I think we need to look at a GSMTAP trace of the beacon.
YateBTS can generate traces at the L1/L2 interface in the [http://bb.osmocom.org/trac/wiki/GSMTAP GSMTAP] format, which is support in Wireshark. In this mode, each GSMTAP packet carries a single [http://en.wikipedia.org/wiki/LAPDm LAPDm] frame.
See the “tapping” section in ybts.conf or do "devconfig Control.GSMTAP" from the CLI to see the associated parameters and look at the documentation for each one:
YATE 5.3.0-1 r5826 (
http://YATE.null.ro) ready on ybts-UNCONFIG.
mbts config GSMTAP
Control.GSMTAP.GPRS no [default]
Control.GSMTAP.GSM no [default]
Control.GSMTAP.TargetIP 127.0.0.1 [default]
You want to turn on GSM tapping (mbts config Control.GSMTAP.GSM yes) and send the packets to the localhost IP (the default). Then capture the packets on UDP port 4729 into a PCAP file with tcpdump. You can then look at the GSM activity in Wireshark.
Please collect a PCAP file showing a few seconds of the idle YateBTS and send it to me at
david.burgess@legba.ro. I want to see if the SI3 rest octets are actually there and if SI13 is getting sent.