GSM/GPRS Lab Software Components

Comprehensive overview of open-source software components required for setting up a GSM/GPRS research lab. Each component plays a crucial role in simulating and analyzing cellular network operations.

About This Guide

This guide covers the essential software components from the Osmocom project for building a functional GSM/GPRS research lab. These open-source tools simulate real cellular network infrastructure, enabling security research, protocol analysis, and network testing in a controlled environment.

Legend: CS = Circuit Switched (voice calls), PS = Packet Switched (data/internet)

Core Network

OsmoHLR

Home Location Register that stores subscriber IMSI, phone numbers, and authentication tokens. Essential for subscriber management and authentication in GSM/GPRS networks.

Network Support

2G CS

2G PS

3G CS

3G PS

Docs Code

Core Network

OsmoMSC

Mobile Switching Center that handles signaling, subscriber attach/detach, call establishment, and messaging (SMS and USSD). Central component for circuit-switched services.

Network Support

2G CS

2G PS

3G CS

3G PS

Note: Required for GPRS support

Docs Code

Media Gateway

OsmoMGW

Media Gateway instructed by MSC and/or BSC to direct RTP streams for active voice calls. Handles media conversion and routing for voice communications.

Network Support

2G CS

2G PS

3G CS

3G PS

Docs Code

Signaling

OsmoSTP

Signal Transfer Point that routes SCCP messages between MSC, BSC, HNBGW, and for 3G also the SGSN. Critical for signaling network infrastructure.

Network Support

2G CS

2G PS

3G CS

3G PS

Docs Code

Base Station

OsmoBSC

2G Base Station Controller that manages logical channels and lower-level aspects for one or more 2G BTS. Technically part of the BSS (Base Station Subsystem), not the core network.

Network Support

2G CS

2G PS

3G CS

3G PS

Note: Required for GPRS support

Docs Code

3G Gateway

OsmoHNBGW

3G HomeNodeB Gateway that receives the Iuh protocol from a 3G femto cell and forwards to MSC and SGSN by SCCP/M3UA via OsmoSTP.

Network Support

2G CS

2G PS

3G CS

3G PS

Docs Code

Packet Core

OsmoGGSN

Gateway GPRS Support Node that opens GTP tunnels received from SGSNs to internet uplink. Required for internet connectivity in packet-switched networks.

Network Support

2G CS

2G PS

3G CS

3G PS

Note: Required for internet connectivity

Docs Code

Packet Core

OsmoSGSN

Serving GPRS Support Node that handles signaling for attach/detach of subscribers and PDP contexts. Essential for packet-switched services.

Network Support

2G CS

2G PS

3G CS

3G PS

Note: Required for 3G packet-switched services

Docs Code

Base Station

OsmoBTS

For 2G networks, drives the TRX (Transceiver) and ties to the BSC via Abis-interface. Physical base station component for 2G networks.

Network Support

2G CS

2G PS

3G CS

3G PS

Note: Required for GPRS support

Docs Code

Base Station

OsmoPCU

For 2G networks, a component closely tied to the BTS that drives the TRX for PS (Packet Switched) timeslots and ties to the SGSN via Gb-interface.

Network Support

2G CS

2G PS

3G CS

3G PS

Docs Code

3G Hardware

hNodeB

Third-party 3G femto cell hardware to connect to OsmoHNBGW via Iuh interface. Physical hardware component for 3G network deployment.

Network Support

2G CS

2G PS

3G CS

3G PS

Integration

OsmoSIPConnector

Optional component that switches OsmoMSC to external MNCC and forwards Call Control and RTP to a PBX of your choice. Enables integration with external telephony systems.

Network Support

2G CS

2G PS

3G CS

3G PS

Note: Optional: for PBX integration

Docs Code

Understanding the Components

Core Network Components

OsmoHLR, OsmoMSC, and OsmoSTP form the core of the network, handling subscriber management, call routing, and signaling. These are essential for any GSM/GPRS lab setup.

Base Station Components

OsmoBSC, OsmoBTS, and OsmoPCU manage the radio interface and connect mobile devices to the core network. These components are specific to 2G networks.

Packet Core Components

OsmoSGSN and OsmoGGSN handle packet-switched services, enabling internet connectivity and data services in GPRS/3G networks.

Legal and Ethical Considerations

These software components are intended for authorized security research, educational purposes, and legitimate network testing only. Always ensure you have proper authorization before conducting any security assessments. Unauthorized access to telecommunications networks is illegal in most jurisdictions. Use these tools responsibly and in compliance with local laws and regulations.

Lab Setup Resources

Security Resources

Access comprehensive guides, documentation, and best practices for telecom security

Security Testing Tools

Professional tools and frameworks for testing SS7, GTP, SIP, and mobile network security

Penetration Testing Guide

Complete methodology for telecommunications security testing and assessment