mirror of
https://gerrit.osmocom.org/osmo-qcdiag
synced 2024-08-18 08:46:27 +00:00
217 lines
7.8 KiB
Text
217 lines
7.8 KiB
Text
The basic protocol is described in the slides of a 28C3 talk
|
||
|
||
|
||
0x7E CMD Variable-length data CRC-CCITT 0x7E
|
||
|
||
Data is escaped to not class with the 0x7E. The ModemManager
|
||
has also some routines for QCDM handling (but not the commands
|
||
we want right now).
|
||
|
||
== Types ==
|
||
0x00 == Version Information Request/Response
|
||
0x1D == Timestamp Request/Response
|
||
0x4B == SUBSYS (Call Manager/State Info, UMTS/Version, GSM/Version, GSM/Status, WC..)
|
||
0x60 == Diag Event Report
|
||
0x73 == Logging Config Request
|
||
0x7C == Extended Build ID Request/Response
|
||
0x7D == Extended Message Report Config
|
||
0x79 == MSG
|
||
|
||
|
||
== Diag ==
|
||
|
||
Event Report Control 0x60 0x00
|
||
Event Report Control Resp 0x60 0x00 0x00
|
||
|
||
Logging Config Request 0x73 ....
|
||
|
||
|
||
=== Logging ===
|
||
|
||
Request1:
|
||
73 00 00 00 03 00 00 00 01 00 00 00 69 01 00 00 s...........i...
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 01 00 00 ..............
|
||
|
||
Request2:
|
||
73 00 00 00 03 00 00 00 04 00 00 00 7D 07 00 00 s...........}...
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
|
||
Request3:
|
||
73 00 00 00 03 00 00 00 05 00 00 00 28 04 00 00 s...........(...
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 .....
|
||
|
||
Request4:
|
||
73 00 00 00 03 00 00 00 07 00 00 00 07 03 00 00 s...............
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 .
|
||
|
||
Extended Message Report Request1:
|
||
7D 04 00 00 00 00 00 00 00 00 00 00 }...........
|
||
|
||
Event Report:
|
||
60 01 `.
|
||
|
||
Extended Message Report Config:
|
||
7D 04 00 00 00 00 00 00 02 00 00 00 }...........
|
||
|
||
|
||
Opening the RX QUAL view:
|
||
|
||
Logging Config Request:
|
||
73 00 00 00 03 00 00 00 05 00 00 00 28 04 00 00 s...........(...
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 0F 02 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 .....
|
||
|
||
Response:
|
||
|
||
|
||
73 00 00 00 03 00 00 00 00 00 00 00 05 00 00 00 s...............
|
||
20 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 0F 02 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
00 00 00 00 00 00 00 00 00 .........
|
||
|
||
|
||
== Log Reset when disabling the service ==
|
||
Event Report Control Request 60 00
|
||
0x00 == off, 0x01 == on
|
||
|
||
|
||
Logging Config Request
|
||
73 00 00 00 00 00 00 00 s.......
|
||
|
||
Logging Config Response
|
||
73 00 00 00 00 00 00 00 00 00 00 00 s...........
|
||
|
||
Extended Message Report Config
|
||
7D 05 00 00 00 00 00 00 }.......
|
||
|
||
Response..
|
||
7D 05 01 00 00 00 00 00 }.......
|
||
|
||
|
||
== Log Messages ==
|
||
|
||
|
||
Legacy/Medim 20:54:56.260
|
||
79 00 03 00 0E 00 D0 D4 B5 07 00 00 CB 06 00 00 y.....ÐÔµ...Ë...
|
||
02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
|
||
52 65 70 6F 72 74 69 6E 67 20 55 49 4D 20 41 63 Reporting.UIM.Ac
|
||
63 65 73 73 00 75 69 6D 67 65 6E 2E 63 00 cess.uimgen.c.
|
||
|
||
Legacy/Medium 20:55:43.481
|
||
79 00 03 00 06 00 61 68 B6 07 00 00 E0 01 00 00 y.....ah¶...à...
|
||
02 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ................
|
||
67 73 6D 5F 6C 31 5F 77 61 69 74 20 63 61 6C 6C gsm_l1_wait.call
|
||
65 64 20 73 69 67 73 3D 25 64 2C 20 6D 61 73 6B ed.sigs=%d,.mask
|
||
3D 25 64 00 6C 31 5F 74 61 73 6B 2E 63 00 =%d.l1_task.c.
|
||
|
||
Legacy/Medium 20:55:48.035
|
||
79 00 03 00 06 00 9C 76 B6 07 00 00 D4 00 00 00 y......v¶...Ô...
|
||
02 00 00 00 39 00 00 00 63 F9 FF FF 00 00 00 00 ....9...cùÿÿ....
|
||
41 43 51 20 53 74 61 72 74 65 64 2C 20 41 52 46 ACQ.Started,.ARF
|
||
43 4E 3D 25 64 2C 20 52 78 50 57 52 78 31 36 3D CN=%d,.RxPWRx16=
|
||
25 64 00 6C 31 5F 61 63 71 2E 63 00 %d.l1_acq.c.
|
||
|
||
0x79 == Log Message
|
||
0x00 0x3 0x06 0x00 == ???
|
||
0x9c 0x76 0xB6 0x07 could be the timestamp..
|
||
0x00 0x00 ???
|
||
0xD4 0x00 0x00 0x00 == Line Number == 212
|
||
|
||
|
||
0x02 0x00 0x00 is starting the parameters.. (signed)
|
||
0x39 0x00 0x00 0x00 == 57
|
||
0x63 0xF9 0xFF 0xFF == -1693
|
||
0x00 0x00 0x00 0x00 == 0
|
||
Null Terminated String with the log message
|
||
Null Terminated String with the filename
|
||
|
||
|
||
|
||
|
||
== Events ==
|
||
|
||
EVENT GSM SELECTION START Reason (Started due to RR_PLMNN_SELECT REQ from MM...)
|
||
|
||
60 0E 00 BA 61 12 00 70 68 B6 07 00 00 03 00 01 `..ºa..ph¶......
|
||
00 .
|
||
|
||
|
||
EVENT GSM POWER SCAN STATUS Started
|
||
60 0B 00 BC 21 0F 00 79 68 B6 07 00 00 00 `..¼!..yh¶....
|
||
|
||
EVENT GSM POWER SCAN STATUS Completed
|
||
60 0B 00 BC 21 18 00 91 76 B6 07 00 00 01 `..¼!...v¶....
|
||
|
||
69 68 b6 07 == time?
|
||
|
||
00 00 00 00 == Started
|
||
00 00 00 01 == Completed
|
||
|
||
|
||
EVENT GSM CAMP ATTEMPT START (BCCH ARFCN 57, BSIC 0x00 <0,0>
|
||
60 0E 00 B3 61 21 00 9A 79 B6 07 00 00 03 39 00 `..³a!..y¶....9.
|
||
00 .
|
||
|
||
0x9A 0x79 0xB6 0x07 == time
|
||
0x39 == ARFCN
|
||
BASIC == 0x00
|
||
|
||
EVENT GSM CAMP ATTEMPT END (Sucess true, Failure reason 255)
|
||
60 0C 00 B7 41 03 00 F5 7D B6 07 00 00 01 FF `..·A..õ}¶....ÿ
|
||
|
||
|
||
EVENT GSM RR IN SERVICE (length 0013)
|
||
60 0A 00 B4 01 18 00 D9 79 B6 07 00 00 `..´...Ùy¶...
|
||
|
||
0xD9 0x79 0xB6 0x07 == time
|
||
|
||
struct qcdm_event {
|
||
uint8_t type;
|
||
uint16_t length;
|
||
|
||
}
|
||
|