mrlnc

I need to use ADB and check if the phone is currently on 5GNR or not. gsm.network.type doesn't indicate if 5G-NSA bearers are active. No matter if LTE, LTE+ or 5G indicators are shown, the network type remains the same:

OnePlus8:/ # getprop gsm.network.type                                                                                     
LTE,Unknown

Workaround:

logcat /data/com.android.providers.telephony/databases/telephony.db | grep -i update5GIcon

mrlnc

SIMtrace2 has a serial debug interface. It requires a serial-over-audio-jack cable that sysmocom sells in their webshop.

The serial output looks like this:

=============================================================================
SIMtrace2 firmware 0.8.1.66-e6e7, BOARD=simtrace, APP=trace
(C) 2010-2019 by Harald Welte, 2018-2019 by Kevin Redon
=============================================================================
-I- Chip ID: 0x28900960 (Ext 0x00000000)

mrlnc

---

The following document is now part of the official pysim documentation and available here: https://downloads.osmocom.org/docs/pysim/master/html/suci-tutorial.html

This gist is an archive and will not be updated.

---

mrlnc

Inspect iOS Carrier Profiles (IPCC)

Carrier Profiles configure your smartphone for mobile networks. I'm not sure if Carrier Profiles are just a legacy or are actually required nowadays, since all configuration should be done through the mobile network itself.

You'll find things in there like:

• enable VoLTE for specific carriers
• disable some bands (makes sense if your carrier isn't transmitting there)
• …

Download the list of all IPCCs:

mrlnc

#!/bin/bash
DRIVER_DIR="/home/merlin/src-for-11p/linux/drivers/net/wireless/ath/"

INTERFACE="wlp2s0"
MONITOR_INTERFACE=$INTERFACE-monitor

FILE="v2x_%F_%H:%M:%S.pcap"
OUTPUT_DIR="/home/merlin/PCAPs/"

echo "Unloading modules. Some errors might occur if the modules are not actually loaded."

mrlnc

Trying to convert a plist file to JSON but plutil is giving you a hard time?

I want the CellBroadcast as JSON:

plutil -extract CellBroadcast json -o - test.plist

That fails despite it should not:

test.plist: invalid object in plist for destination format

mrlnc

$ iw phy
Wiphy phy0
	wiphy index: 0
	max # scan SSIDs: 10
	max scan IEs length: 2048 bytes
	max # sched scan SSIDs: 16
	max # match sets: 16
	Retry short limit: 7
	Retry long limit: 4

mrlnc

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>CellBroadcast</key>
	<dict>
		<key>AlertTypes</key>
		<dict>
			<key>SevereAlerts(Level3)</key>
			<dict>

mrlnc

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>CellBroadcast</key>
	<dict>
		<key>AlertConfigurations</key>
		<dict>
			<key>Configuration_de</key>
			<dict>

mrlnc

Vodafone CallYa Germany (26202)

EF.CBMIR:

pySIM-shell (MF/ADF.USIM/EF.CBMIR)> read_binary_decoded 
{"type": "cmd", "cmd": "00a40004026f50", "rsp": "6129"}
{"type": "cmd", "cmd": "00c0000029", "rsp": "62278202412183026f50a50f800171c0010091047f206f509201008a01058b036f06048002001488009000"}
{"type": "cmd", "cmd": "00b0000014", "rsp": "00000001110011021112111b111f1127ffffffff9000"}
[
    [
        {