Playing with the GSM RF Interface - CCC Event Weblog

More documents

Recommendations

Info

OpenBSC - Implements the Abis protocol plus BSC/MSC/HLR - Supports the Siemens BS11 microBTS * GSM 900, 2 W (can be reduced to 30 mW) * about 10 years old * cheap * heavy (30 to 40 Kg, depending on the configuration) * E1 interface for Abis - Supports the ip.access nanoBTS * various bands, 200 mW for DCS 1800 * small * GPRS/EDGE * Abis over IP - Runs the 26C3 GSM network with four nanoBTS units
nanoBTS versus BS11
Page 1 and 2: Playing with the GSM RF Interface 2
Page 3 and 4: Motivation - GSM system and protoco
Page 5: OpenBTS - Hardware based on the USR
Page 9 and 10: What about an „open“ phone ? -
Page 11 and 12: Sniffing the air traffic - (Very) s
Page 13 and 14: GSM TDMA (Time division multiple ac
Page 15 and 16: Message flow Channel Request If the
Page 17 and 18: Lab results, BTS with 2 TRX Note: A
Page 19 and 20: DoS Attack demonstration setup
Page 21: Questions ?

Playing with the GSM RF Interface - CCC Event Weblog

Create successful ePaper yourself

Delete template?

Save as template?