OsmocomBB Quick Start
来自Jack's Lab
（版本间的差异）
(→Sniffer GSM SMS) |
(→Sniffer GSM SMS) |
||
| 第1,170行： | 第1,170行： | ||
| − | wireshark | + | wireshark 分析日志，过滤SMS协议字段： |
$ tshark -G fields | grep gsm_sms | $ tshark -G fields | grep gsm_sms | ||
2013年12月18日 (三) 11:21的版本
1 编译
取源码：
$ git clone git://git.osmocom.org/osmocom-bb.git $ cd osmocom-bb $ git pull --rebase
准备工具链：
参考这个页面： http://bb.osmocom.org/trac/wiki/GnuArmToolchain
工具链编译完成后：
comcat@Jackslab:/work/toolchain$ ls build gnu-arm-build.2.sh install src comcat@Jackslab:/work/toolchain$ ls install/bin/ arm-elf-addr2line arm-elf-c++ arm-elf-elfedit arm-elf-gcc-4.5.2 arm-elf-gprof arm-elf-nm arm-elf-ranlib arm-elf-strings arm-elf-ar arm-elf-c++filt arm-elf-g++ arm-elf-gccbug arm-elf-ld arm-elf-objcopy arm-elf-readelf arm-elf-strip arm-elf-as arm-elf-cpp arm-elf-gcc arm-elf-gcov arm-elf-ld.bfd arm-elf-objdump arm-elf-size comcat@Jackslab:/work/toolchain$ ls src binutils-2.21.1 binutils-2.21.1a.tar.bz2 gcc-4.5.2 gcc-4.5.2.tar.bz2 newlib-1.19.0 newlib-1.19.0.tar.gz comcat@Jackslab:/work/toolchain$ export PATH=$PATH:/work/toolchain/install/bin
编译 osmocom-bb:
comcat@Jackslab:/work/toolchain$ cd /path/to/osmocom-bb/src comcat@Jackslab:/work/osmocom-bb/src$ make
2 运行
$ cd /path/to/osmocom-bb/src/host/osmocon $ ./osmocon -p /dev/ttyUSB0 -m c123xor ../../target/firmware/board/compal_e88/layer1.compalram.bin got 2 bytes from modem, data looks like: 04 81 .. got 5 bytes from modem, data looks like: 1b f6 02 00 41 ....A got 1 bytes from modem, data looks like: 01 . got 1 bytes from modem, data looks like: 40 @ Received PROMPT1 from phone, responding with CMD read_file(../../target/firmware/board/compal_e88/layer1.compalram.bin): file_size=63140, hdr_len=4, dnload_len=63147 got 1 bytes from modem, data looks like: 1b . got 1 bytes from modem, data looks like: f6 . got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 41 A got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 43 C Received PROMPT2 from phone, starting download handle_write(): 4096 bytes (4096/63147) handle_write(): 4096 bytes (8192/63147) handle_write(): 4096 bytes (12288/63147) handle_write(): 4096 bytes (16384/63147) handle_write(): 4096 bytes (20480/63147) handle_write(): 4096 bytes (24576/63147) handle_write(): 4096 bytes (28672/63147) handle_write(): 4096 bytes (32768/63147) handle_write(): 4096 bytes (36864/63147) handle_write(): 4096 bytes (40960/63147) handle_write(): 4096 bytes (45056/63147) handle_write(): 4096 bytes (49152/63147) handle_write(): 4096 bytes (53248/63147) handle_write(): 4096 bytes (57344/63147) handle_write(): 4096 bytes (61440/63147) handle_write(): 1707 bytes (63147/63147) handle_write(): finished got 1 bytes from modem, data looks like: 1b . got 1 bytes from modem, data looks like: f6 . got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 41 A got 1 bytes from modem, data looks like: 03 . got 1 bytes from modem, data looks like: 42 B Received DOWNLOAD ACK from phone, your code is running now! battery_compal_e88_init: starting up OsmocomBB Layer 1 (revision osmocon_v0.0.0-1749-g1b8f488-modified) ====================================================================== Device ID code: 0xb4fb Device Version code: 0x0000 ARM ID code: 0xfff3 cDSP ID code: 0x0128 Die ID code: ebc90e05ef00d7a1 ====================================================================== REG_DPLL=0x2413 CNTL_ARM_CLK=0xf0a1 CNTL_CLK=0xff91 CNTL_RST=0xfff3 CNTL_ARM_DIV=0xfff9 ====================================================================== Power up simcard: Assert DSP into Reset Releasing DSP from Reset Installing DSP extensions patch Setting some dsp_api.ndb values Setting API NDB parameters Finishing download phase DSP Download Status: 0x0002 DSP API Version: 0x3606 0x0000 LOST 630! BAT-ADC: 586 6 0 0 1023 366 339 223 Charger at 51 mV. Battery at 4006 mV. Charging at 0 mA. Battery capacity is 100%. Battery range is 3199..3999 mV. Battery full at 468 LSB .. full at 585 LSB Charging at 239 LSB (204 mA). BCICTL2=0x3ff battery-info.flags=0x00000000 bat_compal_e88_chg_state=0 ...... ......
另起一个终端运行：
$ cd /path/to/osmocom-bb/src/host/layer23/src/mobile $ sudo ./mobile -i 127.0.0.1 Copyright (C) 2008-2010 ... Contributions by ... License GPLv2+: GNU GPL version 2 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. VTY available on port 4247. No Mobile Station defined, creating: MS '1' <000f> sim.c:1223 init SIM client <0006> gsm48_cc.c:63 init Call Control <0007> gsm480_ss.c:231 init SS <0019> gsm411_sms.c:63 init SMS <0001> gsm48_rr.c:5500 init Radio Ressource process <0005> gsm48_mm.c:1324 init Mobility Management process <0005> gsm48_mm.c:1037 Selecting PLMN SEARCH state, because no SIM. <0002> gsm322.c:5037 init PLMN process <0003> gsm322.c:5038 init Cell Selection process *** Warning: Mobile '1' has default IMEI: 000000000000000 This could relate your identitiy to other users with default IMEI. *** Mobile '1' initialized, please start phone now! <0005> subscriber.c:610 Requesting SIM file 0x2fe2 <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:697 go MF <000f> sim.c:241 SELECT (file=0x3f00) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x00 sw2=0x00) <000f> sim.c:952 command failed <000f> sim.c:151 sending result to callback function (type=1) <0005> subscriber.c:666 SIM reading failed <0005> gsm48_mm.c:4388 (ms 1) Received 'MMR_NREG_REQ' event <0005> gsm48_mm.c:4320 (ms 1) Received 'MM_EVENT_IMSI_DETACH' event in state MM IDLE, PLMN search <0005> gsm48_mm.c:1848 IMSI has been detached. <0005> gsm48_mm.c:1089 Not camping, wait for CS process to camp, it sends us CELL_SELECTED then. <0002> gsm322.c:3818 (ms 1) Event 'EVENT_SIM_REMOVE' for automatic PLMN selection in state 'A0 null' <000e> gsm322.c:1362 SIM is removed <0002> gsm322.c:1363 SIM is removed <0002> gsm322.c:806 new state 'A0 null' -> 'A6 no SIM inserted' <0003> gsm322.c:4049 (ms 1) Event 'EVENT_SIM_REMOVE' for Cell selection in state 'C0 null' <0003> gsm322.c:829 new state 'C0 null' -> 'C6 any cell selection' <0003> gsm322.c:2798 Scanning power for all frequencies. <0003> gsm322.c:2861 Scanning frequencies. (0..124) <0003> gsm322.c:2910 Found signal (ARFCN 1 rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 2 rxlev -89 (21)) <0003> gsm322.c:2910 Found signal (ARFCN 3 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 4 rxlev -99 (11)) <0003> gsm322.c:2910 Found signal (ARFCN 5 rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 6 rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 7 rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 8 rxlev -77 (33)) <0003> gsm322.c:2910 Found signal (ARFCN 9 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 10 rxlev -100 (10)) <0003> gsm322.c:2910 Found signal (ARFCN 11 rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 12 rxlev -94 (16)) <0003> gsm322.c:2910 Found signal (ARFCN 13 rxlev -89 (21)) <0003> gsm322.c:2910 Found signal (ARFCN 14 rxlev -96 (14)) <0003> gsm322.c:2910 Found signal (ARFCN 15 rxlev -94 (16)) <0003> gsm322.c:2910 Found signal (ARFCN 16 rxlev -100 (10)) <0003> gsm322.c:2910 Found signal (ARFCN 17 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 18 rxlev -89 (21)) <0003> gsm322.c:2910 Found signal (ARFCN 19 rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 20 rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 21 rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 22 rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 23 rxlev -69 (41)) <0003> gsm322.c:2910 Found signal (ARFCN 24 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 25 rxlev -78 (32)) <0003> gsm322.c:2910 Found signal (ARFCN 26 rxlev -61 (49)) <0003> gsm322.c:2910 Found signal (ARFCN 27 rxlev -76 (34)) <0003> gsm322.c:2910 Found signal (ARFCN 28 rxlev -63 (47)) <0003> gsm322.c:2910 Found signal (ARFCN 29 rxlev -81 (29)) <0003> gsm322.c:2910 Found signal (ARFCN 30 rxlev -78 (32)) <0003> gsm322.c:2910 Found signal (ARFCN 31 rxlev -80 (30)) <0003> gsm322.c:2910 Found signal (ARFCN 32 rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 33 rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 34 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 35 rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 36 rxlev -67 (43)) <0003> gsm322.c:2910 Found signal (ARFCN 37 rxlev -80 (30)) <0003> gsm322.c:2910 Found signal (ARFCN 38 rxlev -74 (36)) <0003> gsm322.c:2910 Found signal (ARFCN 39 rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 40 rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 41 rxlev -80 (30)) <0003> gsm322.c:2910 Found signal (ARFCN 42 rxlev -74 (36)) <0003> gsm322.c:2910 Found signal (ARFCN 43 rxlev -84 (26)) <0003> gsm322.c:2910 Found signal (ARFCN 44 rxlev -80 (30)) <0003> gsm322.c:2910 Found signal (ARFCN 45 rxlev -84 (26)) <0003> gsm322.c:2910 Found signal (ARFCN 46 rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 47 rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 48 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 49 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 50 rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 51 rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 52 rxlev -84 (26)) <0003> gsm322.c:2910 Found signal (ARFCN 53 rxlev -71 (39)) <0003> gsm322.c:2910 Found signal (ARFCN 54 rxlev -84 (26)) <0003> gsm322.c:2910 Found signal (ARFCN 55 rxlev -96 (14)) <0003> gsm322.c:2910 Found signal (ARFCN 56 rxlev -81 (29)) <0003> gsm322.c:2910 Found signal (ARFCN 57 rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 58 rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 59 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 60 rxlev -65 (45)) <0003> gsm322.c:2910 Found signal (ARFCN 61 rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 62 rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 63 rxlev -73 (37)) <0003> gsm322.c:2910 Found signal (ARFCN 64 rxlev -94 (16)) <0003> gsm322.c:2910 Found signal (ARFCN 65 rxlev -81 (29)) <0003> gsm322.c:2910 Found signal (ARFCN 66 rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 67 rxlev -67 (43)) <0003> gsm322.c:2910 Found signal (ARFCN 68 rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 69 rxlev -89 (21)) <0003> gsm322.c:2910 Found signal (ARFCN 70 rxlev -99 (11)) <0003> gsm322.c:2910 Found signal (ARFCN 71 rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 72 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 73 rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 74 rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 75 rxlev -98 (12)) <0003> gsm322.c:2910 Found signal (ARFCN 76 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 77 rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 78 rxlev -96 (14)) <0003> gsm322.c:2910 Found signal (ARFCN 79 rxlev -92 (18)) <0003> gsm322.c:2910 Found signal (ARFCN 80 rxlev -96 (14)) <0003> gsm322.c:2910 Found signal (ARFCN 81 rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 82 rxlev -97 (13)) <0003> gsm322.c:2910 Found signal (ARFCN 83 rxlev -74 (36)) <0003> gsm322.c:2910 Found signal (ARFCN 84 rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 85 rxlev -67 (43)) <0003> gsm322.c:2910 Found signal (ARFCN 86 rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 87 rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 88 rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 89 rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 90 rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 91 rxlev -67 (43)) <0003> gsm322.c:2910 Found signal (ARFCN 92 rxlev -73 (37)) <0003> gsm322.c:2910 Found signal (ARFCN 93 rxlev -89 (21)) <0003> gsm322.c:2910 Found signal (ARFCN 94 rxlev -67 (43)) <0003> gsm322.c:2910 Found signal (ARFCN 95 rxlev -90 (20)) <0003> gsm322.c:2910 Found signal (ARFCN 96 rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 97 rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 98 rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 99 rxlev -90 (20)) <0003> gsm322.c:2910 Found signal (ARFCN 100 rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 101 rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 102 rxlev -66 (44)) <0003> gsm322.c:2910 Found signal (ARFCN 103 rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 104 rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 105 rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 106 rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 107 rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 108 rxlev -81 (29)) <0003> gsm322.c:2910 Found signal (ARFCN 109 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 110 rxlev -71 (39)) <0003> gsm322.c:2910 Found signal (ARFCN 111 rxlev -78 (32)) <0003> gsm322.c:2910 Found signal (ARFCN 112 rxlev -76 (34)) <0003> gsm322.c:2910 Found signal (ARFCN 113 rxlev -56 (54)) <0003> gsm322.c:2910 Found signal (ARFCN 114 rxlev -71 (39)) <0003> gsm322.c:2910 Found signal (ARFCN 115 rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 116 rxlev -78 (32)) <0003> gsm322.c:2910 Found signal (ARFCN 117 rxlev -67 (43)) <0003> gsm322.c:2910 Found signal (ARFCN 118 rxlev -70 (40)) <0003> gsm322.c:2910 Found signal (ARFCN 119 rxlev -73 (37)) <0003> gsm322.c:2910 Found signal (ARFCN 120 rxlev -70 (40)) <0003> gsm322.c:2910 Found signal (ARFCN 121 rxlev -68 (42)) <0003> gsm322.c:2910 Found signal (ARFCN 122 rxlev -78 (32)) <0003> gsm322.c:2910 Found signal (ARFCN 123 rxlev -80 (30)) <0003> gsm322.c:2910 Found signal (ARFCN 124 rxlev -72 (38)) <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2798 Scanning power for all frequencies. <0003> gsm322.c:2861 Scanning frequencies. (512(DCS)..885(DCS)) <0003> gsm322.c:2910 Found signal (ARFCN 512(DCS) rxlev -90 (20)) <0003> gsm322.c:2910 Found signal (ARFCN 513(DCS) rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 514(DCS) rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 515(DCS) rxlev -92 (18)) <0003> gsm322.c:2910 Found signal (ARFCN 516(DCS) rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 517(DCS) rxlev -61 (49)) <0003> gsm322.c:2910 Found signal (ARFCN 518(DCS) rxlev -74 (36)) <0003> gsm322.c:2910 Found signal (ARFCN 519(DCS) rxlev -84 (26)) <0003> gsm322.c:2910 Found signal (ARFCN 520(DCS) rxlev -77 (33)) <0003> gsm322.c:2910 Found signal (ARFCN 521(DCS) rxlev -65 (45)) <0003> gsm322.c:2910 Found signal (ARFCN 522(DCS) rxlev -81 (29)) <0003> gsm322.c:2910 Found signal (ARFCN 523(DCS) rxlev -81 (29)) <0003> gsm322.c:2910 Found signal (ARFCN 524(DCS) rxlev -80 (30)) <0003> gsm322.c:2910 Found signal (ARFCN 525(DCS) rxlev -80 (30)) <0003> gsm322.c:2910 Found signal (ARFCN 526(DCS) rxlev -61 (49)) <0003> gsm322.c:2910 Found signal (ARFCN 527(DCS) rxlev -75 (35)) <0003> gsm322.c:2910 Found signal (ARFCN 528(DCS) rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 529(DCS) rxlev -60 (50)) <0003> gsm322.c:2910 Found signal (ARFCN 530(DCS) rxlev -77 (33)) <0003> gsm322.c:2910 Found signal (ARFCN 531(DCS) rxlev -81 (29)) <0003> gsm322.c:2910 Found signal (ARFCN 532(DCS) rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 533(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 534(DCS) rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 535(DCS) rxlev -76 (34)) <0003> gsm322.c:2910 Found signal (ARFCN 536(DCS) rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 537(DCS) rxlev -90 (20)) <0003> gsm322.c:2910 Found signal (ARFCN 538(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 539(DCS) rxlev -67 (43)) <0003> gsm322.c:2910 Found signal (ARFCN 540(DCS) rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 541(DCS) rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 542(DCS) rxlev -73 (37)) <0003> gsm322.c:2910 Found signal (ARFCN 543(DCS) rxlev -81 (29)) <0003> gsm322.c:2910 Found signal (ARFCN 544(DCS) rxlev -68 (42)) <0003> gsm322.c:2910 Found signal (ARFCN 545(DCS) rxlev -78 (32)) <0003> gsm322.c:2910 Found signal (ARFCN 546(DCS) rxlev -71 (39)) <0003> gsm322.c:2910 Found signal (ARFCN 547(DCS) rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 548(DCS) rxlev -90 (20)) <0003> gsm322.c:2910 Found signal (ARFCN 549(DCS) rxlev -96 (14)) <0003> gsm322.c:2910 Found signal (ARFCN 550(DCS) rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 551(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 552(DCS) rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 553(DCS) rxlev -90 (20)) <0003> gsm322.c:2910 Found signal (ARFCN 554(DCS) rxlev -97 (13)) <0003> gsm322.c:2910 Found signal (ARFCN 555(DCS) rxlev -98 (12)) <0003> gsm322.c:2910 Found signal (ARFCN 556(DCS) rxlev -81 (29)) <0003> gsm322.c:2910 Found signal (ARFCN 557(DCS) rxlev -92 (18)) <0003> gsm322.c:2910 Found signal (ARFCN 558(DCS) rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 559(DCS) rxlev -92 (18)) <0003> gsm322.c:2910 Found signal (ARFCN 560(DCS) rxlev -96 (14)) <0003> gsm322.c:2910 Found signal (ARFCN 561(DCS) rxlev -89 (21)) <0003> gsm322.c:2910 Found signal (ARFCN 562(DCS) rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 563(DCS) rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 564(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 565(DCS) rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 566(DCS) rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 567(DCS) rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 568(DCS) rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 569(DCS) rxlev -89 (21)) <0003> gsm322.c:2910 Found signal (ARFCN 570(DCS) rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 571(DCS) rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 572(DCS) rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 573(DCS) rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 574(DCS) rxlev -76 (34)) <0003> gsm322.c:2910 Found signal (ARFCN 575(DCS) rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 576(DCS) rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 577(DCS) rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 578(DCS) rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 579(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 580(DCS) rxlev -100 (10)) <0003> gsm322.c:2910 Found signal (ARFCN 581(DCS) rxlev -96 (14)) <0003> gsm322.c:2910 Found signal (ARFCN 582(DCS) rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 583(DCS) rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 584(DCS) rxlev -68 (42)) <0003> gsm322.c:2910 Found signal (ARFCN 585(DCS) rxlev -98 (12)) <0003> gsm322.c:2910 Found signal (ARFCN 586(DCS) rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 587(DCS) rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 588(DCS) rxlev -98 (12)) <0003> gsm322.c:2910 Found signal (ARFCN 589(DCS) rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 590(DCS) rxlev -98 (12)) <0003> gsm322.c:2910 Found signal (ARFCN 591(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 592(DCS) rxlev -69 (41)) <0003> gsm322.c:2910 Found signal (ARFCN 593(DCS) rxlev -98 (12)) <0003> gsm322.c:2910 Found signal (ARFCN 594(DCS) rxlev -100 (10)) <0003> gsm322.c:2910 Found signal (ARFCN 595(DCS) rxlev -96 (14)) <0003> gsm322.c:2910 Found signal (ARFCN 596(DCS) rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 597(DCS) rxlev -65 (45)) <0003> gsm322.c:2910 Found signal (ARFCN 598(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 599(DCS) rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 600(DCS) rxlev -97 (13)) <0003> gsm322.c:2910 Found signal (ARFCN 601(DCS) rxlev -90 (20)) <0003> gsm322.c:2910 Found signal (ARFCN 602(DCS) rxlev -77 (33)) <0003> gsm322.c:2910 Found signal (ARFCN 603(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 604(DCS) rxlev -92 (18)) <0003> gsm322.c:2910 Found signal (ARFCN 605(DCS) rxlev -89 (21)) <0003> gsm322.c:2910 Found signal (ARFCN 606(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 607(DCS) rxlev -100 (10)) <0003> gsm322.c:2910 Found signal (ARFCN 608(DCS) rxlev -64 (46)) <0003> gsm322.c:2910 Found signal (ARFCN 609(DCS) rxlev -84 (26)) <0003> gsm322.c:2910 Found signal (ARFCN 610(DCS) rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 611(DCS) rxlev -80 (30)) <0003> gsm322.c:2910 Found signal (ARFCN 612(DCS) rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 613(DCS) rxlev -74 (36)) <0003> gsm322.c:2910 Found signal (ARFCN 614(DCS) rxlev -75 (35)) <0003> gsm322.c:2910 Found signal (ARFCN 615(DCS) rxlev -99 (11)) <0003> gsm322.c:2910 Found signal (ARFCN 616(DCS) rxlev -102 (8)) <0003> gsm322.c:2910 Found signal (ARFCN 617(DCS) rxlev -103 (7)) <0003> gsm322.c:2910 Found signal (ARFCN 618(DCS) rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 619(DCS) rxlev -67 (43)) <0003> gsm322.c:2910 Found signal (ARFCN 620(DCS) rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 621(DCS) rxlev -70 (40)) <0003> gsm322.c:2910 Found signal (ARFCN 622(DCS) rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 623(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 624(DCS) rxlev -97 (13)) <0003> gsm322.c:2910 Found signal (ARFCN 625(DCS) rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 626(DCS) rxlev -63 (47)) <0003> gsm322.c:2910 Found signal (ARFCN 627(DCS) rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 628(DCS) rxlev -90 (20)) <0003> gsm322.c:2910 Found signal (ARFCN 629(DCS) rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 630(DCS) rxlev -97 (13)) <0003> gsm322.c:2910 Found signal (ARFCN 631(DCS) rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 632(DCS) rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 633(DCS) rxlev -75 (35)) <0003> gsm322.c:2910 Found signal (ARFCN 634(DCS) rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 635(DCS) rxlev -92 (18)) <0003> gsm322.c:2910 Found signal (ARFCN 636(DCS) rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 637(DCS) rxlev -78 (32)) <0003> gsm322.c:2910 Found signal (ARFCN 638(DCS) rxlev -80 (30)) <0003> gsm322.c:2910 Found signal (ARFCN 639(DCS) rxlev -77 (33)) <0003> gsm322.c:2910 Found signal (ARFCN 640(DCS) rxlev -74 (36)) <0003> gsm322.c:2910 Found signal (ARFCN 641(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 642(DCS) rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 643(DCS) rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 644(DCS) rxlev -78 (32)) <0003> gsm322.c:2910 Found signal (ARFCN 645(DCS) rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 646(DCS) rxlev -73 (37)) <0003> gsm322.c:2910 Found signal (ARFCN 647(DCS) rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 648(DCS) rxlev -77 (33)) <0003> gsm322.c:2910 Found signal (ARFCN 649(DCS) rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 650(DCS) rxlev -69 (41)) <0003> gsm322.c:2910 Found signal (ARFCN 651(DCS) rxlev -78 (32)) <0003> gsm322.c:2910 Found signal (ARFCN 652(DCS) rxlev -74 (36)) <0003> gsm322.c:2910 Found signal (ARFCN 653(DCS) rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 654(DCS) rxlev -73 (37)) <0003> gsm322.c:2910 Found signal (ARFCN 655(DCS) rxlev -72 (38)) <0003> gsm322.c:2910 Found signal (ARFCN 656(DCS) rxlev -72 (38)) <0003> gsm322.c:2910 Found signal (ARFCN 657(DCS) rxlev -72 (38)) <0003> gsm322.c:2910 Found signal (ARFCN 658(DCS) rxlev -78 (32)) <0003> gsm322.c:2910 Found signal (ARFCN 659(DCS) rxlev -81 (29)) <0003> gsm322.c:2910 Found signal (ARFCN 660(DCS) rxlev -74 (36)) <0003> gsm322.c:2910 Found signal (ARFCN 661(DCS) rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 662(DCS) rxlev -82 (28)) <0003> gsm322.c:2910 Found signal (ARFCN 663(DCS) rxlev -73 (37)) <0003> gsm322.c:2910 Found signal (ARFCN 664(DCS) rxlev -84 (26)) <0003> gsm322.c:2910 Found signal (ARFCN 665(DCS) rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 666(DCS) rxlev -76 (34)) <0003> gsm322.c:2910 Found signal (ARFCN 667(DCS) rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 668(DCS) rxlev -85 (25)) <0003> gsm322.c:2910 Found signal (ARFCN 669(DCS) rxlev -98 (12)) <0003> gsm322.c:2910 Found signal (ARFCN 670(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 671(DCS) rxlev -98 (12)) <0003> gsm322.c:2910 Found signal (ARFCN 672(DCS) rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 673(DCS) rxlev -100 (10)) <0003> gsm322.c:2910 Found signal (ARFCN 674(DCS) rxlev -84 (26)) <0003> gsm322.c:2910 Found signal (ARFCN 675(DCS) rxlev -69 (41)) <0003> gsm322.c:2910 Found signal (ARFCN 676(DCS) rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 677(DCS) rxlev -102 (8)) <0003> gsm322.c:2910 Found signal (ARFCN 678(DCS) rxlev -100 (10)) <0003> gsm322.c:2910 Found signal (ARFCN 679(DCS) rxlev -97 (13)) <0003> gsm322.c:2910 Found signal (ARFCN 680(DCS) rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 681(DCS) rxlev -66 (44)) <0003> gsm322.c:2910 Found signal (ARFCN 682(DCS) rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 683(DCS) rxlev -100 (10)) <0003> gsm322.c:2910 Found signal (ARFCN 684(DCS) rxlev -92 (18)) <0003> gsm322.c:2910 Found signal (ARFCN 685(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 686(DCS) rxlev -90 (20)) <0003> gsm322.c:2910 Found signal (ARFCN 687(DCS) rxlev -72 (38)) <0003> gsm322.c:2910 Found signal (ARFCN 688(DCS) rxlev -89 (21)) <0003> gsm322.c:2910 Found signal (ARFCN 689(DCS) rxlev -83 (27)) <0003> gsm322.c:2910 Found signal (ARFCN 690(DCS) rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 691(DCS) rxlev -99 (11)) <0003> gsm322.c:2910 Found signal (ARFCN 692(DCS) rxlev -92 (18)) <0003> gsm322.c:2910 Found signal (ARFCN 693(DCS) rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 694(DCS) rxlev -84 (26)) <0003> gsm322.c:2910 Found signal (ARFCN 695(DCS) rxlev -80 (30)) <0003> gsm322.c:2910 Found signal (ARFCN 696(DCS) rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 697(DCS) rxlev -100 (10)) <0003> gsm322.c:2910 Found signal (ARFCN 698(DCS) rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 699(DCS) rxlev -94 (16)) <0003> gsm322.c:2910 Found signal (ARFCN 700(DCS) rxlev -80 (30)) <0003> gsm322.c:2910 Found signal (ARFCN 701(DCS) rxlev -89 (21)) <0003> gsm322.c:2910 Found signal (ARFCN 702(DCS) rxlev -101 (9)) <0003> gsm322.c:2910 Found signal (ARFCN 703(DCS) rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 704(DCS) rxlev -101 (9)) <0003> gsm322.c:2910 Found signal (ARFCN 705(DCS) rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 706(DCS) rxlev -84 (26)) <0003> gsm322.c:2910 Found signal (ARFCN 707(DCS) rxlev -102 (8)) <0003> gsm322.c:2910 Found signal (ARFCN 708(DCS) rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 709(DCS) rxlev -91 (19)) <0003> gsm322.c:2910 Found signal (ARFCN 710(DCS) rxlev -100 (10)) <0003> gsm322.c:2910 Found signal (ARFCN 711(DCS) rxlev -84 (26)) <0003> gsm322.c:2910 Found signal (ARFCN 712(DCS) rxlev -94 (16)) <0003> gsm322.c:2910 Found signal (ARFCN 713(DCS) rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 714(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 715(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 716(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 717(DCS) rxlev -89 (21)) <0003> gsm322.c:2910 Found signal (ARFCN 718(DCS) rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 719(DCS) rxlev -96 (14)) <0003> gsm322.c:2910 Found signal (ARFCN 720(DCS) rxlev -92 (18)) <0003> gsm322.c:2910 Found signal (ARFCN 721(DCS) rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 722(DCS) rxlev -79 (31)) <0003> gsm322.c:2910 Found signal (ARFCN 723(DCS) rxlev -86 (24)) <0003> gsm322.c:2910 Found signal (ARFCN 724(DCS) rxlev -87 (23)) <0003> gsm322.c:2910 Found signal (ARFCN 725(DCS) rxlev -102 (8)) <0003> gsm322.c:2910 Found signal (ARFCN 726(DCS) rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 727(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 728(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 729(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 730(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 732(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 734(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 735(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 736(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 741(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 742(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 744(DCS) rxlev -99 (11)) <0003> gsm322.c:2910 Found signal (ARFCN 745(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 746(DCS) rxlev -95 (15)) <0003> gsm322.c:2910 Found signal (ARFCN 747(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 748(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 749(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 751(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 752(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 753(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 754(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 755(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 756(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 757(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 758(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 759(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 760(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 761(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 762(DCS) rxlev -103 (7)) <0003> gsm322.c:2910 Found signal (ARFCN 764(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 765(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 767(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 768(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 769(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 770(DCS) rxlev -103 (7)) <0003> gsm322.c:2910 Found signal (ARFCN 771(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 772(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 773(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 774(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 775(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 777(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 778(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 779(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 780(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 781(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 783(DCS) rxlev -102 (8)) <0003> gsm322.c:2910 Found signal (ARFCN 784(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 785(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 786(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 787(DCS) rxlev -97 (13)) <0003> gsm322.c:2910 Found signal (ARFCN 790(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 791(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 792(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 793(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 794(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 795(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 796(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 797(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 798(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 799(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 800(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 801(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 803(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 804(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 805(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 806(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 807(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 808(DCS) rxlev -103 (7)) <0003> gsm322.c:2910 Found signal (ARFCN 809(DCS) rxlev -101 (9)) <0003> gsm322.c:2910 Found signal (ARFCN 810(DCS) rxlev -103 (7)) <0003> gsm322.c:2910 Found signal (ARFCN 811(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 813(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 814(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 816(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 817(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 818(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 819(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 820(DCS) rxlev -101 (9)) <0003> gsm322.c:2910 Found signal (ARFCN 821(DCS) rxlev -102 (8)) <0003> gsm322.c:2910 Found signal (ARFCN 822(DCS) rxlev -103 (7)) <0003> gsm322.c:2910 Found signal (ARFCN 823(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 824(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 826(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 827(DCS) rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 830(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 841(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 842(DCS) rxlev -101 (9)) <0003> gsm322.c:2910 Found signal (ARFCN 844(DCS) rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 861(DCS) rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 862(DCS) rxlev -104 (6)) <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2798 Scanning power for all frequencies. <0003> gsm322.c:2861 Scanning frequencies. (955..1023) <0003> gsm322.c:2910 Found signal (ARFCN 956 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 969 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 985 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 987 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 988 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 992 rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 994 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 995 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 996 rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 997 rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 998 rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 999 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 1000 rxlev -103 (7)) <0003> gsm322.c:2910 Found signal (ARFCN 1001 rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 1002 rxlev -105 (5)) <0003> gsm322.c:2910 Found signal (ARFCN 1003 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 1004 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 1006 rxlev -99 (11)) <0003> gsm322.c:2910 Found signal (ARFCN 1012 rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 1015 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 1018 rxlev -106 (4)) <0003> gsm322.c:2910 Found signal (ARFCN 1021 rxlev -104 (6)) <0003> gsm322.c:2910 Found signal (ARFCN 1023 rxlev -106 (4)) <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2798 Scanning power for all frequencies. <0003> gsm322.c:2836 Found 451 frequencies. <0003> gsm322.c:2255 Scanning frequency 113 (rxlev -56). <0003> gsm322.c:474 Sync to ARFCN=113 rxlev=-56 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 30 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=113 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 529(DCS) (rxlev -60). <0003> gsm322.c:474 Sync to ARFCN=529(DCS) rxlev=-60 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 40 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=529(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 526(DCS) (rxlev -61). <0003> gsm322.c:474 Sync to ARFCN=526(DCS) rxlev=-61 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 39 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=526(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 517(DCS) (rxlev -61). <0003> gsm322.c:474 Sync to ARFCN=517(DCS) rxlev=-61 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 38 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=517(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 26 (rxlev -61). <0003> gsm322.c:474 Sync to ARFCN=26 rxlev=-61 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 29 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=26 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 626(DCS) (rxlev -63). <0003> gsm322.c:474 Sync to ARFCN=626(DCS) rxlev=-63 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 37 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=626(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 28 (rxlev -63). <0003> gsm322.c:474 Sync to ARFCN=28 rxlev=-63 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 28 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=28 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 608(DCS) (rxlev -64). <0003> gsm322.c:474 Sync to ARFCN=608(DCS) rxlev=-64 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 36 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=608(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 597(DCS) (rxlev -65). <0003> gsm322.c:474 Sync to ARFCN=597(DCS) rxlev=-65 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 35 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=597(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 521(DCS) (rxlev -65). <0003> gsm322.c:474 Sync to ARFCN=521(DCS) rxlev=-65 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 34 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=521(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 60 (rxlev -65). <0003> gsm322.c:474 Sync to ARFCN=60 rxlev=-65 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 27 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=60 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 681(DCS) (rxlev -66). <0003> gsm322.c:474 Sync to ARFCN=681(DCS) rxlev=-66 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 33 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=681(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 102 (rxlev -66). <0003> gsm322.c:474 Sync to ARFCN=102 rxlev=-66 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 26 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=102 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 619(DCS) (rxlev -67). <0003> gsm322.c:474 Sync to ARFCN=619(DCS) rxlev=-67 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 32 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=619(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 539(DCS) (rxlev -67). <0003> gsm322.c:474 Sync to ARFCN=539(DCS) rxlev=-67 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 31 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=539(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 117 (rxlev -67). <0003> gsm322.c:474 Sync to ARFCN=117 rxlev=-67 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 25 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=117 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 94 (rxlev -67). <0003> gsm322.c:474 Sync to ARFCN=94 rxlev=-67 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 24 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=94 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 91 (rxlev -67). <0003> gsm322.c:474 Sync to ARFCN=91 rxlev=-67 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 23 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=91 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 85 (rxlev -67). <0003> gsm322.c:474 Sync to ARFCN=85 rxlev=-67 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 22 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=85 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 67 (rxlev -67). <0003> gsm322.c:474 Sync to ARFCN=67 rxlev=-67 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 21 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=67 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 36 (rxlev -67). <0003> gsm322.c:474 Sync to ARFCN=36 rxlev=-67 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 20 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=36 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 584(DCS) (rxlev -68). <0003> gsm322.c:474 Sync to ARFCN=584(DCS) rxlev=-68 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 30 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=584(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 544(DCS) (rxlev -68). <0003> gsm322.c:474 Sync to ARFCN=544(DCS) rxlev=-68 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 29 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=544(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 121 (rxlev -68). <0003> gsm322.c:474 Sync to ARFCN=121 rxlev=-68 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 19 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=121 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 675(DCS) (rxlev -69). <0003> gsm322.c:474 Sync to ARFCN=675(DCS) rxlev=-69 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 28 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=675(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 650(DCS) (rxlev -69). <0003> gsm322.c:474 Sync to ARFCN=650(DCS) rxlev=-69 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 27 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=650(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 592(DCS) (rxlev -69). <0003> gsm322.c:474 Sync to ARFCN=592(DCS) rxlev=-69 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 26 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=592(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 23 (rxlev -69). <0003> gsm322.c:474 Sync to ARFCN=23 rxlev=-69 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 18 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=23 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 621(DCS) (rxlev -70). <0003> gsm322.c:474 Sync to ARFCN=621(DCS) rxlev=-70 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 25 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=621(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 120 (rxlev -70). <0003> gsm322.c:474 Sync to ARFCN=120 rxlev=-70 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 17 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=120 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 118 (rxlev -70). <0003> gsm322.c:474 Sync to ARFCN=118 rxlev=-70 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 16 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=118 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 546(DCS) (rxlev -71). <0003> gsm322.c:474 Sync to ARFCN=546(DCS) rxlev=-71 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 24 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=546(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 114 (rxlev -71). <0003> gsm322.c:474 Sync to ARFCN=114 rxlev=-71 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 15 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=114 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 110 (rxlev -71). <0003> gsm322.c:474 Sync to ARFCN=110 rxlev=-71 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 14 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=110 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 53 (rxlev -71). <0003> gsm322.c:474 Sync to ARFCN=53 rxlev=-71 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 13 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=53 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 687(DCS) (rxlev -72). <0003> gsm322.c:474 Sync to ARFCN=687(DCS) rxlev=-72 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 23 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=687(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 657(DCS) (rxlev -72). <0003> gsm322.c:474 Sync to ARFCN=657(DCS) rxlev=-72 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 22 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=657(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 656(DCS) (rxlev -72). <0003> gsm322.c:474 Sync to ARFCN=656(DCS) rxlev=-72 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 21 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=656(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 655(DCS) (rxlev -72). <0003> gsm322.c:474 Sync to ARFCN=655(DCS) rxlev=-72 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 20 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=655(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 124 (rxlev -72). <0003> gsm322.c:474 Sync to ARFCN=124 rxlev=-72 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 12 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=124 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 663(DCS) (rxlev -73). <0003> gsm322.c:474 Sync to ARFCN=663(DCS) rxlev=-73 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 19 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=663(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 654(DCS) (rxlev -73). <0003> gsm322.c:474 Sync to ARFCN=654(DCS) rxlev=-73 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 18 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=654(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 646(DCS) (rxlev -73). <0003> gsm322.c:474 Sync to ARFCN=646(DCS) rxlev=-73 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 17 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=646(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 542(DCS) (rxlev -73). <0003> gsm322.c:474 Sync to ARFCN=542(DCS) rxlev=-73 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 16 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=542(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 119 (rxlev -73). <0003> gsm322.c:474 Sync to ARFCN=119 rxlev=-73 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 11 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=119 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 92 (rxlev -73). <0003> gsm322.c:474 Sync to ARFCN=92 rxlev=-73 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 10 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=92 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 63 (rxlev -73). <0003> gsm322.c:474 Sync to ARFCN=63 rxlev=-73 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 9 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=63 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 660(DCS) (rxlev -74). <0003> gsm322.c:474 Sync to ARFCN=660(DCS) rxlev=-74 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 15 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=660(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 652(DCS) (rxlev -74). <0003> gsm322.c:474 Sync to ARFCN=652(DCS) rxlev=-74 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 14 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=652(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 640(DCS) (rxlev -74). <0003> gsm322.c:474 Sync to ARFCN=640(DCS) rxlev=-74 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 13 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=640(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 613(DCS) (rxlev -74). <0003> gsm322.c:474 Sync to ARFCN=613(DCS) rxlev=-74 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 12 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=613(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 518(DCS) (rxlev -74). <0003> gsm322.c:474 Sync to ARFCN=518(DCS) rxlev=-74 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 11 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=518(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 83 (rxlev -74). <0003> gsm322.c:474 Sync to ARFCN=83 rxlev=-74 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 8 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=83 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 42 (rxlev -74). <0003> gsm322.c:474 Sync to ARFCN=42 rxlev=-74 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 7 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=42 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 38 (rxlev -74). <0003> gsm322.c:474 Sync to ARFCN=38 rxlev=-74 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 6 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=38 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 633(DCS) (rxlev -75). <0003> gsm322.c:474 Sync to ARFCN=633(DCS) rxlev=-75 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 10 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=633(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 614(DCS) (rxlev -75). <0003> gsm322.c:474 Sync to ARFCN=614(DCS) rxlev=-75 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 9 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=614(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 527(DCS) (rxlev -75). <0003> gsm322.c:474 Sync to ARFCN=527(DCS) rxlev=-75 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 8 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=527(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 666(DCS) (rxlev -76). <0003> gsm322.c:474 Sync to ARFCN=666(DCS) rxlev=-76 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 7 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=666(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 574(DCS) (rxlev -76). <0003> gsm322.c:474 Sync to ARFCN=574(DCS) rxlev=-76 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 6 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=574(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 535(DCS) (rxlev -76). <0003> gsm322.c:474 Sync to ARFCN=535(DCS) rxlev=-76 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 5 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=535(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 112 (rxlev -76). <0003> gsm322.c:474 Sync to ARFCN=112 rxlev=-76 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 5 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=112 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 27 (rxlev -76). <0003> gsm322.c:474 Sync to ARFCN=27 rxlev=-76 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 4 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=27 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 648(DCS) (rxlev -77). <0003> gsm322.c:474 Sync to ARFCN=648(DCS) rxlev=-77 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 4 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=648(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 639(DCS) (rxlev -77). <0003> gsm322.c:474 Sync to ARFCN=639(DCS) rxlev=-77 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 3 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=639(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 602(DCS) (rxlev -77). <0003> gsm322.c:474 Sync to ARFCN=602(DCS) rxlev=-77 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 2 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=602(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 530(DCS) (rxlev -77). <0003> gsm322.c:474 Sync to ARFCN=530(DCS) rxlev=-77 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 1 frequencies left in band 512..885 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=530(DCS) <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 8 (rxlev -77). <0003> gsm322.c:474 Sync to ARFCN=8 rxlev=-77 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 3 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=8 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 122 (rxlev -78). <0003> gsm322.c:474 Sync to ARFCN=122 rxlev=-78 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 2 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=122 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:2255 Scanning frequency 116 (rxlev -78). <0003> gsm322.c:474 Sync to ARFCN=116 rxlev=-78 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2275 1 frequencies left in band 955..124 <0003> gsm322.c:3003 Channel sync error. <0003> gsm322.c:3008 free sysinfo ARFCN=116 <0003> gsm322.c:2741 Cell selection failed, sync timeout. <0003> gsm322.c:527 ARFCN |MCC |MNC |LAC |cell ID|forb.LA|prio |min-db |max-pwr|rx-lev <0003> gsm322.c:527 -------+-------+-------+-------+-------+-------+-------+-------+-------+------- <0003> gsm322.c:527 <0003> gsm322.c:2131 Cell search finished without result. <0003> gsm322.c:829 new state 'C6 any cell selection' -> 'C0 null' <0002> gsm322.c:3818 (ms 1) Event 'EVENT_NO_CELL_FOUND' for automatic PLMN selection in state 'A6 no SIM inserted' <0003> gsm322.c:4049 (ms 1) Event 'EVENT_NO_CELL_FOUND' for Cell selection in state 'C0 null' <0003> gsm322.c:829 new state 'C0 null' -> 'C6 any cell selection' <0003> gsm322.c:2798 Scanning power for all frequencies. <0003> gsm322.c:2861 Scanning frequencies. (0..124) <0005> gsm48_mm.c:4320 (ms 1) Received 'MM_EVENT_NO_CELL_FOUND' event in state MM IDLE, PLMN search <0005> gsm48_mm.c:909 new MM IDLE state PLMN search -> no cell available <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2798 Scanning power for all frequencies. <0003> gsm322.c:2861 Scanning frequencies. (512(DCS)..885(DCS)) <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2798 Scanning power for all frequencies. <0003> gsm322.c:2861 Scanning frequencies. (955..1023) <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2798 Scanning power for all frequencies. <0003> gsm322.c:2820 Found no frequency. <0003> gsm322.c:2131 Cell search finished without result. <0003> gsm322.c:829 new state 'C6 any cell selection' -> 'C0 null' <0002> gsm322.c:3818 (ms 1) Event 'EVENT_NO_CELL_FOUND' for automatic PLMN selection in state 'A6 no SIM inserted' <0003> gsm322.c:4049 (ms 1) Event 'EVENT_NO_CELL_FOUND' for Cell selection in state 'C0 null' <0003> gsm322.c:829 new state 'C0 null' -> 'C6 any cell selection' <0003> gsm322.c:2798 Scanning power for all frequencies. <0003> gsm322.c:2861 Scanning frequencies. (0..124)
再开启一个终端，就能 telnet 到 4247 端口，获取一个 OpenBSC 控制接口：
comcat@Jackslab:/$ telnet localhost 4247 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. Welcome to the OsmocomBB control interface OsmocomBB> enable OsmocomBB# help This VTY provides advanced help features. When you need help, anytime at the command line please press '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1. Full help is available when you are ready to enter a command argument (e.g. 'show ?') and describes each possible argument. 2. Partial help is provided when an abbreviated argument is entered and you want to know what arguments match the input (e.g. 'show me?'.) OsmocomBB# help Description of the interactive help system list Print command list write Write running configuration to memory, network, or terminal show Show running system information exit Exit current mode and down to previous mode disable Turn off privileged mode command configure Configuration from vty interface copy Copy configuration terminal Set terminal line parameters who Display who is on vty monitor Monitor... no Negate a command or set its defaults off Turn mobiles off (shutdown) and exit sim SIM actions network Network ... call Make a call sms Send an SMS service Send a Supplementary Service request test Manually trigger cell re-selection delete Delete OsmocomBB# sim reader 1 OsmocomBB# % (MS 1) % SIM failed, replace SIM! OsmocomBB#
3 Sniffer GSM SMS
国内的GSM短消息，基本都是明文传输
# 查找基站的channel，即ARFCN= 后面的值 $ cd /path/to/osmocom-bb/src/host/layer23/src/misc/ $ ./cell_log # 扫描对应的channel 52 $ /path/to/osmocom-bb/src/host/layer23/src/misc/ccch_scan -a 53 -i 127.0.0.1 # 捕捉包，图像界面的 'Filter' 里写 'gsm_sms' $ sudo wireshark -k -i lo -f 'port 4729'
保存日志：
$ dumpcap -i lo -w /tmp/a.log
wireshark 分析日志，过滤SMS协议字段：
$ tshark -G fields | grep gsm_sms
