Proxmark3 developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#151 2015-02-06 00:59:36

MiP
Member
Registered: 2015-02-06
Posts: 5

Re: Skidata tickets (iso 15693)

Dear all,

   I'm following your topic while trying to test and understand comparable topic for another location, but I'm having some interogation regarding hf 15 functions...

   UID of my tag seems to be writen on it but hf15 reader and hf 15 dumpmemory seems to

Offline

#152 2015-02-06 01:09:02

MiP
Member
Registered: 2015-02-06
Posts: 5

Re: Skidata tickets (iso 15693)

(sorry for the incomplete post...)

...hf 15 seems to reverse UID for example, on a tag writen as : B2F9597E-A0E-BC1
   I have following results :
              proxmark3> hf 15 reader
                                  #db# ....Y~.. 00 00 b2 f9 59 7e 00 01                 
                                  #db# ...S     04 e0 fe 53                 
                                  #db# UID = E00401007E59F9B2                 

               proxmark3> hf 15 dumpmemory
                                  Reading memory from tag UID=E00401007E59F9B2


Did you experienced same behavior ?


On another I was wondering how do you succed snooping with iclass (iso 14443) communication of skipass (iso 15693) isn't it problematical snooping with iclass function ?

Offline

#153 2015-02-06 08:59:12

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Skidata tickets (iso 15693)

A correct iso15693 UID starts with E0 (iso15693 definition).

icalss is not iso14443 nor iso15693 but it uses a protocol compatible with iso15693 and indeed snoop is working.

Last edited by asper (2015-02-06 09:07:20)

Offline

#154 2015-02-06 09:34:26

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Skidata tickets (iso 15693)

I missed this one:

Piorun wrote:
thefkboss wrote:

what card do you have sle, em......?

ho to check this ?

proxmark3> hf 15 dumpmem
Reading memory from tag UID=E0162466059BC8E6
Tag Info: EM Microelectronic-Marin SA Switzerland (Skidata)
Block 00 
{ 0xE016000000000000LL, 16, "EM Microelectronic-Marin SA Switzerland (Skidata)" },
{ 0xE016040000000000LL, 24, "EM-Marin SA (Skidata Keycard-eco); EM4034? no 'read', just 'readmulti'" },
{ 0xE0160c0000000000LL, 24, "EM-Marin SA; EM4035?" },
{ 0xE016100000000000LL, 24, "EM-Marin SA (Skidata); EM4135; 36x64bit start page 13" },
{ 0xE016940000000000LL, 24, "EM-Marin SA (Skidata); 51x64bit" },

It is an EM4233, it should be correctly identified in the 0.0.7 version (please let us know if it is).

Offline

#155 2015-02-09 10:19:49

pavlik1
Contributor
Registered: 2013-08-22
Posts: 15

Re: Skidata tickets (iso 15693)

Hello

What are the posibility to write to the tag? I tested with the android app RFID NFC tool and can write only from block 4 to 27. the rest is giving me an error :Action failed.(0x21) 01 0F

the tag is:EM4x3x (for customer 066)
UID e01624660925e3b0

There are interesting changes in blocks 42 to 49

begin
06.02.2015
end
07.02.2015

The first is 50 point, the last is 0 points. first was decreased by 3 points, last two are decreased by 4 points.

42     06289f1e    06289f1e    06289f1e    06289f1e    06289f1e        06289f1e    06289f1e    06289f1e
43     a0051b01    a0051b01    a0051b01    a0051b01    a0051b01        a0051b01    a0051b01    a0051b01
44     e81437ca    e81437ca    e81437ca    e81437ca    e81437ca        e81437ca    e81437ca    e81437ca
45     46518647    46518647    46518647    46518647    46518647        46518647    46518647    46518647
46     50131d31    50131d31    50131d31    50131d31    50131d31        50131d31    50131d31    50131d31
47     00000000    60000000    60000000    60000000    60000000        60000000    60000000    80000000
48    e2005906    c280f705    59003a05    5a003a05    4500b903        3200b903    5180bd00    bd801f00
49    00003200    00c83200    00c82c00    00d02600    00e42000        00d01a00    00ec0800    00fc0000

day card after 13h
07.02.2015

0628a61c
c0051b01
d93437c2
066cf244
c0a41e31
00000000
0000c03f
00000000

07.02.2015

before use.    day end
after 11h.      after 11h

0628a71c    0628a71c
c0051b01    c0051b01
d43437c2    d43437c2
8653f044    8653f044
f0fe5531    f0fe5531
11000000    00000000
000080fc    0000c03f
00f8e937    00000000

block 42 seems to be date
block 47 gate or start-end
block 48-49 points

hoe to interbreed?

Offline

#156 2015-02-09 12:17:34

pavlik1
Contributor
Registered: 2013-08-22
Posts: 15

Re: Skidata tickets (iso 15693)

to the post above:

day card after 13h is on 06.02.2015

Offline

#157 2015-02-11 10:29:59

Piorun
Contributor
Registered: 2015-01-29
Posts: 57

Re: Skidata tickets (iso 15693)

asper wrote:

I missed this one:

Piorun wrote:
thefkboss wrote:

what card do you have sle, em......?

ho to check this ?

proxmark3> hf 15 dumpmem
Reading memory from tag UID=E0162466059BC8E6
Tag Info: EM Microelectronic-Marin SA Switzerland (Skidata)
Block 00 
{ 0xE016000000000000LL, 16, "EM Microelectronic-Marin SA Switzerland (Skidata)" },
{ 0xE016040000000000LL, 24, "EM-Marin SA (Skidata Keycard-eco); EM4034? no 'read', just 'readmulti'" },
{ 0xE0160c0000000000LL, 24, "EM-Marin SA; EM4035?" },
{ 0xE016100000000000LL, 24, "EM-Marin SA (Skidata); EM4135; 36x64bit start page 13" },
{ 0xE016940000000000LL, 24, "EM-Marin SA (Skidata); 51x64bit" },

It is an EM4233, it should be correctly identified in the 0.0.7 version (please let us know if it is).

The log is from 0.0.7 version, so isn't correctly recognized

Last edited by Piorun (2015-02-11 10:32:37)

Offline

#158 2015-02-11 13:28:55

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Skidata tickets (iso 15693)

Thanks for pointing that out, someone should fix it; E01624xxxxxxx correspond to an EM4233 (not EM4233SLIC, they are different).

Offline

#159 2015-02-11 18:08:13

iceman
Administrator
Registered: 2013-04-25
Posts: 6,654
Website

Re: Skidata tickets (iso 15693)

@asper,  just did a PullRequest for it.


If you feel the love,  https://www.patreon.com/iceman1001

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#160 2015-02-11 20:53:23

Piorun
Contributor
Registered: 2015-01-29
Posts: 57

Re: Skidata tickets (iso 15693)

I did next test so I finally have 3 traces (below the reader response only):
post #135

     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 13  23  00  03  76  c4                                          |     | ?
         0 |         0 | Rdr | 13  23  1c  02  ce  e9                                          |     | ?
         0 |         0 | Rdr | 13  23  2a  01  27  39                                          |     | ?
         0 |         0 | Rdr | 13  23  1f  01  3d  f1                                          |     | ?
         0 |         0 | Rdr | 13  23  04  02  9f  b2                                          |     | ?

post #135

     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 13  23  00  03  76  c4                                          |     | ?
         0 |         0 | Rdr | 13  23  2a  01  27  39                                          |     | ?
         0 |         0 | Rdr | 13  23  2c  03  49  05                                          |     | ?
         0 |         0 | Rdr | 13  23  2c  03  56  84                                          |     | ?
         0 |         0 | Rdr | 13  21  31  00  11  3c  15  1e  51                              |     | ?
         0 |         0 | Rdr | 13  21  02  00  38  00  b0  8d  0d                              |     | ?

and last one (03.02.15)

     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 | Rdr | 13  23  00  03  76  c4                                          |     | ?
         0 |         0 | Rdr | 13  23  1c  02  ce  e9                                          |     | ?
         0 |         0 | Rdr | 13  23  1c  02  ce  e9                                          |     | ?
         0 |         0 | Rdr | 13  23  2a  01  27  39                                          |     | ?
         0 |         0 | Rdr | 13  23  2c  03  5e  14                                          |     | ?
         0 |         0 | Rdr | 13  21  31  00  11  64  15  0a  4a                              |     | ?

I can't find any password or card UID response (full last trace below) so I thing commands 'hf iclass snoop' doesn't work well for SKIDATA cards sad
#1 Lot of noise like "bb  d4  bb * * *"   but I was only one person at the gate
#2 There is a info "Recorded Activity (TraceLen = 16210 bytes)" but in log is less bytes

proxmark3> hf list iclass f
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
#db# cancelled_a
#db# 7 0 1
#db# 20 3f52 f0
Recorded Activity (TraceLen = 16210 bytes)

Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass    - Timings are not as accurate

     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
         0 |         0 | Tag | bb  d4  bb  0f  0f  0d  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  03  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0b  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0b  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0b  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  03  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0a  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  05  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0e  01  04  bb                                  |     |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  09  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  07  00  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  05  02  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  0b  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  05  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  05  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  02  0b  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  0b  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  03  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  00  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  00  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  00  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  07  0f  06  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  03  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  03  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  00  04  bb                                  |  ok |
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 |     | fdt (Frame Delay Time): 0
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  03  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  00  02  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  00  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  07  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  03  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  07  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  07  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  07  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  03  bb  0f  0b  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 |     | fdt (Frame Delay Time): 0
         0 |         0 | Tag | bb  d4  bb  0f  08  00  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  03  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  00  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  07  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  01  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  01  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  03  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Rdr | 27  01  00  2a  50                                              |     | ?
         0 |         0 |     | fdt (Frame Delay Time): 0
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  00  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Rdr | 13  23  00  03  76  c4                                          |     | ?
         0 |         0 |     | fdt (Frame Delay Time): 0
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Rdr | 13  23  1c  02  ce  e9                                          |     | ?
         0 |         0 |     | fdt (Frame Delay Time): 0
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  00  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Rdr | 13  23  1c  02  ce  e9                                          |     | ?
         0 |         0 |     | fdt (Frame Delay Time): 0
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  00  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  00  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  08  00  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  33  bb  00  00  00  04  bb                                  |  ok |
         0 |         0 | Rdr | 13  23  2a  01  27  39                                          |     | ?
         0 |         0 |     | fdt (Frame Delay Time): 0
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  03  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0b  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  00  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  07  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0b  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  00  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0d  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  09  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  09  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  05  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  05  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  0b  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  03  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0c  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0d  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0a  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  02  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  09  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  01  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  05  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  0b  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  00  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0d  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0d  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Rdr | 13  23  2c  03  5e  14                                          |     | ?
         0 |         0 |     | fdt (Frame Delay Time): 0
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  09  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  09  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  02  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0d  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  09  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0a  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0a  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  01  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  02  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  00  00  00  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0b  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  00  00  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0d  07  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0d  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0a  07  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0a  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  08  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  05  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0b  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  05  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  09  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  05  03  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0e  0b  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0c  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0d  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0a  07  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  02  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  04  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0a  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  09  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  01  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0b  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0e  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0c  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  08  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  00  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Rdr | 13  21  31  00  11  64  15  0a  4a                              |     | ?
         0 |         0 |     | fdt (Frame Delay Time): 0
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  02  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0e  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  01  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
         0 |         0 | Tag | bb  d4  bb  0f  0f  0f  04  bb                                  |  ok |
proxmark3>

Offline

#161 2015-03-25 13:24:31

Sixkay
Contributor
Registered: 2015-03-18
Posts: 14

Re: Skidata tickets (iso 15693)

hello,

im trying to snoop the data from a Tag-It HF-I Plus (iso 15693) transponder to a reader and got simliar data like Piorun.
the reader sends a invenatory request with
27  01  00  2a  50     !crc
but i dont understand the answer of the transponder.

this is my transponder

proxmark3> hf 15 dumpmemory
Reading memory from tag UID=E0078067AE956122          
Tag Info: Texas Instrument; Tag-it HF-I Plus (RF-HDT-DVBB tag or Third Party Products)          
Block  0   00 00 00 00    ....          
Block  1   00 00 00 00    ....          
Block  2   00 00 00 00    ....          
Block  3   00 00 00 00    ....          
Block  4   00 00 00 00    ....          
proxmark3> 

here is what i get when i open my rfid-lock.
i also have to use hf iclass list twice to get the table right. why?

proxmark3> hf iclass snoop
#db# COMMAND FINISHED                 
#db# 5 0 0                 
#db# 20 bbb 27                 
#db# 5 0 0                 
#db# 20 bbb 27                 
proxmark3> hf iclass list
recorded activity:          
 ETU     :rssi: who bytes          
---------+----+----+-----------          
 +      0:    :     d4  45  dd  fb  7f  00  00  90  d3  45  dd  fb  7f  00  00  08  00  00  00  30  00  00  00  60  d4  45  dd  fb  7f  00  00  90  d3  45  dd  fb  7f  00  00  60  d4  45  dd  fb  7f  00  00  a0  d6  45  dd  fb  7f  00  00  06  00  00  00  00  00  00  00  01  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00  39  00  00  00  00  00  00  00  2e  00  00  00  00  00  00  00  39     !crc          
proxmark3> hf iclass list
recorded activity:          
 ETU     :rssi: who bytes          
---------+----+----+-----------          
 +      0:    :     27  01  00  2a  50     !crc          
 +     81:   0: TAG bb! d4! bb! 0f! 0f! 0f! 01  bb!    !crc          
 +     30:   0: TAG bb! d4! bb! 0f! 0f! 0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0f! 04  bb!    !crc          
 +     45:   0: TAG bb! d4! bb! 0f! 0f! 0f! 02  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0f! 02  bb!    !crc          
 +     31:   0: TAG bb! d4! bb! 0f! 0f! 0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 00! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 00! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 00! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0e  01  04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0c! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0c! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0c! 03! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0c! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 08  04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 08  00! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 08  07  04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 00! 00! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 00! 00! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 00! 04  bb!    !crc          
 +     36:   0: TAG bb! 33! bb! 00! 00! 00! 04  bb!    !crc          
 +   1178:   0: TAG bb! 33! bb! 00! 00! 03! 01  bb!    !crc          
 +     30:   0: TAG bb! d4! bb! 0f! 0f! 0c! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0c! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 08  00! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 08  04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 08  0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0f! 0f! 0f! 04  bb!    !crc          
 +    770:   0: TAG bb! d4! bb! 0b  0b  0f! 01  bb!    !crc          
 +     30:   0: TAG bb! d4! bb! 0c! 03! 0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0c! 03! 0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0c! 07  0f! 04  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 0c! 03! 0f! 04  bb!    !crc          
 +     33:   0: TAG bb! 33! bb! 00! 07  0f! 02  bb!    !crc          
 +     31:   0: TAG bb! 33! bb! 00! 07  0f! 04  bb!    !crc          
 +34200352:   0: TAG  

here is an another example:

proxmark3> hf iclass list
recorded activity:          
 ETU     :rssi: who bytes          
---------+----+----+-----------          
 +      0:    :     27  01  00  2a  50     !crc          
 +   2988:    :     27  01  00  2a  50     !crc          
 +   1540:    :     27  01  00  2a  50     !crc          
 +   3456:    :     27  01  00  2a  50     !crc          
 +   3896:    :     27  01  00  2a  50     !crc          
 +   2992:    :     27  01  00  2a  50     !crc          
 +   1544:    :     27  01  00  2a  50     !crc          
 +   3440:    :     27  01  00  2a  50     !crc          
 +   1544:    :     27  01  00  2a  50     !crc          
 +2641848:    :     27  01  00  2a  50     !crc          
 +    135:   0: TAG bb! d4! bb! 0e  00! 0c! 04  bb!    !crc          
 +     65:   0: TAG bb! d4! bb! 0c! 01  04  02  bb!    !crc          
 +     32:   0: TAG bb! d4! bb! 05! 04  01  02  bb!    !crc          
 +     37:   0: TAG bb! d4! bb! 08  00! 03! 01  bb!    !crc          
 +     64:   0: TAG bb! d4! bb! 08  0a! 02  01  bb!    !crc          
 +     91:   0: TAG bb! d4! bb! 0d  00! 04  02  bb!    !crc          
 +     88:   0: TAG bb! 33! bb! 04  02  02  02  bb!    !crc          
 +   1796:   0: TAG bb! d4! bb! 0d  04  00! 02  bb!    !crc          
 +   2311:   0: TAG bb! d4! bb! 00! 00! 00! 04  bb!    !crc          
 +     92:   0: TAG bb! 33! bb! 08  02  0e  04  bb!    !crc          
 +    114:   0: TAG 00!             
 +     71:   0: TAG bb! d4! bb! 05! 06! 0f! 02  bb!    !crc          
 +    172:   0: TAG bb! 33! bb! 00! 00! 00! 02  bb!    !crc          
 +   2060:   0: TAG bb! 03! bb! 0a! 0a! 0d  02  bb!    !crc          
 +     54:   0: TAG 0f              
 +   4678:    :     27  01  00  2a  50     !crc          
 +    228:   0: TAG 0f              
 +   3323:   0: TAG bb! d4! bb! 0d  00! 05! 04  bb!    !crc          
 +     89:   0: TAG bb! d4! bb! 0a! 03! 0e  02  bb!    !crc          
 +     76:   0: TAG bb! 03! bb! 07  0c! 0b  02  bb!    !crc          
 +    116:   0: TAG bb! 33! bb! 00! 00! 00! 02  bb!    !crc          
 +    927:   0: TAG bb! d4! bb! 0e  04  00! 04  bb!    !crc          
 +     77:   0: TAG bb! 33! bb! 00! 09! 03! 02  bb!    !crc          
 +     96:   0: TAG 0f              
 +   2034:   0: TAG bb! 33! bb! 01  00! 08  08  bb!    !crc          
 +     66:   0: TAG bb! 33! bb! 04  03! 07  02  bb!    !crc          
 +    104:   0: TAG bb! 33! bb! 0c! 01  00! 02  bb!    !crc          
 +    974:   0: TAG 0f              
 +    135:   0: TAG bb! d4! bb! 0c! 00! 00! 01  bb!    !crc          
 +     68:   0: TAG bb! d4! bb! 0e  0a! 0a! 01  bb!    !crc          
 +     46:   0: TAG bb! d4! bb! 07  08  00! 04  bb!    !crc          
 +     65:   0: TAG bb! d4! bb! 00! 07  0f! 02  bb!    !crc          
 +     37:   0: TAG bb! d4! bb! 00! 0d  03! 01  bb!    !crc          
 +     38:   0: TAG bb! d4! bb! 07  0e  06! 04  bb!    !crc          
 +     56:   0: TAG bb! 33! bb! 00! 05! 07  04  bb!    !crc          
 +   1125:   0: TAG bb! d4! bb! 01  0d  0f! 2e! 66!    !crc

can someone pls help me to understand the response of the tag? and why do i only get the inventory request from the reader
and not other like read?

Offline

#162 2015-03-25 15:26:53

Sixkay
Contributor
Registered: 2015-03-18
Posts: 14

Re: Skidata tickets (iso 15693)

i havent changed anything but was able to get more data

 +   1732:    :     27  01  00  2a  50     !crc          
 +   7864:    :     27  01  00  2a  50     !crc          
 +   1732:    :     27  01  00  2a  50     !crc          
 +   1996:    :     23  25  22  61  95  ae  67  80  07  e0  8c  08     !crc          
 +    992:    :     27  01  00  2a  50     !crc          
 +   1544:    :     27  01  00  2a  50     !crc          
 +   1620:    :     03  23  00  02  5e  16     !crc          
 +   1828:    :     27  01  00  2a  50     !crc          
 +   1536:    :     27  01  00  2a  50     !crc          
 +   1612:    :     03  23  00  02  5e  16     !crc          
 +   1904:    :     03  23  03  02  36  3c     !crc          
 +2636612:    :     27  01  00  2a  50     !crc          
 +  11848:    :     27  01  00  2a  50     !crc 

Offline

#163 2015-03-25 17:18:34

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Skidata tickets (iso 15693)

I think you have some problems sniffing communication; what kind of antenna do you have ?

Offline

#164 2015-03-25 17:40:39

Sixkay
Contributor
Registered: 2015-03-18
Posts: 14

Re: Skidata tickets (iso 15693)

asper wrote:

I think you have some problems sniffing communication; what kind of antenna do you have ?

i built one with this tutorial:
https://code.google.com/p/proxmark3/wiki/Antennas#High_frequency_antenna
with iso 14* tags it works fine

proxmark3> hw tune
#db# Measuring antenna characteristics, please wait...                 
#db# Measuring complete, sending report back to host                 
          
# LF antenna:  0,00 V @   125.00 kHz          
# LF antenna:  0,00 V @   134.00 kHz          
# LF optimal:  0,27 V @   285,71 kHz          
# HF antenna:  6,64 V @    13.56 MHz          
# Your LF antenna is unusable.

do you think it would help if i buy the orginal one?
http://ryscc.com/products/HFAPCB/

my antenna also has problems simulating a iso15693 tag with hf 15 sim UID

Offline

#165 2015-03-26 07:50:12

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Skidata tickets (iso 15693)

Your antenna voltage is really low, you should try build a better one or buy a new one (without any guarantee); just try.

Offline

#166 2015-03-26 15:06:02

Sixkay
Contributor
Registered: 2015-03-18
Posts: 14

Re: Skidata tickets (iso 15693)

asper wrote:

Your antenna voltage is really low, you should try build a better one or buy a new one (without any guarantee); just try.

i changed my antenna a little bit

# LF antenna:  0,00 V @   125.00 kHz          
# LF antenna:  0,00 V @   134.00 kHz          
# LF optimal:  0,27 V @   571,43 kHz          
# HF antenna:  9,63 V @    13.56 MHz 

now i can use hf iclass sim 0 UID_TAG and can sniff all data that is sent from the reader to the tag
to see this i changed the 'SimulateIClass' method because my protocol is different

proxmark3> hf iclass sim 0 E0078067AE956122
--simtype:00 csn:e0 07 80 67 ae 95 61 22           
#db#  :RDR: Invenotry command received from reader (len=5): 27 1 0 2a 50                 
#db#  :RDR: Select command received from reader (len=12): 23 25 22 61 95 ae 67 80 7 e0 8c 8                 
#db#  :RDR: Readmultipleblocks command received from reader (len=6): 3 23 0 2 5e 16                 
#db#  :RDR: Readmultipleblocks command received from reader (len=6): 3 23 0 2 5e 16                 
#db#  :RDR: Readmultipleblocks command received from reader (len=6): 3 23 3 2 36 3c 

to read the data that is sent from the tag to the reader i use hf iclass snoop and still get these

 +      0:    :                
 +      0:    :                
 +      0:    :                
 +      0:    :                
 +1594511360:   0: TAG            
 +-69944768:    :     90  18  5e  3f  7f  00  00  c6  e9  30  60  3f  7f  00  00  70  0a  df  5a  3f  7f  00  00  60  0a  df  5a  3f  7f  00  00  29  90  18  5e  3f  7f  00  00  e1  ef     !crc          
 +610293232:    :     60  3f  7f  00  00  ea  54  18  5e  3f  7f  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00  c0  05  df  5a  3f  7f  00  00  00  00  00  00  00  00  00  00  00  00  00     !crc          
 +-2134859824:    :     3f  7f  00  00  e0  05  df  5a  3f  7f  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00  90  05  df  5a  3f  7f  00  00  00  00  00  00  0a  00  00  00  61  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00  f6  ff  ff  ff  ff  ff  ff  ff  00  00  00  00  0a  00  00  00  6c  04  14  55  00  00  00  00  00  00  00  00  00  00     !crc          
 +      0:    :                
 +      0:    :                
 +1524566558:    :                
 +-1524566558:    :                
 +      0:    :                
 +      0:    :                
 +      0:    :                
 +      0:    :    

i also tried to get a response from the tags with

proxmark3> hf 15 cmd raw 27 01 00 2a 50
#db# SEND                 
#db# '..*P    27 01 00 2a 50                 
#db# error, uneven octet! (extra bits!) mask=10                 
#db# RECV                 
received 0 octets          
 '   

Offline

#167 2015-03-26 16:44:50

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Skidata tickets (iso 15693)

Your voltage is still low; raw commands are working fine so I think it is still an antenna issue.

Offline

#168 2015-04-21 15:35:21

Sixkay
Contributor
Registered: 2015-03-18
Posts: 14

Re: Skidata tickets (iso 15693)

i build a new antenna with 12V and also tried the original hf antenna from rysccorp and it also failed.

i found out that when i change bit 0 from the first byte (flag-byte) i can send and receive data from the tags.
this bit was the Sub-carrier_flag and it said to the tags that they should use two sub-carriers to send Data. this was the
reason i couldnt sniff anything from the tags.

my question now is what do i have to change so that hf 15 cmd raw sends/receives with two sub-carriers?

Offline

#169 2015-04-21 22:50:57

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Skidata tickets (iso 15693)

For what i know the feature you are looking for is not implemented yet in pm3.

Offline

#170 2015-04-22 08:36:54

iceman
Administrator
Registered: 2013-04-25
Posts: 6,654
Website

Re: Skidata tickets (iso 15693)

Not even sure if that is suported in the current FPGA code..  Something for Izsh  to look into smile


If you feel the love,  https://www.patreon.com/iceman1001

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#171 2015-04-22 10:00:55

Sixkay
Contributor
Registered: 2015-03-18
Posts: 14

Re: Skidata tickets (iso 15693)

https://code.google.com/p/proxmark3/issues/detail?id=18

looks like he somehow did it but his code doesnt work for me

Offline

#172 2015-04-22 10:14:55

iceman
Administrator
Registered: 2013-04-25
Posts: 6,654
Website

Re: Skidata tickets (iso 15693)

in that example he updates the fpga-code.  Can you compile a new fpga-image?


If you feel the love,  https://www.patreon.com/iceman1001

modhex(hkhehghthbhudcfcdchkigiehgduiehg)

Offline

#173 2015-04-22 10:50:36

Sixkay
Contributor
Registered: 2015-03-18
Posts: 14

Re: Skidata tickets (iso 15693)

i changed my hi_simulate.v file and did make in the /armsrc folder befor flashing the fpgaimage.elf from the /armsrc/obj folder.
now i get:

hf 15 cmd raw -c 26 01 00
00 00 22 61 95 AE 67 80 07 E0 71 55 

hf 15 cmd raw -c 27 01 00
something i get
FF EF F4 55 BA 9E 01 1E
FF 75 7A 2A 5D CF 00 0F
FF 74 7A 2A

i think it should be the same result as 26 01 00

Offline

#174 2015-04-22 11:00:45

Sixkay
Contributor
Registered: 2015-03-18
Posts: 14

Re: Skidata tickets (iso 15693)

i tried another tag-it card and it looks like a get the first 2-4 bytes right sometimes
but i get a segmentation fault or random stuff most of the time.

sorry for second post.

Offline

#175 2015-04-22 11:12:46

holiman
Contributor
Registered: 2013-05-03
Posts: 566

Re: Skidata tickets (iso 15693)

Sixkay wrote:

i changed my hi_simulate.v file and did make in the /armsrc folder befor flashing the fpgaimage.elf from the

Changing verilog is more difficult than that unfortunately, you need to synthezise a new fpga image - you merely recompiled with the old bit-image.

Offline

#176 2015-12-04 16:35:13

dioh
Member
Registered: 2015-12-04
Posts: 1

Re: Skidata tickets (iso 15693)

Hey all!
Anyone had any luck using Omnikey 5321 for restoring an image? I read all the thread and I understand that copying is possible.
Is there any inexpesive alternative to PM3 for this type of cards?

See you all in the mountain!

Offline

#177 2015-12-05 02:27:58

Pummarola
Contributor
Registered: 2015-10-19
Posts: 36

Re: Skidata tickets (iso 15693)

Proxmark 3 is not that expensive. It's just a little investment on equipment.

Offline

#178 2015-12-07 15:46:44

key
Contributor
Registered: 2015-10-28
Posts: 20

Re: Skidata tickets (iso 15693)

i see skidata to parking ticket in my country can you connfirm is fully acceptable with proxmark??? this is very interesting thank you so much for the work here!!!!!!!!!!!!!!

Offline

#179 2015-12-26 16:44:49

hicham
Member
Registered: 2015-10-28
Posts: 1

Re: Skidata tickets (iso 15693)

after installing the new update of the LPR system and quercus have entered the ip address accompanied the port numbers of each equipment on the skidata system. the LPR system started to read Arabic letters so the was still blocked once

so ( system) the furthermore the tickets printed by the terminal does not contain visible letters

you don't have an update for us to correct this anomaly as soon as possible

the customer want absolutely the two systems can communicate normally and without blockages

we hope to arrange this as soon as possible

on our part we thank you for your cooperation and your efforts in this direction provided

Offline

#180 2016-10-21 08:12:54

ljusto
Contributor
Registered: 2016-09-19
Posts: 2

Re: Skidata tickets (iso 15693)

hello,

is there any news about clone skidata tickets?

Offline

#181 2017-12-20 21:44:13

BrGre
Contributor
Registered: 2017-12-20
Posts: 3

Re: Skidata tickets (iso 15693)

Narno wrote:

Hey guy,

May be my question is stupid but i'm looking for the answer for a long long time.
I hope you could help me to sleep better ^^

I'm developping an android app and I try to read info in skidata keycard.
I only want to get the id "1-1614 7133 53 ..." from the "raw" data tag.
Any advice or solution to get it?

Sincerely,

Arnaud

Hi Arnaud,

Basically the xx-xxxx xxxx xxxx xxxx xxxxx-x id (called DTA number) is derived from the UID of the card.
The 2 first digits field is the card type (e.g. Keycard iso, iso-dual, etc.).
The 20 digits field is simply the conversion of the UID from hex to unsigned decimal.
The last digit is a luhn check digit.

For example, the following UID E01604023A0998F2 equals 16147097921593645298 in unsigned decimal. The associated DTA number is 25-1614 7097 9215 9364 5298-4. I don’t know how to retrieve the 2 first digits (card type) from the content of the card. Maybe from the chip manufacturer id (here EM-Marin SA) and the IC type (04 EM4x3x?). 25 is a Keycard-eco. My assumption is that the 2 digits card type is just used as a filter between reloadable cards (01-1614 xxxx ....) and non-reloadable ones (such as 25-1614 xxxx ....) when buying on internet.

It seems that some existing android apps are already able to read the UID and to display the DTA number (e.g. Android app NXP Taginfo).

Hope this answers your question.
BrGre

Offline

#182 2017-12-23 23:03:15

didi_du_93000
Contributor
Registered: 2017-09-28
Posts: 5

Re: Skidata tickets (iso 15693)

Hello,

Using PM3 and ChameleonMini RevG can i clone a SKIDATA  card?
Do you think it's will working?
season is comming to make test!!!!


[url=https://vgruk.com/]https://vgruk.com/[/url]

Offline

#183 2018-01-03 16:09:42

BrGre
Contributor
Registered: 2017-12-20
Posts: 3

Re: Skidata tickets (iso 15693)

didi_du_93000 wrote:

Hello,

Using PM3 and ChameleonMini RevG can i clone a SKIDATA  card?
Do you think it's will working?
season is comming to make test!!!!

Hi Didi du 9-3,

From my point of view, cloning a card is useless. The UID is temporized once read by the turnstiles access reader. So 2 cards with the same UID cannot be used at the same time...

And from ethic point of view: ski resorts spend a lot a money for ski lifts installation, operation and maintenance. This gives work to a lot of people... If you want to see a movie, buy a ticket. If you want to listen to music, buy a CD. If you want to go skiing, buy a ski pass.

BrGre

Offline

#184 2018-01-21 20:03:01

didi_du_93000
Contributor
Registered: 2017-09-28
Posts: 5

Re: Skidata tickets (iso 15693)

Hello BrGre,

thanks for your reply. but it's will not help me.

I have some information,
In the big station using Skipass in France they have the anti-passback active.
So if you use a same card (clown) in a same turnstil, the second guy can't go on.

Last edited by didi_du_93000 (2018-01-21 20:03:40)


[url=https://vgruk.com/]https://vgruk.com/[/url]

Offline

#185 2018-12-24 11:43:52

papuaoshi
Contributor
Registered: 2018-12-23
Posts: 4

Re: Skidata tickets (iso 15693)

Hi guys! I'm currently playing with Skidata Keycard used as skipass for our tiny ski resort.
It looks like it's based on EM4233 (IC Id 0x09, 52 blocks, etc).
I don't have any info regarding EM4233, so I used my homebrew device to sniff propietary commands for this chip and found out at least
two commands:
23 E0 16 69B19903662416E0 00 FD6C
03 E1 16 DEBC9A78563412008C49E5 0FE2
03 E1 16 DEBC9A7856341200B7F4B5 9495

The response for E0 is random hash string of 7bytes like C21EAAAF7284C3, B73AACDA41D702, ...

Obviously, UID of that card is 69B19903662416E0 and it looks like 00123456789ABCDE is some kind of password (may be SIM card key#2?). But the rest is unknown for me.

The only datasheet I have is EMDB410 and EM4233SLIC, so could anyone share EM4233 full datasheet with me maybe? wink

Offline

#186 2018-12-29 23:31:41

ceres-c
Contributor
From: Italy
Registered: 2017-10-28
Posts: 7

Re: Skidata tickets (iso 15693)

Today I went out to test my Chameleon implementation of EM4233 and everything went fine until the reader sent the E0 command. Given I was not sniffing but emulating and did not know how to reply to the E0 command, my chameleon did not respond to 3 subsequent E0 and communication ended.

With the information papuaoshi just published here, I'd say this might be Grain128A authentication, even though, 7*8=56 is way too short for any "standard" Grain128A value, may it be the key or the IV. Did they roll their own crazy Grain implementation with less bits?

I do not have the full datasheet, but might have found some good source to reverse engineer information from. Fire me an email if you wish @papuaoshi wink

Last edited by ceres-c (2018-12-30 11:22:20)

Offline

#187 2018-12-29 23:36:27

ceres-c
Contributor
From: Italy
Registered: 2017-10-28
Posts: 7

Re: Skidata tickets (iso 15693)

--Redacted--
I've saved to archive.org the files you can download from EM website related to emdb410

Last edited by ceres-c (2018-12-30 12:21:07)

Offline

#188 2018-12-30 11:27:20

papuaoshi
Contributor
Registered: 2018-12-23
Posts: 4

Re: Skidata tickets (iso 15693)

ceres-c wrote:

Also, where did you find 00123456789ABCDE?

  03       E1          16       DEBC9A7856341200 8C49E5     0FE2
[flags] [cmd] [EMcode]                 [unknown]                  [crc]


DEBC9A7856341200 -> DE BC 9A 78 56 34 12 00 -> 00 12 34 56 78 9A BC DE

BTW, other interesting thing is that EM4233 card responds only 3 times in a row for E0/E1 commands and than I have to remove it from the field to run this sequence again, like this:

1.
>>> 23E01669B19903662416E00
<<< 009EDD379EA46057
>>> 03E116DEBC9A7856341200B7F4B5
<<< 010F [error]

2.
>>> 23E01669B19903662416E00
<<< [some other hash]
>>> 03E116DEBC9A7856341200B7F4B5
<<< 010F [error]

3.
>>> 23E01669B19903662416E00
<<< [some other hash]
>>> 03E116DEBC9A7856341200B7F4B5
<<< 010F [error]

4.
>>> 23E01669B19903662416E00
<<< [some other hash]
>>> 03E116DEBC9A7856341200B7F4B5
<<< ... [no responce]


Brute force protection))

Offline

#189 2018-12-30 12:30:29

ceres-c
Contributor
From: Italy
Registered: 2017-10-28
Posts: 7

Re: Skidata tickets (iso 15693)

papuaoshi wrote:

  03       E1          16       DEBC9A7856341200 8C49E5     0FE2
[flags] [cmd] [EMcode]                 [unknown]                  [crc]


DEBC9A7856341200 -> DE BC 9A 78 56 34 12 00 -> 00 12 34 56 78 9A BC DE

Yep, today I saw it. Yesterday I was very tired and should have gone to bed instead of writing that post wink

papuaoshi wrote:

BTW, other interesting thing is that EM4233 card responds only 3 times in a row for E0/E1 commands and than I have to remove it from the field to run this sequence again, like this:

1.
>>> 23E01669B19903662416E00
<<< 009EDD379EA46057
>>> 03E116DEBC9A7856341200B7F4B5
<<< 010F [error]

2.
>>> 23E01669B19903662416E00
<<< [some other hash]
>>> 03E116DEBC9A7856341200B7F4B5
<<< 010F [error]

3.
>>> 23E01669B19903662416E00
<<< [some other hash]
>>> 03E116DEBC9A7856341200B7F4B5
<<< 010F [error]

4.
>>> 23E01669B19903662416E00
<<< [some other hash]
>>> 03E116DEBC9A7856341200B7F4B5
<<< ... [no responce]


Brute force protection))

Well, worst case scenario: the proxmark can reset its field and the tag is power flushed smile

Offline

#190 2019-01-22 16:45:50

papuaoshi
Contributor
Registered: 2018-12-23
Posts: 4

Re: Skidata tickets (iso 15693)

I've sniffed twice for commands and flags being sent from turnstile to original EM4233 card but was unable to catch an inventory command which I find extremelly odd.
Nevertheless, here's the list ([flags] [cmd]):

[23] [25] - Select
[13] [23] - Read multiple blocks
[23] [E0] - Unknown (2-way auth)
[03] [E1] - Unknown (2-way auth)

So I guess there is no write operation between turnstile and a card with limited time. But anyway I will continue to sniff in order to obtain inventory command.

Offline

#191 2019-02-13 16:34:11

Florin_escu
Contributor
From: Bucharest / Romania / Europe
Registered: 2019-02-13
Posts: 6

Re: Skidata tickets (iso 15693)

Hello all

Right now i'm interested in ISO 15693 tag, especially in snooping / writing on Skidata cards. I have knowledge only in EM Microelectronic-Marin SA tags.

Until now I'm able to read full info from these cards with 3 separate devices:
- arduino & PN5180 - can be standalone read/write device;
- M24LR-Discovery kit - read/write device with PC;
- Sony Xperia X with "TagInfo" app from NXP - read only device.

Here is an example of a full scan (all scans are made with my smartphone):

** TagInfo scan (version 4.24.4) 2019-02-11 13:24:36 **
Report Type: External

-- IC INFO ------------------------------

# IC manufacturer:
EM Microelectronic-Marin SA

# IC type:
EM4x3x

# Application information:
SKIDATA keycard
* Key number: xx-16147133534526504087-x
* Area: [Unknown area] (2260)
* (Probably)Valid till: 30/07/1989 (FE:02)

-- NDEF ------------------------------

# No NDEF data storage populated:

-- EXTRA ------------------------------

# Memory size:
208 bytes
* 52 blocks, with 4 bytes per block

# IC detailed information:
Supported read commands:
* Single Block Read
* Multiple Block Read
* Get Multiple Block Security Status
* Get System Information
AFI supported
DSFID supported
IC reference value: 0x02
Customer ID: 0x066

-- FULL SCAN ------------------------------

# Technologies supported:
ISO/IEC 15693-3 compatible
ISO/IEC 15693-2 compatible

# Android technology information:
Tag description:
* TAG: Tech [android.nfc.tech.NfcV, android.nfc.tech.NdefFormatable]
* Maximum transceive length: 253 bytes
MIFARE Classic support present in Android

# Detailed protocol information:
ID: E0:16:24:66:02:3F:FC:97
AFI: 0x00
DSFID: 0x02

# Memory content:
[00] . 6D 08 80 20 |m␈.␠|
[01] . 42 18 60 20 |B␘`␠|
[02] . 00 38 00 00 |␀8␀␀|
[03] . 1C 48 33 00 |␜H3␀|
[04] . 1B 00 00 00 |␛␀␀␀|
[05] . 00 00 00 00 |␀␀␀␀|
[06] . 00 00 00 00 |␀␀␀␀|
[07] . 00 00 00 00 |␀␀␀␀|
[08] . 00 00 00 00 |␀␀␀␀|
[09] . 00 00 00 00 |␀␀␀␀|
[0A] . 00 00 00 00 |␀␀␀␀|
[0B] . 00 00 00 00 |␀␀␀␀|
[0C] . 00 00 00 00 |␀␀␀␀|
[0D] . 00 00 00 00 |␀␀␀␀|
[0E] . 00 00 00 00 |␀␀␀␀|
[0F] . 00 00 00 00 |␀␀␀␀|
[10] . 00 00 00 00 |␀␀␀␀|
[11] . 00 00 00 00 |␀␀␀␀|
[12] . 00 00 00 00 |␀␀␀␀|
[13] . 00 00 00 00 |␀␀␀␀|
[14] . 00 00 00 00 |␀␀␀␀|
[15] . 00 00 00 00 |␀␀␀␀|
[16] . 00 00 00 00 |␀␀␀␀|
[17] . 00 00 00 00 |␀␀␀␀|
[18] . 00 00 00 00 |␀␀␀␀|
[19] . 00 00 00 00 |␀␀␀␀|
[1A] . 00 00 00 00 |␀␀␀␀|
[1B] . 00 00 00 00 |␀␀␀␀|
[1C] . 2A 80 53 42 |*.SB|
[1D] . 1F 90 53 42 |␟.SB|
[1E] . 33 00 00 00 |3␀␀␀|
[1F] . 00 80 00 00 |␀.␀␀|
[20] . 00 00 00 00 |␀␀␀␀|
[21] . 1C DE 5E 8D |␜.^.|
[22] . AD 97 F2 92 |....|
[23] . F0 DE 44 6C |..Dl|
[24] . 20 00 00 00 |␠␀␀␀|
[25] . BF 80 1F 00 |..␟␀|
[26] . 00 FC 00 00 |␀.␀␀|
[27] . 00 00 00 00 |␀␀␀␀|
[28] . 00 00 00 00 |␀␀␀␀|
[29] . 00 00 00 00 |␀␀␀␀|
[2A] . A8 11 FE 02 |.␑.␂|
[2B] . A0 05 1B 01 |.␅␛␁|
[2C] . 1C DD 5E 8D |␜.^.|
[2D] . ED 8B F2 92 |....|
[2E] . 40 1B 80 6C |@␛.l|
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . A2 80 91 09 |...␉|
[31] . 00 A4 48 00 |␀.H␀|
[32] . 00 00 00 00 |␀␀␀␀|
[33] . 00 00 00 00 |␀␀␀␀|

  x:locked, .:unlocked

--------------------------------------

Writing operation is possible only between 4 and 27 blocks, the rest are somehow locked!

Between  11 and 16 FEB 2019, I am on a small ski resort and I have around 50 almost consecutive readings from 4 different tags (with point on them), and I can tell you that the gates make writing operations on the card and they aren't linked to a server or central data base.


~~~            Working on ISO 15693 tags with:          ~~~
Arduino&PN5180, M24LR-Discovery&CR95HF and now pm3.

Offline

#192 2019-02-13 17:38:02

Florin_escu
Contributor
From: Bucharest / Romania / Europe
Registered: 2019-02-13
Posts: 6

Re: Skidata tickets (iso 15693)

Here is a first analysis for one of Skidata card.

This first reading was made immediately after I charged the tag with 120 points, every entry on the gate take 4 points from the card, and every scan has a time stamp.

Unfortunately I wasn't able to take readings every time, and I was unable to correlate the points with readings.

Here are all the block's values and after you'll get just the time stamp and 3 (2F, 30, 31) blocks that are changing with every pass:

** TagInfo scan (version 4.24.4) 2019-02-10 17:34:20 **
# Memory content:
[00] . 57 08 77 A9 |W␈w.|
[01] . 82 18 60 20 |.␘`␠|
[02] . 00 38 00 00 |␀8␀␀|
[03] . 1C 48 33 00 |␜H3␀|
[04] . 1B 00 00 00 |␛␀␀␀|
[05] . 00 00 00 00 |␀␀␀␀|
......zero.....
[1B] . 00 00 00 00 |␀␀␀␀|
[1C] . 2A 80 53 42 |*.SB|
[1D] . 1F 90 53 42 |␟.SB|
[1E] . 33 00 00 00 |3␀␀␀|
[1F] . 00 00 00 00 |␀␀␀␀|
......zero.....
[29] . 00 00 00 00 |␀␀␀␀|
[2A] . A8 11 FE 02 |.␑.␂|
[2B] . A0 05 1B 01 |.␅␛␁|
[2C] . CC CB D5 7B |...{|
[2D] . 3A EE 62 D5 |:.b.|
[2E] . 40 DF B1 65 |@..e|
[2F] . 00 00 00 00 |␀␀␀␀|
[30] . A4 80 09 0F |..␉␏|                                              ~~~~~ charged with 120 points
[31] . 00 00 78 00 |␀␀x␀|
[32] . 00 00 00 00 |␀␀␀␀|
[33] . 00 00 00 00 |␀␀␀␀|

** TagInfo scan (version 4.24.4) 2019-02-11 13:24:21 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . 42 80 8F 0C |B..␌|
[31] . 00 74 68 00 |␀th␀|

** TagInfo scan (version 4.24.4) 2019-02-11 18:29:19 **      ~~~~~ let's say "X" points
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . A8 80 95 08 |...␈|
[31] . 00 A4 48 00 |␀.H␀|

** TagInfo scan (version 4.24.4) 2019-02-11 18:33:22 **     ~~~~~ now X-4 points
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . B5 80 95 08 |...␈|
[31] . 00 C4 40 00 |␀.@␀|

** TagInfo scan (version 4.24.4) 2019-02-11 18:37:45 **    ~~~~~ now X-8 points
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . 60 80 8D 07 |`..␇|
[31] . 00 C4 40 00 |␀.@␀|

** TagInfo scan (version 4.24.4) 2019-02-12 15:25:02 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . 9C 80 91 06 |...␆|
[31] . 00 84 38 00 |␀.8␀|

** TagInfo scan (version 4.24.4) 2019-02-12 16:16:28 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . A2 80 92 05 |...␅|
[31] . 00 A4 30 00 |␀.0␀|

** TagInfo scan (version 4.24.4) 2019-02-12 16:26:49 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . 9D 80 92 05 |...␅|
[31] . 00 AC 28 00 |␀.(␀|

** TagInfo scan (version 4.24.4) 2019-02-12 16:41:29 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . A3 80 96 04 |...␄|
[31] . 00 AC 28 00 |␀.(␀|

** TagInfo scan (version 4.24.4) 2019-02-12 16:53:26 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . B0 80 96 04 |...␄|
[31] . 00 CC 20 00 |␀.␠␀|

** TagInfo scan (version 4.24.4) 2019-02-12 17:03:42 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . 88 80 93 03 |...␃|
[31] . 00 CC 20 00 |␀.␠␀|

** TagInfo scan (version 4.24.4) 2019-02-13 09:42:47 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . 7B 80 93 03 |{..␃|
[31] . 00 B4 18 00 |␀.␘␀|

** TagInfo scan (version 4.24.4) 2019-02-13 09:50:42 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . 81 80 97 02 |...␂|
[31] . 00 B4 18 00 |␀.␘␀|

** TagInfo scan (version 4.24.4) 2019-02-13 10:29:04 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . D5 80 98 01 |...␁|
[31] . 00 D4 10 00 |␀.␐␀|

** TagInfo scan (version 4.24.4) 2019-02-13 10:52:54 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . D6 80 9C 00 |...␀|
[31] . 00 DC 08 00 |␀.␈␀|

** TagInfo scan (version 4.24.4) 2019-02-13 11:07:27 **    ~~~~~  EMPTY CARD
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . BF 80 1F 00 |..␟␀|
[31] . 00 FC 00 00 |␀.␀␀|

** TagInfo scan (version 4.24.4) 2019-02-13 11:18:07 **   ~~~~~  Recharged with 120 points
[2F] . 00 00 00 00 |␀␀␀␀|
[30] . A4 80 09 0F |..␉␏|
[31] . 00 00 78 00 |␀␀x␀|

** TagInfo scan (version 4.24.4) 2019-02-13 11:28:57 **  ~~~~~ minus 4 points
[2F] . 20 00 00 00 |␠␀␀␀|                                             ~~~~~ now 116 points
[30] . 58 80 8A 0E |X..␎|
[31] . 00 4C 78 00 |␀Lx␀|

** TagInfo scan (version 4.24.4) 2019-02-13 11:37:15 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . 5E 80 8A 0E |^..␎|
[31] . 00 6C 70 00 |␀lp␀|

** TagInfo scan (version 4.24.4) 2019-02-13 11:58:14 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . 3C 80 8B 0D |<..␍|
[31] . 00 6C 70 00 |␀lp␀|

** TagInfo scan (version 4.24.4) 2019-02-13 12:10:41 **
[2F] . 20 00 00 00 |␠␀␀␀|
[30] . 3C 80 8B 0D |<..␍|
[31] . 00 74 68 00 |␀th␀|


~~~            Working on ISO 15693 tags with:          ~~~
Arduino&PN5180, M24LR-Discovery&CR95HF and now pm3.

Offline

#193 2019-02-13 18:04:11

Florin_escu
Contributor
From: Bucharest / Romania / Europe
Registered: 2019-02-13
Posts: 6

Re: Skidata tickets (iso 15693)

My conclusion are:
- the gate make read and WRITE operation on the card;
- coding for the number of points stored on the card are the same for all 4 cards, so no encryption based on UID or date;
- no central database or server for this ski resort.

My approach with these tags is like this:
- buy a point card;
- go to the gate and snoop the conversation for a few times;
- send raw commands to the tag based on snooped conversation in order to recharge with points.

I don't have the gear to snoop, but if someone can share some clean conversation I can try to recharge.

The problem is that the raw commands will contain UID or other encryption, and most likely will work on the tag that was snooped!

Any other ideas?

P.S. I have more records in TXT files!


~~~            Working on ISO 15693 tags with:          ~~~
Arduino&PN5180, M24LR-Discovery&CR95HF and now pm3.

Offline

#194 2019-02-13 18:53:05

ceres-c
Contributor
From: Italy
Registered: 2017-10-28
Posts: 7

Re: Skidata tickets (iso 15693)

1) Most probably the tickets ARE checked against a server. If you read on skidata website you can see they're boasting their anti counteraction techniques, also users reported here in the past about crafted point cards being banned.
2) You can't write because the tag is password-protected. There are 2 different security levels and 2 authentication modes (login versus mutual auth), if you were authenticated you'd be able to write. Turnstiles perform authentication.
3) We can't sniff for you because your resort could have different hardware than others have, so the traces wouldn't be coherent.

Offline

#195 2019-10-21 09:05:45

sashat720
Contributor
Registered: 2019-09-16
Posts: 6

Re: Skidata tickets (iso 15693)

asper wrote:

It is NOT POSSIBLE to modify an UID/Serial for ISO15693 cards/tags (and the above mentioned cards are all ISO15693); no one has ever emulated an ISO15693 tags until now so it will be impossible for you to do what you are trying to do. Also serials are written at the tags factory so even ski resorts have no control on them, they receive them "as is", they can only put the serial in the database and add/remove features to it.

Now there are magic ISO15693 cards which can have their UID changed:

http://www.proxmark.org/forum/viewtopic.php?id=5633

Last edited by sashat720 (2019-10-21 09:36:40)

Offline

#196 2019-10-28 17:18:32

ceres-c
Contributor
From: Italy
Registered: 2017-10-28
Posts: 7

Re: Skidata tickets (iso 15693)

sashat720 wrote:

Now there are magic ISO15693 cards which can have their UID changed:

http://www.proxmark.org/forum/viewtopic.php?id=5633

This is of no interest to us, as SKIDATA tags are EM4233 and those magic tags are NXP ICODE. I recall that some tickets used to be ICODE, at least in my home resort, but I haven't seen them since long ago. Older tags have been (or are being) phased out.

Offline

Board footer

Powered by FluxBB