OpenPicc: Sniff Tag->Reader communication

Milosch Meriac meriac at openpcd.de
Mon Jan 14 10:21:37 UTC 2008


Dear Rainer,

mail at rainerkeller.de wrote:
> currently the OpenPICC is not able to capture Tag->Reader communication.
> Is it not possible at all or is it just not implemented yet?

The problem is that compared to the signal strength of the Reader ->Tag
communication the Tag->Reader communication is lower by the power of 1000.
Basically we made the decision *not* to re-implement a full featured
"Software Defined Radio"  because this already exists (GNUradio) and to
keep the costs down. OpenPICC is meant to be used as an RFID emulator in
future, so we only needed Reader->Tag communication - and got a sniffer
for this direction for free.

For sniffing MIFAR communication for example we used OpenPCD as an
reader. OPenPCD can be configured to sniff either the RT or the TR
Communication. In combination with OpenPIC we ware able to sniff both
directions at the same time.

Just to clarify:

OpenPCD *can't* be used as an stand alone sniffer - only as an active
reader which can output demodulated data on HF socket (T->R or R->T).

Warmest regards,

Milosch
--
Milosch



More information about the openpcd-devel mailing list