|E1/T1 Tap Adapter||
￼The Osmocom E1/T1 tap adapter allows you to tap into the communication of an E1/T1 line.
This is useful for tracing/analyzing communications on any type of E1/T1 based interface, such as A-bis, A and core network interfaces in GSM networks, as well as classic ISDN networks....
[old, abandoned] OsmocomDECT project by Patrick McHardy, implements a linux kernel based DECT stack.
Z-Netz related stuff
|Misc Hardware Projects||
Various uncategorized small hardware projects that don't each deserve their own redmine project
Various modules for building lab/testing setups using an industry-standard 3U component carrier
|Misc DECT hacks||
Various miscellaneous DECT hacks / information
|UUCP and UseNet||
UUCP and UseNet related stuf
USIM applet and HLR feature to allow obfuscating the IMSI of a subscriber,
|OsmocomBB SDR PHY||
Up to now there was no software defined GSM mobile phone. The "SDR PHY for Osmocom BB" project aims to fill this void. The project is focused on the client side of GSM protocol stack, and bridging the gap between existing GSM stack implementation project and SDR hardware....
Unified gnuradio input/output block for a variety of SDR devices, including FUNcube Dongle, OsmoSDR, RTL-SDR, MSi2500, SDRplay, SDR-IQ, AirSpy, rad10, HackRF, bladeRF, USSRP/UHD, UMtrx, RedPitaya, FreeSRP, ...
UmTRX is a dual-channel wide-band SDR transceiver that is designed to be used with OpenBTS and OsmoBTS GSM base stations. Given its SDR architecture UmTRX can easily be used with many other RF applications, and a combination of FPGA and FPRF (Field-Programmable RF) technology plus the ability to process data on a CPU or a DSP, makes it an extraordinarily flexible platform. See UmTRX....
This website is intended to collect information about publicly-known security issues and other bugs of mobile communications systems, with a particular focus on the 3GPP-specified protocol layers of GSM, GPRS, EDGE and WCDMA. We collect informationon issues at any protocol layer and at any of the interfaces, i.e. the Um air interface just as well as A-bis, A, IuB, C or any of the SS7/MAP/TCAP based core network interfaces....
This project targets a C-Language library providing an implementation and interface to manage a Modbus node in a Modbus bus.
This library relies heavily on libosmocore library and it is aimed at being used by applications using that same library.
The Modbus specs can be found here: https://www.modbus.org/specs.php...
|Ericsson RBS 6xxx||
This project is an attempt at an independent set of publicly-available documentation of the Ericsson RBS6xxx family of base station products.
This project is a home for several libraries providing common GPRS routines:
This project contains proof-of-concept code to send GPS assistance data to mobile phones using RRLP (Radio Resource Location Protocol) as well as inquiring/obtaining their geolocation using RRLP queries. It uses OsmoNITB to operate the GSM network, and a u-blox GPS receiver to obtain the assistance data....
This project aims at practical research and experimentation with the TETRA trunked radio system. See OsmocomTETRA.
This is the Osmocom version of libsmpp34, an implementation of the SMPP Protocol v3.4
This is the homepage of the Osmocom sub-project GEO Mobile Radio.
This is the A-bis interface library as used by OsmoBSC/OsmoNITB
This is basically a place-holder for everything else that doesn't fit in other places.
|Linux Kernel GTP-U||
This is an implementation of the GTP-U (user plane) inside the Linux kernel. Originally developed within Osmocom, it was brought further in cooperation by Travelping, and is now in mainline Linux since 4.7.0. You can use it as a high-performance user plane e.g. from OsmoGGSN...
|E1/T1 Hardware Interface (including icE1usb)||
This is about various projects implementing diffrent types of E1/T1 interfaces, including osmo-e1-xcvr, as well as a passive e1-tracer and icE1usb, our latest ICE40 FPGA based USB-E1 adapter.
This is about a set of shared C programming libraries the Osmocom project develops+maintains, such as
|mPCIe WWAN modem USB breakout board||
This is a small break-out board for miniPCIe (mPCIe) type cellular / WWAN modems.It allows you to insert a mPCIe modem from any vendor, and it will provide you with:
|M.2 (NGFF) WWAN modem USB breakout board||
This is a small break-out board for M.2 (NGFF) type cellular / WWAN modems.It allows you to insert a M.2 modem from any vendor, and it will provide you with:
This is a python-based test framework by which we can control a set of BTSs and Modems to execute full-system end-to-end verification tests. We use this within Osmocom to du full end-to-end testing with all our network elements and real BTS + RF + Modem Hardware....
This is a project implementing the analog cellular systems used in Germany and other countries in the past. It provides base station implementation of A-Netz (German pre-cellular), B-Netz (German pre-cellular), C-Netz (German cellular), NMT (Scandinavian: Nordisk Mobil Telefon) and AMPS/TACS (American: Advanced Mobile Phone Service)....
This is a network interfacing library intended to abstract all kinds of signalling + user payload interfaces, including Abis/IP (IPA), A/IP (SCCPlite), as well as the Osmux protocol
This is a more experimental, work-in-progress port of the OsmocomBB Layer1 to the Nuttx RTOS
|Cellular Network Infrastructure||
This is a group of Osmocom programs implementing cellular network infrastructure components for GSM, GPRS, EDGE, UMTS, HSPA, LTE and their associated interfaces and protocol stacks.
This includes components for classic circuit-switched GSM:...
This is a first step towards implementing a minimal hNodeB upper layer part, mainly handling HNBAP/RUA/RANAP messages on the Iuh interface. This is not expected to be a full / usable hNodeB anytime soon [if ever].
|M.2 (NGFF) WWAN modem + SIM Card emulation board||
This is a carrier board for M.2 (NGFF) type cellular / WWAN modems with integrated SIMtrace2.It allows you to insert a M.2 modem from any vendor, and it will provide you with:
This covers the libosmocore.git repository including libosmocore, libosmogsm, libosmogb, libosmoctrl, libosmocodec, libosmocoding.
The Osmocom Gb Proxy is a proxy for the 3GPP Gb interface (between BSS/PCU and SGSN). It allows you to aggregate many Gb links/connections into one. It also has the ability to convert between different Gb interface protocol stacking, such as from Gb-over-FrameRelay to Gb-over-IP....
The osmo-clock-conv is a small board for low-jitter conversion of a sine clock into a square clock, based around the LTC6957-4.
|Osmocom Conferences (OsmoDevCon, OsmoCon, OsmoDevCall)||
The Osmcoom [Developer] Conference, an annual event where Osmocom Developers and Users gather
|GSM Audio Pocket Knife||
The GSM Auido Pocket Knife is a small tool that can encode and decode all of the GSM codecs and can convert between various different frame formats, such as the RTP payload formats, those used by the TI Calypso DSP, the Racal 61x3 testers, etc. You can use it as a RTP sink to play back a RTP stream from OsmoBTS. ...
|Open Source IMS Client||
Some exploration and hacking towards putting tother an open source IMS (VoLTE, VoWiFi) client
Software project for [ab]using DVB-T USB receivers based on RTL2132 as inexpensive SDR receivers
Scalable Smalltalk/Pharo SMSC with SMPP input and SMPP and SS7 output.
RF delay simulator using the ADI Pluto SDR
|SuperSignal AP 2820V||
Research on the Vodafone/Sagem SuperSignal AP 2820V femtocell
pySim is a small command-line tool to program(write to) a variety of programmable sim cards.
Project about Retro-Communication using BBSs, Modems, DFÜ, Points, etc ...
The goal here is to re-create the modem / bbs / mailbox communication systems of the (late) 1980s and 1990s.
We use the bbs-revival mailing list to coordinate...
Project about operating ancient, phased-out networking technologies such as TDM, ISDN, PDH, SDH, FDDI, ArcNet, TokenRing and others. The purpose of this is to keep alive the knowledge about the technology, and to be able to present it to interested parties....
|osmo-ePDG - VoWifi Evolved Packet Data Gateway||
plan for upcoming open source ePDG (IPsec cateway for VoWiFi)
PFCP protocol encoding and decoding, and generic PFCP endpoint implementation
OsmoTRX is a GSM Radio Modem based on a fork of the OpenBTS Transceiver program. It is intended to be used with the osmo-bts-trx variant of OsmoBTS in order to build GSM base stations with Abis/IP interface from general purpose SDR hardware such as USRP or LimeSDR devices....
|OsmoGGSN (former OpenGGSN)|
OsmocomBB is an Free Software / Open Source GSM Baseband software implementation. It intends to completely replace the need for a proprietary GSM baseband software.
Osmocom tool for Qualcomm DIAG
Osmocom STP (Signal Transfer Point), implementing SS7 (MTP) routing and SIGTRAN Signalling Gateway functionality. Supports SIGTRAN only, no legacy E1/T1 based signaling links. Currently only MTP-level routing no GTR or GTT yet, but contributions in that area are very welcome....
Osmocom Serving Mobile Location Center
|libosmo-sccp + libosmo-sigtran||
Osmocom SCCP + Sigtran (M3UA, SUA) library
|Radio Access Network|
Osmocom project to (ab)use the DAC inside the FL2000 USB 3.0 VGA adapter to transmit radio frequency
Osmocom PCAP utilities, such as a distributed client/server capture architecture. It allows a number of PCAP probes on remote hosts, feeding captured packets to a central host in the network. Each probe can have different capture filters. There are multiple options for the protocol between probe and central host....
Osmocom E1 daemon; used as a "software defined" implementation of E1, where the framer and HDLC controller is implemented inside osmo-e1d and a relatively simple hardware (such as USB attached hardware) interfaces with the actual E1 physical line.
|Core Network (CN)|
Osmocom Clock Generator board, using the Si5351C clock synthesizer to derive up to 8 different clocks from a single clock reference, such as a 10MHz GPS-DO or OCXO.
Osmocom Cell Broadcast Centre (CBC). It is the heart of the Cell Broadcast Service (CBS) as well as a variety of disaster/emergency warning systems (PWS).
Osmocom Call Control. A new, protocol-agnostic way of interfacing call control of various different protocols with each other. Currently used within the osmocom-analog domain and with several endpoints.
OsmoBTS is an Open Source GSM BTS (Base Transceiver Station) with A-bis/IP interface. It implements support for a variety of PHY/Hardware, such as sysmocom sysmoBTS, OCTSDR-2G and LiteCell 1.5, but also general-purpose SDR boards such as USRP or LimeSDR via OsmoTRX....
OsmoBSCNAT is an A-interface aggregator that can aggregate many A-interface links from many BSCs and present them as one A interface towards a MSC. Most normal networks will not need this component, it only serves some special use case scenarios. It requires SCCPLite and doesn't work with 3GPP AoIP....
OsmoBSC is an Open Source BSC (GSM Base Station Controller) with A-bis/IP and A/IP interface. It supports a variety of BTS Vendors/Models, including some Siemens, Nokia, Ericsson and ip.access models. However, main focus during the last 5+ years is OsmoBTS based BTSs....
osmo-remsim is the Remote SIM software suite used to manage a set of phones/modems and a set of SIM/banks as well as the dynamic mappings of SIM cards to their remote phones/modems.It consists of:
|OpenVizsla USB tracer/analyzer||
OpenVizsla is a Open Hardware FPGA-based USB analyzer for USB Low-Speed, Full-Speed and High-Speed. Unlike other similar devices on the market, hardware design files are available as well as full source code for the firmware and client software of the device....
OP25 is a not-for-profit project to bring together folks that are interested in implementing APCO P25 using a software-defined radio. Our goal is to build a software-defined analyzer for APCO P25 signals that is available under the GNU Public License (GPL)....
legacy and/or unmaintained CNI projects
|Core testing infrastructure||
Issues that have to do with our core testing infrastructure (TTCN3 issues, docker setup) go here.
Issues specific to one test component should still be filed in the respective projects (e.g. osmo-msc).
|Huawei HiSilicon Cellular Modems||
Information collected on Huawei cellular modems
|Altair LTE Modems||
Information about the Altair "FourGee" 3100 - 3800 LTE modems
|Qualcomm Linux Modems by Quectel & Co||
Information / Research on the internals of Qualcomm Linux based cellular modems available from Quectel and other vendors
Here is the generic Linux Modem. This modem is totally software, it means that all the DSP stuff is done by the main CPU, as in some so called "winmodems".
Gnuradio blocks and tools for receiving GSM transmissions
Firmware for Smart Card Reader implementing the USB CCID (Circuit Card Interface Device) Specification, based on Atmel ASF4. Used on the sysmoOCTSIM 8-way CCID reader.
FidoNet related stuff
Erlang MGW NAT/MASQ implementation
Erlang implementation of TCAP + MAP Signalling Protocols, runs on top of osmo_ss7 and osmo_sccp
Erlang implementation of SCCP (ITU-T Q.71x)
Erlang implementation of M2UA/M3UA/MTP3/SCCP/ISUP codec + utils
Erlang implementation of a TCPAP+MAP codec (encoding/decoding). You most likely want to use signerl, not this.
Distributed GSM architecture, suitable for de-centralized, autonomous networks with intermittent connectivity.
De- / encode RANAP messages and provide Iu client implementations (to OsmoMSC for IuCS and OsmoSGSN for IuPS).
|Cellular Modem Information||
collects various bits of (low-level technical) information on cellular modems
C-language library for common DSP (Digital Signal Processing) primitives for SDR (Software Defined Radio). They are part of the Osmocom project.
|OCTOI - Osmocom Community TDM over IP||
Building a community TDM-over-IP network so retronetworking enthusiasts can interconnect equipment with ISDN, Frame Relay or other technologies using PRI (E1) or BRI TDM technology in a private TDM network.
An utility to convert the circuit-switched A interface of a BSplus into SCCP-lite A-over-IP
An Open Source implenentation of a HNB-GW (HomeNodeB-Gateway), implementing the Iuh, IuCS and IuPS interfaces. It aggregates the Iuh links from femtocells (hNodeBs) and presents them as regular IuCS and IuPS towards MSC and SGSN (such as OsmoMSC and OsmoSGSN). It uses M3UA as signaling transport....
|multi-voltage USB UART||
A small USB UART board with two CMOS UARTs exposed on 2.54mm headers.
The logic voltage can be manually selected at 1.8, 2.3, 2.5, 2.8, 3.0 or 3.3V
A small program used to tap an E1 PRI line and obtain GSMTAP traces of the D channel as well as raw files with B channel content of each direction of each call.
|Erlang Core Network Signalling Projects||
A set of almost complete Erlang projects implementing the core network protocol stacks from SS7/SIGTRAN over SCCP up to TCAP, MAP and CAP.
Currently not actively maintained due to lack of active customer/user interest.
A program to record traffic on E1 or T1 TDM interfaces to disk. This provides tcpdump-like functionality for TDM interfaces. You can configure on a per-timeslot bases if the raw bitstream should be recorded, or if a HDLC decoder should be used. Requires a high-impedance tap and two E1/T1 ports per link you want to monitor (one for Rx, one for Tx)....
A collection of various small (and not so small) hardware projects created as tools to the cellular research community
|SDR (Software Defined Radio)|
2nd generation SIMtrace: Uses same circuit board / peripherals as SIMtrace 1, but contains a SAM3 (Cortex-M3) instead of the SAM7 (ARM7TDMI) microcontroller. The SAM3 has a faster CPU and its internal USB peripheral offers more endpoints. This can be used for more features in the devie firmware, such as man-in-the-middle....
|SIM card related Projects|