iListener：一個gsm的增強探測器發佈

以前軟體無線電sdr的課題結束了，如今唸的PhD也已經轉向無線局域網的研究領域，我打算把全部代碼開源，基於gnuradio3.4.1的GSM探測項目。

是在以前的airprobe修改的，可是支持hopping 和 上行的解調解析，同時進行過「寬帶」接收的實驗，驗證了可行性。裏邊什麼內容，我就不在這裏過多的做介紹了。 很是感謝一塊兒參加課題的組員，  Howard Wong，zheng xiang cai 還有個人adviser prof. shaohua qin

 

代碼也比較久了，有些不記得，這一分估計沒包含寬帶接收部分，是用本身生產的usrp1和dbsrx做的項目系統原型。這個是對gnu的貢獻，拿的是gnu的牌照。但願對你們的學習有幫助，不涉及任何的商業或者其餘，咱們也不求什麼回報。若是代碼對誰有幫助，但願你告訴我一聲，同時但願註明出處。開源萬歲！XD

 

代碼在個人github：https://github.com/RabbitNick/iListener

 

同時貼一個英文readme:

 

iListener
=========

Full Hopping Channels, Uplink and Downlink GSM receiver base on Airprobe


The project was started in 2011, and till the end of the project iListener can capture the whole hopping channels.
(i.e. all the traffic between multi-handsets and BTS together)

And uplink data from handset too.

The output is an XML is the same from gammu by a  Nokia 3310 which can be read by Wireshark.


Our project has been closed last year, and now we decide to open the source as it might be useful for someone.



There are two parts: server and gsm-receiver


gsm-receiver is just the gsm-receiver from Airprobe. 
We modified some codes so it can receive and decode the signals in other channels beside the (FCCH), 
that's the uplink or hopping traffic. Instead of adjusting the ARFCN on the USRP, we use multi-USRP together 
in order to capture all the traffic.

Then, it sends to server to rebuild the GSM frames.


In the case of multichannels hopping are deployed in the base station, 
many instands of gsm-receiver are turned on at the same time to recieve the signals.

The theory is, USRP/1 has two channels, we use RX-A to listen the FCCH, 
the other channels/Uplink channel are in sync with FCCH, we assigns RX-B to listen this channel.


Theoretically, futher synchronization can be deployed over many USRP/1 with DBSRX,
so the hopping channels can be ripidly rised. 



Also, we've tested "wideband" using one USRP channel, to "cut" the channels Xlating filter in GNURadio. 
We could successfully decode SMS in 2 hopping channels by wideband using USRP/1. 
But in pratical, hardware with more bandwidth(e.g. BladeRF) are necesssary.



For this project, we've produced some USRP/1, DBSRX, RFX boards using Ettus's open PCB file ourselves. 
Now, there are still around 4 or 5 USRP, 20+DBSRX, 10+RFX remains, 
we'd like to sell for some fund for a new project. If someone need them, please email us.


Nick Chan (Guangxi Normal University)  nick(dot)chitchan(AT)gmail.com
Wirelessddcat (Guangxi Normal University)  wirelessddcat(AT)gmail.com
Project Leader: Howard Wong ffp(dot)howard(AT)gmail.com

Special Thanks to Prof. Qin Shao Hua (Guangxi Normal University)