Re: Pantech UML290 Signal Strength

[Dan Williams <dcbw redhat com>]

On Thu, 2011-06-30 at 20:32 -0700, Idruna wrote:
> I came across Dan's blog post on the UML290, and was wondering if any
> progress had been made on deciphering the get status (0x0B) command?  I`ve
> done a bit of work, and byte 64 of the response seems to be EVDO RSSI, and
> byte 26 seems to be 1xRTT RSSI, but I`m having a hard time figuring out the
> 4G RSSI as I can't get a 4G signal anywhere near here :(

I've got a bunch of dumps and it appears to be the end of the block, the
'C' (0x43) in this dump:

< c8 0b 00 00 00 00 0e 00 da 07 0c 00 14 00 12 00    ................
  19 00 0f 00 cb 02 00 00 00 00 7d 00 00 00 00 00    ..........}.....
  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................
  7d 00 00 00 01 00 00 00 01 56 65 72 69 7a 6f 6e    }........Verizon
  20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00     ...............
  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00 00 00 00 00 00 43 00 00    .............C..
  00 bc 02 00 00                                     .....

Like the others, it appears to simple be an RSSI/dBm value.

For reference, here's a dump of my device set to 3G-only mode where you
can see that the 4G RSSI isn't reported:

< c8 0b 1f 00 00 00 09 00 db 07 06 00 10 00 11 00    ................
  08 00 21 00 39 01 d4 fe ff ff 42 00 00 00 56 65    ..!.9.....B...Ve
  72 69 7a 6f 6e 20 57 69 72 65 6c 65 73 73 00 00    rizon Wireless..
  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................
  41 00 00 00 40 00 00 00 01 00 00 00 00 00 00 00    A...@...........
  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................
  00 30 f8 ff ff                                     .0...

Also interesting is when the device switches between "Verizon" and
"Verizon Wireless"; I see both on a fairly regular basis and that might
happen when it switches between access technologies.

If you're also reversing this stuff, perhaps we should put it all on a
wiki page somewhere?  I don't have a ton of time for it but got angry
enough last week to do more dumps and write up the blog post.

Dan

> Here is a sample response:
> 
> 1x RSSI: -98, EVDO RSSI -94
> c8 0b 07 00 00 00 0f 00 db 07 06 00 1e 00 14 00 	................
> 10 00 00 00 00 00 5c fe ff ff 62 00 00 00 56 65 	......\...b...Ve
> 72 69 7a 6f 6e 20 57 69 72 65 6c 65 73 73 00 00 	rizon Wireless..
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	................
> 5e 00 00 00 40 00 00 00 01 00 00 00 00 00 00 00 	^...@...........
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 4b 00 00 	.............K..
> 00 d4 03 00 00 30 30 7e  
> 
> Thanks,
> -- 
> Paul Nolan, CEO Idruna Software Inc.