XMMProtocolInterfaces¶

• Table of contents
• XMMProtocolInterfaces
  • usb_sel
    • HowTO
    • Protocols
    • GT-I9100

usb_sel¶

HowTO¶

First you need to get a root shell in the device as the commands need to be executed as root.

Once this is done you need to switch the USB connector to the modem USB. This can be done with the following command:

echo MODEM > /sys/devices/virtual/sec/switch/usb_sel

Then nothing will happen, you will still be able to login through adb.

To make the device switch to the modem USB you then need to unplug and replug the USB cable between your computer and the device.

At this point, if the modem was booted, you'll see a new USB device appearing.
Some serial ports will also appear.

Tested on Replicant 6.0 0004 RC3

Device	Distribution	Modem status	USB ids	tty
GT-I9100	Replicant 6.0 0004 RC3	Booted	1519:0020 Comneon HSIC Device	/dev/ttyACM0 -> /dev/ttyACM6
GT-I9100	Replicant 6.0 0004 RC3	Off	None	N/A
GT-I9300	Replicant 6.0 0004 RC3	Booted	1519:0020 Comneon HSIC Device	/dev/ttyACM0 -> /dev/ttyACM6

Protocols¶

Device	state	UART	Protocol
GT-I9100	modem booted	/dev/ttyACM0	AT: GTI9100ModemTTYACM0
GT-I9100	modem booted	/dev/ttyACM1	Compatible with xgoldmon
GT-I9300	modem booted	/dev/ttyACM0	AT: GTI9300ModemTTYACM0

GT-I9100¶

Xgoldmon seem to display things on the GT-I9100:

# ./xgoldmon -vvvv -i localhost -t s2 -l /dev/ttyACM1
LOG:>>[HIGH]oembatt.c,310,[DISP] Thermistor : measured_value=1630666778<<
LOG:>>[HIGH]oembatt.c,137,[DISP] oem_set_batt_level : 4220<<
LOG:>>[HIGH]oembatt.c,236,[DISP] BATT : measured_value_mv=4220, AvgBattVal_mv=4007, battery_level=5<<
LOG:>>[LOW]oemdisplay.c,363,no change -> rssi:4, bat:5<<
LOG:>>[HIGH]oembatt.c,310,[DISP] Thermistor : measured_value=1630666779<<
LOG:>>[HIGH]oembatt.c,137,[DISP] oem_set_batt_level : 4225<<
LOG:>>[HIGH]oembatt.c,236,[DISP] BATT : measured_value_mv=4225, AvgBattVal_mv=4026, battery_level=5<<
LOG:>>[LOW]oemdisplay.c,363,no change -> rssi:4, bat:5<<
LOG:>>[HIGH]oembatt.c,310,[DISP] Thermistor : measured_value=1630666778<<
LOG:>>[HIGH]oembatt.c,137,[DISP] oem_set_batt_level : 4220<<
LOG:>>[HIGH]oembatt.c,236,[DISP] BATT : measured_value_mv=4220, AvgBattVal_mv=4055, battery_level=5<<
LOG:>>[LOW]oemdisplay.c,363,no change -> rssi:4, bat:5<<

And when calling an (inexisting/invalid) number, the frames appear in Wireshark.