hf list demodbuffer

frank.dovan · 2016-08-01 13:41:15

Hello,

The usual procedure is to snoop and list.

Can I do the same thing for a saved pm3 file?
I can load the file, demod it, but how do I list the DemodBuffer?
By list I mean an output similar to "hf list".

According to the wiki the hf list and search commands are available offline, but I couldn't find a way to use them with a saved trace.

I don't have the hardware, only the windows client (2.5.0).

Thanks.

marshmellow · 2016-08-01 15:33:59

which snoop?

the demodbuffer is strictly for LF currently. (for things demodulated within the client - HF is demodulated in the arm &/or fpga)

hf list only works on protocols known and demodulated on the arm not the client (would not work on hf snoop which is a raw snoop). not all commands marked available offline are actually functional offline... (i've been slowly fixing some of these as they annoy me some).

so no the data load and data save is almost 100% only useful for LF. (hf snoop is the only exception to my knowledge. which you can't hf list anyway)

Last edited by marshmellow (2016-08-01 15:34:36)

frank.dovan · 2016-08-01 21:29:51

Thanks for replying.

In networking if you have a pcap you can open it in Wireshark or other software and analyze the protocols.
I assumed I can do the same with a pm3 trace that contains a known protocol, load it and list it.

The question is how do I view a saved trace e.g. from a Mifare Classic?
I need to see the dissected communication to be able to extract the UID or keys.

marshmellow · 2016-08-01 22:00:16

You cannot save a mf trace and analyze it. You could share the log the pm3 client keeps but this won't have what you are looking for. But it is open source and you could add it potentially if you so desire.

Last edited by marshmellow (2016-08-01 22:01:49)

iceman · 2016-08-02 09:17:38

Adding the tracedata for HF to "data save/load" shouldnt be too hard.
Adding '1' parameter to 'hf list' (as we've done with 'lf search') do denotate using loaded data instead of aquiering shouldnt be too hard either.

So feel free to contribute to the source code!

frank.dovan · 2016-08-02 10:02:39

Need to learn some C before contributing to the project.

Proxmark3 community

Announcement

#1 2016-08-01 13:41:15

hf list demodbuffer

#2 2016-08-01 15:33:59

Re: hf list demodbuffer

#3 2016-08-01 21:29:51

Re: hf list demodbuffer

#4 2016-08-01 22:00:16

Re: hf list demodbuffer

#5 2016-08-02 09:17:38

Re: hf list demodbuffer

#6 2016-08-02 10:02:39

Re: hf list demodbuffer

Board footer