openbootts-discuss Mailing List for OpenBootTS

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Hi open

http://gorilladentalmarketing.com/oil.php?action=6veq0nzkp8rzn3zx

Michel Daggelinckx

Sent from my iPhone

I recently came across OpenBTS and watched the Defcon GSM BTS demonstration. I'm interested in replicating the setup, and upon doing more research came across the OpenBootTS live cd. For hardware, I'm looking at getting the USRP B100 Kit and am wondering if it'll be compatible, or if I need to go with the original USRP 1. -Jacob 		 	   		  
hi

anyone have a good working personal private .iso or any other custom solution like openboots which can do the auto provisioning , which they would like to share or sell ?

any help appreciated

Chris, thank you!

On Fri, Nov 5, 2010 at 09:07, Chris Paget <ive...@to...> wrote:
> Whoops - that was for version 0.5 which is not recommended.  Version 1.0
> (the most current) is available from
> http://sourceforge.net/projects/openbootts/
>
> Cheers!
>
> Chris
>
>
> On 11/03/2010 08:45 AM, Alexander Chemeris wrote:
>> Hi all,
>>
>> Seems like "download" link on the OpenBootTS site is broken:
>> http://openbootts.sourceforge.net/
>> Anyone knows what is a correct link?
>>
>
> ------------------------------------------------------------------------------
> The Next 800 Companies to Lead America's Growth: New Video Whitepaper
> David G. Thomson, author of the best-selling book "Blueprint to a
> Billion" shares his insights and actions to help propel your
> business during the next growth cycle. Listen Now!
> http://p.sf.net/sfu/SAP-dev2dev
> _______________________________________________
> Openbootts-discuss mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openbootts-discuss
>

-- 
Regards,
Alexander Chemeris.
http://www.fairwaves.ru

Whoops - that was for version 0.5 which is not recommended.  Version 1.0
(the most current) is available from
http://sourceforge.net/projects/openbootts/

Cheers!

Chris

On 11/03/2010 08:45 AM, Alexander Chemeris wrote:
> Hi all,
> 
> Seems like "download" link on the OpenBootTS site is broken:
> http://openbootts.sourceforge.net/
> Anyone knows what is a correct link?
> 

Hi all,

Seems like "download" link on the OpenBootTS site is broken:
http://openbootts.sourceforge.net/
Anyone knows what is a correct link?

-- 
Regards,
Alexander Chemeris.
http://www.fairwaves.ru

Hi Chris,

i'm writing to you, because i'm really gettin mentally sick about one
problem with your iso... in vmware and also in boot-live in a T43 Thinkpad,
is so unstable, and when i run

 sudo ./OpenBTS

gives to me an error (that seems a problem from trasnceiver...) btw...

I have a question for you... i was trying to understand your extensions.conf
and sip.conf from Private ISO....

How did u do the autoprovisioning?!

It is a program a part, that parse logfile OUT.TEST and add new IMSIs to
Asterisk's Conf files or is embedded in OpenBTS?!

It is all day that i'm trying to make tests between Lacassine/Mamou,
OpenBooTS, OpenBTS from scratch, etc... and i'm going almost crazy ç__ç

Thank you so much mate for attention

Best Regards

Doc

Testing In the presence of a 'more attractive network', i.e one that
is in the preferred list in the ME SIM, and has the ME/SIM combination
provisioned in asterisk.

An ME camping on a second network, when unprovisioned in asterisk,
seem to stay camped on the OpenBTS, it does not roam to the network on
which provision has been made for it.

removing the IMSI from the asterisk database does not help either.

taking the BTS down for a moment works !,  but of course i loose all
subscribers then  :-(

How would I push a subscriber off my network?

Still looking at the specs to better understand this scenario.

On Wed, Aug 25, 2010 at 3:15 PM, top500 <to...@gm...> wrote:
> So if the ME had somewhere else to go, you think it would not
> persistently come back to me?
>
> I can set that up and test.
>
> Can you confirm that in a multi network environment, if a roaming ME
> attempts to camp on the OpenBTS, and its rejected - IMSI not in HLR -,
> it will "go away" , looking for a network that will provide service.?
>
> I'm reading the specs to understand what happens under these circumstances.
>
> A hint or some direction would be very much appreciated.
>
>
>
>
>
> On Wed, Aug 25, 2010 at 2:40 PM, David Burgess <dbu...@ke...> wrote:
>>
>> The fact that you are in a totally screened environment might explain a lot
>> of this persistent camping behavior.
>>
>> On Aug 25, 2010, at 12:10 AM, top500 wrote:
>>
>>>
>>> I've never used my system outside of a fully screened environment. Its
>>> not in the public arena. However i've seen what you demonstrate and
>>> i'm amazed that you're not flooded with mobiles. I guess that in your
>>> demos your limiting the capture range with power, rx antenna, and I
>>> wonder do you set RX Lev Capture Min and TA capture to limit the range
>>> too?
>>
>>
>> David A. Burgess
>> Kestrel Signal Processing, Inc.
>>
>>
>>
>>
>>
>

So if the ME had somewhere else to go, you think it would not
persistently come back to me?

I can set that up and test.

Can you confirm that in a multi network environment, if a roaming ME
attempts to camp on the OpenBTS, and its rejected - IMSI not in HLR -,
it will "go away" , looking for a network that will provide service.?

I'm reading the specs to understand what happens under these circumstances.

A hint or some direction would be very much appreciated.

On Wed, Aug 25, 2010 at 2:40 PM, David Burgess <dbu...@ke...> wrote:
>
> The fact that you are in a totally screened environment might explain a lot
> of this persistent camping behavior.
>
> On Aug 25, 2010, at 12:10 AM, top500 wrote:
>
>>
>> I've never used my system outside of a fully screened environment. Its
>> not in the public arena. However i've seen what you demonstrate and
>> i'm amazed that you're not flooded with mobiles. I guess that in your
>> demos your limiting the capture range with power, rx antenna, and I
>> wonder do you set RX Lev Capture Min and TA capture to limit the range
>> too?
>
>
> David A. Burgess
> Kestrel Signal Processing, Inc.
>
>
>
>
>

The fact that you are in a totally screened environment might explain  
a lot of this persistent camping behavior.

On Aug 25, 2010, at 12:10 AM, top500 wrote:

>
> I've never used my system outside of a fully screened environment. Its
> not in the public arena. However i've seen what you demonstrate and
> i'm amazed that you're not flooded with mobiles. I guess that in your
> demos your limiting the capture range with power, rx antenna, and I
> wonder do you set RX Lev Capture Min and TA capture to limit the range
> too?

David A. Burgess
Kestrel Signal Processing, Inc.

Well, its not only iPhones. though Yes i've seen th iPhone being quite
eager to camp on the BTS, I've also seen this with many other mobiles.
( i have plenty to test with!)

open registration is of course disabled and auto the configure is not being used

only allowed handsets are in the asterisk sip and extensions

but the problem is that mobiles will  try to camp on the BTS, they
fail to register with asterisk, but they don't go away, they keep
coming back and retrying. Watching the asterisk debug, its crazy, some
mobiles will sit there constantly trying to register ...forever!

I've never used my system outside of a fully screened environment. Its
not in the public arena. However i've seen what you demonstrate and
i'm amazed that you're not flooded with mobiles. I guess that in your
demos your limiting the capture range with power, rx antenna, and I
wonder do you set RX Lev Capture Min and TA capture to limit the range
too?

I can see that those building the dreaded IMSI Catchers, must have a
great time , its so hard to prevent registration attempts that as soon
as they change that one crucial  value, the mobiles will jump on them.

Incidentally, since your live CD carries a command that caters
specifically for the change of that value, I guess thats the audience
your aiming at??

thanks

On Wed, Aug 25, 2010 at 4:48 AM, Chris Paget <ive...@to...> wrote:
> Aha, I believe you've discovered the iPhones :)
>
> iPhone baseband seems to pretty much ignore the MCC/MNC advertised by
> the tower and just tries to camp to the strongest signal (assuming it'll
> get bounced if it's not authorized).  Only way I've found to prevent
> iPhones connecting is to both disable open registration in
> OpenBTS.config and make sure that only allowed handsets are listed in
> your Asterisk extensions.conf (and that autocreatepeer is not set in
> asterisk either).
>
> Cheers!
>
> Chris
>
>
> On 08/24/2010 04:15 AM, top500 wrote:
>> Thanks for replying, the other list does not seem to want to enter
>> into the discussion.
>>
>> "perhaps you would be better off figuring out how to keep them off in
>> the first place?"
>>
>> YES, I've taken measures to ensure the BTS is not promiscuios, i've
>> disabled autoreg in the config file. I'm NOT faking a real BTS, I'm
>> not in the ME BA list.
>>
>> Yet they still come!
>>
>> If my MCCMNC is not in their FPLMN list, they flock to me like bees to honey.
>>
>> Its an academic exercise , the result of ROLLAC is fun to see, but i'd
>> like to achieve the opposite. Any clues as to how i'd make all
>> unprovisioned ME's , 'bugger off' and not return, unless something
>> changes??
>>
>> ...might make you a fun demo!
>>
>>
>>
>>
>>
>> On Tue, Aug 24, 2010 at 10:53 AM, Chris Paget <ive...@to...> wrote:
>>> Interesting question, and one to which I'm not sure there's a clean
>>> answer.  You could de-authorize them in Asterisk but that doesn't get
>>> them off the BTS - perhaps you would be better off figuring out how to
>>> keep them off in the first place?
>>>
>>> Beyond that I'd recommend the OpenBTS mailing list at
>>> http://sourceforge.net/mailarchive/forum.php?forum_name=openbts-discuss
>>> - the developers of OpenBTS are on there and can probably answer more
>>> usefully than I :)
>>>
>>> Cheers!
>>>
>>> Chris
>>>
>>>
>>> On 08/20/2010 08:56 PM, top500 wrote:
>>>> I'm looking at the livecd boot. I'd like to better understand a couple
>>>> of things:
>>>>
>>>> 1)
>>>> once an ME camps on your BTS, how do you remove it?  It seems that once
>>>> you 'capture the ME' you cannot release it. Without taking the system down.
>>>>
>>>> OK I understand that traditional handoff is not possible, but surely
>>>> you'd want to kick an individual mobile off your system?
>>>>
>>>> Thanks
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> This SF.net email is sponsored by
>>>>
>>>> Make an app they can't live without
>>>> Enter the BlackBerry Developer Challenge
>>>> http://p.sf.net/sfu/RIM-dev2dev
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Openbootts-discuss mailing list
>>>> Ope...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/openbootts-discuss
>>>
>>
>> ------------------------------------------------------------------------------
>> Sell apps to millions through the Intel(R) Atom(Tm) Developer Program
>> Be part of this innovative community and reach millions of netbook users
>> worldwide. Take advantage of special opportunities to increase revenue and
>> speed time-to-market. Join now, and jumpstart your future.
>> http://p.sf.net/sfu/intel-atom-d2d
>> _______________________________________________
>> Openbootts-discuss mailing list
>> Ope...@li...
>> https://lists.sourceforge.net/lists/listinfo/openbootts-discuss
>>
>

Thanks for replying, the other list does not seem to want to enter
into the discussion.

"perhaps you would be better off figuring out how to keep them off in
the first place?"

YES, I've taken measures to ensure the BTS is not promiscuios, i've
disabled autoreg in the config file. I'm NOT faking a real BTS, I'm
not in the ME BA list.

Yet they still come!

If my MCCMNC is not in their FPLMN list, they flock to me like bees to honey.

Its an academic exercise , the result of ROLLAC is fun to see, but i'd
like to achieve the opposite. Any clues as to how i'd make all
unprovisioned ME's , 'bugger off' and not return, unless something
changes??

...might make you a fun demo!

On Tue, Aug 24, 2010 at 10:53 AM, Chris Paget <ive...@to...> wrote:
> Interesting question, and one to which I'm not sure there's a clean
> answer.  You could de-authorize them in Asterisk but that doesn't get
> them off the BTS - perhaps you would be better off figuring out how to
> keep them off in the first place?
>
> Beyond that I'd recommend the OpenBTS mailing list at
> http://sourceforge.net/mailarchive/forum.php?forum_name=openbts-discuss
> - the developers of OpenBTS are on there and can probably answer more
> usefully than I :)
>
> Cheers!
>
> Chris
>
>
> On 08/20/2010 08:56 PM, top500 wrote:
>> I'm looking at the livecd boot. I'd like to better understand a couple
>> of things:
>>
>> 1)
>> once an ME camps on your BTS, how do you remove it?  It seems that once
>> you 'capture the ME' you cannot release it. Without taking the system down.
>>
>> OK I understand that traditional handoff is not possible, but surely
>> you'd want to kick an individual mobile off your system?
>>
>> Thanks
>>
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> This SF.net email is sponsored by
>>
>> Make an app they can't live without
>> Enter the BlackBerry Developer Challenge
>> http://p.sf.net/sfu/RIM-dev2dev
>>
>>
>>
>> _______________________________________________
>> Openbootts-discuss mailing list
>> Ope...@li...
>> https://lists.sourceforge.net/lists/listinfo/openbootts-discuss
>

I'm looking at the livecd boot. I'd like to better understand a couple of
things:

1)
once an ME camps on your BTS, how do you remove it?  It seems that once you
'capture the ME' you cannot release it. Without taking the system down.

OK I understand that traditional handoff is not possible, but surely you'd
want to kick an individual mobile off your system?

Thanks

Hi Folks,

I read the article about OpenBootTS and i have some questions... and i  
liked it, nice automation to deploy openbts! ;)

1) How is possible that every phone that connects itself to "fake bts"  
(configured with MCC/MNC to target network) could be registered  
automatically to asterisk configuration files?!

2) This kind of Imsi Catcher works only with outgoing calls, maybe is  
possible to clone in someway new simcards to connect another mobile to  
the real network and route its calls to the real simcard/mobile  
connected to our "imsi catcher"?!
(in the way to catch also ingoing calls)

3)If 2° is a good idea... is possible to find some blank sims to be  
configured, inserting only imsi and Ki of the original simcard?!

I'm interested to collaborate to this project, especially for a  
friendly UI, if someone is still working on it... feel free to contact  
me.

Thank you for attention

Regards

LB

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

2010/4/7 周侃 <zho...@16...>

> Hi all,
>    Nice to wrtie to you. Today I downloaded OpenBootTS 1.0, and tried in
> VMWare. it is wonderful, but I come across some problems. I wish you could
> help me. Thanks a lot.
>   1. what's the password for root?  I can change the password for root, but
> it is inconvient to do so every time.
>   2. I want to update OpenBTS to the newest version in OpenBootTS. Could
> you tell me how to do it? Thanks.
>       Besides, can I make asterisk use my config files placed in my hard
> disk, not in the /etc/asterisk of the iso?
>
> Regards
>
> I would like to see any kind of documentation on this.  I have booted a
server to version 1.0 of OpenBootTS with a USRP attached that has two Flex
900 daughter cards.  Nothing seems to happen and I am not sure what to do at
this point?

It would also be nice to have a script that would install the system to the
hard drive, like many of the bootable ISOs out there.

Thanks,
Steve

Hi all,
   Nice to wrtie to you. Today I downloaded OpenBootTS 1.0, and tried in VMWare. it is wonderful, but I come across some problems. I wish you could help me. Thanks a lot.
  1. what's the password for root?  I can change the password for root, but it is inconvient to do so every time.
  2. I want to update OpenBTS to the newest version in OpenBootTS. Could you tell me how to do it? Thanks.
      Besides, can I make asterisk use my config files placed in my hard disk, not in the /etc/asterisk of the iso?

Regards
There was a thread about this on the OpenBTS list - see
http://sourceforge.net/mailarchive/message.php?msg_name=866320f71002221245o55374c5v16d9b14460fabf73%40mail.gmail.com

Cheers!

Chris

On 03/09/2010 12:29 AM, embedd liu wrote:
> Hi forks,
> 
> I just query two RFX900 or RFX1800 daughter-boards are necessary for the
> OpenBTS?
> 
> Does anyone run the OpenBTS by one daughter-Boards?
> 
> Thanks
> 
> 
> 
> ------------------------------------------------------------------------------
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> 
> 
> 
> _______________________________________________
> Openbootts-discuss mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openbootts-discuss

Hi forks,

I just query two RFX900 or RFX1800 daughter-boards are necessary for the
OpenBTS?

Does anyone run the OpenBTS by one daughter-Boards?

Thanks

Chris,

What is the location of the ./configure script that has to be  
executed. I run the configure script in the openbts directory but as  
far as I can see that doesn't do the trick. I hope you can help me out.

Erik

In general, config/chroot_local-includes/ (created after running
./configure) will end up as the mounted filesystem so you can put
whatever you like into it.  There's also a fully-built version of
OpenBootTS at http://www.tombom.co.uk/1.0-private.iso with all the
relevant configs deployed - feel free to use it as an oracle to set up
your own version.

Cheers!

Chris

I'll include MC in the 1.1 release which should also include support for
ARM targets - I'm a USB driver bug away from getting OpenBTS running on
http://www.mini-box.com/mini2440v2 :)

As for documentation, when you run the configure script it should tell
you where to put all the relevant config files:

Copy your Asterisk configs into config/chroot_local-includes/etc/asterisk/
Copy your OpenBTS.config into
config/chroot_local-includes/root/openbts/apps/
Copy your smqueue.config into
config/chroot_local-includes/root/openbts/smqueue/
Patch GNU Radio for a 52MHz clock on the USRP with "./Patch52M"

In general, config/chroot_local-includes/ (created after running
./configure) will end up as the mounted filesystem so you can put
whatever you like into it.  There's also a fully-built version of
OpenBootTS at http://www.tombom.co.uk/1.0-private.iso with all the
relevant configs deployed - feel free to use it as an oracle to set up
your own version.

Cheers!

Chris

On 02/28/2010 03:49 PM, Alexander Chemeris wrote:
> I second for Midnight Commander. Please, add :)
> 
> On Mon, Mar 1, 2010 at 02:33, lesouvage <in...@me...> wrote:
>> I googled seriously for info to start using openbootts but I failed to
>> find it. I have a running OpenBTS system working well with a bunch of
>> Nokia 3310 phones.  If you make a bullet list with the things to do
>> (what files should be onder what name in what location f.i.) I change
>> it into a text that can be used by others.  You would really help me
>> if you add midnight commander (mc) to the live cd. It might be a
>> strange habbit but I use it on every system to do all kind of things
>> (editing, moving, copying changing mod and/or ownwer etc. etc.) Keep
>> up the good work! ;-)
>>
>>
>> Erik
>>
>> ------------------------------------------------------------------------------
>> Download Intel&#174; Parallel Studio Eval
>> Try the new software tools for yourself. Speed compiling, find bugs
>> proactively, and fine-tune applications for parallel performance.
>> See why Intel Parallel Studio got high marks during beta.
>> http://p.sf.net/sfu/intel-sw-dev
>> _______________________________________________
>> Openbootts-discuss mailing list
>> Ope...@li...
>> https://lists.sourceforge.net/lists/listinfo/openbootts-discuss
>>
> 
> 
> 

I second for Midnight Commander. Please, add :)

On Mon, Mar 1, 2010 at 02:33, lesouvage <in...@me...> wrote:
> I googled seriously for info to start using openbootts but I failed to
> find it. I have a running OpenBTS system working well with a bunch of
> Nokia 3310 phones.  If you make a bullet list with the things to do
> (what files should be onder what name in what location f.i.) I change
> it into a text that can be used by others.  You would really help me
> if you add midnight commander (mc) to the live cd. It might be a
> strange habbit but I use it on every system to do all kind of things
> (editing, moving, copying changing mod and/or ownwer etc. etc.) Keep
> up the good work! ;-)
>
>
> Erik
>
> ------------------------------------------------------------------------------
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Openbootts-discuss mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openbootts-discuss
>

-- 
Regards,
Alexander Chemeris.

I googled seriously for info to start using openbootts but I failed to  
find it. I have a running OpenBTS system working well with a bunch of  
Nokia 3310 phones.  If you make a bullet list with the things to do  
(what files should be onder what name in what location f.i.) I change  
it into a text that can be used by others.  You would really help me  
if you add midnight commander (mc) to the live cd. It might be a  
strange habbit but I use it on every system to do all kind of things  
(editing, moving, copying changing mod and/or ownwer etc. etc.) Keep  
up the good work! ;-)

Erik

I have an up and running openbts system with working configs for both  
asterisk and openbts. How do I make this .config files known to the  
openbootts system. I try to find it by using google but know answer  
showed up. The idea of an live cd is great! Thanks in advance for  
helping me out.

Erik

Hi folks!

First off, welcome to the list!  I see there's a decent number of folks
subscribed now so I might as well kick things off.  I'm pretty open to
contributions from anyone at this point so feel free to jump in wherever
you want :)

My long-term plan for OpenBootTS is for it to become a dual-purpose
tool, able to quickly and conveniently deploy a large-scale GSM network
on any available infrastructure, as well as serving as a toolkit for
security or other audits of GSM installations.

In the short term, that means I'm focusing on the following things at
the moment:

- Support for additional platforms.  Wireless support would be great,
x64 is known-broken (but probably not needed), usb-img and PXE are
untested.  Testing on embedded platforms would be awesome - I know some
around here are into SBCs.

- Configuration and deployment needs to be easier.  There's not much
required to change default configs into something workable; it would be
nice to have a clean UI for this.

- Additional RF hardware.  I'll port OpenBSC into it myself as soon as I
can get hold of the hardware to test on; if someone would like to loan
me the gear or do it themselves feel free.  Other RF platforms are of
course welcome too.

- Operational UI.  It needs some sort of easily-scriptable interface
into everything.  There's at least 4 UIs to deal with to do a very
limited set of things in practice - it's easy to add Apache to the image
if someone writes the code to live on it.

If you're still reading this far then I've apparently caught your
interest, in which case I'll post this link now -
http://www.tombom.co.uk/1.0-private.iso is a fully-finished build of 1.0
with my Asterisk and OpenBTS configs already deployed.  Boot it with
Ethernet and a 52MHz USRP connected and you should be able to make calls
- feel free to use it until my $20 of SIP credit runs out :)

Cheers!

Chris

...*tap* *tap* *tap* is this thing on?

If this does make it through, people should subscribe to this list if
they're interested in OpenBootTS :)

Cheers!

Chris

2010	Jan	Feb (5)	Mar (4)	Apr (2)	May	Jun (1)	Jul	Aug (6)	Sep	Oct (1)	Nov (3)	Dec
2011	Jan	Feb	Mar (1)	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2013	Jan	Feb (1)	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2014	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov (1)	Dec

openbootts-discuss Mailing List for OpenBootTS

openbootts-discuss — General discussion for OpenBootTS