Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,731,852 Members 42,529 Now Online
XDA Developers Android and Mobile Development Forum

[Q][RF] FUBAR Timer in the L3 RRC protocol?

Tip us?
 
E:V:A
Old
#1  
E:V:A's Avatar
Recognized Developer - OP
Thanks Meter 1696
Posts: 1,297
Join Date: Dec 2011
Location: -∇ϕ
Default [Q][RF] FUBAR Timer in the L3 RRC protocol?

Getting RF variables from your Android modem can be extremely useful for a whole range of reasons, but the Google API developer (mofo's) refuse to document and support all but the most fundamental ones, like CID/LAC etc. among hundred more.

However, if you manage to get access to your phones ServiceMenu (SM), which are getting increasingly disabled and hidden, you may be lucky enough to find a whole bunch of useful internal functions and settings. Such as detailed RF/Network info, audio/vidoeo settingsetc etc...

What's the damn question?

On many Samsung phones, the ServiceMenu contain something like the following (depending on modem version):

Code:
MAIN MENU
[1] DEBUG SCREEN
        [1] BASIC INFORMATION
                UMTS : HOME(CS+PS)
                RRC State: IDLE
                WCDMA 2100 Band 1
                Reg PLMN 240-2, IsPCS? 0
                FREQ DL:10737
                FREQ UL:9787
                CELL_ID:0xhhhhhh
                LAC: 0xhhhh
                PSC:hhh
                RSCP:-94, ECIO:-5
        [2] MM INFORMATION
                MM state: IDLE
                Reg state: INDEP_REGISTRATION
                IMSI attatch status: 1
                LU Rej: Norm=0, Period=13
                T1312=11, Count=9
                T32(10,11,12,13)=0010
                T32(20,30,40)=000
                Att Rej Cause=0
                RAU Rej Cause=9
        [3] RR INFORMATION
        [4] NEIGHBOUR CELL
        [5] GPRS INFORMATION
        [6] SIM INFORMATION
        [7] HANDOVER
        [8] PHONE CONTROL
        [9] ANTENNA/ADC
(The SM is normally accessed through *#0011# or *#197328640# from dial-pad.)

I have highlighted a the Mobility Management (MM) Timer, called: T1312.
However, there is no such timer in any of the documentation I have seen, so my suspicion is that the timer name is a typo. But then again I have only looked at ~4 documents out of several thousands from 3GPP.

What is this timer T1312 actually supposed to be representing?
Where can I find its documentation?

Yes, XDA is proably not the right place to post this question, but I'm just too lazy to sign up on another GSM just to ask this question. So among all the 5.6 Million XDA users, perhaps someone should be RF/GSM engineer enough to help me find an answer.

PS. It's good for people/developers to know that the real meat of the SM application is located inside your modem binary! The app you can see, is just a wrapper.


References:
3GPP TS 24.008 V12.5.0 (2014-03): (678 pages)
"Mobile Radio Interface Layer 3 specification, Core Network Protocols".
MSM8960 Info, Architecture and Bootloader(s)
El Grande Partition Table Reference
How to talk to the Modem with AT commands

[REF][ServiceMode] How to make your Samsung perform dog tricks
[REF|R&D|RF] RF/Radio properties of Samsung ServiceMode

Want to know when your phone is getting tracked or tapped?

Help us develop the IMSI Catcher / Spy Detector!
(To be part of the EFF & The Guardian Project toolsets.)
_______________________________
If you like what I do, just click THANKS!
Everything I do is free, altruism is the way!
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
I do not answer support related PM's.

 
E:V:A
Old
#2  
E:V:A's Avatar
Recognized Developer - OP
Thanks Meter 1696
Posts: 1,297
Join Date: Dec 2011
Location: -∇ϕ
It's possible this timer is Intel/Infineon XMM 6x60 specific, not present in Qualcomm modem based ServiceMode applications.
MSM8960 Info, Architecture and Bootloader(s)
El Grande Partition Table Reference
How to talk to the Modem with AT commands

[REF][ServiceMode] How to make your Samsung perform dog tricks
[REF|R&D|RF] RF/Radio properties of Samsung ServiceMode

Want to know when your phone is getting tracked or tapped?

Help us develop the IMSI Catcher / Spy Detector!
(To be part of the EFF & The Guardian Project toolsets.)
_______________________________
If you like what I do, just click THANKS!
Everything I do is free, altruism is the way!
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
I do not answer support related PM's.

Tags
3gpp gsm, rrc timers, servicemode, t1313
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes