gsmlab
01-03-2004, 01:07 PM
I have explanation Fbus2 protocol from Gnokii,
but I can't understand commands for reading IMEI
and phone model from DCT4 phones, which used in original service software
for example:
to phone 7210
03o.bin-> 1E 00 10 7F 00 02 1B 05 15 78 1E 00 10 1B 00 0A ........x......
03o.bin-> 00 03 17 00 41 00 00 00 01 44 59 56 ....A....DYV
answer from phone 7210
04i.bin<- 1E 10 00 7F 00 02 1B 04 05 69 1E 10 00 1B 00 1C ........i......
04i.bin<- 03 31 17 01 00 01 41 14 00 10 33 35 30 38 39 33 .1....A...350893
04i.bin<- 31 30 35 35 36 38 32 34 34 00 01 46 44 53 105568244..FDS
to phone 8310
03o.bin-> 1E 00 10 7F 00 02 1B 83 15 FE 1E 00 10 1B 00 0A ......Ã.þ......
03o.bin-> 00 03 1A 00 41 00 00 00 01 40 54 52 ....A....@TR
answer from phone 8310
04i.bin<- 1E 10 00 7F 00 02 1B 00 05 6D 1E 10 00 1B 00 1C ........m......
04i.bin<- 03 2B 1A 01 00 01 41 14 00 10 33 35 30 36 30 34 .+....A...350604
04i.bin<- 31 30 33 39 35 31 36 34 31 00 01 44 44 47 103951641..DDG
as you can see for reading imei
used frames
in first case
1E 00 10 1B 00 0A 00 03 17 00 41 00 00 00 01 44 59 56
second case
1E 00 10 1B 00 0A 00 03 1A 00 41 00 00 00 01 40 54 52
1E 00 10 1B 00 0A - is a header all is clear with this
two last bytes is checksum
but commands
00 03 17 00 41 00 00 00 01 44
and
00 03 1A 00 41 00 00 00 01 40
have difference
how generated third and last bytes?
seems that answer from phone also depends from this bytes
and I'm confused
why software uses different commands for reading IMEI?
how it generated?
but I can't understand commands for reading IMEI
and phone model from DCT4 phones, which used in original service software
for example:
to phone 7210
03o.bin-> 1E 00 10 7F 00 02 1B 05 15 78 1E 00 10 1B 00 0A ........x......
03o.bin-> 00 03 17 00 41 00 00 00 01 44 59 56 ....A....DYV
answer from phone 7210
04i.bin<- 1E 10 00 7F 00 02 1B 04 05 69 1E 10 00 1B 00 1C ........i......
04i.bin<- 03 31 17 01 00 01 41 14 00 10 33 35 30 38 39 33 .1....A...350893
04i.bin<- 31 30 35 35 36 38 32 34 34 00 01 46 44 53 105568244..FDS
to phone 8310
03o.bin-> 1E 00 10 7F 00 02 1B 83 15 FE 1E 00 10 1B 00 0A ......Ã.þ......
03o.bin-> 00 03 1A 00 41 00 00 00 01 40 54 52 ....A....@TR
answer from phone 8310
04i.bin<- 1E 10 00 7F 00 02 1B 00 05 6D 1E 10 00 1B 00 1C ........m......
04i.bin<- 03 2B 1A 01 00 01 41 14 00 10 33 35 30 36 30 34 .+....A...350604
04i.bin<- 31 30 33 39 35 31 36 34 31 00 01 44 44 47 103951641..DDG
as you can see for reading imei
used frames
in first case
1E 00 10 1B 00 0A 00 03 17 00 41 00 00 00 01 44 59 56
second case
1E 00 10 1B 00 0A 00 03 1A 00 41 00 00 00 01 40 54 52
1E 00 10 1B 00 0A - is a header all is clear with this
two last bytes is checksum
but commands
00 03 17 00 41 00 00 00 01 44
and
00 03 1A 00 41 00 00 00 01 40
have difference
how generated third and last bytes?
seems that answer from phone also depends from this bytes
and I'm confused
why software uses different commands for reading IMEI?
how it generated?