Posts

Showing posts with the label Wireshark

More ActiveGPS inspection with Python/Wireshark/Ghidra

Image
Python, Wireshark, ActiveGPS.exe, Ghidra My ActiveGPS device, purchased maybe 15 years ago (no more produced)  Hardware used: https://techcoderadio.blogspot.com/2025/04/some-activegps-pymocking.html Enhanced version of the PyMock for the ActiveGPS (due to hw setup many retries required when running with sleep or flush .... maybe com0com would work better?). B = b'0303 ... firmware version, 3.6 is the latest version import serial import time A = b'00' B = b'03036F72AD18F8BF4B07DA01120B3215AF00' C = b'00000' D = b'00' E = b'00' J = [      b'18F8BF4B07DA01120B3215AFFFFFFFFF',      b'409CA961000050124EF175426C73AE41',      b'14060D0907DB5B58421D474A4A00FFFF',      b'FFFFFFF133FB33FB33FA33FA33FA33FA',      b'33FA33FA33FA33FA33FA33FA33FA33FA',      b'33FA33FFFFFFFFFFFFFFFFFFFFFFFFFF',      b'FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF',      b'FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF0000'...

ActiveGPS firmware update process

 10.1.2025 ActiveGPS firmware update process ActiveGPS MCU is PIC18F2455 &A   start op &B   device info &J    read EEPROM content Read FLASH content &E000000 &F ... &F Update firmware &H0108 &G001 ... &G00B Wireshark, export pcapng as plain text with data bytes Frame 2178: 27 bytes on wire (216 bits), 27 bytes captured (216 bits) on interface \\.\USBPcap5, id 0 0000  1b 00 60 15 59 06 05 d4 ff ff 00 00 00 00 09 00   ..`.Y........... 0010  00 05 00 01 00 83 03 00 00 00 00                  ........... Frame 2179: 565 bytes on wire (4520 bits), 565 bytes captured (4520 bits) on interface \\.\USBPcap5, id 0 0000  1b 00 a0 58 bc 09 05 d4 ff ff 00 00 00 00 09 00   ...X............ 0010  00 05 00 01 00 03 03 1a 02 00 00 26 47 30 30 30   ...........&G000 0020  30 30 30 30 30 ...

ActiveGPS exe

Image
16.2.2025 ActiveGPS exe By using DetectItEasy found commands &D &J &C01 &E &F &C33 &C67 &H &I &G &H0020 &B &E000000 &A Map;http://www.adteknik.com/map.htm?lat=%lat%&lng=%lon%&r=%radius% 7686    00136945    00537b45    Section(1)['.data']    09    A    MyMap.txt 7687    00136957    00537b57    Section(1)['.data']    08    A    placemap 7688    00136960    00537b60    Section(1)['.data']    07    A    loggmap 7689    00136968    00537b68    Section(1)['.data']    07    A    map.txt 7690    00136978    00537b78    Section(1)['.da...

QCSuper - Huawei E1552 mobile broadband USB stick

Image
 17.5.2024 QCSuper - Huawei E1552 mobile broadband USB stick VirtualBox Ubuntu 22.04 LTS Huawei E1552 mobile broadband HSDPA USB stick works with QCSuper AT$QCDMG - enable Diag Port sudo ./qcsuper.py --usb-modem 12d1:1001 --pcap-dump pc.cap   Wireshark live view started to work after stopping ModemManager sudo systemctl stop ModemManager

QCSuper: cheap 4G LTE Wifi modem

Image
 21.6.2024 QCSuper: cheap 4G LTE Wifi modem http://192.168.100.1 - login admin/admin http://192.168.100.1/usbdebug.html -- shows blank screen and activates ADB server.

Experimenting with QCSuper + Huawei e3276

Image
 7.5.2024 Experimenting with QCSuper + Huawei e3276 https://github.com/P1sec/QCSuper VirtualBox Windows host - Ubuntu 22.04 LTS quest OS Huawei e3276 mobile broadband 2G, 3G and LTE Win 10 driver for the e3276 does not exist. USB sharing to Ubuntu. I selected the Huawei device in Guest OS/VirtualBox, no permanent selected USB device filtering in VBox USB settings. Ubuntu recognizes it as mobile broadband device. e3276 is conneted to USB host with many other devices connected to the same hub. The connection is somewhat unstable in Ubuntu probably because of hub connection. Better to use without USB hub and VirtualBox. In Ubuntu there may be modem manager etc settings to properly set up mobile broadband device. Enable the diag port AT$QCDMG (pip3 install atcom)   sudo ./qcsuper.py --usb-modem /dev/ttyUSB00 --wireshark-live succeeds to start (despite port connection being a bit unstable) and launches Wireshark 4.24. Wireshark founds multiple problems .... maybe it is better to us...

SDR# TETRA plugin raw data output

Image
27.10.2022 SDR# TETRA plugin raw data output Many years ago the first TETRA demod plugin for the SDR# featured UDP port 20025 demod raw data output. This SDRSharp.TETRA.dll plugin also required M-SYS2, pacman and Tetra-RX to display TETRA decoded data in net info window. The plugin works without M-SYS2+Tetra-RX and outputs raw data to UDP port 20025.

Examining ActiveGPS USB serial port comms

Image
 2.5.2022 Examining ActiveGPS USB serial port comms ActiveGPS Wireshark USBPcap USBPcap USB port select - USBPcapCMD.exe Commands begin with &, e.g. &F, &A ...

Anytone AT-878UV 2+ USB serial port protocol

Image
 27.8.2022 Anytone AT-878UV 2+ USB serial port protocol Anytone AT-878UV 2+ firmware 2.05 Wireshark + USBPcap D878UVII version 2.05 Windows software Wireshark: Interface id: 0 (\\.\USBPcap5) Ascii text END sent to Anytone when D878UV software finishes read data D878UV sends PROGRAM when starting reading data from Anytone AT-878 and model info

SDR# TETRA demod plug-in UDP output

Image
 26.3.2021 SDR# TETRA demod plug-in UDP output SDR# TETRA demod plug-in: http://rtl-sdr.ru/page/plagin-dlja-priema-tetra (https://github.com/vgpastor/SDR-Tetra-Plugin) features UDP output port in config. Tetra-rx program (MSYS2 required in Windows) accepts its output data (which is demodulated dibits) Wireshark adapter for capturing local loopback traffic shows tetra-rx messages Raw data logging in Wireshark can be done with local loopback traffic capture by using capture filter udp port x