1
|
<?xml version="1.0" encoding="UTF-8"?>
|
2
|
<chapter id="chapter_hw">
|
3
|
<title>Hardware Details</title>
|
4
|
<section id="hw_design">
|
5
|
<title>HW Design</title>
|
6
|
<para>The Free Software KiCAD EDA was used to design the
|
7
|
hardware and can be used to look at the schematics and the
|
8
|
PCB routing. The hardware design can be found in the git
|
9
|
repository of the SIMtrace sources. For the v1.0 hardware
|
10
|
you will have to look at the v1.0_production branch.
|
11
|
</para>
|
12
|
</section>
|
13
|
|
14
|
<section id="pcb_populated">
|
15
|
<title>Populated PCB</title>
|
16
|
<para>The version v1.0p is the first production that had an
|
17
|
automatic SMT run. Due some production issues the labeling of
|
18
|
components didn't make it to the PCB but can be found in this
|
19
|
manual. The difference between the v1.0 and v1.0p hardware is
|
20
|
in the footprint of some components to utilize the existing
|
21
|
stock of the factory. This was mostly done for the LED and the
|
22
|
shottky diodes.</para>
|
23
|
|
24
|
<figure><title>SIMtrace v1.0 PCB</title>
|
25
|
<mediaobject>
|
26
|
<imageobject>
|
27
|
<imagedata fileref="images/simtrace_hw.jpg" width="15cm"/>
|
28
|
</imageobject>
|
29
|
<textobject><phrase>SIMtrace v1.0 PCB</phrase></textobject>
|
30
|
</mediaobject>
|
31
|
</figure>
|
32
|
</section>
|
33
|
|
34
|
<section id="pcb_surface">
|
35
|
<title>PCB Surface</title>
|
36
|
<para>
|
37
|
<figure><title>SIMtrace v1.0 Surface</title>
|
38
|
<mediaobjectco>
|
39
|
<imageobjectco>
|
40
|
<areaspec id="surface" units="calspair">
|
41
|
<area linkends="link_usb" coords="8800,0 8800,6100" id="usb"/>
|
42
|
<area linkends="link_serial" coords="8800,7000 8800,8000" id="serial"/>
|
43
|
<area linkends="link_debug" coords="8800,9000 8800,9500" id="debug"/>
|
44
|
<area linkends="link_jtag" coords="5000,8900 5000,9000" id="jtag"/>
|
45
|
<area linkends="link_bt1" coords="8900,0 9100,3500" id="bt1"/>
|
46
|
<area linkends="link_ffc" coords="500,3000 700,9000" id="ffc"/>
|
47
|
<area linkends="link_sim" coords="500,500 700,2000" id="sim"/>
|
48
|
<area linkends="link_reset" coords="200,9000 500,9000" id="reset"/>
|
49
|
<area linkends="link_bootloader" coords="1700,9000 1900,9000" id="bootloader"/>
|
50
|
<area linkends="link_test" coords="6500,8700 7000,8900" id="test"/>
|
51
|
<area linkends="link_erase" coords="7100,8700 7600,8900" id="erase"/>
|
52
|
</areaspec>
|
53
|
<imageobject>
|
54
|
<imagedata fileref="images/simtrace_surface.png" width="15cm" />
|
55
|
</imageobject>
|
56
|
<calloutlist>
|
57
|
<callout arearefs="usb" id="link_usb">
|
58
|
<para>USB: USB mini-B connector. The main connector. The
|
59
|
host software communicates (sniffing,...) through USB with
|
60
|
the board. It can also be used to flash the micro-controller
|
61
|
(using DFU).</para>
|
62
|
</callout>
|
63
|
<callout arearefs="serial" id="link_serial">
|
64
|
<para>serial: 2.5 mm jack serial cable, as used by osmocomBB
|
65
|
port used to debug the device (printf goes there).</para>
|
66
|
</callout>
|
67
|
<callout arearefs="debug" id="link_debug">
|
68
|
<para>debug (P3): same as serial, but using the FTDI
|
69
|
serial cable. It is recommended to cut the voltage wire of
|
70
|
the 6pin FTDI connector before plugging the cable into the
|
71
|
simtrace.
|
72
|
</para>
|
73
|
</callout>
|
74
|
<callout arearefs="jtag" id="link_jtag">
|
75
|
<para>jtag (P1): JTAG 20 pin connector to do hardware
|
76
|
assisted debugging.</para>
|
77
|
</callout>
|
78
|
<callout arearefs="bt1" id="link_bt1">
|
79
|
<para>BT1: battery connector (4.5-6V DC). normally the
|
80
|
USB provides power, but the battery port can be used
|
81
|
for autonomous use of SIMtrace. The sniffing can be saved
|
82
|
in the flash (U1).</para>
|
83
|
</callout>
|
84
|
<callout arearefs="ffc" id="link_ffc">
|
85
|
<para>FFC_SIM (P3): to connect the flat flexible cable with
|
86
|
SIM end for the phone.</para>
|
87
|
</callout>
|
88
|
<callout arearefs="sim" id="link_sim">
|
89
|
<para>SIM (P4): put your SIM in there (instead of in the
|
90
|
phone)</para>
|
91
|
</callout>
|
92
|
<callout arearefs="reset" id="link_reset">
|
93
|
<para>reset (SW1): to reset the board (not erasing the
|
94
|
firmware). If your are too lazy to unplug and re-plug
|
95
|
the USB.</para>
|
96
|
</callout>
|
97
|
<callout arearefs="bootloader" id="link_bootloader">
|
98
|
<para>bootloader (SW2): used to start the bootloader so
|
99
|
to flash the device using DFU. press when plugging in
|
100
|
the USB.</para>
|
101
|
</callout>
|
102
|
<callout arearefs="test" id="link_test">
|
103
|
<para>test (JP1): short circuit using a jumper to flash
|
104
|
using SAM-BA.</para>
|
105
|
</callout>
|
106
|
<callout arearefs="erase" id="link_erase">
|
107
|
<para>erase (JP2): short circuit using a jumper to erase
|
108
|
completely erase the firmware.</para>
|
109
|
</callout>
|
110
|
</calloutlist>
|
111
|
</imageobjectco>
|
112
|
</mediaobjectco>
|
113
|
</figure>
|
114
|
</para>
|
115
|
</section>
|
116
|
</chapter>
|