simtrace

simtrace@lists.osmocom.org

350 discussions

Re: My progress with 5V SIM investigation
by Min Xu 18 Nov '22

18 Nov '22

I just recently made some changes to my 1.4 firmware to support Man-in-the-Middle modification of ATR because some device apparently changes the Vcc to 1.8v after reading the ATR that indicates the card supports Class C. I don't have access to the device that exhibit this behavior so I was using a USB Smartcard reader to test it, and my Oscilloscope capture shows that the PC was using 5v vddio mode. The SIMtrace 1 are 5v tolerant, and the last time I looked at Cstartup.asm I believe we set the internal pull-ups to disabled, which is "safe" according to the Atmel part documentation. So long as 5v IO levels are not "on"/"fed" into the PIO lines while the device is in reset, this is probably not an issue for SIMtrace 1 boards. > From: Mychaela Falconia <mychaela.falconia(a)gmail.com> > To: simtrace(a)lists.osmocom.org > Cc: > Bcc: > Date: Tue, 25 Oct 2022 20:03:23 -0800 > Subject: My progress with 5V SIM investigation > Hello SIMtrace community, > > I mentioned earlier on this list, and also in last week's OsmoDevCall, > that I play with some old phones that *may* be putting out 5V toward > the SIM, which SIMtrace2 hw does not tolerate - 5V exceeds the absolute > maximum rating spec of SAM3S chip. > > As the first step in the investigation, I cobbled together a simple > PCB design for a purely passive adapter that connects a SIM socket to > FPC cables from current Sysmocom SIMtrace kits, plus 2.54 mm headers > on both sides of the SIM socket providing convenient probing access to > all signals. This trivial design can be found in my fc-small-hw Hg > repository: > > https://www.freecalypso.org/hg/fc-small-hw/ > > Look in the sim-fpc-pasv directory inside the Hg repo. I haven't sent > this little PCB out to fab yet, but I plan on doing so when my budget > allows it, hopefully no later than a week from now. When I get this > adapter board fabbed and assembled, I will test it with my current > collection of old phones (Ericsson I888, Nokia 5190 and 6190) and see > if any of these phones put out 5V toward the SIM. > > Nokia 5190 and 6190 are powered by 3-cell NiMH batteries, but they > still might put out 5V toward the SIM if they include a charge pump or > some other boost converter. At least in TI chipset history, prior to > our well-known Calypso+Iota chipset, their previous ABB chip Nausica > (used in the legendary TSM30, apparently) could put out either 3V or > 5V toward the SIM, selection under fw control, while powered by a > 3-cell NiMH or 1-cell Li-ion battery, doing some kind of boost > conversion for 5V. (I never found a datasheet for that ancient ABB, > so I don't know the full details.) It will be interesting to know > what Nokia 5190 and 6190 do in this regard. It will also be > interesting to see what Ericsson I888 puts out: it is an older, > higher-voltage beast, powered by a 4-cell NiMH battery, and if the > designers felt like operating the SIM in "5V" or Class A mode, they > could have used raw battery voltage without conversion, as the spec is > 4.5 V minimum IIRC. > > During last week's OsmoDevCall Kevin said that he had some SIMtrace1 > boards with ARM7S, which the datasheet says is 5V-tolerant, and I > recall him saying that he could send me one. To Kevin: I greatly > appreciate your offer, and I may indeed take you up on it in another > few weeks - but let me build my sim-fpc-pasv adapter first, and see > what voltages are actually put out by phones in my collection. > > Now the really interesting phone would be Nokia 2190 - supposedly one > of the very first PCS1900 band GSM phones sold in USA, from around > 1995. That one is powered by a 5-cell NiMH battery and thus seems > very likely to put out 5V toward the SIM, possibly always, without > ever switching down to 3V. I don't have one to test, aside from a > sealed box which I am reluctant to cut open (told it may be worth > a fortune some day, the usual story), but another person on Reddit > says that these phones are very finicky in terms of which SIMs they > accept. I sent him a few of my FCSIM1 cards, equivalent to > sysmoSIM-GR2, a pure GSM 11.11 SIM without any UICC at all, very > old-fashioned, and my contact tells me that Nokia 2190 rejects these > SIMs too! It was my desire to use SIMtrace to see what's happening > with that finicky 2190 that prompted my investigation into 5V > tolerance - and when I get my sim-fpc-pasv adapter built, I will get > back in touch with my Nokia 2190 contact person from Reddit and see > how he would like to proceed. > > M~ > _______________________________________________ > simtrace mailing list -- simtrace(a)lists.osmocom.org > To unsubscribe send an email to simtrace-leave(a)lists.osmocom.org

3 4

Log coloring disable, bankd GSMTAP, and RSPRO client reestablish delay
by James Tavares 15 Nov '22

15 Nov '22

Hello, Forgive me as I don’t know the protocol for requesting this, but I was looking for a 2nd reviewer willing to consider the following three PRs on osmo-remsim: bankd, client, server: add -L option to disable log coloring * https://gerrit.osmocom.org/c/osmo-remsim/+/30154 bankd: Add GSMTAP functionality for SIM traffic * <https://gerrit.osmocom.org/c/osmo-remsim/+/30154> https://gerrit.osmocom.org/c/osmo-remsim/+/30139 rspro_client: implement re-establish delay * https://gerrit.osmocom.org/c/osmo-remsim/+/30138 * addresses issues https://osmocom.org/issues/5348 and https://osmocom.org/issues/5610 Regarddss, James James Tavares Lead Software Engineer KVH Industries, Inc. 50 Enterprise Center | Middletown, RI 02842 Direct Tel: +1 401.845.2416 Tel: +1 401.847.3327 | Fax: +1 401.845.8149 jtavares(a)kvh.com<mailto:jtavares@kvh.com> http://www.kvh.com<http://www.kvh.com/>

1 0

My progress with 5V SIM investigation
by Mychaela Falconia 26 Oct '22

26 Oct '22

Hello SIMtrace community, I mentioned earlier on this list, and also in last week's OsmoDevCall, that I play with some old phones that *may* be putting out 5V toward the SIM, which SIMtrace2 hw does not tolerate - 5V exceeds the absolute maximum rating spec of SAM3S chip. As the first step in the investigation, I cobbled together a simple PCB design for a purely passive adapter that connects a SIM socket to FPC cables from current Sysmocom SIMtrace kits, plus 2.54 mm headers on both sides of the SIM socket providing convenient probing access to all signals. This trivial design can be found in my fc-small-hw Hg repository: https://www.freecalypso.org/hg/fc-small-hw/ Look in the sim-fpc-pasv directory inside the Hg repo. I haven't sent this little PCB out to fab yet, but I plan on doing so when my budget allows it, hopefully no later than a week from now. When I get this adapter board fabbed and assembled, I will test it with my current collection of old phones (Ericsson I888, Nokia 5190 and 6190) and see if any of these phones put out 5V toward the SIM. Nokia 5190 and 6190 are powered by 3-cell NiMH batteries, but they still might put out 5V toward the SIM if they include a charge pump or some other boost converter. At least in TI chipset history, prior to our well-known Calypso+Iota chipset, their previous ABB chip Nausica (used in the legendary TSM30, apparently) could put out either 3V or 5V toward the SIM, selection under fw control, while powered by a 3-cell NiMH or 1-cell Li-ion battery, doing some kind of boost conversion for 5V. (I never found a datasheet for that ancient ABB, so I don't know the full details.) It will be interesting to know what Nokia 5190 and 6190 do in this regard. It will also be interesting to see what Ericsson I888 puts out: it is an older, higher-voltage beast, powered by a 4-cell NiMH battery, and if the designers felt like operating the SIM in "5V" or Class A mode, they could have used raw battery voltage without conversion, as the spec is 4.5 V minimum IIRC. During last week's OsmoDevCall Kevin said that he had some SIMtrace1 boards with ARM7S, which the datasheet says is 5V-tolerant, and I recall him saying that he could send me one. To Kevin: I greatly appreciate your offer, and I may indeed take you up on it in another few weeks - but let me build my sim-fpc-pasv adapter first, and see what voltages are actually put out by phones in my collection. Now the really interesting phone would be Nokia 2190 - supposedly one of the very first PCS1900 band GSM phones sold in USA, from around 1995. That one is powered by a 5-cell NiMH battery and thus seems very likely to put out 5V toward the SIM, possibly always, without ever switching down to 3V. I don't have one to test, aside from a sealed box which I am reluctant to cut open (told it may be worth a fortune some day, the usual story), but another person on Reddit says that these phones are very finicky in terms of which SIMs they accept. I sent him a few of my FCSIM1 cards, equivalent to sysmoSIM-GR2, a pure GSM 11.11 SIM without any UICC at all, very old-fashioned, and my contact tells me that Nokia 2190 rejects these SIMs too! It was my desire to use SIMtrace to see what's happening with that finicky 2190 that prompted my investigation into 5V tolerance - and when I get my sim-fpc-pasv adapter built, I will get back in touch with my Nokia 2190 contact person from Reddit and see how he would like to proceed. M~

1 0

Osmocom binary package repository URLs have changed
by Harald Welte 25 Oct '22

25 Oct '22

Hello various Osmocom mailing lists, as previously announced (https://osmocom.org/news/191): * The binary packages are being built on Osmocom's own OBS server now. * We will stop pushing packages to the openSUSE OBS server at the end of October (in one week). If you are using Osmocom binary packages, please make sure that you have configured the new repository URLs. See the wiki for details: https://osmocom.org/projects/cellular-infrastructure/wiki/Binary_Packages Regards, Harald -- - Harald Welte <laforge(a)osmocom.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

OsmoDevCall on Oct 19, 2022: SIMtrace2 Tutorial
by Harald Welte 18 Oct '22

18 Oct '22

Dear Osmocom community, after a rather extended 2022 summer break, we're happy to announce the next incarnation of OsmoDevCall. Based on the recent polls, the timing has shifted to *every 3rd wednesday of the month*! when: October 19, 2022 at 20:00 CEST where: https://meeting5.franken.de/b/har-xbc-bsx-wvs In this edition, I will be presenting a SIMtrace2 tutorial, showing SIM card protocol tracing, decoding with the new pySim-trace as well as the card emulation firmware. This meeting will have the following schedule: 20:00 meet + greet 20:10 presentation as outlined above 21:00 unstructured supplementary social event [*] Attendance is free of charge and open to anyone with an interest in Osmocom or open source cellular technologies. More information about OsmoDevCall, including the schedule for further upcoming events can be found at https://osmocom.org/projects/osmo-dev-con/wiki/OsmoDevCall Looking forward to meeting you soon! Best regards, Harald [*] this is how we started to call the "unstructured" part of osmocom developer conferences in the past, basically where anyone can talk about anything, no formal schedule or structure. -- - Harald Welte <laforge(a)osmocom.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

RFC: OsmoDevCall restart: Your input required
by Harald Welte 16 Oct '22

16 Oct '22

Dear Osmocom community, your input is required in order to tune the re-launch of the OsmoDevCall talk series. One of the complaints before the suspension in Summer this year was that the "Friday night 8pm CEST" timeslot was not exactly ideal for several people. Finding a common denominator might be difficult, given that Osmocom is a dayjob for some, a hobby for most, and we're of course not all in the same time zone or even continent. So let's try to run a couple of polls to figure out: * What is the best day of the week for OsmoDevCall? https://bitpoll.de/poll/CEQnaQKEvO/ * What is the best time of day for OsmoDevCall? https://bitpoll.de/poll/59dgmzOocT/ * What is the best frequency of OsmoDevCall https://bitpoll.de/poll/8jyuRJB6Hb/ The polls are open until October 21st, 2021. I would appreciate a high turn-out so we have a good representation across our community to make an educated decision about the schedule of futur events. Can't wait to re-start OsmoDevCall! Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 1

SIMtrace v2 and phones that put out 5V toward the SIM
by Mychaela Falconia 14 Oct '22

14 Oct '22

Hello SIMtrace community, I just bought a SIMtrace v2 hw kit, and I am looking to use it for the purpose of troubleshooting ancient phones. I've been working with Calypso phones mostly, but now I am traveling farther back in time in the history of GSM, playing with phones from 1990s. I bring these phones up on my own GSM network run with a sysmoBTS plus Osmocom CNI sw stack, and I use programmable SIMs of which I bought a semi-custom batch from China a year and a half ago, semi-custom batch meaning my own artwork on the plastic and my choice of 2FF-only cut, but the actual module is unmodified off-the-shelf, the only thing I could get as a low-dollar customer. These SIMs (I named my version FCSIM1) appear to be identical to the model known in the Osmocom community as GrcardSIM2, once sold as sysmoSIM-GR2. Here is the issue: my SIMs work just fine in Ericsson I888, Nokia 5190 and Nokia 6190 - all 1990s phones - bringing these ancient phone onto my Osmocom-based GSM network quite happily. But I am interacting with another member of the vintage phone community (r/vintagemobilephones on Reddit) who has a few working Nokia 2190s - a phone model from 1995, one of the first PCS1900 band phones ever - and he tells me that this super-ancient model is very finicky in terms of which SIMs it accepts. There are several T-Mobile MVNOs who issue SIMs that still have the classic GSM 11.11 SIM application present, and they work fine in most ancient phones, including Nokia 5190 and 6190, but they don't work in 2190 - my contact tells me that he found only one MVNO (Lycamobile) whose SIMs do work in the 2190. Intrigued, I sent him a few of my FCSIM1 cards, he tested one in a 2190, and he tells me the ancient phone rejects this SIM too. :-( At this point the rational course of action ought to be to trace the SIM-ME communication between the finicky phone and one of each kind of SIM: the kind it accepts, and the kind it doesn't accept, and see what it barfs on. But I just realized a problem: there is a very high likelihood that the ancient phone feeds 5V to the SIM (Nokia 2190 is powered by a 5-cell NiMH battery, so it has plenty of voltage headroom inside to put out 5V), and my reading of Atmel's datasheet for the SAM3S chip on the SIMtrace board tells me that 5V will fry it: the electrical specifications chapter of the datasheet lists 4.0 V as the Absolute Maximum Rating for all pins, including those GPIO pins that are wired to the phone connection on the SIMtrace board. Just checking to see if my understanding is correct: is SIMtrace v2 indeed absolutely NOT tolerant of phones that put out 5V toward the SIM? Not tolerant to the point that it would not simply not work, but would *fry* the SAM3S chip? If the board part of SIMtrace v2 kit is of no use with ancient phones that put out 5V, I reason that I should still be able to make use of FPC cables: I just need a little adapter PCB that hosts a SIM socket and a connector for the FPC to go into, with accessible points for probing with an o'scope or a logic analyzer - it just needs to be a purely passive, connections only PCB, without any ICs that would be fried by high voltages. Would anyone happen to know if I can still buy such an adapter PCB anywhere (I read that such were used in the beginning of the project before the first custom SIMtrace board), or will I need to spin out that adapter PCB myself? TIA, Mychaela

2 2

RemSIM SIM Originating Traffic
by Marc Wilson 28 Sep '22

28 Sep '22

Hi Harald, I'm hoping you may be able to give me your insight into something before I start a debug process. I have observed several instances where commands/traffic issued by the SIM are not implemented (seemingly not received) by the modem whilst utilising the RemSIM connection. Two examples I have recorded are of a UICC reset (refresh type '03' (= NAA Initialization)) and of a proactive 'open channel' command. Is this something that you would expect within the application (essentially a single 'initiation' traffic flow - modem to card but not card to modem)? Thanks, Marc Marc Wilson Technical Consultant t: +44 1483 802 503 | w: eseye.com LinkedIn | Twitter | YouTube | Blog This email is from Eseye . Address: 20 Nugent Road, Guildford, Surrey, GU2 7AF, United Kingdom. Registered in England and Wales - number 06397669. VAT: GB921298326. ISO 27001: 2013 Certified. Eseye accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided unless that information is subsequently confirmed in writing. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. If you are not the intended recipient, please notify the sender and delete this email and any attachments. Eseye, Infinity IoT Platform, AnyNet, AnyNet Secure and Eseye Logos are registered trademarks. © 2022 Eseye Limited. All rights reserved.

2 2

Project based on Simtrace v2
by Cretu-Torica Alexandru-Gabriel 09 Aug '22

09 Aug '22

Hi, I am Gabriel from Rapid Prototypes Ltd. from Cyprus; I have decided to contact you because I need assistance regarding the Simtrace v2 device. We have a Project and I don't have for now the qualified person which can help me with this project which is based on Simtrace v2, and , I do hope that someone can provide me the requested assistance and in this case I can pay very very well . Please let me know if there is someone available to work on this project: - basically what I need is to connect between them two Simtrace v2 device's, which communicates between them, one Simtrace v2 device which I will use like a Transmitter and this device it is in a country , but other Simtrace v2 device, which I will use it like the receiver, it will be in another country; So , what I need is that the two of them are connected over the Internet, doesn't matter how (using a Raspberry or etc.) and one Simtrace it is used to read a Smart Card and to send in real time the data to the other Simtrace which will act like a card emulator; Please let me know if you are able to work on this project, Thanks

1 0

Simtrace2 Projects
by Marc Wilson 08 Aug '22

08 Aug '22

Hello, I am currently working on several projects for IoT based solutions using the SIMTrace2 board and software. I have not been able to locate/install the SIMTrrace2-remsim application. Whilst I have SIMTrace2 itself installed and functional there is no reference to the remsim function. I am using binaries from the Raspbian 11 repo. The related wiki indicates that remsim would be part of the SIMTrace2 installation (albiet referencing the method of compiling locally). However, I find no reference to it in my standard installation. Would it be possible to point me in the right direction to install this function? Is there an alternate version of the software required to do this? Many thanks, Marc Wilson Marc Wilson Technical Consultant t: +44 1483 802 503 | w: eseye.com LinkedIn | Twitter | YouTube | Blog This email is from Eseye . Address: 20 Nugent Road, Guildford, Surrey, GU2 7AF, United Kingdom. Registered in England and Wales - number 06397669. VAT: GB921298326. ISO 27001: 2013 Certified. If you are not the intended recipient, please notify the sender and delete this email and any attachments. Eseye, AnyNet, AnyNet Secure and Eseye Logos are registered trademarks. 2021 Eseye Limited. All rights reserved.

3 6

← Newer
1
2
3
4
5
6
7
8
9
...
35
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

simtrace