Which app do you use to scan/debug GSM/CDMA cellular tower s

[sms]

On 2/17/2017 8:36 PM, Savageduck wrote:

I recall driving to Yosemite in the winter one year. It was snowing.
We arrived at the place we were staying and they hadn't left the key
out for us. I called the caretaker who brought over the key.

Was this at Fish Camp, and I guess at some place other than Tenaya Lodge
or the Narrow Gauge Inn?

Yosemite West.

I looked at the maps for all four carriers for that area. Only Verizon
has coverage there. Remember, this area used to be served by a local
carrier, Golden State Cellular, which did a very good job of covering
remote areas. Verizon bought them. T-Mobile has no coverage in Yosemite,
not even in Yosemite Valley, and does not allow roaming. Sprint roams
onto Verizon. AT&T has native coverage in Yosemite Valley. Oddly, the
AT&T map shows two small patches of coverage.

Yosemite West is technically just outside the park boundary but the only
access is from within the park. There are a lot of rental houses and
condominiums in that community so it's a popular area for lodging,
especially in the winter since it's much closer to the downhill ski area
and the majority of XC and snowshoe trails, than Yosemite Valley,
Wawona, or Fish Camp.

Throughout California, once you leave the urban and suburban areas, you
definitely want to have at least an AT&T phone, and preferably a Verizon
phone. Ditto for Oregon. We were up in Bend and out in the area west of
town at Tumalo Falls, and there was only Verizon coverage (probably also
U.S. Cellular coverage). T-Mobile coverage is very spotty. Part of the
problem of course is the PCS frequencies need a lot more towers to cover
the same area as the cellular frequencies. Another advantage of Verizon
is that their using CDMA which is more robust and has greater range.

 

[Jeff Liebermann]

On Sun, 19 Feb 2017 17:18:40 +0000 (UTC), Stijn De Jong
<stijndekonlng@nlnet.nl> wrote:

That first GPS location it probably gets from our GPS receivers, while the
second GPS (which it calls "NMAP") location is likely from a lookup
database.

It's MMAP, not NMAP. MMAP (Mobile Message Access Protocol) is a
protocol for sending SMS messages over the internet:
<http://www.phonescoop.com/glossary/term.php?gid=269>
<https://yidonghan.wordpress.com/2008/01/02/mobile-message-access-protocolmmap-version-1-0/>
<http://xml.coverpages.org/SMS-MMAPv12a.pdf>


--
Jeff Liebermann jeffl@cruzio.com
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

 

[tlvp]

On Sat, 18 Feb 2017 19:48:00 -0800, Jeff Liebermann wrote:

http://www.evdoforums.com/thread15374.html

I dialed #878# and got:
"Welcome to Verizon Wireless. Your call cannot be completed as
dialed..."

Same here, on the other coast, but with the additional text,
"Announcement for switch [digit] [digit] [digit] dash [digit]."

(Actual digits redacted to "[digit]" for privacy's sake.) Cheers, -- tlvp
--
Avant de repondre, jeter la poubelle, SVP.

 

[nospam]

In article <o8ct52$19u0$1@gioia.aioe.org>, Stijn De Jong
<stijndekonlng@nlnet.nl> wrote:

As far as anyone can tell, it's impossible to get the cell id tower from
the phone on an iOS device,

wrong.

Certainly, technically competetent iOS users have tried over the years...

and have succeeded:

https://ociotec.com/wp-content/uploads/2016/11/proveedor_telefonia.png

https://pbs.twimg.com/media/C29OaIVXAAEPTMG.jpg

I've seen those pictures before since they were in the references I already
cited.

yet you still claim it can't be done??

Where is the unique cell ID in those pictures?

There is only one "cell id" and it's simply the number 388, which isn't a
unique cell id in any sense of the word.

nonsense.

> What do you know that nobody else on iOS knows?

i don't know about 'nobody else' but it's clear as hell that i know way
the fuck more than you do.

 

[Jeff Liebermann]

On Sun, 19 Feb 2017 15:15:07 -0500, tlvp <mPiOsUcB.EtLlLvEp@att.net>
wrote:

On Sat, 18 Feb 2017 19:48:00 -0800, Jeff Liebermann wrote:

http://www.evdoforums.com/thread15374.html

I dialed #878# and got:
"Welcome to Verizon Wireless. Your call cannot be completed as
dialed..."

Same here, on the other coast, but with the additional text,
"Announcement for switch [digit] [digit] [digit] dash [digit]."

(Actual digits redacted to "[digit]" for privacy's sake.) Cheers, -- tlvp

I tried it again and got the same thing as you ending in "Announcement
for switch 40-6". 40 is the SID (system identifier) for the San
Francisco Bay area:
<http://www.roamingzone.com/sid/>
<http://ifast.force.com/sid>
The 6 is the NID (network identifier). These numbers also agree with
the local VZW tower data as displayed by the NetMonitor app. The
phone is NOT activated and therefore shows everything as roaming.
Operator: 310 00 (Roaming)
Type: CDMA - EvDo Rev A
Carrier: Verizon Wireless
SID: 40 NID: 6 BID: 4864
Signal: -88dBm

I have some better phones (Samsung S4(?) and S6) in my palatial office
that I can try later next week.

--
Jeff Liebermann jeffl@cruzio.com
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

 

[Jeff Liebermann]

On Sun, 19 Feb 2017 20:44:18 +0000 (UTC), Stijn De Jong
<stijndekonlng@nlnet.nl> wrote:

On Sat, 18 Feb 2017 23:13:31 -0800, Jeff Liebermann wrote:
Back of the envelope calculation:
+27dBm Estimated transmit power from the cell site
+10dB My guess of the panel antenna gain
-53dBm Receive signal level from your test.

Path loss = 27 + 10 + 53 = 90dB
Calculating the distance where the path loss would be -90dB at 700MHz:
http://www.proxim.com/products/knowledge-center/calculations/calculations-free-space-loss
is about 0.7 miles or about 4,000 ft. The cell tower would need to be
rather close to your location for that to work. Like I said, I'm
suspicious of what you're measuring.

Thanks for showing me how to do the math to approximate the distance to the
antenna based on the received signal strength indication.

Well, I screwed up a little. I left out the antenna gain of your cell
phone, which I assumed to be 0dB at 700MHz. That's probably
optimistic and -3dB would be more reasonable. So, the calcs should be
something like:

+27dBm Estimated transmit power from the cell site
+10dB My guess of the tower panel antenna gain
??dB Calculated path loss
-3dB My guess of the cell phone antenna gain
-53dBm Receive signal level from your test.

Path loss = 27 + 10 - (-3) - (-53) = 93dB
Calculating the distance where the path loss would be -93dB at 700MHz:
<http://www.proxim.com/products/knowledge-center/calculations/calculations-free-space-loss>
is about 0.94 miles or about 5,000 ft. The cell tower would need to
be rather close to your location or you're getting your signal from
the neighbors.

I must not have stated clearly which is that the only time I get minus
sixty decibels is when the femtotower is in place, where it's only a few
feet from my phone.

The +27dBm (500mw) and +10dBm antenna gain are based on my guess(tm)
of the power per carrier for a real cell tower and a typical panel
antenna and with some reduction in power thanks to transmit power
control. Power levels and antenna gains for DAS (distributed antenna
system), small cell, microcell, picocell, analog repeaters, etc are
much lower.
<http://www.rfwireless-world.com/Tutorials/femtocell-vs-picocell-vs-microcell.html>
I can build you a table for the various device that will produce more
accurate results.

There *are* antennas two miles away (and sometimes I connect to them); so
the math isn't as bad as I thought. I also connect to antennas ten and
fifteen miles away, but that's driving distance, so I'd have to look at the
distance as the crow flies, which could be in the less-than-five-mile
range.

Also look at the antenna gains on both ends, any RF obstructions
including Fresnel zone blocking, and the accuracy of the signal level
meter in the cell phone. Remember, in RF real RF power, sensitivity,
antenna gains, and path loss, are always worse than calculated.

I don't want to comment on the T-Mobile signal booster due to lack of
experience with the device and general lack of info on what's inside.
If you can supply an FCC ID number, I might be able to excavate
something useful from the FCC ID data dumpster.

--
Jeff Liebermann jeffl@cruzio.com
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

 

[Jeff Liebermann]

On Sun, 19 Feb 2017 22:09:51 +0000 (UTC), Stijn De Jong
<stijndekonlng@nlnet.nl> wrote:

On Sun, 19 Feb 2017 13:46:55 -0800, Jeff Liebermann wrote:

I don't want to comment on the T-Mobile signal booster due to lack of
experience with the device and general lack of info on what's inside.
If you can supply an FCC ID number, I might be able to excavate
something useful from the FCC ID data dumpster.

Just returned from a hike in the mountains. It's freezing in the mountains
today. You are sending cold winds from Santa Cruz over the ridges!

T-Mobile calls *everything* a "Personal CellSpot" so, this is a photo of my
signal booster from T-Mobile:
http://i.cubeupload.com/6Jpa5v.jpg

Here's the company that makes it (Nextivity):
<http://www.cel-fi.com/duo/>
Methinks that's the model. Here's the "data sheet" which amazingly is
devoid of most useful numbers:
<http://content.cel-fi.com/content/doc/duo_datasheet.pdf>
It does mumble that it uses a 5GHz link between the two boxes.

On the back of the existing devices are these FCC IDs:

1. Window Unit: FCC ID YETD24NU
https://fccid.io/YETD24NU
User manual: https://fccid.io/document.php?id=2270465

That's the unit with the cellular radio end. Transmit power is about
100 mw. Doesn't appear to use wi-fi on the 5GHz band so my guess(tm)
is that it simply remodulates the received 1700/1800 RF carrier onto
5GHz. You probably won't see the 5GHz line with any of the Android
wi-fi tools, such as WiFi Analyzer.

2. Coverage Unit: FCC ID YETD24CU
https://fccid.io/YETD24CU
User manual: https://fccid.io/document.php?id=2270512

I'll look some more after I haul some firewood up the hill, clean off
the roof (in the rain), and deal with friends bugging me about their
weekend projects. Also, I'm still having problems with the new and
improved FCC ID document format, which balkanizes the test results
into as many seperate sections as possible in order to make them
difficult to download and read.

What I'm mostly interested is in figuring out how to tell if they're
working, since I can't seem to get different results with or without them
hooked up (and, of course, with the femtocell connected to my router turned
off).

I'm guessing based on the experimental results (which could be misleading)
that they just pass through the cell tower id.

That would also be my guess(tm). Nothing is demodulated or decoded by
the unit. Simply amplified and retransmitted on 5GHz. More later.

--
Jeff Liebermann jeffl@cruzio.com
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

 

[Jeff Liebermann]

On Sun, 19 Feb 2017 14:47:28 -0800, Jeff Liebermann <jeffl@cruzio.com>
wrote:

On Sun, 19 Feb 2017 22:09:51 +0000 (UTC), Stijn De Jong
stijndekonlng@nlnet.nl> wrote:

On Sun, 19 Feb 2017 13:46:55 -0800, Jeff Liebermann wrote:

I don't want to comment on the T-Mobile signal booster due to lack of
experience with the device and general lack of info on what's inside.
If you can supply an FCC ID number, I might be able to excavate
something useful from the FCC ID data dumpster.

Just returned from a hike in the mountains. It's freezing in the mountains
today. You are sending cold winds from Santa Cruz over the ridges!

T-Mobile calls *everything* a "Personal CellSpot" so, this is a photo of my
signal booster from T-Mobile:
http://i.cubeupload.com/6Jpa5v.jpg

Here's the company that makes it (Nextivity):
http://www.cel-fi.com/duo/
Methinks that's the model. Here's the "data sheet" which amazingly is
devoid of most useful numbers:
http://content.cel-fi.com/content/doc/duo_datasheet.pdf
It does mumble that it uses a 5GHz link between the two boxes.

Here's the basic patent on the system which includes a block diagram
and description showing how it works:
"CDMA UNII link"
<https://www.google.com/patents/US8351366>
That's for CDMA, but I couldn't find anything for GSM, UMTS, and
WCDMA. More patents:
<http://www.cel-fi.com/patents/>
I'll grind my way through the list later...
--
Jeff Liebermann jeffl@cruzio.com
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

 

[tlvp]

On Sun, 19 Feb 2017 13:00:11 -0800, Jeff Liebermann wrote, re #878#:

."

I tried it again and got the same thing as you ending in "Announcement
for switch 40-6". 40 is the SID (system identifier) for the San Fran...

Sure enough, the digits I heard indicate several VZW centers in my state.

> The 6 is the NID (network identifier).

My NID digit was "2". Technically, though I'm on the Verizon network, I'm
activated on Page Plus Cellular. No idea what difference that may make.

Anyway, thanks for the SID lookup URL. Cheers, -- tlvp
--
Avant de repondre, jeter la poubelle, SVP.

 

[Steve & Lynn]

On 02/16/2017 12:05 PM, pfjw@aol.com wrote:

The Troll is back!

AND NOW IT SEEMS THE FAG IS BACK

Please don't feed the troll!

AND DON'T FEED THE FAG WHO IS GAYER THAN SITRE MAGANA WHO IS THE OTHER
FAG THAT SUCKED OFF A 72 YEAR OLD MAN AND RAPED A DOG ON VIDEO.

 

[Arlen Holder]

On Thu, 16 Feb 2017 15:36:42 +0000, Whiskers wrote:

I use OpenSignal on my Android, in the UK. It currently shows '100
nearby' cell towers on the first page (where your screenshot shows '0
nearby') and they are shown as points on the map within a mile or two of
where I am (in a large busy city). But I'm pretty sure that comes from
the OpenSignal server not from the phone's own hardware.

UPDATE:

I know everyone loves OpenSignal but I prefer an app that provides the
EXACT cellular source when, in my case, it's often a femtocell that is
never going to be on ANY Internet database.

To that end, see this post today on this topic, if it helps others.
o Galaxy S9 in UK - poor signal?
<https://groups.google.com/forum/#!topic/comp.mobile.android/0soPAvWzt78>


On Sat, 14 Sep 2019 16:32:34 +0000 (UTC), Tony Mountifield wrote:

Ah, I could put my wife's SIM in my old phone to compare...
I do have the OpenSignal app on both.

I agree for cellular you need to be connected to the carrier, which is a
drawback - but luckily you have a second SIM card, where the apps I use can
handle two SIM cards (if the phone can handle two SIM cards of course).

I wouldn't suggest OpenSignal since it's an Internet lookup database which
uses triangulation (last I checked anyway) ... where I'd use one of the
apps in the references that does NOT need any access to the Internet.

I just looked on my phone where I have "Cellular-Z" freeware installed,
which seems to work well to show signal strength in RSSI, RSRP, RSRQ, &
SINR.
<https://i.postimg.cc/W4zhW166/cellular01.jpg>

In my case, I test femtocell signal and cellular repeater signals, where my
femtocell would never be in an Internet database.
<https://i.postimg.cc/TPK3jHft/cellular02.jpg>

o Cellular-Z, by JerseyHo
<https://play.google.com/store/apps/details?id=make.more.r2d2.cellular_z>
"Cellular Z is a telecom signal quality and Wifi network info, channel
info software, the main functions are as follows:
1.Dual SIM mobile phone network information (SIM card serving cell, serving
cell signal quality,neighboring cells).
2.Wifi information (connected, nearby Wifi list, Wifi channel 2.5 and 5
GHz).
3. Current location information GPS Satellites
4. Device information (battery, hardware, system).
5.speedtest.
6.Map track,indoor coverage."

 

[Fox's Mercantile]

On 9/14/19 12:01 PM, Arlen Holder wrote:
[ Nothing of any use, as always. ]

Go fuck yourself.


--
"I am a river to my people."
Jeff-1.0
WA6FWi
http:foxsmercantile.com