. root at cwm-LIFEBOOK-S7110:~/project/lcr-1.10# lcr start ** LCR Version 1.10 000000 DEBUG (in getrulesetbyname() line 1871): ruleset main found. 000000 DEBUG (in mISDNloop_open() line 36): Open external interface of loopback. 000000 DEBUG (in mISDNport_open() line 2388): Port has 20 b-channels. 000000 DEBUG (in mISDNport_open() line 2409): using 'mISDN_dsp.o' module 000000 TRACE 29.06.12 11:28:12.620 CH: PORT (open) port 1 mode network channels 20 000000 DEBUG (in gsm_ms_new() line 805): GSM: interface for MS '1 /tmp/osmocom_l2' is created 000000 ERROR (in mncc_socket_retry_cb() line 1101): Could not connect to MNCC socket /tmp/ms_mncc_1 /tmp/osmocom_l2, retrying in 5 seconds 000000 DEBUG (in mISDNport_open() line 2388): Port has 20 b-channels. 000000 DEBUG (in mISDNport_open() line 2409): using 'mISDN_dsp.o' module 000000 TRACE 29.06.12 11:28:12.621 CH: PORT (open) port 0 mode terminal channels 20 LCR 1.10 started, waiting for calls... 000000 TRACE 29.06.12 11:28:12.635 --: LCR 1.10 started, waiting for calls... 000000 DEBUG (in mISDN_upqueue() line 1869): Received MPH_INFORMATION_IND for port 0 (Ext). 000000 TRACE 29.06.12 11:28:12.635 CH: PH_DEACTIVATE INDICATION U<-N port 0 000000 DEBUG (in mISDN_upqueue() line 1869): Received MPH_INFORMATION_IND for port 0 (Ext). 000000 DEBUG (in mISDN_upqueue() line 1869): Received MPH_INFORMATION_IND for port 0 (Ext). 000000 ERROR (in mncc_socket_retry_cb() line 1101): Could not connect to MNCC socket /tmp/ms_mncc_1 /tmp/osmocom_l2, retrying in 5 seconds $ lcradmin state GSM(port 1: mISDN_l1loop.2) NT ptmp use:0 L1 UP Ext(port 0: mISDN_l1loop.1) TE ptmp use:0 L2 unkn L1 down can you give some hint where i am going wrong. thank you altaf -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Osmocom-bb-Making-a-call-tp3997264p4025103.html Sent from the baseband-devel mailing list archive at Nabble.com. From lonelysurfer at web.de Tue Jun 12 12:15:12 2012 From: lonelysurfer at web.de (lonelysurfer) Date: Tue, 12 Jun 2012 05:15:12 -0700 (PDT) Subject: Osmocom-bb Making a call In-Reply-To: <1339502525325-4025058.post@n3.nabble.com> References: <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> <1339159362602-4025051.post@n3.nabble.com> <4FD1F807.6090302@eversberg.eu> <1339404034989-4025054.post@n3.nabble.com> <1339502525325-4025058.post@n3.nabble.com> Message-ID: <1339503312697-4025060.post@n3.nabble.com> voice.raw is generated by l1ctl.c (without the dsp_sniff patch). perhaps u missed that code : http://cgit.osmocom.org/cgit/osmocom-bb/commit/?h=sylvain/testing&id=60e16c618818106a7d5a1529bd239035e8bc219b&ss=1&ignorews=1 http://cgit.osmocom.org/cgit/osmocom-bb/commit/?h=sylvain/testing&id=60e16c618818106a7d5a1529bd239035e8bc219b&ss=1&ignorews=1 -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Osmocom-bb-Making-a-call-tp3997264p4025060.html Sent from the baseband-devel mailing list archive at Nabble.com. From 246tnt at gmail.com Tue Jun 12 12:18:50 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Tue, 12 Jun 2012 14:18:50 +0200 Subject: Osmocom-bb Making a call In-Reply-To: <1339503312697-4025060.post@n3.nabble.com> References: <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> <1339159362602-4025051.post@n3.nabble.com> <4FD1F807.6090302@eversberg.eu> <1339404034989-4025054.post@n3.nabble.com> <1339502525325-4025058.post@n3.nabble.com> <1339503312697-4025060.post@n3.nabble.com> Message-ID: > voice.raw is generated by l1ctl.c (without the dsp_sniff patch). > perhaps u missed that code ?: > http://cgit.osmocom.org/cgit/osmocom-bb/commit/?h=sylvain/testing&id=60e16c618818106a7d5a1529bd239035e8bc219b&ss=1&ignorews=1 That code doesn't exist anymore, in any branch. From wbg_1000 at yahoo.com Wed Jun 13 11:44:04 2012 From: wbg_1000 at yahoo.com (eisencah eisenach) Date: Wed, 13 Jun 2012 04:44:04 -0700 (PDT) Subject: SIM driver question In-Reply-To: <1339503312697-4025060.post@n3.nabble.com> References: <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> <1339159362602-4025051.post@n3.nabble.com> <4FD1F807.6090302@eversberg.eu> <1339404034989-4025054.post@n3.nabble.com> <1339502525325-4025058.post@n3.nabble.com> <1339503312697-4025060.post@n3.nabble.com> Message-ID: <1339587844.29750.YahooMailNeo@web112118.mail.gq1.yahoo.com> Hi. Is there any reason why in the sim_handler()? function,? in ??? case SIM_STATE_TX_DATA: ??? ??? if (!txDoneFlag) ??? ??? ??? break; /* wait until data is transmitted */ ??? ??? /* Disable all interrupt driven functions */ ??? ??? writew(0xFF, REG_SIM_MASKIT); ??? ??? /* Ignore waiting char for RUN GSM ALGORITHM */ ??? ??? /* TODO: implement proper handling of the "Procedure Bytes" ??? ??? ?? than this is no longer needed */ ??? ??? if(sim_data[1] == 0x88) ??? ??? ??? sim_ignore_waiting_char = 1; ??? ??? sim_state = SIM_STATE_RX_STATUS; ??? ??? calypso_sim_receive(response + length + 1, 2); ??? ??? break; we do "calypso_sim_receive(response + length + 1, 2);" instead of?? "calypso_sim_receive(response + 1, 2);". Seems an unnecessary overhead sending back some junk chars there. Or I'm missing something? Cheers, Mihai. -------------- next part -------------- An HTML attachment was scrubbed... URL: From andreas at eversberg.eu Fri Jun 15 07:08:43 2012 From: andreas at eversberg.eu (Andreas Eversberg) Date: Fri, 15 Jun 2012 09:08:43 +0200 Subject: SIM driver question In-Reply-To: <1339587844.29750.YahooMailNeo@web112118.mail.gq1.yahoo.com> References: <1337616604963-4005068.post@n3.nabble.com> <1337620599359-4005183.post@n3.nabble.com> <1338309066299-4021037.post@n3.nabble.com> <1339068139245-4025047.post@n3.nabble.com> <1339159362602-4025051.post@n3.nabble.com> <4FD1F807.6090302@eversberg.eu> <1339404034989-4025054.post@n3.nabble.com> <1339502525325-4025058.post@n3.nabble.com> <1339503312697-4025060.post@n3.nabble.com> <1339587844.29750.YahooMailNeo@web112118.mail.gq1.yahoo.com> Message-ID: <4FDADF7B.5060007@eversberg.eu> eisencah eisenach wrote: > > Hi. > Is there any reason why in the sim_handler() function, in > > case SIM_STATE_TX_DATA: > if (!txDoneFlag) > break; /* wait until data is transmitted */ > /* Disable all interrupt driven functions */ > writew(0xFF, REG_SIM_MASKIT); > /* Ignore waiting char for RUN GSM ALGORITHM */ > /* TODO: implement proper handling of the "Procedure Bytes" > than this is no longer needed */ > if(sim_data[1] == 0x88) > sim_ignore_waiting_char = 1; > sim_state = SIM_STATE_RX_STATUS; > calypso_sim_receive(response + length + 1, 2); > break; > > we do "calypso_sim_receive(response + length + 1, 2);" instead of > "calypso_sim_receive(response + 1, 2);". > Seems an unnecessary overhead sending back some junk chars there. Or > I'm missing something? > Cheers, > Mihai. > hi mihai, iirc, there is a reason for that. the response is allocated with length + 1 + 2. at the end of the response string, there are the status bytes, so "length + 1" is added, so the status will appear at the end of the response message. the upper layer always reads the status from the last two bytes. if you would remove the length, the status would be at the wrong place. regards, andreas -------------- next part -------------- An HTML attachment was scrubbed... URL: From holger at freyther.de Tue Jun 19 19:01:11 2012 From: holger at freyther.de (Holger Hans Peter Freyther) Date: Tue, 19 Jun 2012 21:01:11 +0200 Subject: Osmocom user group meetings in Berlin In-Reply-To: <20120525164623.GY14653@prithivi.gnumonks.org> References: <20120525164623.GY14653@prithivi.gnumonks.org> Message-ID: <4FE0CC77.6040107@freyther.de> On 05/25/2012 06:46 PM, Harald Welte wrote: > Hi all, > June 13, 2012 > June 27, 2012 we got this wrong the last two weeks. Kevin and me met on the 6th, I am sorry if someone was in front of closed doors last week. The next meeting will be on the 27th. sorry holger From lonelysurfer at web.de Tue Jun 12 11:16:32 2012 From: lonelysurfer at web.de (lonelysurfer) Date: Tue, 12 Jun 2012 04:16:32 -0700 (PDT) Subject: the airprobe port to BB In-Reply-To: References: Message-ID: <1339499792233-4025056.post@n3.nabble.com> I pushed the unpacked bits of osmocom-bb into a new structure with dummy tail and midamble (training sequence) bits and modded the process_normal__burst() to use the new input. SDCCH8 is working. For TCHF I need more time for testing. I don't know if processing the ass_cmd is sufficient. Perhaps more work on burst_ind is needed? Help is greatly appreciated. -- View this message in context: http://baseband-devel.722152.n3.nabble.com/the-airprobe-port-to-BB-tp4024444p4025056.html Sent from the baseband-devel mailing list archive at Nabble.com. From gouchengcheng at gmail.com Tue Jun 12 11:52:05 2012 From: gouchengcheng at gmail.com (gcc) Date: Tue, 12 Jun 2012 04:52:05 -0700 (PDT) Subject: the airprobe port to BB In-Reply-To: <1339499792233-4025056.post@n3.nabble.com> References: <1339499792233-4025056.post@n3.nabble.com> Message-ID: <1339501925214-4025057.post@n3.nabble.com> ass_cmd is enough for jump to the tch channel,and later you must decode the tch like sdcch. it may cost much time. -- View this message in context: http://baseband-devel.722152.n3.nabble.com/the-airprobe-port-to-BB-tp4024444p4025057.html Sent from the baseband-devel mailing list archive at Nabble.com. From gouchengcheng at gmail.com Mon Jun 4 03:54:43 2012 From: gouchengcheng at gmail.com (Chengcheng Gou) Date: Mon, 4 Jun 2012 11:54:43 +0800 Subject: Can bb switch from SACCH to TCH directly? Message-ID: hi, i am studying the TCH ,and can get the channel discription from SACCH, and My question is when I receive the ASS_CMD, I use l1ctl_tx_dm_est_req_h0 and jump to the new channel,but I can`t capture the TCH,why? Thanks! From lonelysurfer at web.de Mon Jun 4 15:44:35 2012 From: lonelysurfer at web.de (lonelysurfer) Date: Mon, 4 Jun 2012 08:44:35 -0700 (PDT) Subject: Can bb switch from SACCH to TCH directly? In-Reply-To: References: Message-ID: <1338824675607-4025039.post@n3.nabble.com> perhaps http://lists.osmocom.org/pipermail/baseband-devel/2011-March/001523.html http://lists.osmocom.org/pipermail/baseband-devel/2011-March/001523.html is helping. You can use a trigger for the l1ctl_tx_dm_est_req_hx. -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Can-bb-switch-from-SACCH-to-TCH-directly-tp4025038p4025039.html Sent from the baseband-devel mailing list archive at Nabble.com. From gouchengcheng at gmail.com Tue Jun 5 08:13:23 2012 From: gouchengcheng at gmail.com (Chengcheng Gou) Date: Tue, 5 Jun 2012 16:13:23 +0800 Subject: TCH Viterbi decode Parameter Message-ID: Hi? I am studying the tch code, and want to decode the Convolutional code of TCH using xcch.c; and how to set the parameters; 1. conv_xcch_next_output 2. conv_xcch_next_state 3. N = 2, 4. K = 5, static const uint8_t conv_xcch_next_output[][2] = { { 0, 3 }, { 1, 2 }, { 0, 3 }, { 1, 2 }, { 3, 0 }, { 2, 1 }, { 3, 0 }, { 2, 1 }, { 3, 0 }, { 2, 1 }, { 3, 0 }, { 2, 1 }, { 0, 3 }, { 1, 2 }, { 0, 3 }, { 1, 2 }, }; static const uint8_t conv_xcch_next_state[][2] = { { 0, 1 }, { 2, 3 }, { 4, 5 }, { 6, 7 }, { 8, 9 }, { 10, 11 }, { 12, 13 }, { 14, 15 }, { 0, 1 }, { 2, 3 }, { 4, 5 }, { 6, 7 }, { 8, 9 }, { 10, 11 }, { 12, 13 }, { 14, 15 }, }; const struct osmo_conv_code conv_xcch = { .N = 2, .K = 5, .len = 224, .next_output = conv_xcch_next_output, .next_state = conv_xcch_next_state, }; Thanks! From lonelysurfer at web.de Wed Jun 6 15:13:23 2012 From: lonelysurfer at web.de (lonelysurfer) Date: Wed, 6 Jun 2012 08:13:23 -0700 (PDT) Subject: TCH Viterbi decode Parameter In-Reply-To: References: Message-ID: <1338995603657-4025042.post@n3.nabble.com> you could start with facch http://git.gnumonks.org/cgi-bin/gitweb.cgi?p=airprobe.git;a=commitdiff;h=b6db913eeb1a037510e9f1fa74c9dad9ecf29d93 http://git.gnumonks.org/cgi-bin/gitweb.cgi?p=airprobe.git;a=commitdiff;h=b6db913eeb1a037510e9f1fa74c9dad9ecf29d93 -- View this message in context: http://baseband-devel.722152.n3.nabble.com/TCH-Viterbi-decode-Parameter-tp4025040p4025042.html Sent from the baseband-devel mailing list archive at Nabble.com. From gouchengcheng at gmail.com Thu Jun 7 08:53:10 2012 From: gouchengcheng at gmail.com (Chengcheng Gou) Date: Thu, 7 Jun 2012 16:53:10 +0800 Subject: open source 3G baseband process on MTK6575 Message-ID: hi, lists the MTK has launched a 3G chip solution MTK6575. I think it `s time to develop a 3G BB. does anyone interest in it? From pfc.rivas at gmail.com Fri Jun 8 19:05:13 2012 From: pfc.rivas at gmail.com (Arturo Rivas) Date: Fri, 8 Jun 2012 21:05:13 +0200 Subject: SuperSIM Message-ID: Hi! How can I to know the number phone of my SuperSIM to use it in OpenBSC? I need to know for probe telephone calls in OpenBSC because in this SIMs I can know IMSI to register in HLR. BS, Arturo Rivas. -------------- next part -------------- An HTML attachment was scrubbed... URL: From lonelysurfer at web.de Tue Jun 12 10:13:34 2012 From: lonelysurfer at web.de (lonelysurfer) Date: Tue, 12 Jun 2012 03:13:34 -0700 (PDT) Subject: bug in local_burst_decode() of burst_ind Message-ID: <1339496014472-4025055.post@n3.nabble.com> I reused the local_burst_decode function to decrypt the bursts offline. If I filter bi->flags & BI_FLG_SACCH, the sms decryption is working: local_burst_decode(struct l1ctl_burst_ind *bi) ... if (bid == -1) return; /* new */ if (bi->flags & BI_FLG_SACCH) return; ... -- View this message in context: http://baseband-devel.722152.n3.nabble.com/bug-in-local-burst-decode-of-burst-ind-tp4025055.html Sent from the baseband-devel mailing list archive at Nabble.com. From aegean2000 at 21cn.com Thu Jun 14 01:40:32 2012 From: aegean2000 at 21cn.com (Aegean Chou) Date: Thu, 14 Jun 2012 09:40:32 +0800 Subject: about osmocon on gta02 Message-ID: <20120614014031.7D5C6426F97@21cn.com> Dear lists, i want porting rssi and osmocon to GTA02, let them run on GTA02 stand-alone. then i'll try to write a program to decoding the received data. i already cross-compiled the latest osmocon to GTA02, then i disabled "ogsmd?ousaged and ophoned" in /etc/frameworkd.conf (actually, them are disabled default), and i commented "device_port and modem_access" in fsogsmd.conf to disable everything accessed to the modem, after rebooting, the "fuser /dev/ttySAC0" shows none. but when i use "./osmocon -i 13 -m romload -p /dev/ttySAC0 rssi.highram.bin", and "echo 0 > /sys/bus/platform/devices/gta02-pm-gsm.0/power_on && echo 1 > ..." /\ my SHR kernel use this device name for GSM power the osmocon always stalls about at the block 40, for example: ... ... Preparing block 39, block checksum is 0x4c handle_write_block(): 1024 bytes (1024/1024) handle_write_block(): Block 39 finished Received block ack from phone Preparing block 40, block checksum is 0xd5 handle_write_block(): 1024 bytes (1024/1024) handle_write_block(): Block 40 finished and i found that the osmocon start to download codes before my "GSM power reset", very strange, i tried the latest "SHR-core 20120427" and "unstable SHR-lite 20110822", i searched the list log, found "Dave" encounter the same problem, but he solved it after "re-flashing of the phone" i re-flashed the GSM firmware to latest Moko11 (before it's Moko10), but it's the same. BTW, i found that it always shows '1' when "cat /sys/bus/platform/devices/gta02-pm-gsm.0/power_on" even after "echo 0 >/sys/bus/platform/devices/gta02-pm-gsm.0/power_on", what's wrong? anyone can help help me? thanks very much. Best Regards Aegean 2012-06-13 From aegean2000 at 21cn.com Thu Jun 14 11:02:27 2012 From: aegean2000 at 21cn.com (Aegean Chou) Date: Thu, 14 Jun 2012 19:02:27 +0800 Subject: about osmocon on gta02 (Solved) Message-ID: <20120614110226.D987157FE7@21cn.com> Hi lists, I spend one day, finally solved it myself. 1) i checked the schematic of gta02 carefully, and found the PCF50633 use GPIO2(gsm_on) to control the power of GSM actually, and it have a test point H-TP1706. 2) i disassembled my gta02, then line out the H-TP1706 to my oscilloscope, i found the gsm_on signal always LOW 1s, and HIGH 4.2s, it's very strange. 3) i checked the service list, i found the fsogsmd (it's ogsmd?), maybe it's the background program. but i can't kill it. 4) finally, i try to set "disable = 0" in /etc/frameworkd.conf, reboot, my god, it solved. but the http://bb.osmocom.org/trac/wiki/OpenMoko only says: ?disable ogsmd, ousaged, ophoned via /etc/frameworkd.conf? i always think "disable = 1" should DISABLE it. but actually, "disable = 0" = DISABLE it; and "disable = 1" = ENABLE it? why it misleaded me so long, anybody can change it? thanks. Aegean ======= 2012-06-14 09:40:32 ======= >Dear lists, > > i want porting rssi and osmocon to GTA02, let them run on GTA02 stand-alone. > then i'll try to write a program to decoding the received data. > > i already cross-compiled the latest osmocon to GTA02, > then i disabled "ogsmd?ousaged and ophoned" in /etc/frameworkd.conf (actually, them are disabled default), > and i commented "device_port and modem_access" in fsogsmd.conf to disable everything accessed to the modem, > after rebooting, the "fuser /dev/ttySAC0" shows none. > > but when i use "./osmocon -i 13 -m romload -p /dev/ttySAC0 rssi.highram.bin", and > "echo 0 > /sys/bus/platform/devices/gta02-pm-gsm.0/power_on && echo 1 > ..." > /\ my SHR kernel use this device name for GSM power > the osmocon always stalls about at the block 40, for example: > ... ... > Preparing block 39, block checksum is 0x4c > handle_write_block(): 1024 bytes (1024/1024) > handle_write_block(): Block 39 finished > Received block ack from phone > Preparing block 40, block checksum is 0xd5 > handle_write_block(): 1024 bytes (1024/1024) > handle_write_block(): Block 40 finished > and i found that the osmocon start to download codes before my "GSM power reset", very strange, > > i tried the latest "SHR-core 20120427" and "unstable SHR-lite 20110822", > i searched the list log, found "Dave" encounter the same problem, but he solved it after "re-flashing of the phone" > i re-flashed the GSM firmware to latest Moko11 (before it's Moko10), but it's the same. > > BTW, i found that it always shows '1' when "cat /sys/bus/platform/devices/gta02-pm-gsm.0/power_on" > even after "echo 0 >/sys/bus/platform/devices/gta02-pm-gsm.0/power_on", what's wrong? > > anyone can help help me? > thanks very much. > >Best Regards >Aegean >2012-06-13 > = = = = = = = = = = = = = = = = = = = = Best regards ????????Aegean Chou ????????aegean2000 at 21cn.com ??????????2012-06-14 From 246tnt at gmail.com Thu Jun 14 11:09:10 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Thu, 14 Jun 2012 13:09:10 +0200 Subject: about osmocon on gta02 (Solved) In-Reply-To: <20120614110226.D987157FE7@21cn.com> References: <20120614110226.D987157FE7@21cn.com> Message-ID: Hi, > ? ? ? ?I spend one day, finally solved it myself. > > ? ? ? ?1) i checked the schematic of gta02 carefully, and found the PCF50633 use GPIO2(gsm_on) > ? ? ? ? to control the power of GSM actually, and it have a test point H-TP1706. > > ? ? ? ?2) i disassembled my gta02, then line out the H-TP1706 to my oscilloscope, i found the > ? ? ? ?gsm_on signal always LOW 1s, and HIGH 4.2s, it's very strange. > > ? ? ? ?3) i checked the service list, i found the fsogsmd (it's ogsmd?), maybe it's the background > ? ? ? ? program. but i can't kill it. > > ? ? ? ?4) finally, i try to set "disable = 0" in /etc/frameworkd.conf, reboot, my god, it solved. > ? ? ? ?but the http://bb.osmocom.org/trac/wiki/OpenMoko only says: > ? ? ? ? ? ? ? ??disable ogsmd, ousaged, ophoned via /etc/frameworkd.conf? > ? ? ? ?i always think "disable = 1" should DISABLE it. > > ? ? ? ?but actually, "disable = 0" = DISABLE it; and "disable = 1" = ENABLE it? why > ? ? ? ?it misleaded me so long, anybody can change it? thanks. Could you update the wiki with your findings please ? Request an account to Harald if you don't already have one. (should we have some sort of 'guest' account ? I don't mean open without auth but with a public login/pass) Cheers, Sylvain From akibsayyed at gmail.com Sun Jun 17 05:10:14 2012 From: akibsayyed at gmail.com (Akib Sayyed) Date: Sun, 17 Jun 2012 10:40:14 +0530 Subject: issue with burst_ind Message-ID: i am trying to run ccch_scan on OpenBTS network. but problem i am facing if i am running ccch_scan i cant see any IMM ASS. but when i run ccch_scan from non burst_ind (testing branch) then it does show IMM ASS. is it problem with burst_ind . -- Akib Sayyed Matrix-Shell akibsayyed at gmail.com akibsayyed at matrixshell.com Mob:- +91-966-514-2243 -------------- next part -------------- An HTML attachment was scrubbed... URL: From akibsayyed at gmail.com Sun Jun 17 06:49:03 2012 From: akibsayyed at gmail.com (Akib Sayyed) Date: Sun, 17 Jun 2012 12:19:03 +0530 Subject: issue with burst_ind In-Reply-To: References: Message-ID: i checked with real network also but i found that count of IMM_ASS from burst_ind ccch_scan is very less than no of count of ccch_scan of sylvain testing branch. On Sun, Jun 17, 2012 at 10:40 AM, Akib Sayyed wrote: > i am trying to run ccch_scan on OpenBTS network. but problem i am facing > if i am running ccch_scan i cant see any IMM ASS. > but when i run ccch_scan from non burst_ind (testing branch) then it does > show IMM ASS. > > is it problem with burst_ind . > > -- > Akib Sayyed > Matrix-Shell > akibsayyed at gmail.com > akibsayyed at matrixshell.com > Mob:- +91-966-514-2243 > > > -- Akib Sayyed Matrix-Shell akibsayyed at gmail.com akibsayyed at matrixshell.com Mob:- +91-966-514-2243 -------------- next part -------------- An HTML attachment was scrubbed... URL: From 246tnt at gmail.com Sun Jun 17 07:01:13 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Sun, 17 Jun 2012 09:01:13 +0200 Subject: issue with burst_ind In-Reply-To: References: Message-ID: > i checked with real network also but i found that count of IMM_ASS from > burst_ind ccch_scan is very less than no of count of ccch_scan of sylvain > testing branch. Well yeah ... that's obvious if you understand what those actually do .. in burst_ind at each immediate assignement, it will _follow_ it and go to dedicated mode until the channel is ended. So during all the time it is in dedicated mode, it won't be listening to CCCH anymore and so it will miss all the immediate assigmenet that happen during that time. Cheers, Sylvain From akibsayyed at gmail.com Sun Jun 17 07:04:41 2012 From: akibsayyed at gmail.com (Akib Sayyed) Date: Sun, 17 Jun 2012 12:34:41 +0530 Subject: issue with burst_ind In-Reply-To: References: Message-ID: oops sorry i didnt explained details i commented the part that follows IMMASS. actually i tried to listen my OpenBTS's ARFCN and tryed to place a call. but i didnt saw any IMM ASS so i commented code that follows iMM ASS. then i saw only IMM ASS and paging request but those were less than actual :( On Sun, Jun 17, 2012 at 12:31 PM, Sylvain Munaut <246tnt at gmail.com> wrote: > > i checked with real network also but i found that count of IMM_ASS from > > burst_ind ccch_scan is very less than no of count of ccch_scan of sylvain > > testing branch. > > Well yeah ... that's obvious if you understand what those actually do .. > > in burst_ind at each immediate assignement, it will _follow_ it and go > to dedicated mode until the channel is ended. So during all the time > it is in dedicated mode, it won't be listening to CCCH anymore and so > it will miss all the immediate assigmenet that happen during that > time. > > Cheers, > > Sylvain > -- Akib Sayyed Matrix-Shell akibsayyed at gmail.com akibsayyed at matrixshell.com Mob:- +91-966-514-2243 -------------- next part -------------- An HTML attachment was scrubbed... URL: From akibsayyed at gmail.com Sun Jun 17 07:23:57 2012 From: akibsayyed at gmail.com (Akib Sayyed) Date: Sun, 17 Jun 2012 12:53:57 +0530 Subject: issue with burst_ind In-Reply-To: References: Message-ID: SOLVED was trying after applying GPRS patch so was giving issue. tried fresh fetch now its working very much fine On Sun, Jun 17, 2012 at 12:34 PM, Akib Sayyed wrote: > oops sorry i didnt explained details i commented the part that follows > IMMASS. > actually i tried to listen my OpenBTS's ARFCN and tryed to place a call. > but i didnt saw any IMM ASS so i > commented code that follows iMM ASS. then i saw only IMM ASS and paging > request but those were less than actual :( > > On Sun, Jun 17, 2012 at 12:31 PM, Sylvain Munaut <246tnt at gmail.com> wrote: > >> > i checked with real network also but i found that count of IMM_ASS from >> > burst_ind ccch_scan is very less than no of count of ccch_scan of >> sylvain >> > testing branch. >> >> Well yeah ... that's obvious if you understand what those actually do .. >> >> in burst_ind at each immediate assignement, it will _follow_ it and go >> to dedicated mode until the channel is ended. So during all the time >> it is in dedicated mode, it won't be listening to CCCH anymore and so >> it will miss all the immediate assigmenet that happen during that >> time. >> >> Cheers, >> >> Sylvain >> > > > > -- > Akib Sayyed > Matrix-Shell > akibsayyed at gmail.com > akibsayyed at matrixshell.com > Mob:- +91-966-514-2243 > > > -- Akib Sayyed Matrix-Shell akibsayyed at gmail.com akibsayyed at matrixshell.com Mob:- +91-966-514-2243 -------------- next part -------------- An HTML attachment was scrubbed... URL: From gabriele.rago at email.it Sun Jun 17 21:13:45 2012 From: gabriele.rago at email.it (Gabriele.rago) Date: Sun, 17 Jun 2012 23:13:45 +0200 Subject: AT+CMMS command Message-ID: Hello, there is an AT command, AT+CMMS, wich description I report below: "This  command controls the continuity of SMS relay protocol link.   When feature is enabled (and supported by network) multiple messages can besent much faster as link is kept open." I tested this command on motorola E770 (UMTS) and really when I enable this feature it is much faster in sending sms. Is it possible to implent such feature  in application "mobile" of osmocom-bb project? -------------- next part -------------- An HTML attachment was scrubbed... URL: From peter at stuge.se Sun Jun 17 22:12:52 2012 From: peter at stuge.se (Peter Stuge) Date: Mon, 18 Jun 2012 00:12:52 +0200 Subject: AT+CMMS command In-Reply-To: References: Message-ID: <20120617221252.19954.qmail@stuge.se> Gabriele.rago wrote: > Is it possible to implent Absolutely! Go for it! //Peter From gabriele.rago at email.it Mon Jun 18 07:14:55 2012 From: gabriele.rago at email.it (Gabriele.rago) Date: Mon, 18 Jun 2012 09:14:55 +0200 Subject: AT+CMMS command Message-ID: <9746565a9432945afa3fa044bd8f1c22@2.226.168.72> Soory, but I don't know how, anyone can give me some help? --------- Original Message -------- Da: "Gabriele.rago" <gabriele.rago at email.it> To: "baseband-devel at lists.osmocom.org" <baseband-devel at lists.osmocom.org> Oggetto: AT+CMMS command Data: 18/06/12 00:16 Hello, there is an AT command, AT+CMMS, wich description I report below: "This  command controls the continuity of SMS relay protocol link.   When feature is enabled (and supported by network) multiple messages can besent much faster as link is kept open." I tested this command on motorola E770 (UMTS) and really when I enable this feature it is much faster in sending sms. Is it possible to implent such feature  in application "mobile" of osmocom-bb project? -------------- next part -------------- An HTML attachment was scrubbed... URL: From avwiseav at gmail.com Mon Jun 18 08:32:52 2012 From: avwiseav at gmail.com (bob wisebob) Date: Mon, 18 Jun 2012 16:32:52 +0800 Subject: my patch for decode using burst_id Message-ID: Hi,List I found BB is a great project,and I want to study it. In my test network without encryption, I test the burst_id with dsp patch to capture the SMS, and also ,I patch the ccch_scan to capture the voice,but I met a few difficulty, but the amr voice file seems not good, I found it hard to find the error, anyone can help me? Thanks! the patch is following: static struct { int has_si1; int has_si3; int ccch_mode; int neci; int sys_count; enum dch_state_t dch_state; uint8_t dch_nr; int dch_badcnt; int dch_ciph; FILE * fh; sbit_t bursts_dl[116 * 4]; sbit_t bursts_ul[116 * 4]; sbit_t bursts_ccch[4][116*4]; sbit_t mI[8][114]; struct gsm_sysinfo_freq cell_arfcns[1024]; uint8_t kc[8]; } app_state; static char * void layer3_rx_burst(struct osmocom_ms *ms, struct msgb *msg) { struct l1ctl_burst_ind *bi; int16_t rx_dbm; uint16_t arfcn; int ul,do_rel=0; /* Header handling */ bi = (struct l1ctl_burst_ind *) msg->l1h; arfcn = ntohs(bi->band_arfcn); rx_dbm = rxlev2dbm(bi->rx_level); ul = !!(arfcn & ARFCN_UPLINK); if (app_state.dch_state == DCH_NONE) local_ccch_burst_decode(bi,ms); /* Check for channel start */ if (app_state.dch_state == DCH_WAIT_EST) { if (bi->chan_nr == app_state.dch_nr) { if (bi->snr > 64) { /* Change state */ app_state.dch_state = DCH_ACTIVE; app_state.dch_badcnt = 0; /* Open output */ //app_state.fh = fopen(gen_filename(ms, bi), "wb"); } else { /* Abandon ? */ do_rel = (app_state.dch_badcnt++) >= 4; } } } /* Check for channel end */ if (app_state.dch_state == DCH_ACTIVE) { if (!ul) { /* Bad burst counting */ if (bi->snr < 64) { app_state.dch_badcnt++; printf("sdcch app_state.dch_badcnt++\n"); } else if (app_state.dch_badcnt >= 2) app_state.dch_badcnt -= 2; else app_state.dch_badcnt = 0; /* Release condition */ do_rel = app_state.dch_badcnt >= 6; } } // when in TCH mode, we only measure the SACCH to kown the link quanlity if (app_state.dch_state == DCH_TCH) { //printf("app_state.dch_state == DCH_TCH\n"); if (!ul && (bi->flags & BI_FLG_SACCH)) { //printf("TCH SACCH\n"); /* Bad burst counting */ if (bi->snr < 40) { app_state.dch_badcnt++; printf("sacch app_state.dch_badcnt++\n"); } else if (app_state.dch_badcnt >= 2) app_state.dch_badcnt -= 2; else app_state.dch_badcnt = 0; /* Release condition */ do_rel = app_state.dch_badcnt >= 6; } } /* Release ? */ if (do_rel) { printf("The Delicate Channel is released because of bad SNR!\n"); /* L1 release */ l1ctl_tx_dm_rel_req(ms); l1ctl_tx_fbsb_req(ms, ms->test_arfcn, L1CTL_FBSB_F_FB01SB, 100, 0, app_state.ccch_mode); /* Change state */ app_state.dch_state = DCH_WAIT_REL; app_state.dch_badcnt = 0; app_state.dch_ciph = 0; /* Close output */ if (app_state.fh) { fclose(app_state.fh); app_state.fh = NULL; } } /* Save the burst */ if (app_state.dch_state == DCH_ACTIVE || app_state.dch_state == DCH_TCH) //fwrite(bi, sizeof(*bi), 1, app_state.fh); /* Try local decoding */ if (!ul && (app_state.dch_state == DCH_ACTIVE || app_state.dch_state == DCH_TCH)) local_burst_decode(ms,bi); } static void local_burst_decode(struct osmocom_ms *ms,struct l1ctl_burst_ind *bi) { int16_t rx_dbm; uint16_t arfcn; uint32_t fn; uint8_t cbits, tn, lch_idx; int ul, bid, i, d_tch_mode; sbit_t *bursts; ubit_t bt[116]; /* Get params (Only for SDCCH and SACCH/{4,8,F,H}) */ arfcn = ntohs(bi->band_arfcn); rx_dbm = rxlev2dbm(bi->rx_level); fn = ntohl(bi->frame_nr); ul = !!(arfcn & ARFCN_UPLINK); bursts = ul ? app_state.bursts_ul : app_state.bursts_dl; cbits = bi->chan_nr >> 3; tn = bi->chan_nr & 7; bid = -1; if (cbits == 0x01) { /* TCH/F */ lch_idx = 0; if (bi->flags & BI_FLG_SACCH) { uint32_t fn_report; fn_report = (fn - (tn * 13) + 104) % 104; bid = (fn_report - 12) / 26; printf(" SACCH fn = %d fn_report = %d\n",fn,fn_report); }else{ //printf(" TCH/F \n"); process_tch_f(ms,bi); } } else if ((cbits & 0x1e) == 0x02) { /* TCH/H */ lch_idx = cbits & 1; if (bi->flags & BI_FLG_SACCH) { uint32_t fn_report; uint8_t tn_report = (tn & ~1) | lch_idx; fn_report = (fn - (tn_report * 13) + 104) % 104; bid = (fn_report - 12) / 26; } } else if ((cbits & 0x1c) == 0x04) { /* SDCCH/4 */ lch_idx = cbits & 3; bid = bi->flags & 3; printf(" SDCCH/4\n"); } else if ((cbits & 0x18) == 0x08) { /* SDCCH/8 */ lch_idx = cbits & 7; bid = bi->flags & 3; //printf(" SDCCH/8\n"); } if (bid == -1) return; /* Clear if new set */ if (bid == 0) memset(bursts, 0x00, 116 * 4); /* Unpack (ignore hu/hl) */ osmo_pbit2ubit_ext(bt, 0, bi->bits, 0, 57, 0); osmo_pbit2ubit_ext(bt, 59, bi->bits, 57, 57, 0); bt[57] = bt[58] = 1; /* A5/x */ if (app_state.dch_ciph) { ubit_t ks_dl[114], ks_ul[114], *ks = ul ? ks_ul : ks_dl; osmo_a5(app_state.dch_ciph, app_state.kc, fn, ks_dl, ks_ul); for (i= 0; i< 57; i++) bt[i] ^= ks[i]; for (i=59; i<116; i++) bt[i] ^= ks[i-2]; } /* Convert to softbits */ for (i=0; i<116; i++) bursts[(116*bid)+i] = bt[i] ? - (bi->snr >> 1) : (bi->snr >> 1); /* If last, decode */ if (bid == 3) { uint8_t l2[23]; int rv,i; struct gsm48_ass_cmd *ia; uint8_t ch_type, ch_subch, ch_ts; uint8_t chan_req_val, chan_req_mask, ra; rv = xcch_decode(l2, bursts); if((l2[0] == 0x03) && (l2[4] == 0x2e)) { ia =(struct gsm48_ass_cmd *)&l2[5]; rsl_dec_chan_nr(ia->chan_desc.chan_nr, &ch_type, &ch_subch, &ch_ts); //l1ctl_tx_reset_req(ms, L1CTL_RES_T_SCHED); printf("Jump to TCH Channel\n"); d_tch_mode = GSM48_CMODE_SPEECH_EFR; /* open speech file and configure d_tch_decoders */ switch (d_tch_mode) { case GSM48_CMODE_SPEECH_V1: d_speech_file = fopen( "speech.au.gsm", "wb" ); break; case GSM48_CMODE_SPEECH_EFR: d_speech_file = fopen( gen_filename(ms,bi), "wb" ); fwrite(amr_nb_magic, 1, 6, d_speech_file); /* Write header */ break; default: d_speech_file = NULL; } app_state.dch_state = DCH_TCH; if (!ia->chan_desc.h0.h) { /* Non-hopping */ uint16_t arfcn; arfcn = ia->chan_desc.h0.arfcn_low | (ia->chan_desc.h0.arfcn_high << 8); LOGP(DRR, LOGL_NOTICE, "ASS CMD(chan_nr=0x%02x, " "ARFCN=%u, TS=%u, SS=%u, TSC=%u) ", ia->chan_desc.chan_nr, arfcn, ch_ts, ch_subch, ia->chan_desc.h0.tsc); /* request L1 to go to dedicated mode on assigned channel */ rv = l1ctl_tx_dm_est_req_h0(ms, arfcn, ia->chan_desc.chan_nr, ia->chan_desc.h0.tsc, GSM48_CMODE_SPEECH_EFR, 0); } #ifdef TCH_HOPPING else { /* Hopping is not support now! */ uint8_t maio, hsn, ma_len; uint16_t ma[64], arfcn; int i, j, k; hsn = ia->chan_desc.h1.hsn; maio = ia->chan_desc.h1.maio_low | (ia->chan_desc.h1.maio_high << 2); LOGP(DRR, LOGL_NOTICE, "ASS CMD( chan_nr=0x%02x, " "HSN=%u, MAIO=%u, TS=%u, SS=%u, TSC=%u) ", ia->chan_desc.chan_nr, hsn, maio, ch_ts, ch_subch, ia->chan_desc.h1.tsc); /* decode mobile allocation */ ma_len = 0; for (i=1, j=0; i<=1024; i++) { arfcn = i & 1023; if (app_state.cell_arfcns[arfcn].mask & 0x01) { k = ia->mob_alloc_len - (j>>3) - 1; if (ia->mob_alloc[k] & (1 << (j&7))) { ma[ma_len++] = arfcn; } j++; } } /* request L1 to go to dedicated mode on assigned channel */ rv = l1ctl_tx_dm_est_req_h1(ms, maio, hsn, ma, ma_len, ia->chan_desc.chan_nr, ia->chan_desc.h1.tsc, GSM48_CMODE_SPEECH_EFR, 0); } #endif } if (rv == 0) { uint8_t chan_type, chan_ts, chan_ss; uint8_t gsmtap_chan_type; /* Send to GSMTAP */ rsl_dec_chan_nr(bi->chan_nr, &chan_type, &chan_ss, &chan_ts); gsmtap_chan_type = chantype_rsl2gsmtap( chan_type, bi->flags & BI_FLG_SACCH ? 0x40 : 0x00 ); gsmtap_send(gsmtap_inst, arfcn, chan_ts, gsmtap_chan_type, chan_ss, ntohl(bi->frame_nr), bi->rx_level, bi->snr, l2, sizeof(l2) ); /* Crude CIPH.MOD.COMMAND detect */ if ((l2[3] == 0x06) && (l2[4] == 0x35) && (l2[5] & 1)) app_state.dch_ciph = 1 + ((l2[5] >> 1) & 7); } } } void tch_deinterleave(ubit_t *mC, int blockOffset) { int k; for (k = 0; k < 456; k++) { int B = ( k + blockOffset ) % 8; int j = 2 * ((49 * k) % 57) + ((k % 8) / 4); mC[k] = app_state.mI[B][j]; app_state.mI[B][j] = 0; //OBJDCOUT("deinterleave k="<= 7)){ if(B == 3) { tch_deinterleave(mC, 4); }else{ tch_deinterleave(mC, 0); } for (k = 0; k < 78; k++) { tch_raw[182 + k] = mC[378 +k]; } osmo_conv_decode(&conv_tch_afs_12_2, mC, convu); // 3.1.2.1 // copy class 1 bits u[] to d[] for (k = 0; k <= 90; k++) { convd[2*k] = convu[k]; convd[2*k+1] = convu[184-k]; } memcpy(tch_raw,convd,182); // the last 78 bit has been stored! //now only process EFR or AMR 12_2, fix me! tch_unmap(gsm660_bitorder, 260, TCHW, tch_raw); // Remove repeating bits and CRC to get raw EFR frame (244 bits) for (k=0; k<71; k++) EFRBits[k] = TCHW[k] & 1; for (k=73; k<123; k++) EFRBits[k-2] = TCHW[k] & 1; for (k=125; k<178; k++) EFRBits[k-4] = TCHW[k] & 1; for (k=180; k<230; k++) EFRBits[k-6] = TCHW[k] & 1; for (k=232; k<252; k++) EFRBits[k-8] = TCHW[k] & 1; // Map bits as AMR 12.2k tch_map(gsm690_12_2_bitorder, 244, EFRAMR + 8,EFRBits); // Put the whole frame (hdr + payload) //mVFrameAMR.pack(mPrevGoodFrame); //mPrevGoodFrameLength = 32; fillField(EFRAMR, 0, 0x3c, 8); voice[32] = 0; length = osmo_ubit2pbit(voice, EFRAMR, 8 + 244); fwrite(voice, 1, 32, d_speech_file); } } -------------- next part -------------- An HTML attachment was scrubbed... URL: From laforge at gnumonks.org Mon Jun 18 09:07:08 2012 From: laforge at gnumonks.org (Harald Welte) Date: Mon, 18 Jun 2012 17:07:08 +0800 Subject: my patch for decode using burst_id In-Reply-To: References: Message-ID: <20120618090708.GN28821@prithivi.gnumonks.org> Hi Bob, On Mon, Jun 18, 2012 at 04:32:52PM +0800, bob wisebob wrote: > the patch is following: > [...] whatever you sent in your message, it was not a patch. If you would like to see anyone testing/using your code at all, then at least you should be sending an unified diff (diff -u) to this list. Regards, Harald -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From avwiseav at gmail.com Mon Jun 18 11:38:55 2012 From: avwiseav at gmail.com (bob) Date: Mon, 18 Jun 2012 04:38:55 -0700 (PDT) Subject: my patch for decode using burst_id In-Reply-To: <20120618090708.GN28821@prithivi.gnumonks.org> References: <20120618090708.GN28821@prithivi.gnumonks.org> Message-ID: <1340019535300-4025078.post@n3.nabble.com> I have done it, This my pacth for burst_id but it can`t work well for TCH decode! http://baseband-devel.722152.n3.nabble.com/file/n4025078/app_ccch_scan.patch app_ccch_scan.patch -- View this message in context: http://baseband-devel.722152.n3.nabble.com/my-patch-for-decode-using-burst-id-tp4025076p4025078.html Sent from the baseband-devel mailing list archive at Nabble.com. From altaf329 at gmail.com Wed Jun 20 12:21:54 2012 From: altaf329 at gmail.com (Altaf) Date: Wed, 20 Jun 2012 05:21:54 -0700 (PDT) Subject: my patch for decode using burst_id In-Reply-To: <1340019535300-4025078.post@n3.nabble.com> References: <20120618090708.GN28821@prithivi.gnumonks.org> <1340019535300-4025078.post@n3.nabble.com> Message-ID: <1340194914114-4025084.post@n3.nabble.com> Hello.. I wanted to make some testing with your patch...When I apply your patch. I get the following error.. src/host/layer23/src/misc/app_ccch_scan.patch:28: trailing whitespace. int neci; src/host/layer23/src/misc/app_ccch_scan.patch:30: trailing whitespace. fatal: corrupt patch at line 34 What could be the mistake..... -- View this message in context: http://baseband-devel.722152.n3.nabble.com/my-patch-for-decode-using-burst-id-tp4025076p4025084.html Sent from the baseband-devel mailing list archive at Nabble.com. From lonelysurfer at web.de Wed Jun 20 16:11:02 2012 From: lonelysurfer at web.de (lonelysurfer) Date: Wed, 20 Jun 2012 09:11:02 -0700 (PDT) Subject: my patch for decode using burst_id In-Reply-To: <1340194914114-4025084.post@n3.nabble.com> References: <20120618090708.GN28821@prithivi.gnumonks.org> <1340019535300-4025078.post@n3.nabble.com> <1340194914114-4025084.post@n3.nabble.com> Message-ID: <1340208662855-4025085.post@n3.nabble.com> I made it by hand (copy&paste) but I missed codec.c and conv_tch_afs_12_2. With codec.c from osmocom/codec/ and the asf tables from http://baseband-devel.722152.n3.nabble.com/libosmocore-viterbi-decoder-td2866035.html http://baseband-devel.722152.n3.nabble.com/libosmocore-viterbi-decoder-td2866035.html the compilation was ok. I've found some deeper infos about asf @ http://fossies.org/dox/hxplay-11.0.0/amrdump_8cpp_source.html http://fossies.org/dox/hxplay-11.0.0/amrdump_8cpp_source.html . In osmocom-bb we have a dummy burst indicator (bi->flags & BI_FLG_DUMMY). I think, these bursts have to be filtered. Perhaps its easier to begin with FR, because with the sample from https://srlabs.de/airprobe-how-to/ we have FR and with osmocom-bb (mobile_app) and old Nokias ( http://www.panuworld.net/nuukiaworld/misc/netmon/tests.htm http://www.panuworld.net/nuukiaworld/misc/netmon/tests.htm ) EFR can be disabled to get FR. -- View this message in context: http://baseband-devel.722152.n3.nabble.com/my-patch-for-decode-using-burst-id-tp4025076p4025085.html Sent from the baseband-devel mailing list archive at Nabble.com. From avwiseav at gmail.com Tue Jun 19 02:36:38 2012 From: avwiseav at gmail.com (bob) Date: Mon, 18 Jun 2012 19:36:38 -0700 (PDT) Subject: my patch for decode using burst_id In-Reply-To: References: Message-ID: <1340073398178-4025079.post@n3.nabble.com> I think the key importance is the codec mode indication of AMR, in my test network, the channel mode is speed full rate and half rate version 3; anyone familiar with it? -- View this message in context: http://baseband-devel.722152.n3.nabble.com/my-patch-for-decode-using-burst-id-tp4025076p4025079.html Sent from the baseband-devel mailing list archive at Nabble.com. From lonelysurfer at web.de Tue Jun 19 18:10:55 2012 From: lonelysurfer at web.de (lonelysurfer) Date: Tue, 19 Jun 2012 11:10:55 -0700 (PDT) Subject: my patch for decode using burst_id In-Reply-To: References: Message-ID: <1340129455825-4025080.post@n3.nabble.com> I want to compare the decoding with airprobe. For this I need a gsm-receiver cfile with EFR data. Does someone have such a file? -- View this message in context: http://baseband-devel.722152.n3.nabble.com/my-patch-for-decode-using-burst-id-tp4025076p4025080.html Sent from the baseband-devel mailing list archive at Nabble.com. From avwiseav at gmail.com Wed Jun 20 02:20:03 2012 From: avwiseav at gmail.com (bob) Date: Tue, 19 Jun 2012 19:20:03 -0700 (PDT) Subject: my patch for decode using burst_id In-Reply-To: <1340129455825-4025080.post@n3.nabble.com> References: <1340129455825-4025080.post@n3.nabble.com> Message-ID: <1340158803079-4025083.post@n3.nabble.com> Hi, lonelysurfer: the website https://srlabs.de/airprobe-how-to/ has a sample, but the version of speech codec is 1,so there are much defferent in decode the voice if your network is AMR speech codec, so there are much work to do,I think we must read GSM5.09 about AMR firstly. I am very happy to work with you about the AMR. -- View this message in context: http://baseband-devel.722152.n3.nabble.com/my-patch-for-decode-using-burst-id-tp4025076p4025083.html Sent from the baseband-devel mailing list archive at Nabble.com. From lonelysurfer at web.de Tue Jun 19 19:44:44 2012 From: lonelysurfer at web.de (lonelysurfer) Date: Tue, 19 Jun 2012 12:44:44 -0700 (PDT) Subject: my patch for decode using burst_id In-Reply-To: References: Message-ID: <1340135084407-4025082.post@n3.nabble.com> AMR codec is said to have a 1 byte header. AMR run at various bitrate 4.75, 5.15, 5.90, 6.70, 7.40, 7.95, 10.2 or 12.2 kbit/s and each bitrate provide different sized output blocks of 95, 103, 118, 134, 148, 159, 204, and 244 bits. In the 1 byte header it's written which is the encoding bitrate of the specific AMR 20ms encoded audio sample. In particular the top 4 bits tell the bitrate (CMR) while the lower bits are reserved and not used (all 0 or all 1). *CMR* * MODE* *FRAME SIZE( in bytes )* 0 AMR 4.75 13 1 AMR 5.15 14 2 AMR 5.9 16 3 AMR 6.7 18 4 AMR 7.4 20 5 AMR 7.95 21 6 AMR 10.2 27 7 AMR 12.2 32 AMR Reference: http://wiki.forum.nokia.com/index.php/AMR_format http://wiki.forum.nokia.com/index.php/AMR_format http://en.wikipedia.org/wiki/Adaptive_Multi-Rate_audio_codec http://en.wikipedia.org/wiki/Adaptive_Multi-Rate_audio_codec -- View this message in context: http://baseband-devel.722152.n3.nabble.com/my-patch-for-decode-using-burst-id-tp4025076p4025082.html Sent from the baseband-devel mailing list archive at Nabble.com. From asnelt at asnelt.org Wed Jun 20 20:07:12 2012 From: asnelt at asnelt.org (Arno Onken) Date: Wed, 20 Jun 2012 22:07:12 +0200 Subject: Flashing Layer1 to GTA02 Message-ID: <4FE22D70.6050501@asnelt.org> Hello everyone! I got osmocom-bb running on a gta02 with a self-built Debian image. osmocon-bb was compiled natively on the gta02. Everything works great using: $ ./osmocon -i 13 -m romload -p /dev/ttySAC0 layer1.highram.bin as described at: http://bb.osmocom.org/trac/wiki/OpenMoko It bugs me, however, that the proprietary openmoko 11 firmware is still lingering in the baseband flash. So I would like to replace it permanently with the osmocom-bb layer 1 firmware. That didn't work so far. First, I attempted to use the FLUID binary to flash layer1.highram.bin. The manual firmware update that is described at: http://wiki.openmoko.org/wiki/Flashing_the_GSM_Firmware suggests to use the FLUID binary from the package: http://people.openmoko.org/joerg/calypso_moko_FW/fluid_0.0+svn20070817-r2_armv4t_eabi.ipk I tried to run: $ FLUID_PORT=/dev/ttySAC0 ./fluid.exe -oo -od13,13 -b 115200 -f layer1.highram.bin This gives me: FLUID Revision 2.27, (23 Aug 2004). Copyright Texas Instruments, 2001-2004. Reading image file: '/usr/local/src/osmocom-bb/src/target/firmware/board/gta0x/layer1.highram.bin'WARNING: Illegal hex line: ERROR(55): File format/syntax error I also played with the options but to no avail. So apparently fluid expects the firmware image to be in a particular format. Then I tried the osmoload utility. For that I started osmocon with: $ ./osmocon -i 13 -l /tmp/osmocom_loader -m romload -p /dev/ttySAC0 loader.highram.bin osmocon then says: Sending Calypso romloader beacon... On another console I then turned on the GSM device and tried to request information about flash using: $ ./osmoload -l /tmp/osmocom_loader finfo This gives me: Requesting flash layout info Query timed out. What am I doing wrong? Are there fundamental reasons why this cannot work? Any hints would be much appreciated! Thanks, Arno From GNUtoo at no-log.org Wed Jun 20 21:18:48 2012 From: GNUtoo at no-log.org (Denis 'GNUtoo' Carikli) Date: Wed, 20 Jun 2012 23:18:48 +0200 Subject: Flashing Layer1 to GTA02 In-Reply-To: <4FE22D70.6050501@asnelt.org> References: <4FE22D70.6050501@asnelt.org> Message-ID: <1340227128.4382.1.camel@gnutoo-hplaptop> > Requesting flash layout info > Query timed out. > > What am I doing wrong? Are there fundamental reasons why this cannot > work? Any hints would be much appreciated! I think the openmoko flash is not supported yet. you could try to add support for it. Alternatively you could try to make fsogsmd or qtmoko's telephony daemon load the osmocombb firmware at boot. Denis. From khorben at defora.org Wed Jun 20 21:39:56 2012 From: khorben at defora.org (Pierre Pronchery) Date: Wed, 20 Jun 2012 23:39:56 +0200 Subject: Flashing Layer1 to GTA02 In-Reply-To: <1340227128.4382.1.camel@gnutoo-hplaptop> References: <4FE22D70.6050501@asnelt.org> <1340227128.4382.1.camel@gnutoo-hplaptop> Message-ID: <4FE2432C.1020506@defora.org> Hi list, On 20/06/2012 23:18, Denis 'GNUtoo' Carikli wrote: >> Requesting flash layout info >> Query timed out. >> >> What am I doing wrong? Are there fundamental reasons why this cannot >> work? Any hints would be much appreciated! > I think the openmoko flash is not supported yet. > you could try to add support for it. > > Alternatively you could try to make fsogsmd or qtmoko's telephony daemon > load the osmocombb firmware at boot. I have a beginning of code doing this with DeforaOS' Phone telephony application (as on hackable:1 dse1 and dse2 releases, see http://trac.hackable1.org/trac/wiki/DeforaOSSmartphone) It's not working yet, but it's just a matter of sitting down a bit longer in front of a computer, with the proper tools ready and an Openmoko or two around. Could be a nice challenge for an Osmocom meeting at the CCCB. Anyone interested please let me know and we could organize it. Cheers, -- khorben From asnelt at asnelt.org Thu Jun 21 09:14:01 2012 From: asnelt at asnelt.org (Arno Onken) Date: Thu, 21 Jun 2012 11:14:01 +0200 Subject: Flashing Layer1 to GTA02 In-Reply-To: <4FE2432C.1020506@defora.org> References: <4FE22D70.6050501@asnelt.org> <1340227128.4382.1.camel@gnutoo-hplaptop> <4FE2432C.1020506@defora.org> Message-ID: <4FE2E5D9.5040804@asnelt.org> On 06/20/2012 11:39 PM, Pierre Pronchery wrote: > On 20/06/2012 23:18, Denis 'GNUtoo' Carikli wrote: >> I think the openmoko flash is not supported yet. >> you could try to add support for it. >> >> Alternatively you could try to make fsogsmd or qtmoko's telephony daemon >> load the osmocombb firmware at boot. > > I have a beginning of code doing this with DeforaOS' Phone telephony > application (as on hackable:1 dse1 and dse2 releases, see > http://trac.hackable1.org/trac/wiki/DeforaOSSmartphone) > > It's not working yet, but it's just a matter of sitting down a bit > longer in front of a computer, with the proper tools ready and an > Openmoko or two around. Could be a nice challenge for an Osmocom meeting > at the CCCB. Anyone interested please let me know and we could organize it. I would definitely prefer to have the firmware in flash. I'm not sure I have the necessary experience to add support but I will look into it. Thanks, Arno From laforge at gnumonks.org Thu Jun 21 10:55:56 2012 From: laforge at gnumonks.org (Harald Welte) Date: Thu, 21 Jun 2012 12:55:56 +0200 Subject: Flashing Layer1 to GTA02 In-Reply-To: <4FE2E5D9.5040804@asnelt.org> References: <4FE22D70.6050501@asnelt.org> <1340227128.4382.1.camel@gnutoo-hplaptop> <4FE2432C.1020506@defora.org> <4FE2E5D9.5040804@asnelt.org> Message-ID: <20120621105556.GE23815@prithivi.gnumonks.org> Hi Arno and others, On Thu, Jun 21, 2012 at 11:14:01AM +0200, Arno Onken wrote: > I would definitely prefer to have the firmware in flash. I'm not sure I > have the necessary experience to add support but I will look into it. The part on the GTA02 is a Samsung K5A3240CT multi-chip memory package: (32Mbit flash, 4Mbit SRAM), with two banks: Bank1: 8Mbit Eight 8Kbyte blocks Fifteen 64kByte blocks Bank2: 24Mbit fourty-eight 64kByte blocks The manufactuerer ID is 0xEC, device code is 0x22A0 (top boot block). Your first step in supporting it should be the following patch: diff --git a/src/target/firmware/flash/cfi_flash.c b/src/target/firmware/flash/cfi_flash.c index 8ecd206..7d04906 100644 --- a/src/target/firmware/flash/cfi_flash.c +++ b/src/target/firmware/flash/cfi_flash.c @@ -73,6 +73,7 @@ struct cfi_query { enum cfi_manuf { CFI_MANUF_ST = 0x0020, CFI_MANUF_INTEL = 0x0089, + CFI_MANUF_ITT = 0x00EC, }; /* algorithm ids */ @@ -533,7 +534,8 @@ int flash_init(flash_t * flash, void *base_addr) if (res) { return res; } - if (m_id != CFI_MANUF_INTEL && m_id != CFI_MANUF_ST) { + if (m_id != CFI_MANUF_INTEL && m_id != CFI_MANUF_ST && + m_id != CFI_MANUF_ITT) { return -ENOTSUP; } -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From laforge at gnumonks.org Thu Jun 21 10:07:16 2012 From: laforge at gnumonks.org (Harald Welte) Date: Thu, 21 Jun 2012 12:07:16 +0200 Subject: Flashing Layer1 to GTA02 In-Reply-To: <1340227128.4382.1.camel@gnutoo-hplaptop> References: <4FE22D70.6050501@asnelt.org> <1340227128.4382.1.camel@gnutoo-hplaptop> Message-ID: <20120621100716.GD23815@prithivi.gnumonks.org> Hi Denis, On Wed, Jun 20, 2012 at 11:18:48PM +0200, Denis 'GNUtoo' Carikli wrote: > > > What am I doing wrong? Are there fundamental reasons why this cannot > > work? Any hints would be much appreciated! > > I think the openmoko flash is not supported yet. > you could try to add support for it. What exactly do you think is required to do so? I always thought that the OsmocomBB flash code works with all CFI compatible flashes? I can definitely dig out the particular part number / data sheet of the memory used on the Openmoko GTA02, but I don't actually think that this should be required... -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From ian at aikbix.com Thu Jun 21 05:04:33 2012 From: ian at aikbix.com (Ian Kinsey) Date: Wed, 20 Jun 2012 22:04:33 -0700 Subject: osmocon idling with C155 when using bus pirate Message-ID: A Motorola C155 is hooked up to my computer via a bus pirate as per the official instructions, everything is properly wired and the phone seems to work. However, Osmocon neither indicates the presence of any data being sent or received when attempting to communicate with the phone; it just idles. Is there any extra logic in the cable? Any help would be appreciated. -------------- next part -------------- An HTML attachment was scrubbed... URL: From 246tnt at gmail.com Thu Jun 21 10:10:26 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Thu, 21 Jun 2012 12:10:26 +0200 Subject: osmocon idling with C155 when using bus pirate In-Reply-To: References: Message-ID: > A Motorola C155 is hooked up to my computer via a bus pirate as per the > official instructions, everything is properly wired and the phone seems to > work. The "bus pirate" is nothing official ... someone managed to make it work for him and put the info on the wiki and that's about it. It's completely "use at your own risk". > However, Osmocon neither indicates the presence of any data being sent > or?received when attempting to communicate with the phone; it just idles. Is > there any extra logic in the cable? Any help would be appreciated. Get a real cable from sysmocom. 99 percent of people's problem come from the cable and we're tired of debugging those. If you want to debug it your self, knock yourself out. I'd recommend to put a logic analyzer on the pin and look what's there. Cheers, Sylvain From akibsayyed at gmail.com Sat Jun 23 05:44:18 2012 From: akibsayyed at gmail.com (Akib Sayyed) Date: Sat, 23 Jun 2012 11:14:18 +0530 Subject: LCD is going off after custom RSSI loading Message-ID: i have been trying to load RSSI and run it. all went well. but after all of sudden LCD went off tried to debug but didnt understand much. here is log OSMOCOM Loader (revision osmocon_v0.0.0-1347-g4f0acac) ====================================================================== Running on compal_e88 in environment compalram Found flash of 2097152 bytes at 0x0 with 2 regions fb_td014_init: initializing LCD. //after above msg LCD is going off and firmware is giving output correct as it was giving before then i created custom program kept only board_init(); then compiled and uploaded in phone and started but still same issue. then fetched fresh git and tried to compile then also same issue. steps taken to compile test.c created folder test in target/firmware/apps/ added test in make file application list renamed test.c to main.c steps taken to load code in c118 ./host/osmocon/osmoload memload 0x820000 ./target/firmware/board/compal_e86/test.highram.bin ./host/osmocon/osmoload jump 0x820000 please help me with that -- Akib Sayyed Matrix-Shell akibsayyed at gmail.com akibsayyed at matrixshell.com Mob:- +91-966-514-2243 -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: test.c Type: text/x-csrc Size: 1838 bytes Desc: not available URL: From akibsayyed at gmail.com Sat Jun 23 08:15:47 2012 From: akibsayyed at gmail.com (Akib Sayyed) Date: Sat, 23 Jun 2012 13:45:47 +0530 Subject: LCD is going off after custom RSSI loading In-Reply-To: References: Message-ID: On Sat, Jun 23, 2012 at 11:14 AM, Akib Sayyed wrote: > i have been trying to load RSSI and run it. all went well. but after all > of sudden LCD went off tried to debug but didnt understand much. > here is log > > > OSMOCOM Loader (revision osmocon_v0.0.0-1347-g4f0acac) > ====================================================================== > Running on compal_e88 in environment compalram > Found flash of 2097152 bytes at 0x0 with 2 regions > fb_td014_init: initializing LCD. > > //after above msg LCD is going off and firmware is giving output correct > as it was giving before > > then i created custom program kept only board_init(); then compiled and > uploaded in phone and started but still same issue. > > > then fetched fresh git and tried to compile then also same issue. > > > steps taken to compile test.c > > created folder test in target/firmware/apps/ > added test in make file application list > renamed test.c to main.c > > steps taken to load code in c118 > ./host/osmocon/osmoload memload 0x820000 > ./target/firmware/board/compal_e86/test.highram.bin > should be like this :) ./host/osmocon/osmoload memload 0x820000 ./target/firmware/board/compal_e88/test.highram.bin > > ./host/osmocon/osmoload jump 0x820000 > > please help me with that > > -- > Akib Sayyed > Matrix-Shell > akibsayyed at gmail.com > akibsayyed at matrixshell.com > Mob:- +91-966-514-2243 > > > -- Akib Sayyed Matrix-Shell akibsayyed at gmail.com akibsayyed at matrixshell.com Mob:- +91-966-514-2243 -------------- next part -------------- An HTML attachment was scrubbed... URL: From steve at steve-m.de Sat Jun 23 12:22:55 2012 From: steve at steve-m.de (Steve Markgraf) Date: Sat, 23 Jun 2012 14:22:55 +0200 Subject: LCD is going off after custom RSSI loading In-Reply-To: References: Message-ID: <4FE5B51F.5030208@steve-m.de> Hi, On 23.06.2012 07:44, Akib Sayyed wrote: > fb_td014_init: initializing LCD. That's the display driver for the Compal E86/Motorola C139/140. > steps taken to load code in c118 > ./host/osmocon/osmoload memload 0x820000 > ./target/firmware/board/compal_e86/test.highram.bin You are loading the wrong image, for your C118 you need to to use the compal_e88 images which have the correct display driver. Regards, Steve From akibsayyed at gmail.com Tue Jun 26 08:01:36 2012 From: akibsayyed at gmail.com (Akib Sayyed) Date: Tue, 26 Jun 2012 13:31:36 +0530 Subject: Need guidance for layer1 and layer 2 connection in firmware Message-ID: i am trying to port mobile app on phone it self as a firmware but unable to find out how exactly L1 on phone communicate with L2 L3 on pc. please help me with that. -- Akib Sayyed Matrix-Shell akibsayyed at gmail.com akibsayyed at matrixshell.com Mob:- +91-966-514-2243 -------------- next part -------------- An HTML attachment was scrubbed... URL: From avwiseav at gmail.com Tue Jun 26 11:30:36 2012 From: avwiseav at gmail.com (bob wisebob) Date: Tue, 26 Jun 2012 19:30:36 +0800 Subject: the building of /src/shared/libosmocore Message-ID: Hi, when I try to modify the structures in /src /shared / libosmocore /include /osmocom /gsm /protocol/gsm_04_08.h file in the dir, and rebuild the project, but it seems can`t impact the file src /host /layer23 /src /misc/app_ccch_scan.c; it is so strange! does anyone meet the similar problem? -------------- next part -------------- An HTML attachment was scrubbed... URL: From 246tnt at gmail.com Tue Jun 26 11:36:29 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Tue, 26 Jun 2012 13:36:29 +0200 Subject: the building of /src/shared/libosmocore In-Reply-To: References: Message-ID: > when I try to modify the structures > in?/src/shared/libosmocore/include/osmocom/gsm/protocol/gsm_04_08.h file in > the dir, and rebuild the project, but it seems can`t > impact the file ?src/host/layer23/src/misc/app_ccch_scan.c; it is so > strange! ?does anyone meet the similar problem? If you have libosmocore installed on your system, it will take precedence for the headers. Cheers, Sylvain From khorben at defora.org Tue Jun 26 12:30:23 2012 From: khorben at defora.org (Pierre Pronchery) Date: Tue, 26 Jun 2012 14:30:23 +0200 Subject: the building of /src/shared/libosmocore In-Reply-To: References: Message-ID: <4FE9AB5F.4010803@defora.org> Hi everyone, On 26/06/2012 13:36, Sylvain Munaut wrote: >> when I try to modify the structures >> in /src/shared/libosmocore/include/osmocom/gsm/protocol/gsm_04_08.h file in >> the dir, and rebuild the project, but it seems can`t >> impact the file src/host/layer23/src/misc/app_ccch_scan.c; it is so >> strange! does anyone meet the similar problem? > > If you have libosmocore installed on your system, it will take > precedence for the headers. Shouldn't it be the other way around? (just asking) Cheers, -- khorben From 246tnt at gmail.com Tue Jun 26 12:41:07 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Tue, 26 Jun 2012 14:41:07 +0200 Subject: the building of /src/shared/libosmocore In-Reply-To: <4FE9AB5F.4010803@defora.org> References: <4FE9AB5F.4010803@defora.org> Message-ID: > Shouldn't it be the other way around? (just asking) I don't think it's especially intentional ... It's just what I noticed. Cheers, Sylvain From holger at freyther.de Tue Jun 26 15:12:28 2012 From: holger at freyther.de (Holger Hans Peter Freyther) Date: Tue, 26 Jun 2012 17:12:28 +0200 Subject: TOMORROW: Jun 27, 8pm / Osmocom meeting in Berlin Message-ID: <20120626151228.GA4160@sangmingze.sysmocom.de> Hi all! This is the announcement for the next Osmocom Berlin meeting. Jun 27, 8pm @ CCC Berlin, Marienstr. 11, 10113 Berlin Nico will talk about SAP (SIM Access Profile) in osmocomBB. If you are interested to show up, feel free to do so. There is no registration required. The meeting is free as in "free beer", despite no actual free beer being around. Updates and the blog post can be found here[1]. Regards, Holger [1] http://openbsc.osmocom.org/trac/blog/osmug-20120627 From akibsayyed at gmail.com Sat Jun 30 13:22:29 2012 From: akibsayyed at gmail.com (Akib Sayyed) Date: Sat, 30 Jun 2012 18:52:29 +0530 Subject: Trying to understand talloc.h Message-ID: i am trying to understand talloc* functions. in layer23 app. i want to know what exact role they perform in these apps. its ok about allocating memory and freeing them but logically why they are used. -- Akib Sayyed Matrix-Shell akibsayyed at gmail.com akibsayyed at matrixshell.com Mob:- +91-966-514-2243 -------------- next part -------------- An HTML attachment was scrubbed... URL: From 246tnt at gmail.com Sat Jun 30 19:52:43 2012 From: 246tnt at gmail.com (Sylvain Munaut) Date: Sat, 30 Jun 2012 21:52:43 +0200 Subject: Trying to understand talloc.h In-Reply-To: References: Message-ID: On Sat, Jun 30, 2012 at 3:22 PM, Akib Sayyed wrote: > i am trying to understand talloc* functions. in layer23 app. i want to know > what exact role they perform in these apps. > its ok about allocating memory and freeing them but logically why they are > used. talloc is an external library borrowed from samba : http://talloc.samba.org/talloc/doc/html/index.html The code running on the target currently uses a "stub" implementation that only returns fixed size block no matter what is asked. it works because so far the only piece of dynamic allocation is the msgb_alloc ... But to run everything on the phone you'll need a proper target compatible implementation Cheers, Sylvain