Nokia NetMonitor User manual

1
Nokia
NetMonitor
Manual
Version 0.5
Base document : Flipo ( [email protected] )
PDF + Enhancements to base document : nobbi ( [email protected] )
Graphics : nobbi

2
Phone Models/Software versions
31xx/81xx
Old phones netmonitor has some differences when compared with the newer models, but this manual can be used
as a guide, because the overall working method and the contents are very similar.
51xx/61xx/71xx/88xx/91xx/32xx
This document covers the majority of menus from these phones netmonitor. Some of them may have little
differences, like missing/additional menus, different info, etc.
The 51xx and 61xx pages are almost identical. The 32xx has some more pages, which are not very well
documented yet. The 71xx has a whole bunch of pages concerning W@P. The 91xx pages are almost identical to
the 6110 ones.
The goal right now is to make an accessible manual, that will get better over the time. Please contribute with all
the info that you find relevant.
Information Sources :
[ 1 ] Netmonitor description (RD843.txt) from Nokia Mobile Phones
[ 2 ] Marcin Wiaceks homepage ( http://marcin-wiacek.topnet.pl )
Menu Modes
There are three Menu Display modes:
- execute mode
- data display mode
- help mode
Different modes are marked in this manual as follows:
************** ++++++++++++++ ##############
* * + + # #
* Execute * +Data display+ # Help #
* Mode * + Mode + # Mode #
* * + + # #
************** ++++++++++++++ ##############
The execute mode is entered from the menu by scrolling and selecting or shortcut. If the
test index entered pertains to a test that resets a timer (test 80) for example, then the
timer is reset as soon as the Ok button has been pressed in the menu, and the data display
mode takes over. In other words, the execute mode is of the one-shot type. To run another
test in the execute mode, the Field Test Display menu must be re-activated.
During the data display mode, the field test data (e.g. carrier, power level, cell) is
visible on the main display. During the help mode, one screen of instructions is shown for
each test to make it easier to identify the test in question. A long press of asterisk (*)
is used to toggle between these two modes.
(on some 3110 versions, the help screens follow the data display modes on the list)
The arrow keys (^,v) offer an easy way to switch to another test without using the menu.
However, the data display mode remains, i.e. nothing will be executed or set on although
such tests would be passed. This is to prevent the user from accidentally clearing any
valuable data. (see 3.7.2 for details and 2.5 for recommendations).
The help mode is also a non-execute mode. Display numbers have been selected in such way
that no 5-terminated test number is an execute display.

3
Display 1 –Serving cell info
++++++++++++++ ##############
+abbb ccc ddd+ #CH RxL TxPwr#
+ e ff g mmmm+ #TS TA RQ RLT#
+ nnn ppp+ # C1 C2 #
+ oooo + # CHT #
++++++++++++++ ##############
aH, if carrier numbers are scrolled when hopping is on. Otherwise ' '.
bbb When mobile is on a TCH :
DCH carrier number in decimal.
When mobile is NOT on a TCH :
CH means carrier number in decimal.
If hopping is on, used channels are scrolled when display is updated.
ccc rx level in dBm, minus sign is not shown if <=-100
ddd tx power level. If transmitter is on, symbol * is shown in front of the power
level value.
eTime Slot, range is 0 - 7
ff Timing advance, range is 0 – 63
gRX quality (sub), range is 0 - 7
mmmm Radio Link Timeout value. If value is negative, 0 is shown.
Maximum value is 64. When mobile is NOT on TCH then xx is shown.
nnn value of the path loss criterium (C1). Range is -99 - 999.
oooo type of current channel:
THR0 : TCH HR subchannel 0
THR1 : TCH HR subchannel 1
TFR : TCH FR
TEFR : TCH EFR
F144 : TCH FR data channel, speed 14.4 kbps
F96 : TCH FR data channel, speed 9.6 kbps
F72 : TCH FR data channel, speed 7.2 kbps
F48 : TCH FR data channel, speed 4.8 kbps
F24 : TCH FR data channel, speed 2.4 kbps
H480 : TCH HR data channel, speed 4.8 kbps, subch 0
H481 : TCH HR data channel, speed 4.8 kbps, subch 1
H240 : TCH HR data channel, speed 2.4 kbps, subch 0
H241 : TCH HR data channel, speed 2.4 kbps, subch 1
FA : TCH FR signalling only (FACCH) channel
FAH0 : TCH HR signalling only (FACCH) channel, subch 0
FAH1 : TCH HR signalling only (FACCH) channel, subch 1
SDCC : SDCCH
AGCH : AGCH
CCCH : CCCH
CBCH : CCCH and cell broadcast receiving on
BCCH : BCCH
SEAR : SEARCH
NSPS : MS is in ’no service, power save’ state
ppp value of the cell reselection criterium (C2).
Range is -99 to 999. If phone is phase 1 then C1 value is shown.

4
Display 2 –More info about serving cell
++++++++++++++ ##############
+ aa b c Bdd + #PM RAR Ro BC#
+ ee f + #RelR QLF #
+ ggg hh iii + #CRO TO PenT #
+ H=j mm nn + #H MAIO HSN #
++++++++++++++ ##############
aa paging mode
NO : normal paging
EX : extended paging
RO : paging reorganization
SB : same as before
bmaximum number of Random Access retransmission
croaming indicator, values are 'R' or ' '.
Bdd Letter B and BSIC value, range is 0 - 63.
ee Reason of last call release
fRX quality (full), range is 0 - 7
ggg Cell reselection offset, range 0 - 126 dB.
0 - 63 * 2 dB. 'xxx' in dedicated mode.
hh Temporary offset, range 0 - 60 dB.
0 - 7 * 10 dB. 70 dB means infinite time.
'xx' in dedicated mode.
iii Penalty time, range 0 - 620 s.
0 - 31 * 20 s. 'xxx' in dedicated mode.
jHopping channel
0Single RF channel
1RF hopping channel
mm mobile allocation index offset, MAIO
Range: 00 to 63 / xx when H=0
nn hopping sequence number, HSN
Range: 00 to 63 / xx when H=0
Display 3 –Serving cell, 1st and 2nd neighbour
++++++++++++++ ##############
+aaabbbcccddd+ #SCH C1 rx C2#
+aaabbbcccddd+ #1CH C1 rx C2#
+aaabbbcccddd+ #2CH C1 rx C2#
+ ef gh + # 1N 2N #
++++++++++++++ ##############
1. row: serving cell information
2. row: 1. neighbour information
3. row: 2. neighbour information
4. row, ef: 1. neighbour information
4. row, gh: 2. neighbour information
aaa carrier number in decimal
bbb idle mode : C1 value, range is -99 - 999
ded. Mode : 'B' and BSIC value
ccc RX level in dBm, minus sign is not shown if <=-100
ddd C2 value, range is -99 - 999
e,g F : cell is in a forbidden location area
f,h B : cell is barred
N : cell is normal priority
L : cell is low priority

5
Display 4 & 5 –3rd to 8th neighbour cell
++++++++++++++ ##############
+aaabbbcccddd+ #3CH C1 rx C2#
+aaabbbcccddd+ #4CH C1 rx C2#
+aaabbbcccddd+ #5CH C1 rx C2#
+ ef gh ij + # 3N 4N 5N #
++++++++++++++ ##############
1. row: 3./6. neighbour information
2. row: 4./7. neighbour information
3. row: 5./8. neighbour information
4. row, ef: 3./6. neighbour information
4. row, gh: 4./7. neighbour information
4. row, ij: 5./8. neighbour information
aaa carrier number in decimal
bbb idle mode : C1 value, range is -99 - 999
ded. Mode : 'B' and BSIC value
ccc rx level in dBm, minus sign is not shown if <=-100
ddd C2 value, range is -99 - 999
e,g,i F : cell is in a forbidden location area
f,h,j B : cell is barred
N : cell is normal priority
L : cell is low priority
Display 6 –Network selection display
++++++++++++++ ##############
+aaabb aaabb+ #LReg 1_For#
+aaabb aaabb+ #1_Pre 2_For#
+aaabb aaabb+ #2_Pre 3_For#
+aaabb aaabb+ #3_Pre 4_For#
++++++++++++++ ##############
This display shows the last registered networks country code (MCC) and
network code (MNC) as well as the codes for four forbidden networks
and the first 3 preferred networks.
If a three-digit MNC is used (GSM1900), display looks different:
++++++++++++++
+aaabbbaaabbb+
+aaabbbaaabbb+
+aaabbbaaabbb+
+aaabbbaaabbb+
++++++++++++++
1. row: last registered network - 1st forbidden network
2. row: 1st preferred network - 2nd forbidden network
3. row: 2nd preferred network - 3rd forbidden network
4. row: 3rd preferred network - 4th forbidden network
aaa country code coded in BCD
bbb network code coded in BCD, third digit can be 'F'

6
Display 7 –System information bits for serving cell
++++++++++++++ ##############
+E A H C I BR+ #Serving Cell#
+a b c d e fg+ #System Info #
+ECSC 2Ter MB+ #Bits #
+ h i j+ # #
++++++++++++++ ##############
a1 is shown if emergency calls are supported
b1 is shown if attach-detach-procedure is allowed
c1 is shown if half rate channels are supported
d1 is shown if C2 values are broadcasted
e1 is shown if system information 7 and 8 are broadcasted
f1 is shown if cell broadcast is supported
g1 is shown if re-establishment is supported
The following items are used only in dualband phones:
hIn idle mode 1 is shown if Early Classmark (ECSC) sending is supported.
In dedicated mode (conversation) X is shown.
iIn idle mode 1 is shown if 2Ter messages are supported.
In dedicated mode (conversation) X is shown.
jMultiBand reporting decimal value (0,1,2,3) is shown if supported.
This is shown both in idle and dedicated mode.
The following is picked from Phase2+ ETSI ETS 300578 (GSM 05.08 version 4.22.1), Section
8.4.3 "Additional cell reporting requirements for multi band MS".
For a multi band MS the number of cells, for each frequency band supported, which shall be
included in the measurement report is indicated by the parameter, MULTIBAND_REPORTING. The
meaning of different values of the parameter is specified as follows:
Value Meaning
00 Normal reporting of the six strongest cells, with known and allowed NCC part of
BSIC, irrespective of the band used.
01 The MS shall report the strongest cell, with known and allowed NCC part of
BSIC, in each of the frequency bands in the BA list, excluding the frequency
band of the serving cell. The remaining positions in the measurement report
shall be used for reporting of cells in the band of the serving cell. If there
are still remaining positions, these shall be used to report the next strongest
identified cells in the other bands irrespective of the band used.
10 The MS shall report the two strongest cells, with known and allowed NCC part of
BSIC, in each of the frequency bands in the BA list, excluding the frequency
band of the serving cell. The remaining positions in the measurement report
shall be used for reporting of cells in the band of the serving cell. If there
are still remaining positions, these shall be used to report the next strongest
identified cells in the other bands irrespective of the band used.
11 The MS shall report the three strongest cells, with known and allowed NCC part
of BSIC, in each of the frequency bands in the BA list, excluding the frequency
band of the serving cell. The remaining positions in the measurement report
shall be used for reporting of cells in the band of the serving cell. If there
are still remaining positions, these shall be used to report the next strongest
identified cells in the other bands irrespective of the band used.

7
Display 10 –Paging Repeat Period, TMSI, Location Update Timer, AFC and AGC
++++++++++++++ ##############
+TMSIaaaaaaaa+ #TMSI(hex) #
+T321:bbb/ccc+ #T3212ctr/tim#
+PRP:d ee ff+ #PaRP DSF AGC#
+ ggggg hhh + # AFC Ch #
++++++++++++++ ##############
aaaaaaaa last assigned TMSI value in hex format
bbb Current value of T3212 counter (range is 000 - 'ccc', where 1 means 6 min
time. So, if this value is 2 less than 'ccc' then next periodic location
updating will be made within 2 * 6 min = 12 minutes.
ccc Timeout value of T3212 counter (range is 000 - 240, where 1 means 6 min time
between location updates and 240 means 240 * 6 min = 24 h between location
updates. 000 means that a periodic location update will not occur) This
value is received from the network.
dValue of paging repetition period (range is 2 – 9, which means paging will be
in every Xth multiframe. When paging is in every second multiframe, mobile
takes more current than if it were in every 9th multiframe)
ee Downlink signalling failure value. If value is negative, 0 is shown. Maximum
value is 45. When mobile is on TCH then xx is shown.
ff Gain value on TCH/SDCCH, range is 0 - 93
ggggg VCTCXO AFC DAC control, range is -1024 - 1023
hhh Serving cell channel number
Display 11 –Network parameters
++++++++++++++ ##############
+CC:aaa NCbbb+ # MCC MNC #
+ LAC:ccccc + #LocAreaCode #
+ CH : dddd + #ServChannel #
+ CID:eeeee + # CellId #
++++++++++++++ ##############
aaa MCC value in decimal (MCC=Mobile Country Code)
bbb MNC value in decimal (MNC=Mobile Network Code)
Three digits are shown only in GSM1900.
Two digits are shown in GSM900 and GSM1800.
ccccc LAC value in decimal (in older SW-versions this value is in hexadecimal)
dddd Serving cell channel number
eeeee Cell Identifier in decimal (in older SW-versions this value is in hexadecimal)
Display 12 –Ciphering, hopping, DTX Status and IMSI
++++++++++++++ ##############
+CIPHER :aaa + #CipherValue #
+HOPPING:bbb + #HoppingValue#
+DTX :ccc + #DTXValue #
+IMSI :ddd + #IMSIAttach #
++++++++++++++ ##############
aaa ciphering value, OFF/A51/A52
bbb hopping value, ON/OFF
ccc DTX value ON/OFF
ddd IMSI attach
ON : IMSI attach on
OFF : IMSI attach off
These values are updated only on when on a TCH.

8
Display 13 –Uplink DTX switching display
************** ##############
*aaaaaaaaaa * #DTXMode #
*DTX(DEF):bbb* #DefaulDTXSta#
*DTX(BS) :ccc* #DTXValFromBS#
* * # #
************** ##############
With this display it is possible to change wether MS to use DTX or not.
This display must be activated from MENU to change DTX state. When MENU is not active and
the user is scrolling field test displays with NEXT and PREVIOUS, the DTX state will not be
changed.
aaaaaaaaaa status of switched mode.
DTX:ON : MS uses DTX
DTX:OFF : MS does not use DTX
DTX:DEF : MS use default state of DTX
NOTALLOWED: BS does not allow MS to decide if it uses
DTX or not.
bbb default state of DTX in MS. The value is either ON or OFF
ccc is DTX value from BS
MAY : BS allows MS to decide if it uses uplink DTX or not
USE : BS controls MS to use DTX (on uplink)
NOT : BS controls MS not to use DTX (on uplink)
Display 14 –Toggle Screening Indicator
************** ##############
* SCREENING * #Use menu to #
* INDICATOR * # change #
* IS XX * XX : 00 or 01 # Screening #
* * # indicator #
************** ##############
When selected, changes the value of the Screening Indicator from 0 to 1 and
vice versa.

9
Display 17 –Switch BTS_Test Status
************** ************** ##############
* * * * #Use menu to #
* BTS TEST * * BTS TEST * #toggle BTS #
* ON * * OFF * #test ON/OFF #
* * * * # #
************** ************** ##############
This display is used to toggle the BTS_TEST flag in EEPROM. If BTS_TEST
is set then each time the mobile sends a search list it uses only the carrier
number stored on SIM phonebook location 33. Also the neighbour information from
system information messages is ignored. If the BTS_TEST flag is not set,
then the value of SIM phonebook location 33 is ignored and the mobile behaves
normally (i.e. does neighbour measurements according to GSM specifications).
To activate BTS TEST perform the following steps:
- Save desired channel number in SIM phonebook location 33.
- Select display 17 in execute mode
- Switch power off and on
If activation succeeded, you will read "BTS TEST ON" in display 17.
To deactivate BTS tests either select display 17 in execute mode or
save number 0 in SIM phonebook location 33 and switch power off and on.
NOTE! The display does not show the value of the BTS_TEST flag in EEPROM.
Although the value is set, BTS_TEST can be off. If there is no legal
carrier number in SIM phonebook location 33 (GSM900: 1-124, GSM1800: 512-885) the
display shows that BTS_TEST is off. Also if the mobile was already
registered to some carrier before switching BTS_TEST status, the display
can show a different value from the one in EEPROM.
Display 18 –Lights status control
Forces keyboard and display lights on/off while displaying any netmonitor screen.
************** ************** ##############
* * * * #Use menu to #
* LIGHTS * * LIGHTS * # toggle #
* ON * * OFF * # lights #
* * * # ON/OFF #
************** ************** ##############
Display 19 –Toggle Cell Barred Status
************** ************** ************** ##############
* * * * * * #Use menu to #
* CELL BARR * * CELL BARR * * CELL BARR * #toggle cell #
* ACCEPTED * * REVERSE * * DISCARD * #barr status #
* * * * * * #DIS/ACC/REV #
************** ************** ************** ##############
This test is meant to be used when some cells are tested before taking them into commercial
use. By setting the CELL_BARRED to on in the base station normal GSM phones will not try to
camp on these barred cells.
By selecting CELL BARR REVERSE, the MS will only use the cells which have CELL_BARRED set.
By selecting CELL BARR DISCARD, the MS will use all cells, irrespective wether CELL_BARRED
is set or not.
NOTE: If a cell has been selected before barring state in phone is changed the selected cell
will remain the current cell. After the next cell reselection the cell barring state is
working as expected.

10
Display 20 –Charging state
************** ##############
* aaa bbbbb * #BatVol ChMod#
* Tccc dddd * #Btemp ChTime#
* Ceee Wfff * #ChrgVol Pwm #
* gggg hhhh * # Btyp BFDC #
************** ##############
aaa Battery voltage in decimal, range is 0.00 - 9.99 V, decimal point is not shown;
e.g. 7.19 V is shown as 719 on the display
bbbbb Charging mode 5 digit symbol:
xxxxx : Charger not connected or charging disabled.
BatCk : Battery testing is going.
BSIFa : Charging off because of battery BSI measurement failed.
CelBr : Charging off because one or more cells broken inside battery.
ChaCk : EM is checking charger.
Charg : Charging.
ColdC : Cold charging.
ColdM : Battery cold and maintenance going.
CurFa : Charging off because charger current measurement failed.
DisCh : Battery discharging going.
F_Che : Fast charging checks.
Faile : Failure.
FastC : Fast charging going.
FullM : Battery full and maintenance going.
HotM : Battery hot and maintenance going.
I_Che : Init checks.
InitC : EM charging is being initialized.
L_Che : Li charging checks.
LiAFu : PWM level is below the battery full limit.
LiDCH : Li-ion DCH charging.
LiFul : PWM has been below the battey full limit for a certain time
that is specified for full battery.
LiHot : Li-ion hot charging.
LithC : Charging of Lithium-ion battery.
LiTxO : TX on and Li charging going.
LNFTx : TX on, Li charging going and battery is not full anymore.
M_Che : Maintenace charging checks.
MaBFD : Maintenace BFD charging.
Maint : Maintenance charging.
TmpFa : Charging off because of battery NTC measurement failed.
TxNoF : TX on, Ni charging going and battery is not full anymore.
TxOnC : TX on and Ni charging going.
VolFa : Charging off because charger voltage measurement failed.
ccc Battery temperature in centigrade, from -30 to +90.
ddd Charging time. Format is HMM. Timer is automatically reset and started when
charger is connected and stopped when battery is full or charger is
disconnected.
eee Charger voltage in decimal, range is 0.0 - 18.7 V, decimal point is not shown.
fff Charge control output, decimal, range is 000 - 255.
gggg Lithium battery type (BSI value multiplied by 4), or NiMH battery size.
hhhh Battery full delay counter. When battery is getting full and charging current is
less than predefined limit, this timer will be started. If timer reaches 0,
charging will be stopped.

11
Display 21 –Constant voltage charging display
************** ##############
* aaaa bbbb * #MTDif MPDif #
* cccc dddd * #BupV BDownV#
* eeee ffff * #AverV SumMF #
* * # #
************** ##############
aaaa Difference between measured voltage and goal voltage, decimal point is not
shown.
bbbb Difference between measured voltage and result of previous measurement
(basically same as using change of error), decimal point is not shown.
ccc Battery up voltage, maximum ripple voltage.
ddd Battery down voltage, minimum ripple voltage.
eee Average voltage.
fff Sum of membership function sets beliefs, range 0.00-9.99, decimal point is not
shown; e.g. 1.53 is shown as 153. If sum of 1.00 is reached then battery full
indication is given.
Display 22 –Battery full detection
************** ##############
* Eaaa Cbbb * #DeriC ChAm #
* Dccc Rddd * # VDif VDrop #
* Ieee Afff * # VDTi AvDif #
* Tggg hhhh * # Temp Volt #
************** ##############
Letters E, C, D, R, I, A, T and V are displayed if values are shorter than 4 digits.
Eaaa DerivCount membership function set, range 0.00-1.00, decimal point is not
shown; e.g. 0.23 is shown as 023.
Cbbb ChargeAmount membership function set, range 0.00-1.00, decimal point is not
shown; e.g. 0.23 is shown as 023.
Dccc VolDiffToMax membership function set, range 0.00-1.00, decimal point is not
shown; e.g. 0.23 is shown as 023.
Rddd VolDropCnt membership function set, range 0.00-1.00, decimal point is not
shown; e.g. 0.23 is shown as 023.
Ieee VolDiffTime membership function set, range 0.00-1.00, decimal point is not
shown; e.g. 0.23 is shown as 023.
Afff AverDiff membership function set, range 0.00-1.00, decimal point is not shown;
e.g. 0.23 is shown as 023.
Tggg Temperature membership function set, range 0.00-1.00, decimal point is not
shown; e.g. 0.23 is shown as 023.
Vhhh Voltage membership function set, range 0.00-1.00, decimal point is not shown;
e.g. 0.23 is shown as 023.

12
Display 23 –Battery and phone state monitor
************** ##############
* aaaa bbbb * #TxOn TxOff#
* cccc dddd * #ChCur Stdby#
*eee fff gggg* #Age CAP Curr#
*hhh iiiijjjj* #Tmp CmAhTarg#
************** ##############
aaaa TXon voltage (expected voltage with transmitter switched on), decimal point not
shown (a.aaa mV)
bbbb TXoff voltage (expected voltage with transmitter switched off), decimal point
not shown (b.bbb mV)
cccc charging current, decimal point not shown (c.ccc mA)
dddd predicted standby level, decimal point not shown (d.ddd mV)
eee estimated age for Li-ion battery (0..100, 0=new, 100=old)
fff battery's percentage level (0..100)
gggg current consumption indicated by PSM (deci-mA)
hhh battery's temperature (C) (Only for Li battery)
iiii charged capacity (mAh) (into battery)
jjjj tells what is the next capacity target to reach next battery bar level (mAh)
Display 24 –BSI values
************** ##############
* aaaa bbbb * #V_inst V_avg#
* cccc * #BSI value #
* dddd * #Elapsed time#
* eeee ffff * #RST_m RST_h#
************** ##############
aaaa
bbbb
cccc BSI value
dddd minutes elapsed since charger was disconnected or phone was switched on
eeee
ffff
Display 30 –Audio API register display
************** ##############
* aaaa bbbb * #A1Cnf A2Cnf#
* cccc dddd * # ST AU3 #
* eeee ffff * #1Tone 2Tone#
* gggg hhhh * # Conf HFVol#
************** ##############
aaaa API_AUD1_CTRL
bbbb API_AUD2_CTRL
cccc API_SIDETONE
dddd API_AU3
eeee API_1_TONE
ffff API_2_TONE
gggg API_CONFIG
hhhh API_HF_VOL

13
Display 34 –FBUS display
************** ##############
*aabbccdd * #CM LD LM NM #
*eeefff - ggg* #PEC FEC OEC #
*hhh iii jjj * #ACC RXS TXS #
*k-- * #Mod #
************** ##############
aa current fbus media in hex
bb last sender dev in hex
cc last sender media in hex
dd Next media to be connected. Same as aa if the connection is not pending.
eee fbus parity error counter
fff fbus framing error counter
ggg fbus overrun error counter
hhh fbus alive check counter
iii RX Sequence number
jjj TX Sequence number
kPhone mode: S=slave, H=host
Display 35 –Reasons for SW resets
************** ##############
*aaaaa * #Reset reason#
*bbbbbbbb * #Task name #
* * # #
* * # #
************** ##############
aaaaa last reset reason.
NORM : Probably normal power up.
UNKNO : Default value, reset reason is unknown.
HW WD : ASIC watchdog timeout.
SWDSP : DSP recovery reset
SWSIM : SIM contact failure reset
SWIDL : Idle task not running reset
STACK : Task stack overflow
bbbbbbbb Name of running task before reset.
Display 36 –Counters for resets
++++++++++++++
+ aa bb cc +
+ dd ee ff +
+ +
+ +
++++++++++++++
aa Unknown resets
bb ASIC watchdog resets
cc DSP recovery resets
dd SIM contact failure resets
ee Idle task not running resets
ff Task stack overflow resets

14
Display 39 –Information about reasons for call clearing
++++++++++++++ ##############
+ CC: aaaa + #CC CauseValu#
+ MM: bbbb + #MM CauseValu#
+ RR: cccc + #RR CauseValu#
+ + # #
++++++++++++++ ##############
aaaa,
bbbb,
cccc cause code value, see section 10.5/GSM 04.08, '*' is shown if the cause code is
made up by the respective layer in MS
CC 1 unassigned (unallocated) number
3 no route to destination
8 operator determined barring
16 normal call clearing
17 user busy
18 no user responding
19 user alerting, no answer
21 call rejected
22 number changed
27 destination out of order
28 invalid number format/number incomplete
31 normal/unspecified
34 no circuit/channel available
38 network out of order
41 temporary failure
42 switching equipment congestion
44 requested channel not available
47 ressource unavailable
50 requested facility not subscribed
55 Incoming calls barred within the CUG
57 bearer capability not authorized
65 bearer service not implemented
68 ACM equal to or greater than ACMmax
69 requested facility not implemented
88 incompatible destination
MM 0 no error
2 IMSI unknown in HLR
3 illegal MS
4 IMSI unknown in VLR
5 IMEI not accepted
6 illegal ME
11 PLMN not allowed
12 location area not allowed
13 roaming not allowed in this location area
17 network failure
22 network congestion
32 service option not supported
33 service option not subscribed
34 service temporarily out of order
38 call cannot be identified (call RE)
RR 0 normal release
1 unspecified
2 channel unacceptable
3 timer expired
4 no activity on the radio path
5 pre-emptive release
8 handover impossible, timing advance out of range
9 channel mode unacceptable
10 frequency not implemented
65 call already cleared
97 message type not compatible with protocol state
101 no cell allocation available
111 protocol error, unspecified

15
Display 40 –Reset handover counters
************** ##############
* RESET * # Use menu #
* HANDOVER * # to reset #
* COUNTERS * # handover #
* * # counters #
************** ##############
With this display all counters of the handover displays can be reset.
Display 41 (in singleband phones) –Handover display
++++++++++++++ ##############
+HandOOK: aaa+ #HandOvOKCntr#
+PrevCh : bbb+ #PrevChanCntr#
+HONotOK: ccc+ #HandOvNOKCnt#
+HOIntra: ddd+ #HOIntraOKCnt#
++++++++++++++ ##############
aaa counter for successful handovers (max. amount 999)
bbb counter for successful back to previous channel attempts
ccc counter for failed handovers
ddd counter for successful intracell handovers or assignments
(max. amount 999)
Counters will stop when they reach their maximum. To initialize the counters to zero, select
display 40. Display 60 also initializes these counters.
Display 41 (in dualband phones) –Handover display, INTER CELL
++++++++++++++ ##############
+ aaaa bbbb + #G>G InterD>D#
+ cccc dddd + #G>D OK D>G#
+eeefffggghhh+ #InterHoFail #
+iiijjjkkklll+ # BackToPrev #
++++++++++++++ ##############
aaaa counter of successful handovers (max 9999) from GSM900 to GSM900
bbbb counter of successful handovers (max 9999) from GSM1800 to GSM1800
cccc counter of successful handovers (max 9999) from GSM900 to GSM1800
dddd counter of successful handovers (max 9999) from GSM1800 to GSM900
eee counter for failed handovers (max 999) from GSM900 to GSM900
fff counter for failed handovers (max 999) from GSM1800 to GSM1800
ggg counter for failed handovers (max 999) from GSM900 to GSM1800
hhh counter for failed handovers (max 999) from GSM1800 to GSM900
iii counter of successful back to previous channel attempts (max 999)
from GSM900 to GSM900
jjj counter of successful back to previous channel attempts (max 999)
from GSM1800 to GSM1800
kkk counter of successful back to previous channel attempts (max 999)
from GSM900 to GSM1800
lll counter of successful back to previous channel attempts (max 999)
from GSM1800 to GSM900
Counters will stop when they reach their maximum. To initialize the counters to zero, select
display 40. Display 60 also initializes these counters.

16
Display 42 (only in dualband phones) –Handover display, INTRA CELL
++++++++++++++ ##############
+ aaaa bbbb + #G>G IntraD>D#
+ cccc dddd + #G>D OK D>G#
+eeefffggghhh+ #IntraHoFail #
+iiijjjkkklll+ # BackToPrev #
++++++++++++++ ##############
aaa counter of successful INTRACELL handovers (max 9999) from GSM900 to GSM900
bbb counter of successful INTRACELL handovers (max 9999) from GSM1800 to GSM1800
ccc counter of successful INTRACELL handovers (max 9999) from GSM900 to GSM1800
ddd counter of successful INTRACELL handovers (max 9999) from GSM1800 to GSM900
eee counter of failed INTRACELL handovers (max 999) from GSM900 to GSM900
fff counter of failed INTRACELL handovers (max 999) from GSM1800 to GSM1800
ggg counter of failed INTRACELL handovers (max 999) from GSM900 to GSM1800
hhh counter of failed INTRACELL handovers (max 999) from GSM1800 to GSM900
iii counter of successful back to previous normal INTRA CELL channel attempts
(max 999) from GSM900 to GSM900
jjj counter of successful back to previous normal INTRA CELL channel attempts
(max 999) from GSM1800 to GSM1800
kkk counter of successful back to previous normal INTRA CELL channel attempts
(max 999) from GSM900 to GSM1800
lll counter of successful back to previous normal INTRA CELL channel attempts
(max 999) from GSM1800 to GSM900
Counters will stop when they reach their maximum. To initialize the counters to zero, select
display 40. Also display 60 initializes these counters.
Display 43 L2 display
++++++++++++++ ##############
+T200MS :aaaa+ #T200 MS GSM #
+T200BS :bbbb+ #T200 BS GSM #
+T200MS :cccc+ #T200 MS DCS #
+T200BS :dddd+ #T200 BS DCS #
++++++++++++++ ##############
aaaa GSM900 : counts how many times T200 in MS has expired and therefore a L2
transmission has been repeated.
bbbb GSM900 : counts how many times T200 in BS (network) has expired and therefore a
L2 frame was requested again.
cccc GSM1800: counts how many times T200 in MS has expired and therefore a L2
transmission has been repeated. (for dualband phones)
dddd GSM1800: counts how many times T200 in BS (network) has expired and therefore a
L2 frame was requested again. (for dualband phones)
The GSM900 counters are also valid in GSM900/GSM1800 multiband phones. Counters will stop
when they reach their maximum. To initialize the counters to zero, select display 40.
Display 60 also initializes these counters.
Display 44 –Toggle revision level
************** **************
* * * *
* REVISION * * REVISION *
*LEVEL IS 00 * *LEVEL IS 01 *
* * * *
************** **************
When selected, changes the value of Revision Level from 0 to 1 and
vice versa. I have no idea if this makes sense in any circumstances.

17
Display 45 –Toggle transmitter functionality
**************
* *
*TRANSMITTER *
* XXXXXXXX * XXXXXXXX ENABLED or DISABLED
* *
**************
This display has no effect in 7110 phone, irrespective of the displayed status the
transmitter is always switched on.
When selected, this display disables transmitter functionality if enabled and vice versa.
New setting is valid until next power off or until new execute of this display.
This FTD can be used to simulate easily situations when the MS can hear the network (i.e.
receiving signal is good enough), but the network can not receive any messages from the MS.
Location updating attempts or MO call establishment attempts can be failed (random access
failure) by this FTD and field testing of these failures is much easier now.
Next periodic location updating can be checked from the display 10 (chapter 3.1.10) by
taking the difference of current T3212 counter value and T3212 timeout value.
Display 51 –SIM information
++++++++++++++ ##############
+aaa bbb ccc + #VSel Bau SAl#
+ dddddddd + #SCond CStop#
+ f g hh ii + #PIN12 PUK12#
+ j kkkk + # ATR FE/PE #
++++++++++++++ ##############
aaa SIM voltage selection type (5, 3 or 3/5)
bbb SIM baudrate (372, 64, 32 or 0)
ccc Clock stop allowed, Yes or No
dddd Clock stop condition, Up/Down/xxxxxxxx if no preferred level
fPIN1 attempts left (0,1,2,3)
gPIN2 attempts left (0,1,2,3)
hh PUK1 attempts left (0-10)
ii PUK2 attempts left (0-10)
jATR retransmission counter (0-9)
kkkk Transmission frame/parity errors, FE/PE + hexadecimal count
Display 54 –Block display 1
++++++++++++++ ##############
+aa bb aa bb+ #ResF1 ResF2#
+aa bb aa bb+ #ResF3 ResF4#
+aa bb aa bb+ #ResF5 ResF6#
+aa bb aa bb+ #ResF7 ResF8#
++++++++++++++ ##############
1. row: Block set 1, block set 2
2. row: Block set 3, block set 4
3. row: Block set 5, block set 6
4. row: Block set 7, block set 8
aa Number of reserved blocks
bb Number of free blocks in worst case

18
Display 55 –Block display 2
++++++++++++++ ##############
+aa bb aa bb+ #ResF9 ResF10#
+aa bb aa bb+ #ResF11ResF12#
+aa bb aa bb+ #ResF13ResF14#
+aa bb aa bb+ #ResF15ResF16#
++++++++++++++ ##############
1. row: Block set 9, block set 10
2. row: Block set 11, block set 12
3. row: Block set 13, block set 14
4. row: Block set 15, block set 16
aa Number of reserved blocks
bb Number of free blocks in worst case
Display 56 –Block display 3
++++++++++++++ ##############
+ aaaaaa bbb + # Ptr Cntr #
+ cccccccc + # Task #
+ + # #
+ + # #
++++++++++++++ ##############
aaaaaa Pointer to memory where double deallocation was called, in hex format.
bbb Counter for failed deallocations.
cccccccc Name of task which last tried to double deallocate a block.
Note: This display is only valid when the counter for failed deallocations is not zero.
Display 57 –Memory status before reset
++++++++++++++ ##############
+aaaaaaaaaaaa+ # Status of #
+aaaaa... + # stacks #
+bbbbbbbb + # Block sets #
+ + # #
++++++++++++++ ##############
aaaaaa Status of each stack before reset. First position contains the status of stack
0, second position the status of stack 1 and so on. The last position contains
the status of System stack. Number of stacks depends on the current
configuration of SW. Possible values for each stack are:
0 : status OK, no overflow
1 : status not OK, stack overflow,
bbbbbbb Status of each block set before reset. First position contains the status of
block set 1, second position the status of block set 2 and so on. Possible
values for each block set are:
0 : status OK
1 : block set full
2 : (de)allocation error or total memory corruption
Note: This display is only valid when a unknown or a stack overflow interrupt has occured.

19
Display 60 –Reset counters to zero
************** ##############
* FIELD TEST * #Use menu to #
* DISPLAY * #reset field #
* COUNTERS * #test display#
* RESET * # counters #
************** ##############
With this display all counters of the field test display can be reset (i.e. all counters in
40 and 60 series).
Display 61 –Search and reselection counter display
++++++++++++++ ##############
+NOPSW :aaaa+ #PSWMesgCntr #
+SYNCR :bbbb+ #SyncMeasCntr#
+RESELEC:cccc+ #CellReselCtr#
+ + # #
++++++++++++++ ##############
aaaa counter for MDI_NO_PSW_FOUND message received from DSP in hexadecimal form.
bbbb counter for synchronization measurement attempts in decimal form. If counter
value is over 9999 then four x are shown.
cccc counter for cell reselections in hexadecimal form.
On poweroff the values of the counter displays are stored onto the EEPROM, where they will
be read during power on. To initialize the counters to zero, select display 60. These
counters are automatically reset to zero when they exceed their maximum value.
Display 61 (dualband) –Search and reselection counter display
++++++++++++++ ##############
+aaaaa bbbbb+ #NOPswGSM DCS#
+ccccc ddddd+ #Sync GSM DCS#
+eeeee fffff+ #reselG>G D>D#
+ggggg hhhhh+ #reselG>D D>G#
++++++++++++++ ##############
aaaaa GSM900 counter for MDI_NO_PSW_FOUND message received from DSP in decimal form
(max 99999).
bbbbb GSM1800 counter for MDI_NO_PSW_FOUND message received from DSP in decimal form
(max 99999).
ccccc GSM900 counter for synchronization measurement attempts in decimal form. If
counter value is over 99999 then five x are shown.
ddddd GSM1800 counter for synchronization measurement attempts in decimal form. If
counter value is over 99999 then five x are shown.
eeeee counter for GSM900 -> GSM900 cell reselections in decimal form (max 99999).
fffff counter for GSM1800 -> GSM1800 cell reselections in decimal form (max 99999).
ggggg counter for GSM900 -> GSM1800 cell reselections in decimal form (max 99999).
hhhhh counter for GSM1800 -> GSM900 cell reselections in decimal form (max 99999).
On power off the values of the counter displays are stored onto the EEPROM, where they will
be read during power on. To initialize the counters to zero, select display 60. Counters are
automatically reset to zero when they exceed their maximum value.

20
Display 62 –Neighbour measurement counter display
++++++++++++++ ##############
+ PSW :aaaa + #NeghbrPSWCtr#
+ SYNCR:bbbb + #SyncMeasCntr#
+ BCCH :cccc + #BCCHMeasAtmp#
+ BCCHE:dddd + #BCCHExtMeAtm#
++++++++++++++ ##############
aaaa counter for neighbour PSW measurement attempts
bbbb counter for neighbour synchronization measurement attempts
cccc counter for neighbour BCCH measurement attempts
dddd counter for neighbour BCCH Ext measurement attempts
Counter values are shown in hexadecimal form.
On poweroff the values of the counter displays are stored onto the EEPROM, where they will
be read during power on. To initialize the counters to zero, select display 60. Counters are
automatically reset to zero when they exceed their maximum value.
Display 63 –Call attempts counters
++++++++++++++ ##############
+ aa bb + #CalRel RelDi#
+ ccc ddd + #MOCAtmp MOOK#
+ eee fff + #AllMT MTOK#
+ + # #
++++++++++++++ ##############
aa Reason of last call release
Cause from messages DISC and REL_COMP. Refer to TS GSM 04.08/10.5.4.11/Table
10.86 for further explanation.
bb Direction of last call release
UN : Unknown
MO : Mobile originated
MT : Mobile terminated
IN : Internal (ME CS sw)
ccc count of all MO call attempts made
ddd count of succeeded MO calls
eee count of all call setups received
fff count of succeeded MT calls
On poweroff the values of the counter displays are stored onto the EEPROM, where they will
be read during power on. To initialize the counters to zero, select display 60. Counters are
automatically reset to zero when they exceed their maximum value.
Display 64 –Location Update attempts counters
++++++++++++++ ##############
+ aa bbb ccc + #Nfai NL NLOK#
+ dd eee fff + #PFai PL PLOK#
+ + # Loc update #
+ + # counters #
++++++++++++++ ##############
aa Reason of last normal location update failure
bbb count of normal location update attempts
ccc count of succeeded normal location updates
dd Reason of last periodic or IMSI attach location update failure
eee count of all periodic and IMSI attach location update attempts
fff count of succeeded periodic and IMSI attach location updates
On poweroff the values of the counter displays are stored onto the EEPROM, where they will
be read during power on. To initialize the counters to zero, select display 60.
Counters are automatically reset to zero when they exceed their maximum value.