[k0ngo]

I'm a big fan of Fabrice Bellard, but there are other eNB and UE implementations that are fully open source, like OpenAirInterface[1] and srsLTE[2]

[1] http://www.openairinterface.org

[2] https://github.com/srsLTE/srsLTE

[pgorczak]

And a few more pure EPC implementations like NextEPC [1] and Pycrate/corenet [2–3]. The srsLTE eNB works pretty well with NextEPC for me :)

[1] https://github.com/acetcom/nextepc

[2] https://github.com/P1sec/pycrate

[3] https://github.com/mitshell/corenet

[presscast]

I'd be really interested in seeing a tutorial for how to set this up.

[pgorczak]

With srsLTE you just need to run the srsenb and srsepc processes with their example configuration files while having a compatible SDR connected. If you want to attach your own phone you need to have the right credentials of course but an srsUE (also with the example config) would happily connect.

[presscast]

I appreciate the comment, but I think I need a much lower-level tutorial! I know practically nothing about SDRs or LTE.