From laforge at gnumonks.org Mon Jan 3 22:17:01 2011 From: laforge at gnumonks.org (Harald Welte) Date: Mon, 3 Jan 2011 23:17:01 +0100 Subject: [Tetra] code for the tetra MAC layer Message-ID: <20110103221701.GS20181@prithivi.gnumonks.org> Hi, I've started to implement the TETRA TMO MAC layer, i.e. the part that takes MAC blocks from higher layers and applies CRC, FEC, interleaving and scrambling before finally handing the bits to the DQPSK-modulator. The code can now generate a (hopefully valid) to-be-modulated bit pattern for a 'continuous downlink synchronization burst', i.e. what corresponds to the 'SCH+FCCH+BCCH' in GSM. You can find the code (including a small README) at: gitosis at git.osmocom.org:tetra-misc.git in the 'src' directory. If you don't yet have git access, feel free to mail me your sshv2 key. What's missing: * CRC16-CCITT to be computed over odd number of bits like 60 or 124 (all common implementations assume you encode integral # of bytes) [zecke] * decoding: * decoder for the RM(30,14) code [zecke] * soft-input/soft-decision viterbi for the RCPC code * synchronizer, able to detect synchro and normal training sequence [laforge] Once those tasks are completed, we can not only generate simulated burst bit patterns, but also decode them - which should be a good start for the time when Hopscotch' demodulator will spit out some real received bitstream. Regards, Harald -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From laforge at gnumonks.org Tue Jan 4 19:58:45 2011 From: laforge at gnumonks.org (Harald Welte) Date: Tue, 4 Jan 2011 20:58:45 +0100 Subject: [Tetra] TETRA Demodulation In-Reply-To: <4d23800c.mirider@mirider.augusta.de> References: <4d23800c.mirider@mirider.augusta.de> Message-ID: <20110104195845.GB26818@prithivi.gnumonks.org> (we have a mailinglist and we should use it... and write in english for sylvain's benefit) On Tue, Jan 04, 2011 at 08:16:12PM +0000, Dieter Spaar wrote: > Kleine Korrektur: > > Das Muster im vorherigen Bild ist natuerlich drei Bursts mit > "Frequency Correction Field" und dann einer ohne, das koennte > eventuell etwas mit dem Frame bestehend aus vier Slots zu > tun haben. The tdma multiplex of TETRA is unfortunately much more complicated than in GSM. I only really understood it earlier today while reading a textbook, from the specs it is very difficult to understand. The Frequency Correction Field is only present in the sync bursts (SB), which in turn are only (required to be) sent in Frame number 18 , but not on every multiframe. Interestingly, the SB is also present in _every_ timeslot, but not in every Frame 18 of every TS. The formula for the Timeslot Number is "4-(MN+1)mod4", it is indicated in Table 9.25 in Chapter 9.5.1 From holger at freyther.de Wed Jan 5 00:59:47 2011 From: holger at freyther.de (Holger Hans Peter Freyther) Date: Wed, 05 Jan 2011 01:59:47 +0100 Subject: [Tetra] code for the tetra MAC layer In-Reply-To: <20110103221701.GS20181@prithivi.gnumonks.org> References: <20110103221701.GS20181@prithivi.gnumonks.org> Message-ID: <4D23C283.6050004@freyther.de> > What's missing: > * CRC16-CCITT to be computed over odd number of bits like 60 or 124 > (all common implementations assume you encode integral # of bytes) [zecke] Besides feeling stupid. I am done with this. > * decoding: > * decoder for the RM(30,14) code [zecke] I am on this now. I also have my Check Matrix but there is another way to decide how to correct the error but my books are not very clear on that... I think I will complete this tomorrow. > * soft-input/soft-decision viterbi for the RCPC code I assume you are on this now. Should I go for code to decode sysinfo/sync_pdu based on type3 bits? > * synchronizer, able to detect synchro and normal training sequence [laforge] > > Once those tasks are completed, we can not only generate simulated burst bit > patterns, but also decode them - which should be a good start for the time > when Hopscotch' demodulator will spit out some real received bitstream. From laforge at gnumonks.org Wed Jan 5 19:37:54 2011 From: laforge at gnumonks.org (Harald Welte) Date: Wed, 5 Jan 2011 20:37:54 +0100 Subject: [Tetra] burst detection/synchronization In-Reply-To: <20110104195845.GB26818@prithivi.gnumonks.org> References: <4d23800c.mirider@mirider.augusta.de> <20110104195845.GB26818@prithivi.gnumonks.org> Message-ID: <20110105193754.GQ30052@prithivi.gnumonks.org> Hi all, based on the output that Dieters' demodulator from the OP25 project, I have now written some (simplistic) code to detect the Synchronization and normal burst training sequences and to split the received bitstream into bursts. Based on the samples that I took here in Berlin some time ago, we get 724 bursts, all of them seem to have excellent training sequences - despite still using hard bits. The received bursts are split into their BLK1/BLK2/BBK components. However, as we don't yet have a viterbi decoder for the RCPC convolutional code, we cannot recover the actual Layer2 PDUs yet. The code is now in git, the README has been extended a bit to reflect the current state. -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From laforge at gnumonks.org Wed Jan 5 22:55:45 2011 From: laforge at gnumonks.org (Harald Welte) Date: Wed, 5 Jan 2011 23:55:45 +0100 Subject: [Tetra] Viterbi Message-ID: <20110105225545.GR30052@prithivi.gnumonks.org> Hi all, I managed to modify the viterbi code from C-CODE/SUB_DC.C in the ZIP file from the 300 395-2 spec. It implements a different mother code (i.e. the voice code which is a rate 1/3 code, whereas signalling uses a rate 1/4 mother code). So far I am not really getting much out of it. Sometimes some parts of the bursts make sense (like the 0/1/2/3/0/1/2/3/... sequence of frame numbers), but stuff like MCC/MNC gives completely bogus values. I'm too tired now to continue, will look at it again tomorrow. But I think we're close. I will commit the code as soon as something is working at all. My next attempt is to try to run this viterbi against bursts that I generate using my code. If that works, then we must be doing something wrong in the lower steps (de-interleaving, de-puncturing). Regards, Harald -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From laforge at gnumonks.org Thu Jan 6 17:01:50 2011 From: laforge at gnumonks.org (Harald Welte) Date: Thu, 6 Jan 2011 18:01:50 +0100 Subject: [Tetra] Finally: Viterbi Decoding now working Message-ID: <20110106170150.GH30052@prithivi.gnumonks.org> Hi! As it turns out, my fibonacci and galois form of the scrambler do not generate the same bit pattern. I originally tested and verified they produce identical results - but apparently they don't. We now have successful decoding of all the SYNC bursts in the sample capture, as you can see from the attachment. Whenever there's a gap in the decoded FN, this is due to a NORMAL burst being transmitted instead. The normal burst does not carry the timeslot/framenumber information and we need to count ourselves in the gaps in between. I am already computing the scrambling sequence init value from the MCC/MNC/CC that we receive in the SYNC burst, and de-scramble the BBK and BLK2 of the SYNC burst. However, the viterbi has not been adapted yet to the encoding of those bursts (it's not much). I'll update you once we can decode more... -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) -------------- next part -------------- SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00001( 1) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00010( 2) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00010( 2) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00010( 2) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00011( 3) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00011( 3) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00011( 3) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00100( 4) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00100( 4) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00100( 4) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00101( 5) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00101( 5) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00101( 5) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00110( 6) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00110( 6) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00110( 6) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00111( 7) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00111( 7) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00111( 7) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01000( 8) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01000( 8) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01000( 8) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01001( 9) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01001( 9) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01001( 9) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01010(10) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01010(10) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01010(10) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01011(11) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01011(11) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01011(11) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01100(12) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01100(12) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01100(12) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01101(13) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01101(13) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01101(13) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01110(14) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01110(14) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01110(14) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01111(15) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01111(15) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01111(15) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10000(16) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10000(16) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10000(16) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10001(17) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10001(17) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10001(17) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10010(18) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10010(18) MN 010101(21) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00001( 1) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00001( 1) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00001( 1) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00010( 2) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00010( 2) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00010( 2) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00011( 3) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00011( 3) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00011( 3) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00100( 4) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00100( 4) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00100( 4) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00101( 5) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00101( 5) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00101( 5) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00110( 6) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00110( 6) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00110( 6) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00111( 7) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00111( 7) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00111( 7) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01000( 8) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01000( 8) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01000( 8) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01001( 9) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01001( 9) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01001( 9) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01010(10) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01010(10) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01010(10) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01011(11) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01011(11) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01011(11) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01100(12) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01100(12) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01100(12) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01101(13) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01101(13) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01101(13) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01110(14) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01110(14) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01110(14) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01111(15) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01111(15) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01111(15) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10000(16) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10000(16) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10000(16) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10001(17) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10001(17) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10001(17) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 00(0) FN 10010(18) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10010(18) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10010(18) MN 010110(22) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00001( 1) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00001( 1) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00001( 1) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00010( 2) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00010( 2) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00010( 2) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00011( 3) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00011( 3) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00011( 3) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00100( 4) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00100( 4) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00100( 4) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00101( 5) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00101( 5) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00101( 5) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00110( 6) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00110( 6) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00110( 6) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00111( 7) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00111( 7) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00111( 7) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01000( 8) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01000( 8) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01000( 8) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01001( 9) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01001( 9) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01001( 9) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01010(10) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01010(10) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01010(10) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01011(11) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01011(11) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01011(11) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01100(12) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01100(12) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01100(12) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01101(13) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01101(13) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01101(13) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01110(14) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01110(14) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01110(14) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01111(15) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01111(15) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01111(15) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10000(16) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10000(16) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10000(16) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10001(17) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10001(17) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10001(17) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10010(18) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10010(18) MN 010111(23) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00001( 1) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00001( 1) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00001( 1) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00010( 2) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00010( 2) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00010( 2) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00011( 3) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00011( 3) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00011( 3) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00100( 4) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00100( 4) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00100( 4) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00101( 5) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00101( 5) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00101( 5) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00110( 6) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00110( 6) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00110( 6) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00111( 7) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00111( 7) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00111( 7) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01000( 8) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01000( 8) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01000( 8) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01001( 9) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01001( 9) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01001( 9) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01010(10) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01010(10) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01010(10) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01011(11) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01011(11) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01011(11) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01100(12) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01100(12) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01100(12) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01101(13) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01101(13) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01101(13) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01110(14) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01110(14) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01110(14) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01111(15) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01111(15) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01111(15) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10000(16) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10000(16) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10000(16) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10001(17) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10001(17) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10001(17) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10010(18) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10010(18) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10010(18) MN 011000(24) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00001( 1) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00001( 1) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00001( 1) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00010( 2) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00010( 2) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00010( 2) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00011( 3) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00011( 3) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00011( 3) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00100( 4) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00100( 4) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00100( 4) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00101( 5) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00101( 5) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00101( 5) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00110( 6) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00110( 6) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00110( 6) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00111( 7) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00111( 7) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00111( 7) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01000( 8) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01000( 8) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01000( 8) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01001( 9) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01001( 9) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01001( 9) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01010(10) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01010(10) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01010(10) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01011(11) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01011(11) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01011(11) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01100(12) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01100(12) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01100(12) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01101(13) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01101(13) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01101(13) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01110(14) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01110(14) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01110(14) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01111(15) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01111(15) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01111(15) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10000(16) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10000(16) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10000(16) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10001(17) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10001(17) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10001(17) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10010(18) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10010(18) MN 011001(25) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00001( 1) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00001( 1) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00001( 1) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00010( 2) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00010( 2) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00010( 2) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00011( 3) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00011( 3) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00011( 3) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00100( 4) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00100( 4) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00100( 4) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00101( 5) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00101( 5) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00101( 5) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00110( 6) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00110( 6) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00110( 6) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00111( 7) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00111( 7) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00111( 7) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01000( 8) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01000( 8) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01000( 8) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01001( 9) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01001( 9) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01001( 9) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01010(10) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01010(10) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01010(10) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01011(11) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01011(11) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01011(11) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01100(12) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01100(12) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01100(12) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01101(13) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01101(13) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01101(13) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01110(14) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01110(14) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01110(14) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01111(15) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01111(15) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01111(15) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10000(16) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10000(16) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10000(16) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10001(17) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10001(17) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10001(17) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 00(0) FN 10010(18) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10010(18) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10010(18) MN 011010(26) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00001( 1) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00001( 1) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00001( 1) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00010( 2) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00010( 2) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00010( 2) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00011( 3) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00011( 3) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00011( 3) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00100( 4) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00100( 4) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00100( 4) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00101( 5) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00101( 5) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00101( 5) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00110( 6) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00110( 6) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00110( 6) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00111( 7) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00111( 7) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00111( 7) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01000( 8) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01000( 8) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01000( 8) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01001( 9) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01001( 9) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01001( 9) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01010(10) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01010(10) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01010(10) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01011(11) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01011(11) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01011(11) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01100(12) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01100(12) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01100(12) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01101(13) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01101(13) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01101(13) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01110(14) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01110(14) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01110(14) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01111(15) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01111(15) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01111(15) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10000(16) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10000(16) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10000(16) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10001(17) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10001(17) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10001(17) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10010(18) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10010(18) MN 011011(27) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00001( 1) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00001( 1) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00001( 1) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00010( 2) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00010( 2) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00010( 2) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00011( 3) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00011( 3) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00011( 3) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00100( 4) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00100( 4) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00100( 4) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00101( 5) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00101( 5) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00101( 5) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00110( 6) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00110( 6) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00110( 6) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00111( 7) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00111( 7) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00111( 7) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01000( 8) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01000( 8) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01000( 8) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01001( 9) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01001( 9) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01001( 9) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01010(10) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01010(10) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01010(10) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01011(11) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01011(11) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01011(11) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01100(12) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01100(12) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01100(12) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01101(13) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01101(13) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01101(13) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01110(14) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01110(14) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01110(14) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01111(15) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01111(15) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01111(15) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10000(16) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10000(16) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10000(16) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10001(17) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10001(17) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10001(17) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10010(18) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10010(18) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10010(18) MN 011100(28) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00001( 1) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00001( 1) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00001( 1) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00010( 2) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00010( 2) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00010( 2) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00011( 3) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00011( 3) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00011( 3) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00100( 4) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00100( 4) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00100( 4) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00101( 5) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00101( 5) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00101( 5) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00110( 6) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00110( 6) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00110( 6) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00111( 7) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00111( 7) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00111( 7) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01000( 8) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01000( 8) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01000( 8) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01001( 9) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01001( 9) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01001( 9) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01010(10) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01010(10) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01010(10) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01011(11) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01011(11) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01011(11) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01100(12) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01100(12) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01100(12) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01101(13) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01101(13) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01101(13) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01110(14) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01110(14) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01110(14) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01111(15) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01111(15) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01111(15) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10000(16) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10000(16) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10000(16) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10001(17) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10001(17) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10001(17) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10010(18) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10010(18) MN 011101(29) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00001( 1) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00001( 1) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00001( 1) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00010( 2) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00010( 2) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00010( 2) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00011( 3) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00011( 3) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00011( 3) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00100( 4) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00100( 4) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00100( 4) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00101( 5) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00101( 5) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00101( 5) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00110( 6) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00110( 6) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00110( 6) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00111( 7) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00111( 7) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00111( 7) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01000( 8) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01000( 8) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01000( 8) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01001( 9) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01001( 9) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01001( 9) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01010(10) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01010(10) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01010(10) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01011(11) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01011(11) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01011(11) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01100(12) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01100(12) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01100(12) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01101(13) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01101(13) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01101(13) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01110(14) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01110(14) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01110(14) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 01111(15) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 01111(15) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 01111(15) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10000(16) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10000(16) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10000(16) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10001(17) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 10001(17) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10001(17) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 00(0) FN 10010(18) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 10010(18) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 10010(18) MN 011110(30) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK NORMAL DOWNLINK NORMAL DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 01(1) FN 00001( 1) MN 011111(31) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 10(2) FN 00001( 1) MN 011111(31) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK SYNC DOWNLINK CC 000010(0x02) TN 11(3) FN 00001( 1) MN 011111(31) MCC 0100000110(262) MNC 00001111101001(1001) SYNC DOWNLINK From laforge at gnumonks.org Fri Jan 7 11:36:42 2011 From: laforge at gnumonks.org (Harald Welte) Date: Fri, 7 Jan 2011 12:36:42 +0100 Subject: [Tetra] current status / scrambling Message-ID: <20110107113642.GQ30052@prithivi.gnumonks.org> Hi all, in TETRA, the only part of the signal that is transmitted with a well-known scrambling code is the BSCH in the SB1 (first half of the downlink SYNC block). We can finally decode that since yesterday and get proper MCC/MNC and TDMA time information. The colour code + MNC + MCC is used as the scrambling sequence for all other messages of the cell, specifically also the BNCH containing the SYSINFO messages. I've recently added code to indicate when a BNCH block is to follow, but the de-scrambled type-2 bits do not look plausible at all. So there's most likely still some problem with the de-scrambling. The de-interleaving, de-puncturing and viterbi decoder are the same code (even with different parameters), so I don't think that there are likely problems caused by them. Regards, Harald -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From laforge at gnumonks.org Fri Jan 7 11:32:36 2011 From: laforge at gnumonks.org (Harald Welte) Date: Fri, 7 Jan 2011 12:32:36 +0100 Subject: [Tetra] Before we get into writing wireshark dissectors... Message-ID: <20110107113236.GP30052@prithivi.gnumonks.org> It seems somebody has already done it: http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=5355672 I have contacted the authors of the paper and asked them if they have ever released the source code or send me a copy of it. This would definitely speed things up. I really have no intention (or time) to write a full wireshark dissector for the entire protocol stack. Too many other interesting projects :/ So lets hope they will release their code... -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From laforge at gnumonks.org Fri Jan 7 12:06:00 2011 From: laforge at gnumonks.org (Harald Welte) Date: Fri, 7 Jan 2011 13:06:00 +0100 Subject: [Tetra] current status / scrambling In-Reply-To: <20110107113642.GQ30052@prithivi.gnumonks.org> References: <20110107113642.GQ30052@prithivi.gnumonks.org> Message-ID: <20110107120600.GR30052@prithivi.gnumonks.org> > I've recently added code to indicate when a BNCH block is to follow, but the > de-scrambled type-2 bits do not look plausible at all. I've fixed the scrambling sequence computation now. And as zecke has found out how they really use the CRC, we now get correct CRC on most of our frames. Those that don't are probably speech frames that of course don't have a CRC... So we now get the BNCH / SYSINFO PDU as well as some MAC-RESOURCE PDUs from SB2 and NDB bursts. -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From holger at freyther.de Fri Jan 7 13:50:05 2011 From: holger at freyther.de (Holger Hans Peter Freyther) Date: Fri, 07 Jan 2011 14:50:05 +0100 Subject: [Tetra] current status / scrambling In-Reply-To: <20110107120600.GR30052@prithivi.gnumonks.org> References: <20110107113642.GQ30052@prithivi.gnumonks.org> <20110107120600.GR30052@prithivi.gnumonks.org> Message-ID: <4D271A0D.4030004@freyther.de> On 01/07/2011 01:06 PM, Harald Welte wrote: > I've fixed the scrambling sequence computation now. And as zecke has > found out how they really use the CRC, we now get correct CRC on most of our > frames. Those that don't are probably speech frames that of course don't > have a CRC... Yeah, pretty embarassing how hard it is to fill the gap from the math class I had to really using it... :} From laforge at gnumonks.org Sat Jan 8 18:16:24 2011 From: laforge at gnumonks.org (Harald Welte) Date: Sat, 8 Jan 2011 19:16:24 +0100 Subject: [Tetra] Update on TETRA progress, TODO list Message-ID: <20110108181624.GB32270@prithivi.gnumonks.org> Hi all, we're making great progress! Today I've added support for the SCH/F dedicated signalling channel (where blocks 1+2 of each burst are combined). This, plus fixing some other bugs now results in CRC=OK on all of the frames in my captures, i.e. we can assume that the PHY and lower MAC layers are working as expected now. I've also added code to display MAC-ACCESS_ASSIGN, MAC-RESOURCE and some other PDUs. We can now see that there are unencrypted MM LOCATION UPDATE ACCEPT messages even on the BDBOS network, and in some commercial TETRA networks we have already discovered no encryption being used. The next step would probably be to use the ACELP reference codec and use that for all TCH frames. Luckily, the 'Downlink usage' field of the ACCH (ACCESS-ASSIGN) even tells us if a frame is SCH/F (assigned control) or TCH (traffic). However, after more than a week of intense TETRA related hacking, I really have to get to some more serious (paid) work now, and I don't expect to find much time again before the end of the month. So feel free to improve the code as you see fit. I'll be watching your progress. Zecke is currently looking into integrating the float_to_bits conversion as a gnuradio functional block, together with improving it, i.e. * dynamically calculate the 'offset' that is currently hardcoded at 0.3f * generate soft-bits as int8_t, i.e. +127 == very likely to be a 1, -127 == very likely to be a 0 Other TODO items: * Make sure the de-scrambling will work with the int8_t soft-bits * Actually check if the RM30,14 code produces a correct checksum for AACH * remove lots of superfluous memcpy's all over the place * introduce logging levels/subsystems, use libosmocore/logging * optimize the viterbi decoder (and its primitives) * modify the viterbi to directly use arrays of uint8_t so we can seave the copying from 8->16 and back from 16->8 * dump the TCH/F speech frames and try to play them back using the reference ACELP codec (as indicated above) If you work on something, simply let the mailing list know so we can avoid duplicate work. Regards, Harald -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From 246tnt at gmail.com Sat Jan 8 18:22:24 2011 From: 246tnt at gmail.com (Sylvain Munaut) Date: Sat, 8 Jan 2011 19:22:24 +0100 Subject: [Tetra] Update on TETRA progress, TODO list In-Reply-To: <20110108181624.GB32270@prithivi.gnumonks.org> References: <20110108181624.GB32270@prithivi.gnumonks.org> Message-ID: > * optimize the viterbi decoder (and its primitives) > * modify the viterbi to directly use arrays of uint8_t so we can seave > ?the copying from 8->16 and back from 16->8 I'm working right now on viterbi. It's not specifically for TETRA but the generator will be able to generate code for any convolutional coder polynoms of rate 1/n (or derived from a 1/n code via puncturing). I already have code for a hard decision viterbi. (input being uint8_t [0 or 1] and outputing the same). I also have some preliminary code for soft input -> hard output (which seems to indeed work better if you have real soft input. Like for punctured input you input 0.5f and it doesn't bias it). Still working on soft output. Cheers, Sylvain From laforge at gnumonks.org Sat Jan 8 18:37:10 2011 From: laforge at gnumonks.org (Harald Welte) Date: Sat, 8 Jan 2011 19:37:10 +0100 Subject: [Tetra] repository with tetra traces Message-ID: <20110108183710.GC32270@prithivi.gnumonks.org> Hi! I have uploaded a number of tetra data files to a password-protected rsync repository: you can access it using "rsync -azv tetra at osmocom.org::tetra/data ." using the password "Xo4ried5" (please use -z option to compress the transmission, as the files in the repo are uncompressed) *.cfile raw complex samples recordings, need tetra_demod.py *.float output files of demodulator, 1 float per symbol *.bits output of float_to_bits (1 bit-per-byte format) If you want to contribute traces, feel free to upload them, preferrably both the cfile and the bits... there's no need for the .float files. please create one new directory for every trace or class of traces you upload. A small README file is appreciated in order to explain what those traces are. Due to the sensitive nature of the data, pleaes keep access to the repository private. Thanks for your understanding. btw: The entire project is not released yet. While I have made it public that we're working on TETRA, I would not want the current code released - last but not least since we're using a viterbi implementation that is under unclear license terms as it is derived from the ACELP refernence codec. Once somebody has replaced the viterbi with a new implementation and we have cleaned up the code, I don't really see why we would not release it publicly. Regards, Harald -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From laforge at gnumonks.org Sat Jan 8 20:36:23 2011 From: laforge at gnumonks.org (Harald Welte) Date: Sat, 8 Jan 2011 21:36:23 +0100 Subject: [Tetra] Update on TETRA progress, TODO list In-Reply-To: References: <20110108181624.GB32270@prithivi.gnumonks.org> Message-ID: <20110108203623.GD32270@prithivi.gnumonks.org> Hi Sylvain, On Sat, Jan 08, 2011 at 07:22:24PM +0100, Sylvain Munaut wrote: > > * optimize the viterbi decoder (and its primitives) > > * modify the viterbi to directly use arrays of uint8_t so we can seave > > ?the copying from 8->16 and back from 16->8 > > I'm working right now on viterbi. cool, thanks for taking care of it. > It's not specifically for TETRA but the generator will be able to > generate code for any convolutional coder polynoms of rate 1/n (or > derived from a 1/n code via puncturing). even more cool :) > I already have code for a hard decision viterbi. (input being uint8_t > [0 or 1] and outputing the same). this is great, and it would already work as a drop-in replacement for the current viterbi.c implementation we use > I also have some preliminary code > for soft input -> hard output (which seems to indeed work better if > you have real soft input. This is also great. > Like for punctured input you input 0.5f and it doesn't bias it). So in your code you want to input float values? I would suggest to re-evaluate that... if you ever want to cross-compile it to an ARM or other RISC target, it's going to hurt a lot performance-wise. According to some of the literature I've read, having more than 8 levels (3 bits) of soft input resolution will not show any noticable improvement in the decoder. The viterbi from the ACELP code has input values 127...1 for 0 and -1...-127 for 1 (IIRC) and uses the 0 as the logical 'do not care' in case of punctured codes. Using those values will make sure you don't need any special treatment for a "don't care" symbol. I also like that range as it means you can use a single octet for each input bit, as opposed to a 16bit int or even a float number. > Still working on soft output. I think that's more like a nice future option, but nothing I would consider doing at the moment... Regards, Harald -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From 246tnt at gmail.com Sun Jan 9 16:36:46 2011 From: 246tnt at gmail.com (Sylvain Munaut) Date: Sun, 9 Jan 2011 17:36:46 +0100 Subject: [Tetra] Update on TETRA progress, TODO list In-Reply-To: <20110108203623.GD32270@prithivi.gnumonks.org> References: <20110108181624.GB32270@prithivi.gnumonks.org> <20110108203623.GD32270@prithivi.gnumonks.org> Message-ID: Hi, >> I already have code for a hard decision viterbi. (input being uint8_t >> [0 or 1] and outputing the same). > > this is great, and it would already work as a drop-in replacement for > the current viterbi.c implementation we use I've put it into a sylvain/viterbi branch, replacing the old code. The test code still gives 0 CRC error so it seems to work. There is still a wrapper because my code takes the -127 0 127 softbit format as input. > So in your code you want to input float values? ?I would suggest to re-evaluate > that... if you ever want to cross-compile it to an ARM or other > RISC target, it's going to hurt a lot performance-wise. ?According to some > of the literature I've read, having more than 8 levels (3 bits) of soft input > resolution will not show any noticable improvement in the decoder. I was using float for the tests, but I hadn't settled yet on a format ... Your arguments are pretty convincing so I adapted to code for int8_t input. > The viterbi from the ACELP code has input values 127...1 for 0 and -1...-127 > for 1 (IIRC) and uses the 0 as the logical 'do not care' in case of punctured > codes. Sounds good to me. It's quite similar to what the calypso use for soft bit output (except it's on 4 bits only). the negatives are the '1' ... I guess it's so that you can make a hard decision just by doing (c >> 7) (taking the MSB). Cheers, Sylvain From horiz0n at gmx.net Sun Jan 9 18:47:11 2011 From: horiz0n at gmx.net (Dimitri) Date: Sun, 09 Jan 2011 19:47:11 +0100 Subject: [Tetra] repository with tetra traces In-Reply-To: <20110108183710.GC32270@prithivi.gnumonks.org> References: <20110108183710.GC32270@prithivi.gnumonks.org> Message-ID: Hi, just uploaded a new set of 9 carriers collected yesterday. In case someone is interested in the whole .cfile (940 Mb) or a specific carrier - please indicate. Regards, Dimitri From spaar at mirider.augusta.de Sun Jan 9 20:46:09 2011 From: spaar at mirider.augusta.de (Dieter Spaar) Date: Sun, 09 Jan 2011 20:46:09 Subject: [Tetra] repository with tetra traces Message-ID: <4d2a1e92.mirider@mirider.augusta.de> Hello Dimitri, On Sun, 09 Jan 2011 19:47:11 +0100, "Dimitri" wrote: > > just uploaded a new set of 9 carriers collected yesterday. In case someone > is interested in the whole .cfile (940 Mb) or a specific carrier - please > indicate. Your samples are really nice ;-) Appended is what you can hear in one of them. I have done some initial experiments to decode unencrypted speech traffic, Harald is thinking about how this could be cleaned up and implemented in a proper way, so this should be released soon. Best regards, Dieter Dieter Spaar, Germany spaar at mirider.augusta.de -------------- next part -------------- A non-text attachment was scrubbed... Name: traffic_sample.zip Type: application/x-zip-compressed Size: 48578 bytes Desc: not available URL: From horiz0n at gmx.net Sun Jan 9 21:40:08 2011 From: horiz0n at gmx.net (Dimitri) Date: Sun, 09 Jan 2011 22:40:08 +0100 Subject: [Tetra] repository with tetra traces In-Reply-To: <4d2a1e92.mirider@mirider.augusta.de> References: <4d2a1e92.mirider@mirider.augusta.de> Message-ID: Hi Dieter, > Your samples are really nice ;-) I am quite impressed by the actual robustness of the cqpsk demodulator from the APCO package, as i did not made any effort in finding the right parameters for the given signals etc. and it seems to work just fine. > and implemented in a proper way, so this should be released soon. Also the fast progress with the voice decoding is awesome! Looking forward to be able to test a preliminary implementation... :) > Appended is what you can hear in one of them. Unfortunately at least one of them is speaking a heavy local dialect - so i can barely understand a word ;). Best Regards, Dimitri From laforge at gnumonks.org Tue Jan 11 21:34:27 2011 From: laforge at gnumonks.org (Harald Welte) Date: Tue, 11 Jan 2011 22:34:27 +0100 Subject: [Tetra] Before we get into writing wireshark dissectors... In-Reply-To: <20110107113236.GP30052@prithivi.gnumonks.org> References: <20110107113236.GP30052@prithivi.gnumonks.org> Message-ID: <20110111213427.GF13849@prithivi.gnumonks.org> Hi all, responding to my previous message: On Fri, Jan 07, 2011 at 12:32:36PM +0100, Harald Welte wrote: > It seems somebody has already done it: > http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=5355672 by the way: the paper is in tetra-misc.git/papers/ > I have contacted the authors of the paper and asked them if they have ever > released the source code or send me a copy of it. This would definitely > speed things up. They have responded to me and indicated that they agreed to release the source code (which was so far only used internally, so they have no legal obligation to release it). I don't have the source code yet, apparently they first want to translate some documentation into English before providing it. This is really great news. I hope we can make quick progress in getting great decodes once we have their code (which is generated from asn.1 specifications that they wrote, so it should be relatively clean/systematic and not tons of hand-coded cruft) I'll keep you posted once there is any released code (which will be in tetra-misc.git as soon as I get it, anyway). I think we simply abuse GSMTAP and add a new TETRA frame type to it, this way we can benefit from the existing UDP port registration at IANA and the existing gsmtap code (in wireshark and libosmocore). Regards, Harald -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From cd at maintech.de Wed Jan 12 23:01:34 2011 From: cd at maintech.de (Christian Daniel -- maintech GmbH) Date: Thu, 13 Jan 2011 00:01:34 +0100 Subject: [Tetra] TETRA / PI/4 DQPSK Modulator Message-ID: <4D2E32CE.60802@maintech.de> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi everybody, I haven written (and ripped :-) a PI/4 DQPSK modulator, which should be able to transmit TETRA bursts. For compilation have a look into the Makefile. It reads data from stdin and expects one byte for every symbol. The value should be 0, 1, 2 or 3. 0xff results in silence. The symbol rate is 250000/14 on USRP1 which is 17857 symbols/s. A more or less simple demodulator should work without problems (perhaps with more selfnoise), but a MLSE based RX will most probably not work. For more "professional" uses we will need an accurate resampler, but I will throw that one in as time comes :-) Have fun, Christian - -- - --------------------------------------------------- | maintech # Dipl. Inf (FH) Christian Daniel | | GmbH ### Otto-Hahn-Str. 15 ? D-97204 H?chberg | - --------------------------------------------------- | AG W?rzburg, HRB 8790 Tax-ID DE242279645 | - --------------------------------------------------- | http://www.maintech.de cd at maintech.de | - --------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJNLjLHAAoJEHkgzUIsAWriO2UH/ivlinNO6L/Y74pe8Bf3eKhF K9bgUKAbowa/AHlKRzJlUU0AvjmAgkDRZOJ9lDqZUyBW5NnoJkxTvRjfq0Deytad MCwb2jLkN37MLCWju/3io60672G5uMKX4J7N3zDkrLgZKnKesaVJY+NgiLLTkMY1 uh6/ZJ7Fg/snMPXfffMiNo+vG+G9pIMYmzRp3rPaqYL4sSQjyoUWpOoNruDFA+uu wYf/R1rGo5wWbKdTKAbRCHt3FmTyn61BEtngcyrc30XOZppCjH2oboMpAYmUyU88 bI6pnptMHixoi7skGH0lfD5Fqb5PlUqYOqAaq83LUYmbcv5v7NV51BrikBfk1l0= =7aiy -----END PGP SIGNATURE----- -------------- next part -------------- A non-text attachment was scrubbed... Name: tetramod.tar.gz Type: application/gzip Size: 7054 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: tetramod.tar.gz.sig Type: application/octet-stream Size: 287 bytes Desc: not available URL: From laforge at gnumonks.org Sat Jan 22 18:55:04 2011 From: laforge at gnumonks.org (Harald Welte) Date: Sat, 22 Jan 2011 19:55:04 +0100 Subject: Wiki write access Message-ID: <20110122185504.GG12936@prithivi.gnumonks.org> Hi all, OsmocomBB and OsmocomTETRA share the same list of accounts, so if you have an account on OsmocomBB, you can use the same credentials to write to the new http://tetra.osmocom.org/ website. Regards, -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From vogelchr at vogel.cx Sun Jan 23 20:03:06 2011 From: vogelchr at vogel.cx (Christian Vogel) Date: Sun, 23 Jan 2011 21:03:06 +0100 Subject: PATCH: bitwise msb-first table-based 16bit CRC calculation Message-ID: Hi, after a remark by Harald about bitwise CRC calculation and seeing the crc_simple code in lower_mac, I've thought about how to implement "optimized" routines using a table-based approach operating on our pbit_t/ubit_t arrays in libosmocore/master. People on IRC consider it more tetra-specific though, so I'm posting this here for advice on where to put it. The usage is to first create the table via osmo_crc16_table_init(*table,polynomial) and then to encode bits using osmo_crc16() - default, operates on pbit_t[] osmo_crc16_ubits() - operate on ubit_t[] osmo_crc16_ubit() - one single bit, takes polynomial as first arg! osmo_crc16_pbit() - operate on 1-7 bits in a pbit_t It passes the crc_test ported to the new routines. $ ./crc_test # osmo-tetra The CRC is now: 4129/0x1021 The CRC is now: 4129/0x1021 The CRC is now: 61905/0xf1d1 The CRC is now: 65534/0xfffe The CRC is now: 57073/0xdef1 The CRC is now: 7439/0x1d0f Decoded successfully. $ tests/crc/crc_test # this patch, in libosmocore First elements of table for CRC with poly 0x1021: 0000 1021 2042 3063 4084 50a5 60c6 70e7 8108 9129 a14a b16b c18c d1ad e1ce f1ef The CRC is now: 4129/0x1021 The CRC is now: 4129/0x1021 The CRC is now: 61905/0xf1d1 The CRC is now: 65534/0xfffe packed bits: 10 b0 be 00 83 07 d3 3d ef 10 The CRC is now: 57073/0xdef1 ...packed: 57073/0xdef1 packed bits: 10 b0 be 00 83 07 d3 3d ef 10 The CRC is now: 7439/0x1d0f Decoded successfully. Chris -------------- next part -------------- A non-text attachment was scrubbed... Name: 0001-Table-based-msb-first-crc16-functions.patch Type: application/octet-stream Size: 5381 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: 0002-Test-for-osmo_crc16-routines-based-on-Harald-s-crc_t.patch Type: application/octet-stream Size: 4473 bytes Desc: not available URL: From holger at freyther.de Sun Jan 23 21:36:39 2011 From: holger at freyther.de (Holger Hans Peter Freyther) Date: Sun, 23 Jan 2011 22:36:39 +0100 Subject: PATCH: bitwise msb-first table-based 16bit CRC calculation In-Reply-To: References: Message-ID: <4D3C9F67.8060405@freyther.de> On 01/23/2011 09:03 PM, Christian Vogel wrote: > Hi, > > after a remark by Harald about bitwise CRC calculation and seeing the > crc_simple code in lower_mac, I've thought about how to implement "optimized" > routines using a table-based approach operating on our pbit_t/ubit_t > arrays in libosmocore/master. > > People on IRC consider it more tetra-specific though, so I'm posting > this here for advice on where to put it. Hi Christian, I would have no problem to put it into libosmocore, just make sure it has a compile option to be compiled out (in case we need that for osmocomBB). I have two nitpicks/questions though: - Why not keep the generated tables around in the code? This avoids the runtime init, if multiple processes use this table it will also be shared between these, if it is not used at all it will not be mapped. - The coding style would also need update. regards holger From 246tnt at gmail.com Sun Jan 23 22:28:55 2011 From: 246tnt at gmail.com (Sylvain Munaut) Date: Sun, 23 Jan 2011 23:28:55 +0100 Subject: PATCH: bitwise msb-first table-based 16bit CRC calculation In-Reply-To: <4D3C9F67.8060405@freyther.de> References: <4D3C9F67.8060405@freyther.de> Message-ID: Hi, > I would have no problem to put it into libosmocore, As I said in IRC, I would put it as 'template' in libosmocore, replacing the 16 with like @N@ Then in the make file, use a couple of sed to generate the .c / .h for the 8,16,32,64 bits versions. This way it could be used for GSM as wel where a wide variety of CRC polynoms are used (from 4 bits up to 40 bits ...) > just make sure it has a > compile option to be compiled out (in case we need that for osmocomBB). I think it should compile just fine for the target, nothing special there and if we don't use it it won't be included. It's mostly code than uses libc io stuff that's tricky. > I have two nitpicks/questions though: > ? ? ? ?- Why not keep the generated tables around in the code? This avoids > ? ? ? ? ?the runtime init, if multiple processes use this table it will also > ? ? ? ? ?be shared between these, if it is not used at all it will not be > ? ? ? ? ?mapped. Standard tables could indeed be included in the code by default for well known CRC, but the ability to compute/use tables dynamically should stay. A small utility to generate the .c code for such tables should be added then. So you could have stuff like: crc_tbl_ccit.c: crc_tbl_gen crc_tbl_gen 0x????? > crc_tbl_ccit.c Other comments: - name it crc16.c (the function name osmo_xxx is fine, but for the file name, none of the others have osmo_ prefix ... we're in osmocore) - Oh, I just noticed there is a crc16.c already ... that's just confusing, need better naming than that. - If we indeed do a lot of crc (8/16/32/64) with some prebuilt table, maybe a directory/separate lib ? (like the vty/codec stuff) just a tought. That would also split the crc used for pbit/ubits from the 'traditional' crc16. - Unaligned bit start in pbits. - For the ubits case, the function makes it look like you need the whole table ... when in fact you just need the poly. Maybe take the poly as argument and add a macro crc_tbl2poly that takes the element[1] ? This way, if you only use ubits, you can just have the poly without tables at all ... Cheers, Sylvain From sim at ijskes.org Mon Jan 24 12:12:23 2011 From: sim at ijskes.org (Sim IJskes) Date: Mon, 24 Jan 2011 13:12:23 +0100 Subject: platform choices Message-ID: <4D3D6CA7.1050100@ijskes.org> Hello, My main activity here would be lurking, but i certainly like to make a contribution in the future. I've programmed in ASM on several platforms, C, C++, and nowadays do all of the work in Java. Most java implementations suffer from non-deterministic timing issues, so i wonder, would there be any application for java as a platform in the (osmocom) radio protocols? I've build a hearing loss simulator in java, which is a streaming audio pipeline, so java is not completely useless in applications with strict timing relations. I believe the latency couldn't exceed 50mS which is huge in TDM radio protocols, but in the upper layers with a lot of complex data shuffling it might be usefull? Any ideas? Gr. Sim -------------- next part -------------- A non-text attachment was scrubbed... Name: sim.vcf Type: text/x-vcard Size: 113 bytes Desc: not available URL: From f.abdolian at yahoo.com Thu Jan 27 09:03:12 2011 From: f.abdolian at yahoo.com (Farhad Abdolian) Date: Thu, 27 Jan 2011 01:03:12 -0800 (PST) Subject: TETRA and GRC? In-Reply-To: <4D3D6CA7.1050100@ijskes.org> References: <4D3D6CA7.1050100@ijskes.org> Message-ID: <490313.91148.qm@web65401.mail.ac4.yahoo.com> Hi Folks, I am working on a TETRA project and was very happy when I found your site and your mailing list. The information is very helpful and gave me a lot of interesting info about how other people solve problems. I wonder if you have a GRC example of your code I can use? If not, then I have to create one myself and will share it with the group. Best regards, Farhad -------------- next part -------------- An HTML attachment was scrubbed... URL: From 246tnt at gmail.com Thu Jan 27 09:29:54 2011 From: 246tnt at gmail.com (Sylvain Munaut) Date: Thu, 27 Jan 2011 10:29:54 +0100 Subject: TETRA and GRC? In-Reply-To: <490313.91148.qm@web65401.mail.ac4.yahoo.com> References: <4D3D6CA7.1050100@ijskes.org> <490313.91148.qm@web65401.mail.ac4.yahoo.com> Message-ID: Hi, > I wonder if you have a GRC example of your code I can use? If not, then I > have to create one myself and will share it with the group. If you had checked the git repository, you would have found the only GRC stuff in there is: osmo-tetra/src/demod/grc/tetra_demod_qpsk.xml But that's only the demodulation (and even then, just a blackbox). All the other layers are not GNURadio blocks at all, they're pure C code libraries / utilities. There are example python code on how to use it but it's just SOURCE -> TETRA BLOCK -> SINK ... not really worth an example ... Cheers, Sylvain From 246tnt at gmail.com Thu Jan 27 10:08:52 2011 From: 246tnt at gmail.com (Sylvain Munaut) Date: Thu, 27 Jan 2011 11:08:52 +0100 Subject: TETRA and GRC? In-Reply-To: <230454.26300.qm@web65401.mail.ac4.yahoo.com> References: <4D3D6CA7.1050100@ijskes.org> <490313.91148.qm@web65401.mail.ac4.yahoo.com> <230454.26300.qm@web65401.mail.ac4.yahoo.com> Message-ID: > [snip] ... but wondered if > anyone had worked on the GR porting of the code. I assume, that is not the > case. No that I know of. What would be the interest exactly ? I mean GR is great for signal processing but once you got the bits, the rest is IMHO way better handled outside gnuradio itself. All the phy/mac levels are no trivial and will need state processing and such ... not something I really see in GR. Using fifo on the filesystem you can pipe directly/live the flow of info from GR outpout to the tetra-rx input. Cheers, Sylvain BTW, you forgot to CC the list in your reply. (I assume it was your intent because of the "with everyone here" comment at the end of your mail). From holger at freyther.de Thu Jan 27 10:18:11 2011 From: holger at freyther.de (Holger Hans Peter Freyther) Date: Thu, 27 Jan 2011 11:18:11 +0100 Subject: TETRA and GRC? In-Reply-To: References: <4D3D6CA7.1050100@ijskes.org> <490313.91148.qm@web65401.mail.ac4.yahoo.com> <230454.26300.qm@web65401.mail.ac4.yahoo.com> Message-ID: <4D414663.9090504@freyther.de> On 01/27/2011 11:08 AM, Sylvain Munaut wrote: >> [snip] ... but wondered if >> anyone had worked on the GR porting of the code. I assume, that is not the >> case. > > No that I know of. My plan is to create a GNU Radio block that will give us the softbits. I was a bit sad that GNU Radio only has python bindings to script things but not to do any work. From f.abdolian at yahoo.com Thu Jan 27 10:25:31 2011 From: f.abdolian at yahoo.com (Farhad Abdolian) Date: Thu, 27 Jan 2011 02:25:31 -0800 (PST) Subject: TETRA and GRC? In-Reply-To: References: <4D3D6CA7.1050100@ijskes.org> <490313.91148.qm@web65401.mail.ac4.yahoo.com> <230454.26300.qm@web65401.mail.ac4.yahoo.com> Message-ID: <652290.7990.qm@web65407.mail.ac4.yahoo.com> Hi Sylvain, Thanks for posting it to the list, I just hit reply, I thought the list is the main "to" part of the reply, but now I know, I have to put reply-all instead. What I am using GR is use the AIR interface of the TETRA in a simple way, I would like to create a system similar to OpenBTS to handle TETRA. The main problem I have is I am a pure HW design engineer and my knowledge of Linux, Python and high level SW is not very strong, but I am learning. Best regards, Farhad ________________________________ From: Sylvain Munaut <246tnt at gmail.com> To: Farhad Abdolian Cc: tetra at lists.osmocom.org Sent: Thu, January 27, 2011 11:08:52 AM Subject: Re: TETRA and GRC? > [snip] ... but wondered if > anyone had worked on the GR porting of the code. I assume, that is not the > case. No that I know of. What would be the interest exactly ? I mean GR is great for signal processing but once you got the bits, the rest is IMHO way better handled outside gnuradio itself. All the phy/mac levels are no trivial and will need state processing and such ... not something I really see in GR. Using fifo on the filesystem you can pipe directly/live the flow of info from GR outpout to the tetra-rx input. Cheers, Sylvain BTW, you forgot to CC the list in your reply. (I assume it was your intent because of the "with everyone here" comment at the end of your mail). -------------- next part -------------- An HTML attachment was scrubbed... URL: From laforge at gnumonks.org Thu Jan 27 16:35:20 2011 From: laforge at gnumonks.org (Harald Welte) Date: Thu, 27 Jan 2011 19:35:20 +0300 Subject: TETRA and GRC? In-Reply-To: <652290.7990.qm@web65407.mail.ac4.yahoo.com> References: <4D3D6CA7.1050100@ijskes.org> <490313.91148.qm@web65401.mail.ac4.yahoo.com> <230454.26300.qm@web65401.mail.ac4.yahoo.com> <652290.7990.qm@web65407.mail.ac4.yahoo.com> Message-ID: <20110127163520.GC27259@prithivi.gnumonks.org> On Thu, Jan 27, 2011 at 02:25:31AM -0800, Farhad Abdolian wrote: > Hi Sylvain, > Thanks for posting it to the list, I just hit reply, I thought the list is the > main "to" part of the reply, but now I know, I have to put reply-all instead. > > What I am using GR is use the AIR interface of the TETRA in a simple way, I > would like to create a system similar to OpenBTS to handle TETRA. The main > problem I have is I am a pure HW design engineer and my knowledge of Linux, > Python and high level SW is not very strong, but I am learning. Please understand that it is quite a big task to do this. A receive-only implementation like what we have now is relatively simple, but in order to run a full TETRA system, you need to implement all the protocols like LLC, LME, MM, CC and their associated logic, which is a huge task. Getting something like a small transmitter goign that continuously transmits a BSCH/BNCH should be a simple task that you can start with. Basically use the same code that we use in conv_enc_test.c to generate the type-5 bits, feed them into the DQPSK modulator and try to see if TETRA handsets can recognize the signal. -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) From f.abdolian at yahoo.com Thu Jan 27 19:36:33 2011 From: f.abdolian at yahoo.com (Farhad Abdolian) Date: Thu, 27 Jan 2011 11:36:33 -0800 (PST) Subject: TETRA and GRC? In-Reply-To: <20110127163520.GC27259@prithivi.gnumonks.org> References: <4D3D6CA7.1050100@ijskes.org> <490313.91148.qm@web65401.mail.ac4.yahoo.com> <230454.26300.qm@web65401.mail.ac4.yahoo.com> <652290.7990.qm@web65407.mail.ac4.yahoo.com> <20110127163520.GC27259@prithivi.gnumonks.org> Message-ID: <722766.11859.qm@web65405.mail.ac4.yahoo.com> Hi Harald, I am aware of the complexity of the TETRA system, I just want to implement the physical layer (Layer 1) and if I can also the Layer 2 of the protocol and be able to show that it can be done with GR. I want to create both the RX and TX path using GnuRadio. I am working on implement the blocks similar to those on Figure 4.1 and 4.2 of EN 300 392-2: V3.4.1 (2010-08). That shouldn't be such a difficult task. Best regards, Farhad ________________________________ From: Harald Welte To: Farhad Abdolian Cc: Sylvain Munaut <246tnt at gmail.com>; tetra at lists.osmocom.org Sent: Thu, January 27, 2011 5:35:20 PM Subject: Re: TETRA and GRC? On Thu, Jan 27, 2011 at 02:25:31AM -0800, Farhad Abdolian wrote: > Hi Sylvain, > Thanks for posting it to the list, I just hit reply, I thought the list is the > main "to" part of the reply, but now I know, I have to put reply-all instead. > > What I am using GR is use the AIR interface of the TETRA in a simple way, I > would like to create a system similar to OpenBTS to handle TETRA. The main > problem I have is I am a pure HW design engineer and my knowledge of Linux, > Python and high level SW is not very strong, but I am learning. Please understand that it is quite a big task to do this. A receive-only implementation like what we have now is relatively simple, but in order to run a full TETRA system, you need to implement all the protocols like LLC, LME, MM, CC and their associated logic, which is a huge task. Getting something like a small transmitter goign that continuously transmits a BSCH/BNCH should be a simple task that you can start with. Basically use the same code that we use in conv_enc_test.c to generate the type-5 bits, feed them into the DQPSK modulator and try to see if TETRA handsets can recognize the signal. -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) -------------- next part -------------- An HTML attachment was scrubbed... URL: From holger at freyther.de Thu Jan 27 20:59:44 2011 From: holger at freyther.de (Holger Hans Peter Freyther) Date: Thu, 27 Jan 2011 21:59:44 +0100 Subject: Renumbering tetra channels in gsmtap.h Message-ID: <4D41DCC0.5050603@freyther.de> Hi laf0rge, wireshark has more strict compile settings and found this: #define GSMTAP_TETRA_AACH 0x02 #define GSMTAP_TETRA_AACH 0x03 I would remove the second occurrence and renumber the other members? Or should I remove the first one and go with the value of 0x03? z. From laforge at gnumonks.org Fri Jan 28 04:28:26 2011 From: laforge at gnumonks.org (Harald Welte) Date: Fri, 28 Jan 2011 07:28:26 +0300 Subject: Renumbering tetra channels in gsmtap.h In-Reply-To: <4D41DCC0.5050603@freyther.de> References: <4D41DCC0.5050603@freyther.de> Message-ID: <20110128042826.GM27259@prithivi.gnumonks.org> On Thu, Jan 27, 2011 at 09:59:44PM +0100, Holger Hans Peter Freyther wrote: > Hi laf0rge, > > wireshark has more strict compile settings and found this: > > #define GSMTAP_TETRA_AACH 0x02 > #define GSMTAP_TETRA_AACH 0x03 > > > I would remove the second occurrence and renumber the other members? Or should > I remove the first one and go with the value of 0x03? as nobody is using that code yet for anything, feel free to renumber. -- - Harald Welte http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)