simtrace

simtrace@lists.osmocom.org

350 discussions

[PATCH 1/3] Include <stdlib.h> for malloc() and free()
by Peter Stuge 15 Aug '11

15 Aug '11

--- host/main.c | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/host/main.c b/host/main.c index a1e5600..1823857 100644 --- a/host/main.c +++ b/host/main.c @@ -19,6 +19,7 @@ #include <errno.h> #include <unistd.h> #include <stdio.h> +#include <stdlib.h> #include <string.h> #include <stdint.h> #include <time.h> -- 1.7.4.1.343.ga91df.dirty

2 3

tags for the hardware
by Holger Hans Peter Freyther 15 Aug '11

15 Aug '11

Hi all, are there tags for the v1.0p hardware and other prototypes? I don't see them with git tag -l. holger

2 1

[PATCH] fix simtrace crash when unpluging usb
by Luka Perkov 12 Aug '11

12 Aug '11

This patch should fix the crash from simtrace app when SIMtrace hardware is unpluged from usb or when it is reseted. This feature was proposed on simtrace workshop on ccc camp. Signed-off-by: Luka Perkov < lists ->-to->- lukaperkov.net > --- diff --git a/host/main.c b/host/main.c index a1e5600..61656be 100644 --- a/host/main.c +++ b/host/main.c @@ -187,7 +187,14 @@ int main(int argc, char **argv) rc = usb_bulk_read(udev, SIMTRACE_IN_EP, buf, sizeof(buf), 100000); if (rc < 0 && rc != -EAGAIN) { fprintf(stderr, "Error submitting BULK IN urb: %s\n", usb_strerror()); - exit(1); + while (1) { + udev = usb_find_reopen(SIMTRACE_USB_VENDOR, SIMTRACE_USB_PRODUCT); + if (!udev) { + usleep(1000000); + } else { + break; + } + } } if (rc > 0) { //printf("URB: %s\n", osmo_hexdump(buf, rc)); diff --git a/host/usb_helper.c b/host/usb_helper.c index 231363a..97ea7b6 100644 --- a/host/usb_helper.c +++ b/host/usb_helper.c @@ -28,6 +28,8 @@ #include <usb.h> +static struct usb_dev_handle *hdl; + static struct usb_device *find_usb_device (uint16_t vendor_id, uint16_t product_id) { struct usb_bus *bus; @@ -46,8 +48,6 @@ static struct usb_device *find_usb_device (uint16_t vendor_id, uint16_t product_ struct usb_dev_handle *usb_find_open(uint16_t vendor_id, uint16_t product_id) { struct usb_device *dev; - struct usb_dev_handle *hdl; - usb_init(); usb_find_busses(); usb_find_devices(); @@ -56,7 +56,7 @@ struct usb_dev_handle *usb_find_open(uint16_t vendor_id, uint16_t product_id) if (!dev) { fprintf(stderr, "Cannot find matching USB Device. " "Are you sure it is connected?\n"); - exit(1); + return NULL; } hdl = usb_open(dev); @@ -74,3 +74,12 @@ struct usb_dev_handle *usb_find_open(uint16_t vendor_id, uint16_t product_id) return hdl; } + +struct usb_dev_handle *usb_find_reopen(uint16_t vendor_id, uint16_t product_id) +{ + if (hdl) { + usb_detach_kernel_driver_np(hdl, 0); + } + + return usb_find_open(vendor_id, product_id); +} diff --git a/host/usb_helper.h b/host/usb_helper.h index 13f96f8..0a9714c 100644 --- a/host/usb_helper.h +++ b/host/usb_helper.h @@ -22,5 +22,6 @@ #include <stdint.h> struct usb_dev_handle *usb_find_open(uint16_t vendor_id, uint16_t product_id); +struct usb_dev_handle *usb_find_reopen(uint16_t vendor_id, uint16_t product_id); #endif

1 0

SIMtrace poster for the Camp?
by Harald Welte 05 Aug '11

05 Aug '11

Hi all! I know it's a bit on short hand notice now, but maybe somebody is interested in doing a SIMtrace poster that we can put up in the Radio Village at the CCC Camp. It doesn't have to be super-fancy / super-glossy, just something that draws a bit of attention that SIMtrace is present there, and what it is. Some ideas for bullet points: * trace communication between phone and SIM * man-in-the-middle * analyze + debug SIM Toolkit * analyze proactive SIM * SIM firewall * SIM card emulation Printing the poster shouldn't be a problem, if somebody just wants to do the design as SVG. Thanks in advance if anyone finds time for doing it... -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

2 1

at91lib / multi-configuration device
by Harald Welte 02 Aug '11

02 Aug '11

Hi! It took me quite a long time to fix all the bugs I discovered in the at91lib USB stack, particularly in the CCID code. The next problem was that the core USB code could not deal wit devices that implement multiple configurations correctly. But finally I got it to work. There is now a multi-configuration project which is part of the git://git.gnumonks.org/at91work.git git repository. Curious people can type 'make' in the usb-device-multi-project sub-directory, which will render a usb-device-multi-project-simtrace-at91sam7s128-flash_dfu.bin file. That file can be flashed into the simtrace using dfu-util like this: dfu-util -a0 -D ./usb-device-multi-project-simtrace-at91sam7s128-flash_dfu.bin -R The firmware doesn't really do anything yet, but it should show up on USB as a device with three configurations (one for sniffer, one for reader and one for MITM). I've started to port over my sniffer code from the openpcd repository, but I'm not sure when I'll have time to finish it. Maybe still before the camp, we'll see... Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

Simtrace production hardware
by Harald Welte 30 Jul '11

30 Jul '11

Hi all, the 100 SIMtrace production units have recently arrived from the SMT factory. While this is good news, there are some bad news as well: 1) blocking capacitor C12 too far from LDO causing power oscillations This problem can easily be re-worked by manually soldering a capacitor immediately to the LDO input pin. Even though 60-75% of the units seem to work without the re-work, we're adding it to make sure there are no issues later on. 2) something like 20 to 25% of the units have some problem related to the initial programming of the SAM-BA loader. Everything works fine if the flashing is been done via JTAG, or later using sam7dfu + dfu-util. The problem is still under investigation, but despite something like 6 hours debugging and soldering additional capacitors, even replacing the entire SAM7S have not rendered any results. Please don't ask me to ship some units yet, as we are still testing them. As per our original schedule, we will start to sell them at the CCC Camp and then offer a webshop from the second half of August onwards. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

Roadmap for SIMtrace firmware
by Harald Welte 30 Jul '11

30 Jul '11

Hi all! I just waned to give you a heads-up of where I want to be heading with regard to the simtrace firmware. Right now we still use a hacked add-on to the OpenPCD firmware I wrote some 5 years ago. This was a quick way to get something working, as I knew the code base. It has served that purpose: We quickly had a firmware for sniffing mode. That code had been developed before Atmel started to publish ther at91lib software packages which contain a lot of (probably better tested and more portable) code supporting a wide range of Atmel ARM devices. at91lib is especially strong on the USB side, where there are not only implementations of CDC-ACM (serial), CCID (smartcard reader), mass storage, usb-audio, etc. - but also composite devies out of multiple of the above. So what I have in mind for simtrace now is to move forward using at91lib. However, at91lib does (obviously) not support my sam7dfu boot loader / flasher. DFU has been proven an exremely helpful tool for R&D type projects, where you need quick turn-around times for testing new code in absence of a JTAG setup. Using the SAM-BA loader is pretty annoying even after a short time, the constant cycles of usb-plug/unplug, jumper closing and opeing quickly wears out not only your nerves but even the usb plug or socket. I know people who have built USB cables with a power switch in the Vbus line, but even that does only half the trick. So what I'm now doing is adding linker scripts + startup magic to at91lib so it can build .bin files that can be downloaded using the sam7dfu bootloader on the device, and dfu-util on the host PC. Once that is finished, I intend to: * port over the existing 'sniffer mode' code from the openpcd.git repository and 'glue' it behind a CDC-ACM device. This means that in the future, all operatign systems will only see a serial device with APDUs coming out of them. * use the at91lib-provided CCID code to build a second firmware image for a 'reader mode', where the PC can use simtrace as smartcard reader * later merge the two into a single firmware with two alternative USB configurations * finally, add a 'softsim' mode, where the PC can simulate the SIM card to the phone. I'm not sure what I'll do on the USB protocol side for this. Chances are high it's again CDC-ACM - but this time simultaneously with CCID for the reader side, for man-in-the-middle. The advantage here is that we don't need to work with libusb, which apparently can be challenging for users of legacy operating systems ;) Thus, the ideal situation would be a single firmware image that provides three alternate configurations: Sniffer, Cardreader and MITM. Any help is of course very much appreciated. I'll push my at91lib git tree with sam7dfu support as soon as I've done some testing (I'm travelling and unfortunately forgot my 2.5mm jack USB-serial cable). Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 1

capacitor at Vcc of the card
by Harald Welte 19 Jul '11

19 Jul '11

Hi all, just before I forget it agan: I recently read in a completely different context that ISO7816 mandates a capacitor being placed very close to the acutak SIM card socket. It would be good to check the specs and see if this is true. If yes, we might add it to the next version of the hardware, just to be sure. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

Bounce action notification
by mailman＠lists.osmocom.org 19 Jul '11

19 Jul '11

This is a Mailman mailing list bounce action notice: List: simtrace Member: andre(a)ac.nl.eu.org Action: Subscription disabled. Reason: Excessive or fatal bounces. The triggering bounce notice is attached below. Questions? Contact the Mailman site administrator at mailman(a)lists.osmocom.org.

1 0

Active Manipulation SIM-ME
by Dirk Kirsten 15 Jul '11

15 Jul '11

Hello, We would like to do some active manipulation between our ME and the SIM card. As I understood correctly, the hardware SIMtrace project is just about passive monitoring the traffic in between, am I right? So this seems to be inappropriate for our aims. So we thought about a solution more like the RebelSIM card, which is documented as well in the osmocomBB wiki. Unfortunately, the information given there are also very vague. So maybe it is just outdated: Does anybody worked with the RebelSIM card in a way that they try to manipulate the responses from the SIM (or do something else, except from unlocking their phone)? Is it possible to flash it via SIM card interface?! What we actually want to do is to replace same values, e.g. we want to provide another Kc than the SIM card in fact has (this is solely a research project). So maybe there is some other way to do is, except the approach based on RebelSIM? If so I would be grateful for your valuable feedback. Cheers, Dirk

6 9

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

simtrace