Nokia CDMA: Command Codes / Netmonitor / Hidden Menus

[~AKSingh~]

--------------------------------------------------------------------------------

I found this full listing of NetMonitor menus on google from a board that doesn't exist anymore. It also works on my 6585, and since the board no longer exists, I thought I would post it here for reference, before the info disappears entirely into the ether. If you have anything to add, please share!

DISCLAIMER: USE AT YOUR OWN RISK

entry point *3001#12345#

{ *Note from Mod: The following codes is PRI dependent. Some carriers may have them disabled or use *# instead of ## or using different code that spells differently for the same function (e.g. ##DATA# or ##BEARER# on some phones). }

Dial-A-Codes
##837# or *#837#("VER") ... Displays version screen (also accessible by [Menu]-[6]-[2]).
##66767# or *#66767# ("MOSMS") ... Displays a selection screen to allow toggling of MO-SMS (Message Over : Simple Message Service) mode.
##743# or *#743# ("SID") ... Displays the current SID.
##24# or *#24# ("CH")... Displays the current Channel.
##786# ("RUN") ... Displays the Diagnostics menu which contains the Life Timer, Reconditioned Status, PRL, your number, and an Options menu which allows you to turn on the Service Screen (Net Monitor) or Restore Defaults (which resets the phone to factory settings). To restore defaults, you must enter the SPC/MSL code at the prompt.
##889# ("TTY") ... Displays a selection screen to allow toggling of TTY mode. (This code is referenced in the official Sprint manual.)
##7738# ("PREV") ... Displays CDMA mode menu, which allows you to select IS-95A, IS-95B, or IS-2000 modes.
*#7738# ("PREV") ... Displays CDMA mode menu, which allows you to select IS-95A, IS-2000, or ????og modes.
##8626337# ("VOCODER")or *#3872# ("EVRC") ... Displays the EVRC settings menu, which allows you to select the EVRC mode as On, Off, or Home Only.
##2539# ("AKEY") ... Allows you to change the service-specific Authorization Key via the keypad. When the phone asks for Service programming code, enter the SPC/MSL for your phone.
*#639# ("NEW") ... Allows you to change the MDN (phone number) registered in the phone. When the phone asks for Service programming code, enter the SPC/MSL for your phone.
*#775# ("PRL") ... Allows to toggle the use of PRL.

##nnnnnn# ... Where nnnnnn is a six-digit number (no more, no less), input will return to the main screen unless the number happens to be your SPC/MSL, in which case you will be taken to the Phone Programming menu which allows you to change the MDN (phone number) registered to the phone. (I don't know if some other combinations in this domain do something or not, but they all appear to reset the display after entry unless you use the SPC/MSL, which is usually a hash derived from your ESN and is typically service-specific.)

Other Codes

thanks to sachin kamble

wbr
Hold # at the main screen for 3 seconds ... Displays the Life Timer in HH:MM format.

[~AKSingh~]

contd


{ Note: The following tricks may not exist or exist in different menu number combos in different phones. }

There are several disabled menus throughout the phone. I have found this general rule about discovering when a menu should be there (ie, is simply "hidden") and when it is not really a menu (ie, you're shooting at a black target in the dead of night from the wrong direction). If you enter the number shortcut for the menu you seek (ie, [Menu]-[2]-[1] shows the Text Messages menu), one of two errors will occur if you do not get a valid menu: "Invalid Menu" or "Shortcut Not Available". The latter indicates that the menu is really there, but the factory or service provider has masked it from public use.

Using this technique, I have found the following menus that should exist on this phone:

[Menu]-[1]-[2] ... ?; Instant Messaging menu, most likely.
[Menu]-[2]-[3] ... ?; Something to do with Text Messaging most likely.
[Menu]-[4]-[6] ... ?; Something to do with Profiles
[Menu]-[4]-[7] ... ?; Something to do with Profiles
[Menu]-[4]-[8] ... ?; Something to do with Profiles
[Menu]-[5]-[7] ... The Enhancement Settings menu, which can be accessed if you have ever had the phone in a cradle or a DKU-5 cable has ever been connected. It allows you to select Headset or Loopset modes.
[Menu]-[9] ... ?; Applications menu, most likely.

Security Settings Menu
The Security Settings menu is locked on this phone by default. It allows you to set the phone lock, allowed numbers when the phone is locked, change the lock code, and enable incoming or outgoing call restrictions. The default lock code for phones is the last four digits of your MIN (phone number). You may be able to reset this code by reprogramming your MIN using the SPC/MSL code as listed above. The menu can be accessed via [Menu]-[5]-[8].

thanks to sachin kamble

wbr

[~AKSingh~]

Net Monitor

This section of the phone allows you to view diagnostic information and execute various tests. The codes are four digits long and are split into a group number (first pair) and a test number (last pair). In the code 1234, for example, 12 is the group and 34 is the test. When executed or viewed, these codes are displayed in the top-left corner of the phone in the form 12-34. The following codes I have discovered myself. While more may exist, that is unlikely as you can scroll through them by pressing the up or down arrows once you are viewing one of the codes. (If the code is a test execution, you must enter it directly through the Net Monitor menu option to execute it. Flipping to that page will simply display the name of the test.)

While viewing a test screen, press and hold * until the text display changes and you can scroll through the tests in "explainatory mode" where you can see the abbreviations for the numbers you are looking at. It's kind of like a glossary for the Net Monitor.

0000 ... Disables testing and returns to the normal display mode without disabling the Net Monitor menu option

Group 31: "Big Picture" & Summary Status Info
31-01 ... CSST / CHAN / SP / PPN / XF / -Rxx (Receive Strength, -dBA) / -Txx (Transmit Strength, -dBA) / SO / X / FER
31-02 ... DPCH / DTCH / IDLHO / HHO / IFIDLHO / DAHO / IBIDMO / IBHHO
31-03 ... PN(1-4) / ECK
31-04 ... PN(5-6) / ECK
31-05 ... OWNNUMBER (Own Number) / SL / P / MD / PC
31-06 ... SSS / CHAN (Channel) / SID (System ID) / NID / SD / ID / TM / CAP / ROAM or HOME (Indicates whether phone is on a roam tower or the home network)
31-07 ... V
31-08 ... SID (System ID) / NID / BaseID / PRev / MinPRev
31-09 ... CSST / MMDDYY (Date) / HHMMSS (Time)
31-10 ... TADD / TDROP / TCOMP / TTDROP / WW(1-3)
31-11 ... PP(1-4) / 0EC
31-12 ... PP(5-8) / 0EC
31-13 ... PP(9-12) / 0EC
31-14 ... PP(13-16) / 0EC
31-15 ... PP(1-4) / 0EC
31-16 ... PP(5-8) / 0EC

Group 32: Current Tower Communication Info?
32-01 ... P/C / A/F / SID (System ID) / NID / PzID / PRev / MinRv
32-02 ... CSST / SO / -Rxx (Receive Strength, -dBa) / -Txx (Transmit Strength, -dBa) / FER / MUX
32-03 ... BrType / TERM / SES / CON
32-04 ... CcSt / CcEve / TxBytes / RxBytes
32-05 ... VER / RESET / ST / RTT / NAKR / PR / NAKPR / %NAK / MissFrames
32-06 ... RSt / RE / RMT / FSt / CURR / OvrFl (Overflow) / MAX / RSRq / RSGr
32-07 ... TOTL / NAK / NEW / OLD / IDLE / BLANK / FILL / INV / ER / DISCD
32-08 ... TOTAL / NAK / NEW / OLD / IDLE / BLANK / FILL
32-09 ... RMax / FMax / RUsr / FUsr / RNew / FNew / RRxm / FRxm
32-10 ... SeqTxNext / SeqTxNew / SeqTxUnack / RexmitTimer (Retransmission Timer)
32-11 ... DLen / BytesUnack / REXC / BOFFC / XMITW / CONGW
32-12 ... RMTYPE / CONTP / STATE / SO / MUX
32-13 ... RECVMM / RECVBR / SNTBR

Group 33: Codec Info?
33-01 ... TYPE / VER / RTT / RESET / MXFNK / MXRNK / NGFNK / NGRNK
33-02 ... FSCH(0-1): (F)SCHID / MUX / RC / CODING
33-03 ... RSCH(0-1): (R)SCHID / MUX / RC / CODING
33-04 ... FSCH0: FSCHID / STAT / DUR / RATE / SCCLINDEX / NUMN / SRID
33-05 ... FSCH1: FSCHID / STAT / DUR / RATE / SCCLINDEX / NUMN / SRID
33-06 ... RSCH0: RSCHID / STAT / DUR / RATE / SCRM / SRID
33-07 ... RSCH1: RSCHID / STAT / DUR / RATE / SCRM / SRID
33-08 ... PKTD / SCRMD / USESCRM (SCRM on/off) / USETADD (TADD on/off) / PREARGMT

Group 34: ?
34-01 ... SYNCOK / FAIL / FOCC / WOROK / WORFCO / WORFA / CTRLFI / MDRX
34-02 ... FVCFA / WFLAG / NORMRX / XSTBY / XNORRX / XNOK / XNFAIL / SYNLO
34-03 ... REP10K / FAIL / DECSAM / FOTED / R1BETT / SYNCS / MSGBET / SFLBE

Group 35: ?
35-01 ... FRC / RRC / SOPT / RFCHG / PICHG / FPCM
35-02 ... NOMP / NOMPE / INIP / PS / NS / MREQ / MRSP

Group 36: ????og/AMPS Info?
36-01 ... ACH REQ (Access Request) / ACH RESP (Access Response) / ACC / FAIL / T41 EXPIRED
36-02 ... SEND PRESSED / DACHORIG / PAGE RESP
36-03 ... ORIG / TOTLCALLTIME (Total Call Time) / AMPSTIME (AMPS Time) / LOS / REL / ACKF
36-04 ... 800HHO / ATMTP / PCSHHO / FAIL / CP HHO / PC HHO
36-05 ... CELAMPS / ATMP / PCSAMPS / FAIL / FRAMEOFF / SIDCHNG
36-06 ... AUTH CHALLNG (Authentication Challenge) / BSCHALLENGE (BS Challenge) / REGIST / DATA / ORIGI / PAGE
36-07 ... VOICEPRIVACY (Voice Privacy) / SSDFAIL / SME / PUBLC2PRIVAT (Public to Private on/off) / PRIVAT2PUBLC (Private to Public on/off)
36-08 ... PWR / PCH / ACC8 / MRELAMPSSYNC / NGBRSCANNOPN / GAOM / GSRM
36-09 ... RESEL / NOACC / MISMATC (Mismatch) / REJC / LOCK
36-10 ... REG / 3PwrDn (Power Down) / 0Time / 4Param / 1Pwrup (Power Up) / 5Order / 2Zone / 6Dista (Distance)
36-14 ... DSPASICSWSTK / MIPMDITIMBUS / MEMDMASRCRAM / SCHOTHERSOFT
36-18 ... NETWORK PREF / MOBILE PREF / SLOT / CYCLE / INDEX
36-20 ... PROBEHO / FAIL / ENTRYHO / FAIL / ACCCHAN / FAIL / T72TIMER
36-21 ... 1x-95HDR+GSR / 95-1xHDR+GSR / 1x-AMPS / DYNAMIC / SHO
36-23 ... RETRY TIMER / T50M / T51M / T52M / T40M / T41M / T55M

Group 61: Battery Info
61-01 ... Version / Bars / Mon Bat Volt (Monitor Battery Voltage, millivolts) / Temp (Temperature, tenths of degrees Centigrade?) / Cap (Capacity) / Sby (Standby Level) / ChMo / CS / ChTy
61-02 ... VInst (millivolts) / tRem (millivolts) / VOff (millivolts) / VOn (millivolts) / Flg / Vdmf (millivolts) / BPW / Sta (Status) / VCh (millivolts) / WCh / WInt
61-03 ... Vdmf (millivolts) / Fl1 / Ips / Vbm4 (millivolts) / Fl2 / Ilo / Phi / tElpBM4 / dPhi / tRem
61-04 ... BImp / ChaAmnt (Charge Amount) / Vfull (Voltage Full, millivolts) / Vlow (Voltage Low, millivolts) / VBoot (Voltage Boot, millivolts) / V@Lo (Indicates whether battery is below ideal voltage limit) / Adj / Err
61-05 ... ActInf: byte4 / byte3 / byte2 / byte1
61-06 ... Ibattery (milliamps) / Iphone (milliamps) / Ifeature (milliamps) / disAmount (Discharge amount, milliamp hours)
61-07 ... CSIdle / ActSW / CS state / CS protocol / Batmon state
61-08 ... ChMD / Ch / Vbat (Battery Voltage, millivolts) / # / ChSt (Charger Status) / Ichr / F / AvgCh (Average Charge Rate, milliamps?) / CIch / PWM / bTp (Battery Temperature) / time
61-09 ... Chr / Old / ChM / Mod / Old / HWP / PWM / OSV / Frq / O / B / CSV
61-10 ... -DV / s-DV / dvt / CA / Vbd / BT / sum / MaT / dvt
61-12 ... Varying EM displays 1-4; can change from rel. to rel.
61-13 ... Varying EM displays 5-8; can change from rel. to rel.

Group 62: Reset Info & Factory Flags
62-01 ... Reset reason / Task name (This should display "??? / NO RESET" if the phone has never been reset.)
62-02 ... Unk / Cha / Key / BOF / SW / Int / Sta / DSF / WD / Div / DSP / GSM / DSP / DSP / AWD
62-03 ... Prod / As / Un / IO / Null / Add / Alig / Flas
62-07 ... USE MENU TO DISABLE R&D (Research and Development?) TEST DISPLAYS (I would be careful about running this test!)

Group 63: Phone OS Info
63-03 ... Ptr / Cntr / Task / OWrOut / SetO / Mod / Big
63-05 ... Use menu to select shown task info (asks for test input if run via the menu)
63-06 ... task0 / task1 / task2 / task3 / task4 / task5 / task6 / task7
63-07 ... task8 / ta*** / task10 / task11 / task12 / task13 / task14 / task15
63-08 ... task16 / task17 / task18 / task19 / task20 / task21 / task22 / task23
63-09 ... task24 / task25 / task26 / task27 / task28 / task29 / task30 / task31
63-10 ... task32 / task33 / task34 / task35 / task36 / task37 / task38 / task39
63-11 ... FIQ / IRQ
63-12 ... OS PRE-RESET ERROR (Should display "XX XX NO RES" on the top line if the phone has never been reset.)
63-13 ... OS CURRENT ERROR (Should display "XX XX NO DAT" on the top line if there is no error.)
63-14 ... OS PRE-RESET WARNING
63-15 ... OS CURRENT WARNING
63-16 ... OS PRE-RESET REMARK
63-17 ... OS CURRENT REMARK
63-18 ... usedbyt (Used Bytes) / blks (Used Blocks) / freebyt (Free Bytes) / blks (Free Blocks) / zz / dd / ii / cc / TT
63-19 ... Block Usage: TOP / 2nd / 3rd / 4th (in memory blocks)
63-20 ... FILE / LINE / total count

Group 65: Input Flags?
65-01 ... CCTI / NB / DR / SC / WR / BO
65-02 ... PT / PB / BT / BP / BCTF / IC / IB / IT / IS / PCCC / PDCC
65-03 ... keys pressed

Group 66: Organizer Flags?
66-01 ... TY / TgID / EI / VD / VC / Used / BL01 / BL02 / BL03 / VR
66-02 ... MY / MeID / Dura (Duration) / Mmos / Alrm (Alarm) / ER / VR

Group 68: BER Test
68-01 ... USE MENU TO Start and Stop BER Test
68-02 ... FS / FR / FF / CRC



Group 75: GPS & Location Data
So far, I have only seen this area full of X's. Can anyone confirm that it works under certain conditions or why it would be masked as such?
75-01 ... LATITUDE / LONGITUDE / STATUS / METHOD
75-03 ... Orientation / Semiminor (meters) / Semimajor (meters) / Vertical (meters)
75-04 ... Time / Type / MS Date / MS Time / STATUS
75-05 ... Speed (meters per second) / Heading (degrees) / Altitude (meters) / Fix Type
75-19 ... LS Release ID / LS Release Date
75-30 ... GPS MCU Version / MCU SW Date / GPS DSP Version / DSP SW Date
75-31 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-32 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-33 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-34 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-35 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-36 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-37 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-38 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-39 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-40 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-41 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-42 ... SV(PRN) / C/No (Decibels.Hertz) / Pseudorange / Doppler (Hertz)
75-70 ... AFLT MCU Ver / MCU SW Date / AFLT DSP Ver / DSP SW Date
75-71 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-72 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-73 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-74 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-75 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-76 ... PN / Channel / Phase (Chips) / Ec/Io (Decibels) / RMS (meters)
75-77 ... AFLT: PRQ(s) / NUM.FIX / TBF; GPS: PRQ(s) / NUM.FIX / TBF
75-78 ... PPhase count / Measure times / PRange count / Measure times

thanks to sachin kamble

wbr