search

P1sec / QCSuper

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.
GNU General Public License v3.0
1.31k stars 235 forks source link

include ip-traffic #75

Open arjensmittie opened 1 year ago

arjensmittie commented 1 year ago

I worked with two Qualcomm devices that are managed via QMI and without any modification support DIAG ports to the host device. This is a DWM-222 USB dongle and a Quectel EG25 miniPCI LTE module. The Quectel LTE module is also known from the Pine phone implementation.

However I never managed to capture IP packets. I am capturing to a pcap file and using the --include ip-traffic option.

As my topic of interest lies in the details how the LTE modem handles the IPv6 address assignment on the 3GPP side of things (PCO, RA), etc in relation to what is exposed on the QMI interface I am interested in getting this to work.

It looks like the LTE modem firmware does not send the IP payload along on the DIAG port. Are there perhaps any firmware configuration options related to DIAG that could enable sending this traffic ?

Otherwise would someone know a device that is known to support the "include ip-traffic" option ? Thanks !

aridhaa commented 1 year ago

Hi Have same issue, did you manage to solve it ?

BertoldVdb commented 1 year ago

Can confirm same behavior with SIM7600H-G-R2 module from SIMCom.

pioneerAlone commented 2 months ago

Hi ,

I tested the device based on Quectel BG95 (Qualcomm MDM9205) and found that the data service executed through AT command cannot capture ip traffic, for example: QPING, TCP AT command, but when I execute the TCP/MQTT app demo on this device, the corresponding ip traffic can be captured. Is this related to the protocol stack implemented by the OEM? Assuming that QCsuper supports Qualcomm protocol stack back-end capture, Unable to identify the OEM protocol stack.