Nokia NetMonitor User manual

1
Nokia
NetMonitor
Manual
Version 0.5
Base document : Flipo ( [email protected] )
PDF + Enhancements to base document : nobbi ( [email protected] )
Graphics : nobbi

2
Phone Models/Software versions
31xx/81xx
Old phones netmonitor has some differences when compared with the newer models, but this manual can be used
as a guide, because the overall working method and the contents are very similar.
51xx/61xx/71xx/88xx/91xx/32xx
This document covers the majority of menus from these phones netmonitor. Some of them may have little
differences, like missing/additional menus, different info, etc.
The 51xx and 61xx pages are almost identical. The 32xx has some more pages, which are not very well
documented yet. The 71xx has a whole bunch of pages concerning W@P. The 91xx pages are almost identical to
the 6110 ones.
The goal right now is to make an accessible manual, that will get better over the time. Please contribute with all
the info that you find relevant.
Information Sources :
[ 1 ] Netmonitor description (RD843.txt) from Nokia Mobile Phones
[ 2 ] Marcin Wiaceks homepage ( http://marcin-wiacek.topnet.pl )
Menu Modes
There are three Menu Display modes:
- execute mode
- data display mode
- help mode
Different modes are marked in this manual as follows:
************** ++++++++++++++ ##############
* * + + # #
* Execute * +Data display+ # Help #
* Mode * + Mode + # Mode #
* * + + # #
************** ++++++++++++++ ##############
The execute mode is entered from the menu by scrolling and selecting or shortcut. If the
test index entered pertains to a test that resets a timer (test 80) for example, then the
timer is reset as soon as the Ok button has been pressed in the menu, and the data display
mode takes over. In other words, the execute mode is of the one-shot type. To run another
test in the execute mode, the Field Test Display menu must be re-activated.
During the data display mode, the field test data (e.g. carrier, power level, cell) is
visible on the main display. During the help mode, one screen of instructions is shown for
each test to make it easier to identify the test in question. A long press of asterisk (*)
is used to toggle between these two modes.
(on some 3110 versions, the help screens follow the data display modes on the list)
The arrow keys (^,v) offer an easy way to switch to another test without using the menu.
However, the data display mode remains, i.e. nothing will be executed or set on although
such tests would be passed. This is to prevent the user from accidentally clearing any
valuable data. (see 3.7.2 for details and 2.5 for recommendations).
The help mode is also a non-execute mode. Display numbers have been selected in such way
that no 5-terminated test number is an execute display.

3
Display 1 –Serving cell info
++++++++++++++ ##############
+abbb ccc ddd+ #CH RxL TxPwr#
+ e ff g mmmm+ #TS TA RQ RLT#
+ nnn ppp+ # C1 C2 #
+ oooo + # CHT #
++++++++++++++ ##############
aH, if carrier numbers are scrolled when hopping is on. Otherwise ' '.
bbb When mobile is on a TCH :
DCH carrier number in decimal.
When mobile is NOT on a TCH :
CH means carrier number in decimal.
If hopping is on, used channels are scrolled when display is updated.
ccc rx level in dBm, minus sign is not shown if <=-100
ddd tx power level. If transmitter is on, symbol * is shown in front of the power
level value.
eTime Slot, range is 0 - 7
ff Timing advance, range is 0 – 63
gRX quality (sub), range is 0 - 7
mmmm Radio Link Timeout value. If value is negative, 0 is shown.
Maximum value is 64. When mobile is NOT on TCH then xx is shown.
nnn value of the path loss criterium (C1). Range is -99 - 999.
oooo type of current channel:
THR0 : TCH HR subchannel 0
THR1 : TCH HR subchannel 1
TFR : TCH FR
TEFR : TCH EFR
F144 : TCH FR data channel, speed 14.4 kbps
F96 : TCH FR data channel, speed 9.6 kbps
F72 : TCH FR data channel, speed 7.2 kbps
F48 : TCH FR data channel, speed 4.8 kbps
F24 : TCH FR data channel, speed 2.4 kbps
H480 : TCH HR data channel, speed 4.8 kbps, subch 0
H481 : TCH HR data channel, speed 4.8 kbps, subch 1
H240 : TCH HR data channel, speed 2.4 kbps, subch 0
H241 : TCH HR data channel, speed 2.4 kbps, subch 1
FA : TCH FR signalling only (FACCH) channel
FAH0 : TCH HR signalling only (FACCH) channel, subch 0
FAH1 : TCH HR signalling only (FACCH) channel, subch 1
SDCC : SDCCH
AGCH : AGCH
CCCH : CCCH
CBCH : CCCH and cell broadcast receiving on
BCCH : BCCH
SEAR : SEARCH
NSPS : MS is in ’no service, power save’ state
ppp value of the cell reselection criterium (C2).
Range is -99 to 999. If phone is phase 1 then C1 value is shown.

4
Display 2 –More info about serving cell
++++++++++++++ ##############
+ aa b c Bdd + #PM RAR Ro BC#
+ ee f + #RelR QLF #
+ ggg hh iii + #CRO TO PenT #
+ H=j mm nn + #H MAIO HSN #
++++++++++++++ ##############
aa paging mode
NO : normal paging
EX : extended paging
RO : paging reorganization
SB : same as before
bmaximum number of Random Access retransmission
croaming indicator, values are 'R' or ' '.
Bdd Letter B and BSIC value, range is 0 - 63.
ee Reason of last call release
fRX quality (full), range is 0 - 7
ggg Cell reselection offset, range 0 - 126 dB.
0 - 63 * 2 dB. 'xxx' in dedicated mode.
hh Temporary offset, range 0 - 60 dB.
0 - 7 * 10 dB. 70 dB means infinite time.
'xx' in dedicated mode.
iii Penalty time, range 0 - 620 s.
0 - 31 * 20 s. 'xxx' in dedicated mode.
jHopping channel
0Single RF channel
1RF hopping channel
mm mobile allocation index offset, MAIO
Range: 00 to 63 / xx when H=0
nn hopping sequence number, HSN
Range: 00 to 63 / xx when H=0
Display 3 –Serving cell, 1st and 2nd neighbour
++++++++++++++ ##############
+aaabbbcccddd+ #SCH C1 rx C2#
+aaabbbcccddd+ #1CH C1 rx C2#
+aaabbbcccddd+ #2CH C1 rx C2#
+ ef gh + # 1N 2N #
++++++++++++++ ##############
1. row: serving cell information
2. row: 1. neighbour information
3. row: 2. neighbour information
4. row, ef: 1. neighbour information
4. row, gh: 2. neighbour information
aaa carrier number in decimal
bbb idle mode : C1 value, range is -99 - 999
ded. Mode : 'B' and BSIC value
ccc RX level in dBm, minus sign is not shown if <=-100
ddd C2 value, range is -99 - 999
e,g F : cell is in a forbidden location area
f,h B : cell is barred
N : cell is normal priority
L : cell is low priority

5
Display 4 & 5 –3rd to 8th neighbour cell
++++++++++++++ ##############
+aaabbbcccddd+ #3CH C1 rx C2#
+aaabbbcccddd+ #4CH C1 rx C2#
+aaabbbcccddd+ #5CH C1 rx C2#
+ ef gh ij + # 3N 4N 5N #
++++++++++++++ ##############
1. row: 3./6. neighbour information
2. row: 4./7. neighbour information
3. row: 5./8. neighbour information
4. row, ef: 3./6. neighbour information
4. row, gh: 4./7. neighbour information
4. row, ij: 5./8. neighbour information
aaa carrier number in decimal
bbb idle mode : C1 value, range is -99 - 999
ded. Mode : 'B' and BSIC value
ccc rx level in dBm, minus sign is not shown if <=-100
ddd C2 value, range is -99 - 999
e,g,i F : cell is in a forbidden location area
f,h,j B : cell is barred
N : cell is normal priority
L : cell is low priority
Display 6 –Network selection display
++++++++++++++ ##############
+aaabb aaabb+ #LReg 1_For#
+aaabb aaabb+ #1_Pre 2_For#
+aaabb aaabb+ #2_Pre 3_For#
+aaabb aaabb+ #3_Pre 4_For#
++++++++++++++ ##############
This display shows the last registered networks country code (MCC) and
network code (MNC) as well as the codes for four forbidden networks
and the first 3 preferred networks.
If a three-digit MNC is used (GSM1900), display looks different:
++++++++++++++
+aaabbbaaabbb+
+aaabbbaaabbb+
+aaabbbaaabbb+
+aaabbbaaabbb+
++++++++++++++
1. row: last registered network - 1st forbidden network
2. row: 1st preferred network - 2nd forbidden network
3. row: 2nd preferred network - 3rd forbidden network
4. row: 3rd preferred network - 4th forbidden network
aaa country code coded in BCD
bbb network code coded in BCD, third digit can be 'F'

6
Display 7 –System information bits for serving cell
++++++++++++++ ##############
+E A H C I BR+ #Serving Cell#
+a b c d e fg+ #System Info #
+ECSC 2Ter MB+ #Bits #
+ h i j+ # #
++++++++++++++ ##############
a1 is shown if emergency calls are supported
b1 is shown if attach-detach-procedure is allowed
c1 is shown if half rate channels are supported
d1 is shown if C2 values are broadcasted
e1 is shown if system information 7 and 8 are broadcasted
f1 is shown if cell broadcast is supported
g1 is shown if re-establishment is supported
The following items are used only in dualband phones:
hIn idle mode 1 is shown if Early Classmark (ECSC) sending is supported.
In dedicated mode (conversation) X is shown.
iIn idle mode 1 is shown if 2Ter messages are supported.
In dedicated mode (conversation) X is shown.
jMultiBand reporting decimal value (0,1,2,3) is shown if supported.
This is shown both in idle and dedicated mode.
The following is picked from Phase2+ ETSI ETS 300578 (GSM 05.08 version 4.22.1), Section
8.4.3 "Additional cell reporting requirements for multi band MS".
For a multi band MS the number of cells, for each frequency band supported, which shall be
included in the measurement report is indicated by the parameter, MULTIBAND_REPORTING. The
meaning of different values of the parameter is specified as follows:
Value Meaning
00 Normal reporting of the six strongest cells, with known and allowed NCC part of
BSIC, irrespective of the band used.
01 The MS shall report the strongest cell, with known and allowed NCC part of
BSIC, in each of the frequency bands in the BA list, excluding the frequency
band of the serving cell. The remaining positions in the measurement report
shall be used for reporting of cells in the band of the serving cell. If there
are still remaining positions, these shall be used to report the next strongest
identified cells in the other bands irrespective of the band used.
10 The MS shall report the two strongest cells, with known and allowed NCC part of
BSIC, in each of the frequency bands in the BA list, excluding the frequency
band of the serving cell. The remaining positions in the measurement report
shall be used for reporting of cells in the band of the serving cell. If there
are still remaining positions, these shall be used to report the next strongest
identified cells in the other bands irrespective of the band used.
11 The MS shall report the three strongest cells, with known and allowed NCC part
of BSIC, in each of the frequency bands in the BA list, excluding the frequency
band of the serving cell. The remaining positions in the measurement report
shall be used for reporting of cells in the band of the serving cell. If there
are still remaining positions, these shall be used to report the next strongest
identified cells in the other bands irrespective of the band used.

7
Display 10 –Paging Repeat Period, TMSI, Location Update Timer, AFC and AGC
++++++++++++++ ##############
+TMSIaaaaaaaa+ #TMSI(hex) #
+T321:bbb/ccc+ #T3212ctr/tim#
+PRP:d ee ff+ #PaRP DSF AGC#
+ ggggg hhh + # AFC Ch #
++++++++++++++ ##############
aaaaaaaa last assigned TMSI value in hex format
bbb Current value of T3212 counter (range is 000 - 'ccc', where 1 means 6 min
time. So, if this value is 2 less than 'ccc' then next periodic location
updating will be made within 2 * 6 min = 12 minutes.
ccc Timeout value of T3212 counter (range is 000 - 240, where 1 means 6 min time
between location updates and 240 means 240 * 6 min = 24 h between location
updates. 000 means that a periodic location update will not occur) This
value is received from the network.
dValue of paging repetition period (range is 2 – 9, which means paging will be
in every Xth multiframe. When paging is in every second multiframe, mobile
takes more current than if it were in every 9th multiframe)
ee Downlink signalling failure value. If value is negative, 0 is shown. Maximum
value is 45. When mobile is on TCH then xx is shown.
ff Gain value on TCH/SDCCH, range is 0 - 93
ggggg VCTCXO AFC DAC control, range is -1024 - 1023
hhh Serving cell channel number
Display 11 –Network parameters
++++++++++++++ ##############
+CC:aaa NCbbb+ # MCC MNC #
+ LAC:ccccc + #LocAreaCode #
+ CH : dddd + #ServChannel #
+ CID:eeeee + # CellId #
++++++++++++++ ##############
aaa MCC value in decimal (MCC=Mobile Country Code)
bbb MNC value in decimal (MNC=Mobile Network Code)
Three digits are shown only in GSM1900.
Two digits are shown in GSM900 and GSM1800.
ccccc LAC value in decimal (in older SW-versions this value is in hexadecimal)
dddd Serving cell channel number
eeeee Cell Identifier in decimal (in older SW-versions this value is in hexadecimal)
Display 12 –Ciphering, hopping, DTX Status and IMSI
++++++++++++++ ##############
+CIPHER :aaa + #CipherValue #
+HOPPING:bbb + #HoppingValue#
+DTX :ccc + #DTXValue #
+IMSI :ddd + #IMSIAttach #
++++++++++++++ ##############
aaa ciphering value, OFF/A51/A52
bbb hopping value, ON/OFF
ccc DTX value ON/OFF
ddd IMSI attach
ON : IMSI attach on
OFF : IMSI attach off
These values are updated only on when on a TCH.

8
Display 13 –Uplink DTX switching display
************** ##############
*aaaaaaaaaa * #DTXMode #
*DTX(DEF):bbb* #DefaulDTXSta#
*DTX(BS) :ccc* #DTXValFromBS#
* * # #
************** ##############
With this display it is possible to change wether MS to use DTX or not.
This display must be activated from MENU to change DTX state. When MENU is not active and
the user is scrolling field test displays with NEXT and PREVIOUS, the DTX state will not be
changed.
aaaaaaaaaa status of switched mode.
DTX:ON : MS uses DTX
DTX:OFF : MS does not use DTX
DTX:DEF : MS use default state of DTX
NOTALLOWED: BS does not allow MS to decide if it uses
DTX or not.
bbb default state of DTX in MS. The value is either ON or OFF
ccc is DTX value from BS
MAY : BS allows MS to decide if it uses uplink DTX or not
USE : BS controls MS to use DTX (on uplink)
NOT : BS controls MS not to use DTX (on uplink)
Display 14 –Toggle Screening Indicator
************** ##############
* SCREENING * #Use menu to #
* INDICATOR * # change #
* IS XX * XX : 00 or 01 # Screening #
* * # indicator #
************** ##############
When selected, changes the value of the Screening Indicator from 0 to 1 and
vice versa.

9
Display 17 –Switch BTS_Test Status
************** ************** ##############
* * * * #Use menu to #
* BTS TEST * * BTS TEST * #toggle BTS #
* ON * * OFF * #test ON/OFF #
* * * * # #
************** ************** ##############
This display is used to toggle the BTS_TEST flag in EEPROM. If BTS_TEST
is set then each time the mobile sends a search list it uses only the carrier
number stored on SIM phonebook location 33. Also the neighbour information from
system information messages is ignored. If the BTS_TEST flag is not set,
then the value of SIM phonebook location 33 is ignored and the mobile behaves
normally (i.e. does neighbour measurements according to GSM specifications).
To activate BTS TEST perform the following steps:
- Save desired channel number in SIM phonebook location 33.
- Select display 17 in execute mode
- Switch power off and on
If activation succeeded, you will read "BTS TEST ON" in display 17.
To deactivate BTS tests either select display 17 in execute mode or
save number 0 in SIM phonebook location 33 and switch power off and on.
NOTE! The display does not show the value of the BTS_TEST flag in EEPROM.
Although the value is set, BTS_TEST can be off. If there is no legal
carrier number in SIM phonebook location 33 (GSM900: 1-124, GSM1800: 512-885) the
display shows that BTS_TEST is off. Also if the mobile was already
registered to some carrier before switching BTS_TEST status, the display
can show a different value from the one in EEPROM.
Display 18 –Lights status control
Forces keyboard and display lights on/off while displaying any netmonitor screen.
************** ************** ##############
* * * * #Use menu to #
* LIGHTS * * LIGHTS * # toggle #
* ON * * OFF * # lights #
* * * # ON/OFF #
************** ************** ##############
Display 19 –Toggle Cell Barred Status
************** ************** ************** ##############
* * * * * * #Use menu to #
* CELL BARR * * CELL BARR * * CELL BARR * #toggle cell #
* ACCEPTED * * REVERSE * * DISCARD * #barr status #
* * * * * * #DIS/ACC/REV #
************** ************** ************** ##############
This test is meant to be used when some cells are tested before taking them into commercial
use. By setting the CELL_BARRED to on in the base station normal GSM phones will not try to
camp on these barred cells.
By selecting CELL BARR REVERSE, the MS will only use the cells which have CELL_BARRED set.
By selecting CELL BARR DISCARD, the MS will use all cells, irrespective wether CELL_BARRED
is set or not.
NOTE: If a cell has been selected before barring state in phone is changed the selected cell
will remain the current cell. After the next cell reselection the cell barring state is
working as expected.

10
Display 20 –Charging state
************** ##############
* aaa bbbbb * #BatVol ChMod#
* Tccc dddd * #Btemp ChTime#
* Ceee Wfff * #ChrgVol Pwm #
* gggg hhhh * # Btyp BFDC #
************** ##############
aaa Battery voltage in decimal, range is 0.00 - 9.99 V, decimal point is not shown;
e.g. 7.19 V is shown as 719 on the display
bbbbb Charging mode 5 digit symbol:
xxxxx : Charger not connected or charging disabled.
BatCk : Battery testing is going.
BSIFa : Charging off because of battery BSI measurement failed.
CelBr : Charging off because one or more cells broken inside battery.
ChaCk : EM is checking charger.
Charg : Charging.
ColdC : Cold charging.
ColdM : Battery cold and maintenance going.
CurFa : Charging off because charger current measurement failed.
DisCh : Battery discharging going.
F_Che : Fast charging checks.
Faile : Failure.
FastC : Fast charging going.
FullM : Battery full and maintenance going.
HotM : Battery hot and maintenance going.
I_Che : Init checks.
InitC : EM charging is being initialized.
L_Che : Li charging checks.
LiAFu : PWM level is below the battery full limit.
LiDCH : Li-ion DCH charging.
LiFul : PWM has been below the battey full limit for a certain time
that is specified for full battery.
LiHot : Li-ion hot charging.
LithC : Charging of Lithium-ion battery.
LiTxO : TX on and Li charging going.
LNFTx : TX on, Li charging going and battery is not full anymore.
M_Che : Maintenace charging checks.
MaBFD : Maintenace BFD charging.
Maint : Maintenance charging.
TmpFa : Charging off because of battery NTC measurement failed.
TxNoF : TX on, Ni charging going and battery is not full anymore.
TxOnC : TX on and Ni charging going.
VolFa : Charging off because charger voltage measurement failed.
ccc Battery temperature in centigrade, from -30 to +90.
ddd Charging time. Format is HMM. Timer is automatically reset and started when
charger is connected and stopped when battery is full or charger is
disconnected.
eee Charger voltage in decimal, range is 0.0 - 18.7 V, decimal point is not shown.
fff Charge control output, decimal, range is 000 - 255.
gggg Lithium battery type (BSI value multiplied by 4), or NiMH battery size.
hhhh Battery full delay counter. When battery is getting full and charging current is
less than predefined limit, this timer will be started. If timer reaches 0,
charging will be stopped.