Wiki » History » Version 8
laforge, 07/04/2018 03:59 PM
1 | 1 | tsaitgaist | h1. Osmocom SIMtrace 2 |
---|---|---|---|
2 | |||
3 | 8 | laforge | Osmocom SIMtrace 2 is a software, firmware and hardware system for passively tracing SIM-ME communication between the SIM card and the mobile phone, and remote SIM operation. |
4 | 1 | tsaitgaist | |
5 | It is a followup of the "SIMtrace project":https://osmocom.org/projects/simtrace/wiki/SIMtrace, providing more functionalities (e.g. remote SIM operation) and supporting multiple boards (e.g. SIMtrace with SAM3S, "sysmoQMOD":https://www.sysmocom.de/products/sysmoqmod/index.html). |
||
6 | |||
7 | h2. Hardware |
||
8 | |||
9 | 8 | laforge | The SIMtrace 2 firmware supports several boards (see below) |
10 | 1 | tsaitgaist | |
11 | 8 | laforge | The firmware is written for a "ATSAM3S4B":https://www.microchip.com/wwwproducts/en/ATSAM3S4B micro-controller, replacing the old "AT91SAM7S64":https://www.microchip.com/wwwproducts/en/AT91SAM7S64 used by the older "SIMtrace":https://osmocom.org/projects/simtrace/wiki/SIMtrace |
12 | 1 | tsaitgaist | |
13 | 8 | laforge | Note: The SAM3S is meanwhile also labelled as _not recommended for new designs_ by Atmel. However, there are plenty of hardware and software compatible upgrade options, including SAM4S, in the future. |
14 | 1 | tsaitgaist | |
15 | 8 | laforge | h3. SIMtrace2 |
16 | |||
17 | 1 | tsaitgaist | The SAM3S is pin compatible with the SAM7S. |
18 | 8 | laforge | This allows to continue using the same "SIMtrace":https://osmocom.org/projects/simtrace/wiki/SIMtrace_Hardware circuit board, just by replacing the micro-controller. |
19 | 1 | tsaitgaist | |
20 | Note: This hardware is open source. |
||
21 | |||
22 | h3. sysmoQMOD |
||
23 | |||
24 | The SAM3S micro-controller with SIMtrace 2 firmware is also used on the "sysmoQMOD":https://www.sysmocom.de/products/sysmoqmod/index.html board to provide remote SIM operation capabilities. |
||
25 | |||
26 | Note: This hardware is not open source. |
||
27 | |||
28 | h2. Firmware |
||
29 | |||
30 | The SIMtrace 2 firmware source code is available "here":https://git.osmocom.org/simtrace2/ but is still under development. |
||
31 | 8 | laforge | |
32 | 1 | tsaitgaist | Once ready binary files will also be released. |
33 | |||
34 | 8 | laforge | The SIMtrace 2 firmware is a complete rewrite and *can only be flashed on hardware with SAM3S* ARM Cortex-M3-based micro-controllers. |
35 | |||
36 | *simtrace2 firmware is not compatible with the older "SIMtrace hardware":https://osmocom.org/projects/simtrace/wiki/SIMtrace_Hardware using SAM7S ARM7TDMI-based micro-controllers.* |
||
37 | 1 | tsaitgaist | |
38 | h3. Flashing |
||
39 | |||
40 | 3 | tsaitgaist | h4. DFU |
41 | |||
42 | SIMtrace 2 comes with a USB DFU bootloader pre-installed which allows to flash the application firmware over USB using the @dfu-util@ utility. |
||
43 | |||
44 | To get @dfu-util@: |
||
45 | <pre> |
||
46 | sudo apt-get install dfu-util |
||
47 | </pre> |
||
48 | |||
49 | |||
50 | To flash the firmware: |
||
51 | <pre> |
||
52 | 5 | tsaitgaist | sudo dfu-util --device 1d50:60e3 --cfg 1 --alt 1 --reset --download ./bin/simtrace-trace-dfu.bin |
53 | 3 | tsaitgaist | </pre> |
54 | |||
55 | To prevent using @sudo@ in order to use @dfu-util@ on SIMtrace 2, grant access permission to the USB device to the current user: |
||
56 | <pre> |
||
57 | # create osmocom group |
||
58 | sudo groupadd osmocom |
||
59 | # add current user to osmocom group (user needs to re-login for this change to take effect) |
||
60 | sudo adduser $USERNAME osmocom |
||
61 | # grant access permission to SIMtrace 2 for osmocom group |
||
62 | sudo tee -a /etc/udev/rules.d/10-osmocom.rules << EOF |
||
63 | # SIMtrace 2 |
||
64 | SUBSYSTEM=="usb", ATTRS{idVendor}=="1d50", ATTR{idProduct}=="60e3", MODE="0660", GROUP="osmocom" |
||
65 | EOF |
||
66 | # reload udev rules |
||
67 | sudo udevadm control --reload-rules |
||
68 | sudo udevadm trigger |
||
69 | </pre> |
||
70 | |||
71 | @dfu-util@ should reset the board and use the DFU bootloader. |
||
72 | Try the command a second time if it did not work at first. |
||
73 | If this still does not work, power up the board while pressing the *BOOTLOADER* button. |
||
74 | |||
75 | If the USB DFU bootloader is missing, defective, or needs to be updated, use the JTAG or SAM-BA methods to flash the bootloader firmware. |
||
76 | |||
77 | h4. SAMBA |
||
78 | |||
79 | The SAM3S micro-controller comes with an embedded bootloader called SAMBA, allowing to flash firmwares over USB. |
||
80 | The SAMBA bootloader can be used to flash the DFU bootloader. |
||
81 | To activate the SAMBA bootloader: |
||
82 | # short the *ERASE* pin on the top of the board with the nearby 3V3 pin using a jumper |
||
83 | # connect SIMtrace 2 over USB to power it up (no LED will light up) |
||
84 | # using @lsusb@ you should find the following entry: |
||
85 | <pre> |
||
86 | ID 03eb:6124 Atmel Corp. at91sam SAMBA bootloader |
||
87 | </pre> |
||
88 | # using @journalctl -f@ ensure SIMtrace 2 has been recognized as USB ACM device: |
||
89 | <pre> |
||
90 | kernel: usb 2-2: new full-speed USB device number 4 using xhci_hcd |
||
91 | kernel: usb 2-2: New USB device found, idVendor=03eb, idProduct=6124 |
||
92 | kernel: usb 2-2: New USB device strings: Mfr=0, Product=0, SerialNumber=0 |
||
93 | kernel: cdc_acm 2-2:1.0: ttyACM0: USB ACM device |
||
94 | kernel: usbcore: registered new interface driver cdc_acm |
||
95 | kernel: cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters |
||
96 | </pre> |
||
97 | # remove the jumper shorting *ERASE* to 3V3 |
||
98 | # install the @bossac@ utility to flash using the SAMBA protocol |
||
99 | <pre> |
||
100 | sudo apt install bossac |
||
101 | </pre> |
||
102 | # flash the USB DFU firmware using @bossac@ (note: @erase@ ensures no main application remains so to force booting the USB DFU bootloader; @boot=1@ ensures the micro-controller will boot from the internal flash instead of the embedded bootloader next time it is powered up) |
||
103 | <pre> |
||
104 | sudo bossac --port /dev/ttyACM0 --erase --write ./bin/simtrace-dfu-flash.bin --verify --boot=1 |
||
105 | </pre> |
||
106 | # to prevent using @sudo@, grant to current user the permission to access USB serial devices (e.g. @/dev/ttyACM0@). Note: this change only takes effect after re-logging-in |
||
107 | <pre> |
||
108 | sudo adduser $USERNAME dialout |
||
109 | </pre> |
||
110 | |||
111 | Once the USB DFU bootloader is flashed, when re-pluging SIMtrace 2 over USB, you can flash the main application firmware using the DFU method. |
||
112 | |||
113 | h4. JTAG |
||
114 | |||
115 | It is also possible to flash or debug SIMtrace 2 over JTAG using the ARM 20-pin JTAG header on the top of the board. |
||
116 | |||
117 | To flash the USB DFU firmware using JTAG: |
||
118 | # install the JTAG utility @openOCD@ |
||
119 | <pre> |
||
120 | sudo apt install openocd |
||
121 | </pre> |
||
122 | # flash the USB DFU bootloader firmware |
||
123 | <pre> |
||
124 | 6 | tsaitgaist | openocd --file interface/jlink.cfg --file target/at91sam3sXX.cfg --command "init" --command "halt" --command "flash write_bank 0 ./bin/simtrace-dfu-flash.bin 0" --command "at91sam3 gpnvm set 1" --command "reset" --command "shutdown" |
125 | 3 | tsaitgaist | </pre> |
126 | 1 | tsaitgaist | #* replace @interface/jlink.cfg@ with the configuration file for your JTAG debugging adapter |
127 | #* @at91sam3 gpnvm set 1@ ensures the micro-controller will boot from the internal flash (i.e. not from the embedded SAMBA bootloader) |
||
128 | 6 | tsaitgaist | |
129 | The SAM3S also offers the low pin-count SWD alternative to JTAG, allowing to use an inexpensive ST-Link V2 (clone) to flash (and debug): |
||
130 | <pre> |
||
131 | 7 | tsaitgaist | openocd --file interface/stlink-v2.cfg --command "set CPUTAPID 0x2ba01477" --file target/at91sam3sXX.cfg --command "init" --command "halt" --command "flash write_bank 0 ./bin/simtrace-dfu-flash.bin 0" --command "at91sam3 gpnvm set 1" --command "reset" --command "shutdown" |
132 | 6 | tsaitgaist | </pre> |
133 | |||
134 | 7 | tsaitgaist | SWD pinout: |
135 | !simtrace_swd.jpg! |
||
136 | 3 | tsaitgaist | |
137 | Once the USB DFU bootloader is flashed, when re-pluging SIMtrace 2 over USB, you can flash the main application firmware using the DFU method. |
||
138 | 1 | tsaitgaist | |
139 | h3. Development |
||
140 | |||
141 | To compile the firmware using the source code, or participate in the development, please refer to the instructions provided in the "README":https://git.osmocom.org/simtrace2/tree/firmware/README.txt . |
||
142 | |||
143 | h2. Host PC Software |
||
144 | |||
145 | TODO |