Nokia DCT-3 Test Phones and OpenBTSField test modeDCT-3 is the software release used in Nokia's 3rd generation handsets, most of which were marketed in the period 1998-2003. These models are particularly useful for BTS development because they all support Nokia's field test mode.|| model || bands || field test enabling || || 2100 || || || || 3210 || || || || "3310":http://en.wikipedia.org/wiki/Nokia_3310 || 900 1800 || serial || || 3315 || || || || 3330 || || || || 3350 || || || || 3390 || || || || 3395 || || || || 3410 || || || || 3610 || || || || 3810 || || || || "5110":http://en.wikipedia.org/wiki/Nokia_5110 || 900 || serial || || 5130 || || || || "5190":http://en.wikipedia.org/wiki/Nokia_5190 || 1900 || serial? || || 5210 || || || || 5510 || || || || 6110 || 900 || serial || || 6130 || || || || 6138 || || || || 6150 || || || || 6190 || 1900 || serial? || || 6210 || || || || 6250 || || || || 7110 || || || || 7190 || 1900 || keypad || || 8210 || || || || 8250 || || || || "8290":http://en.wikipedia.org/wiki/Nokia_8290 || 1900 || keypad || || 8810 || || || || 8850 || || || || 8855 || || || || 8890 || 900 1900 || IR || || 9110 || || || (Please update this page with your own experiences.) The most important screen in field test mode is screen "01": <pre> 01 ARF RSI PCC S TT Q MMM C1 C2 CHAN </pre> These fields mean: * ARF: current ARFCN. * RSI: RSSI in dBm, 3-digit values are negative. * PCC: power control command (when transmitting), *not* a dBm value (GSM 05.05 4.1). Larger values generally mean *less* transmitted power. **** In low bands (850, 900), "5" means maximum power, usually 1 W. **** In low bands (850, 900), "19" means minimum power, 5 mW. * S: current timeslot, 0..7. * TT: timing advance, in symbol periods. Can also be used as a rough estimate of MS-BTS distance, TT*550 meters. * Q: link quality score, 0-7, 0 is best. * MMM: radio link timeout counter. Link is dead when/if it reaches zero. * C1: path loss criterium (GSM 03.22 3.6, GSM 05.08 6.4). * C2: cell reselection criterium (GSM 03.22 3.6, GSM 05.08 6.4). * CHAN: current channel type. Here are a few mode common codes: **** AGCH: access grant channel (requesting service) **** BCCH: broadcast control channel (acquiring BTS) **** CCCH: common control channel ("camped") **** SDCCH: standalone dedicated control channel (control transactions) **** FA: full rate FACCH, signaling only mode (control transactions) **** TFR: full rate TCH+FACCH, full rate speech codec (speech call) **** TEFR: full rate TCH+FACCH, enhanced full rate speech codec (speech call) **** F144: 14.4 kbit/sec circuit-switched data (data call) An excellent document covering field test mode/net monitor for Nokia phones is available "| here ":http://www.mwiacek.com/gsm/netmon/faq_net6.htm#42 A description of the test is available "| here ":http://www.mwiacek.com/gsm/netmon/faq_net2.htm#12 h2. LAPDm tracelog With the appropriate MBUS serial cable, DCT-3 phones can also log the LAPDm signaling they send and receive. "Gammu":http://cihar.com/gammu/ is used to create the traces, which can then be displayed by "Wireshark":http://www.wireshark.org/ 1.1.2 or later. This procedure is detailed "here":https://svn.berlin.ccc.de/projects/airprobe/wiki/tracelog, but briefly: * Install gammu * Run gammu-config * Get a copy of _nhm5_587.txt_ from the gammu tarball (gammu/depend/nokia/dct3trac) * Run: <pre> gammu --nokiadebug nhm5_587.txt v20-25,v18-19 wireshark out.xml </pre> h2. Field Mode Enable Software Logo Express 3.1b did the work in Nokia 6110 with a serial cable http://www.geocities.com/wolfitdown/download.htm 注:Nokia DCT-3 Test Phones and OpenBTS(原文出处,翻译整理仅供参考!) |