Nokia DCT-3 Test Phones and OpenBTS

Field test modeDCT-3 is the software release used in Nokia's 3rd generation handsets, most of which were marketed in the period 1998-2003. These models are particularly useful for BTS development because they all support Nokia's field test mode.
|| model || bands || field test enabling ||
|| 2100 || || ||
|| 3210 || || ||
|| "3310":http://en.wikipedia.org/wiki/Nokia_3310 || 900 1800 || serial ||
|| 3315 || || ||
|| 3330 || || ||
|| 3350 || || ||
|| 3390 || || ||
|| 3395 || || ||
|| 3410 || || ||
|| 3610 || || ||
|| 3810 || || ||
|| "5110":http://en.wikipedia.org/wiki/Nokia_5110 || 900 || serial ||
|| 5130 || || ||
|| "5190":http://en.wikipedia.org/wiki/Nokia_5190 || 1900 || serial? ||
|| 5210 || || ||
|| 5510 || || ||
|| 6110 || 900 || serial ||
|| 6130 || || ||
|| 6138 || || ||
|| 6150 || || ||
|| 6190 || 1900 || serial? ||
|| 6210 || || ||
|| 6250 || || ||
|| 7110 || || ||
|| 7190 || 1900 || keypad ||
|| 8210 || || ||
|| 8250 || || ||
|| "8290":http://en.wikipedia.org/wiki/Nokia_8290 || 1900 || keypad ||
|| 8810 || || ||
|| 8850 || || ||
|| 8855 || || ||
|| 8890 || 900 1900 || IR ||
|| 9110 || || ||

(Please update this page with your own experiences.)

The most important screen in field test mode is screen "01":
<pre>
01

ARF RSI PCC
S TT Q MMM
C1 C2
CHAN
</pre>
These fields mean:
* ARF: current ARFCN.
* RSI: RSSI in dBm, 3-digit values are negative.
* PCC: power control command (when transmitting), *not* a dBm value (GSM 05.05 4.1). Larger values generally mean *less* transmitted power.
**** In low bands (850, 900), "5" means maximum power, usually 1 W.
**** In low bands (850, 900), "19" means minimum power, 5 mW.
* S: current timeslot, 0..7.
* TT: timing advance, in symbol periods. Can also be used as a rough estimate of MS-BTS distance, TT*550 meters.
* Q: link quality score, 0-7, 0 is best.
* MMM: radio link timeout counter. Link is dead when/if it reaches zero.
* C1: path loss criterium (GSM 03.22 3.6, GSM 05.08 6.4).
* C2: cell reselection criterium (GSM 03.22 3.6, GSM 05.08 6.4).
* CHAN: current channel type. Here are a few mode common codes:
**** AGCH: access grant channel (requesting service)
**** BCCH: broadcast control channel (acquiring BTS)
**** CCCH: common control channel ("camped")
**** SDCCH: standalone dedicated control channel (control transactions)
**** FA: full rate FACCH, signaling only mode (control transactions)
**** TFR: full rate TCH+FACCH, full rate speech codec (speech call)
**** TEFR: full rate TCH+FACCH, enhanced full rate speech codec (speech call)
**** F144: 14.4 kbit/sec circuit-switched data (data call)

An excellent document covering field test mode/net monitor for Nokia phones is available "| here ":http://www.mwiacek.com/gsm/netmon/faq_net6.htm#42
A description of the test is available "| here ":http://www.mwiacek.com/gsm/netmon/faq_net2.htm#12

h2. LAPDm tracelog

With the appropriate MBUS serial cable, DCT-3 phones can also log the LAPDm signaling they send and receive. "Gammu":http://cihar.com/gammu/ is used to create the traces, which can then be displayed by "Wireshark":http://www.wireshark.org/ 1.1.2 or later. This procedure is detailed "here":https://svn.berlin.ccc.de/projects/airprobe/wiki/tracelog, but briefly:

* Install gammu
* Run gammu-config
* Get a copy of _nhm5_587.txt_ from the gammu tarball (gammu/depend/nokia/dct3trac)
* Run:
<pre>
gammu --nokiadebug nhm5_587.txt v20-25,v18-19
wireshark out.xml
</pre>

h2. Field Mode Enable Software

Logo Express 3.1b did the work in Nokia 6110 with a serial cable http://www.geocities.com/wolfitdown/download.htm





注:Nokia DCT-3 Test Phones and OpenBTS(原文出处,翻译整理仅供参考!