In ultimii 20 de ani este posibila ascultarea ambelor canale de comunicatii (Tx - Rx) prin achizitionarea libera a unor echipamente radio denumite Radio Tests Sets (unitati de testare radio) si care sunt folosite si de tehnicienii/inginerii retelelor gsm pentru optimizarea retelei, detectarea si indepartarea disfunctiilor tehnice, cat si pentru dezvoltarea si testarea ultimelor modele de telefoane. Aceasta aparatura poate fi cumparata second-hand (reconditionata) pentru mai putin de 4000 $, fara a fi pusa nici o intrebare,
mai mult,modele moderne de aparatura si avansata poate fi inchiriata la cateva sute de $/luna,merge si on line.O companie din multe altele care se ocupa de acest fel de echipamente este http://tm.livingston.co.uk/a_gsm/
Nethawk GSM/GPRS Protocol Analyzer 4xE1
- Extensive support for GSM. GPRS. EDGE. SS7 and GSM-R protocols according to 3GPP Release 5/4/99 baseline
- Correlated multi-interface Call Trace for tracing and filtering calls and sessions at GERAN interfaces.
- Most detailed decoding capability for effective root-cause analysis.
- Capacity from one to two links up to 20 E1/T1s.
- Real-time monitoring and analysis of GERAN and core network interfaces.
- Real-time Gb deciphering.
- Real-time data filtering capabilities to limit the amount of data for analysis.
- Automatic configuration for dynamic Abis interfaces.
- Free use of the standard Nethawk GSM software in offline mode for data post-processing.
Alte detalii tehnice gasiti http://www.livingston-products.com/p...30730_1_en.pdf
Tektronix - K1297
Protocol Tester with Simulation. Monitoring & Emulation Software
Various options available:
- Please contact your local Livingston office for configuration
- Flexible and reliable signalling testing in the core network
- Efficient protocol analysis of the core network
- Call trace and call sequence monitoring in the signalling system No. 7 (SS7)/Intelligent Network (IN) network using the K1297-G20
- Connect up to 8 signalling links and up to 16 timeslots for SS7/IN
- Support for standard interface boards
- E1 or DS1 for SS7/IN network
- E1/DS1. E3/DS3. STM-1 Electrical. STM-1 Optical and STM-4 for ATM NNI
- Processing of almost all worldwide basic SS7 protocols (ITU-T (White Book. Blue Book). ANSI/Bellcore. ETSI. MOU)
documentatie mai multa : http://www.livingston-products.com/p...14581_1_en.pdf
Nemo Technologies - Multi Cradle
- For use with the Nemo Outdoor Drive Test System
- Allows for the simultaneous connection of up to four test mobiles
- Includes case for transporting
Dispozitivul simuleaza un BTS (releu gsm) pe care se pot testa pana la partu telefoane mobile in paralel. Permite si testarea unui dispozitiv gps.
Iata ca nici reteaua TETRA din Romania (administrata de STS) nu pare a fi chiar sigura. Cateva dispozitive pot fi inchiriate:
Aeroflex - 2968
TETRA BTS Test Set
- Frequency Coverage 10 MHz to 1 GHz
- Supports TETRA mobile Standard
- Multiple Measurement functions including full span spectrum analyser and tracking generator
- Stand alone system
- GPIB, RS-232 and Parallel Interfaces
Este destinat testarii BTS-urilor din reteaua TETRA.
Si mai interesante (si periculoase in acelasi timp) sunt dispozitivele care prin emiterea unor semnale puternice pot bruia transmisiunile TETRA pentru o zona relativ intinsa:
BV Systems - 0040-25A-C
Gator Transmitter 450-470 MHz 25 Watt Class A
- 450 - 470 MHZ
- 25/50/200 kHz channel steps
- 25 Watts
- Pure spectrum Class A power amplifier
- Power amplifier with continuous adjustable power output ñ 0.1dB over 32 dB range
- Water resistant, rugged 18" x 15" x 6" ABS plastic case
- Microprocessor-controlled with front panel soft-keys or remotely controlled with an internal modem for user programmable modulation schemes, power levels, channels, and frequencies.
- 240 x 64 LCD with vacuum fluorescent backlighting
- Calibration/Usage intergrated hours meter
- VSWR antenna protection and internal forward and reverse measurement
- All parameters can be adjusted remotely via RS-232 or the internal modem or DTMF signaling tones
Sistemul are o putere de 25W si poate fi comandat si de la distanta gratie unui modem intern sau telefonic, prin tonuri DTMF.
Cu ajutorul scanerelor digitale care au operate mici modificari hardware sau software, se pot scana frecventele gsm/cdma.
Iata unul dintre ele:
Icom PCR1500 este un receiver de banda larga, pentru computer. Are o incredibila acoperire: de la 10 kHz la 3300 MHz.
25 de canale pot fi scanate si observate simultan pe un monitor multi-canal. Este si foarte simplu de utilizat: se da click pe un canal ocupat (cu trafic) si se asculta direct comunicatiile.
Cu acest scaner pot fi lesne interceptate telefoanele wireless (mai putin cele DECT despre care vom vorbi in alta postare). Pentru retelele gsm este necesara decriptarea comunicatiilor, descrisa in postarea anterioara.