OpenBTS - Create your own personal cellphone network

I really don't know. Like I said it's just research. And it is not in any way a public network. My range is deliberately small. I'm not looking for trouble :)
 
Only if you intend making money, will you have to operate with a "Class ECNS" and "Class ECS" licence, since they are the only ones being allowed. R10k each. http://www.icasa.org.za/

One cannot obtain an "Individual ECNS" or "Individual ECS" licence anymore. Unless you buy someone's, at about R150k to R500k. There seems to be a moratorium placed on them at the moment. http://www.info.gov.za/speeches/2009/09062316251002.htm

Although, you can, as a NPO/Section21, launch with a licence exemption, which is free. :) http://www.ellipsis.co.za/licence-exemption-regulations/ The max fine is R30k then, instead of R1million. You must still conform to consumer regulations, which carry fines of their own.

For WISP operations one needs to get 3 separate licences. http://www.ellipsis.co.za/wapa-regulatory-guide-to-starting-a-wisp/

I feel your best bet to launch with, will be a ECNS and ECS Licence Exemption. http://www.ellipsis.co.za/wp-content...ugust-2008.pdf

You will still require the frequency licence/s.
 
Last edited:
thank you. Now I know.

Luckily I'm not breaking the law at the moment? Right?

Today I tried to intercept gsm signals.

Expect to read about me on my mybroadband news (if I succeed - not too far away).
At the moment I can see IMSI's and locations. Interception of SMS's tomorrow.. :) To intercept calls may be too difficult for me to achieve. but not for a super computer...
maybe I'm just talking nonsense...
 
Yes, if i were you i would find out about licences to spectrum etc.
if any of the spectrum owners find you have caused uneccessary interference on their systems/networks you can be liable for any loss of income as well as a huge fine.

well atleast this is what i was told about an incident between two licencees a few years ago.
 
I'll gladly work with any cellphone operator with this. But I know how they feel about research in SA.
I have no malicious intentions though.
 
You can do it yourself. Just take it step by step.

Join the WUGS http://www.wug.za.net/index.php

The goal of wug.za.net is to integrate all the WUGs around the country and potentially link them together in the future

Your idea and their idea to negate the LLU problem, will work wonders. Then you just add the repeaters for your equipment, to all the high sites. If it won't interfere with each other. Perhaps it can even be integrated with existing equipment.

The last step would be for the WUGS to link into www.teraco.co.za

No more need for telkom.
 
sounds awesome when can I change over? :-)
 
For those who find stuff like this interesting...


000: 41 06 1c 56 f5 10 00 cf - 65 08 79 00 00 64 51 80
001: 31 80 14 7b 2b 2b 2b
0: 41 010000-- Pseudo Length: 16
1: 06 0------- Direction: From originating site
1: 06 -000---- 0 TransactionID
1: 06 ----0110 Radio Resouce Management
2: 1c 00011100 RRsystemInfo4-C
3: 56 655 Mobile Country Code (South Africa)
4: f5 01f Mobile Network Code (Vodacom (Pty) Ltd.)
6: 00 207 [0x00cf] Local Area Code
8: 65 011----- Cell Reselect Hyst. : 6 db RXLEV
8: 65 ---xxxxx Max Tx power level: 5
9: 08 0------- No additional cells in SysInfo 7-8
9: 08 -0------ New establishm cause: not supported
9: 08 --xxxxxx RXLEV Access Min permitted = -110 + 8dB
10: 79 01------ Max. of retransmiss : 2
10: 79 --1110-- slots to spread TX : 32
10: 79 ------0- The cell is barred : no
10: 79 -------1 Cell reestabl.i.cell: not allowed
11: 00 -----0-- Emergency call EC 10: allowed
11: 00 00000--- Acc ctrl cl 11-15: 0 = permitted, 1 = forbidden
11: 00 ------00 Acc ctrl cl 8- 9: 0 = permitted, 1 = forbidden
11: 00 -------0 Ordinary subscribers (8)
11: 00 ------0- Ordinary subscribers (9)
11: 00 -----0-- Emergency call (10): Everyone
11: 00 ----0--- Operator Specific (11)
11: 00 ---0---- Security service (12)
11: 00 --0----- Public service (13)
11: 00 -0------ Emergency service (14)
11: 00 0------- Network Operator (15)
12: 00 00000000 Acc ctrl cl 0- 7: 0 = permitted, 1 = forbidden
12: 00 00000000 Ordinary subscribers (0-7)
13: 64 01100100 Channel Description
14: 51 -----001 Timeslot number: 1
14: 51 01010--- Channel Description: SDCCH/8 + SACCH/C8 or CBCH (SDCCH/8), SC2
15: 80 100----- Training seq. code: 4
15: 80 ---0---- Single channel
16: 31 ........ Absolute RF channel number: 49
17: 80 YYYYYYYY REST OCTETS (3)
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 01 2b 2b 2b 2b 2b 2b 2b - 2b 2b 2b 2b 2b 2b 2b 2b
001: 2b 2b 2b 2b 2b 2b 2b
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 33 2b 2b 2b 2b 2b 2b 2b - 2b 2b 2b 2b 2b 2b 2b 2b
001: 2b 2b 2b 2b 2b 2b 2b
0: 33 001100-- Pseudo Length: 12
1: 2b 0------- Direction: From originating site
1: 2b -010---- 2 TransactionID
1: 2b ----1011 Non-call related SS message
2: 2b 00------ SendSequenceNumber: 0
2: 2b --101011 UNKNOWN
3: 2b XXXXXXXX UNKNOWN DATA (10 bytes)
3: 2b YYYYYYYY REST OCTETS (10)
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 01 2b 2b 2b 2b 2b 2b 2b - 2b 2b 2b 2b 2b 2b 2b 2b
001: 2b 2b 2b 2b 2b 2b 2b
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 01 2b 2b 2b 2b 2b 2b 2b - 2b 2b 2b 2b 2b 2b 2b 2b
001: 2b 2b 2b 2b 2b 2b 2b
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 03 42 0d 06 35 11 2b 2b - 2b 2b 2b 2b 2b 2b 2b 2b
001: 2b 2b 2b 2b 2b 2b 2b
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 01 2b 2b 2b 2b 2b 2b 2b - 2b 2b 2b 2b 2b 2b 2b 2b
001: 2b 2b 2b 2b 2b 2b 2b
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 25 06 21 00 05 f4 80 0c - a9 94 2b 2b 2b 2b 2b 2b
001: 2b 2b 2b 2b 2b 2b 2b
0: 25 001001-- Pseudo Length: 9
1: 06 0------- Direction: From originating site
1: 06 -000---- 0 TransactionID
1: 06 ----0110 Radio Resouce Management
2: 21 00100001 Paging Request Type 1
3: 00 ------00 Page Mode: Normal paging
5: f4 -----100 Type of identity: TMSI/P-TMSI
6: 80 -------- ID(4/even): 800CA994
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 15 06 21 00 01 00 2b 2b - 2b 2b 2b 2b 2b 2b 2b 2b
001: 2b 2b 2b 2b 2b 2b 2b
0: 15 000101-- Pseudo Length: 5
1: 06 0------- Direction: From originating site
1: 06 -000---- 0 TransactionID
1: 06 ----0110 Radio Resouce Management
2: 21 00100001 Paging Request Type 1
3: 00 ------00 Page Mode: Normal paging
5: 00 -----000 Type of identity: No Identity
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 05 09 03 03 49 06 1d 00 - 00 00 00 00 00 00 00 00
001: 76 ff ef e0 00 00 00
0: 05 000001-- Pseudo Length: 1
1: 09 0------- Direction: From originating site
1: 09 -000---- 0 TransactionID
1: 09 ----1001 SMS messages
l2_sms:2401 TRUNKATED (0x0xbfd0f725 - 0x0xbfd0f725)
2: 03 YYYYYYYY REST OCTETS (21)
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 25 06 21 00 05 f4 80 0c - ca f8 2b 2b 2b 2b 2b 2b
001: 2b 2b 2b 2b 2b 2b 2b
0: 25 001001-- Pseudo Length: 9
1: 06 0------- Direction: From originating site
1: 06 -000---- 0 TransactionID
1: 06 ----0110 Radio Resouce Management
2: 21 00100001 Paging Request Type 1
3: 00 ------00 Page Mode: Normal paging
5: f4 -----100 Type of identity: TMSI/P-TMSI
6: 80 -------- ID(4/even): 800CCAF8
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 15 06 21 00 01 00 2b 2b - 2b 2b 2b 2b 2b 2b 2b 2b
001: 2b 2b 2b 2b 2b 2b 2b
0: 15 000101-- Pseudo Length: 5
1: 06 0------- Direction: From originating site
1: 06 -000---- 0 TransactionID
1: 06 ----0110 Radio Resouce Management
2: 21 00100001 Paging Request Type 1
3: 00 ------00 Page Mode: Normal paging
5: 00 -----000 Type of identity: No Identity
HEX l2_data_out_Bbis:462 Format Bbis DATA
000: 31 06 21 00 08 69 55 10 - 08 00 32 32 49 2b 2b 2b
001: 2b 2b 2b 2b 2b 2b 2b
0: 31 001100-- Pseudo Length: 12
1: 06 0------- Direction: From originating site
1: 06 -000---- 0 TransactionID
1: 06 ----0110 Radio Resouce Management
2: 21 00100001 Paging Request Type 1
3: 00 ------00 Page Mode: Normal paging
5: 69 -----001 Type of identity: IMSI
6: 55 -------- ID(7/odd): 6550280103233941

I can see if someone sends a sms... now to check out that "UNKNOWN DATA"
 
Hi all!

I'm trying to fetch openbts 2.3 (Jean Lafitte) by FTPing kestrelsp.com... Does anyone know the psswd for it??? (i've tried a bunch of psswds that i've found but without success)...
 
I dont think v2.3 is openly available. please check the (now moved) openbts wiki on GnuRadio for more info
 
I'll gladly work with any cellphone operator with this. But I know how they feel about research in SA.
I have no malicious intentions though.


Any cellphone operator will gladly make u a slave for R5 million. Please dont settle for less than R500 million.

You have a multi million rand idea in your hands if you can make your ideas and system perfect.

PM - we can talk


DxL - Team
 
OpenBTS website just updated 20 Sep with David Burgess from OpenBTS visit to Burning Man Festival.

Fascinating reading and local thread, thanks floyd for the feedback.

OpenBTS Blog about the Burning Man Festival experience

An article on CNet about the technology competitor cellular provider and the OpenBTS project

The OpenBTS project will be like Mark Spencers Asterisk PBX project driving down costs for open telephony.

Howto provide cellular coverage with OpenBTS using call forward

Interesting FAQ on the kit used at Burning Man 2009
 
Last edited:
This sounds great. How much does ICASA charge for 900mhz licence/spectrum? Where in SA would you buy the necessary equipment, for 10000 clients? 5Km radius. The cheapest equipment.
 
This sounds great. How much does ICASA charge for 900mhz licence/spectrum? Where in SA would you buy the necessary equipment, for 10000 clients? 5Km radius. The cheapest equipment.

PM Floyd at Univ of Stellenbosh, he has a test site up and running at his res
 
Floyd, it sounds to me that you're a "Steve Wozniak" type of person. You're going to need a "Jobs" partner to make this work. I think someone from the WUG-area (as already mentioned) would be perfect to assist you (or point you in the right direction) in rolling this out, I'm sure they had to deal with ICASA and friends when they started.

Perhaps the Apple analogy isn't perfect as I know you don't want to make a huge profit, but otherwise it applies quite well, IMHO anyway.

Good luck!
 
Last edited:
Top
Sign up to the MyBroadband newsletter
X