Is there any way I can log/sniff the GSM packets on a (rooted) HTC Desire ?

(I'm talking about the actual low level GSM packets on the Um interface, not IP packets over a 3g connection.)

1 Answer 1


Try OpenBTS. You'll need a Faraday cage and a couple thousand dollars in hardware, but you can control all interactions between the phone and your base station.

You will need a license to run a base station outside of a Faraday cage.

Harald Welte's blog is a good one to follow if you're interested in GSM as a low-level protocol.

The "SMS of death" presentation at Chaos Computer Club one year used this sort of setup to test SMS buffer overflows.

  • 1
    But you can sniff GSM traffic without a Faraday cage. Commented Jun 2, 2012 at 6:46
  • Right, but if you want to broadcast GSM, you either want a license or a way to make sure it's only in a controlled environment. :)
    – Broam
    Commented Jun 5, 2012 at 14:10
  • 2
    true in most cases, but some of the GSM allocated spectrum is free-for-all in the US for low power broadcasts. No license needed. Commented Jun 5, 2012 at 21:07

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .