simtrace

Download

simtrace@lists.osmocom.org

October 2014

3 participants
2 discussions

Incomplete trace (due to high-speed SIM?)
by Min Xu 18 Nov '14

18 Nov '14

*Holger Hans Peter Freyther* holger at freyther.de <simtrace%40lists.osmocom.org?Subject=Re%3A%20Incomplete%20trace%20%28due%20to%20high-speed%20SIM%3F%29&In-Reply-To=%3C20130522102301.GP14728%40xiaoyu.lan%3E> *Wed May 22 12:23:01 CEST 2013* | On Tue, May 21, 2013 at 03:53:45PM +0200, Arthur Léna wrote: | >* I tried booting the iPhone using 2 different SIMs (this one from * | >* Free Mobile and another one) and the trace seems very short using | *>* the Free Mobile in comparison to the other one. By parsing the ATRs | *>* of both SIMs, I found out that the communication is done at 312500 | *>* bits/s with the Free Mobile SIM and only 78125 bits/s (for a clock | *>* running at 5MHz). Could this explain the loss of entire ADPUs by the * | >* tracer? If yes, is there a way to remedy to this problem (firmware * | >* update for example). *| Some people reported success by reducing the size of buffered bytes in the | firmware. | holger Holger There appears to be numerous references to "decrease the buffer in the firmware" to workaround the problem of losing bytes... but can you clarify which buffer to decrease, in which source file? I am guessing it's the req_ctx.c / req_ctx.h? Thanks

7 19

sniffing hangs / too fast sim? / parsing problem?
by Lukas Kuzmiak 24 Oct '14

24 Oct '14

Hey guys, this problem has been around for ages (from my perspective) .. and I don't seem to understand if it's a SW issue or a HW issue. I start the ./simtrace .. and then insert the SIM into the phone (or vice versa), boot up the phone and start sniffing (log below). It works for a second or two and then the stuff get broken into weird parts .. I could probably fix that in apdu_split.c but the other issue is that it stops sniffing completely at that point for some reason. Any idea why that happens? Thanks! Lukas Entering main loop ATR APDU: 3b 9e 96 80 1f c7 80 31 e0 73 fe 21 1b 66 d0 01 7b 8f 0d 00 f8 PPS(Fi=9/Di=6) APDU: 00 a4 00 04 02 3f 00 61 2e APDU: 00 c0 00 00 2e 62 2c 82 02 78 21 83 02 3f 00 a5 09 80 01 71 83 04 00 00 95 d5 8a 01 05 8b 03 2f 06 02 c6 09 90 01 40 83 01 01 83 01 81 81 04 00 01 50 f2 90 00 APDU: 00 a4 08 04 02 2f e2 61 1b APDU: 00 c0 00 00 1b 62 19 82 02 41 21 83 02 2f e2 a5 03 80 01 71 8a 01 05 8b 03 2f 06 01 80 02 00 0a 90 00 APDU: 00 b0 00 00 0a 98 94 22 14 51 02 31 21 51 f0 90 00 APDU: 00 a4 00 04 02 2f 05 61 1b APDU: 00 c0 00 00 1b 62 19 82 02 41 21 83 02 2f 05 a5 03 80 01 71 8a 01 05 8b 03 2f 06 05 80 02 00 08 90 00 APDU: 00 b0 00 00 08 64 65 65 6e 66 72 ff ff 90 00 APDU: 80 10 00 00 1e ff ff ff ff 7f 9f 00 df ff 00 00 1f e2 00 00 00 83 fb 00 07 06 01 60 00 11 00 00 00 00 18 91 44 APDU: 80 12 00 00 44 d0 42 81 03 01 25 00 82 02 81 82 05 0c 53 4d 53 20 53 65 72 76 69 63 65 73 8f 0e 01 49 6e 66 6f 20 53 65 72 76 69 63 65 73 8f 0b 02 57 7c 72 74 65 72 62 75 63 68 8f 06 03 45 4d 61 69 6c 8f 04 04 46 61 78 90 00 APDU: 00 a4 00 04 02 2f 00 61 21 APDU: 00 c0 00 00 21 62 1f 82 05 42 21 00 26 02 83 02 2f 00 a5 03 80 01 71 8a 01 05 8b 03 2f 06 04 80 02 00 4c 88 01 f0 00 00 APDU: b2 01 04 26 b2 61 1e APDU: 4f 10 a0 00 00 00 87 APDU: 10 02 ff 33 ff ff 89 APDU: 01 01 01 00 50 0a 4f APDU: 32 2d 47 65 72 6d 61 APDU: 6e 79 ff ff ff ff ff APDU: ff 90 00 00 b2 02 04 APDU: 26 b2 ff ff ff ff ff

3 4