Tests with simtrace 1 or simtrace 2

About every 30 seconds (29 seconds in some devices) the modem asks about the SIM.

If we observe the traffic with wireshark we can measure the time precisely and we see that when there is no activity, the modem sends packets like that to the SIM card every 30 seconds: GSM SIM 65 ETSI TS 102.221 STATUS

Affected devices:
  • Galaxy Nexus (GT-I9250)
  • Galaxy SIII (GT-I9300)
  • Probably many more

In addition some devices also have a GPIO that can be used to detect the removal of the SIM card (see XMMBoot for more details)

On the Galaxy SIII (GT-I9300), after removing the SIM from SIMtrace (not to trigger the GPIO) after a small amount of time (few minutes?) the modem managed to understand that the SIM card was gone.

Use cases

It might have been interesting to leave your phone at home during a protest for instance but get the SIM card out to be able to call from another phone in case of issues. However that doesn't work as the modem checks if the SIM card is still there.

With Simtrace 2, it might be possible to remove the SIM and still make simtrace2 send status messages, but at that point getting a second SIM card is probably much easier and cheaper for most people.

However since the modem sends regular status update commands to the SIM, we can use that to see if the modem firmware is not crashed. That information is interesting for the modem bringup work on top of a mainline kernel.

Updated by Denis 'GNUtoo' Carikli 5 months ago · 3 revisions

Also available in: PDF HTML TXT