Sniffing LTE/[2-5]G

Got my Tachyon, it’s a pretty nifty lil’ thing. And while I didn’t see anything in search/info, my apoligies if this is out there, just point me to it and I’ll RTFM :wink:

I’m interested in the possibility of listening to various mobile traffic (in appropriate situations, control, etc.) to gain more of an understanding of what’s going on (… in the ether/mystery… I’m in the US/AT&T, if it matters, and I can see the AT commands and such in the journalctl, etc.)

I read the “Tachyon - Qualcomm debug interface” post talking about the qualcomm debug interface (so … close….), but has anyone looked into this? There’s a multitude of projects on github++ of course, but thought if someone had some experience or insights into this it’d be great.

Cheers -

dan

¸¸.·´¯`·.¸><(((º>

That will likely not be possible. The cellular module exposes the standard cellular protocols only.

What you are probably looking for is something that's a separate SDR (software defined radio) and probably some Linux or maybe Windows software, possibly running on a laptop.

Hey zenfish - thanks for writing in!

We just updated the documentation around the Qualcomm debug interface, which allows you to collect diagnostic logs directly on the device. You can find that here:

As Rick pointed out, there’s quite a bit of legal and regulatory complexity around accessing or sniffing RF interfaces, so we can’t support or guide any effort that involves tampering with or intercepting cellular communications… The SDR side of the house is super interesting however!

That said, you’re absolutely welcome to explore publicly available resources on QXDM and related tools to better understand modem behavior and collect diagnostic information. We’ll also be updating the docs shortly to include guidance for exposing QXDM over USB. This involves setting up a USB composite device, so it’s a bit more involved, but hopefully useful for experimentation.

Appreciate your curiosity and happy tinkering!

Cheers,

Nick