GSM Mobile Network Intro - Nokia Network Monitor

Рет қаралды 180,691

5 жыл бұрын

Let's start with the GSM network. We can use the Nokia Network Monitor to learn about channels and frequencies.
buy my font (advertisement): shop.liveoverflow.com/
Nokia Network Monitor: en.wikipedia.org/wiki/Nokia_n...
Vadim Yanitskiy: / axilirator
Basestation Map: www.cellmapper.net/map
=[ ❤️ Support ]=
→ per Video: / liveoverflow
→ per Month: / @liveoverflow
=[ 🐕 Social ]=
→ Twitter: / liveoverflow
→ Website: liveoverflow.com/
→ Subreddit: / liveoverflow
→ Facebook: / liveoverflow
=[ 📄 P.S. ]=
#MobileSecurity

Пікірлер: 255

@daniyar3264 5 жыл бұрын

Hello. I'm working in mobile operator. My speciality is radio network planning and optimization of 2G RAN. I'd like to say that everything you described is absolutelly correct and well simplifided to understand for beginners. So keep doing such a great stuff! If you have any questions related to GSM - feel free to ask. I would help how i can

@nahrafe 5 жыл бұрын

Maybe me. So its like this: How can SS7 works on GSM? And even can used to intercept SMS Massages? Thanks in advance

@geekyrajnish 4 жыл бұрын

I want to work on private gsm network at home please guide me

@semplar2007 4 жыл бұрын

@@geekyrajnish I think for private gsm network, you're going to need lots of expensive equipment, and to have a licence to use certain frequency bands.

@geekyrajnish 4 жыл бұрын

@@semplar2007 i need full guide please i will do everything for it

@semplar2007 4 жыл бұрын

@@geekyrajnish I'm not a mobile network specialist, but googling gave me this document (2nd result): www.gsma.com/spectrum/wp-content/uploads/2016/11/spec_best_practice_ENG.pdf In there on page#33 you can see prices for reserving frequency bands in African countries (for example): from $16 to $67 MILLIONS of dollars per 10Mhz band. Idk what time ranges. In my country (Ukraine) auction prices are similar, $15 millions per 10Mhz band.

@Hereson 5 жыл бұрын

The best teacher one can ask for. This was very interesting! Thank you for your thorough explanations! :)

@Vidsandso 5 жыл бұрын

I discovered the fun of this back in the days when i got a cable of ebay so i could upload ringtones and images to the phone. The network monitor could also be used to lock in on a certain tower or cell. I remember I used to lock on strong cells close to school and then see how long i could keep a connection on it on the bus ride home... Good days!

@agma 10 ай бұрын

The traffic light TDMA illustation is hilarious and delivers the message (pun not intented but welcome) beautifully! Thanks for your work!

@localadm 5 жыл бұрын

Very cool, brings back memories from 1999, when I had a nokia 5110 with network monitor and a 100+ pages manual for it. Back in the day, I almost knew it by heart. Cheers for the video!

@jugg1049 5 жыл бұрын

Lukasz Racinowski context details?

@MeriaDuck 3 жыл бұрын

That the handover of gsm is so reliable never ceases to amaze me, and I know of it since the nineties. It even works in high speed trains and aeroplanes if you're lucky

@4.0.4 5 жыл бұрын

Hey, this is super cool stuff, even if just GSM. It's like a whole "internet of things" that nobody stops to think about.

@faultyfailure9147 5 жыл бұрын

Thank you for helping everyone to understand the world better... In fact, just in this small piece of new information, wow, it opens many doors to ponder to and think of. It is really amazing and marvelous how everything works out in such an almost perfect and complex way... Things that we didn't even care about and we use every day. Man, it is amazing. Thanks!

@peelypeel 5 жыл бұрын

THANK YOU. You finally answer how mobile phone networks work! I wanted to know forever

@luqmaanalbahassan5763 8 ай бұрын

Great content, i loved each second of it, i mean you usually don't see such type of contents it's so unique. Few months back i was asking myself on how does a sim card connect to a nearby base station.

@user-gh2uz2ix2o 5 жыл бұрын

I'm working with mobile cellphone infrastructureand must say, these video series came in good time! Thx

@nexisle7508 5 жыл бұрын

Bro, you have one of a kind videos on youtube. Deeply appreciate your hard work man and my good wishes to you :)

@DEMENTO01 5 жыл бұрын

WOW, how interesting, I didnt know how crazy is all tis stuff, i mean, like you said, if you are walking and in a call the phone is continualy changing basestations all the time, and you don't even notice it, is like... WOW, bc works sooo well, and this is on GSM, i mean, from 20+ years ago, I can't believe it. Keep the good work, I love your videos, everything is so well explained.

@mohamedazoukni8370 5 жыл бұрын

Thank you guys. I'm so excited for the next video .Keep Up the good work :)

@RafaelAcurcio 5 жыл бұрын

Incredible content!! Super interesting and also very relevant. Can't wait for the next episode.

@unlimitedcoder2189 5 жыл бұрын

Love the videos keep up the good work!

@dinost9057 5 жыл бұрын

Svijet treba vise ljudi kao sto si ti .

@Junior83ist 5 жыл бұрын

Great content! I hope you'll keep it up! All the best, man!

@maxthewincat 5 жыл бұрын

Thank you for explaining how does mobile network work

@bhageerathamusic6405 5 жыл бұрын

Very useful information. Thanks a lot for making this attempt. For letting us to know all these uncommon matters.😊👍

@ashvinbhuttoo 5 жыл бұрын

Great videos, very well put together content! Thank you

@chancegg00 5 жыл бұрын

Please keep these videos comming!!!! I love them!!!!

@borisdorofeev5602 5 жыл бұрын

Great stuff. I made sure to subscribe, and I am looking forward to your future videos.

@JohnnyWanX 5 жыл бұрын

I clicked like before I watched it, nice work!

@jammijavid9316 5 жыл бұрын

Really appreciate! Long live opensource

@yazzindev Жыл бұрын

I really appreciate the insights!

@ShinobiEngineer 5 жыл бұрын

SUPER INTERESTING ! ! ! THANK YOU.

@techsniffer7143 5 жыл бұрын

really, you are the best in means of clarification .

@silkworm6861 5 жыл бұрын

Wow! So informative, thanks!

@liteoner 5 жыл бұрын

This is so cool. It confirmed my suspicion that the design of mobile phone networks is even more outdated than that of the internet. The problem with both is that so many legacy devices use them that it's basically impossible to overhaul without major disruption.

@Hauketal 5 жыл бұрын

Some countries already started to phase out either G2 or G3, but not both, yet.

@liteoner 5 жыл бұрын

@@Hauketal any network whose communication depends on a centralised server is outdated in my opinion. So, moving from 2G to 4G is hardly an upgrade (if we ignore the speed benefits of the latter).

@frankschneider6156 5 жыл бұрын

TCP/IP was designed at the begin of the 80s, SS7 (which is still the basis of carrier communication and horribly vulnerable) was designed in the midst of the 70s. GSM for carrier - end point communication was designed in the midst of the 80s so slightly later than "classical" TCP/IP and it is (partly because of that) also more secure, at least they introduced some encryption like (the intentionally weakened) A5/1 and the even worse A5/2.

@liteoner 5 жыл бұрын

@@frankschneider6156 for sure, in the sense 2G is actually more advanced than 4G

@taozam 5 жыл бұрын

Keep up the unique content 👾🔰

@SopanKotbagi 5 жыл бұрын

Keep these videos coming!!!!!

@harshthakur7215 5 жыл бұрын

Hey Liveoverflow , it would be really helpful if you shared the sample files(.cfile) of the network capture with us. Loving the series btw ! Keep it coming

@chris_sndw 5 жыл бұрын

I still have one of these phones and the cable they sold back then (bought directly from harald welke). Back then I compiled the osmocom software and was looking at the phone screen. Felt like I was doing some important hacking but had no idea what it all meant. Thanks for the video.

5 жыл бұрын

Great videos, thank you

@MaghrebProductions 5 жыл бұрын

Thank you LiveOverflow for keeping promises!

@Choptec 5 жыл бұрын

Enjoyed the video.

@kimbol496 5 жыл бұрын

Great vid once again, please do more software defined radio based videos and possibly touching on the ss7 exploit.

@JM-sz1gl 5 жыл бұрын

I am loving it!

@lukasvolcik5109 5 жыл бұрын

I love your channel so much! :) I would love some videos about antiviruses ^_^

@ushisushie 5 жыл бұрын

Thank you for these videos! They are fantastic! You should familiarize yourself with SS7 and the possible hacks on that. It would be great to see your video on it.

@goncalogomes3456 5 жыл бұрын

loving this vids

@reegunj 5 жыл бұрын

Interesting, Thanks for sharing

@gromanfreedan 4 жыл бұрын

BTW about basestations. That's the one of the earliest reasons to turn off your phones while on plane. Imagine hundred of phones on plane constantly changing basestations at the speed higher than 300 kmh. At that time it was creating a huge load on basestations from time to time. Now load is dispersed thanks to different generations and improved capacity of basestations. Correct me if I'm wrong.

@haukauntrie 5 жыл бұрын

2:35 Wait, that means that when I purchase by card on a POS terminal, there are actually 3 Tiny Computers in this device? That info from the first video still blows my mind.

@FredrikHistherRasch 5 жыл бұрын

Up here in Norway, VoLTE is deployed and available wherever we have LTE. And we have LTE in all Norwegian cities (i.e. more than ~10,000 inhabitants)

@johannes596 5 жыл бұрын

I like that you drew ASCII emoticons, which exist solely because one was not able to draw anything :D also, typing the ASCII emoticon would have been too easy anyways

@BizarreCode 5 жыл бұрын

Epic dude!

@salimmachila5736 5 жыл бұрын

Nice video thanks

@quarkonia 5 жыл бұрын

Hi, Great video but I would like to add that the MSC keeps track of the VLR and it's that which is updated with the Location Update contain the Location Area Codewhich is a group of BTS cells on one or a few BSCs. The VLR may be located logically within the MSC but it does not have to be. This is because some vendors had limitations on how many IMSIs could fit within each VLR database that normaly covered a geographical area.

@GreenyDe 5 жыл бұрын

Very cool and interesting content... i would like to see more stuff like that... maybe you can do some Software Defined Radio projects / tutorials! :)

@nikidino8 5 жыл бұрын

it was still private when I clicked it, I am clearly too early!

@nicoper 5 жыл бұрын

Same thing happened to me, lol.

@RegressStage 5 жыл бұрын

nikidino8 same

@unlimitedcoder2189 5 жыл бұрын

Same here

@TheWoosh 5 жыл бұрын

nikidino8 same

@liteoner 5 жыл бұрын

You mean unlisted

@Ghozer 5 жыл бұрын

I remember YEARS ago, adding a Vibrate motor to my 3210, and enabling the 'hidden' menu's, The network monitor was fun to watch, but never knew what they all meant, until now xD I still have that 3210 - might hook it up and see what happens ;)

@CubbyTech 5 жыл бұрын

TDMA was replaced by CDMA some time ago! GSM and CDMA are being phased out and being replaced by LTE. In the US, a few years ago - AT&T and T-Mobile were the original GSM carriers, where Verizon and Sprint were CDMA only and did not use SIM cards (giving users less choice, flexibility). Now that everyone is using LTE, every phone uses a SIM card to access the network, as well as the phone's radio needs to use that carrier's band(s).

@mrvtrx5627 6 ай бұрын

🥺❤️ thanks

@NullaNulla 5 жыл бұрын

They use basic radio trunking alike used by emergency services. Catch here though you didn't note is usually base stations have more than 1 frequency pair obviously the more pairs the more time slots and thus capacity available. Also here in Australia 2G is finished, gone, ripped up and binned with all eftpos etc sent to 3G and 4G for the newer ones. I have to admit that the cell/tower/base handover is bloody magic for the phone network. A 2way radio is a lot easier you just force the change between a and b talking (silent time) to do the change but a phone requires seamless changeover and does so without most noticing (a little klunky at times out here in the country with larger gaps bbetween towers and thus different lag times).

@meksaldi 5 жыл бұрын

Amazing

@lmarloe 5 жыл бұрын

Cool. Right now I'm testing osmo-fl2k project, it's SDR based on VGA chip

@shubham399 5 жыл бұрын

Cool

@metaorior 5 жыл бұрын

thanks

@nem64 5 жыл бұрын

Next on liveoverflow: I hacked the FBI, NSA and the CIA using only a potato

@AlexVasiluta 5 жыл бұрын

Next on ScreenRant* FTFY

5 жыл бұрын

It's easier than you might think :) Search youtube for "Wiretapping the Secret Service can be easy and fun". The guy listened to FBI and Secret Service calls using man-in-the-middle approach. He created fake business record on Google using his phone. People searched for FBI office, they found number and called it. Guy's phone called real phone number and recorded everything.

@slackerengi2401 5 жыл бұрын

Hey Have some respect, that was his grandpa's potato

@renakunisaki 5 жыл бұрын

FBI, CIA, KFC, PBS...

@dannyteebone9233 5 жыл бұрын

Great!! There goes our potato chips and Freedom fries

@TheKinGG0ld 5 жыл бұрын

It could be cool to see how far you can trilaterate your position with your current cell tower and its neighbours! Anyway, cool video ;))

@ExEBoss 5 жыл бұрын

*+TheKinGG0ld* That’s actually one of the sources of location data used by smartphones in order to improve location accuracy.

@TheKinGG0ld 5 жыл бұрын

I meant, an app that use just this method to point you in the map when you have no data mobile available. Based on a database.

@marciocorreafilho8293 5 жыл бұрын

If you have some time... Could you answer one question: Can I buy or build a small network antenna for home or office use and have my own local network PABX local phone network?

@nion456789 5 жыл бұрын

Smashed the like

@zer0day463 8 ай бұрын

5:12 His Nokia screen is broken, you 'know he was doing something 😂

@serafinrt 3 жыл бұрын

hi man, one question... what model of nokia devices you recommend? or other devices for other manufacturers?

@SumanRoy.official 5 жыл бұрын

I know where this series is going, I am waiting for the SS7 attacks on Live overflow.

@moweME 5 жыл бұрын

Beste Uploadzeit... 👍

@flTobi 5 жыл бұрын

Isso

@ko-Daegu 5 жыл бұрын

Möwe *best *Uploader

@NtQueryInformationProcess 5 жыл бұрын

@@ko-Daegu what do you mean?

@DerfJagged 5 жыл бұрын

As far as I know, the Nokia game "Cavern Crawl" hasn't been dumped or emulated anywhere. Any chance you'd take on a challenge to dump it? :)

@monad_tcp 8 ай бұрын

4:30 I don't mind it, newer things are built on top of older ones. I like to start from an historical perspective when learning anything. Why go always to the newfangled things

@dummypg6129 5 жыл бұрын

Ohh, that was the network monitor means, i had a 3315 phone that was reprogrammed its firmware with a custom one. I always enabled it to show more geeky on my phone. Uhh nostalgia... Those days..

@krishnadeshpande6197 5 жыл бұрын

Hey, by using time division multiple access we will be sending signal after particular time. So wouldn't it be a packet

@rohitshetty9531 5 жыл бұрын

So If we can listen to paging request broadcast would be very useful. Think non governmental entity trying to narrow down if a phone is in some area or not. ?

@crazyfrisbee23 5 жыл бұрын

link to the troopers 17 badge ft badgewizard video -> kzfaq.info/get/bejne/nbF4lK6gtbCyYGw.html cellmapper -> www.cellmapper.net/map

@gwg 5 жыл бұрын

What happens if the paging request fails? Does it try to send it to other nearby base stations? If the phone is turned off, or not in a coverage zone, how would the network know when to give up on trying to deliver a paging request?

@LiveOverflow 5 жыл бұрын

Afaik it might try base stations in the area and then give up. And then you get the voicemail on the other sode

@kevinpielacki127 5 жыл бұрын

A page request is initiated by a subsystem that manages many base stations like an MME for LTE or MSC/BSC for 2G/3G technology. These base stations (BS) are all grouped into multiple smaller areas and the managing subsystem only knows the last area you were registered to. Like maybe an area covering an airport before you take a flight. Like LiveOverflow mentioned, the BS's that belong to that area are sent the paging request and it's broadcasted by all the BS's. If your mobile device does not respond, your location will be set to unknown and a core component will track all missed calls and failed messages until it knows where you are again. When you finally land, your UE will find a new BS to camp on, the location register will be updated, and the core will begin forwarding all missed page requests so you get notified of your missed calls and get bombarded with text messages. Huge fan of your videos LiveOverflow. I was so excited when I saw you were covering mobile technology and I vaguely remember some weaknesses in GSM's encryption algorithm so can't wait to see more.

@MadushanNishantha 5 жыл бұрын

AFAIK, you can sniff and break GSM encryption with an RTL-SDR dongle and some software. Encryption is not that great.

@daniyar3264 5 жыл бұрын

@@MadushanNishantha when you are turning off your MS, it sends "IMSI deatached" to MSC/HLR by sdcch channel. So if someone calls you when your MS is turned off - GSM system doesn't even try to send paging, knowing that you are "offline"

@quarkonia 5 жыл бұрын

This is when a divert could kick in, if the paging response is not answered the the network updates the with No Response, then if you have a divert configured then that will be actioned. If it was to the carrier voicemail then a network waiting indicator will be sent to you device and will wait to be received, shortly after the device location updates and receives the MWI the device will flag to the user a message is waiting. Should you just pull the battery, then no last gasp will be sent to the network and the network will try to page until no response. This is for GSM or DCS1800 of course. Diverts can be network or user set and each has its own priority such as user overrule networks divert.

@First_Principals 5 жыл бұрын

Great video. You should write an ebook for complete beginners and update it as more information becomes available. If you start a crowd funding campaign you could give the donators free editions of the ebook.

@cat47 6 ай бұрын

bad idea

@wajahatali1308 5 жыл бұрын

Best

@jaa93997 5 жыл бұрын

It was not "secret" per se, engineering mode was used, for example, when testing / accepting a new BTS, a test was timeslot per timeslot hop observation when in tcch, another one was validation of bcch when idle, and so on. Fun times!

@provet1 5 жыл бұрын

Playlist here: kzfaq.info/sun/PLhixgUqwRTjxHFDl0OykeqZ-VvnClfDpT

@muhammadishak8636 5 жыл бұрын

Which motorola phone you are using in this video?

@SanketDube 5 жыл бұрын

This is interesting! I am not at all familiar with this subject. However, I am curious; If I happen to know what's the frequency of uplink and downlink of a device. Will I be able to tune into that frequencies and hear calls if I had a device to tune into that frequency? Or is the signal somehow obfuscated or stooped without a handshake?

@LiveOverflow 5 жыл бұрын

Multiple devices use the same frequency thanks to TDMA. So that already is not so easy. And then usually there is also crypto.

@varbaek 5 жыл бұрын

No, SMS and phone calls are encrypted. Typically using A5/1 or A5/3. (I don't think anyone uses the intentionally vulnerable A5/2 anymore.) Some countries might usr A5/0 (no encryption). For phone calls you also need to be able to handle channel hopping so you need a HackRF or better, or multiple RTL-SDRs.

@frankschneider6156 5 жыл бұрын

A5/1 is stronger than A5/2 but can also be easily broken using lookup tables, so in practice there is no difference if using A5/1 or A5/2. Both are insecure.

@SourceCodeDeleted 5 жыл бұрын

I haven't really cared about phones and this is really interesting. since the phones talk directly to each other, does this mean you can enumerate a general location of their phone with the replies from the base stations?

@privateger 5 жыл бұрын

Exactly!

@X3eRo0 5 жыл бұрын

Yayayayaay

@jaa93997 5 жыл бұрын

Depending on the firmware, you can maybe enable engineering mode on Nokia with *3001#12345# If that doesn't work, in the old days you had to ask Nokia to flash the program in your field engineers phones...

@AlanMedina314 3 жыл бұрын

TDMA reminds me of a RR scheduler.

@toshineon 3 жыл бұрын

Me: live in a city with good LTE coverage and 5G, has a high-end phone that supports VoLTE My phone: calls over GSM

@maycodes 4 жыл бұрын

can we use gsm arduino model for some tweaking ?

@kozmaz87 8 ай бұрын

The sad thing about modern modems, especially the qualcomm ones that they can no longer perform country switching seamlessly. It takes them forever to switch between roaming providers and so your call drops at the border as you drive across. This used to work seamlessly with Nokia phones on 2G. You drove through 3 countries while being on the same call... of course that time the service was way more expensive and exclusive as well....

@jonatan01i 4 жыл бұрын

7:30 But can a single time-slot be used at different times?

@theashmedai007 2 жыл бұрын

Can we use osmocombb in Nokia phones ?? Motorola are very rare now

@mentaripagi__ Жыл бұрын

Any update resources for learning Telcom security?

@spudhead169 5 жыл бұрын

You're saying that 4G and LTE are the same, yet when I Google "LTE" I'm seeing a ton of videos and blogs about "The difference between 4G and LTE". Can you clarify that 4G and LTE are one and the same thing, or are they different terms?

@neiltsakatsa 5 жыл бұрын

Can you please provide a link on where to buy the SIM Trace Hardware ??

@late7245 5 жыл бұрын

Can you tether two cellphones to each other without a basestation.?

@justcurious1940 Жыл бұрын

Is it possible for two GSM phones to communicate directly without cell tower ?

@fictionstudios6876 5 жыл бұрын

Awesome sir.I have a doubt .I have read in some blogs that sim cloning can be done easily in GSM.Is it possible sir??If yes is possible with LTE ??And how sim cloning works??How will it effect people? Because if a sim is cloned anything can be done. If any people knows plz answer here??

@theashmedai007 2 жыл бұрын

Sim cloning is possible , but you need to crack the secret key in sim card

@theashmedai007 2 жыл бұрын

Infact , if you have that key , you don't need a sim

@elecom5858 2 жыл бұрын

Hello sir, How can clear data internet using on sim card?

@TheImpetuousDanny 5 жыл бұрын

So can you, in theory, sniff Paging Messages so see what other phones are in the area? Like a cell network airodump?

@isaacp1218 5 жыл бұрын

TheImpetuousDanny I don't know much about this, but from other comments I have seen it seems like there is encryption used in connections. Apparently there are a few types, with older versions having issues with security (they weren't very good). The types I noticed referenced were "A5/1", "A5/2" and "A5/3". A guy in a comment above said the first two weren't good but (I'm quoting this part) "A5/3 isn't that bad."