Google
 
Web www.howardforums.com
Pages: 1

Nokia CDMA: Command Codes / Netmonitor / Hidden Menus

(Click here to view the original thread with full colors/images)

Posted by: evensteven

I found this full listing of NetMonitor menus on google from a board that doesn't exist anymore. It also works on my 6585, and since the board no longer exists, I thought I would post it here for reference, before the info disappears entirely into the ether. If you have anything to add, please share!

DISCLAIMER: USE AT YOUR OWN RISK

http://www.damagedplanet.com/vbb/ar...ndex.php/t-2884

entry point *3001#12345#

{ *Note from Mod: The following codes is PRI dependent. Some carriers may have them disabled or use *# instead of ## or using different code that spells differently for the same function (e.g. ##DATA# or ##BEARER# on some phones). }

Dial-A-Codes
##837# or *#837#("VER") ... Displays version screen (also accessible by [Menu]-[6]-[2]).
##66767# or *#66767# ("MOSMS") ... Displays a selection screen to allow toggling of MO-SMS (Message Over : Simple Message Service) mode.
##743# or *#743# ("SID") ... Displays the current SID.
##24# or *#24# ("CH")... Displays the current Channel.
##786# ("RUN") ... Displays the Diagnostics menu which contains the Life Timer, Reconditioned Status, PRL, your number, and an Options menu which allows you to turn on the Service Screen (Net Monitor) or Restore Defaults (which resets the phone to factory settings). To restore defaults, you must enter the SPC/MSL code at the prompt.
##889# ("TTY") ... Displays a selection screen to allow toggling of TTY mode. (This code is referenced in the official Sprint manual.)
##7738# ("PREV") ... Displays CDMA mode menu, which allows you to select IS-95A, IS-95B, or IS-2000 modes.
*#7738# ("PREV") ... Displays CDMA mode menu, which allows you to select IS-95A, IS-2000, or Analog modes.
##8626337# ("VOCODER")or *#3872# ("EVRC") ... Displays the EVRC settings menu, which allows you to select the EVRC mode as On, Off, or Home Only.
##2539# ("AKEY") ... Allows you to change the service-specific Authorization Key via the keypad. When the phone asks for Service programming code, enter the SPC/MSL for your phone.
*#639# ("NEW") ... Allows you to change the MDN (phone number) registered in the phone. When the phone asks for Service programming code, enter the SPC/MSL for your phone.
*#775# ("PRL") ... Allows to toggle the use of PRL.

##nnnnnn# ... Where nnnnnn is a six-digit number (no more, no less), input will return to the main screen unless the number happens to be your SPC/MSL, in which case you will be taken to the Phone Programming menu which allows you to change the MDN (phone number) registered to the phone. (I don't know if some other combinations in this domain do something or not, but they all appear to reset the display after entry unless you use the SPC/MSL, which is usually a hash derived from your ESN and is typically service-specific.)

Other Codes
Hold # at the main screen for 3 seconds ... Displays the Life Timer in HH:MM format.


Posted by: Moderator HF 25

Net Monitor
This section of the phone allows you to view diagnostic information and execute various tests. The codes are four digits long and are split into a group number (first pair) and a test number (last pair). In the code 1234, for example, 12 is the group and 34 is the test. When executed or viewed, these codes are displayed in the top-left corner of the phone in the form 12-34. The following codes I have discovered myself. While more may exist, that is unlikely as you can scroll through them by pressing the up or down arrows once you are viewing one of the codes. (If the code is a test execution, you must enter it directly through the Net Monitor menu option to execute it. Flipping to that page will simply display the name of the test.)

While viewing a test screen, press and hold * until the text display changes and you can scroll through the tests in "explainatory mode" where you can see the abbreviations for the numbers you are looking at. It's kind of like a glossary for the Net Monitor.

0000 ... Disables testing and returns to the normal display mode without disabling the Net Monitor menu option

Group 31: "Big Picture" & Summary Status Info
31-01 ... CSST / CHAN / SP / PPN / XF / -Rxx (Receive Strength, -dBA) / -Txx (Transmit Strength, -dBA) / SO / X / FER
31-02 ... DPCH / DTCH / IDLHO / HHO / IFIDLHO / DAHO / IBIDMO / IBHHO
31-03 ... PN(1-4) / ECK
31-04 ... PN(5-6) / ECK
31-05 ... OWNNUMBER (Own Number) / SL / P / MD / PC
31-06 ... SSS / CHAN (Channel) / SID (System ID) / NID / SD / ID / TM / CAP / ROAM or HOME (Indicates whether phone is on a roam tower or the home network)
31-07 ... V
31-08 ... SID (System ID) / NID / BaseID / PRev / MinPRev
31-09 ... CSST / MMDDYY (Date) / HHMMSS (Time)
31-10 ... TADD / TDROP / TCOMP / TTDROP / WW(1-3)
31-11 ... PP(1-4) / 0EC
31-12 ... PP(5-8) / 0EC
31-13 ... PP(9-12) / 0EC
31-14 ... PP(13-16) / 0EC
31-15 ... PP(1-4) / 0EC
31-16 ... PP(5-8) / 0EC

Group 32: Current Tower Communication Info?
32-01 ... P/C / A/F / SID (System ID) / NID / PzID / PRev / MinRv
32-02 ... CSST / SO / -Rxx (Receive Strength, -dBa) / -Txx (Transmit Strength, -dBa) / FER / MUX
32-03 ... BrType / TERM / SES / CON
32-04 ... CcSt / CcEve / TxBytes / RxBytes
32-05 ... VER / RESET / ST / RTT / NAKR / PR / NAKPR / %NAK / MissFrames
32-06 ... RSt / RE / RMT / FSt / CURR / OvrFl (Overflow) / MAX / RSRq / RSGr
32-07 ... TOTL / NAK / NEW / OLD / IDLE / BLANK / FILL / INV / ER / DISCD
32-08 ... TOTAL / NAK / NEW / OLD / IDLE / BLANK / FILL
32-09 ... RMax / FMax / RUsr / FUsr / RNew / FNew / RRxm / FRxm
32-10 ... SeqTxNext / SeqTxNew / SeqTxUnack / RexmitTimer (Retransmission Timer)
32-11 ... DLen / BytesUnack / REXC / BOFFC / XMITW / CONGW
32-12 ... RMTYPE / CONTP / STATE / SO / MUX
32-13 ... RECVMM / RECVBR / SNTBR

Group 33: Codec Info?
33-01 ... TYPE / VER / RTT / RESET / MXFNK / MXRNK / NGFNK / NGRNK
33-02 ... FSCH(0-1): (F)SCHID / MUX / RC / CODING
33-03 ... RSCH(0-1): (R)SCHID / MUX / RC / CODING
33-04 ... FSCH0: FSCHID / STAT / DUR / RATE / SCCLINDEX / NUMN / SRID
33-05 ... FSCH1: FSCHID / STAT / DUR / RATE / SCCLINDEX / NUMN / SRID
33-06 ... RSCH0: RSCHID / STAT / DUR / RATE / SCRM / SRID
33-07 ... RSCH1: RSCHID / STAT / DUR / RATE / SCRM / SRID
33-08 ... PKTD / SCRMD / USESCRM (SCRM on/off) / USETADD (TADD on/off) / PREARGMT

Group 34: ?
34-01 ... SYNCOK / FAIL / FOCC / WOROK / WORFCO / WORFA / CTRLFI / MDRX
34-02 ... FVCFA / WFLAG / NORMRX / XSTBY / XNORRX / XNOK / XNFAIL / SYNLO
34-03 ... REP10K / FAIL / DECSAM / FOTED / R1BETT / SYNCS / MSGBET / SFLBE

Group 35: ?
35-01 ... FRC / RRC / SOPT / RFCHG / PICHG / FPCM
35-02 ... NOMP / NOMPE / INIP / PS / NS / MREQ / MRSP

Group 36: Analog/AMPS Info?
36-01 ... ACH REQ (Access Request) / ACH RESP (Access Response) / ACC / FAIL / T41 EXPIRED
36-02 ... SEND PRESSED / DACHORIG / PAGE RESP
36-03 ... ORIG / TOTLCALLTIME (Total Call Time) / AMPSTIME (AMPS Time) / LOS / REL / ACKF
36-04 ... 800HHO / ATMTP / PCSHHO / FAIL / CP HHO / PC HHO
36-05 ... CELAMPS / ATMP / PCSAMPS / FAIL / FRAMEOFF / SIDCHNG
36-06 ... AUTH CHALLNG (Authentication Challenge) / BSCHALLENGE (BS Challenge) / REGIST / DATA / ORIGI / PAGE
36-07 ... VOICEPRIVACY (Voice Privacy) / SSDFAIL / SME / PUBLC2PRIVAT (Public to Private on/off) / PRIVAT2PUBLC (Private to Public on/off)
36-08 ... PWR / PCH / ACC8 / MRELAMPSSYNC / NGBRSCANNOPN / GAOM / GSRM
36-09 ... RESEL / NOACC / MISMATC (Mismatch) / REJC / LOCK
36-10 ... REG / 3PwrDn (Power Down) / 0Time / 4Param / 1Pwrup (Power Up) / 5Order / 2Zone / 6Dista (Distance)
36-14 ... DSPASICSWSTK / MIPMDITIMBUS / MEMDMASRCRAM / SCHOTHERSOFT
36-18 ... NETWORK PREF / MOBILE PREF / SLOT / CYCLE / INDEX
36-20 ... PROBEHO / FAIL / ENTRYHO / FAIL / ACCCHAN / FAIL / T72TIMER
36-21 ... 1x-95HDR+GSR / 95-1xHDR+GSR / 1x-AMPS / DYNAMIC / SHO
36-23 ... RETRY TIMER / T50M / T51M / T52M / T40M / T41M / T55M

Group 61: Battery Info
61-01 ... Version / Bars / Mon Bat Volt (Monitor Battery Voltage, millivolts) / Temp (Temperature, tenths of degrees Centigrade?) / Cap (Capacity) / Sby (Standby Level) / ChMo / CS / ChTy
61-02 ... VInst (millivolts) / tRem (millivolts) / VOff (millivolts) / VOn (millivolts) / Flg / Vdmf (millivolts) / BPW / Sta (Status) / VCh (millivolts) / WCh / WInt
61-03 ... Vdmf (millivolts) / Fl1 / Ips / Vbm4 (millivolts) / Fl2 / Ilo / Phi / tElpBM4 / dPhi / tRem
61-04 ... BImp / ChaAmnt (Charge Amount) / Vfull (Voltage Full, millivolts) / Vlow (Voltage Low, millivolts) / VBoot (Voltage Boot, millivolts) / V@Lo (Indicates whether battery is below ideal voltage limit) / Adj / Err
61-05 ... ActInf: byte4 / byte3 / byte2 / byte1
61-06 ... Ibattery (milliamps) / Iphone (milliamps) / Ifeature (milliamps) / disAmount (Discharge amount, milliamp hours)
61-07 ... CSIdle / ActSW / CS state / CS protocol / Batmon state
61-08 ... ChMD / Ch / Vbat (Battery Voltage, millivolts) / # / ChSt (Charger Status) / Ichr / F / AvgCh (Average Charge Rate, milliamps?) / CIch / PWM / bTp (Battery Temperature) / time
61-09 ... Chr / Old / ChM / Mod / Old / HWP / PWM / OSV / Frq / O / B / CSV
61-10 ... -DV / s-DV / dvt / CA / Vbd / BT / sum / MaT / dvt
61-12 ... Varying EM displays 1-4; can change from rel. to rel.
61-13 ... Varying EM displays 5-8; can change from rel. to rel.

Group 62: Reset Info & Factory Flags
62-01 ... Reset reason / Task name (This should display "XXX / NO RESET" if the phone has never been reset.)
62-02 ... Unk / Cha / Key / BOF / SW / Int / Sta / DSF / WD / Div / DSP / GSM / DSP / DSP / AWD
62-03 ... Prod / As / Un / IO / Null / Add / Alig / Flas
62-07 ... USE MENU TO DISABLE R&D (Research and Development?) TEST DISPLAYS (I would be careful about running this test!)

Group 63: Phone OS Info
63-03 ... Ptr / Cntr / Task / OWrOut / SetO / Mod / Big
63-05 ... Use menu to select shown task info (asks for test input if run via the menu)
63-06 ... task0 / task1 / task2 / task3 / task4 / task5 / task6 / task7
63-07 ... task8 / task9 / task10 / task11 / task12 / task13 / task14 / task15
63-08 ... task16 / task17 / task18 / task19 / task20 / task21 / task22 / task23
63-09 ... task24 / task25 / task26 / task27 / task28 / task29 / task30 / task31
63-10 ... task32 / task33 / task34 / task35 / task36 / task37 / task38 / task39
63-11 ... FIQ / IRQ
63-12 ... OS PRE-RESET ERROR (Should display "XX XX NO RES" on the top line if the phone has never been reset.)
63-13 ... OS CURRENT ERROR (Should display "XX XX NO DAT" on the top line if there is no error.)
63-14 ... OS PRE-RESET WARNING
63-15 ... OS CURRENT WARNING
63-16 ... OS PRE-RESET REMARK
63-17 ... OS CURRENT REMARK
63-18 ... usedbyt (Used Bytes) / blks (Used Blocks) / freebyt (Free Bytes) / blks (Free Blocks) / zz / dd / ii / cc / TT
63-19 ... Block Usage: TOP / 2nd / 3rd / 4th (in memory blocks)
63-20 ... FILE / LINE / total count

Group 65: Input Flags?
65-01 ... CCTI / NB / DR / SC / WR / BO
65-02 ... PT / PB / BT / BP / BCTF / IC / IB / IT / IS / PCCC / PDCC
65-03 ... keys pressed

Group 66: Organizer Flags?
66-01 ... TY / TgID / EI / VD / VC / Used / BL01 / BL02 / BL03 / VR
66-02 ... MY / MeID / Dura (Duration) / Mmos / Alrm (Alarm) / ER / VR

Group 68: BER Test
68-01 ... USE MENU TO Start and Stop BER Test
68-02 ... FS / FR / FF / CRC

Group 75: GPS & Location Data
So far, I have only seen this area full of X's. Can anyone confirm that it works under certain conditions or why it would be masked as such?
75-01 ... LATITUDE / LONGITUDE / STATUS / METHOD
75-03 ... Orientation / Semiminor (meters) / Semimajor (meters) / Vertical (meters)
75-04 ... Time / Type / MS Date / MS Time / STATUS
75-05 ... Speed (meters per second) / Heading (degrees) / Altitude (meters) / Fix Type
75-19 ... LS Release ID / LS Release Date
75-30 ... GPS MCU Version / MCU SW Date / GPS DSP Version / DSP SW Date
75-31 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-32 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-33 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-34 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-35 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-36 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-37 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-38 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-39 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-40 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-41 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-42 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-70 ... AFLT MCU Ver / MCU SW Date / AFLT DSP Ver / DSP SW Date
75-71 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-72 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-73 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-74 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-75 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-76 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-77 ... AFLT: PRQ(s) / NUM.FIX / TBF; GPS: PRQ(s) / NUM.FIX / TBF
75-78 ... PPhase count / Measure times / PRange count / Measure times


Posted by: Moderator HF 25

{ Note from Mod: The following tricks may not exist or exist in different menu number combos in different phones. }

There are several disabled menus throughout the phone. I have found this general rule about discovering when a menu should be there (ie, is simply "hidden") and when it is not really a menu (ie, you're shooting at a black target in the dead of night from the wrong direction). If you enter the number shortcut for the menu you seek (ie, [Menu]-[2]-[1] shows the Text Messages menu), one of two errors will occur if you do not get a valid menu: "Invalid Menu" or "Shortcut Not Available". The latter indicates that the menu is really there, but the factory or service provider has masked it from public use.

Using this technique, I have found the following menus that should exist on this phone:

[Menu]-[1]-[2] ... ?; Instant Messaging menu, most likely.
[Menu]-[2]-[3] ... ?; Something to do with Text Messaging most likely.
[Menu]-[4]-[6] ... ?; Something to do with Profiles
[Menu]-[4]-[7] ... ?; Something to do with Profiles
[Menu]-[4]-[8] ... ?; Something to do with Profiles
[Menu]-[5]-[7] ... The Enhancement Settings menu, which can be accessed if you have ever had the phone in a cradle or a DKU-5 cable has ever been connected. It allows you to select Headset or Loopset modes.
[Menu]-[9] ... ?; Applications menu, most likely.

Security Settings Menu
The Security Settings menu is locked on this phone by default. It allows you to set the phone lock, allowed numbers when the phone is locked, change the lock code, and enable incoming or outgoing call restrictions. The default lock code for phones is the last four digits of your MIN (phone number). You may be able to reset this code by reprogramming your MIN using the SPC/MSL code as listed above. The menu can be accessed via [Menu]-[5]-[8].


Posted by: Moderator HF 25

Big thanks to evensteven for compiling this list of tips and tricks. I have STICK this thread in FAQ and have splitted it into 3 messages. So in the future, if you or anyone knows more, we can add more accordingly.


Posted by: wakajawaka

Group 75 GPS data only becomes populated when the GPS module gets a fix and returns measurements to the network. And that only happens when the network tells it to do so...... like when you call 911.


Posted by: kritch

Can someone please define ECK as seen in screens 31-03 and 31-04?

Is this related somehow to Ec/Io?

I see values such as 11K and 16D... they tend to fluctuate. What do K and D stand for? What does the numerical value represent?


Posted by: Nicholas

Quote:
Originally Posted by kritch
Can someone please define ECK as seen in screens 31-03 and 31-04?

Is this related somehow to Ec/Io?

I see values such as 11K and 16D... they tend to fluctuate. What do K and D stand for? What does the numerical value represent?


I'm not sure as to what it means but it's not Ec/Io. I don't recall ever seeing error class in the Nokia's FTD, which is annoying.


Posted by: HC - NO "i"

kritch / Freddy Flash,

The readouts in 31-03 - 31-04 are indeed the Ec/I0 of a particular P/N offset. Some network show only 3 cellsites but some show all 6.


Posted by: kritch

So my LG8100VX shows numbers ranging from -5 to -35 or thereabouts for Ec/Io. I see ranges for ECK from around 11 to 44 with a K or D afterwards. Are they in a different format as one is negative and the other positive? And what do the K and D stand for? The greater the number, the better or worse the signal?


Posted by: HC - NO "i"

kritch,

In the realm of Nokia, the smaller number the Ec/I0 readouts, the better the Call quality with that particular cellsite (i.e. The P/N offset shown in front of the Ec/I0 reading). When the reading is 6K or 7K, for example, you could expect it is relatively better than something like 16K or 17K. When it approaches 25K, you can notice the conversation becomes choppy / garbo. Beyond that, dropped call will happen anytime. If the handset is idle, it will NOT acquire pilot on that cellsite but to try other sites with better Ec/I0.


Posted by: wrathofpyro

sorry for reviving an old thread but what is the SPC/MSL or how can I find it?


Posted by: wakajawaka

< I see values such as 11K and 16D... they tend to fluctuate. What do K and D stand for? What does the numerical value represent? >

If I remember rightly, this is the active set for PNs. Numeric values represent Ec/Io. K and D are the Keep and Drop flags.

The handset sets a PN flag to D when that PN is no longer bringing a lot of value to the party (poor Ec/Io), and when the network receives a report from the handset with D set for a PN, the network will generally drop that PN from the active set.


Posted by: asfaw

i have nokia 6682 which came from out of the us .when i tried to upgrate ,the phone freeze( no light, nothing)
is any body have idea how can i back up my phone...
love
you all!!


Posted by: ATGM

Hello. Net Monitor worked as described above on my old Nokia 6015i. On the 6275i, though, when I press and hold the * key it immediately jumps to a blank screen showing the asterisk with soft keys for "Options Save Clear". Changing the DTMF tone duration settings did not make a difference.

Does anyone have a good idea of how to get to the explanatory mode, as described above? I would rather not have to print out all the net monitor fields on paper and carry it around with me

All the best,

Andrew


Posted by: Lebron14

Is there anyway to view the log files of incoming and outgoing communication using these commands? the one in call register can be deleted.. i'm looking for a way to view the log files recorded by the phone just like the one in symbian phones, is it possible to do that?
thanks


Posted by: vxbinaca

New code, works on Nokia 2865i and should work on any Nokia with Bluttooth:


*#2820# (*#bta0#) Display the Bluetooth MAC address (Phone must have a built in bluetooth adapter)


Posted by: ATGM

This worked fine on my Nokia 6275i (NB error message to turn on BT first).

Thanks.


Posted by: hari_099

nokia 3586 cdma codes


Posted by: memocomix

What about the hidden menus?
I've got a Nokia 2280 and a 3205.. the following menus are blocked:
Main menu - 14 (3205)
" " - 15 (3205 also)
(And on the 2280, menu 12 is blocked)
NAM Programming menu - 2 (NAM 2) (this is both handsets)

Any ways of unblocking them?

The field test thingies really are handy.. I can sorta understand them...


Posted by: sattv

I have 3 sensor pir motion detectors which emit a rf signal back to a mains addaptor, What devise which would be connected to mains addaptor would make a nokia gsm phone dial a number to alert me when sensors have been triggerd, Was thinking of some kind of relay but there must be a simplier devise to achieve this, thanks for info.


Posted by: Mizah

Thanks for the Codes,

cheers


Posted by: obibok

*#2769737# or *#BROWSER#

Brings up the Browser Settings menu (gateway server IP and port, user ID and password, etc.)

Tested with Nokia 6275i. Enjoy.


Posted by: Chaos Inc.

Awesome post! Keep it up and do try to follow up with additional codes if possible.




vBulletin Copyright ©2000 - 2009, Jelsoft Enterprises Limited.
vB Easy Archive Final ©2000 - 2009 - Created by Stefan "Xenon" Kaeser