22c3: 3G Investigations slides and information

22. Chaos Communication Congress
3G Investigations

lecture slides

Scanning your GPRS/UMTS IP network for fun and profit

We are giving an overview of ip networks used for >=2.5G technologies. Our main focus is on scanning the overlaying ip network, on different Voice-over-IP filter implementations and the possibilities to circumvent them.

We want to explain the ip networks used in GPRS and UMTS cellular networks from the enduser point of view. How do they work today and what has to be done to get a normal webpage, voice-over-ip or even a video stream onto your PDA or SmartPhone.

For your private investigations inside your providers ip network we want to demonstrate you a tcp/udp port and round-trip-time based traceroute program based on the .NET compact framework. With the help of this program we want to analyse the anti voice-over-ip filters implemented by different cellular providers and show you some possibilities how to circumvent them _efficently_. So we don’t just tunnel all the traffic through a VPN. But even when these filters become more sophisticated in the future we want to present some ideas how to defeat your right to talk via voice-over-ip whereever and whenever you want to.

Slide download (PDF, 5.9 Mbyte)

Sourcecode: PrivateInvestigationNetworkToolSrc.zip (239,1 KB)

22c3: video and audio streaming and recording scheme

As promised yesterday here are some more information about the video and audio streaming and recording at the 22c3. First let’s start with the almost complete scheme:

What’s not in the scheme is where and how the streams are recorded:

  1. there’s a DV tape in every camera (we’ve got 400 brand new DV tapes for that purpose here)

  2. audio+video streams are recorded on the CCC encoding machines on their local hard drives (MPEG2 audio and MPEG4 video)

  3. audio+video streams are record on the FeM encoding machines on their local hard drives (Windows Media Audio+Video 9)

  4. audio-only streams are recorded on the CCC streaming servers local hard drives

Last but not least: How can you watch and hear those fantastic streams? Easy:

Two ways:

go to http://22c3.fem.tu-ilmenau.de and take a look or follow the links directly to the WMV streams:

lecture hall 1
lecture hall 2
lecture hall 3
lecture hall 4

or go to and take a look or take this table:

hall 1 link
hall 2 link
hall 3 link
hall 4 link

Visio: all lecture halls.vsd (507,5 KB)
SVG: all lecture halls.svg (384,63 KB)

Source 1: http://www.fem.tu-ilmenau.de
Source 2: http://www.ccc.de
Source 3: http://22c3.fem.tu-ilmenau.de

inside the Phone Operation Center (POC)

Since we are kind of interested in providing a large user DECT network on the campus of our university we spoke with the Eventphone guys about their setup: and as far as we can tell it’s far more sophisticated than expected.

little panoramic view of the POC server room

the Alcatel machine rear view

patch panel

front view

front view with logo

switching switch

audio patch panel

the actual POC service area in the main hall

Well sorry that there are more pictures than text – it’s just because we have to compile all the information we got and pile it all together into a nice and well understandable text for your reading pleasure.

the trip to the 22c3, the arrival and some food.

Well here we are – packed with equipment we arrived in Berlin and successfully tested the first encoding-run for the upcoming 22c3 which starts in two days.

hmm… bad weather

this text was on the equipment to discourage thieves

rest place at the A9

finally some food – well maedness had some sandwiches – but finally something hot

the fairy dust has landed

Since we arrived we unpacked all the equpiment and drawn-in our new “office” for the next days: the video studio – which is kind of above/around hall 1.

so here we are… on the right side you can see into hall 1 through the window.

concentrated calculating power – our four encoding machines + one fallback.

Funny thing beside that: we got our own /24 subnet here – peered with 10GE directly to the Berlin CIX. How cool is that ;)

granufunk xmas ’05

Once again granufunk did it: With his permission we are very proud to present you all of his XMAS ’05 tunes via the Radio Muckefuck podcast which you can find here.

“its xmas `05 an i have some tunes for you again!

hope you like it!

fans and groupies get in touch here:

more info here:


check also granu on the new “cookie and brownie EP” on astrolab recordings sometimes in `06


bye, granu”

Source: granufunk