Holiday Reading list 2024
Nick As summer reaches full swing in Australia and the level of effort I put into blog posts wains, here's a lost of books I'm to-read or have read this year.
2024
Flash SMS Messages
Quick look at some funky SMS formatting we can do to make it pop up on a user's screen
Background to the “VoLTE Mess”
How we got here on the VoLTE device problem networks are facing today.
Tales from the Trenches – IMS TCP Socket Handling
A choose your own adventure with different phones demanding different behaviors for TCP handling in IMS for VoLTE calls.
Mobile Network Code – 2 or 3 Digits?
One of the guys at work asked a seemingly simple question, is the PLMN 505/57 the same as 505/057? The answer is no, and it's a massive pain in the…
private_data_dir on Ansible Runners called from Python
The private_data_dir footgun I found when using Ansible runners called from Python
All about Global Title Translation & SCCP Routing
This is the next post in my series on SS7, and today we’re taking a look at SCCP the Signalling Connection Control Part (SCCP). High Level Global Title uses the…
Tales from the Trenches – SMS Data Coding Scheme 0
"Gotchas" for SMS TP-DCS encoding
MAP – SendRouting Information for SM – locationInfoWithLMSIMAP
Another super-niche post about SS7/MAP encoding of locationInfoWithLMSIMAP in SRI-for-SM responses
Module debug in Kamailio
Sometimes Kamailio modules don't behave how you expect them to, and you want to dive a little deeper into what's going on...
Using fancy test kit to measure”Cell Antenna” stickers
Testing the claims of AliExpress Cell Antenna stickers using fancy toys.
Kamailio – NDB_Redis – undefined symbol: redisvCommand
I ran into this issue the other day while compiling Kamailio from source: Jul 03 23:49:35 kamailio: ERROR: <core> : ksr_load_module(): could not open module </usr/local/lib64/kamailio/modules/ndb_redis.so>: /usr/local/lib64/kamailio/modules/ndb_redis.so: undefined symbol: redisvCommandJul…
NBN “Micronode”
The "Micronode" and it's place in the NBN FTTN network.
Seeing the Airwaves – QCsuper
QCsuper is a super handy tool that gives access to the Diag interface on Qualcomm chipsets. That's the same interface QXDM uses, but without the massive headache and usability issues…
Converting OP Key to OPc
How to translate an OP Key into an OPc key.
5G / LTE Milenage Security Exploit – Dumping the Vectors
A novel exploit against SIMs and the Home Subscriber Servers that store the key data.
5G Core – The Service Based Architecture concept
Some 5G SA concepts
CM-Idle / CM-Connected and RM-Deregistered / RM-Registered States in 5GC
The mobility management and connection management process in 5GC focuses on Connection Management (CM) and Registration Management (RM). Registration Management (RM) The Registration Management state (RM) of a UE can…
Tuning SCTP Init with Linux’s SCTP module
Super niche post on tuning the Linux SCTP stack to enable/disable extensions to control SCTP behavior
MTU in LTE & 5G Transmission Networks – Part 2
So let’s roll up our sleeves and get a Lab scenario happening, To keep things (relatively) simple, I’ve put the eNodeB on the same subnet as the MME and Serving/Packet-Gateway.…