Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2015-09-06 09:18:16

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Need help to identify tag

Please help me identify one tag. I am newbie in this forum and my proxmark3 experience only one week. I can identify few tags that i found at home. This tag not reply on any commands of PM3. HF antennap voltage drops with this tag. Tag  in full working condition.

[== Undefined ==]
C:\pm3-bin-2.2.0\win32 (client+GUI)>proxmark3 COM14
Prox/RFID mark3 RFID instrument
bootrom: /-suspect 2015-08-16 18:49:55
os: /-suspect 2015-08-16 18:50:03
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/06/22 at 21:47:54

uC: AT91SAM7S512 Rev B
Embedded Processor: ARM7TDMI
Nonvolatile Program Memory Size: 512K bytes. Used: 166521 bytes (32%). Free: 357767 bytes (68%).
Second Nonvolatile Program Memory Size: None
Internal SRAM Size: 64K bytes
Architecture Identifier: AT91SAM7Sxx Series
Nonvolatile Program Memory Type: Embedded Flash Memory

no tag

[== Undefined ==]
proxmark3> hw tune

Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)
......#db# DownloadFPGA(len: 42096)
.
# LF antenna: 28.88 V @   125.00 kHz
# LF antenna: 31.76 V @   134.00 kHz
# LF optimal: 36.16 V @   130.43 kHz
# HF antenna: 28.54 V @    13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.

Tag on LF

[== Undefined ==]
proxmark3> hw tune

Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)
......#db# DownloadFPGA(len: 42096)
.
# LF antenna: 28.88 V @   125.00 kHz
# LF antenna: 31.76 V @   134.00 kHz
# LF optimal: 36.30 V @   130.43 kHz
# HF antenna: 28.57 V @    13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.

Tag on HF

[== Undefined ==]
proxmark3> hw tune

Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)
......#db# DownloadFPGA(len: 42096)
.
# LF antenna: 29.15 V @   125.00 kHz
# LF antenna: 32.17 V @   134.00 kHz
# LF optimal: 36.02 V @   130.43 kHz
# HF antenna: 25.49 V @    13.56 MHz
Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.

Unknown tag

Offline

#2 2015-09-06 09:22:49

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Need help to identify tag

Seems to be a HF tag,  since you got a drop in the voltage.
Try reading the wiki for more information about how to use your PM3 device.

Happy rfiding!

Offline

#3 2015-09-06 09:31:38

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

I have read all wiki and a lot of forums, but have no results.
A can determine only this voltage drop.

Offline

#4 2015-09-06 13:29:26

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Need help to identify tag

If you read it all then it is good, since then you know it all. Have you tried running some commands against your unknown tag?

Offline

#5 2015-09-06 14:52:06

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

Thank you very much for your answer.
It is output of PM3 on some commands.

[== Undefined ==]
proxmark3> [b]hf 14a reader[/b]
iso14443a card select failed
proxmark3> [b]hf 14b reader[/b]
no 14443B tag found
proxmark3> [b]hf 14b sri512read[/b]
#db# No response from tag
proxmark3> [b]hf 14b srix4kread[/b]
#db# No response from tag
proxmark3> [b]hf 15 demod[/b]
proxmark3> [b]hf 15 read[/b]
proxmark3> [b]hf 15 reader[/b]
#db# 0 octets read from IDENTIFY request:
#db# 0 octets read from SELECT request:
#db# 0 octets read from XXX request:
proxmark3> [b]hf 15 findafi[/b]
#db# AFI Bruteforcing done.
proxmark3> [b]hf legic reader[/b]
#db# setting up legic card
#db# Unknown card format: 26
proxmark3> [b]hf iclass reader[/b]
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
Command execute timeout
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
Readstatus:00
Quitting...
proxmark3> [b]hf mf rdbl 0 a ffffffffffff[/b]
--block no:0, key type:A, key:ff ff ff ff ff ff
#db# Can't select card
#db# READ BLOCK FINISHED
isOk:00

Offline

#6 2015-09-06 14:55:00

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

i am sorry there is no button for edit my messages.

Offline

#7 2015-09-07 14:49:03

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

this tag from absolutely new and not used gas balloon refill.
Then i plug this tag in the device for which it is intended, leds on the device indicates full gas bank (even without gas balloon, only tag).
But i can't read any information from this tag. But i have a few HF tags that my PM3 reads.
Inside this equipment i found title "13,56M RFID" and antenna.
May be this tag is absolutely clear and after first use of equipment it will be uploaded?
Can anyone give me advise how i can extract any output from this tag.

Offline

#8 2015-09-07 22:16:10

meter
Contributor
Registered: 2015-07-13
Posts: 78

Re: Need help to identify tag

You can try to snoop comunication between device and tag.
Maybe you should give more informations where you take this tag.

Offline

#9 2015-09-08 10:26:53

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

this tag from gas ballon for nail gun
every shot will be counted in this chip and when 500 shots wil be played i must to replace ballon on new one.
Does it Mean that it is iclass tag, if i can receive  hf iclass snoop output?
And why a can not read  tag throug pm3, may be i need another design of HF antenna?
in Gun i found this board and ant.
picture
this is my HF ant for PM3
picture
snoop

[==PM3==]
proxmark3> hf iclass snoop
proxmark3> hf list iclass
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
#db# cancelled_a
#db# a 0 1
#db# 20 59f0 f0
Recorded Activity (TraceLen = 23024 bytes)

Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass    - Timings are not as accurate

     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation

-----------|-----------|-----|-----------------------------------------------------------------|-----|-------------------

           0 |         0 | Rdr | 0a                                                              |     | ACTALL
           0 |         0 | Rdr | 0a                                                              |     | ACTALL
           0 |         0 | Rdr | 0a                                                              |     | ACTALL
        264 |      7264 | Tag | bb  33  bb  00  00  00 [02  bb]                                |  ok |
      7264 |      7264 | Rdr | 0c                                                              |     | IDENTIFY
      7552 |      7552 | Tag | bb  33  bb  01  0f  08 [04  bb]                                 |  ok |
      7552 |      7552 | Rdr | 0a                                                              |     | ACTALL
     12864 |     12864 | Rdr | <empty trace - possible error>                                  |     | HALT

outputs of PM3 with tag and without tag are same

[== Undefined ==]
proxmark3> hf iclass reader
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
Command execute timeout
Readstatus:00
Quitting...
proxmark3> hf list iclass
Recorded Activity (TraceLen = 1330 bytes)

Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass    - Timings are not as accurate

     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL

Last edited by nik_po (2015-09-12 05:43:11)

Offline

#10 2015-09-08 11:17:15

meter
Contributor
Registered: 2015-07-13
Posts: 78

Re: Need help to identify tag

you can try to snoop wih 14443-a or try to send raw command with

hf 14a raw -p 0A

should give you something in response

Offline

#11 2015-09-08 12:13:55

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

Thank you very much, but there is nothing sad
proxmark3> hf 14a raw -p 0A
received 0 octets
yesterday i try to listen gun's antenna:

[== Undefined ==]
proxmark3> hf iclass read
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
Command execute timeout
Readstatus:00
Quitting...
proxmark3> hf list iclass
Recorded Activity (TraceLen = 31988 bytes)

Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass    - Timings are not as accurate

     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation

-----------|-----------|-----|-----------------------------------------------------------------|-----|------------
       
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
         0 |         0 | Rdr | 0a                                                              |     | ACTALL
      7264 |      7264 | Tag | bb  33  bb  00  00  00 [02  bb]                                 |  ok |
      7264 |      7264 | Rdr | 0c                                                              |     | IDENTIFY
      7552 |      7552 | Tag | bb  33  bb  01  0f  08 [04  bb]                                 |  ok |
      7552 |      7552 | Rdr | 0a                                                              |     | ACTALL
     12864 |     12864 | Tag | bb  33  bb  00  00  00 [08  bb]                                 |  ok |
     12864 |     12864 | Rdr | 0c                                                              |     | IDENTIFY
     13008 |     13008 | Tag | bb  d4  bb  01  0b  0a [04  bb]                                 |  ok |
     13008 |     13008 | Rdr | 0a                                                              |     | ACTALL
     13088 |     13088 | Tag | bb  d4  bb  0d  02  00 [02  bb]                                 |  ok |
     13088 |     13088 | Rdr | 0c                                                              |     | IDENTIFY
     13520 |     13520 | Tag | bb  33  bb  00  00  00 [04  bb]                                 |  ok |
     13520 |     13520 | Rdr | 0a                                                              |     | ACTALL
     13712 |     13712 | Tag | bb  d4  bb  08  0b  0b [01  bb]                                 |  ok |
     13712 |     13712 | Rdr | 0c                                                              |     | IDENTIFY
     13792 |     13792 | Tag | bb  33  bb  08  00  09 [02  bb]                                 |  ok |
     13792 |     13792 | Rdr | 0a                                                              |     | ACTALL
     14704 |     14704 | Tag | bb  d4  bb  06  00  00 [02  bb]                                 |  ok |
     14704 |     14704 | Rdr | 0c                                                              |     | IDENTIFY
     14928 |     14928 | Tag | bb  33  bb  01  00  0b [04  bb]                                 |  ok |
     14928 |     14928 | Rdr | 0a                                                              |     | ACTALL
     15248 |     15248 | Tag | bb  33  bb  00  00  02 [04  bb]                                 |  ok |
     15248 |     15248 | Rdr | 0c                                                              |     | IDENTIFY
     15552 |     15552 | Tag | bb  33  bb  04  01  01 [02  bb]                                 |  ok |
     15552 |     15552 | Rdr | 0a                                                              |     | ACTALL
     16000 |     16000 | Tag | <empty trace - possible error>                                  |     |
     16000 |     16000 | Rdr | 0a                                                              |     | ACTALL

Offline

#12 2015-09-08 15:16:54

meter
Contributor
Registered: 2015-07-13
Posts: 78

Re: Need help to identify tag

try to increase response timeout, now I can't launch a client with pm3 for see the help but should be -t
if you launch only
hf 14a raw
should give you all parameters for raw command
I don't know iclass, should use 14443a and 15693

Offline

#13 2015-09-08 15:56:55

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Need help to identify tag

iclass uses 14443B and 15693.

try 14b snoop.

Offline

#14 2015-09-08 20:13:19

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

marshmellow wrote:

iclass uses 14443B and 15693.

try 14b snoop.

[== Undefined ==]
proxmark3> hf 14b snoop
#db# Snooping buffers initialized:
#db#   Trace: 39232 bytes
#db#   Reader -> tag: 256 bytes
#db#   tag -> Reader: 256 bytes
#db#   DMA: 256 bytes
proxmark3> hf list 14b
Waiting for a response from the proxmark...
Don't forget to cancel its operation first by pressing on the button
#db# cancelled
#db# Snoop statistics:
#db#   Max behind by: 3
#db#   Uart State: 0
#db#   Uart ByteCnt: 0
#db#   Uart ByteCntMax: 256
#db#   Trace length: 0
Recorded Activity (TraceLen = 0 bytes)

Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer
iso14443a - All times are in carrier periods (1/13.56Mhz)
iClass    - Timings are not as accurate

     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |

-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|

Offline

#15 2015-09-09 08:11:59

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

Answers on raw requests received only when tag situated on Gun's antenna.
When i send one command twice - i receive answer only on first request.
i tryed all from 30 00 to 30 29 range.

[== Undefined ==]
proxmark3> hf 14a raw -c -s 30 29
received 0 octets          
received 1 octets          
01           
proxmark3> 
proxmark3> hf list 14a  
Recorded Activity (TraceLen = 33 bytes)          
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer          
iso14443a - All times are in carrier periods (1/13.56Mhz)          
iClass    - Timings are not as accurate          
     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |          
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|          
         0 |       992 | Rdr | 52                                                              |     | WUPA          
    159616 |    164320 | Rdr | 30  29  c1  14                                                  |     | READBLOCK(41)          
    274708 |    274900 | Tag | 01                                                              |     |           
_________________________________________________________________________________________
proxmark3> hf 14a raw -c -s 30 20
received 0 octets          
received 1 octets          
00           
proxmark3> 
proxmark3> hf list 14a  
Recorded Activity (TraceLen = 33 bytes)          
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer          
iso14443a - All times are in carrier periods (1/13.56Mhz)          
iClass    - Timings are not as accurate          
     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |          
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|          
         0 |       992 | Rdr | 52                                                              |     | WUPA          
    168320 |    173088 | Rdr | 30  20  00  89                                                  |     | READBLOCK(32)          
    202276 |    202532 | Tag | 00!                                                             |     |           
_________________________________________________________________________________________
proxmark3> hf 14a raw -c -s 30 01
received 0 octets          
received 1 octets          
00           
proxmark3> 
proxmark3> hf list 14a  
Recorded Activity (TraceLen = 33 bytes)          
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer          
iso14443a - All times are in carrier periods (1/13.56Mhz)          
iClass    - Timings are not as accurate          
     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |          
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|          
         0 |       992 | Rdr | 52                                                              |     | WUPA          
    167168 |    171936 | Rdr | 30  01  8b  b9                                                  |     | READBLOCK(1)          
    302388 |    302644 | Tag | 00!                                                             |     |           
proxmark3> 
_________________________________________________________________________________________
proxmark3> hf 14a raw -c -s 30 11
received 4 octets          
01 00 00 00           
received 0 octets          
proxmark3> 
proxmark3> hf list 14a  
Recorded Activity (TraceLen = 83 bytes)          
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer          
iso14443a - All times are in carrier periods (1/13.56Mhz)          
iClass    - Timings are not as accurate          
     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |          
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|          
         0 |       992 | Rdr | 52                                                              |     | WUPA          
     61412 |     61604 | Tag | 01                                                              |     |           
     62848 |     65312 | Rdr | 93  20                                                          |     | ANTICOLL          
     70516 |     70708 | Tag | 01                                                              |     |           
     72960 |     83424 | Rdr | 93  70  01  00  00  00  01  51  c3                              |     | SELECT_UID          
    171028 |    171412 | Tag | 01                                                              |     |           
    203520 |    208224 | Rdr | 30  11  0a  a9                                                  |     | READBLOCK(17)          

proxmark3> hf 14a raw -c -s 30 21
received 0 octets          
received 1 octets          
01           
proxmark3> 
proxmark3> hf list 14a  
Recorded Activity (TraceLen = 33 bytes)          
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer          
iso14443a - All times are in carrier periods (1/13.56Mhz)          
iClass    - Timings are not as accurate          
     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |          
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|          
         0 |       992 | Rdr | 52                                                              |     | WUPA          
    168192 |    172960 | Rdr | 30  21  89  98                                                  |     | READBLOCK(33)          
    175108 |    175300 | Tag | 01                                                              |     |           

Offline

#16 2015-09-09 16:21:46

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

Does it mean that i need buy or build another antenna? No one command doesn't work with pm3. May be anyone can help me for a money?

Offline

#17 2015-09-09 22:02:56

meter
Contributor
Registered: 2015-07-13
Posts: 78

Re: Need help to identify tag

maybe your antenna is too big for your little tag (2 cm right?). You should build a little antenna. In this thread someone has your similar problem. Read this wiki for build a little antenna.
However you can try to send also raw command with protocol 15693 so you've tried all protocols. Sure is not 14B, maybe is 14A where there are some responses.

Offline

#18 2015-09-10 15:44:32

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

Handmaded HF Antenna. 2,5 cm diameter and 6 turns
no tag

[== Undefined ==]
proxmark3> hw tune
Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)                 
......#db# DownloadFPGA(len: 42096)                 
.          
# LF antenna:  0.14 V @   125.00 kHz          
# LF antenna:  0.00 V @   134.00 kHz          
# LF optimal:  0.00 V @ 12000.00 kHz          
# HF antenna: 18.79 V @    13.56 MHz          
# Your LF antenna is unusable.     

with tag

[== Undefined ==]
proxmark3> hw tune
Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)                 
......#db# DownloadFPGA(len: 42096)                 
.          
# LF antenna:  0.00 V @   125.00 kHz          
# LF antenna:  0.00 V @   134.00 kHz          
# LF optimal:  0.00 V @ 12000.00 kHz          
# HF antenna:  8.90 V @    13.56 MHz          
# Your LF antenna is unusable.          
proxmark3> 
proxmark3> hf search
no known/supported 13.56 MHz tags found

Also no any readings from tag (14a, 14b, iclass, raw and others)
Can anyone help me with advice?

Last edited by nik_po (2015-09-10 16:45:31)

Offline

#19 2015-09-10 18:41:16

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Need help to identify tag

Your antenna is great.
Try to snoop again when you approach the tag to the circuit.

Offline

#20 2015-09-10 21:01:02

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

Thank you very much my  dear friends.

snooping with 14a 14b without results

Snooping without tag

[== Undefined ==]
proxmark3> hf iclass snoop
proxmark3> 
proxmark3> #db# cancelled_a                 
proxmark3> #db# 1 0 1                 
proxmark3> #db# 20 f0 f0                 
proxmark3> hf list iclass  
Recorded Activity (TraceLen = 240 bytes)          
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer          
iso14443a - All times are in carrier periods (1/13.56Mhz)          
iClass    - Timings are not as accurate          
     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |          
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|          
proxmark3> 

Snooping with tag (i see only "Rdr" but what about "tag"? Why there is no "tag" in output? )

[== Undefined ==]
proxmark3> hf iclass snoop
proxmark3> 
proxmark3> #db# cancelled_a                 
proxmark3> #db# a 0 1                 
proxmark3> #db# 20 22f0 f0                 
proxmark3> hf list iclass  
Recorded Activity (TraceLen = 8944 bytes)          
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer          
iso14443a - All times are in carrier periods (1/13.56Mhz)          
iClass    - Timings are not as accurate          
     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |          
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  00  00  80  64  00  00  03  80  |     |           
           |           |     | 00  78  f0  e0  00  00  10  60  00  00  0c  80  00  00  ff  32  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  00  00  20  |     |           
           |           |     | b4  00  00  03  80  00  78  f0  e0  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  00  00  f0  6f  00  00  0b  80  00  d1  08  0b  |     |           
           |           |     | 0d  0e  e4  8d  b9  a5  08  c3  40  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  00  00  00  27  00  00  |     |           
           |           |     | 08  80  bb  d4  bb  00  03  0e  02  bb  f9  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  00  |     |           
           |           |     | 00  f0  40  00  00  08  80  bb  33  bb  00  00  00  01  bb  fd  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  00  00  50  3a  00  00  13  80  00  92  eb  |     |           
           |           |     | 89  da  2b  d8  eb  c6  f0  9e  6a  ae  2a  91  c5  9a  40  db  |     |           
           |           |     | a7  d1  a0  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
  -8449537 |  -8418693 | Rdr | 76  48  37  63  4a  96  f4  30  92  68  f5  ba  21  00  a2  a9  |     |           
           |           |     | 60  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  04  22  01  08  |     |           
           |           |     | 80  42  60  10  80  00  00  00  00  00  00  00  00  2a  04  4a  |     |           
           |           |     | 81  12  a0  44  a8  11  2a  04  4a  81  12  a0  00  00  e0  1b  |     |           
           |           |     | 00  00  13  80  00  92  00  00  10  34  00  00  03  80  00  78  |     | ?          
 -16843009 | -16843009 | Rdr | <empty trace - possible error>                                  |     | HALT          
 -16843009 | -16843009 | Rdr | <empty trace - possible error>                                  |     | HALT          
proxmark3> 
proxmark3> hf iclass snoop
proxmark3> 
proxmark3> #db# cancelled_a                 
proxmark3> #db# 8 0 1                 
proxmark3> #db# 20 cf0 f0                 
proxmark3> hf list iclass  
Recorded Activity (TraceLen = 3312 bytes)          
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer          
iso14443a - All times are in carrier periods (1/13.56Mhz)          
iClass    - Timings are not as accurate          
     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |          
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  00  00  50  45  00  00  0c  80  |     |           
           |           |     | 00  00  ff  32  02  16  01  24  16  e0  80  ad  e1  00  ff  32  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  00  00  |     |           
           |           |     | 00  20  f9  00  00  0c  80  00  00  ff  32  02  16  01  24  16  |     |           
           |           |     | e0  80  ad  e1  00  00  78  f0  e0  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  00  00  20  c2  00  00  0c  80  00  00  ff  32  |     |           
           |           |     | 02  16  01  24  16  e0  80  ad  e1  00  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  00  00  00  27  00  00  |     |           
           |           |     | 00  a0  8f  00  00  03  80  00  78  f0  e0  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 00  00  a0  52  00  00  0c  80  00  00  ff  32  02  16  01  24  |     |           
           |           |     | 16  e0  80  0d  e1  00  00  00  30  8b  00  00  08  80  bb  33  |     |           
           |           |     | bb  00  00  00  01  bb  fd  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  00  00  50  54  00  00  0c  80  00  00  |     |           
           |           |     | ff  32  02  16  01  24  16  e0  80  ad  e1  00  80  00  92  eb  |     |           
           |           |     | 89  da  2b  d8  eb  c6  f0  9e  6a  ae  2a  91  c5  9a  40  db  |     |           
           |           |     | a7  d1  a0  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
 -33620097 | -33619535 | Rdr | 24  16  e0  80  ad  e1  00  30  92  68  f5  ba  21  00  a2  a9  |     |           
           |           |     | 60  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  04  22  01  08  |     |           
           |           |     | 80  42  60  10  80  00  00  00  00  00  00  00  00  2a  04  4a  |     |           
           |           |     | 81  12  a0  44  a8  11  2a  04  4a  81  12  a0  00  00  e0  1b  |     |           
           |           |     | 00  00  13  80  00  92  00  00  10  55  00  00  03  80  00  78  |     | ?          
 -15794369 | -15777981 | Rdr | 30                                                              |     | ?          
 -16843009 | -16793849 | Rdr | 00  00  80  00  20  00  08  00  02  00  00  80  00  20  00  08  |     |           
           |           |     | 00  02  00  00  80  00  20  00  08  00  30  00  00  00  00  00  |     |           
           |           |     | 08  c0  40  04  60  01  18  00  46  00  11  80  04  60  01  18  |     |           
           |           |     | 00  46  00  11  80  04  60  01  18  00  46  00  11  80  30  00  |     |           
           |           |     | 00  00  00  00  10  01  40  02  60  00  98  00  26  00  09  80  |     |           
           |           |     | 02  60  00  98  00  26  00  09  80  02  60  00  98  00  26  00  |     |           
           |           |     | 09  82  00  00  00  00  00  00  40  45  42  04  30  81  0c  20  |     |           
           |           |     | 43  08  10  c2  04  30  81  0c  20  43  08  10  c2  04  30  81  |     |           
           |           |     | 0c  20  43  08  10  80  00  00  00  00  00  00  00  00  08  04  |     |           
           |           |     | 22  01  08  80  42  20  10  88  04  22  01  08  80  42  20  10  |     |           
           |           |     | 88  00  00  50  49  00  00  0c  80  00  00  ff  32  02  16  01  |     |           
           |           |     | 24  16  e0  80  ad  e1  00  80  00  7c  78  73  07  76  48  37  |     |           
           |           |     | 63  4a  96  f4  30  92  68  f5  ba  21  00  a2  a9  60  00  00  |     |           
           |           |     | 00  00  00  00  08  c0  0c  00  53  00  14  c0  05  30  01  4c  |     |           
           |           |     | 00  53  00  14  c0  05  30  01  4c  00  53  00  14  c0  05  30  |     |           
           |           |     | 01  40  10  00  00  00  00  00  00  c0  00  00  40  00  10  00  |     | HALT          
proxmark3> 
proxmark3> hf iclass snoop
proxmark3> 
proxmark3> #db# cancelled_a                 
proxmark3> #db# a 0 1                 
proxmark3> #db# 20 19f0 f0                 
proxmark3> hf list iclass  
Recorded Activity (TraceLen = 6640 bytes)          
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer          
iso14443a - All times are in carrier periods (1/13.56Mhz)          
iClass    - Timings are not as accurate          
     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |          
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  00  00  80  af  00  00  0c  80  |     |           
           |           |     | 00  00  ff  32  02  16  01  24  16  e0  80  ad  e1  00  ff  32  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  00  00  |     |           
           |           |     | 00  20  f9  00  00  80  e8  00  00  03  80  00  78  f0  e0  16  |     |           
           |           |     | e0  80  ad  e1  00  00  78  f0  e0  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  00  00  60  75  00  00  13  80  00  d1  08  0b  |     |           
           |           |     | 0d  0e  e4  8d  b9  a5  f8  a3  92  7e  61  7e  78  65  28  c3  |     |           
           |           |     | 55  e0  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  00  00  00  27  00  00  |     |           
           |           |     | 00  a0  8f  00  00  00  a0  67  00  00  13  80  00  92  eb  89  |     |           
           |           |     | da  2b  d8  eb  c6  f0  9e  6a  ae  2a  91  c5  9a  40  db  a7  |     |           
           |           |     | d1  a0  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 00  00  50  68  00  00  13  80  00  7c  78  73  07  76  48  37  |     |           
           |           |     | 63  4a  96  f4  30  92  68  f5  ba  21  00  a2  a9  60  bb  33  |     |           
           |           |     | bb  00  00  00  01  bb  fd  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
         0 |       257 | Rdr | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  00  00  50  54  00  00  00  40  38  00  |     |           
           |           |     | 00  03  80  00  c4  6e  80  e0  80  ad  e1  00  80  00  92  eb  |     |           
           |           |     | 89  da  2b  d8  eb  c6  f0  9e  6a  ae  2a  91  c5  9a  40  db  |     |           
           |           |     | a7  d1  a0  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     |           
           |           |     | 01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  01  |     | ?          
proxmark3> 

Last edited by nik_po (2015-09-10 21:02:02)

Offline

#21 2015-09-11 09:03:27

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Need help to identify tag

It seems to get some iso15693 but those 01 01... do not correspond to any iso15693 commands; my suggestion: start to snoop without the tag and VERY QUICKLY put it over the circuit. Try to do that again with 14a and 14b.

Offline

#22 2015-09-11 18:20:36

nik_po
Contributor
Registered: 2015-09-06
Posts: 13

Re: Need help to identify tag

thank you asper for your help
results:

[== Undefined ==]
proxmark3> hf 14a snoop
proxmark3> 
proxmark3> #db# cancelled by button                 
proxmark3> #db# COMMAND FINISHED                 
proxmark3> #db# maxDataLen=2, Uart.state=0, Uart.len=0                 
proxmark3> #db# traceLen=70, Uart.output[0]=000000ff                 
proxmark3> hf list 14a  
Recorded Activity (TraceLen = 70 bytes)          
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer          
iso14443a - All times are in carrier periods (1/13.56Mhz)          
iClass    - Timings are not as accurate          
     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |          
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|          
         0 |       448 | Tag | 06!                                                             |     |           
    442240 |    442944 | Tag | 1e!                                                             |     |           
 107665312 | 107665760 | Tag | 06!                                                             |     |           
 242304176 | 242304496 | Tag | 02                                                              |     |           
 242328224 | 242328800 | Tag | 0e                                                              |     |           
 336459808 | 336460128 | Tag | 02                                                              |     |           
 444108560 | 444108880 | Tag | 02                                                              |     |           
proxmark3> 
proxmark3> hf list 14b  
Recorded Activity (TraceLen = 122 bytes)          
Start = Start of Start Bit, End = End of last modulation. Src = Source of Transfer          
iso14443a - All times are in carrier periods (1/13.56Mhz)          
iClass    - Timings are not as accurate          
     Start |       End | Src | Data (! denotes parity error)                                   | CRC | Annotation         |          
-----------|-----------|-----|-----------------------------------------------------------------|-----|--------------------|          
         0 |         0 | Tag | <empty trace - possible error>                                  |     |           
   9249126 |   9249126 | Tag | <empty trace - possible error>                                  |     |           
   9252070 |   9252070 | Tag | e0                                                              |     |           
  48862952 |  48862952 | Tag | c0                                                              |     |           
 104508326 | 104508326 | Tag | <empty trace - possible error>                                  |     |           
 104544756 | 104544756 | Tag | <empty trace - possible error>                                  |     |           
 194368040 | 194368040 | Tag | <empty trace - possible error>                                  |     |           
 217063244 | 217063244 | Tag | a1                                                              |     |           
 234411506 | 234411506 | Tag | 20                                                              |     |           
 265807556 | 265807556 | Tag | a2                                                              |     |           
 277696524 | 277696524 | Tag | <empty trace - possible error>                                  |     |           
 299927234 | 299927234 | Tag | <empty trace - possible error>                                  |     |           
 310021094 | 310021094 | Tag | <empty trace - possible error>                                  |     |           
proxmark3> 

Last edited by nik_po (2015-09-11 19:30:05)

Offline

#23 2015-09-12 13:32:02

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Need help to identify tag

There seems to be communcation errors; try to use different antenna positioning/distances while sniffing communication between tag and circuit. When you will obtain a more constant data flow (for example always same bytes) this will be a good positioning.

Offline

Board footer

Powered by FluxBB