PDA

View Full Version : MBUS Frame for Voice Call



townsendrs
16-02-2006, 11:56 AM
Hi, Does anyone know the frame to make a voice call. I have searched and found several possibilities none of which work for me on a 3210 phone
The frame I'm using is :
1F 00 1D 01 00 xx {block} yy zz
where xx is no. of bytes up to sequence no.
yy is sequence no.
zz is XOR of all preceding bytes

{block}={00 01 00 01 (NumberLength) (Number) 05 01 01 05 81 01 00 00 01}
where (Number Length) is the number of digits in the (Number) in hex format
and Number is the destination phone number in unicode (ASCII) (ie 0 = 30, 1 =31 etc) I'm not sure if these need to be converted to hex or not but I tried both and no success.
I get acknowledge from phone and then some time later phone sends a network registration message (Code 0x0A)

I know the MBUS is good as I've been able to send SMS tho' it successfully.

Any help much appreciated.

mestrini
16-02-2006, 12:56 PM
make a google search with "GAMMU" and you'll get the most complete non-official info about mobile communication ;)

cheers

townsendrs
17-02-2006, 03:21 PM
Hi Mestrini, Thanks yes I looked at GAMMU and found the same docs that I already got from GNOKII and MYGNOKII dated 2002 which don't seem to work for me. Another source (slightly different data) is from Dr Bizars at http://www.xored.dk/nokia/pcorner/mbus.php and a further (slightly different data) source compiled by Markus Plail. As I already said none of these work for me so if anyone has an idea I would appreciate.

NokDoc
17-02-2006, 07:48 PM
Hi,

Even if the tool not works, the documentations in the package can still be very informational.

I recall a document called '6110.txt', it is full of command values to use for mbus.

In case it's not in Ur zip, tell and I'll search for it on a cd somewhere.

NokDoc

townsendrs
17-02-2006, 10:08 PM
Hi NocDoc
Thanks your input but 6110.txt is the original data I used from the GNOKII source. I'll keep trying - probably I'm doing something stupid.....

townsendrs
21-02-2006, 01:01 PM
Finally got it to work - I had completely the wrong code. For anyone who may struggle in the future it's:

0x1F MBus Frame Ident
0x00 Destination device address - 00 is mobile phone
0x1D Originating device - in this case 0x1D means MBus device (eg a PC)
0x40 Message Type - 40 means 'Security Commands' ??

0x00 Bytes 4 & 5 are the number of bytes from byte 6 to message
0x09 end excluding Sequence No & the Checksum Bytes ie excluding the
last two bytes

0x00 Header bytes
0x01

0x7C Calls Command

0x01 Command to make voice call

0x32
0x33 Phone number to be called in ASCII format - the number in this
0x34 example is '2345'
0x35

0x00 Calls Command finish byte ?

0x03 Message sequence no. - increment for each new message.
0x34 XOR all preceding bytes (in the example Byte 0 to Byte 15)

Extracted from nk6110.txt