osmo_apdu_segment_in() doesn't have the context of the previous APDU,
for nearly all calls this is fine, except for GP GET DATA, which can be
a case 2 or case 4 APDU.
GP GET DATA defines the Le field as 0x00 which is used by osmo_apdu_segment_in
to detect if it is a case 2 or case 4.
However a card can respond with the SW 6cXX, which means the previous
command must be resend with a Le field XX, which got misinterpreted by
the osmo_apdu_segment_in() as a case 4 resulting in a timeout waiting for
more data.
Modem <-> Card
81cadf2000 ->
<- 6c0b
81cadf200b ->
-- Simtrace waits for more data because it wrongly decodes it as APDU case 4
instead of case 2.
Related: SYS#8147
Change-Id: Ie238662e7e6a10dd4283ede0c8d8d73bc375c247
SIMtrace v2.0
This is the repository for the next-generation SIMtrace devices, providing abilities to trace the communication between (U)SIM card and phone, remote (U)SIM card forward, (U)SIM man-in-the-middle, and more.
NOTE: Nothing in this repository applies to the SIMtrace v1.x hardware or its associated firmware. SIMtrace v1.x is based on a different CPU / microcontroller architecture and uses a completely different software stack and host software.
Supported Hardware
- Osmocom SIMtrace2 with SAM3 controller
- this is open hardware and schematics / PCB design is published
- pre-built hardware available from sysmocom webshop
- Osmocom ngff-cardem M.2/NGFF modem carrier with SAM3 controller
- this is open hardware and schematics / PCB design is published
- pre-built hardware available from sysmocom webshoo
- sysmocom sysmoQMOD (with 4 Modems, 4 SIM slots and 2 SAM3)
- this is a proprietary device, publicly available from sysmocom
- hardware evaluation kit available from sysmocom webshop
- sysmocom OWHW (with 2 Modems and 1 SAM3 onboard)
- this is not publicly available hardware, but still supported
This Repository
This repository contains several directory
- firmware - the firmware to run on the actual devices
- hardware - some information related to the hardware
- host - Programs to use on the USB host to interface with the hardware
The host software includes
- libosmo-simtrace2 - a shared library to talk to devices running the simtrace2 firmware
- simtrace2-list - list any USB-attached devices running simtrace2 firmware
- simtrace2-sniff - interface the 'trace' firmware to obtain card protocol traces
- simtrace2-cardem-pcsc - interface the 'cardem' firmware to use a SIM in a PC/SC reader
Do not expect SIMtrace2 to work in VMs
We only support running SIMtrace2 together with a Linux system running "bare iron" on actual hardware (x86, x86_64, arm, ...). using VMs with USB pass-through for things with critical timing like SIMtrace2 is calling for trouble and we will not accept related bug reports or support you if you do. If you still want to use VMs: Feel free to do so, but understand that it's unsupported and you are on your own.
Debug UART
The debug UART configuration is 921600 8N1, TTL 3.3V.
On the simtrace 2 use either a 2.5 mm stereo headphone connector (tip = TX, ring = RX, sleeve = GND) or the nearby DEBUG port (pin 1 = GND, pin 4 = TX, pin 5 = RX).