|Altair LTE Modems||
Information about the Altair "FourGee" 3100 - 3800 LTE modems
Project about Retro-Communication using BBSs, Modems, DFÜ, Points, etc ...
The goal here is to re-create the modem / bbs / mailbox communication systems of the (late) 1980s and 1990s.
We use the bbs-revival mailing list to coordinate...
An utility to convert the circuit-switched A interface of a BSplus into SCCP-lite A-over-IP
|Cellular Modem Information||
collects various bits of (low-level technical) information on cellular modems
|Cellular Network Infrastructure||
This is a group of Osmocom programs implementing cellular network infrastructure components for GSM, GPRS, EDGE, UMTS, HSPA, LTE and their associated interfaces and protocol stacks.
This includes components for classic circuit-switched GSM:...
legacy and/or unmaintained CNI projects
|Core Network (CN)|
|Core testing infrastructure||
Issues that have to do with our core testing infrastructure (TTCN3 issues, docker setup) go here.
Issues specific to one test component should still be filed in the respective projects (e.g. osmo-msc).
Distributed GSM architecture, suitable for de-centralized, autonomous networks with intermittent connectivity.
|E1/T1 Hardware Interface (including icE1usb)||
This is about various projects implementing diffrent types of E1/T1 interfaces, including osmo-e1-xcvr, as well as a passive e1-tracer and icE1usb, our latest ICE40 FPGA based USB-E1 adapter.
|E1/T1 Tap Adapter||
￼The Osmocom E1/T1 tap adapter allows you to tap into the communication of an E1/T1 line.
This is useful for tracing/analyzing communications on any type of E1/T1 based interface, such as A-bis, A and core network interfaces in GSM networks, as well as classic ISDN networks....
|Ericsson RBS 6xxx||
This project is an attempt at an independent set of publicly-available documentation of the Ericsson RBS6xxx family of base station products.
|Erlang Core Network Signalling Projects||
A set of almost complete Erlang projects implementing the core network protocol stacks from SS7/SIGTRAN over SCCP up to TCAP, MAP and CAP.
Currently not actively maintained due to lack of active customer/user interest.
Erlang MGW NAT/MASQ implementation
Erlang implementation of a TCPAP+MAP codec (encoding/decoding). You most likely want to use signerl, not this.
Erlang implementation of SCCP (ITU-T Q.71x)
Erlang implementation of M2UA/M3UA/MTP3/SCCP/ISUP codec + utils
Erlang implementation of TCAP + MAP Signalling Protocols, runs on top of osmo_ss7 and osmo_sccp
FidoNet related stuff
Gnuradio blocks and tools for receiving GSM transmissions
Unified gnuradio input/output block for a variety of SDR devices, including FUNcube Dongle, OsmoSDR, RTL-SDR, MSi2500, SDRplay, SDR-IQ, AirSpy, rad10, HackRF, bladeRF, USSRP/UHD, UMtrx, RedPitaya, FreeSRP, ...
|GSM Audio Pocket Knife||
The GSM Auido Pocket Knife is a small tool that can encode and decode all of the GSM codecs and can convert between various different frame formats, such as the RTP payload formats, those used by the TI Calypso DSP, the Racal 61x3 testers, etc. You can use it as a RTP sink to play back a RTP stream from OsmoBTS. ...
A collection of various small (and not so small) hardware projects created as tools to the cellular research community
|Huawei HiSilicon Cellular Modems||
Information collected on Huawei cellular modems
USIM applet and HLR feature to allow obfuscating the IMSI of a subscriber,
This is the A-bis interface library as used by OsmoBSC/OsmoNITB
C-language library for common DSP (Digital Signal Processing) primitives for SDR (Software Defined Radio). They are part of the Osmocom project.
This is a network interfacing library intended to abstract all kinds of signalling + user payload interfaces, including Abis/IP (IPA), A/IP (SCCPlite), as well as the Osmux protocol
PFCP protocol encoding and decoding, and generic PFCP endpoint implementation
De- / encode RANAP messages and provide Iu client implementations (to OsmoMSC for IuCS and OsmoSGSN for IuPS).
|libosmo-sccp + libosmo-sigtran||
Osmocom SCCP + Sigtran (M3UA, SUA) library
This covers the libosmocore.git repository including libosmocore, libosmogsm, libosmogb, libosmoctrl, libosmocodec, libosmocoding.
This is the Osmocom version of libsmpp34, an implementation of the SMPP Protocol v3.4
Here is the generic Linux Modem. This modem is totally software, it means that all the DSP stuff is done by the main CPU, as in some so called "winmodems".
|Linux Kernel GTP-U||
This is an implementation of the GTP-U (user plane) inside the Linux kernel. Originally developed within Osmocom, it was brought further in cooperation by Travelping, and is now in mainline Linux since 4.7.0. You can use it as a high-performance user plane e.g. from OsmoGGSN...
|M.2 (NGFF) WWAN modem + SIM Card emulation board||
This is a carrier board for M.2 (NGFF) type cellular / WWAN modems with integrated SIMtrace2.It allows you to insert a M.2 modem from any vendor, and it will provide you with:
|M.2 (NGFF) WWAN modem USB breakout board||
This is a small break-out board for M.2 (NGFF) type cellular / WWAN modems.It allows you to insert a M.2 modem from any vendor, and it will provide you with:
|Misc Hardware Projects||
Various uncategorized small hardware projects that don't each deserve their own redmine project
This is basically a place-holder for everything else that doesn't fit in other places.
This website is intended to collect information about publicly-known security issues and other bugs of mobile communications systems, with a particular focus on the 3GPP-specified protocol layers of GSM, GPRS, EDGE and WCDMA. We collect informationon issues at any protocol layer and at any of the interfaces, i.e. the Um air interface just as well as A-bis, A, IuB, C or any of the SS7/MAP/TCAP based core network interfaces....
|mPCIe WWAN modem USB breakout board||
This is a small break-out board for miniPCIe (mPCIe) type cellular / WWAN modems.It allows you to insert a mPCIe modem from any vendor, and it will provide you with:
|multi-voltage USB UART||
A small USB UART board with two CMOS UARTs exposed on 2.54mm headers.
The logic voltage can be manually selected at 1.8, 2.3, 2.5, 2.8, 3.0 or 3.3V
This is a more experimental, work-in-progress port of the OsmocomBB Layer1 to the Nuttx RTOS
|OCTOI - Osmocom Community TDM over IP||
Building a community TDM-over-IP network so retronetworking enthusiasts can interconnect equipment with ISDN, Frame Relay or other technologies using PRI (E1) or BRI TDM technology in a private TDM network.
OP25 is a not-for-profit project to bring together folks that are interested in implementing APCO P25 using a software-defined radio. Our goal is to build a software-defined analyzer for APCO P25 signals that is available under the GNU Public License (GPL)....
|Open Source IMS Client||
Some exploration and hacking towards putting tother an open source IMS (VoLTE, VoWiFi) client
|OpenVizsla USB tracer/analyzer||
OpenVizsla is a Open Hardware FPGA-based USB analyzer for USB Low-Speed, Full-Speed and High-Speed. Unlike other similar devices on the market, hardware design files are available as well as full source code for the firmware and client software of the device....
Osmocom Call Control. A new, protocol-agnostic way of interfacing call control of various different protocols with each other. Currently used within the osmocom-analog domain and with several endpoints.
Firmware for Smart Card Reader implementing the USB CCID (Circuit Card Interface Device) Specification, based on Atmel ASF4. Used on the sysmoOCTSIM 8-way CCID reader.
The osmo-clock-conv is a small board for low-jitter conversion of a sine clock into a square clock, based around the LTC6957-4.
Osmocom Clock Generator board, using the Si5351C clock synthesizer to derive up to 8 different clocks from a single clock reference, such as a 10MHz GPS-DO or OCXO.
A program to record traffic on E1 or T1 TDM interfaces to disk. This provides tcpdump-like functionality for TDM interfaces. You can configure on a per-timeslot bases if the raw bitstream should be recorded, or if a HDLC decoder should be used. Requires a high-impedance tap and two E1/T1 ports per link you want to monitor (one for Rx, one for Tx)....
Osmocom E1 daemon; used as a "software defined" implementation of E1, where the framer and HDLC controller is implemented inside osmo-e1d and a relatively simple hardware (such as USB attached hardware) interfaces with the actual E1 physical line.
|osmo-ePDG - VoWifi Evolved Packet Data Gateway||
plan for upcoming open source ePDG (IPsec cateway for VoWiFi)
Osmocom project to (ab)use the DAC inside the FL2000 USB 3.0 VGA adapter to transmit radio frequency
The Osmocom Gb Proxy is a proxy for the 3GPP Gb interface (between BSS/PCU and SGSN). It allows you to aggregate many Gb links/connections into one. It also has the ability to convert between different Gb interface protocol stacking, such as from Gb-over-FrameRelay to Gb-over-IP....
Various modules for building lab/testing setups using an industry-standard 3U component carrier
This project targets a C-Language library providing an implementation and interface to manage a Modbus node in a Modbus bus.
This library relies heavily on libosmocore library and it is aimed at being used by applications using that same library.
The Modbus specs can be found here: https://www.modbus.org/specs.php...
Osmocom PCAP utilities, such as a distributed client/server capture architecture. It allows a number of PCAP probes on remote hosts, feeding captured packets to a central host in the network. Each probe can have different capture filters. There are multiple options for the protocol between probe and central host....
Osmocom tool for Qualcomm DIAG
osmo-remsim is the Remote SIM software suite used to manage a set of phones/modems and a set of SIM/banks as well as the dynamic mappings of SIM cards to their remote phones/modems.It consists of:
RF delay simulator using the ADI Pluto SDR
OsmoBSC is an Open Source BSC (GSM Base Station Controller) with A-bis/IP and A/IP interface. It supports a variety of BTS Vendors/Models, including some Siemens, Nokia, Ericsson and ip.access models. However, main focus during the last 5+ years is OsmoBTS based BTSs....
OsmoBSCNAT is an A-interface aggregator that can aggregate many A-interface links from many BSCs and present them as one A interface towards a MSC. Most normal networks will not need this component, it only serves some special use case scenarios. It requires SCCPLite and doesn't work with 3GPP AoIP....
OsmoBTS is an Open Source GSM BTS (Base Transceiver Station) with A-bis/IP interface. It implements support for a variety of PHY/Hardware, such as sysmocom sysmoBTS, OCTSDR-2G and LiteCell 1.5, but also general-purpose SDR boards such as USRP or LimeSDR via OsmoTRX....
Osmocom Cell Broadcast Centre (CBC). It is the heart of the Cell Broadcast Service (CBS) as well as a variety of disaster/emergency warning systems (PWS).
This is a project implementing the analog cellular systems used in Germany and other countries in the past. It provides base station implementation of A-Netz (German pre-cellular), B-Netz (German pre-cellular), C-Netz (German cellular), NMT (Scandinavian: Nordisk Mobil Telefon) and AMPS/TACS (American: Advanced Mobile Phone Service)....
|Osmocom Conferences (OsmoDevCon, OsmoCon, OsmoDevCall)||
The Osmcoom [Developer] Conference, an annual event where Osmocom Developers and Users gather
This is about a set of shared C programming libraries the Osmocom project develops+maintains, such as
OsmocomBB is an Free Software / Open Source GSM Baseband software implementation. It intends to completely replace the need for a proprietary GSM baseband software.
|OsmocomBB SDR PHY||
Up to now there was no software defined GSM mobile phone. The "SDR PHY for Osmocom BB" project aims to fill this void. The project is focused on the client side of GSM protocol stack, and bridging the gap between existing GSM stack implementation project and SDR hardware....
[old, abandoned] OsmocomDECT project by Patrick McHardy, implements a linux kernel based DECT stack.
This is the homepage of the Osmocom sub-project GEO Mobile Radio.
This project contains proof-of-concept code to send GPS assistance data to mobile phones using RRLP (Radio Resource Location Protocol) as well as inquiring/obtaining their geolocation using RRLP queries. It uses OsmoNITB to operate the GSM network, and a u-blox GPS receiver to obtain the assistance data....
This project aims at practical research and experimentation with the TETRA trunked radio system. See OsmocomTETRA.
|OsmoGGSN (former OpenGGSN)|
This is a python-based test framework by which we can control a set of BTSs and Modems to execute full-system end-to-end verification tests. We use this within Osmocom to du full end-to-end testing with all our network elements and real BTS + RF + Modem Hardware....
An Open Source implenentation of a HNB-GW (HomeNodeB-Gateway), implementing the Iuh, IuCS and IuPS interfaces. It aggregates the Iuh links from femtocells (hNodeBs) and presents them as regular IuCS and IuPS towards MSC and SGSN (such as OsmoMSC and OsmoSGSN). It uses M3UA as signaling transport....
This is a first step towards implementing a minimal hNodeB upper layer part, mainly handling HNBAP/RUA/RANAP messages on the Iuh interface. This is not expected to be a full / usable hNodeB anytime soon [if ever].
Osmocom Serving Mobile Location Center
Scalable Smalltalk/Pharo SMSC with SMPP input and SMPP and SS7 output.
Osmocom STP (Signal Transfer Point), implementing SS7 (MTP) routing and SIGTRAN Signalling Gateway functionality. Supports SIGTRAN only, no legacy E1/T1 based signaling links. Currently only MTP-level routing no GTR or GTT yet, but contributions in that area are very welcome....
OsmoTRX is a GSM Radio Modem based on a fork of the OpenBTS Transceiver program. It is intended to be used with the osmo-bts-trx variant of OsmoBTS in order to build GSM base stations with Abis/IP interface from general purpose SDR hardware such as USRP or LimeSDR devices....
pySim is a small command-line tool to program(write to) a variety of programmable sim cards.
|Qualcomm Linux Modems by Quectel & Co||
Information / Research on the internals of Qualcomm Linux based cellular modems available from Quectel and other vendors
|Radio Access Network||
Osmocom Radio Access Network (RAN)
Project about operating ancient, phased-out networking technologies such as TDM, ISDN, PDH, SDH, FDDI, ArcNet, TokenRing and others. The purpose of this is to keep alive the knowledge about the technology, and to be able to present it to interested parties....
Software project for [ab]using DVB-T USB receivers based on RTL2132 as inexpensive SDR receivers
|SDR (Software Defined Radio)|
|SIM card related Projects|