1. Introduction

The diagport toolkit (dtk) (dtk) Windows application is a tool communicating with Qualcomm-based smartphones and CPE modems, allowing to capture raw 2G/3G/4G/5G radio frames. The tool uses the Qualcomm diagnostic protocol, also called QCDM (Qualcomm Diagnostic Monitor) to communicate with the device. It allows us to generate packets captures in PCAP file format using either an Android smartphone or a modem. Additionally, it is capable of decoding proprietary 5G frames and create decoded PCAPNG files can be used and interpreted by any network protocol analyzer application which handles this type of file format.

Figure 1: The diagport toolkit Windows application

• Supports capturing a handful of mobile radio protocols.
• Allows to capture on layer 3, as it is the most practical to analyze using a network protocol analyzer (e.g. Wireshark), and is what the Diag protocol provides natively.
• By default, the IP traffic sent by the device is not included, only the signaling frames can be seen. Additional parameter needs to be set to include IP traffic.
• Different mode and module options are available.
• Supports converting PCAP or PCAPNG files with proprietary 5G frame headers by removing those headers and decoding those 5G frames.

• Supports converting the following file types to PCAPNG with decoded 5G frames:

   - Qtrun: NSG Android app log file,
   - Qtrun: AirScreen PC app exported text file,

   - Rohde & Schwarz: QualiPoc app SQZ and MF files.

• Handles the license.