使用OpenBTS基站测试物联网模块安全性

sudo apt-get install software-properties-common python-software-properties
sudo add-apt-repository ppa:git-core/ppa
sudo apt-get update
sudo apt-get install git

mkdir sdr //新建sdr文件夹
cd sdr //进入该文件夹
git clone https://github.com/RangeNetworks/dev.git
cd dev
./clone.sh //从GitHub克隆代码
./switchto.sh master //切到master分支
./build.sh B200

$sudo python /usr/lib/uhd/utils/uhd_images_downloader.py
Images destination: /usr/share/uhd/images
Downloading images from: http://files.ettus.com/binaries/images/uhd-images_003.009.002-release.zip
Downloading images to: /tmp/tmpEplLOD/uhd-images_003.009.002-release.zip
kB / kB (%)Images successfully installed to: /usr/share/uhd/images

$ uhd_usrp_probe
linux; GNU C++ version 5.3. ; Boost_105800; UHD_003.009.002--unknown-- Loading firmware image: /usr/share/uhd/images/usrp_b200_fw.hex...
-- Detected Device: B200
-- Loading FPGA image: /usr/share/uhd/images/usrp_b200_fpga.bin... done
-- Operating over USB .
-- Detecting internal GPSDO.... No GPSDO found
-- Initialize CODEC control...
-- Initialize Radio control...
-- Performing register loopback test... pass
-- Performing CODEC loopback test... pass
-- Asking for clock rate 16.000000 MHz...
-- Actually got clock rate 16.000000 MHz.
-- Performing timer loopback test... pass
-- Setting master clock rate selection to 'automatic'.
_____________________________________________________
/
| Device: B-Series Device
| _____________________________________________________
| /
| | Mboard: B200
| | revision:
| | product:
| | serial: 30EA064
| | name: MyB200
| | FW Version: 8.0
| | FPGA Version: 13.0
| |
| | Time sources: none, internal, external, gpsdo
| | Clock sources: internal, external, gpsdo
| | Sensors: ref_locked
| | _____________________________________________________
| | /
| | | RX DSP:
| | | Freq range: -8.000 to 8.000 MHz
| | _____________________________________________________
| | /
| | | RX Dboard: A
| | | _____________________________________________________
| | | /
| | | | RX Frontend: A
| | | | Name: FE-RX1
| | | | Antennas: TX/RX, RX2
| | | | Sensors: temp, rssi, lo_locked
| | | | Freq range: 50.000 to 6000.000 MHz
| | | | Gain range PGA: 0.0 to 76.0 step 1.0 dB
| | | | Bandwidth range: 200000.0 to 56000000.0 step 0.0 Hz
| | | | Connection Type: IQ
| | | | Uses LO offset: No
| | | _____________________________________________________
| | | /
| | | | RX Codec: A
| | | | Name: B200 RX dual ADC
| | | | Gain Elements: None
| | _____________________________________________________
| | /
| | | TX DSP:
| | | Freq range: -8.000 to 8.000 MHz
| | _____________________________________________________
| | /
| | | TX Dboard: A
| | | _____________________________________________________
| | | /
| | | | TX Frontend: A
| | | | Name: FE-TX1
| | | | Antennas: TX/RX
| | | | Sensors: temp, lo_locked
| | | | Freq range: 50.000 to 6000.000 MHz
| | | | Gain range PGA: 0.0 to 89.8 step 0.2 dB
| | | | Bandwidth range: 200000.0 to 56000000.0 step 0.0 Hz
| | | | Connection Type: IQ
| | | | Uses LO offset: No
| | | _____________________________________________________
| | | /
| | | | TX Codec: A
| | | | Name: B200 TX dual DAC
| | | | Gain Elements: None

sudo apt-get install software-properties-common python-software-properties
sudo add-apt-repository ppa:chris-lea/zeromq
sudo apt-get update

cd dev/BUILD/------
sudo dpkg -i libcoredumper1_1.2.1-1_i386.deb libcoredumper-dev_1.2.1-1_i386.deb
sudo dpkg -i liba53_0.1_i386.deb
sudo dpkg -i range-configs_5.0_all.deb
sudo dpkg -i range-asterisk*.deb
sudo apt-get install -f
sudo dpkg -i sipauthserve_5.0_i386.deb
sudo apt-get install -f
sudo dpkg -i smqueue_5.0_i386.deb
sudo apt-get install -f
sudo dpkg -i openbts_5.0_i386.deb
sudo apt-get install -f

sudo su
echo >> /proc/sys/net/ipv4/ip_forward

# Generated by iptables-save v1.4.4
*nat
:P REROUTING ACCEPT [:]
:P
OSTROUTING ACCEPT [:]
:OUTPUT ACCEPT [:]
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
# Generated by iptables-save v1.4.4
*filter
:INPUT ACCEPT [:]
:FORWARD ACCEPT [:]
:OUTPUT ACCEPT [:]
COMMIT

sudo iptables-restore < /etc/OpenBTS/iptables.rules

iptables -t nat -L -n -v

cd sdr/dev/openbts/apps
sudo sqlite3 -init OpenBTS.example.sql /etc/OpenBTS/OpenBTS.db ".quit"cd sdr/dev/subscriberRegistry/apps
sudo sqlite3 -init sipauthserve.example.sql /etc/OpenBTS/sipauthserve.db ".quit"cd sdr/dev/smqueue/smqueue
sudo sqlite3 -init smqueue.example.sql /etc/OpenBTS/smqueue.db ".quit"

[IMSI46001658*****]
callerid=
canreinvite=no
type=friend
allow=gsm
context=sip-external
host=dynamic
dtmfmode=info[IMSI41004030*****]
callerid=
canreinvite=no
type=friend
allow=gsm
context=sip-external
host=dynamic
dtmfmode=info

cd sdr/dev/openbts/Transceiver52M
sudo ./transceiver

cd sdr/dev/smqueue/smqueue
sudo ./smqueue

cd sdr/dev/subscriberRegistry/apps
sudo ./sipauthserve

cd sdr/dev/openbts/apps
sudo ./OpenBTSCLI

root@0xroot:/home/init3/sdr/dev/openbts/apps# ./OpenBTSCLI
OpenBTS Command Line Interface (CLI) utility
Copyright , , Range Networks, Inc.
Licensed under GPLv2.
Includes libreadline, GPLv2.
Connecting to 127.0.0.1:...
Remote Interface Ready.
Type:
"help" to see commands,
"version" for version information,
"notices" for licensing information,
"quit" to exit console interface.
OpenBTS> version
release 5.0-master+c438a5a689 CommonLibs:76b71d509b+GPRS P built --29T23::OpenBTS> helpType "help" followed by the command name for help on that command.alarms audit calls
cbs cellid chans
config crashme devconfig
endcall freqcorr gprs
handover help load
memstat neighbors noise
notices page power
rawconfig regperiod restart
rmconfig rxgain sendsimple
sendsms sgsn shutdown
stats sysinfo tmsis
trxfactory txatten unconfig
uptime versionOpenBTS>

OpenBTS> config Control.LUR.OpenRegistration .*
Control.LUR.OpenRegistration changed from "" to ".*"

OpenBTS> devconfig GSM.Radio.RxGain
GSM.Radio.RxGain changed from "" to ""
GSM.Radio.RxGain is static; change takes effect on restart

OpenBTS> config GSM.Radio.Band
GSM.Radio.Band changed from "" to ""
GSM.Radio.Band is static; change takes effect on restart

config Control.LUR.NormalRegistration.Message Welcome to BTS

config GSM.Identity.ShortName GroundControl

config Identity config GSM.Identity.MCC

config GSM.Identity.MCC

config GSM.Identity.MNC

config GSM.Identity.MNC

OpenBTS> config GSM.Radio.C0
GSM.Radio.C0 changed from "" to ""
GSM.Radio.C0 is static; change takes effect on restart
OpenBTS> config GSM.Identity.BSIC.BCC
GSM.Identity.BSIC.BCC changed from "" to ""

OpenBTS> config GSM.Identity.LAC
GSM.Identity.LAC changed from "" to ""
OpenBTS> config GSM.Identity.CI
GSM.Identity.CI changed from "" to ""

cd sdr/dev/openbts/NodeManager/

./nmcli.py sipauthserve subscribers create name imsi msisdn

./nmcli.py sipauthserve subscribers create "LG G3" IMSI46001658*****

root@0xroot:/home/init3/sdr/dev/openbts/NodeManager#./nmcli.py sipauthserve subscribers read
raw request: {"command":"subscribers","action":"read","key":"","value":""}
raw response: {
"code" : ,
"data" : [
{
"imsi" : "IMSI46001658*****19",
"msisdn" : "",
"name" : "LG G3"
},
{
"imsi" : "IMSI46000645*****91",
"msisdn" : "",
"name" : "MoTo"
}
]
}

OpenBTS> config GPRS.Enable

OpenBTS> config GGSN.DNS 8.8.8.8

nameserver 8.8.8.8

nameserver 8.8.8.8

OpenBTS> devconfig GGSN.Logfile.Name /tmp/GGSN.log

OpenBTS> tmsis
IMSI TMSI IMEI AUTH CREATED ACCESSED TMSI_ASSIGNED
***** - ***** 30m 30m

sendsms ***** "Hello World"