Project

General

Profile

Emi-firmware » History » Version 9

jolly, 02/19/2016 10:49 PM

1 1 jolly
= OsmocomBB EMI Firmware =
2
3 2 jolly
[[Image(emi-firmware:emi_main.jpg)]]
4
5 1 jolly
== Introduction ==
6
7 9 jolly
OsmocomBB EMI is a tool to generate GSM RF interferences. It can be used to test how GSM radiation affects other equipment, e.g. amplifiers, radios and wireless devices. It is capable of transmitting in all regular GSM bands (1800, 1900, 850, 900), up-link and down-link. Because it only transmits, no filter rework is required. There are several test patterns, from SDCCH on a single time slot to PDCH on 5 time lots.
8 1 jolly
9 6 jolly
== Branch ==
10 4 jolly
11 9 jolly
Check out jolly/emi branch of OsmocomBB GIT. It contains the EMI app and Sylvain's TRX hack, which is required to transmit multiple bursts per frame.
12 4 jolly
13 1 jolly
== Settings ==
14
15 9 jolly
Use left function key (left button below display) to toggle between DCS1800 and PCS1900 band. This is only required for ARFCN rage from 512 to 810.
16 1 jolly
17 9 jolly
Use right function key to toggle between up-link (interference of a mobile station) and down-link (interference of a base station).
18 1 jolly
19 9 jolly
To change ARFCN, enter digits and acknowledge with right function key. Press or hold right or left cursor buttons to adjust current selected ARFCN.
20 1 jolly
21 9 jolly
Press the menu button (black center button) to select a test pattern (scroll up and down) and acknowledge with the right function key.
22 1 jolly
23
== Operation ==
24 2 jolly
25
'''Note: This device transmits on frequencies that require a license in most countries. Only use this device, if you have a license for the selected ARFCN or if you use it inside a Faraday cage'''
26 1 jolly
27
Press the green button (off-hook) to start transmitter. The transmit power is shown.
28
29
Turn off transmitter by pressing green button again or by pressing red button (on-hook).
30
31
To increase or decrease TX power, press or hold up and down cursor buttons.
32 8 jolly
33
==== RACH Burst ====
34
35 9 jolly
In case of test pattern "RACH", real Access Bursts can be transmitted. Access bursts are shorter than Normal Burst. When this test pattern is selected, transmit power is always shown on the display, but nothing is transmitted. To transmit a single Access Burst, press the green button (off-hook). Whenever the green button is pressed again, an Access Burst is transmitted.
36 1 jolly
37
== Simulation ==
38
39
When transmitter is on, the transmitted bursts can be made audible on the phone's buzzer. To increase volume, press or hold # key. To decrease, press or hold * key.
40 4 jolly
41
== Restrictions ==
42
43 5 jolly
 * GSM 850 and 900 will not allow to go down lower than 4 dBm, even if displayed so.
44 9 jolly
 * TX power of patters with multiple times lots will always be 30 dBm (about 1 Watts)
Add picture from clipboard (Maximum size: 48.8 MB)