- Cellular Modem Information
collects various bits of (low-level technical) information on cellular modems
- Altair LTE Modems
Information about the Altair "FourGee" 3100 - 3800 LTE modems
- Huawei HiSilicon Cellular Modems
Information collected on Huawei cellular modems
- Qualcomm Linux Modems by Quectel & Co
Information / Research on the internals of Qualcomm Linux based cellular modems available from Quectel and other vendors
Osmocom tool for Qualcomm DIAG
- Cellular Network Infrastructure
This is a group of Osmocom programs implementing cellular network infrastructure components for GSM, GPRS, EDGE, UMTS, HSPA, LTE and their associated interfaces and protocol stacks.
This includes components for classic circuit-switched GSM:...
legacy and/or unmaintained CNI projects
This project contains proof-of-concept code to send GPS assistance data to mobile phones using RRLP (Radio Resource Location Protocol) as well as inquiring/obtaining their geolocation using RRLP queries. It uses OsmoNITB to operate the GSM network, and a u-blox GPS receiver to obtain the assistance data....
- Core Network (CN)
The Osmocom Gb Proxy is a proxy for the 3GPP Gb interface (between BSS/PCU and SGSN). It allows you to aggregate many Gb links/connections into one. It also has the ability to convert between different Gb interface protocol stacking, such as from Gb-over-FrameRelay to Gb-over-IP....
OsmoBSCNAT is an A-interface aggregator that can aggregate many A-interface links from many BSCs and present them as one A interface towards a MSC. Most normal networks will not need this component, it only serves some special use case scenarios. It requires SCCPLite and doesn't work with 3GPP AoIP....
Osmocom Cell Broadcast Centre (CBC). It is the heart of the Cell Broadcast Service (CBS) as well as a variety of desaster/emergency warning systems (PWS).
OsmoCBC provides a REST/JSON interface for receiving cell broadcast messages from external entities and a 3GPP CBSP interface towards BSCs like OsmoBSC. Soon to be extended with SABP support towards RNCs....
- OsmoGGSN (former OpenGGSN)
An Open Source implenentation of a HNB-GW (HomeNodeB-Gateway), implementing the Iuh, IuCS and IuPS interfaces. It aggregates the Iuh links from femtocells (hNodeBs) and presents them as regular IuCS and IuPS towards MSC and SGSN (such as OsmoMSC and OsmoSGSN). It uses M3UA as signaling transport....
Osmocom STP (Signal Transfer Point), implementing SS7 (MTP) routing and SIGTRAN Signalling Gateway functionality. Supports SIGTRAN only, no legacy E1/T1 based signaling links. Currently only MTP-level routing no GTR or GTT yet, but contributions in that area are very welcome....
- Distributed GSM
Distributed GSM architecture, suitable for de-centralized, autonomous networks with intermittent connectivity.
- IMSI Pseudonymization
USIM applet and HLR feature to allow obfuscating the IMSI of a subscriber,
without the need to change any intermediate core network component.
A program to record traffic on E1 or T1 TDM interfaces to disk. This provides tcpdump-like functionality for TDM interfaces. You can configure on a per-timeslot bases if the raw bitstream should be recorded, or if a HDLC decoder should be used. Requires a high-impedance tap and two E1/T1 ports per link you want to monitor (one for Rx, one for Tx)....
This is a python-based test framework by which we can control a set of BTSs and Modems to execute full-system end-to-end verification tests. We use this within Osmocom to du full end-to-end testing with all our network elements and real BTS + RF + Modem Hardware....
Osmocom Serving Mobile Location Center
- Radio Access Network
Osmocom Radio Access Network (RAN)
This is a first step towards implementing a minimal hNodeB upper layer part, mainly handling HNBAP/RUA/RANAP messages on the Iuh interface. This is not expected to be a full / usable hNodeB anytime soon [if ever].
- Erlang Core Network Signalling Projects
A set of almost complete Erlang projects implementing the core network protocol stacks from SS7/SIGTRAN over SCCP up to TCAP, MAP and CAP.
Currently not actively maintained due to lack of active customer/user interest.
Erlang MGW NAT/MASQ implementation
Erlang implementation of a TCPAP+MAP codec (encoding/decoding). You most likely want to use signerl, not this.
Erlang implementation of SCCP (ITU-T Q.71x)
Erlang implementation of M2UA/M3UA/MTP3/SCCP/ISUP codec + utils
Erlang implementation of TCAP + MAP Signalling Protocols, runs on top of osmo_ss7 and osmo_sccp
- Hardware Projects
A collection of various small (and not so small) hardware projects created as tools to the cellular research community
- E1/T1 Hardware Interface (including icE1usb)
This is about various projects implementing diffrent types of E1/T1 interfaces, including osmo-e1-xcvr, as well as a passive e1-tracer and icE1usb, our latest ICE40 FPGA based USB-E1 adapter.
Osmocom E1 daemon; used as a "software defined" implementation of E1, where the framer and HDLC controller is implemented inside osmo-e1d and a relatively simple hardware (such as USB attached hardware) interfaces with the actual E1 physical line.
- E1/T1 Tap Adapter
￼The Osmocom E1/T1 tap adapter allows you to tap into the communication of an E1/T1 line.
This is useful for tracing/analyzing communications on any type of E1/T1 based interface, such as A-bis, A and core network interfaces in GSM networks, as well as classic ISDN networks....
- M.2 (NGFF) WWAN modem + SIM Card emulation board
This is a carrier board for M.2 (NGFF) type cellular / WWAN modems with integrated SIMtrace2.It allows you to insert a M.2 modem from any vendor, and it will provide you with:
- mini USB 3 socket for connection to a USB Host (like your PC/Laptop or Embedded System)...
- M.2 (NGFF) WWAN modem USB breakout board
This is a small break-out board for M.2 (NGFF) type cellular / WWAN modems.It allows you to insert a M.2 modem from any vendor, and it will provide you with:
- mini USB 3 socket for connection to a USB Host (like your PC/Laptop or Embedded System)
- 5V DC input for power supply (USB supply usually insufficient for a modem)...
- Misc Hardware Projects
Various uncategorized small hardware projects that don't each deserve their own redmine project
- mPCIe WWAN modem USB breakout board
This is a small break-out board for miniPCIe (mPCIe) type cellular / WWAN modems.It allows you to insert a mPCIe modem from any vendor, and it will provide you with:
- mini USB socket for connection to a USB Host (like your PC/Laptop or Embedded System)...
- multi-voltage USB UART
A small USB UART board with two CMOS UARTs exposed on 2.54mm headers.
The logic voltage can be manually selected at 1.8, 2.3, 2.5, 2.8, 3.0 or 3.3V
- OpenVizsla USB tracer/analyzer
OpenVizsla is a Open Hardware FPGA-based USB analyzer for USB Low-Speed, Full-Speed and High-Speed. Unlike other similar devices on the market, hardware design files are available as well as full source code for the firmware and client software of the device....
Osmocom Clock Generator board, using the Si5351C clock synthesizer to derive up to 8 different clocks from a single clock reference, such as a 10MHz GPS-DO or OCXO.
UmTRX is a dual-channel wide-band SDR transceiver that is designed to be used with OpenBTS and OsmoBTS GSM base stations. Given its SDR architecture UmTRX can easily be used with many other RF applications, and a combination of FPGA and FPRF (Field-Programmable RF) technology plus the ability to process data on a CPU or a DSP, makes it an extraordinarily flexible platform. See UmTRX....
- Miscellaneous Projects
This is basically a place-holder for everything else that doesn't fit in other places.
- Core testing infrastructure
Issues that have to do with our core testing infrastructure (TTCN3 issues, docker setup) go here.
Issues specific to one test component should still be filed in the respective projects (e.g. osmo-msc).
- Ericsson RBS 6xxx
This project is an attempt at an independent set of publicly-available documentation of the Ericsson RBS6xxx family of base station products.
- GSM Audio Pocket Knife
The GSM Auido Pocket Knife is a small tool that can encode and decode all of the GSM codecs and can convert between various different frame formats, such as the RTP payload formats, those used by the TI Calypso DSP, the Racal 61x3 testers, etc. You can use it as a RTP sink to play back a RTP stream from OsmoBTS. ...
- Mobile (in)Security
This website is intended to collect information about publicly-known security issues and other bugs of mobile communications systems, with a particular focus on the 3GPP-specified protocol layers of GSM, GPRS, EDGE and WCDMA. We collect informationon issues at any protocol layer and at any of the interfaces, i.e. the Um air interface just as well as A-bis, A, IuB, C or any of the SS7/MAP/TCAP based core network interfaces....
This project targets a C-Language library providing an implementation and interface to manage a Modbus node in a Modbus bus.
This library relies heavily on libosmocore library and it is aimed at being used by applications using that same library.
The Modbus specs can be found here: https://www.modbus.org/specs.php...
Osmocom PCAP utilities, such as a distributed client/server capture architecture. It allows a number of PCAP probes on remote hosts, feeding captured packets to a central host in the network. Each probe can have different capture filters. There are multiple options for the protocol between probe and central host....
Scalable Smalltalk/Pharo SMSC with SMPP input and SMPP and SS7 output.
OP25 is a not-for-profit project to bring together folks that are interested in implementing APCO P25 using a software-defined radio. Our goal is to build a software-defined analyzer for APCO P25 signals that is available under the GNU Public License (GPL)....
- Osmocom Analog
This is a project implementing the analog cellular systems used in Germany and other countries in the past. It provides base station implementation of A-Netz (German pre-cellular), B-Netz (German pre-cellular), C-Netz (German cellular), NMT (Scandinavian: Nordisk Mobil Telefon) and AMPS/TACS (American: Advanced Mobile Phone Service)....
Osmocom Call Control. A new, protocol-agnostic way of interfacing call control of various different protocols with each other. Currently used within the osmocom-analog domain and with several endpoints.
- Osmocom Conferences (OsmoDevCon, OsmoCon, OsmoDevCall)
The Osmcoom [Developer] Conference, an annual event where Osmocom Developers and Users gather
- Osmocom Libraries
This is about a set of shared C programming libraries the Osmocom project develops+maintains, such as
This is the A-bis interface library as used by OsmoBSC/OsmoNITB
This is a network interfacing library intended to abstract all kinds of signalling + user payload interfaces, including Abis/IP (IPA), A/IP (SCCPlite), as well as the Osmux protocol
- libosmo-sccp + libosmo-sigtran
Osmocom SCCP + Sigtran (M3UA, SUA) library
This covers the libosmocore.git repository including libosmocore, libosmogsm, libosmogb, libosmoctrl, libosmocodec, libosmocoding.
This is the Osmocom version of libsmpp34, an implementation of the SMPP Protocol v3.4
- Osmocom.org Servers
This is a meta-project about this redmine and our mailman, jenkins, etc. installations.
OsmocomBB is an Free Software / Open Source GSM Baseband software implementation. It intends to completely replace the need for a proprietary GSM baseband software.
This is a more experimental, work-in-progress port of the OsmocomBB Layer1 to the Nuttx RTOS
This is the homepage of the Osmocom sub-project GEO Mobile Radio.
- Retro-Networking / BBS-Revival
Project about Retro-Communication using BBSs, Modems, DFÜ, Points, etc ...
The goal here is to re-create the modem / bbs / mailbox communication systems of the late 1980ies and 1990ies.
We use the bbs-revival mailing list to coordinate...
FidoNet related stuff
Here is the generic Linux Modem. This modem is totally software, it means that all the DSP stuff is done by the main CPU, as in some so called "winmodems".
- Linmodem is also a research project. It contains all the necessary stuff to test new digital communication algorithms. The line simulator and the X11 interface can be used to simulate a complete communication chain....
- UUCP and UseNet
UUCP and UseNet related stuf
Z-Netz related stuff
- SDR (Software Defined Radio)
Gnuradio blocks and tools for receiving GSM transmissions
- OsmocomBB SDR PHY
Up to now there was no software defined GSM mobile phone. The "SDR PHY for Osmocom BB" project aims to fill this void. The project is focused on the client side of GSM protocol stack, and bridging the gap between existing GSM stack implementation project and SDR hardware....
Unified gnuradio input/output block for a variety of SDR devices, including FUNcube Dongle, OsmoSDR, RTL-SDR, MSi2500, SDRplay, SDR-IQ, AirSpy, rad10, HackRF, bladeRF, USSRP/UHD, UMtrx, RedPitaya, FreeSRP, ...
C-language library for common DSP (Digital Signal Processing) primitives for SDR (Software Defined Radio). They are part of the Osmocom project.
Osmocom project to (ab)use the DAC inside the FL2000 USB 3.0 VGA adapter to transmit radio frequency
RF delay simulator using the ADI Pluto SDR
OsmoSDR is a (now obsolete) 100% Free Software based small form-factor inexpensive SDR (Software Defined Radio) project.
Software project for [ab]using DVB-T USB receivers based on RTL2132 as inexpensive SDR receivers
Firmware for Smart Card Reader implementing the USB CCID (Circuit Card Interface Device) Specification, based on Atmel ASF4. Used on the sysmoOCTSIM 8-way CCID reader.
osmo-remsim is the Remote SIM software suite used to manage a set of phones/modems and a set of SIM/banks as well as the dynamic mappings of SIM cards to their remote phones/modems.It consists of:
- osmo-remsim-client: physically emulate SIM card at modem/phone using SIMtrace2 cardem or sysmoQMOD...
- Osmocom Card Operating System
Osmocom COS (or short OsmoCOS) is an abandoned attempt at creating an experimental Card Operating System for smart cards, specifically for those based on the ChipCity CC32RS512 microcontroller.
pySim is a small command-line tool to program(write to) a variety of programmable sim cards.
Osmocom SIMtrace is a hardware device and associated firmware + host software to trace the communication between phone and SIM card.
- SIMtrace 2
2nd generation SIMtrace: Uses same circuit board / peripherals as SIMtrace 1, but contains a SAM3 (Cortex-M3) instead of the SAM7 (ARM7TDMI) microcontroller. The SAM3 has a faster CPU and its internal USB peripheral offers more endpoints. This can be used for more features in the devie firmware, such as man-in-the-middle....
A software implementation (simulation) of a SIM card
Also available in: Atom