From aschmida at mailbox.tu-berlin.de  Tue Sep  7 11:57:56 2010
From: aschmida at mailbox.tu-berlin.de (Andreas Schmidt-Dannert)
Date: Tue, 07 Sep 2010 13:57:56 +0200
Subject: Problem connecting to NanoBTS with current version of OpenBSC
In-Reply-To: <4C719815.5010106@mailbox.tu-berlin.de>
References: <4c71a20d.mirider@mirider.augusta.de>
	<4C719815.5010106@mailbox.tu-berlin.de>
Message-ID: <4C8628C4.6020809@mailbox.tu-berlin.de>

Hello all,

since last weekend GPRS is working and now I am about to understand what 
exactly happens when I turn on my Milestone to get a position fix in 
googlemaps.

As I understand it, the phone (SET) queries the SUPL server (SLP) of 
Motorola to get assistance data. I can see in wireshark that they talk 
for a while but unfortunately I can only see the TCP packets.
Of course I would like to see the ULP packets inside of TCP.
Wireshark supports ULP but I cannot see the packets. I attached a capture.
Does someone here has a ULP capture to share? Or can someone acknowledge 
that he/she can see the ULP packets?

I can only see the DNS query for the ip of the SUPL server and than some 
TCP packets going to the SUPL port (7275) and back to my mobile phone.

  ULP is implemented and so maybe it is my version of wireshark which is 
the development version from https://launchpad.net/~dreibh/+archive/ppa

Another thing is that I get placed in googlemaps to Sao Lazaro (Macau) 
which is not really Berlin. It only happens when I am connected to the 
NanoBTS and no other position can be retrieved. It happens with a Nokia 
phone (N78) as well as with one from Motorola (Milestone).
This is not a problem since it goes to the right position as soon as it 
has found enough satellites but indoors and without A-GPS working it 
places me to Sao Lazaro. Just curious what that could mean.

Best,
Andreas


On 08/22/2010 11:35 PM, Andreas Schmidt-Dannert wrote:
> Hello Dieter,
>
> On 08/22/2010 10:17 PM, Dieter Spaar wrote:
>> Hello Andreas,
>>
>> On Sun, 22 Aug 2010 21:03:46 +0200, "Andreas 
>> Schmidt-Dannert"<aschmida at mail.tu-berlin.de>  wrote:
>>> I am playing around with RRLP and since newer versions of OpenBSC also
>>> support packet data  I wanted to upgrade to be able to receive A-GPS
>>> data from the internet.
>> I don't know whats wrong with your configuration, I can just say that
>> here switching between different PCs running OpenBSC works without 
>> problems
>> when the correct OML IP address has been configured for the nanoBTS 
>> ("-o"
>> option of "ipaccess-config") and the nanoBTS was restarted.
>>
>> I am interested in what you want do try with RRLP because I recently
>> did some more experiments with it. Especially I would like to try
>> "MS-assisted" position measurements next, however this method requires
>> the acquisition assitance data which have to be calculated first, I 
>> don't
>> think they can be extracted from the data of a GPS receiver. I don't 
>> know
>> if there is some ready and tested code for this already available which
>> would make it easier to get this up an running.
>>
>> Best regards,
>>    Dieter
> The idea is to find out what information can be revealed from a phone 
> by sending different RRLP requests. Right now only ms-based 
> positioning is possible and I played a bit around with it and was 
> surprised how easy it was to get the position. I wonder if they even 
> store the last known position? As far as I know it makes it easier to 
> compute a new position if the phones knows where it roughly is. Anyway 
> since I just have one nanoBTS I can only use GPS as positioning method 
> and while I was playing around I realized that most MS asked for 
> assistance data (as you also found out at HAR2009).
>
> So bringing ms-assisted positioning to work is also a goal of me.
> Is it not possible to just transfer the acquired data from the GPS 
> receiver in the MS to a A-GPS server in the network and let te server 
> compute the acquisition assistance data? Probably I am thinking to 
> naive here. I know it should be a server not too far away from the 
> asking MS.
>
> By the way there was for a while a rrlp-ephemeris tree in openbsc. 
> What was it for and what happend with it? As i understood it one could 
> connect an external GPS device to a laptop to get data that is 
> needed..kind of an A-GPS server. Right?
>
> Another tought: What about SUPL?
> SUPL uses IP to get assistance data from a SUPL server...so maybe it 
> is possible to use a supl server from google or similar?
>
> So what I do is just playing around to find out what can be done (old 
> positions, will a phone turn GPS on when an RRLP query comes - 
> thinking about  emergency cases (E911) this would make sense) and how 
> do different mobile phone react to different queries. I am not fuzzing 
> - I am sending only valid queries. I am quite new to this field  but I 
> find it very interesting and I have fun working with OpenBSC (if it 
> works :) maybe my problem has nothing to do with OpenBSC...I do not 
> know).
>
> If you have any ideas how to get ms-assisted positioning to work I 
> would be glad to hear about it.
>
> Best,
>
> Andreas
>
>
>
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: supl.pcap
Type: application/cap
Size: 2179 bytes
Desc: not available
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100907/149db4c5/attachment.bin>

From laforge at gnumonks.org  Tue Sep  7 14:45:04 2010
From: laforge at gnumonks.org (Harald Welte)
Date: Tue, 7 Sep 2010 16:45:04 +0200
Subject: Problem connecting to NanoBTS with current version of OpenBSC
In-Reply-To: <4C8628C4.6020809@mailbox.tu-berlin.de>
References: <4c71a20d.mirider@mirider.augusta.de>
	<4C719815.5010106@mailbox.tu-berlin.de>
	<4C8628C4.6020809@mailbox.tu-berlin.de>
Message-ID: <20100907144504.GM31131@prithivi.gnumonks.org>

Hi Andreas,

On Tue, Sep 07, 2010 at 01:57:56PM +0200, Andreas Schmidt-Dannert wrote:

> since last weekend GPRS is working and now I am about to understand
> what exactly happens when I turn on my Milestone to get a position
> fix in googlemaps.

great.

> Another thing is that I get placed in googlemaps to Sao Lazaro
> (Macau) which is not really Berlin. It only happens when I am
> connected to the NanoBTS and no other position can be retrieved. It
> happens with a Nokia phone (N78) as well as with one from Motorola
> (Milestone).
> This is not a problem since it goes to the right position as soon as
> it has found enough satellites but indoors and without A-GPS working
> it places me to Sao Lazaro. Just curious what that could mean.

I would simply guess that it is some hard-coded default in case the MCC/MNC/LAC
is not known to whichever entity on the network that decides your location
based on that information.

What kind of MCC / MNC are you using?  Have you tried changing them to
one that exists in reality and checked where you get placed on the map now?

-- 
- Harald Welte <laforge at gnumonks.org>           http://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
                                                  (ETSI EN 300 175-7 Ch. A6)



From aschmida at mailbox.tu-berlin.de  Tue Sep  7 19:15:05 2010
From: aschmida at mailbox.tu-berlin.de (Andreas Schmidt-Dannert)
Date: Tue, 07 Sep 2010 21:15:05 +0200
Subject: RRLP
In-Reply-To: <20100907144504.GM31131@prithivi.gnumonks.org>
References: <4c71a20d.mirider@mirider.augusta.de>	<4C719815.5010106@mailbox.tu-berlin.de>	<4C8628C4.6020809@mailbox.tu-berlin.de>
	<20100907144504.GM31131@prithivi.gnumonks.org>
Message-ID: <4C868F39.5090303@mailbox.tu-berlin.de>

Hi Harald,

On 09/07/2010 04:45 PM, Harald Welte wrote:
> Hi Andreas,
>
> On Tue, Sep 07, 2010 at 01:57:56PM +0200, Andreas Schmidt-Dannert wrote:
>> Another thing is that I get placed in googlemaps to Sao Lazaro
>> (Macau) which is not really Berlin. It only happens when I am
>> connected to the NanoBTS and no other position can be retrieved. It
>> happens with a Nokia phone (N78) as well as with one from Motorola
>> (Milestone).
>> This is not a problem since it goes to the right position as soon as
>> it has found enough satellites but indoors and without A-GPS working
>> it places me to Sao Lazaro. Just curious what that could mean.
>>      
> I would simply guess that it is some hard-coded default in case the MCC/MNC/LAC
> is not known to whichever entity on the network that decides your location
> based on that information.
>
> What kind of MCC / MNC are you using?  Have you tried changing them to
> one that exists in reality and checked where you get placed on the map now?
>    
I used the default one in the config file but now I changed it first to 
202-1 (Cosmote - Greece) and
than to 268-3 (Optimus - Portugal). They both placed me in the ocean 
between Havanna and the Everglades. So it seems that something is 
hard-coded in the SUPL server but why is this value not always the same 
and why is that point so far away from Portugal/Greece?
Maybe I should try another SUPL  server and see if they place me at the 
same place for the same MCC/MNC combination.

Thanks,

Andreas





From holger at freyther.de  Wed Sep  1 01:52:26 2010
From: holger at freyther.de (Holger Hans Peter Freyther)
Date: Wed, 01 Sep 2010 09:52:26 +0800
Subject: Latest OpenBSC version that is working with the rugby nanoBTS?
In-Reply-To: <AANLkTikO1gAXr4S72ALRBL4rHSJH-cHWZs4hh=AJ69HD@mail.gmail.com>
References: <4C7C9F06.2050308@freyther.de>	<AANLkTinhS_YPD-twpGhHz45po0KfdrRpSWvb7bfgtr9U@mail.gmail.com>	<4C7CA891.3000502@freyther.de>
	<AANLkTikO1gAXr4S72ALRBL4rHSJH-cHWZs4hh=AJ69HD@mail.gmail.com>
Message-ID: <4C7DB1DA.20203@freyther.de>

On 08/31/2010 03:29 PM, Sylvain Munaut wrote:
>> My attempt on bisecting failed...  I will try again now. The symptom I have is
>> that I get SW Activate Requests for the GPRS-NSVC class and they keep coming,
>> the last working version I found was before splitting out libosmocore.
> 
> Wow, that's very old.
> 
> I'm at 6f3850fcac2e3edcf18820b6e6a55cd561d24483 currently (July 3rd).

Thanks, the issues appears to be with the PoE injector or a red herring, using
a different PoE injector it seems to be pretty stable...

weird



From risky at mail.ru  Wed Sep  1 14:04:12 2010
From: risky at mail.ru (Sergey V. Efimoff)
Date: Wed, 1 Sep 2010 18:04:12 +0400
Subject: LCR problem
Message-ID: <2FA087FA-1FC5-4599-990C-3F78CD66B554@mail.ru>

Hello All,

Does somebody ever seen the next message while starting LCR:

000000 ERROR GSM port 0 failed to bind socket. (name = mISDN_l1loop.1 errno=16)

What does it mean? 

I have BS11 and HFC controller, all worked fine on another machine with the same software.

Sergey.




From smzerocool at gmail.com  Fri Sep  3 07:02:44 2010
From: smzerocool at gmail.com (zero cool)
Date: Fri, 3 Sep 2010 02:02:44 -0500
Subject: how to extract mobile number and find cell phone current location
Message-ID: <AANLkTikjohcvK9YGqrGDf=n7Hkmm5gD8T+CVHpPmkjXJ@mail.gmail.com>

Hi All,
I want to find mobile number which is associated with IMSI number in any
particular network, is there any way to do it, also in GSM, MS use to inform
its Nearest BTS about its location, is there any way to find the location
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100903/44baeb0e/attachment.htm>

From holger at freyther.de  Fri Sep  3 07:36:39 2010
From: holger at freyther.de (Holger Hans Peter Freyther)
Date: Fri, 03 Sep 2010 15:36:39 +0800
Subject: how to extract mobile number and find cell phone current location
In-Reply-To: <AANLkTikjohcvK9YGqrGDf=n7Hkmm5gD8T+CVHpPmkjXJ@mail.gmail.com>
References: <AANLkTikjohcvK9YGqrGDf=n7Hkmm5gD8T+CVHpPmkjXJ@mail.gmail.com>
Message-ID: <4C80A587.7000208@freyther.de>

On 09/03/2010 03:02 PM, zero cool wrote:
> Hi All,
> I want to find mobile number which is associated with IMSI number in any
> particular network, is there any way to do it, also in GSM, MS use to inform
> its Nearest BTS about its location, is there any way to find the location

For bsc_hack you are assigning numbers yourself in the hlr.sqlite. You can use
sqlite3 to query the database, e.g. SELECT * from Subscribers to list the
whole content with IMSI and number.




From risky at mail.ru  Mon Sep  6 11:07:42 2010
From: risky at mail.ru (Sergey V. Efimoff)
Date: Mon, 6 Sep 2010 15:07:42 +0400
Subject: V.32/V.110 support in OpenBSC
Message-ID: <6CA4B837-6E61-45FB-AE14-41B051F1B4A0@mail.ru>

Hello All,

Is there support for V.32/V.110 data modes in OpenBSC. How it is possible to
connect two GSM devices in standard data mode (not GPRS)?

Best Regards,
Sergey.




From risky at mail.ru  Mon Sep  6 12:57:44 2010
From: risky at mail.ru (Sergey V. Efimoff)
Date: Mon, 6 Sep 2010 16:57:44 +0400
Subject: ipAccess nanoBTS
Message-ID: <4FD054EB-8943-4A8D-BC44-C5423C3EA324@mail.ru>

Hello All,

Has anyone nanoBTS for sale (need one for start experiments)?

Best Regards,
Sergey.




From spaar at mirider.augusta.de  Tue Sep  7 14:49:20 2010
From: spaar at mirider.augusta.de (Dieter Spaar)
Date: Tue, 07 Sep 2010 14:49:20 CEST
Subject: ULP [was: Problem connecting to NanoBTS with current version of
	OpenBSC]
Message-ID: <4c8650f0.mirider@mirider.augusta.de>

Hello Andreas,

On Tue, 07 Sep 2010 13:57:56 +0200, "Andreas Schmidt-Dannert" <aschmida at mail.tu-berlin.de> wrote:
> 
> I can only see the DNS query for the ip of the SUPL server and than some 
> TCP packets going to the SUPL port (7275) and back to my mobile phone.

I could just verify my assumption: The traffic is SSL encrypted. If you
tell WireShark to decode the trace as SSL you can see that the result
will make sense. So I guess that the ULP traffic is embedded in SSL.

I found a valid ULP trace here:

  http://pastebin.com/6vfri6Mt

I don't know from whom it is, it is already decoded.

Best regards,
  Dieter
-- 
Dieter Spaar, Germany                           spaar at mirider.augusta.de



From aschmida at mailbox.tu-berlin.de  Tue Sep  7 19:32:49 2010
From: aschmida at mailbox.tu-berlin.de (Andreas Schmidt-Dannert)
Date: Tue, 07 Sep 2010 21:32:49 +0200
Subject: ULP [was: Problem connecting to NanoBTS with current version
	of OpenBSC]
In-Reply-To: <4c8650f0.mirider@mirider.augusta.de>
References: <4c8650f0.mirider@mirider.augusta.de>
Message-ID: <4C869361.2070803@mailbox.tu-berlin.de>

Hello Dieter,

On 09/07/2010 02:49 PM, Dieter Spaar wrote:
> Hello Andreas,
>
> On Tue, 07 Sep 2010 13:57:56 +0200, "Andreas Schmidt-Dannert"<aschmida at mail.tu-berlin.de>  wrote:
>    
>> I can only see the DNS query for the ip of the SUPL server and than some
>> TCP packets going to the SUPL port (7275) and back to my mobile phone.
>>      
> I could just verify my assumption: The traffic is SSL encrypted. If you
> tell WireShark to decode the trace as SSL you can see that the result
> will make sense. So I guess that the ULP traffic is embedded in SSL.
>
> I found a valid ULP trace here:
>
>    http://pastebin.com/6vfri6Mt
>    
Okay that looks a bit different :). Thank you. It makes sense that it is 
SSL encrypted and I also decoded it and you were right. I can see the 
handshake now..or at least the beginning of it since it did not finish. 
Anyway I hoped for something different. Probably the connection will 
always be SSL encrypted no matter what SUPL server I use.

Thanks,
Andreas




From meierk at informatik.uni-freiburg.de  Fri Sep 10 22:55:01 2010
From: meierk at informatik.uni-freiburg.de (Konrad Meier)
Date: Sat, 11 Sep 2010 00:55:01 +0200
Subject: power amplifier for DCS 1800
Message-ID: <4C8AB745.2080601@informatik.uni-freiburg.de>

Hi,

I am building a GSM Test-Network at the university of Freiburg 
(Germany). We have a license for some channels in the DCS1800 band.

For the network we are using nanoBTS and we would like to amplify the TX 
Signal from the nanoBTS.

Does anyone know a suitable power amplifier? The output signal from the 
amplifier should be 1 or 2 Watt?

Regards
  Konrad



From hwit at a-domani.nl  Sun Sep 12 22:48:26 2010
From: hwit at a-domani.nl (Hans Witvliet)
Date: Mon, 13 Sep 2010 00:48:26 +0200
Subject: alternative hardware
Message-ID: <1284331706.2864.274.camel@t43.lan0.a-domani.nl>

Hi all,

did anyone allready had the chance to have a look at the magicjack
femtocell ?

As far as i could see, it has limited capabilities, but at a price of
about $200-250 it is tenfold cheaper than ip.access nano-bts.
Currently they only speak of support on ms and apple.

Even if it would allow a single connection through the guard-band
channels, it would be enough for me.


hw



From Andreas.Eversberg at versatel.de  Mon Sep 13 07:36:58 2010
From: Andreas.Eversberg at versatel.de (Andreas.Eversberg)
Date: Mon, 13 Sep 2010 09:36:58 +0200
Subject: AW: alternative hardware
Message-ID: <B16317F2B1592B4492FC414114171CE60408816D@FLBVEXCH01.versatel.local>

> did anyone allready had the chance to have a look at the magicjack
> femtocell ?

hi,

not really. the homepage www.magicjack.com shows something, but does not
say anything about GSM or femtocell. products at ebay called
"magicjack", look like a simple POTS interface for VOIP, not a BTS. but
if someone knows where to get this femtocell, it please let us know.

andreas



From hwit at a-domani.nl  Mon Sep 13 19:19:17 2010
From: hwit at a-domani.nl (Hans Witvliet)
Date: Mon, 13 Sep 2010 21:19:17 +0200
Subject: AW: alternative hardware
In-Reply-To: <B16317F2B1592B4492FC414114171CE60408816D@FLBVEXCH01.versatel.local>
References: <B16317F2B1592B4492FC414114171CE60408816D@FLBVEXCH01.versatel.local>
Message-ID: <1284405557.2864.301.camel@t43.lan0.a-domani.nl>

On Mon, 2010-09-13 at 09:36 +0200, Andreas.Eversberg wrote:
> > did anyone allready had the chance to have a look at the magicjack
> > femtocell ?
> 
> hi,
> 
> not really. the homepage www.magicjack.com shows something, but does not
> say anything about GSM or femtocell. products at ebay called
> "magicjack", look like a simple POTS interface for VOIP, not a BTS. but
> if someone knows where to get this femtocell, it please let us know.
> 

>From what i understood from several reviewing sites, is that they have
legal difficulties, before they are allowed to sell it in the USA (FCC).
And probably also (CE-approval) in europe.
I'm certain that in a number of countries, it will not be allowed to
sell/use them.

On the other hand, The use of the guard bands were released in UK and
NL.
As they are (relative) cheap, i'll try to get hold of (at least) one.
Seems i'm back in my pionering job ;-)



From laforge at gnumonks.org  Tue Sep 14 12:08:20 2010
From: laforge at gnumonks.org (Harald Welte)
Date: Tue, 14 Sep 2010 14:08:20 +0200
Subject: alternative hardware
In-Reply-To: <1284331706.2864.274.camel@t43.lan0.a-domani.nl>
References: <1284331706.2864.274.camel@t43.lan0.a-domani.nl>
Message-ID: <20100914120820.GP4541@prithivi.gnumonks.org>

Hi,

I have read about this device many months ago, but as far as I know, it
is still vaporware.  As such, it ceases to exist until somebody can show
me it exist in the real world.

Adding OpenBSC support for an existing inexpensive device would of course
be an exciting task.

-- 
- Harald Welte <laforge at gnumonks.org>           http://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
                                                  (ETSI EN 300 175-7 Ch. A6)



From 246tnt at gmail.com  Tue Sep 14 12:57:02 2010
From: 246tnt at gmail.com (Sylvain Munaut)
Date: Tue, 14 Sep 2010 14:57:02 +0200
Subject: alternative hardware
In-Reply-To: <20100914120820.GP4541@prithivi.gnumonks.org>
References: <1284331706.2864.274.camel@t43.lan0.a-domani.nl>
	<20100914120820.GP4541@prithivi.gnumonks.org>
Message-ID: <AANLkTi=YUkfnsc32NKDjs_uH+nG0JQJxU2+k6BXBCvjH@mail.gmail.com>

Hi,

> I have read about this device many months ago, but as far as I know, it
> is still vaporware. ?As such, it ceases to exist until somebody can show
> me it exist in the real world.

It seems to exist :

http://1.bp.blogspot.com/_0SAhCiCPPA4/S0UoNk0bkFI/AAAAAAAABuc/Lz3B0U9a8To/s400/FemtoJack.jpg
http://www.mobilecrunch.com/2010/01/09/hands-on-with-the-magicjack-femtocell/

Just not available to buy ... latest news in August said that they had problem :
 - Either the power was too low and the range made it basically
useless and/or poor quality
 - Either the power was too high and then their "legal argument" of
low power/your house only didn't quite hold anymore ...

> Adding OpenBSC support for an existing inexpensive device would of course
> be an exciting task.

And if someone has time, implementing an openbts/openbsc bridge would
be cool as well :)


PS: I think steve|m had found a higher res photo were the chip were readable ...

Cheers,

    Sylvain



From 246tnt at gmail.com  Tue Sep 14 13:03:36 2010
From: 246tnt at gmail.com (Sylvain Munaut)
Date: Tue, 14 Sep 2010 15:03:36 +0200
Subject: alternative hardware
In-Reply-To: <AANLkTi=YUkfnsc32NKDjs_uH+nG0JQJxU2+k6BXBCvjH@mail.gmail.com>
References: <1284331706.2864.274.camel@t43.lan0.a-domani.nl>
	<20100914120820.GP4541@prithivi.gnumonks.org>
	<AANLkTi=YUkfnsc32NKDjs_uH+nG0JQJxU2+k6BXBCvjH@mail.gmail.com>
Message-ID: <AANLkTi=OBw66M2=WBLy0VN7SXhVxuEvCW-8GeO0Y2eEO@mail.gmail.com>

> PS: I think steve|m had found a higher res photo were the chip were readable ...

http://1.bp.blogspot.com/_0SAhCiCPPA4/S0UoNk0bkFI/AAAAAAAABuc/Lz3B0U9a8To/s1600-h/FemtoJack.jpg



    Sylvain



From bouchtaoui at gmail.com  Tue Sep 14 13:53:14 2010
From: bouchtaoui at gmail.com (Nordin)
Date: Tue, 14 Sep 2010 15:53:14 +0200
Subject: alternative hardware
In-Reply-To: <AANLkTi=OBw66M2=WBLy0VN7SXhVxuEvCW-8GeO0Y2eEO@mail.gmail.com>
References: <1284331706.2864.274.camel@t43.lan0.a-domani.nl>	<20100914120820.GP4541@prithivi.gnumonks.org>	<AANLkTi=YUkfnsc32NKDjs_uH+nG0JQJxU2+k6BXBCvjH@mail.gmail.com>
	<AANLkTi=OBw66M2=WBLy0VN7SXhVxuEvCW-8GeO0Y2eEO@mail.gmail.com>
Message-ID: <4C8F7E4A.6040905@gmail.com>

  Cool!
So this is a tiny micro bts? I guess the bsc part is the software 
running on windows??
That is really cool, it's like a modified gsm module :)



On 14-9-2010 15:03, Sylvain Munaut wrote:
>> PS: I think steve|m had found a higher res photo were the chip were readable ...
> http://1.bp.blogspot.com/_0SAhCiCPPA4/S0UoNk0bkFI/AAAAAAAABuc/Lz3B0U9a8To/s1600-h/FemtoJack.jpg
>
>
>
>      Sylvain
>
>




From hwit at a-domani.nl  Tue Sep 14 20:25:45 2010
From: hwit at a-domani.nl (Hans Witvliet)
Date: Tue, 14 Sep 2010 22:25:45 +0200
Subject: alternative hardware
In-Reply-To: <AANLkTi=YUkfnsc32NKDjs_uH+nG0JQJxU2+k6BXBCvjH@mail.gmail.com>
References: <1284331706.2864.274.camel@t43.lan0.a-domani.nl>
	<20100914120820.GP4541@prithivi.gnumonks.org>
	<AANLkTi=YUkfnsc32NKDjs_uH+nG0JQJxU2+k6BXBCvjH@mail.gmail.com>
Message-ID: <1284495945.2864.381.camel@t43.lan0.a-domani.nl>

On Tue, 2010-09-14 at 14:57 +0200, Sylvain Munaut wrote:
> Hi,
> 
> > I have read about this device many months ago, but as far as I know, it
> > is still vaporware.  As such, it ceases to exist until somebody can show
> > me it exist in the real world.
> 
> It seems to exist :
> 
> http://1.bp.blogspot.com/_0SAhCiCPPA4/S0UoNk0bkFI/AAAAAAAABuc/Lz3B0U9a8To/s400/FemtoJack.jpg
> http://www.mobilecrunch.com/2010/01/09/hands-on-with-the-magicjack-femtocell/
> 
> Just not available to buy ... latest news in August said that they had problem :
>  - Either the power was too low and the range made it basically
> useless and/or poor quality
>  - Either the power was too high and then their "legal argument" of
> low power/your house only didn't quite hold anymore ...
> 
> > Adding OpenBSC support for an existing inexpensive device would of course
> > be an exciting task.
> 
> And if someone has time, implementing an openbts/openbsc bridge would
> be cool as well :)
> 

>From what i heard this afternoon (and if i understood correctly), one of
our the innovation managers is talking to the manufacturer.

If enough docu will become available, we could propose to start a
project for it. From a legal point-of-view there are no obstacles for
me. We have a licence to operate as our own mobile-provider, and have
roaming agreements with all national operators.


All i need is the single channel, low power option, so that anyone at
home (or abroad) can use his own gsm, and pass the voice to our own
asterisk. If succesfully we'll be ordering serious numbers, as we can
seriously cut costs.

So we have the finance, the time, any legal framework, the drive to make
it work and an opensource minded manager, Just got to get hold of any
model, either high or low power.


hw




From laforge at gnumonks.org  Wed Sep 15 10:29:51 2010
From: laforge at gnumonks.org (Harald Welte)
Date: Wed, 15 Sep 2010 12:29:51 +0200
Subject: alternative hardware
In-Reply-To: <1284495945.2864.381.camel@t43.lan0.a-domani.nl>
References: <1284331706.2864.274.camel@t43.lan0.a-domani.nl>
	<20100914120820.GP4541@prithivi.gnumonks.org>
	<AANLkTi=YUkfnsc32NKDjs_uH+nG0JQJxU2+k6BXBCvjH@mail.gmail.com>
	<1284495945.2864.381.camel@t43.lan0.a-domani.nl>
Message-ID: <20100915102951.GD3646@prithivi.gnumonks.org>

Hi Hans,

On Tue, Sep 14, 2010 at 10:25:45PM +0200, Hans Witvliet wrote:

> All i need is the single channel, low power option, so that anyone at
> home (or abroad) can use his own gsm, and pass the voice to our own
> asterisk. If succesfully we'll be ordering serious numbers, as we can
> seriously cut costs.

The OpenBSC project would definitely be interested in adding support for any
additional low-cost GSM BTS hardware.

-- 
- Harald Welte <laforge at gnumonks.org>           http://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
                                                  (ETSI EN 300 175-7 Ch. A6)



From openbsc at ngolde.de  Wed Sep 15 17:57:50 2010
From: openbsc at ngolde.de (Nico Golde)
Date: Wed, 15 Sep 2010 19:57:50 +0200
Subject: [PATCH] count sms delivery attempts
Message-ID: <20100915175750.GA19153@pool.math.tu-berlin.de>

Hi,
attached is a small patch to add sms delivery attempt 
counting using the db_sms_inc_deliver_attempts() that 
already existed. I was a bit unsure what exactly counts as a 
delivery attempt judging by GSM 04.11 but it made sense to 
me to count that with each CP-DATA.

Cheers
Nico

From nico at ngolde.de  Wed Sep 15 17:49:55 2010
From: nico at ngolde.de (Nico Golde)
Date: Wed, 15 Sep 2010 19:49:55 +0200
Subject: [PATCH] gsm_04_11: count SMS delivery attempts for each CP-DATA
Message-ID: <mailman.19.1641744165.42898.openbsc@lists.osmocom.org>

---
 openbsc/src/gsm_04_11.c |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/openbsc/src/gsm_04_11.c b/openbsc/src/gsm_04_11.c
index 02bc442..4ec1071 100644
--- a/openbsc/src/gsm_04_11.c
+++ b/openbsc/src/gsm_04_11.c
@@ -37,6 +37,7 @@
 #include <osmocore/tlv.h>
 #include <openbsc/debug.h>
 #include <openbsc/gsm_data.h>
+#include <openbsc/db.h>
 #include <openbsc/gsm_subscriber.h>
 #include <openbsc/gsm_04_11.h>
 #include <openbsc/gsm_04_08.h>
@@ -175,6 +176,7 @@ static int gsm411_cp_sendmsg(struct msgb *msg, struct gsm_trans *trans,
 		trans->sms.cp_timer.cb = cp_timer_expired;
 		/* 5.3.2.1: Set Timer TC1A */
 		bsc_schedule_timer(&trans->sms.cp_timer, GSM411_TMR_TC1A);
+		db_sms_inc_deliver_attempts(trans->sms.sms);
 		DEBUGP(DSMS, "TX: CP-DATA ");
 		break;
 	case GSM411_MT_CP_ACK:
-- 
1.7.1


--2fHTh5uZTiUOsy+g--



From holger at freyther.de  Thu Sep 16 12:54:43 2010
From: holger at freyther.de (Holger Hans Peter Freyther)
Date: Thu, 16 Sep 2010 20:54:43 +0800
Subject: [PATCH] count sms delivery attempts
In-Reply-To: <20100915175750.GA19153@pool.math.tu-berlin.de>
References: <20100915175750.GA19153@pool.math.tu-berlin.de>
Message-ID: <4C921393.7050104@freyther.de>

On 09/16/2010 01:57 AM, Nico Golde wrote:
> Hi,
> attached is a small patch to add sms delivery attempt 
> counting using the db_sms_inc_deliver_attempts() that 
> already existed. I was a bit unsure what exactly counts as a 
> delivery attempt judging by GSM 04.11 but it made sense to 
> me to count that with each CP-DATA.

thanks applied.



From DRamirez at baja.gob.mx  Wed Sep 15 18:08:12 2010
From: DRamirez at baja.gob.mx (DRamirez at baja.gob.mx)
Date: Wed, 15 Sep 2010 11:08:12 -0700
Subject: opensbsc
Message-ID: <OFA61F5B23.35E2B4C6-ON8825779F.0062AE8E-8825779F.0063A19F@baja.gob.mx>

Hi i have installed the openbsc in my computer and also i have an 
ip.access bts but i don?t know what to do next i couldn?f find what is the 
commands to detect the bts. i will appreciate  your help.

have a good day, thank you
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100915/51b28db2/attachment.htm>

From holger at freyther.de  Sat Sep 18 09:16:01 2010
From: holger at freyther.de (Holger Hans Peter Freyther)
Date: Sat, 18 Sep 2010 17:16:01 +0800
Subject: opensbsc
In-Reply-To: <OFA61F5B23.35E2B4C6-ON8825779F.0062AE8E-8825779F.0063A19F@baja.gob.mx>
References: <OFA61F5B23.35E2B4C6-ON8825779F.0062AE8E-8825779F.0063A19F@baja.gob.mx>
Message-ID: <4C948351.80808@freyther.de>

On 09/16/2010 02:08 AM, DRamirez at baja.gob.mx wrote:
> 
> Hi i have installed the openbsc in my computer and also i have an ip.access
> bts but i don?t know what to do next i couldn?f find what is the commands to
> detect the bts. i will appreciate  your help.

Have you searched the wiki?



From bertoncello at netzing.de  Thu Sep 16 12:32:56 2010
From: bertoncello at netzing.de (Luca Bertoncello)
Date: Thu, 16 Sep 2010 14:32:56 +0200
Subject: Using two nanoBTS at the same time (as neighbor)
Message-ID: <20100916143256.54c33dd7@Luca>

Hi, list!

I'm trying to configure OpenBSC to use two nanoBTS (DSC1800) as
neighbor cells.
What I'd like to have is, by the measurement report, to get the values
of both cells.

Can someone say me, how can I configure the two nanoBTS as neighbor?

Thanks a lot!
-- 
_______________________________________________________________________
Luca Bertoncello
Entwicklung                               Mail:  bertoncello at netzing.de 


NETZING Solutions AG                      Tel.:  0351/41381 - 23
Fr?belstr. 57, 01159 Dresden              Fax:   0351/41381 - 12
_______________________________________________________________________

Impressum: 
NETZING Solutions AG  -  Fr?belstra?e 57   -   01159 Dresden
Sitz der Gesellschaft Amtsgericht Dresden HRB 18926
Vorstand  Dieter Schneider  -  Aufsichtsratsvorsitzender Volker Kanitz
USt.Id DE211326547  Mail:  netzing.ag at netzing.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100916/c09d936d/attachment.bin>

From laforge at gnumonks.org  Sat Sep 18 08:22:13 2010
From: laforge at gnumonks.org (Harald Welte)
Date: Sat, 18 Sep 2010 10:22:13 +0200
Subject: Using two nanoBTS at the same time (as neighbor)
In-Reply-To: <20100916143256.54c33dd7@Luca>
References: <20100916143256.54c33dd7@Luca>
Message-ID: <20100918082213.GE21213@prithivi.gnumonks.org>

Hi Luca,

On Thu, Sep 16, 2010 at 02:32:56PM +0200, Luca Bertoncello wrote:
 
> I'm trying to configure OpenBSC to use two nanoBTS (DSC1800) as
> neighbor cells.
> What I'd like to have is, by the measurement report, to get the values
> of both cells.
> 
> Can someone say me, how can I configure the two nanoBTS as neighbor?

They will automatically be configured as neighbor cells.  The default
behavior of OpenBSC is to consider all cells in one openbsc.cfg file as 
neighbors to each other.

-- 
- Harald Welte <laforge at gnumonks.org>           http://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
                                                  (ETSI EN 300 175-7 Ch. A6)



From openbsc-bounces at lists.gnumonks.org  Sat Sep 18 08:23:07 2010
From: openbsc-bounces at lists.gnumonks.org (openbsc-bounces at lists.gnumonks.org)
Date: Sat, 18 Sep 2010 10:23:07 +0200
Subject: Forward of moderated message
Message-ID: <mailman.0.1284798187.26330.openbsc@lists.gnumonks.org>

An embedded message was scrubbed...
From: "Roostono Darsomartono" <roostono at utp.co.id>
Subject: Subscribe to mailing list
Date: Wed, 15 Sep 2010 03:16:58 -0700
Size: 4329
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100918/82723f45/attachment.eml>

From admin at manateeshome.com  Sat Sep 18 12:29:52 2010
From: admin at manateeshome.com (Seungju Kim)
Date: Sat, 18 Sep 2010 08:29:52 -0400
Subject: BTS for sale?
Message-ID: <46EE9343-0472-4B44-BA2A-D01143E8CE62@manateeshome.com>

Is there any bs-11 or nanobts for sale at the moment?

Sent from my iPhone



From aschmida at mailbox.tu-berlin.de  Sat Sep 18 20:35:20 2010
From: aschmida at mailbox.tu-berlin.de (Andreas Schmidt-Dannert)
Date: Sat, 18 Sep 2010 22:35:20 +0200
Subject: RRLP:posCapabilityReq
Message-ID: <4C952288.6080305@mailbox.tu-berlin.de>

Hello all,

I am trying to get a Positioning Capability Response from a MS by 
sending an Positioning Capability Request. I checked ETSI TS 144 031 
(v9.2.0) to figure out how to build the package. Only the 
"extended-reference" field is mandatory and so I tried to send a package 
just with the content of that field. The "extend-reference" consists of 
the smlc-code and the transactionID.
By testing I found out that I have to send at least 6 octets. The first 
octet is as usual the referenceNumber and to specify the rrlp component. 
The last 2 bits of the 3rd octet and the first 4 bits of the 4th octet 
are for the smlc-code. The rest of the 4th octet, the full 5th octet and 
the first 6 bits of the 6th octet are for the transactionID.
Furthermore the first 3 bits of the second octet are for the choice 
extension. Anyway I have no clue what the meaning is of the last 6 bits 
of the 2nd octet and the first 6 bits of the 3rd octet although it seems 
like that the 4th bit of the second octet is an extension bit.

However if I send a package I always get "Meassage too short" error. 
Adding octets does not help.

Anyone has ever got a Positioning Capability Response for a Request? If 
yes I would really appreciate if that someone would share this Request 
with me.

Wireshark always shows me that I have sent a Positioning Capability 
Request but the Response never comes but the error message. RRLP is 
implemented in the phone since I get responses for a Measure Position 
Request.

I think by now I have sent around 500 packages :) One example I am using 
is:  0x30 0x0E 0x00 0xFF 0xA2 0x04

Best,

Andreas





From meierk at informatik.uni-freiburg.de  Mon Sep 20 14:29:36 2010
From: meierk at informatik.uni-freiburg.de (Konrad Meier)
Date: Mon, 20 Sep 2010 16:29:36 +0200
Subject: Picocell from HAY SYSTEMS
Message-ID: <4C976FD0.2000004@informatik.uni-freiburg.de>

Hello,

Searching the web I found the following BTS:
http://www.haysystems.com/mobile-networks/hsl-picocell/

The System seams to be very similar to the ip.access nanoBTS.
POE and Abis over IP.

Can someone roughly estimate the time needed to integrate this BTS into 
openBSC? The developer I have in mind already has some experience in 
OpenBSC.

What exactly is needed to complete this task?

The company also has a different BTS called Femtocell. The interesting 
thing is that they offer a "Femtocell Trial Package" for USD 7200. The 
trail Package include BSC Software and two BTS. I also has a Network 
Interface but I found nothing about the protocol used between BSC and BTS.

Regards
  Konrad



From laforge at gnumonks.org  Mon Sep 20 15:42:14 2010
From: laforge at gnumonks.org (Harald Welte)
Date: Mon, 20 Sep 2010 17:42:14 +0200
Subject: Picocell from HAY SYSTEMS
In-Reply-To: <4C976FD0.2000004@informatik.uni-freiburg.de>
References: <4C976FD0.2000004@informatik.uni-freiburg.de>
Message-ID: <20100920154214.GT4410@prithivi.gnumonks.org>

Hi Konrad,

On Mon, Sep 20, 2010 at 04:29:36PM +0200, Konrad Meier wrote:
 
> Searching the web I found the following BTS:
> http://www.haysystems.com/mobile-networks/hsl-picocell/
> 
> The System seams to be very similar to the ip.access nanoBTS.
> POE and Abis over IP.

Yes, on a high level it seems like it.  Several of my customers have tried
to buy the femtocell starter kit of the HSL femtocell throughout the last 12
months, but last time they checked (August 2010) it was still not shipping to
customers.

The picocell is an even later product, so I would be surprised if that has
started shipping before the femtocell.

> Can someone roughly estimate the time needed to integrate this BTS
> into openBSC? The developer I have in mind already has some
> experience in OpenBSC.

It's hard to make an estimate without knowing the details.  Adding basic
signalling and voice call support for the nanoBTS to OpenBSC (at a time it only
supported the BS-11) was done in < 1 week full time, using only a sample
nanoBTS unit and packet traces between a proprietary BSC and the nanoBTS.

Factors that relate to the amount of time are largely dependent on
* is there any documentation that can be used to write Open Source (NDA, ...)?
* how close do they follow A-bis OML and RSL?
* how is the adaption between A-bis RSL/OML and IP done?
* how are the actual TCH data (voice streams) transported over IP?
* do you only need GSM signalling + voice or also GPRS/EDGE data?

I would guess somewhere between 2-4 weeks, to be on the safe side.

> What exactly is needed to complete this task?

Ideally there would be written documentation from the vendor on the exact
protocol they use on their Abis/IP backhaul.  Specifically, it is interesting
to understand the questions I'm raising above.

If no documentation is available, doing packet captures between the BSC
and BTS, followed by reverse engineering the protocol will be needed.  My
personal approach would be to simply look at the packets, try to find data
that looks like TS 12.21 or TS 08.58, and then write a wireshark dissector
plugin to hand-off the 12.21/08.58 data to the existing OML or RSL dissectors.

From that point on, you can write OpenBSC code to bring up the BTS by simply
playing back the same messages that you have seen from the proprietary BSC.

-- 
- Harald Welte <laforge at gnumonks.org>           http://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
                                                  (ETSI EN 300 175-7 Ch. A6)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: Digital signature
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100920/e6eec2ba/attachment.bin>

From maggiebsc at gmail.com  Mon Sep 20 18:11:05 2010
From: maggiebsc at gmail.com (Maggie Balsamic)
Date: Mon, 20 Sep 2010 14:11:05 -0400
Subject: ip.access beginner question
Message-ID: <AANLkTinOf=3K_=X-s0bgRTw6f-hwbBaLiXsSKYJWGz0z@mail.gmail.com>

Hi all,
I've got a PCS 1900 version of the ip.access BTS that I'm trying to get
working with openbsc. I'm able to connect to the ip.access using bsc_hack,
but I'm not sure what my next step should be. I made basic changes to the
included bsc_hack ip.access config file, but I'm guessing that I'm missing
something basic. Not sure if this matters, but one oddity I've found as I
follow the instructions on the wiki is that ipaccess_config did not properly
set the primary-oml IP. However, I was able to get the debug telnet client
working, and set the oml IP directly from the ip.access debug shell.
What I'm looking for right now is what I need to do to get bsc_hack to show
a phone attempting to authenticate, etc. I'm wondering if it could have
something to do with the channel config at the end, since I don't know how
to set that.
I've included my current bsc_hack config and the debug logging from
bsc_hack. Any help would be much appreciated!
Thanks

========BSC_HACK OUTPUT:

<0005> bsc_init.c:1123
WARNING: You are running an 'accept-all' network on a BTS that is not
barred.  This configuration is likely to interfere with production GSM
networks and should only be used in a RF shielded environment such as a
faraday cage!

<0005> bsc_init.c:738 bootstrapping OML for BTS 0
<0005> abis_nm.c:518 OC=SITE-MANAGER(00) INST=(ff,ff,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07)
<0005> abis_nm.c:518 OC=BTS(01) INST=(00,ff,ff) STATE CHG: OP_STATE=Disabled
AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=BASEBAND-TRANSCEIVER(04) INST=(00,00,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,00) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,01) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,02) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,03) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,04) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,05) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,06) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,07) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=RADIO-CARRIER(02) INST=(00,00,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=GPRS-NSE(f0) INST=(00,ff,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=GPRS-CELL(f1) INST=(00,00,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=GPRS-NSVC(f2) INST=(00,00,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=GPRS-NSVC(f2) INST=(00,01,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Not installed(07) ADM=Locked
<0005> abis_nm.c:518 OC=SITE-MANAGER(00) INST=(ff,ff,ff) SW Activate
Request: <0005> abis_nm.c:879 Software Activate Request, ACKing and
Activating
<0005> abis_nm.c:894 Found SW config: 42 12 00 08 31 36 38 61 33 30 32 00 13
00 0a 76 31 34 32 62 31 33 64 30 00 42 12 00 08 31 36 38 61 33 30 32 00 13
00 0a 76 31 34 32 62 31 33 64 30 00
<0005> abis_nm.c:518 OC=SITE-MANAGER(00) INST=(ff,ff,ff) STATE CHG:
OP_STATE=Enabled AVAIL=OK(ff)
<0005> abis_nm.c:518 OC=SITE-MANAGER(00) INST=(ff,ff,ff) Sending OPSTART
<0005> abis_nm.c:518 OC=SITE-MANAGER(00) INST=(ff,ff,ff) Software Activated
Report
<0005> abis_nm.c:518 OC=BTS(01) INST=(00,ff,ff) SW Activate Request: <0005>
abis_nm.c:879 Software Activate Request, ACKing and Activating
<0005> abis_nm.c:894 Found SW config: 42 12 00 08 31 36 38 61 33 30 32 00 13
00 0a 76 31 34 32 62 31 33 64 30 00
<0005> abis_nm.c:518 OC=GPRS-NSE(f0) INST=(00,ff,ff) SW Activate Request:
<0005> abis_nm.c:879 Software Activate Request, ACKing and Activating
<0005> abis_nm.c:894 Found SW config: 42 12 00 08 31 36 38 61 33 30 32 00 13
00 0a 76 31 34 32 62 31 33 64 30 00
<0005> abis_nm.c:518 OC=BTS(01) INST=(00,ff,ff) STATE CHG: OP_STATE=Disabled
AVAIL=Dependency(05)
<0005> abis_nm.c:1795 Set BTS Attr (bts=0)
<0005> abis_nm.c:518 OC=BTS(01) INST=(00,ff,ff) Sending OPSTART
<0005> abis_nm.c:518 OC=BTS(01) INST=(00,ff,ff) Software Activated Report
<0005> abis_nm.c:518 OC=BASEBAND-TRANSCEIVER(04) INST=(00,00,ff) SW Activate
Request: <0005> abis_nm.c:879 Software Activate Request, ACKing and
Activating
<0005> abis_nm.c:894 Found SW config: 42 12 00 08 31 36 38 61 33 30 31 00 13
00 0a 76 31 34 32 62 31 33 64 30 00 42 12 00 08 31 36 38 61 33 30 31 00 13
00 0a 76 31 34 32 62 31 33 64 30 00 42 12 00 08 31 36 38 61 33 30 32 00 13
00 0a 76 31 34 32 62 31 33 64 30 00
<0005> abis_nm.c:518 OC=RADIO-CARRIER(02) INST=(00,00,ff) SW Activate
Request: <0005> abis_nm.c:879 Software Activate Request, ACKing and
Activating
<0005> abis_nm.c:894 Found SW config: 42 12 00 08 31 36 38 61 33 30 31 00 13
00 0a 76 31 34 32 62 31 33 64 30 00 42 12 00 08 31 36 38 61 33 30 31 00 13
00 0a 76 31 34 32 62 31 33 64 30 00 42 12 00 08 31 36 38 61 33 30 32 00 13
00 0a 76 31 34 32 62 31 33 64 30 00
<0005> abis_nm.c:518 OC=GPRS-NSE(f0) INST=(00,ff,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05)
<0005> abis_nm.c:518 OC=GPRS-NSE(f0) INST=(00,ff,ff) Software Activated
Report
<0005> abis_nm.c:518 OC=GPRS-CELL(f1) INST=(00,00,ff) SW Activate Request:
<0005> abis_nm.c:879 Software Activate Request, ACKing and Activating
<0005> abis_nm.c:894 Found SW config: 42 12 00 08 31 36 38 61 33 30 32 00 13
00 0a 76 31 34 32 62 31 33 64 30 00
<0005> abis_nm.c:518 OC=GPRS-NSVC(f2) INST=(00,00,ff) SW Activate Request:
<0005> abis_nm.c:879 Software Activate Request, ACKing and Activating
<0005> abis_nm.c:894 Found SW config: 42 12 00 08 31 36 38 61 33 30 32 00 13
00 0a 76 31 34 32 62 31 33 64 30 00
<0005> abis_nm.c:518 OC=GPRS-NSVC(f2) INST=(00,01,ff) SW Activate Request:
<0005> abis_nm.c:879 Software Activate Request, ACKing and Activating
<0005> abis_nm.c:894 Found SW config: 42 12 00 08 31 36 38 61 33 30 32 00 13
00 0a 76 31 34 32 62 31 33 64 30 00
<0005> abis_nm.c:518 OC=BTS(01) INST=(00,ff,ff) STATE CHG: OP_STATE=Disabled
AVAIL=Dependency(05) ADM=Unlocked
<0005> abis_nm.c:518 OC=BASEBAND-TRANSCEIVER(04) INST=(00,00,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05)
<0005> abis_nm.c:518 OC=BASEBAND-TRANSCEIVER(04) INST=(00,00,ff) Software
Activated Report
<0005> abis_nm.c:518 OC=BASEBAND-TRANSCEIVER(04) INST=(00,00,ff) Sending
OPSTART
<0005> abis_nm.c:2878 ip.access RSL CONNECT IP=0.0.0.0 PORT=3003 STREAM=0x00
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,00) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05)
<0005> abis_nm.c:1970 Set Chan Attr (bts=0,trx=0,ts=0)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,00) Sending OPSTART
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,01) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05)
<0005> abis_nm.c:1970 Set Chan Attr (bts=0,trx=0,ts=1)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,01) Sending OPSTART
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,02) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05)
<0005> abis_nm.c:1970 Set Chan Attr (bts=0,trx=0,ts=2)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,02) Sending OPSTART
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,03) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05)
<0005> abis_nm.c:1970 Set Chan Attr (bts=0,trx=0,ts=3)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,03) Sending OPSTART
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,04) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05)
<0005> abis_nm.c:1970 Set Chan Attr (bts=0,trx=0,ts=4)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,04) Sending OPSTART
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,05) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05)
<0005> abis_nm.c:1970 Set Chan Attr (bts=0,trx=0,ts=5)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,05) Sending OPSTART
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,06) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05)
<0005> abis_nm.c:1970 Set Chan Attr (bts=0,trx=0,ts=6)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,06) Sending OPSTART
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,07) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05)
<0005> abis_nm.c:1970 Set Chan Attr (bts=0,trx=0,ts=7)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,07) Sending OPSTART
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,00) Software Activated
Report
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,01) Software Activated
Report
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,02) Software Activated
Report
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,03) Software Activated
Report
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,04) Software Activated
Report
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,05) Software Activated
Report
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,06) Software Activated
Report
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,07) Software Activated
Report
<0005> abis_nm.c:518 OC=RADIO-CARRIER(02) INST=(00,00,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=RADIO-CARRIER(02) INST=(00,00,ff) Software Activated
Report
<0005> abis_nm.c:1812 Set TRX Attr (bts=0,trx=0)
<0005> abis_nm.c:518 OC=RADIO-CARRIER(02) INST=(00,00,ff) Sending OPSTART
<0005> abis_nm.c:518 OC=GPRS-CELL(f1) INST=(00,00,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05)
<0005> abis_nm.c:518 OC=GPRS-CELL(f1) INST=(00,00,ff) Software Activated
Report
<0005> abis_nm.c:518 OC=GPRS-NSVC(f2) INST=(00,00,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=GPRS-NSVC(f2) INST=(00,00,ff) Software Activated
Report
<0005> abis_nm.c:518 OC=GPRS-NSVC(f2) INST=(00,01,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=BASEBAND-TRANSCEIVER(04) INST=(00,00,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05) ADM=Unlocked
<0005> abis_nm.c:518 OC=GPRS-NSVC(f2) INST=(00,01,ff) Software Activated
Report
<0005> abis_nm.c:518 OC=BASEBAND-TRANSCEIVER(04) INST=(00,00,ff)
IPACCESS(0xe1): RSL CONNECT ACK IP=10.1.6.35 PORT=3003 STREAM=0x00
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,00) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05) ADM=Unlocked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,01) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05) ADM=Unlocked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,02) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05) ADM=Unlocked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,03) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05) ADM=Unlocked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,04) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05) ADM=Unlocked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,05) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05) ADM=Unlocked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,06) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05) ADM=Unlocked
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,07) STATE CHG:
OP_STATE=Disabled AVAIL=Dependency(05) ADM=Unlocked
<0005> abis_nm.c:518 OC=RADIO-CARRIER(02) INST=(00,00,ff) STATE CHG:
OP_STATE=Disabled AVAIL=OK(ff) ADM=Unlocked
<0005> abis_nm.c:518 OC=RADIO-CARRIER(02) INST=(00,00,ff) Sending OPSTART
<0005> abis_nm.c:518 OC=RADIO-CARRIER(02) INST=(00,00,ff) STATE CHG:
OP_STATE=Enabled AVAIL=OK(ff)
<0005> abis_nm.c:518 OC=BASEBAND-TRANSCEIVER(04) INST=(00,00,ff) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=BASEBAND-TRANSCEIVER(04) INST=(00,00,ff) STATE CHG:
OP_STATE=Enabled AVAIL=OK(ff)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,00) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,01) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,02) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,03) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,04) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,05) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,06) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,07) STATE CHG:
OP_STATE=Disabled AVAIL=Off line(03)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,00) STATE CHG:
OP_STATE=Enabled AVAIL=OK(ff)
<0005> abis_nm.c:518 OC=BTS(01) INST=(00,ff,ff) STATE CHG: OP_STATE=Enabled
AVAIL=OK(ff)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,01) STATE CHG:
OP_STATE=Enabled AVAIL=OK(ff)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,02) STATE CHG:
OP_STATE=Enabled AVAIL=OK(ff)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,03) STATE CHG:
OP_STATE=Enabled AVAIL=OK(ff)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,04) STATE CHG:
OP_STATE=Enabled AVAIL=OK(ff)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,05) STATE CHG:
OP_STATE=Enabled AVAIL=OK(ff)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,06) STATE CHG:
OP_STATE=Enabled AVAIL=OK(ff)
<0005> abis_nm.c:518 OC=CHANNEL(03) INST=(00,00,07) STATE CHG:
OP_STATE=Enabled AVAIL=OK(ff)
<0004> bsc_init.c:1019 bootstrapping RSL for BTS/TRX (0/0) on ARFCN 514
using MCC=1 MNC=1 LAC=1 CID=0 BSIC=63 TSC=7
<0003> bsc_init.c:798 SI1: 55 06 19 8f 01 00 00 00 00 00 00 00 00 00 00 00
00 00 00 e5 04 00 2b
<0003> bsc_init.c:798 SI2: 59 06 1a 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 ff e5 04 00
<0003> bsc_init.c:798 SI3: 49 06 1b 00 00 00 f1 10 00 01 41 03 00 27 47 40
e5 04 00 3b 2b 2b 2b
<0003> bsc_init.c:798 SI4: 31 06 1c 00 f1 10 00 01 47 40 e5 04 00 2b 2b 2b
2b 2b 2b 2b 2b 2b 2b
<0003> bsc_init.c:798 SI5: 49 06 1d 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 2b 2b 2b 2b
<0003> bsc_init.c:798 SI6: 2d 06 1e 00 00 00 f1 10 00 01 27 ff 2b 2b 2b 2b
2b 2b 2b 2b 2b 2b 2b


========BSC_HACK CONFIG:

!
! OpenBSC configuration saved from vty
!   !
password foo
!
line vty
 no login
!
network
 network country code 1
 mobile network code 1
 short name OpenBSC
 long name OpenBSC
! auth policy closed
 auth policy accept-all
 location updating reject cause 13
 encryption a5 0
 neci 1
 rrlp mode none
 mm info 1
 handover 0
 handover window rxlev averaging 10
 handover window rxqual averaging 1
 handover window rxlev neighbor averaging 10
 handover power budget interval 6
 handover power budget hysteresis 3
 handover maximum distance 9999
 timer t3101 10
 timer t3103 0
 timer t3105 0
 timer t3107 0
 timer t3109 0
 timer t3111 0
 timer t3113 60
 timer t3115 0
 timer t3117 0
 timer t3119 0
 timer t3141 0
 bts 0
  type nanobts
  band PCS1900
  cell_identity 0
  location_area_code 1
  training_sequence_code 7
  base_station_id_code 63
  ms max power 15
  cell reselection hysteresis 4
  rxlev access min 0
  channel allocator ascending
  rach tx integer 9
  rach max transmission 7
  ip.access unit_id 1801 0
  oml ip.access stream_id 255
  gprs mode none
  trx 0
   rf_locked 0
   arfcn 514
   nominal power 23
   max_power_red 20
   rsl e1 tei 0
    timeslot 0
     phys_chan_config CCCH+SDCCH4
    timeslot 1
     phys_chan_config SDCCH8
    timeslot 2
     phys_chan_config TCH/F
    timeslot 3
     phys_chan_config TCH/F
    timeslot 4
     phys_chan_config TCH/F
    timeslot 5
     phys_chan_config TCH/F
    timeslot 6
     phys_chan_config TCH/F
    timeslot 7
     phys_chan_config TCH/F
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100920/c6da39c4/attachment.htm>

From holger at freyther.de  Mon Sep 20 21:21:25 2010
From: holger at freyther.de (Holger Hans Peter Freyther)
Date: Tue, 21 Sep 2010 05:21:25 +0800
Subject: ip.access beginner question
In-Reply-To: <AANLkTinOf=3K_=X-s0bgRTw6f-hwbBaLiXsSKYJWGz0z@mail.gmail.com>
References: <AANLkTinOf=3K_=X-s0bgRTw6f-hwbBaLiXsSKYJWGz0z@mail.gmail.com>
Message-ID: <4C97D055.5030508@freyther.de>

On 09/21/2010 02:11 AM, Maggie Balsamic wrote:
> Hi all,
> I've got a PCS 1900 version of the ip.access BTS that I'm trying to get
> working with openbsc. I'm able to connect to the ip.access using bsc_hack, but
> I'm not sure what my next step should be. I made basic changes to the included
> bsc_hack ip.access config file, but I'm guessing that I'm missing something
> basic. Not sure if this matters, but one oddity I've found as I follow the
> instructions on the wiki is that ipaccess_config did not properly set the
> primary-oml IP. However, I was able to get the debug telnet client working,
> and set the oml IP directly from the ip.access debug shell.


did you reset the BTS after setting the OML IP with ipaccess-config? We write
the IP somewhere where it is only used on a reboot.


> 
> ========BSC_HACK OUTPUT:
> 
> <0005> bsc_init.c:1123
> WARNING: You are running an 'accept-all' network on a BTS that is not barred. 
> This configuration is likely to interfere with production GSM networks and
> should only be used in a RF shielded environment such as a faraday cage!

we mean that.



> <0004> bsc_init.c:1019 bootstrapping RSL for BTS/TRX (0/0) on ARFCN 514 using
> MCC=1 MNC=1 LAC=1 CID=0 BSIC=63 TSC=7
> <0003> bsc_init.c:798 SI1: 55 06 19 8f 01 00 00 00 00 00 00 00 00 00 00 00 00
> 00 00 e5 04 00 2b
> <0003> bsc_init.c:798 SI2: 59 06 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00
> 00 00 ff e5 04 00
> <0003> bsc_init.c:798 SI3: 49 06 1b 00 00 00 f1 10 00 01 41 03 00 27 47 40 e5
> 04 00 3b 2b 2b 2b
> <0003> bsc_init.c:798 SI4: 31 06 1c 00 f1 10 00 01 47 40 e5 04 00 2b 2b 2b 2b
> 2b 2b 2b 2b 2b 2b
> <0003> bsc_init.c:798 SI5: 49 06 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 00
> 00 00 2b 2b 2b 2b
> <0003> bsc_init.c:798 SI6: 2d 06 1e 00 00 00 f1 10 00 01 27 ff 2b 2b 2b 2b 2b
> 2b 2b 2b 2b 2b 2b

this means that RSL is up and that phones should be able to see your cell, you
will need to select the network on your test phone.



From maggiebsc at gmail.com  Tue Sep 21 17:50:05 2010
From: maggiebsc at gmail.com (Maggie Balsamic)
Date: Tue, 21 Sep 2010 13:50:05 -0400
Subject: ip.access beginner question
In-Reply-To: <4C97D055.5030508@freyther.de>
References: <AANLkTinOf=3K_=X-s0bgRTw6f-hwbBaLiXsSKYJWGz0z@mail.gmail.com>
	<4C97D055.5030508@freyther.de>
Message-ID: <AANLkTi=YUgNR6vDuCdy5iKycYxcXquV=_0m_t_yCsY_p@mail.gmail.com>

On Mon, Sep 20, 2010 at 5:21 PM, Holger Hans Peter Freyther <
holger at freyther.de> wrote:

> this means that RSL is up and that phones should be able to see your cell,
> you
> will need to select the network on your test phone.
>
>
Yep, turns out that the piece I was missing was that I needed to enable the
carrier-select menu (disabled by default for at&t iphones).

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100921/f638515c/attachment.htm>

From albert at vraagalex.nl  Tue Sep 21 10:07:45 2010
From: albert at vraagalex.nl (Albert Paijmans)
Date: Tue, 21 Sep 2010 12:07:45 +0200
Subject: nanoBTS question
Message-ID: <AANLkTikGDLRbdTmmUHqYpK98+6VccygP=m8PNC6Qv8Fm@mail.gmail.com>

Hi,

I have been looking around and I am wondering, when you are interested in a
consumer 3G / Femto or Pico cell it might be very cheap through AT&T at
around $150. Might somebody be working rverse engineering on those cheaper
cells?

The nanoBTS from ipaccess is costing euro 3450 Mind you this is without any
software or server, just a single nanoBTS unit.
Does anybody have any experience and info about pricing? I find this price
crazy but it is the only way in the Netherland to buy it officially.
Also I have a license for GSM frequencies ad for that price they only send
it to an address.

Thanks

Albert
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100921/948704e1/attachment.htm>

From 246tnt at gmail.com  Tue Sep 21 11:00:07 2010
From: 246tnt at gmail.com (Sylvain Munaut)
Date: Tue, 21 Sep 2010 13:00:07 +0200
Subject: nanoBTS question
In-Reply-To: <AANLkTikGDLRbdTmmUHqYpK98+6VccygP=m8PNC6Qv8Fm@mail.gmail.com>
References: <AANLkTikGDLRbdTmmUHqYpK98+6VccygP=m8PNC6Qv8Fm@mail.gmail.com>
Message-ID: <AANLkTik+krLSPZKQVaqGOhQc5uCVcvg8JS-wiWGAqhCq@mail.gmail.com>

Hi,

> I have been looking around and I am wondering, when you are interested in a
> consumer 3G / Femto or Pico cell it might be very cheap through AT&T at
> around $150.

> Might somebody be working rverse engineering on those cheaper
> cells?

Probably, but theses are 3G only, they won't work if your phone
doesn't support 3G.
The lack of good free ASN1 tool (for PER Unaligned and Aligned)
doesn't help because 3G use those a lot.

> The nanoBTS from ipaccess is costing euro 3450 Mind you this is without any
> software or server, just a single nanoBTS unit.

I thing several things contribute to the high price:

 - That's part of ip.access revenue stream, they need to make money
 - Quantity: There is probably much more femtocell made than nanoBTS
 - GSM vs 3G. I think 3G was designed from the get go to support
femtocell and so the RF interface has been designed to be doable with
cheap components.


    Sylvain



From albert at vraagalex.nl  Tue Sep 21 11:19:20 2010
From: albert at vraagalex.nl (Albert Paijmans)
Date: Tue, 21 Sep 2010 13:19:20 +0200
Subject: nanoBTS question
In-Reply-To: <AANLkTik+krLSPZKQVaqGOhQc5uCVcvg8JS-wiWGAqhCq@mail.gmail.com>
References: <AANLkTikGDLRbdTmmUHqYpK98+6VccygP=m8PNC6Qv8Fm@mail.gmail.com>
	<AANLkTik+krLSPZKQVaqGOhQc5uCVcvg8JS-wiWGAqhCq@mail.gmail.com>
Message-ID: <AANLkTi=ATc4r5CMg9NmjCj81Eut1_7EVPaicPi9nrC6A@mail.gmail.com>

Thanks,

To be honest I thougt a single nanoBTS would be cheaper. Of course the
server and software (if you do not use OpenBSC) adds cost, officially you
need permission to use GSM frequencies and a license on that GSM channel you
want to use. And there are some patents.

How come that some manufacturers can sell a unit that cheap like AT&T does?

Albert

On Tue, Sep 21, 2010 at 1:00 PM, Sylvain Munaut <246tnt at gmail.com> wrote:

> Hi,
>
> > I have been looking around and I am wondering, when you are interested in
> a
> > consumer 3G / Femto or Pico cell it might be very cheap through AT&T at
> > around $150.
>
> > Might somebody be working rverse engineering on those cheaper
> > cells?
>
> Probably, but theses are 3G only, they won't work if your phone
> doesn't support 3G.
> The lack of good free ASN1 tool (for PER Unaligned and Aligned)
> doesn't help because 3G use those a lot.
>
> > The nanoBTS from ipaccess is costing euro 3450 Mind you this is without
> any
> > software or server, just a single nanoBTS unit.
>
> I thing several things contribute to the high price:
>
>  - That's part of ip.access revenue stream, they need to make money
>  - Quantity: There is probably much more femtocell made than nanoBTS
>  - GSM vs 3G. I think 3G was designed from the get go to support
> femtocell and so the RF interface has been designed to be doable with
> cheap components.
>
>
>    Sylvain
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100921/5367e3c0/attachment.htm>

From 246tnt at gmail.com  Tue Sep 21 11:35:01 2010
From: 246tnt at gmail.com (Sylvain Munaut)
Date: Tue, 21 Sep 2010 13:35:01 +0200
Subject: nanoBTS question
In-Reply-To: <AANLkTi=ATc4r5CMg9NmjCj81Eut1_7EVPaicPi9nrC6A@mail.gmail.com>
References: <AANLkTikGDLRbdTmmUHqYpK98+6VccygP=m8PNC6Qv8Fm@mail.gmail.com>
	<AANLkTik+krLSPZKQVaqGOhQc5uCVcvg8JS-wiWGAqhCq@mail.gmail.com>
	<AANLkTi=ATc4r5CMg9NmjCj81Eut1_7EVPaicPi9nrC6A@mail.gmail.com>
Message-ID: <AANLkTi=HjRP_Wt0fp+C-WVbbELPy7AyFF6mPwVqNL3df@mail.gmail.com>

> How come that some manufacturers can sell a unit that cheap like AT&T does?

Did you read what I posted ?

>> I thing several things contribute to the high price:
>>
>> ?- That's part of ip.access revenue stream, they need to make money
>> ?- Quantity: There is probably much more femtocell made than nanoBTS
>> ?- GSM vs 3G. I think 3G was designed from the get go to support
>> femtocell and so the RF interface has been designed to be doable with
>> cheap components.



From laforge at gnumonks.org  Tue Sep 21 15:39:47 2010
From: laforge at gnumonks.org (Harald Welte)
Date: Tue, 21 Sep 2010 17:39:47 +0200
Subject: nanoBTS question
In-Reply-To: <AANLkTik+krLSPZKQVaqGOhQc5uCVcvg8JS-wiWGAqhCq@mail.gmail.com>
References: <AANLkTikGDLRbdTmmUHqYpK98+6VccygP=m8PNC6Qv8Fm@mail.gmail.com>
	<AANLkTik+krLSPZKQVaqGOhQc5uCVcvg8JS-wiWGAqhCq@mail.gmail.com>
Message-ID: <20100921153947.GQ4410@prithivi.gnumonks.org>

On Tue, Sep 21, 2010 at 01:00:07PM +0200, Sylvain Munaut wrote:
> > The nanoBTS from ipaccess is costing euro 3450 Mind you this is without any
> > software or server, just a single nanoBTS unit.
> 
> I thing several things contribute to the high price:
> 
>  - That's part of ip.access revenue stream, they need to make money
>  - Quantity: There is probably much more femtocell made than nanoBTS

Regarding quantity: 3G femtocells in single quantities are also quite
expensive!  Only if you buy them in volume (as an operator) they become
that cheap.

Furthermore, even the nanoBTS becomes _much_ cheaper when you buy it in volume
(let's say 1000 units or more)

-- 
- Harald Welte <laforge at gnumonks.org>           http://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
                                                  (ETSI EN 300 175-7 Ch. A6)



From albert at vraagalex.nl  Tue Sep 21 16:31:42 2010
From: albert at vraagalex.nl (Albert Paijmans)
Date: Tue, 21 Sep 2010 18:31:42 +0200
Subject: nanoBTS question
In-Reply-To: <20100921153947.GQ4410@prithivi.gnumonks.org>
References: <AANLkTikGDLRbdTmmUHqYpK98+6VccygP=m8PNC6Qv8Fm@mail.gmail.com>
	<AANLkTik+krLSPZKQVaqGOhQc5uCVcvg8JS-wiWGAqhCq@mail.gmail.com>
	<20100921153947.GQ4410@prithivi.gnumonks.org>
Message-ID: <AANLkTikwkA6NH-fvb99P0-_4kfHhAfYj1sFwGtbpQ4k+@mail.gmail.com>

Thanks for all the answers.

Maybe you heard about the Village-Telco Mesh Potato project?
That started out with a router based of openwrt / dd-wrt, and then designed
their own Mesh Potato.
It is an embedded Asterisk with wifi and mesh networking.

With SDR (software defined radio) would it not be possible to design /
develop a cheap GSM basestation?
I am a total noob on hardware development but I suppose there is a large
market for this.
Or maybe somebody already working on reverse engineering other base stations
like the nanobts?

If one wanted to design a base station controller, what would be needed?
Do you really need something like http://www.percello.com/prc6000.php
Or might something simpler be possible with modifying a router and with a
different antenna on 1800mhz?

Albert

On Tue, Sep 21, 2010 at 5:39 PM, Harald Welte <laforge at gnumonks.org> wrote:

> On Tue, Sep 21, 2010 at 01:00:07PM +0200, Sylvain Munaut wrote:
> > > The nanoBTS from ipaccess is costing euro 3450 Mind you this is without
> any
> > > software or server, just a single nanoBTS unit.
> >
> > I thing several things contribute to the high price:
> >
> >  - That's part of ip.access revenue stream, they need to make money
> >  - Quantity: There is probably much more femtocell made than nanoBTS
>
> Regarding quantity: 3G femtocells in single quantities are also quite
> expensive!  Only if you buy them in volume (as an operator) they become
> that cheap.
>
> Furthermore, even the nanoBTS becomes _much_ cheaper when you buy it in
> volume
> (let's say 1000 units or more)
>
> --
> - Harald Welte <laforge at gnumonks.org>
> http://laforge.gnumonks.org/
>
> ============================================================================
> "Privacy in residential applications is a desirable marketing option."
>                                                  (ETSI EN 300 175-7 Ch. A6)
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100921/ecb1ea6f/attachment.htm>

From 246tnt at gmail.com  Tue Sep 21 16:50:49 2010
From: 246tnt at gmail.com (Sylvain Munaut)
Date: Tue, 21 Sep 2010 18:50:49 +0200
Subject: nanoBTS question
In-Reply-To: <AANLkTikwkA6NH-fvb99P0-_4kfHhAfYj1sFwGtbpQ4k+@mail.gmail.com>
References: <AANLkTikGDLRbdTmmUHqYpK98+6VccygP=m8PNC6Qv8Fm@mail.gmail.com>
	<AANLkTik+krLSPZKQVaqGOhQc5uCVcvg8JS-wiWGAqhCq@mail.gmail.com>
	<20100921153947.GQ4410@prithivi.gnumonks.org>
	<AANLkTikwkA6NH-fvb99P0-_4kfHhAfYj1sFwGtbpQ4k+@mail.gmail.com>
Message-ID: <AANLkTikxOVhPK1_d+Vqoa8phHNdiHaUG2uQzV2SAV41n@mail.gmail.com>

> With SDR (software defined radio) would it not be possible to design /
> develop a cheap GSM basestation?

See OpenBTS. It uses the USRP wich brings down to ~1000 eur.

Several company are working on custom hardware for OpenBTS, but for a
really low price, you need large quantity ...

> I am a total noob on hardware development but I suppose there is a large
> market for this.

You need a license ... so I'd assume the bulk of the market is
operators. And for them 2-5k EUR is already dead cheap for a BTS.

> Or maybe somebody already working on reverse engineering other base stations
> like the nanobts?

There are not that many IP based BTS on GSM (not talking 3g here).

> Or might something simpler be possible with modifying a router and with a
> different antenna on 1800mhz?

Not a chance, you need either:
 - custom hw dedicated to GSM: Doesn't exist cheap yet because of qty.
(might happen since some company are working on it using openbts, but
no price/data yet).
 - or something flexible enough like the USRP (but then, it's not a
'consumer' product and so not _that_ cheap).



From ravi.varun00 at gmail.com  Thu Sep 23 07:57:17 2010
From: ravi.varun00 at gmail.com (Ravi Shankar)
Date: Thu, 23 Sep 2010 13:27:17 +0530
Subject: Features with nano BTS..
Message-ID: <AANLkTin0xjxhJJwobaYHefj+NmGKNoQJy_YP4Jyd_3Jv@mail.gmail.com>

Dear sir,

I am planning to buy a ip.access nano BTS to run at GSM900.
What features should I quote as specification while placing the order ??
whether it (OpenBSC) will work properly with GSM900 or should I go for
DCS1800 ????

Thanks.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100923/c97b642e/attachment.htm>

From zecke at selfish.org  Thu Sep 23 19:17:52 2010
From: zecke at selfish.org (Holger Freyther)
Date: Fri, 24 Sep 2010 03:17:52 +0800
Subject: Features with nano BTS..
In-Reply-To: <AANLkTin0xjxhJJwobaYHefj+NmGKNoQJy_YP4Jyd_3Jv@mail.gmail.com>
References: <AANLkTin0xjxhJJwobaYHefj+NmGKNoQJy_YP4Jyd_3Jv@mail.gmail.com>
Message-ID: <4C9BA7E0.6010103@selfish.org>

On 09/23/2010 03:57 PM, Ravi Shankar wrote:
> Dear sir,
> 
> I am planning to buy a ip.access nano BTS to run at GSM900.
> What features should I quote as specification while placing the order ??
> whether it (OpenBSC) will work properly with GSM900 or should I go for DCS1800

Hi,

well GSM900 vs. DCS1800 depends mostly on what license you can get in your
area, e.g. in Germany there are no free licenses for GSM900.



From albert at vraagalex.nl  Thu Sep 23 19:39:41 2010
From: albert at vraagalex.nl (Albert Paijmans)
Date: Thu, 23 Sep 2010 21:39:41 +0200
Subject: Features with nano BTS..
In-Reply-To: <4C9BA7E0.6010103@selfish.org>
References: <AANLkTin0xjxhJJwobaYHefj+NmGKNoQJy_YP4Jyd_3Jv@mail.gmail.com>
	<4C9BA7E0.6010103@selfish.org>
Message-ID: <AANLkTi=HOqdR1raFed+_803W8ndaKKwKA7hR13a9qFM7@mail.gmail.com>

Hi,

Radio spectrum is licensed also because of interference.
In the Netherlands the frequencies just before DECT 1880mhz are free to use.

Best would be to contact German government on this.

Albert

On Thu, Sep 23, 2010 at 9:17 PM, Holger Freyther <zecke at selfish.org> wrote:

> On 09/23/2010 03:57 PM, Ravi Shankar wrote:
> > Dear sir,
> >
> > I am planning to buy a ip.access nano BTS to run at GSM900.
> > What features should I quote as specification while placing the order ??
> > whether it (OpenBSC) will work properly with GSM900 or should I go for
> DCS1800
>
> Hi,
>
> well GSM900 vs. DCS1800 depends mostly on what license you can get in your
> area, e.g. in Germany there are no free licenses for GSM900.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100923/ccda9d25/attachment.htm>

From ozmank8 at gmail.com  Thu Sep 30 07:04:22 2010
From: ozmank8 at gmail.com (tejas oza)
Date: Thu, 30 Sep 2010 09:04:22 +0200
Subject: Need help on Open BSC code.
Message-ID: <AANLkTikAnvVUaXtgPY75nsHr2Fe_iU5U3+oZfeskuas7@mail.gmail.com>

Hi Guys,

We are implementing the separate MSC module and we will be using the
openBSC, and we are mainly concerned for SMS services. So, I will be highly
obliged if you can provide us the documentation on openBSC code so that we
can understand the messages expected on separate MSC side from open BSC and
the messages to be sent from MSC to openBSC side.

-- 
Thanks & Regards

Tejas  Oza
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100930/5c97fe1b/attachment.htm>

From holger at freyther.de  Thu Sep 30 07:50:10 2010
From: holger at freyther.de (Holger Hans Peter Freyther)
Date: Thu, 30 Sep 2010 15:50:10 +0800
Subject: Need help on Open BSC code.
In-Reply-To: <AANLkTikAnvVUaXtgPY75nsHr2Fe_iU5U3+oZfeskuas7@mail.gmail.com>
References: <AANLkTikAnvVUaXtgPY75nsHr2Fe_iU5U3+oZfeskuas7@mail.gmail.com>
Message-ID: <4CA44132.2030309@freyther.de>

On 09/30/2010 03:04 PM, tejas oza wrote:
> Hi Guys,
> 
> We are implementing the separate MSC module and we will be using the openBSC,
> and we are mainly concerned for SMS services. So, I will be highly obliged if
> you can provide us the documentation on openBSC code so that we can understand
> the messages expected on separate MSC side from open BSC and the messages to
> be sent from MSC to openBSC side.

In the on-waves/bsc-master branch you will find a bsc_msc_ip binary that will
be able to connect to a real MSC through somthing that is coined SCCP-Lite
(SCCP encapsulated inside the ipaccess protocol).

If you look at bsc_hack it has no connection to anything but the BTS, so the
BSC/MSC/VLR/HLR functionality is implemented in one binary.



From ozmank8 at gmail.com  Thu Sep 30 09:40:52 2010
From: ozmank8 at gmail.com (tejas oza)
Date: Thu, 30 Sep 2010 11:40:52 +0200
Subject: Reply:- Need help on Open BSC code.
Message-ID: <AANLkTikk6WVH4ZtWH3NZ3-HxG8KQa8Jtva6SHp5WbY9C@mail.gmail.com>

Hi Holger,

After trying to checkout and build the OpenBSC using command git checkout
-b on-waves/bsc-master origin/bsc-master, we got error as

fatal: git checkout: updating paths is incompatible with switching branches.
Did you intend to checkout 'origin/bsc-master' which can not be resolved as
commit?

So, may be we are not correct on the path or something else. can you please
advice, as we are not able to find  bsc_msc_ip binary file.


On Thu, Sep 30, 2010 at 9:50 AM, Holger Hans Peter Freyther <
holger at freyther.de> wrote:

> On 09/30/2010 03:04 PM, tejas oza wrote:
> > Hi Guys,
> >
> > We are implementing the separate MSC module and we will be using the
> openBSC,
> > and we are mainly concerned for SMS services. So, I will be highly
> obliged if
> > you can provide us the documentation on openBSC code so that we can
> understand
> > the messages expected on separate MSC side from open BSC and the messages
> to
> > be sent from MSC to openBSC side.
>
> In the on-waves/bsc-master branch you will find a bsc_msc_ip binary that
> will
> be able to connect to a real MSC through somthing that is coined SCCP-Lite
> (SCCP encapsulated inside the ipaccess protocol).
>
> If you look at bsc_hack it has no connection to anything but the BTS, so
> the
> BSC/MSC/VLR/HLR functionality is implemented in one binary.
>
>


-- 
Thanks & Regards

Tejas  Oza



-- 
Thanks & Regards

Tejas  Oza
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100930/1b584365/attachment.htm>

From holger at freyther.de  Thu Sep 30 09:56:44 2010
From: holger at freyther.de (Holger Hans Peter Freyther)
Date: Thu, 30 Sep 2010 17:56:44 +0800
Subject: Reply:- Need help on Open BSC code.
In-Reply-To: <AANLkTikk6WVH4ZtWH3NZ3-HxG8KQa8Jtva6SHp5WbY9C@mail.gmail.com>
References: <AANLkTikk6WVH4ZtWH3NZ3-HxG8KQa8Jtva6SHp5WbY9C@mail.gmail.com>
Message-ID: <4CA45EDC.3020307@freyther.de>

On 09/30/2010 05:40 PM, tejas oza wrote:
> Hi Holger,
> 
> After trying to checkout and build the OpenBSC using command git checkout
> -b on-waves/bsc-master origin/bsc-master, we got error as
> 
> fatal: git checkout: updating paths is incompatible with switching branches.
> Did you intend to checkout 'origin/bsc-master' which can not be resolved as
> commit?
> 
> So, may be we are not correct on the path or something else. can you please
> advice, as we are not able to find  bsc_msc_ip binary file.

well... it is origin/on-waves/bsc-master and not origin/bsc-master....



From ozmank8 at gmail.com  Thu Sep 30 11:13:01 2010
From: ozmank8 at gmail.com (tejas oza)
Date: Thu, 30 Sep 2010 13:13:01 +0200
Subject: Reply:- Need help on Open BSC code.
In-Reply-To: <4CA45EDC.3020307@freyther.de>
References: <AANLkTikk6WVH4ZtWH3NZ3-HxG8KQa8Jtva6SHp5WbY9C@mail.gmail.com>
	<4CA45EDC.3020307@freyther.de>
Message-ID: <AANLkTikL8QhLW3anAJmXTrF6k8NDfbtR=9uRVAyAD3Cq@mail.gmail.com>

After running the command git checkout -b origin/on-waves/bsc-master , we
are getting
 fatal: You are on a branch yet to be born

On Thu, Sep 30, 2010 at 11:56 AM, Holger Hans Peter Freyther <
holger at freyther.de> wrote:

> On 09/30/2010 05:40 PM, tejas oza wrote:
> > Hi Holger,
> >
> > After trying to checkout and build the OpenBSC using command git checkout
> > -b on-waves/bsc-master origin/bsc-master, we got error as
> >
> > fatal: git checkout: updating paths is incompatible with switching
> branches.
> > Did you intend to checkout 'origin/bsc-master' which can not be resolved
> as
> > commit?
> >
> > So, may be we are not correct on the path or something else. can you
> please
> > advice, as we are not able to find  bsc_msc_ip binary file.
>
> well... it is origin/on-waves/bsc-master and not origin/bsc-master....
>
>


-- 
Thanks & Regards

Tejas  Oza
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100930/feea1c20/attachment.htm>

From stefan at datenfreihafen.org  Thu Sep 30 11:39:07 2010
From: stefan at datenfreihafen.org (Stefan Schmidt)
Date: Thu, 30 Sep 2010 13:39:07 +0200
Subject: Reply:- Need help on Open BSC code.
In-Reply-To: <AANLkTikL8QhLW3anAJmXTrF6k8NDfbtR=9uRVAyAD3Cq@mail.gmail.com>
References: <AANLkTikk6WVH4ZtWH3NZ3-HxG8KQa8Jtva6SHp5WbY9C@mail.gmail.com>
	<4CA45EDC.3020307@freyther.de>
	<AANLkTikL8QhLW3anAJmXTrF6k8NDfbtR=9uRVAyAD3Cq@mail.gmail.com>
Message-ID: <20100930113907.GB21446@excalibur.local>

Hello.

On Thu, 2010-09-30 at 13:13, tejas oza wrote:
> After running the command git checkout -b origin/on-waves/bsc-master , we
> are getting
>  fatal: You are on a branch yet to be born

I would suggest to search for a GIT tutorial and read it. This problem has
nothing to do with OpenBSC development. Hint: After -b follows the name for the
local branch in which you want to checkout the one specified.

Also it would be nice if you could stop top posting on this mailling list.

regards
Stefan Schmidt



From ozmank8 at gmail.com  Thu Sep 30 12:09:17 2010
From: ozmank8 at gmail.com (tejas oza)
Date: Thu, 30 Sep 2010 14:09:17 +0200
Subject: Reply:- Need help on Open BSC code.
In-Reply-To: <20100930113907.GB21446@excalibur.local>
References: <AANLkTikk6WVH4ZtWH3NZ3-HxG8KQa8Jtva6SHp5WbY9C@mail.gmail.com>
	<4CA45EDC.3020307@freyther.de>
	<AANLkTikL8QhLW3anAJmXTrF6k8NDfbtR=9uRVAyAD3Cq@mail.gmail.com>
	<20100930113907.GB21446@excalibur.local>
Message-ID: <AANLkTinPxKzWrE4EeSHmDY8NA6Vi=zYJEZC=8Pbf_sqO@mail.gmail.com>

Hi Stefan,

I managed to fix the problem.Thanks for your support. And now onwards I will
post related to OpenBSC stuffs on this mailing list. Sorry for any churns.

On Thu, Sep 30, 2010 at 1:39 PM, Stefan Schmidt
<stefan at datenfreihafen.org>wrote:

> Hello.
>
> On Thu, 2010-09-30 at 13:13, tejas oza wrote:
> > After running the command git checkout -b origin/on-waves/bsc-master , we
> > are getting
> >  fatal: You are on a branch yet to be born
>
> I would suggest to search for a GIT tutorial and read it. This problem has
> nothing to do with OpenBSC development. Hint: After -b follows the name for
> the
> local branch in which you want to checkout the one specified.
>
> Also it would be nice if you could stop top posting on this mailling list.
>
> regards
> Stefan Schmidt
>
>


-- 
Thanks & Regards

Tejas  Oza
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/openbsc/attachments/20100930/837f791d/attachment.htm>

From holger at freyther.de  Thu Sep 30 20:58:38 2010
From: holger at freyther.de (Holger Hans Peter Freyther)
Date: Fri, 01 Oct 2010 04:58:38 +0800
Subject: Reply:- Need help on Open BSC code.
In-Reply-To: <AANLkTinPxKzWrE4EeSHmDY8NA6Vi=zYJEZC=8Pbf_sqO@mail.gmail.com>
References: <AANLkTikk6WVH4ZtWH3NZ3-HxG8KQa8Jtva6SHp5WbY9C@mail.gmail.com>	<4CA45EDC.3020307@freyther.de>	<AANLkTikL8QhLW3anAJmXTrF6k8NDfbtR=9uRVAyAD3Cq@mail.gmail.com>	<20100930113907.GB21446@excalibur.local>
	<AANLkTinPxKzWrE4EeSHmDY8NA6Vi=zYJEZC=8Pbf_sqO@mail.gmail.com>
Message-ID: <4CA4F9FE.4010501@freyther.de>

On 09/30/2010 08:09 PM, tejas oza wrote:
> Hi Stefan,
> 
> I managed to fix the problem.Thanks for your support. And now onwards I will
> post related to OpenBSC stuffs on this mailing list. Sorry for any churns.

Which MSC are you using? Does it support SCCP-lite out of the box?