= BSC Hack =

''bsc_hack'' is the program executable name of [wiki:OpenBSC]. We call it that way, since it is still pretty much a big hack, despite having
gone a long way in quite a short amount of time.

Configuration

Currently, there is no configuration file. A lot of the configuration is thus compiled-in. Almost all of the values that you might want to
tweak are inside the bsc_hack.c file itself, where you can find things like the BCCH filling (SYSTEM INFORMATION) messages and the like.

Reference

=== BS-11 ===

Basically, there are currently just two modes of operation supported {{{
$ ./bsc_hack -t bs11
}}}
will assume you have a [wiki:BS11 BS-11] connected to the first mISDN E1 card and have configured * OML signalling on the full 64kbps E1 timeslot 1 * verify this by [wiki:bs11_config] ''query'' * make sure you pass '''dslot=1''' when loading hfcmulti.ko * OML TEI 25 * verify this by [wiki:bs11_config] ''query''

you will see something like {{{
DB: Database initialized.
DB: Database prepared.
1 device found
id: 0
Dprotocols: 00000018
Bprotocols: 0000000e
protocol: 4
nrbchan: 30
name: hfc-e1.1
activate bchan
bootstrapping OML
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1376 Set Chan Attr (bts=0,trx=0,ts=0)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1376 Set Chan Attr (bts=0,trx=0,ts=1)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1315 CONNECT TERR TRAF Um=(0,0,1) E1=(0,2,1)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1376 Set Chan Attr (bts=0,trx=0,ts=2)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1315 CONNECT TERR TRAF Um=(0,0,2) E1=(0,2,2)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1376 Set Chan Attr (bts=0,trx=0,ts=3)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1315 CONNECT TERR TRAF Um=(0,0,3) E1=(0,2,3)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1376 Set Chan Attr (bts=0,trx=0,ts=4)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1315 CONNECT TERR TRAF Um=(0,0,4) E1=(0,3,0)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1376 Set Chan Attr (bts=0,trx=0,ts=5)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1315 CONNECT TERR TRAF Um=(0,0,5) E1=(0,3,1)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1376 Set Chan Attr (bts=0,trx=0,ts=6)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1315 CONNECT TERR TRAF Um=(0,0,6) E1=(0,3,2)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1376 Set Chan Attr (bts=0,trx=0,ts=7)
Thu Feb 19 04:22:48 2009 <0020> abis_nm.c:1315 CONNECT TERR TRAF Um=(0,0,7) E1=(0,3,3)
bootstrapping RSL MCC=1 MNC=1
}}}

=== ip.access nanoBTS === {{{
$ ./bsc_hack -t nanogsm900
}}}
will assume you have a [wiki:nanoBTS] configured with its primary OML link to the IP address of your Linux PC.

After starting bsc_hack will just wait for your nanoBTS to connect, which can take quite a while.

NOTE: Due to some problems with OML initialization after the first boot of a nanoBTS, you may have to re-start bsc_hack a number of times
until you get it working.

Dealing with the HLR
We do have a sqlite3 database for the HLR. We do have a table for Subscribers and to authorize your mobile station you will need to execute. This means LOCATION UPDATING REQUEST will be accepted.

{{{
sqlite3 hlr.sqlite
update Subscriber set authorized=1 where imsi=YOUR_IMSI;
}}}

=== Using the telnet interface ==

You can telnet to port 4242 of the machine that runs bsc_hack and try some of the commands.

We are planning a lot of work in this area, so documenting the old commands will not be very productive.