gsm voice decoding

219 views
Skip to first unread message

Mamoon Ali

unread,
May 7, 2016, 10:02:46 AM5/7/16
to gr-gsm
dear sir,
 
1.  my project is GSM call interception.(using rti-sdr in kali rolling 2016)
2.  i have intercepted SMS in a unencrypted network.
3.  i am able to get the caller's no. in a voice call through the call set up packet in wireshark.
4.  i am able to see the assignment command in SDCCH8 channel(LAPDm protocol),in which i am getting the TCH and timeslot no. of the downlink ch.
5.  but i am unable to extract voice from it.

6.  command used is (to intercept voice)

      grgsm_decode -c /root/gr-gsm/apps/project/capture88.cfile -s 1000000 -f 939.5e6 -m TCHF -t 1 -d FR -o /tmp/speech91.au.gsm
 
 7.   but sir its not working. is speech codec and output file parameters correct?

8.   and sir, in encrypted mobilenetwork i am not getting the CHANGE TO CIPHERING MODE message in wireshark. why?
9.   looking forward for your guidance .plzz reply.
 
                                                                                     best regards

Piotr Krysik

unread,
May 7, 2016, 4:21:44 PM5/7/16
to gr-...@googlegroups.com
Hi Mamoon,

My replies are below.

W dniu 07.05.2016 o 16:02, Mamoon Ali pisze:
> dear sir,
>
> 1. my project is GSM call interception.(using rti-sdr in kali rolling 2016)
> 2. i have intercepted SMS in a unencrypted network.
> 3. i am able to get the caller's no. in a voice call through the call
> set up packet in wireshark.
> 4. i am able to see the assignment command in SDCCH8 channel(LAPDm
> protocol),in which i am getting the TCH and timeslot no. of the downlink ch.
> 5. but i am unable to extract voice from it.
>
> 6. command used is (to intercept voice)
>
> grgsm_decode -c /root/gr-gsm/apps/project/capture88.cfile -s
> 1000000 -f 939.5e6 -m TCHF -t 1 -d FR -o /tmp/speech91.au.gsm
>
Usually in timeslot 1 (-t 1 option) on C0 channel there is SDCCH channel
(not TCHF). If you are able to decode SDCCH find Assignment Command and
Channel Description inside of it. You will have timeslot there and
information if channel hopping is used.

> 7. but sir its not working. is speech codec and output file
> parameters correct?
>
You will have to check it yourself. In my opinion the problem is that
you are looking for the TCHF channel in wrong physical channel (timeslot).

> 8. and sir, in encrypted mobilenetwork i am not getting the CHANGE TO
> CIPHERING MODE message in wireshark. why?
In SDCCH channel Cipher Mode Complete message is first one that is
transmitted as encrypted. I'm not sure if you are talking about this
message.

Best Regards,

Piotr Krysik

Tomcsányi, Domonkos

unread,
May 7, 2016, 5:34:42 PM5/7/16
to Piotr Krysik, gr-...@googlegroups.com
Hi Piotr,

He means the Cipher Mode Command, Cipher Mode Complete is on the uplink :).

Cheers,
Domi
> --
> Otrzymujesz tę wiadomość, ponieważ subskrybujesz grupę dyskusyjną Google o nazwie „gr-gsm”.
>
> Aby anulować subskrypcję tej grupy i przestać otrzymywać od niej wiadomości, wyślij e-maila na gr-gsm+un...@googlegroups.com.
> Aby zamieszczać posty w tej grupie, wyślij e-mail na adres gr-...@googlegroups.com.
> Aby wyświetlić tę dyskusję w internecie, odwiedź stronę https://groups.google.com/d/msgid/gr-gsm/572E4E55.1030402%40gmail.com.
> Więcej opcji znajdziesz na https://groups.google.com/d/optout
Reply all
Reply to author
Forward
0 new messages