Re: [Openbts-discuss] Reading an existing cell's MCC/MNC/LAC/CID

[Balthasar I. <ba...@in...>]

Just a followup on this in case anyone else is after the same: I
managed to extract all the cell information LAC/MNC/MCC/CID using
gr-gsm, works both with RTL-SDR as well as with the hackRF. I used the
gnuradio included airprobe grc, and tshark to sniff on the localhost
interface:

tshark -i lo -l -Y 'gsm_a.bssmap.cell_ci' -T fields -e
gsm_a.bssmap.cell_ci -e e212.mcc -e e212.mnc -e gsm_a.lac



On 16 December 2015 at 00:32, Balthasar Indermuehle <ba...@in...> wrote:
> Hi all,
>
> I have no idea whether openBTS can help me with this, but perhaps one
> of you experts can give me some recommendations where else to look if
> openBTS can't do this?
>
> I'm very simply put only after decoding a base station's MCC/MNC/LAC
> and CID. This is so I can see which cells are visible to my SDR
> (HackRF or USRP/B200)
>
> Can this be done with this toolkit? If not, are there any other
> toolkits out there that implement the phone side of things, including
> scanning for available networks and reading their information?
>
> Many thanks
>
> - Balt