80-V1294-1 Yp Dmss Serial Data Icd

CDMA Dual-Mode Subscriber Station
Serial Data
Interface Control Document
80-V1294-1 YP
T
n PS
May 14, 2012
34
om 8:
Submit technical questions at:
l.c :4
c
https://support.cdmatech.com
.
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201
Qualcomm Confidential and Proprietary

Restricted Distribution. Not to be distributed to anyone who is not an employee of either Qualcomm or a subsidiary of
Qualcomm without the express approval of Qualcomm's Configuration Management.
Not to be used, copied, reproduced in whole or in part, nor its contents revealed in any manner to others without the express
written permission of Qualcomm.
Qualcomm reserves the right to make changes to the product(s) or information contained herein without notice. No liability is
assumed for any damages arising directly or indirectly by their use or application. The information provided in this document is
provided on an "as is" basis.
This document contains Qualcomm confidential and proprietary information and must be shredded when discarded.
QUALCOMM is a registered trademark of QUALCOMM Incorporated in the United States and may be registered in other
countries. Other product and brand names may be trademarks or registered trademarks of their respective owners. CDMA2000 is
a registered certification mark of the Telecommunications Industry Association, used under license. ARM is a registered
trademark of ARM Limited.
This technical data may be subject to U.S. and international export, re-export, or transfer ("export") laws. Diversion contrary to
U.S. and international law is strictly prohibited.
QUALCOMM Incorporated
5775 Morehouse Drive
San Diego, CA 92121-1714
U.S.A.
Copyright © 2000-2012 QUALCOMM Incorporated.
All rights reserved.
Contents
1 Introduction ...................................................................................................... 38
1.1 Purpose .................................................................................................................................38
1.2 Scope.....................................................................................................................................38
1.3 Using this manual .................................................................................................................39
1.4 Conventions ..........................................................................................................................42
T
1.5 Revision history ....................................................................................................................42
n PS
1.6 References.............................................................................................................................47
34
1.7 Technical assistance..............................................................................................................48
om 8:
1.8 Acronyms..............................................................................................................................48
l.c :4
. c
te 13
2 Protocol Description ........................................................................................ 49

.7 bk t
2.1 Asynchronous .......................................................................................................................49

41 -b 1 a
3
2.1.1 Connector...............................................................................................................49
15
ei .0
2.1.2 Asynchronous Data Protocol .................................................................................50

0.
w 01
12
2.2 IS-707A–compliant Modem mode .......................................................................................51

ou 3.
2.
zh 201
2.2.1 Connector...............................................................................................................51
2.2.2 Data protocol .........................................................................................................51
3 Packet Definitions ............................................................................................ 52

3.1 Streaming diagnostic communications enhancements .........................................................52
3.2 Error handling .......................................................................................................................53
3.3 DMSS security plan ..............................................................................................................54
3.4 Diagnostic packet structure...................................................................................................55
3.4.1 Version Number (0 / 0x00) ....................................................................................56
3.4.2 ESN (1 / 0x01) .......................................................................................................57
3.4.3 Memory Peek (2 / 0x02, 3 / 0x03, 4 / 0x04)..........................................................58
3.4.4 Memory Poke (5 / 0x05, 6 / 0x06, 7 / 0x07) .........................................................59
3.4.5 Port Output Byte (8 / 0x08) ...................................................................................60
3.4.6 Port Output Word (9 / 0x09) ..................................................................................61
3.4.7 Port Input (10 / 0x0A) ...........................................................................................62
3.4.8 Port Input Word (11 / 0x0B) ..................................................................................63
3.4.9 Status (12 / 0x0C) ..................................................................................................64
3.4.10 Obsolete (13 / 0x0D) .............................................................................................66
3.4.11 Obsolete (14 / 0x0E)..............................................................................................66
80-V1294-1 YP 2 Qualcomm Confidential and Proprietary

MAY CONTAIN U.S. AND INTERNATIONAL EXPORT CONTROLLED INFORMATION
Contents
3.4.12 Logging Mask (15 / 0x0F).....................................................................................66

3.4.13 Log (16 / 0x10) ......................................................................................................66
3.4.14 Nonvolatile Memory Peek (17 / 0x11) ..................................................................68
3.4.15 Nonvolatile Memory Poke (18 / 0x12)..................................................................69
3.4.16 Bad Command (19 / 0x13) ....................................................................................69
3.4.17 Bad Parameters (20 / 0x14) ...................................................................................70
3.4.18 Bad Length (21 / 0x15)..........................................................................................70
3.4.19 Obsolete (22 / 0x16) ..............................................................................................70
3.4.20 Obsolete (23 / 0x17) ..............................................................................................70
3.4.21 Bad Mode (24 / 0x18)............................................................................................71
3.4.22 Temporal Analyzer Graph (25 / 0x19)...................................................................71
3.4.23 Markov Statistics (26 / 0x1A)................................................................................73
3.4.24 Markov Statistics Reset (27 / 0x1B) ......................................................................74
3.4.25 Diag Version (28 / 0x1C).......................................................................................75
T
n PS
3.4.26 Time Stamp (29 / 0x1D) ........................................................................................75
3.4.27 Temporal Analyzer Parameters (30 / 0x1E) ..........................................................76
34
3.4.28 Message (31 / 0x1F) ..............................................................................................77
3.4.29
om 8:
Handset Emulation Keypress (32 / 0x20)..............................................................79
l.c :4
. c
te 13
3.4.30 Handset Emulation Lock/Unlock (33 / 0x21)........................................................82
3.4.31 Handset Emulation Display (34 / 0x22) ................................................................82
.7 bk t
41 -b 1 a
3.4.32 Obsolete (35 / 0x23) ..............................................................................................84

3
15
ei .0
3.4.33 Parameter Set (36 / 0x24) ......................................................................................85

0.
w 01
3.4.34 Obsolete (37 / 0x25) ..............................................................................................85

12
ou 3.
3.4.35 Nonvolatile Item Read (38 / 0x26) ........................................................................86

2.
zh 201
3.4.36 Nonvolatile Item Write (39 / 0x27) .......................................................................87

3.4.37 Obsolete (40 / 0x28) ..............................................................................................88
3.4.38 Mode Change (41 / 0x29) ......................................................................................88
3.4.39 Error Record Retrieval (42 / 0x2A) .......................................................................89
3.4.40 Error Record Clear (43 / 0x2B) .............................................................................91
3.4.41 Symbol Error Rate Counter Reset (44 / 0x2C)......................................................91
3.4.42 Symbol Error Rate Counter Report (45 / 0x2D)....................................................91
3.4.43 Directed Test (46 / 0x2E).......................................................................................93
3.4.44 DIP Switch Retrieval (47 / 0x2F) ..........................................................................96
3.4.45 DIP Switch Set (48 / 0x30)....................................................................................97
3.4.46 Vocoder PCM Loopback (49 / 0x31).....................................................................97
3.4.47 Vocoder PKT Loopback (50 / 0x32)......................................................................98
3.4.48 Obsolete (51 / 0x33) ..............................................................................................98
3.4.49 Obsolete (52 / 0x34) ..............................................................................................98
3.4.50 Call Origination (53 / 0x35) ..................................................................................99
3.4.51 Call End (54 / 0x36) ............................................................................................100
3.4.52 Obsolete (55 / 0x37) ............................................................................................100
3.4.53 Obsolete (56 / 0x38) ............................................................................................100
3.4.54 Obsolete (57 / 0x39) ............................................................................................100

Contents
3.4.55 Switch to Downloader (58 / 0x3A)......................................................................100

3.4.56 Reserved (59 / 0x3B) ...........................................................................................101
3.4.57 Obsolete (60 / 0x3C)............................................................................................101
3.4.58 Obsolete (61 / 0x3D) ...........................................................................................101
3.4.59 Obsolete (62 / 0x3E)............................................................................................101
3.4.60 Phone State (63 / 0x3F) .......................................................................................101
3.4.61 Pilot Sets (64 / 0x40) ...........................................................................................103
3.4.62 Service Programming Code (65 / 0x41) ..............................................................104
3.4.63 Bad SPC Mode (66 / 0x42)..................................................................................105
3.4.64 Parameter Retrieval 2 (67 / 0x43)........................................................................105
3.4.65 Serial Mode Change (68 / 0x44)..........................................................................106
3.4.66 Obsolete (69 / 0x45) ............................................................................................107
3.4.67 Security Password (70 / 0x46).............................................................................107
3.4.68 Bad Security Mode (71 / 0x47) ...........................................................................108
T
n PS
3.4.69 Preferred Roaming List Write (72 / 0x48)...........................................................109
3.4.70 Preferred Roaming List Read (73 / 0x49)............................................................ 111
34
3.4.71 Obsolete (74 / 0x4A) ........................................................................................... 113
3.4.72
om 8:
Subsystem Dispatch (75 / 0x4B) ......................................................................... 114
l.c :4
. c
te 13
3.4.73 Obsolete (76 / 0x4C)............................................................................................ 114
3.4.74 Obsolete (77 / 0x4D) ........................................................................................... 114
.7 bk t
41 -b 1 a
3.4.75 Obsolete (78 / 0x4E)............................................................................................ 115

3
15
ei .0
3.4.76 Obsolete (79 / 0x4F) ............................................................................................ 115

0.
w 01
3.4.77 Obsolete (80 / 0x50) ............................................................................................ 115

12
ou 3.
3.4.78 Feature Query (81 / 0x51).................................................................................... 115

2.
zh 201
3.4.79 Obsolete (82 / 0x52) ............................................................................................ 115

3.4.80 Obsolete (83 / 0x53) ............................................................................................ 115
3.4.81 Obsolete (84 / 0x54) ............................................................................................ 115
3.4.82 IS-95-B Frame Error Rate (85 / 0x55)................................................................. 116
3.4.83 IS-95-B Get F-SCCH Walsh Codes (86 / 0x56) .................................................. 117
3.4.84 IS-95-B Set Maximum Number F-SCCH (87 / 0x57)......................................... 118
3.4.85 IS-95-B Parameter Retrieval (88 / 0x58)............................................................. 118
3.4.86 Embedded File System Operation (89 / 0x59) ....................................................120
3.4.87 Reserved (90 / 0x5A)...........................................................................................127
3.4.88 Reserved (91 / 0x5B) ...........................................................................................127
3.4.89 Communications Configuration (92 / 0x5C) .......................................................127
3.4.90 Obsolete (93 / 0x5D) ...........................................................................................128
3.4.91 Reserved (94 / 0x5E) ...........................................................................................128
3.4.92 Reserved (95 / 0x5F) ...........................................................................................128
3.4.93 Event Report Control (96 / 0x60) ........................................................................128
3.4.94 Event report (96 / 0x60).......................................................................................129
3.4.95 Obsolete (97 / 0x61) ............................................................................................130
3.4.96 Extensible Parameter Retrieval (98 / 0x62).........................................................130
3.4.97 Status Snapshot (99 / 0x63) .................................................................................132

Contents
3.4.98 Reserved (100 / 0x64)..........................................................................................134

3.4.99 Reserved (101 / 0x65)..........................................................................................134
3.4.100 Reserved (102 / 0x66)..........................................................................................134
3.4.101 Reserved (103 / 0x67)..........................................................................................134
3.4.102 Reserved (104 / 0x68)..........................................................................................134
3.4.103 Reserved (105 / 0x69)..........................................................................................134
3.4.104 Reserved (106 / 0x6A).........................................................................................134
3.4.105 Reserved (107 / 0x6B) .........................................................................................134
3.4.106 GPS Session Control (108 / 0x6C) ......................................................................134
3.4.107 Reserved (109 / 0x6D).........................................................................................137
3.4.108 Reserved (110 / 0x6E) .........................................................................................137
3.4.109 Reserved (111 / 0x6F)..........................................................................................137
3.4.110 IS2000 Status (112 / 0x70) ..................................................................................137
3.4.111 RLP Statistics Reset (113 / 0x71) ........................................................................140
T
n PS
3.4.112 TDSO Statistics Reset (114 / 0x72) .....................................................................140
3.4.113 Logging Configuration (115 / 0x73)....................................................................140
34
3.4.114 Reserved (116 / 0x74)..........................................................................................144
3.4.115
om 8:
Reserved (117 / 0x75)..........................................................................................144
l.c :4
. c
te 13
3.4.116 Reserved (118 / 0x76)..........................................................................................144
3.4.117 Reserved (119 / 0x77)..........................................................................................144
.7 bk t
41 -b 1 a
3.4.118 Log On Demand (120 / 0x78)..............................................................................145

3
15
ei .0
3.4.119 Extended Message (121 / 0x79) ..........................................................................145

0.
w 01
3.4.120 Reserved (122 / 0x7A).........................................................................................147

12
ou 3.
3.4.121 Diagnostic Protocol Loopback (123 / 0x7B) .......................................................147

2.
zh 201
3.4.122 Extended Build ID (124 / 0x7C)..........................................................................147

3.4.123 Extended Message Configuration (125 / 0x7D) ..................................................149
3.4.124 Reserved (126 / 0x7E) .........................................................................................155
3.4.125 Reserved (127 / 0x7F) .........................................................................................155
3.4.126 Subsystem Dispatch Version 2 (128 / 0X80).......................................................155
3.4.127 Event Get Mask (129 / 0x81)...............................................................................157
3.4.128 Event Set Mask (130 / 0x82) ...............................................................................158
3.4.129 Reserved (141 / 0x8D).........................................................................................159
3.4.130 Reserved (142 / 0x8E) .........................................................................................159
3.4.131 Reserved (143 / 0x8F) .........................................................................................159
3.4.132 Optimized extended message (146 / 0x92)..........................................................159
3.4.133 Further diagnostic packets ...................................................................................160
4 Diagnostic Packet Summary ......................................................................... 161
5 Log Record Formats ...................................................................................... 165

5.1 Log record structure............................................................................................................166
5.2 Common structures in log records ......................................................................................166
5.2.1 Channel Set masks...............................................................................................166

Contents
5.2.2 Channel radio configurations...............................................................................167

5.2.3 MuxPDU Categories............................................................................................168
5.3 Log Packet DATA...............................................................................................................169
5.3.1 Temporal Analyzer (LOG_CODE 0x1000) (obsolete)........................................169
5.3.2 AGC Power Control (LOG_CODE 0x1001) (obsolete)......................................169
5.3.3 Forward Link Frame Types (LOG_CODE 0x1002) (obsolete)...........................169
5.3.4 Reverse Link Frame Types (LOG_CODE 0x1003) (obsolete) ...........................169
5.3.5 Access Channel (LOG_CODE 0x1004)..............................................................169
5.3.6 Reverse Link Channel Traffic (LOG_CODE 0x1005)........................................169
5.3.7 Sync Channel (LOG_CODE 0x1006) .................................................................169
5.3.8 Paging Channel (LOG_CODE 0x1007) ..............................................................170
5.3.9 Forward Link Channel Traffic (LOG_CODE 0x1008) .......................................170
5.3.10 Forward Link Vocoder (LOG_CODE 0x1009) ...................................................170
5.3.11 Reverse Link Vocoder (LOG_CODE 0x100A) ...................................................170
T
n PS
5.3.12 Finger (LOG_CODE 0x100B) (obsolete) ...........................................................171
5.3.13 Searcher (LOG_CODE 0x100C) (obsolete)........................................................171
34
5.3.14 Reserved (LOG_CODE 0x100D)........................................................................171
om 8:
5.3.15 Markov Frame Rate Statistics (LOG_CODE 0x100E) .......................................171
l.c :4
. c
te 13
5.3.16 Searcher, Ver 2 (LOG_CODE 0x100F) (obsolete)..............................................173
5.3.17 Handset Status (LOG_CODE x1010) (obsolete).................................................173
.7 bk t
41 -b 1 a
5.3.18 Vocoder Error Mask (LOG_CODE 0x1011) .......................................................174

3
15
ei .0
5.3.19 Analog Voice Channel (LOG_CODE 0x1012) ...................................................174

0.
w 01
5.3.20 Access Channel Probe (LOG_CODE 0x1013)....................................................175

12
ou 3.
5.3.21 Reserved (LOG_CODE 0x1014).........................................................................175

2.
zh 201
5.3.22 Test Mobile Command (LOG_CODE 0x1015) (obsolete)..................................175

5.3.23 Sparse AGC/Closed Loop Power Control (LOG_CODE 0x1016) .....................176
5.3.24 Band Change (LOG_CODE 0x1017)..................................................................176
5.3.26 General Temporal Analyzer (LOG_CODE 0x1019) (obsolete) ..........................176
5.3.27 General Temporal Analyzer with Supplemental Channels
(LOG_CODE 0x101A) (obsolete).......................................................................176
5.3.28 Reserved (LOG_CODE 0x101B) ........................................................................177
5.3.29 Analog Forward Channel (LOG_CODE 0x101C) ..............................................177
5.3.30 Analog Reverse Channel (LOG_CODE 0x101D)...............................................177
5.3.31 Analog Handoff (LOG_CODE 0x101E) .............................................................177
5.3.32 FM Slot Statistics (LOG_CODE 0x101F)...........................................................178
5.3.33 FOCC Word Sync Count (LOG_CODE 0x1020) ...............................................179
5.3.34 Reserved (LOG_CODE 0x1021 – 0x1024).........................................................179
5.3.35 RLP Rx Frames (LOG_CODE 0x1025)..............................................................179
5.3.36 RLP Tx Frames (LOG_CODE 0x1026) ..............................................................181
5.3.38 Forward Link Frame Types (LOG_CODE 0x1029) (obsolete)...........................182
5.3.39 Reverse Link Frame Types (LOG_CODE 0x102A) (obsolete) ..........................182

Contents
5.3.40 Fast Forward Power Control (LOG_CODE 0x102B) (obsolete) ........................182

5.3.41 Reverse Power Control (LOG_CODE 0x102C) (obsolete).................................182
5.3.42 Searcher and Finger (LOG_CODE 0x102D) (obsolete) .....................................182
5.3.43 Service Configuration (LOG_CODE 0x102E)....................................................183
5.3.44 Active Set and Channel Configuration (LOG_CODE 0x102F) (obsolete) .........184
5.3.45 Quick Paging Channel (LOG_CODE 0x1030) (obsolete) ..................................184
5.3.46 RLP Statistics (LOG_CODE 0x1031).................................................................185
5.3.47 Simple Test Data Service Option Counters (LOG_CODE 0x1032) ...................186
5.3.49 IS-801 Forward Link (LOG_CODE 0x1036)......................................................189
5.3.50 IS-801 Reverse Link (LOG_CODE 0x1037) ......................................................189
5.3.52 Factory Test Mode Forward CRC Summary (LOG_CODE 0x103A) ................189
5.3.53 Reserved (LOG_CODE 0x103B – 0x103C) .......................................................190
T
n PS
5.3.54 Full test data service option counters (LOG_CODE 0x103D)............................190
5.3.55 Bluetooth General (LOG_CODE 0x103E)..........................................................192
34
5.3.56 Bluetooth Baseband General (LOG_CODE 0x103F) .........................................192
5.3.57
om 8:
Bluetooth Baseband Device-Specific (LOG_CODE 0x1040) ............................193
l.c :4
. c
te 13
5.3.58 Bluetooth Link Manager Protocol (LOG_CODE 0x1041) .................................195
5.3.59 Bluetooth L2CAP (LOG_CODE 0x1042) ..........................................................198
.7 bk t
41 -b 1 a
5.3.60 Bluetooth Service Discovery (LOG_CODE 0x1043) .........................................199

3
15
ei .0
5.3.61 Bluetooth RFCOMM Session-specific (LOG_CODE 0x1044) ..........................200

0.
w 01
5.3.62 Bluetooth RFCOMM DLCI Connection-Specific (LOG_CODE 0x1045) .........200

12
ou 3.
5.3.63 Bluetooth Audio Gateway (LOG_CODE 0x1046)..............................................202

2.
zh 201

5.3.65 Bluetooth LMP Signaling Received (LOG_CODE 0x1048) ..............................202
5.3.66 Bluetooth LMP Signaling Transmitted (LOG_CODE 0x1049) ..........................203
5.3.67 Bluetooth Baseband (L2CAP only) Received (LOG_CODE 0x104A) ..............203
5.3.68 Bluetooth Baseband (L2CAP only) Transmitted (LOG_CODE 0x104B) ..........203
5.3.69 Bluetooth L2CAP Signaling Received (LOG_CODE 0x104C)..........................204
5.3.70 Bluetooth L2CAP Signaling Transmitted (LOG_CODE 0x104D) .....................204
5.3.71 Bluetooth L2CAP Data Received (LOG_CODE 0x104E)..................................204
5.3.72 Bluetooth L2CAP Data Transmitted (LOG_CODE 0x104F)..............................204
5.3.73 Bluetooth SDP Signaling Received (LOG_CODE 0x1050) ...............................205
5.3.74 Bluetooth SDP Signaling Transmitted (LOG_CODE 0x1051)...........................205
5.3.75 Bluetooth RFCOMM Signaling Received (LOG_CODE 0x1052) .....................205
5.3.76 Bluetooth RFCOMM Signaling Transmitted (LOG_CODE 0x1053).................206
5.3.77 Bluetooth RFCOMM Data Received (LOG_CODE 0x1054).............................206
5.3.78 Bluetooth RFCOMM Data Transmitted (LOG_CODE 0x1055) ........................206
5.3.79 Reserved (LOG_CODE 0x1056 – 0x105C) ........................................................207
5.3.80 1xEV-DO Searcher (LOG_CODE 0x105D) (obsolete).......................................207
5.3.81 1xEV-DO Handoff State (LOG_CODE 0x105E)................................................207
5.3.82 1xEV-DO Active Set Pilot (LOG_CODE 0x105F).............................................208

Contents
5.3.83 1xEV-DO Reverse Link Packet Summary (LOG_CODE 0x1060).....................209

5.3.84 1xEV-DO Data Rate Control Channel - ARQ Buffer
(LOG_CODE 0x1061) (obsolete)........................................................................210
5.3.85 1xEV-DO Reverse Traffic Rate Count (LOG_CODE 0x1062)...........................210
5.3.86 1xEV-DO Reverse Power Control (LOG_CODE 0x1063) ................................. 211
5.3.87 1xEV-DO Finger (LOG_CODE 0x1064) (obsolete) ...........................................212
5.3.88 1xEV-DO Debug Hex Dump (LOG_CODE 0x1065) .........................................212
5.3.89 1xEV-DO ARQ Effective Receive Rate (LOG_CODE 0x1066) ........................212
5.3.90 1xEV-DO Forward Traffic Rate Slot Count
(LOG_CODE 0x1067) (obsolete)........................................................................213
5.3.91 1xEV-DO Air Link Summary (LOG_CODE 0x1068) ........................................213
5.3.92 1xEV-DO Power (LOG_CODE 0x1069) ............................................................215
5.3.93 1xEV-DO Forward Link Packet Snapshot (LOG_CODE 0x106A) ....................216
5.3.94 1xEV-DO Session Attempt (LOG_CODE 0x106B) (obsolete) ..........................216
T
n PS
5.3.95 1xEV-DO Access Attempt (LOG_CODE 0x106C) ............................................216
5.3.96 1xEV-DO Reverse Activity Bits Buffer (LOG_CODE 0x106D)........................217
34
5.3.97 1xEV-DO Connection Attempt (LOG_CODE 0x106E) .....................................217
om 8:
5.3.98 1xEV-DO Page message (LOG_CODE 0x106F)................................................219
l.c :4
. c
5.3.99 1xEV-DO RLP Statistics (LOG_CODE 0x1070)................................................220
te 13
5.3.100 1xEV-DO Connection Release (LOG_CODE 0x1071).......................................221

.7 bk t
41 -b 1 a
5.3.101 1xEV-DO Reverse Activity Bits (LOG_CODE 0x1072) ....................................221

3
15
5.3.102 1xEV-DO High Resolution Temporal Analyzer (LOG_CODE 0x1073) ............222
ei .0
0.
w 01
5.3.103 1xEV-DO Reverse Link Packet Snapshot (LOG_CODE 0x1074)......................222

12
ou 3.

2.
zh 201
5.3.105 1xEV-DO Signaling Access Channel (LOG_CODE 0x1076) ............................223

5.3.106 1xEV-DO Signaling Reverse Traffic Channel (LOG_CODE 0x1077) ...............224
5.3.107 1xEV-DO Signaling Control Channel Directed (LOG_CODE 0x1078).............224
5.3.108 1xEV-DO Signaling Forward Traffic Channel (LOG_CODE 0x1079) ..............224
5.3.109 1xEV-DO Pilot Sets (LOG_CODE 0x107A) (obsolete) .....................................224
5.3.110 1xEV-DO Traffic Channel Assignment (LOG_CODE 0x107B) ........................225
5.3.111 1xEV-DO Signaling Control Channel Broadcast (LOG_CODE 0x107C)..........226
5.3.112 1xEV-DO General Temporal Analyzer (LOG_CODE 0x107D)
(obsolete) .............................................................................................................226
5.3.113 1xEV-DO State (LOG_CODE 0x107E) ..............................................................226
5.3.114 1xEV-DO Forward Rate Statistics (LOG_CODE 0x107F) (obsolete) ................227
5.3.115 1xEV-DO Sector (LOG_CODE 0x1080) ............................................................227
5.3.117 1xEV-DO Rx Partial RLP (LOG_CODE 0x1082) ..............................................229
5.3.118 1xEV-DO Tx Partial RLP (LOG_CODE 0x1083) ..............................................230
5.3.119 1xEV-DO Forward Statistics Summary (LOG_CODE 0x1084) .........................231
5.3.120 1xEV-DO Access Channel MAC Capsule (LOG_CODE 0x1085).....................234
5.3.121 1xEV-DO Control Channel MAC Packets (LOG_CODE 0x1086).....................234
5.3.122 s1xEV-DO Receive ATI List (LOG_CODE 0x1087)..........................................234

Contents
5.3.123 1xEV-DO Session Attempt, Ver 2 (LOG_CODE 0x1088)..................................234

5.3.124 1xEV-DO SearcherData – Type1 (LOG_CODE 0x1089) ...................................235
5.3.125 1xEV-DO Finger, Ver 2 (LOG_CODE 0x108A).................................................237
5.3.126 1xEV-DO Pilot Sets, Ver 2 (LOG_CODE 0x108B) ............................................239
5.3.127 1xEV-DO Data Rate Control Channel – ARQ Buffer, Ver 2
(LOG_CODE 0x108C)........................................................................................240
5.3.128 1xEV-DO Acquisition Information (LOG_CODE 0x108D)...............................241
5.3.129 1xEV-DO Reacquisition Information (LOG_CODE 0x108E)............................243
5.3.130 1xEV-DO Sleep Information (LOG_CODE 0x108F) .........................................245
5.3.131 Forward Dedicated Control Channel (LOG_CODE 0x1090) .............................247
5.3.132 Reverse Dedicated Control Channel (LOG_CODE 0x1091)..............................247
5.3.134 Active Set (LOG_CODE 0x1093).......................................................................247
T
n PS
5.3.136 GPS Visit Parameters (LOG_CODE 0x1096).....................................................249
5.3.137 GPS Measurement (LOG_CODE 0x1097) .........................................................250
34
5.3.138 Removable User Identity Module Debug (LOG_CODE 0x1098) ......................250
5.3.139
om 8:
Simple TDSO Counter for DCCH (LOG_CODE 0x1099) (obsolete) ................251
l.c :4
. c
5.3.140 Full TDSO Counter for DCCH (LOG_CODE 0x109A) (obsolete) ....................251
te 13

.7 bk t
41 -b 1 a
5.3.142 Point-to-point Protocol Tx Frames (LOG_CODE 0x109C)................................251

3
15
5.3.143 Point-to-point Protocol Rx Frames (LOG_CODE 0x109D) ...............................251
ei .0
0.
w 01
5.3.144 Security PKX MM Statistics (LOG_CODE 0x109E) .........................................251

12
ou 3.
5.3.145 Security PKX MM Operation (LOG_CODE 0x109F)........................................252

2.
zh 201
5.3.146 Security Encoding Statistics (LOG_CODE 0x10A0)..........................................252

5.3.147 Security Encoding Operation Destination Statistics
(LOG_CODE 0x10A1)........................................................................................252
5.3.148 Security Encoding Operation ARC4 Statistics (LOG_CODE 0x10A2) .............252
5.3.149 Security Encoding Operation Plaintext (LOG_CODE 0x10A3).........................253
5.3.150 Security Encoding Operation Ciphertext (LOG_CODE 0x10A4) ......................253
5.3.151 Security Encoding Operation message Authentication Code
(LOG_CODE 0x10A5)........................................................................................253
5.3.152 Security Hashing Statistics (LOG_CODE 0x10A6)............................................253
5.3.153 Security Hashing Operation Input (LOG_CODE 0x10A7).................................254
5.3.154 Security Hashing Operation Hash (LOG_CODE 0x10A8).................................254
5.3.155 Security Secure Sockets Layer Session (LOG_CODE 0x10A9) ........................254
5.3.156 Security Secure Sockets Layer Session Server Certification
(LOG_CODE 0x10AA).......................................................................................255
5.3.157 Security Secure Sockets Layer Session Cipherdata
(LOG_CODE 0x10AB) .......................................................................................255
5.3.158 Security Secure Sockets Layer Session Statistics (LOG_CODE 0x10AC) ........256
5.3.159 Security Secure Sockets Layer Transmitted Statistics
(LOG_CODE 0x10AD).......................................................................................256

Contents
5.3.160 Security Secure Sockets Layer Received Statistics

(LOG_CODE 0x10AE) .......................................................................................256
5.3.161 Security Secure Sockets Layer Handshake Protocol Hello Request (LOG_CODE
0x10AF)...............................................................................................................257
5.3.162 Security Secure Sockets Layer Handshake Protocol Client Hello
(LOG_CODE 0x10B0)........................................................................................257
5.3.163 Security Secure Sockets Layer Handshake Protocol Server Hello
(LOG_CODE 0x10B1)........................................................................................257
5.3.164 Security Secure Sockets Layer Handshake Protocol Server DH Key Exchange
(LOG_CODE 0x10B2)........................................................................................258
5.3.165 Security Secure Sockets Layer Handshake Protocol Server RSA Key Exchange
(LOG_CODE 0x10B3)........................................................................................258
5.3.166 Security Secure Sockets Layer Handshake Protocol Server Hello Done
(LOG_CODE 0x10B4)........................................................................................258
5.3.167 Security Secure Sockets Layer Handshake Protocol Client DH Key Exchange
T
n PS
(LOG_CODE 0x10B5)........................................................................................259
5.3.168 Security Secure Sockets Layer Handshake Protocol Client RSA Key Exchange
34
(LOG_CODE 0x10B6)........................................................................................259
om 8:
5.3.169 Security Secure Sockets Layer Handshake Protocol Client Finished
l.c :4
c
(LOG_CODE 0x10B7)........................................................................................259
.
te 13
5.3.170 Security Secure Sockets Layer Handshake Protocol Server Finished

.7 bk t
(LOG_CODE 0x10B8)........................................................................................259
41 -b 1 a
3
5.3.171 Security Secure Sockets Layer Cipherspec Protocol Change
15
ei .0
(LOG_CODE 0x10B9)........................................................................................260
0.
w 01
5.3.172 Security Secure Sockets Layer Alert Protocol Alert

12
ou 3.
(LOG_CODE 0x10BA) .......................................................................................260

2.
zh 201
5.3.173 Reserved (LOG_CODE 0x10BB) .......................................................................260

5.3.174 Quick Paging Channel, Ver 2 (LOG_CODE 0x10BC) (obsolete) ......................260
5.3.175 Enhanced Access Probe (LOG_CODE 0x10BD)................................................260
5.3.176 BCCH Frame Information (LOG_CODE 0x10BE) ............................................262
5.3.177 FCCCH Frame Information (LOG_CODE 0x10BF) ..........................................262
5.3.178 FDCH Frame Information (LOG_CODE 0x10C0).............................................263
5.3.179 RDCH Frame Information (LOG_CODE 0x10C1) ............................................266
5.3.180 Fast Forward Power Control Statistics (LOG_CODE 0x10C2)..........................268
5.3.181 Reverse Power Control Statistics (LOG_CODE 0x10C3) ..................................272
5.3.182 Searcher and Finger Info, Ver 2 (LOG_CODE 0x10C4) (obsolete) ...................275
5.3.183 Service Configuration, Ver 2 (LOG_CODE 0x10C5).........................................275
5.3.184 Active Set Information, Ver 2 (LOG_CODE 0x10C6) .......................................280
5.3.185 Reduced Active Set Information (LOG_CODE 0x10C7) ...................................282
5.3.186 Triage (LOG_CODE 0x10C8) (obsolete)............................................................283
5.3.187 Reserved (LOG_CODE 0x10C9 – 0x10CF) .......................................................283
5.3.188 System Arbitration Module (LOG_CODE 0x10D0)...........................................284
5.3.189 Reserved (LOG_CODE 0x10D1)........................................................................285
5.3.190 System Determination Last Main Action (LOG_CODE 0x10D2)......................285
5.3.191 System Determination Last Hybrid Action (LOG_CODE 0x10D3)...................287

Contents
5.3.192 Reserved (LOG_CODE 0x10D4 – 0x10D8).......................................................287

5.3.193 Rate Determination Algorithm Frame Information
(LOG_CODE 0x10D9)........................................................................................288
5.3.194 Reserved (LOG_CODE 0x10DA).......................................................................291
5.3.195 Position Engine Full (LOG_CODE 0x10DB) (obsolete) ....................................291
5.3.196 Position Engine Partial (LOG_CODE 0x10DC) (obsolete) ................................291
5.3.197 Reserved (LOG_CODE 0x10DD – 0x10E1) ......................................................291
5.3.198 MPEG-4 YUV Frame (LOG_CODE 0x10E2)....................................................291
5.3.199 MPEG-4 Clip Statistics (LOG_CODE 0x10E3) (obsolete) ................................291
5.3.200 MPEG-4 Clip Statistics, Ver 2 (LOG_CODE 0x10E4).......................................292
5.3.201 Reserved (LOG_CODE 0x10E5 – 0x1112) ........................................................292
5.3.202 Framed Um Received PPP (LOG_CODE 0x1113) .............................................292
5.3.203 Framed Rm Received PPP (LOG_CODE 0x1114) .............................................293
5.3.204 Framed AN Received PPP (LOG_CODE 0x1115) .............................................293
T
n PS
5.3.205 Reserved (LOG_CODE 0x1116 – 0x1122) .........................................................293
5.3.206 Framed Um Transmit PPP (LOG_CODE 0x1123) .............................................293
34
5.3.207 Framed Rm Transmit PPP (LOG_CODE 0x1124)..............................................293
om 8:
5.3.208 Framed AN Transmit PPP (LOG_CODE 0x1125)..............................................293
l.c :4
. c
te 13
5.3.210 Unframed Um Received PPP (LOG_CODE 0x1133).........................................294

.7 bk t
41 -b 1 a
5.3.211 Unframed Rm Received PPP (LOG_CODE 0x1134) .........................................294

3
15
5.3.212 Unframed AN Received PPP (LOG_CODE 0x1135) .........................................294
ei .0
0.
w 01

12
ou 3.
5.3.214 Unframed Um Transmit PPP (LOG_CODE 0x1143) .........................................294

2.
zh 201
5.3.215 Unframed Rm Transmit PPP (LOG_CODE 0x1144)..........................................294

5.3.216 Unframed AN Transmit PPP (LOG_CODE 0x1145)..........................................295
5.3.218 Position Engine Full, Ver 2 (LOG_CODE 0x1154) ............................................295
5.3.219 Memory Debug (LOG_CODE 0x1155) ..............................................................303
5.3.220 System Level Task Profiling (LOG_CODE 0x1156) ..........................................304
5.3.221 Per Task Profiling (LOG_CODE 0x1157)...........................................................304
5.3.222 Reserved (LOG_CODE 0x1158 – 0x115D) ........................................................305
5.3.223 Position Engine Partial, Ver 2 (LOG_CODE 0x115E)........................................306
5.3.224 Reserved (LOG_CODE 0x115F).........................................................................309
5.3.225 WMS Read (LOG_CODE 0x1160).....................................................................310
5.3.226 Triage, Ver 2 (LOG_CODE 0x1161)...................................................................314
5.3.227 RLP Rx FDCH frames (LOG_CODE 0x1162) ...................................................315
5.3.228 RLP Tx FDCH frames (LOG_CODE 0x1163) ...................................................316
5.3.229 Streaming Reception Statistics (LOG_CODE 0x1164).......................................317
5.3.230 RTSP Describe Request (LOG_CODE 0x1165) .................................................317
5.3.231 RTSP Setup Request (LOG_CODE 0x1166) ......................................................317
5.3.232 RTSP Play Request (LOG_CODE 0x1167) ........................................................318
5.3.233 RTSP Pause Request (LOG_CODE 0x1168) ......................................................318

Contents
5.3.234 RTSP Teardown Request (LOG_CODE 0x1169)................................................318

5.3.235 RTSP Server Response (LOG_CODE 0x116A)..................................................318
5.3.236 RTCP Receiver Report (LOG_CODE 0x116B) ..................................................319
5.3.237 RTCP Sender Report (LOG_CODE 0x116C) .....................................................319
5.3.238 RTP Statistics (LOG_CODE 0x116D) ................................................................320
5.3.239 SDP File (LOG_CODE 0x116E).........................................................................320
5.3.240 RTSP Client Response (LOG_CODE 0x116F) ...................................................320
5.3.241 RTP Header (LOG_CODE 0x1170) ....................................................................321
5.3.242 RTP Packet (LOG_CODE 0x1171).....................................................................321
5.3.243 RTP Audio Sample (LOG_CODE 0x1172).........................................................321
5.3.244 RTP Video Sample (LOG_CODE 0x1173) .........................................................322
5.3.245 Searcher4 – 1X (LOG_CODE 0x1174) (obsolete)..............................................322
5.3.246 Sleep Statistics (LOG_CODE 0x1175) (obsolete) ..............................................322
5.3.247 Service Configuration, Version 3 (LOG_CODE 0x1176) ...................................322
T
n PS
5.3.248 Searcher4 – 1xEV-DO (LOG_CODE 0x1177)....................................................325
5.3.249 Searcher4 – AFLT (LOG_CODE 0x1178) ..........................................................325
34
5.3.250 Enhanced Finger Information (LOG_CODE 0x1179) (obsolete) .......................325
5.3.251
om 8:
Obsolete (LOG_CODE 0x117A).........................................................................325
l.c :4
. c
te 13
5.3.252 WMS Set Routes (LOG_CODE 0x117B) ...........................................................325
5.3.253 Reserved (LOG_CODE 0x117C – 0x117E)........................................................326
.7 bk t
41 -b 1 a
5.3.254 1xEV-DO Multicast Packet Rate Metrics (LOG_CODE 0x117F) ......................326

3
15
ei .0
5.3.255 1xEV-DO Multicast Physical Channel Metrics (LOG_CODE 0x1180) .............328

0.
w 01
5.3.256 1xEV-DO Multicast ECB Status (LOG_CODE 0x1181) ....................................328

12
ou 3.
5.3.257 1xEV-DO Multicast Logical Channel Metrics (LOG_CODE 0x1182)...............329

2.
zh 201
5.3.258 1xEV-DO Debug Display (LOG_CODE 0x1183) ..............................................330

5.3.259 1xEV-DO Tuneaway Information (LOG_CODE 0x1184) ..................................332
5.3.260 1xEV-DO Tuneaway RRI Information (LOG_CODE 0x1185) ..........................333
5.3.261 1xEV-DO Connection Termination Statistics (LOG_CODE 0x1186) ................334
5.3.262 1xEV-DO Connected State Protocol Stack Statistics
(LOG_CODE 0x1187).........................................................................................335
5.3.263 1xEV-DO Connected State Transmit Statistics (LOG_CODE 0x1188)..............337
5.3.264 1xEV-DO Connected State RMAC Statistics (LOG_CODE 0x1189) ................337
5.3.265 1xEV-DO Connected State Search Statistics (LOG_CODE 0x118A) ................339
5.3.266 1xEV-DO FTC Physical Layer Packet (LOG_CODE 0x118B) ..........................341
5.3.267 1xEV-DO RTC Physical Layer Packet (LOG_CODE 0x118C)..........................341
5.3.268 Reserved (LOG_CODE 0x118D – 0x1191) ........................................................341
5.3.269 1xEV-DO RevASUFwdStats (LOG_CODE 0x1192) .........................................342
5.3.270 1xEV-DO RevAMUFwdStats (LOG_CODE 0x1193) ........................................350
5.3.272 MPEG-4 Clip Statistics, Ver 3 (LOG_CODE 0x1198) .......................................353
5.3.273 MOBILE_IP Performance (LOG_CODE 0x1199) .............................................354
5.3.274 Generalized Searcher (LOG_CODEs 0x119A – 0x11A2) ..................................354
5.3.275 Srch TNG Finger Status (LOG_CODE 0x119A) ................................................355

Contents
5.3.276 Srch TNG 1X Searcher Dump (LOG_CODE 0x119B).......................................355

5.3.277 Srch TNG General Status (LOG_CODE 0x119C) ..............................................355
5.3.278 Srch TNG Demod Info (LOG_CODE 0x119D)..................................................355
5.3.279 Srch TNG Sleep Stats (LOG_CODE 0x119E) ....................................................356
5.3.280 Srch TNG Quick Paging Channel Info (LOG_CODE 0x119F) ..........................356
5.3.281 Srch TNG AFC Info (LOG_CODE 0x11A0)......................................................356
5.3.282 Srch TNG Acquisition Info (LOG_CODE 0x11A1)...........................................356
5.3.283 Srch TNG Finger Channel Estimate (LOG_CODE 0x11A2) .............................356
5.3.284 Srch TNG Finger Statistics (LOG_CODE 0x11A3) ...........................................356
5.3.285 Generalized Searcher subpackets ........................................................................356
5.3.286 Reserved (LOG_CODE 0x11A4 – 0x11A8) .......................................................380
5.3.287 Reserved (LOG_CODE 0x11A9)........................................................................380
5.3.288 Reserved (LOG_CODE 0x11AA) .......................................................................380
5.3.289 Reserved (LOG_CODE 0x11AB – 0x11B1).......................................................380
T
n PS
5.3.290 Qtv™ Frame Decode Information (LOG_CODE 0x11B2).................................380
5.3.291 Qtv Frame Render Information (LOG_CODE 0x11B3) .....................................381
34
5.3.292 Qtv A/V Sync Information (LOG_CODE 0x11B4) ............................................381
5.3.293
om 8:
Reserved (LOG_CODE 0x11B5) ........................................................................381
l.c :4
. c
te 13
5.3.294 LOG_QTV_PDS2_STATS (LOG_CODE 0x11B6)............................................381
5.3.295 LOG_QTV_PDS2_GET_REQUEST (LOG_CODE 0x11B7) ...........................381
.7 bk t
41 -b 1 a
5.3.296 LOG_QTV_PDS2_GET_RESP_HEADER (LOG_CODE 0x11B8)..................382

3
15
ei .0
5.3.297 Obsolete (LOG_CODE 0x11B9).........................................................................382

0.
w 01
5.3.298 CMX Audio Input Data (LOG_CODE 0x11BA) ................................................382

12
ou 3.
5.3.299 RTSP OPTIONS Request (LOG_CODE 0x11BB) .............................................382

2.
zh 201
5.3.300 RTSP GET_PARAMETER Request (LOG_CODE 0x11BC) ............................382

5.3.301 RTSP SET_PARAMETER Request (LOG_CODE 0x11BD) .............................383
5.3.302 Qtv Video Bitstream Logging (LOG_CODE 0x11BE).......................................383
5.3.303 Qtv ARM video decode time stats (LOG_CODE 0x11BF) ................................383
5.3.304 Reserved (LOG_CODE 0x11C0) ........................................................................383
5.3.305 LOG_QTV_CMD_LOGGING_C (LOG_CODE 0x11C1).................................384
5.3.306 Reserved (LOG_CODE 0x11C2) ........................................................................385
5.3.307 Qtv video frame decode info (LOG_CODE 0x11C3) .........................................385
5.3.308 LOG_QTV_RTCP_COMPOUND_RR_C (LOG_CODE 0x11C4)....................386
5.3.309 QTV frame buffer release reason (LOG_CODE 0x11C5) ..................................389
5.3.310 QTV audio channel switch frame (LOG_CODE 0x11C6)..................................390
5.3.311 LOG_QTV_RTP_DECRYPTED_PKT_C (LOG_CODE 0x11C7)....................390
5.3.312 Reserved (LOG_CODE 0x11C8 – 0x11EA) .......................................................390
5.3.313 DPL log messages (LOG_CODE 0x11EB).........................................................390
5.3.314 Reserved (LOG_CODE 0x11EC)........................................................................391
5.3.315 Reserved (LOG_CODE 0x11ED) .......................................................................391
5.3.316 Reserved (LOG_CODE 0x11EE)........................................................................391
5.3.317 Reserved (LOG_CODE 0x11F0).........................................................................391

Contents

5.3.322 MFLO RSSI VALUE DYNAMIC PARAMS (LOG_CODE 0x11F5)................391
5.3.323 MFLO CB INFO DYNAMIC PARAMS (LOG_CODE 0x11F6) ......................392
5.3.325 MFLO WIDE LOCAL DYNAMIC PARAMS (LOG_CODE 0x11F8) .............392
5.3.326 MFLO MLC PLP STATS PRERS PARAMS (LOG_CODE 0x11F9) ................393
5.3.327 Reserved (LOG_CODE 0x11FB)........................................................................394
5.3.328 Reserved (LOG_CODE 0x11FD)........................................................................394
5.3.329 Reserved (LOG_CODE 0x11FE) ........................................................................394
5.3.330 MFLO MAC INFO STATIC PARAMS (LOG_CODE 0x1200).........................394
T
n PS
34
5.3.336
om 8:
Reserved (LOG_CODE 0x1206).........................................................................395
l.c :4
. c
te 13
.7 bk t
41 -b 1 a

3
15
ei .0
5.3.340 MFLO FTAP PACKETRECORD HEADER PARAMS

0.
w 01
(LOG_CODE 0x120C)........................................................................................396
12
ou 3.
5.3.341 MFLO FTAP PACKETRECORD PARAMS (LOG_CODE 0x120D)................397

2.
zh 201
5.3.342 MFLO FTAP WOIS Parameters (Log Code 0x120E).........................................398

5.3.343 MFLO FTAP LOIS Parameters (Log Code 0x120F) ..........................................399
5.3.344 MFLO FTAP WID LID Parameters (Log Code 0x1210)....................................399
5.3.345 MFLO OIS PLP STATS DYNAMIC_PARAMS (LOG_CODE 0x1211)...........399
5.3.346 MFLO OIS INFO STATIC PARAMS (LOG_CODE 0x1212) ...........................400
5.3.347 MFLO MLC PLP STATS POST PARAMS (LOG_CODE 0x1213)...................403
5.3.348 MFLO MLC LOCATION DYNAMIC PARAMS (LOG_CODE 0x1214).........405
5.3.349 MFLO BOUND STREAM LIST PARAMS (LOG_CODE 0x1215) .................406
5.3.350 MLO STRM INFO STATIC PARAMS (LOG_CODE 0x1216) .........................407
5.3.353 MFLO_STREAM_PLP_STATS (LOG_CODE 0x1219)....................................408
5.3.354 Reserved (LOG_CODE 0x121A)........................................................................408
5.3.356 Reserved (LOG_CODE 0x121C) ........................................................................408
5.3.358 Reserved (LOG_CODE 0x121E) ........................................................................409
5.3.359 Reserved (LOG_CODE 0x121F) ........................................................................409

Contents
5.3.361 Reserved (LOG_CODE 0x1221)........................................................................409

5.3.370 MFLO UBM WIDE LOCAL DYNAMIC PARAMS(LOG_CODE 0x122A) ...409
T
n PS
34
5.3.378
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a

3
15
ei .0

0.
w 01

12
ou 3.

2.
zh 201
5.3.385 Reserved (LOG_CODE 0x1239)......................................................................... 411

5.3.386 Reserved (LOG_CODE 0x123A)........................................................................ 411
5.3.387 Reserved (LOG_CODE 0x123B – 0x1240) ........................................................ 411
5.3.388 Interference Estimation Based on TPC (LOG_CODE 0x1241).......................... 411
5.3.389 Reserved (LOG_CODE 0x1242 – 0x1272)......................................................... 411
5.3.390 CM Phone Event (LOG_CODE 0x1273) ............................................................ 411
5.3.392 1xEV-DO MultiRLPRevStatistics (LOG_CODE 0x1275) .................................423
5.3.393 1xEV-DO MultiRLPFwdStatistics (LOG_CODE 0x1276).................................423
5.3.394 1xEV-DO Rx Partial MultiRLP Packet (LOG_CODE 0x1277) .........................424
5.3.395 1xEV-DO Tx Partial MultiRLP Packet (LOG_CODE 0x1278)..........................425
5.3.396 1xEV-DO EqualizerData (LOG_CODE 0x1279)................................................426
5.3.397 1xEV-DO EqualizerC2IBuffer (LOG_CODE 0x127A)......................................428
5.3.399 1xEV-DO SearcherData – Type2 (LOG_CODE 0x127C) ..................................429
5.3.400 1xEV-DO RevARLGains (LOG_CODE 0x127D)..............................................431
5.3.401 1xEV-DO RevARLMetrics (LOG_CODE 0x127E) ...........................................433
5.3.402 1xEV-DO RevARMAC3T2PResource (LOG_CODE 0x127F)..........................442
5.3.403 1xEV-DO RevARMAC3PacketInfo (LOG_CODE 0x1280) ..............................444

Contents
5.3.404 1xEV-DO RevARABUpdateInfo (LOG_CODE 0x1281)...................................446

5.3.405 1xEV-DO DRC-ARQ-DSCBuffer (LOG_CODE 0x1282) .................................447
5.3.407 1xEV-DO FwdLinkPktHeaderInfo (LOG_CODE 0x1284) ................................449
5.3.408 1xEV-DO RevARLArqStatus (LOG_CODE 0x1285) ........................................450
5.3.409 1xEV-DO RevARLPktStatus (LOG_CODE 0x1286) .........................................452
5.3.411 1xEV-DO RevAPCPPktStats (LOG_CODE 0x1289) .........................................453
5.3.412 1xEV-DO SubtypeStreamConfig (LOG_CODE 0x128A) ..................................454
5.3.413 1xEV-DO RevARUPTCList (LOG_CODE 0x128B) .........................................456
5.3.414 1xEV-DO EnhMRLPFwdStats (LOG_CODE 0x128C)......................................456
5.3.415 1xEV-DO EnhMRLPRevStats (LOG_CODE 0x128D) ......................................458
5.3.416 1xEV-DO EnhMRLPRxPkts (LOG_CODE 0x128E) ........................................459
5.3.417 1xEV-DO EnhMRLPTxPkts (LOG_CODE 0x128F) .........................................460
T
n PS
5.3.419 1xEV-DO Platinum Multicast Timing Synchronization Algorithm (LOG_CODE
34
0x1291) ................................................................................................................460
5.3.420
om 8:
1xEV-DO EnhancedAccessAttempt (LOG_CODE 0x1292) ..............................462
l.c :4
. c
5.3.421 1xEV-DO AccessProbe (LOG_CODE 0x1293)..................................................463
te 13
5.3.422 1xEV-DO MCFLPktHeaderInfo (LOG_CODE 0x1294) ....................................463

.7 bk t
41 -b 1 a

3
15
5.3.424 1xEV-DO MCAirLinkSummary (LOG_CODE 0x1296)....................................464
ei .0
0.
w 01
5.3.425 1xEV-DO MCSearcherData (LOG_CODE 0x1297)...........................................467

12
ou 3.
5.3.426 1xEV-DO MCDRCARQDSCBuffer (LOG_CODE 0x1298) .............................468

2.
zh 201

5.3.430 1xEV-DO Multicarrier Power (LOG_CODE 0x129C) .......................................470
5.3.432 1xEV-DO MCRLARQStatus (LOG_CODE 0x129E) ........................................472
5.3.433 1xEV-DO MCRLMetrics (LOG_CODE 0x129F)...............................................474
5.3.434 1xEV-DO MCRABUpdateInfo (LOG_CODE 0x12A0).....................................482
5.3.435 1xEV-DO Multicarrier Pilot Sets (LOG_CODE 0x12A1) ..................................483
5.3.436 1xEV-DO MCSUFwdStats (LOG_CODE 0x12A2) ...........................................486
5.3.437 1xEV-DO Multicarrier Multi-User Packet Forward Statistics (LOG_CODE
0x12A3) ...............................................................................................................493
5.3.438 1xEV-DO EnhSleepInfo (LOG_CODE 0x12A4)................................................495
5.3.439 1xEV-DO MultiMRLPFwdStats (LOG_CODE 0x12A5) ...................................498
5.3.440 1xEV-DO MultilinkMRLPRevStats (LOG_CODE 0x12A6) .............................500
5.3.441 1xEV-DO MultiMRLPRxPkts (LOG_CODE 0x12A7) ......................................501
5.3.442 1xEV-DO MultiMRLPTxPkts (LOG_CODE 0x12A8) ......................................503
5.3.443 1xEV-DO MultiMRLPRxProcessing (LOG_CODE 0x12A9)............................504
5.3.444 1xEV-DO MCRLPktStatus (LOG_CODE 0x12AA) ..........................................504

Contents
5.3.445 Reserved (LOG_CODE 0x12AB) .......................................................................505

5.3.446 Reserved (LOG_CODE 0x12AC) .......................................................................506
5.3.447 Reserved (LOG_CODE 0x12AD).......................................................................506
5.3.448 1xEV-DO Platinum Multicast Channel Estimation Algorithm (0x12AE) ..........506
5.3.449 Reserved (LOG_CODE 0x12AF)........................................................................506
5.3.450 1xEV-DO Multicarrier Forward Link Physical Layer Packet (0x12B0).............506
5.3.451 1xEV-DO Multicarrier Reverse Link Physical Layer Packet (0x12B1)..............507
5.3.452 Reserved (0x12B2) ..............................................................................................508
5.3.453 1xEV-DO Multicarrier PCP Packet Statistics (0x12B3) .....................................508
5.3.454 Reserved (0x12B4) ..............................................................................................510
5.3.455 1xEV-DO Overhead Cache Summary (0x12B5).................................................510
5.3.456 1xEV-DO Pilot Sets, Version 3 (0x12B6) ........................................................... 511
5.3.457 Reserved (LOG_CODE 0x12B7 – 0x12C0) .......................................................512
5.3.458 CM Call Event (LOG_CODE 0x12C1)...............................................................512
T
n PS
5.3.459 Reserved (LOG_CODE 0x12C2 – 0x12E4)........................................................525
5.3.460 Reserved (LOG_CODE 0x12E5) ........................................................................525
34
5.3.461 GPS Decoded Ephemeris (LOG_CODE 0x12E6) ..............................................525
5.3.462
om 8:
GPS Decoded Almanac (LOG_CODE 0x12E7) .................................................527
l.c :4
. c
te 13
5.3.463 Transceiver Resource Manager (TRM) (LOG_CODE 0x12E8).........................527
5.3.464 Reserved (LOG_CODE 0x12E9 – 0x132A) .......................................................527
.7 bk t
41 -b 1 a
5.3.465 Logging Requested QoS (LOG_CODE 0x132B)................................................528

3
15
ei .0
5.3.466 Granted QoS Logging (Log Code 0x132C).........................................................537

0.
w 01
5.3.467 QoS State Logging (LOG_CODE 0x132D) ........................................................538

12
ou 3.
5.3.468 Logging Modified QoS (LOG_CODE 0x132E)..................................................539

2.
zh 201
5.3.469 LOG_QDJ_ENQUEUE_C (LOG_CODE 0x132F) ............................................540

5.3.470 LOG_QDJ_DEQUEUE_C (LOG_CODE 0x1330) ............................................541
5.3.471 LOG_QDJ_UPDATE_C (LOG_CODE 0x1331) ................................................542
5.3.472 LOG_QDTX_ENCODER_C (LOG_CODE 0x1332).........................................542
5.3.473 LOG_QDTX_DECODER_C (LOG_CODE 0x1333).........................................543
5.3.474 Global IP Stats (LOG_CODE 0x1335) ...............................................................543
5.3.475 Global IPv6 Stats (LOG_CODE 0x1336) ...........................................................544
5.3.476 Global ICMPv4 Stats (LOG_CODE 0x1337) .....................................................545
5.3.477 Global ICMPv6 Stats (LOG_CODE 0x1338) .....................................................547
5.3.478 Global TCP Stats (Log Packet 0x1339)...............................................................548
5.3.479 Global UDP Stats (LOG_CODE 0x133A) ..........................................................550
5.3.480 PS Statistics Describe All TCP, UDP Instances
(LOG_CODE 0x133B, 0x1439)..........................................................................550
5.3.481 PS Statistics Describe All Memory Pool Instances (LOG_CODE 0x133C).......551
5.3.482 PS Statistics Describe All IFACE Instances (LOG_CODE 0x133D) .................552
5.3.483 PS Statistics Describe All PPP Instances (LOG_CODE 0x133E) ......................553
5.3.484 PS Statistics Describe All ARP Instances (LOG_CODE 0x133F) .....................554
5.3.485 PS Statistics Describe Delta Instances (LOG_CODE 0x1340) ...........................555
5.3.486 PS Statistics Describe Instance TCP Statistics (LOG_CODE 0x1341) ..............556

Contents
5.3.487 PS Statistics Describe Instance UDP Statistics (LOG_CODE 0x1342)..............557

5.3.488 PS Statistics Describe Instance PPP Statistics (LOG_CODE 0x1343) ...............557
5.3.489 PS Statistics Describe Instance IFACE Statistics (LOG_CODE 0x1344) ..........561
5.3.490 PS Statistics Describe Instance Memory Statistics (LOG_CODE 0x1345) ........561
5.3.491 PS Statistics Describe Instance Flow Statistics (LOG_CODE 0x1346)..............562
5.3.492 PS Statistics Describe Instance Physical Link Statistics
(LOG_CODE 0x1347).........................................................................................562
5.3.493 PS Statistics Describe Instance ARP Statistics (LOG_CODE 0x1348) ..............563
5.3.494 PS Statistics Describe Instance LLC Statistics (LOG_CODE 0x1349) ..............565
5.3.495 PS Statistics Describe Instance LLC Statistics (LOG_CODE 0x134A) .............567
5.3.496 PS Statistics Describe Instance ROHC Statistics (LOG_CODE 0x134B) ..........569
5.3.497 PS Statistics Describe Instance RSVP Statistics (LOG_CODE 0x134C) ...........570
5.3.498 PS Statistics Describe All LLC Instances (LOG_CODE 0x134D) .....................571
5.3.499 PS Statistics Describe All RSVP Instances (LOG_CODE 0x134E) ...................572
T
n PS
5.3.500 CM Serving System event (LOG_CODE 0x134F) .............................................573
5.3.501 Multiple Carrier AFC Log Version 6 (LOG_CODE 0x1350) .............................592
34
5.3.503
om 8:
l.c :4
. c
5.3.504 LOG_MDSP_LOG_CHUNKS_C (LOG_CODE 0x1353) .................................593
te 13
5.3.505 LOG_WLAN_RSSI_UPDATE_C (LOG_CODE 0x1354).................................593

.7 bk t
41 -b 1 a
5.3.506 LOG_WLAN_LL_STAT_C (LOG_CODE 0x1355) ..........................................593

3
15
5.3.507 QoS state logging (LOG_CODE 0x1356)...........................................................596
ei .0
0.
w 01
5.3.508 Reserved (LOG_CODE 0x1357 – 0x1358)) .......................................................598

12
ou 3.

2.
zh 201
5.3.510 Logging Requested QoS (Log Code 0x135A).....................................................598

5.3.511 Granted QoS Logging (Log Code 0x135B).........................................................607
5.3.512 Logging Modified QoS (Log Code 0x135C) ......................................................608
5.3.513 Bus Monitor Profiling Information (LOG_CODE 0x135D) ...............................610
5.3.514 LOG_SRCH_PPM_RES_VER_2 (LOG_CODE 0x135E) .................................614
5.3.515 LOG_SRCH_PPM_DB_VER_2 (LOG_CODE 0x135F) ...................................616
5.3.516 LOG_PPM_SM (LOG_CODE 0x1360) .............................................................618
5.3.517 RoHC compressor (LOG_CODE 0x1361)..........................................................620
5.3.518 RoHC decompressor (LOG_CODE 0x1362) ......................................................621
5.3.519 RoHC feedback compressor (LOG_CODE 0x1363) ..........................................622
5.3.520 RoHC feedback decompressor (LOG_CODE 0x1364).......................................623
5.3.521 LOG_BT_HCI_CMD_C (LOG_CODE 0x1365)................................................624
5.3.522 LOG_BT_HCI_EV_C (LOG_CODE 0x1366) ...................................................626
5.3.523 LOG_BT_HCI_TX_ACL_C (LOG_CODE 0x1367) .........................................627
5.3.524 LOG_BT_HCI_RX_ACL_C (LOG_CODE 0x1368) .........................................628
5.3.526 Obsolete (LOG_CODE 0x136A) ........................................................................628

Contents

5.3.531 LOG_CONVERGED_GPS_CLOCK_REPORT_C (LOG_CODE 0x136F)......629
5.3.532 LOG_CONVERGED_GPS_POSITION_REPORT_C
(LOG_CODE 0x1370).........................................................................................630
5.3.533 LOG_CONVERGED_GPS_MEASUREMENT_REPORT_C
(LOG_CODE 0x1371).........................................................................................635
5.3.534 LOG_CONVERGED_GPS_RF_STATUS_REPORT_C
(LOG_CODE 0x1372).........................................................................................638
5.3.535 LOG_VOIP_TO_CDMA_HANDOVER_MSG_C (LOG_CODE 0x1373)
(obsolete) .............................................................................................................640
5.3.536 LOG_GPS_PRESCRIBED_DWELL_RESULT_C (LOG_CODE 0x1374) ......641
T
n PS
5.3.540 Reserved (LOG CODE 0x1378)..........................................................................643
34
om 8:
5.3.542 Reserved (LOG CODE 0x137A).........................................................................643
l.c :4
c
5.3.543 Reserved (LOG CODE 0x137B) .........................................................................643
.
te 13
5.3.544 CGPS_PDSM_POSITION_REPORT_CALLBACK (LOG CODE 0x137C) ....643

.7 bk t
5.3.545 Reserved (LOG CODE 0x137D).........................................................................647

41 -b 1 a
3
5.3.546 Reserved (LOG CODE 0x137E) .........................................................................647
15
ei .0

0.
w 01
12

ou 3.

2.
zh 201

5.3.552 LOG_CGPS_PDSM_EXT_STATUS_NMEA_REPORT
(LOG_CODE 0x1384).........................................................................................647
5.3.555 LOG_CGPS_REP_SVR_RX_LOG_PACKET_C (LOG_CODE 0x1387).........649
5.3.556 LOG_UMTS_TO_CDMA_HANDOVER_PCH_MSG_C
(LOG_CODE 0x1388).........................................................................................651
5.3.557 LOG_UMTS_TO_CDMA_HANDOVER_TCH_MSG_C
(LOG_CODE 0x1389).........................................................................................651
5.3.558 LOG_CONVERGED_GPS_IQ_REPORT_C (LOG_CODE 0x138A) ..............652
5.3.559 LOG_VOIP_TO_CDMA_PCH_HANDOVER_MSG_C
(LOG_CODE 0x138B)........................................................................................657
5.3.560 LOG_VOIP_TO_CDMA_ACH_HANDOVER_MSG_C
(LOG_CODE 0x138C)........................................................................................657
5.3.561 LOG_VOIP_TO_CDMA_FTC_HANDOVER_MSG_C
(LOG_CODE 0x138D)........................................................................................658
5.3.562 QMI Link 1 RX (LOG_CODE 0x138E) .............................................................658

Contents
5.3.563 QMI Link 1 TX (LOG_CODE 0x138F)..............................................................658

5.3.564 Reserved (LOG_CODE 0x138G – 0x13AE) ......................................................658
5.3.565 QoS Info Code Update Logging (LOG_CODE 0x13AF) ...................................659
5.3.566 Reserved (LOG_CODE 0x13B0) ........................................................................659
5.3.567 Reserved (LOG_CODE 0x13B1) ........................................................................659
5.3.568 LOG_DEC_CRC_FRAME_C (LOG_CODE 0x13B2) ......................................659
5.3.569 LOG_FLUTE_SESSION_INFO_C (LOG_CODE 0x13B3) ..............................659
5.3.570 LOG_FLUTE_ADP_FILE_INFO_C (LOG_CODE 0x13B4)............................660
5.3.571 LOG_FLUTE_FILE_REQ_INFO_C (LOG_CODE 0x13B5)............................660
5.3.572 LOG_FLUTE_FDT_INST_C (LOG_CODE 0x13B6) .......................................661
5.3.573 LOG_FLUTE_FDT_INFO_C (LOG_CODE 0x13B7).......................................661
5.3.574 LOG_FLUTE_FILE_INFO_C (LOG_CODE 0x13B8)......................................662
5.3.575 LOG_VOIP_TO_CDMA_3G1X_PARAMETERS_C
(LOG_CODE 0x13B9)........................................................................................662
T
n PS
5.3.576 Reserved (LOG_CODE 0x13BA) ......................................................................664
5.3.577 Reserved (LOG_CODE 0x13BB) ......................................................................664
34
5.3.578 Reserved (LOG_CODE 0x13BC) ......................................................................664
5.3.579
om 8:
Reserved (LOG_CODE 0x13BD) .......................................................................664
l.c :4
. c
5.3.580 LOG_FLUTE_ADP_FILE_C (LOG_CODE 0x13BE).......................................665
te 13
5.3.581 LOG_FLUTE_FDT_INST_FILE_C (LOG_CODE 0x13BF) ............................666

.7 bk t
41 -b 1 a
5.3.582 LOG_FLUTE_FDT_ENTRIES_INFO_C (LOG_CODE 0x13C0) ....................667

3
15
5.3.583 LOG_FLUTE_FILE_C (LOG_CODE 0x13C1) .................................................668
ei .0
0.
w 01
5.3.584 Reserved (LOG_CODE 0x13C2) .......................................................................668

12
ou 3.

2.
zh 201

5.3.590 Reserved (LOG_CODE 0x13CB) ......................................................................669
5.3.591 LOG_DEC_XSCALE_YUV_FRAME_C (LOG_CODE 0x13CC) ...................669
5.3.592 LOG_DEC_XSCALE_CRC_FRAME_C (LOG_CODE 0x13CD)....................669
5.3.593 Reserved (LOG_CODE 0x13CE).......................................................................670
5.3.594 LOG_GPS_DCME_SRCH_JOB_COMPLETED_C (LOG_CODE 0x13CF) ...670
5.3.595 Reserved (LOG_CODE 0x13D0).......................................................................670
5.3.598 Reserved (LOG_CODE 0x13D3 – 0x13DA) ......................................................671
5.3.599 Reserved (LOG_CODE 0x13DB) ......................................................................671
5.3.600 Reserved (LOG_CODE 0x13DD – 0x13DE)......................................................671
5.3.601 LOG_ROHC_COMPRESSOR_STATS_C (LOG_CODE 0x13DF) ..................671
5.3.602 LOG_ROHC_DECOMPRESSOR_STATS_C (LOG_CODE 0x13E0)..............672
5.3.603 LOG_SENSOR_KF_INFO_C (LOG_CODE 0x13E1) ......................................673
5.3.604 LOG_SENSOR_INT_MEAS_C (LOG_CODE 0x13E2) ...................................676

Contents
5.3.605 LOG_SENSOR_BIAS_CALIBRATION_C (LOG_CODE 0x13E3) .................679

5.3.606 LOG_DTV_ISDB_TS_PACKETS (LOG_CODE 0x13E4) ...............................680
5.3.607 LOG_DTV_ISDB_PES_PACKETS (LOG_CODE 0x13E5) .............................680
5.3.608 LOG_DTV_ISDB_SECTIONS (LOG_CODE 0x13E6) ....................................681
5.3.609 LOG_DTV_ISDB_BUFFERING (LOG_CODE 0x13E7) .................................681
5.3.610 LOG_WLAN_SYS_ACQ_HO_C (LOG_CODE 0x13E8).................................682
5.3.611 LOG_WLAN_GEN_CONFIG_PARAMS_C (LOG_CODE 0x13E9) ...............683
5.3.612 Reserved (LOG_CODE 0x13EA – 0x1414) .......................................................686
5.3.613 Reserved (LOG_CODEs 0x1415 – 0x1418) ......................................................686
5.3.614 Reserved (LOG_CODEs 0x1419 – 0x141C) .....................................................687
5.3.615 Reserved (LOG_CODE 0x141D – 0x1425)........................................................687
T
n PS
34
5.3.621 Reserved (LOG_CODE 0x142B) .......................................................................687
5.3.622
om 8:
Reserved (LOG_CODE 0x142C) .......................................................................687
l.c :4
. c
te 13
5.3.623 Reserved (LOG_CODE 0x142D).......................................................................687
.7 bk t
41 -b 1 a

3
15
ei .0

0.
w 01
5.3.627 ARM11 Performance Counters (LOG_CODE 0x1436)......................................687

12
ou 3.
5.3.628 PS Statistics Describe All Flow Instances (LOG_CODE 0x1437) .....................688

2.
zh 201
5.3.629 PS Statistics Describe All Physical Link Instances (LOG_CODE 0x1438) .......689
5.3.630 Searcher 4 Multicarrier HDR (LOG_CODE 0x143A)........................................690
5.3.631 PS Statistics Describe All IPHC Instances (LOG_CODE 0x143B)....................691
5.3.632 PS Statistics Describe All ROHC Instances (LOG_CODE 0x143C)..................691
5.3.636 LOG_CGPS_ME_DPO_STATUS_C (LOG_CODE 0x1440) ............................692
5.3.641 CGPS DIAG Successful Fix Count (LOG_CODE 0x1455) ...............................695
5.3.642 CGPS MC Track Dynamic Power Optimization Status
(LOG_CODE 0x1456).........................................................................................695

Contents
5.3.647 Reserved (LOG _CODE 0x145E) .......................................................................696

5.3.648 Reserved (LOG _CODE 0x145F) ......................................................................696
5.3.649 Reserved (LOG _CODE 0x1460)........................................................................696
5.3.650 Reserved (LOG _CODE 0x1461).......................................................................696
5.3.652 LOG_GNSS_POSITION_REPORT (LOG_CODE 0x1476)..............................696
5.3.653 LOG_GNSS_GPS_MEASUREMENT_REPORT_C (LOG_CODE 0x1477)....703
5.3.654 LOG_GNSS_CLOCK_REPORT_C (LOG_CODE 0x1478)..............................706
5.3.656 Reserved (LOG _CODE 0x147A).......................................................................707
5.3.657 LOG_GNSS_CD_DB_REPORT_C (LOG_CODE 0x147B)..............................708
5.3.658 Reserved (LOG _CODE 0x147C) .......................................................................713
5.3.659 Reserved (LOG _CODE 0x147D).......................................................................713
5.3.660 LOG_GNSS_PRX_RF_HW_STATUS_REPORT_C (LOG _CODE 0x147E) ..713
T
n PS
5.3.661 LOG_GNSS_DRX_RF_HW_STATUS_REPORT_C (LOG _CODE 0x147F)..715
5.3.662 LOG_GNSS_GLONASS_MEASUREMENT_REPORT_C
34
(LOG _CODE 0x1480)........................................................................................717
5.3.663
om 8:
LOG_GNSS_GPS_HBW_RXD_MEASUREMENT_C
l.c :4
. c
(LOG _CODE 0x1481)........................................................................................720
te 13
5.3.664 LOG_GNSS_PDSM_POSITION_REPORT_CALLBACK_C
.7 bk t
41 -b 1 a
(LOG _CODE 0x1482)........................................................................................723

3
15
ei .0

0.
w 01
12
5.3.667 LOG_CGPS_WB_FFT_STATS_C (LOG _CODE 0x1487)...............................727

ou 3.
2.
zh 201
5.3.668 LOG_CGPS_SLOW_CLOCK_CALIB_REPORT_C (LOG _CODE 0x1488)..727

5.3.674 LOG_GNSS_PDSM_SET_PARAMETERS_C (LOG _CODE 0x148F) ...........728
5.3.675 LOG_GNSS_PDSM_PD_EVENT_CALLBACK_C (LOG _CODE 0x1490)...734
5.3.676 LOG_GNSS_PDSM_PA_EVENT_CALLBACK_C (LOG _CODE 0x1491) ...738
5.3.679 LOG_GNSS_PDSM_EXT_STATUS_MEAS_REPORT_C
(LOG _CODE 0x1494)........................................................................................743
5.3.680 LOG_GNSS_SM_ERROR_C (LOG _CODE 0x1495) ......................................744
5.3.686 Reserved (LOG _CODE 0x149B) .......................................................................745

Contents

5.3.690 Reserved (LOG _CODE 0x149F) .......................................................................745
5.3.691 Reserved (LOG _CODE 0x14A0).......................................................................745
5.3.698 Reserved (LOG _CODE 0x14AA)......................................................................745
5.3.699 Reserved (LOG _CODE 0x14AB) ......................................................................745
5.3.700 Reserved (LOG _CODE 0x14AC) ......................................................................746
T
n PS
5.3.701 Reserved (LOG _CODE 0x14AD)......................................................................746
5.3.702 Reserved (LOG _CODE 0x14B0) .......................................................................746
34
5.3.704
om 8:
Reserved (LOG _CODE 0x14B2) .......................................................................746
l.c :4
. c
te 13
.7 bk t
41 -b 1 a

3
15
ei .0

0.
w 01

12
ou 3.

2.
zh 201

5.3.712 Reserved (LOG _CODE 0x14BB) ......................................................................746
5.3.713 Reserved (LOG _CODE 0x14BC) ......................................................................746
5.3.714 Reserved (LOG _CODE 0x14BD) ......................................................................747
5.3.715 Reserved (LOG _CODE 0x14BE).......................................................................747
5.3.716 Reserved (LOG _CODE 0x14BF).......................................................................747
5.3.717 Reserved (LOG _CODE 0x14C0) .......................................................................747
5.3.726 LOG_BLAST_TASKPROFILE_C (LOG _CODE 0x14CA) .............................747
5.3.727 LOG_BLAST_TASKPROFILE_C (LOG _CODE 0x14CB) .............................749
5.3.728 Reserved (LOG _CODE 0x14CE).......................................................................749
5.3.729 LOG_DATA_MUX_RX_RAW_PACKET (LOG _CODE 0x14D3) ..................750

Contents
5.3.730 LOG_DATA_MUX_TX_RAW_PACKET (LOG _CODE 0x14D4) ..................750

5.3.731 LOG_DATA_MUX_RX_FRAME_PACKET (LOG _CODE 0x14D5) .............750
5.3.732 LOG_DATA_MUX_TX_FRAME_PACKET (LOG _CODE 0x14D6) .............751
5.3.733 Reserved (LOG _CODE 0x14D7).......................................................................751
5.3.734 Temperature monitoring parameters (LOG _CODE 0x14D8) ............................752
5.3.735 Reserved (LOG _CODE 0x14D9).......................................................................752
5.3.736 Reserved (LOG _CODE 0x14DA)......................................................................752
5.3.737 Reserved (LOG _CODE 0x14DB) ......................................................................752
5.3.738 Reserved (LOG _CODE 0x14DC) ......................................................................752
5.3.739 Reserved (LOG _CODE 0x14DD)......................................................................752
5.3.740 LOG_GNSS_OEMDRE_MEASUREMENT_REPORT_C (LOG _CODE
0x14DE)...............................................................................................................753
5.3.741 LOG_GNSS_OEMDRE_POSITION_REPORT_C (LOG _CODE 0x14E0).....757
5.3.742 LOG_GNSS_OEMDRE_SVPOLY_REPORT_C (LOG _CODE 0x14E1)........760
T
n PS
5.3.743 Reserved (LOG _CODE 0x14E3) .......................................................................762
34
5.3.746
om 8:
Reserved (LOG _CODE 0x14E6) .......................................................................762
l.c :4
. c
te 13

.7 bk t
41 -b 1 a

3
15
5.3.750 Reserved (LOG _CODE 0x14EA) ......................................................................762
ei .0
0.
w 01
5.3.751 Reserved (LOG _CODE 0x14EB).......................................................................762

12
ou 3.
5.3.752 LOG_1X_ADV_FET_STATS_C (LOG _CODE 0x14EC) ................................762

2.
zh 201
5.3.753 LOG_1X_ADV_FET_STATS_C (LOG _CODE 0x14ED) ................................763

5.3.754 Reserved (LOG _CODE 0x14EF) .......................................................................766
5.3.755 LOG_SNS_SENSOR1_REQUEST_C (LOG _CODE 0x14F0).........................766
5.3.756 LOG_SNS_SENSOR1_RESPONSE_C (LOG _CODE 0x14F1).......................767
5.3.757 LOG_SNS_SENSOR1_INDICATION_C (LOG _CODE 0x14F2)....................768
5.3.758 Reserved (LOG _CODE 0x14F3) .......................................................................769
5.3.761 Reserved (LOG _CODE 0x14FC).......................................................................769
5.3.762 Reserved (LOG _CODE 0x14FD).......................................................................769
5.3.763 Reserved (LOG _CODE 0x14FE) .......................................................................769
5.3.764 Reserved (LOG _CODE 0x14FF) .......................................................................769

Contents

5.3.776 Reserved (LOG _CODE 0x150B) .......................................................................770
5.3.778 LOG_GNSS_SENSOR_STREAMING_READY_STATUS (LOG_CODE
0x150D) ...............................................................................................................770
5.3.779 LOG_GNSS_TIME_SYNC_REQ (LOG_CODE 0x150E) ................................770
5.3.780 LOG_GNSS_INJECT_TIME_SYNC_DATA (LOG_CODE 0x150F)...............771
5.3.781 LOG_GNSS_INJECT_SENSOR_DATA (LOG_CODE 0x1510) ......................771
5.3.782 LOG_GNSS_GET_SENSOR_CONFIG_RESPONSE
(LOG_CODE 0x1511).........................................................................................772
5.3.783 LOG_GNSS_SET_SENSOR_CONFIG (LOG_CODE 0x1512)........................773
T
n PS
34
om 8:
l.c :4
. c
te 13
5.3.789 LOG_SNS_DSPS_PWR_C (LOG_CODE 0x151B) ..........................................774

.7 bk t
41 -b 1 a
5.3.790 LOG_SNS_RAW_I2C_DATA_C (LOG_CODE 0x151C) .................................774

3
15
ei .0
0.
w 01

12
ou 3.
5.3.793 Reserved (LOG _CODE 0x151F) .......................................................................775

2.
zh 201

5.3.795 MCS QCSI Packet (LOG_CODE 0x1544) .........................................................775
5.3.798 LOG_GNSS_FAST_TCAL_C (LOG _CODE 0x1567) .....................................776
5.3.803 LOG_LOC_LTE_OTDOA_PRS_RSTD_MEAS_C (LOG _CODE 0x1599) ....777
5.4 Logging mask bits...............................................................................................................780
6 Nonvolatile Memory Items ............................................................................. 783

6.1 Nonvolatile memory item codes .........................................................................................783
6.2 Nonvolatile memory items (ITEM_DATA)........................................................................784
6.2.1 Item ID 0 ESN .....................................................................................................784
6.2.2 Item ID 1 ESN_CHKSUM ..................................................................................784
6.2.3 Item ID 2 VERNO_MAJ .....................................................................................784

Contents
6.2.4 Item ID 3 VERNO_MIN .....................................................................................784

6.2.5 Item ID 4 SCM ....................................................................................................785
6.2.6 Item ID 5 SLOT_CYCLE_INDEX .....................................................................785
6.2.7 Item ID 6 MOB_CAI_REV.................................................................................785
6.2.8 Item ID 7 MOB_FIRM_REV..............................................................................785
6.2.9 Item ID 8 MOB_MODEL ...................................................................................786
6.2.10 Item ID 9 CONFIG_CHKSUM...........................................................................786
6.2.11 Item ID 10 PREF_MODE ...................................................................................786
6.2.12 Item ID 11 CDMA_PREF_SERV .......................................................................787
6.2.13 Item ID 12 ANALOG_PREF_SERV ..................................................................787
6.2.14 Item ID 13 CDMA_SID_LOCK .........................................................................788
6.2.15 Item ID 14 CDMA_SID_ACQ............................................................................788
6.2.16 Item ID 15 ANALOG_SID_LOCK.....................................................................789
6.2.17 Item ID 16 ANALOG_SID_ACQ .......................................................................789
T
n PS
6.2.18 Item ID 17 ANALOG_FIRSTCHP .....................................................................789
6.2.19 Item ID 18 ANALOG_HOME_SID....................................................................790
34
6.2.20 Item ID 19 ANALOG_REG................................................................................790
6.2.21
om 8:
Item ID 20 PCDMACH .......................................................................................790
l.c :4
. c
te 13
6.2.22 Item ID 21 SCDMACH .......................................................................................790
6.2.23 Item ID 22 PPCNCH (obsolete) ..........................................................................791
.7 bk t
41 -b 1 a
6.2.24 Item ID 23 SPCNCH (obsolete) ..........................................................................791

3
15
ei .0
6.2.25 Item ID 24 NAM_CHKSUM ..............................................................................791

0.
w 01
6.2.26 Item ID 25 A_KEY (not supported) ....................................................................791

12
ou 3.
6.2.27 Item ID 26 A_KEY_CHKSUM (obsolete)..........................................................791

2.
zh 201
6.2.28 Item ID 27 SSD_A ..............................................................................................791

6.2.29 Item ID 28 SSD_A_CHKSUM (obsolete) ..........................................................791
6.2.30 Item ID 29 SSD_B...............................................................................................792
6.2.31 Item ID 30 SSD_B_CHKSUM (obsolete)...........................................................792
6.2.32 Item ID 31 COUNT (not supported) ...................................................................792
6.2.33 Item ID 32 MIN1 .................................................................................................792
6.2.34 Item ID 33 MIN2 .................................................................................................792
6.2.35 Item ID 34 MOB_TERM_HOME.......................................................................793
6.2.36 Item ID 35 MOB_TERM_FOR_SID ..................................................................793
6.2.37 Item ID 36 MOB_TERM_FOR_NID..................................................................793
6.2.38 Item ID 37 ACCOLC ..........................................................................................794
6.2.39 Item ID 38 SID_NID ...........................................................................................794
6.2.40 Item ID 39 MIN_CHKSUM................................................................................794
6.2.41 Item ID 40 CURR_NAM ....................................................................................795
6.2.42 Item ID 41 ORIG_MIN (obsolete) ......................................................................795
6.2.43 Item ID 42 AUTO_NAM ....................................................................................795
6.2.44 Item ID 43 NAME_NAM....................................................................................795
6.2.45 Item ID 44 NXTREG...........................................................................................795
6.2.46 Item ID 45 LSTSID .............................................................................................796

Contents
6.2.47 Item ID 46 LOCAID............................................................................................796

6.2.48 Item ID 47 PUREG..............................................................................................796
6.2.49 Item ID 48 ZONE_LIST......................................................................................796
6.2.50 Item ID 49 SID_NID_LIST.................................................................................797
6.2.51 Item ID 50 DIST_REG........................................................................................797
6.2.52 Item ID 51 LAST_CDMACH (obsolete) ............................................................797
6.2.53 Item ID 52 CALL_TIMER (obsolete).................................................................797
6.2.54 Item ID 53 AIR_TIMER .....................................................................................797
6.2.55 Item ID 54 ROAM_TIMER ................................................................................798
6.2.56 Item ID 55 LIFE_TIMER (obsolete)...................................................................798
6.2.57 Item ID 56 RUN_TIMER....................................................................................798
6.2.58 Item ID 57 DIAL .................................................................................................798
6.2.59 Item ID 58 STACK ..............................................................................................799
6.2.60 Item ID 59 STACK_IDX.....................................................................................800
T
n PS
6.2.61 Item ID 60 PAGE_SET (obsolete).......................................................................800
6.2.62 Item ID 61 PAGE_MSG (obsolete) .....................................................................800
34
6.2.63 Item ID 62 EAR_LVL .........................................................................................800
6.2.64
om 8:
Item ID 63 SPEAKER_LVL................................................................................800
l.c :4
. c
te 13
6.2.65 Item ID 64 RINGER_LVL ..................................................................................801
6.2.66 Item ID 65 BEEP_LEVEL ..................................................................................801
.7 bk t
41 -b 1 a
6.2.67 Item ID 66 CALL_BEEP ....................................................................................801

3
15
ei .0
6.2.68 Item ID 67 CONT_KEY_DTMF.........................................................................801

0.
w 01
6.2.69 Item ID 68 CONT_STR_DTMF (obsolete) ........................................................802

12
ou 3.
6.2.70 Item ID 69 SVC_AREA_ALERT .......................................................................802

2.
zh 201
6.2.71 Item ID 70 CALL_FADE_ALERT .....................................................................802

6.2.72 Item ID 71 BANNER ..........................................................................................802
6.2.73 Item ID 72 LCD...................................................................................................802
6.2.74 Item ID 73 AUTO_POWER (obsolete)...............................................................802
6.2.75 Item ID 74 AUTO_ANSWER.............................................................................803
6.2.76 Item ID 75 AUTO_REDIAL ...............................................................................803
6.2.77 Item ID 76 AUTO_HYPHEN .............................................................................803
6.2.78 Item ID 77 BACK_LIGHT..................................................................................803
6.2.79 Item ID 78 AUTO_MUTE (obsolete) .................................................................804
6.2.80 Item ID 79 MAINTRSN......................................................................................804
6.2.81 Item ID 80 LCKRSN_P.......................................................................................804
6.2.82 Item ID 81 LOCK................................................................................................804
6.2.83 Item ID 82 LOCK_CODE ...................................................................................804
6.2.84 Item ID 83 AUTO_LOCK...................................................................................805
6.2.85 Item ID 84 CALL_RSTRC..................................................................................805
6.2.86 Item ID 85 SEC_CODE ......................................................................................805
6.2.87 Item ID 86 HORN_ALERT (obsolete)................................................................805
6.2.88 Item ID 87 ERR_LOG.........................................................................................805
6.2.89 Item ID 88 UNIT_ID (obsolete) ..........................................................................806

Contents
6.2.90 Item ID 89 FREQ_ADJ (obsolete) ......................................................................806

6.2.91 Item ID 90 VBATT..............................................................................................806
6.2.92 Item ID 91 FM_TX_PWR ...................................................................................806
6.2.93 Item ID 92 FR_TEMP_OFFSET.........................................................................807
6.2.94 Item ID 93 DM_IO_MODE (obsolete) ...............................................................807
6.2.95 Item ID 94 CDMA_TX_LIMIT ..........................................................................807
6.2.96 Item ID 95 FM_RSSI ..........................................................................................807
6.2.97 Item ID 96 CDMA_RIPPLE ...............................................................................807
6.2.98 Item ID 97 CDMA_RX_OFFSET.......................................................................807
6.2.99 Item ID 98 CDMA_RX_POWER .......................................................................808
6.2.100 Item ID 99 CDMA_RX_ERROR........................................................................808
6.2.101 Item ID 100 CDMA_TX_SLOPE_1 ...................................................................808
6.2.102 Item ID 101 CDMA_TX_SLOPE_2 ...................................................................808
6.2.103 Item ID 102 CDMA_TX_ERROR ......................................................................808
T
n PS
6.2.104 Item ID 103 PA_CURRENT_CTL (obsolete).....................................................809
6.2.105 Item ID 104 SONY_ATTEN_1 (obsolete) ..........................................................809
34
6.2.107
om 8:
Item ID 106 VOC_GAIN ....................................................................................809
l.c :4
. c
te 13
6.2.108 Item ID 107 SPARE_1.........................................................................................809
6.2.109 Item ID 108 SPARE_2.........................................................................................809
.7 bk t
41 -b 1 a
6.2.110 Item ID 109 DATA_SRVC_STATE (obsolete)....................................................809

3
15
ei .0
6.2.111 Item ID 110 DATA_IO_MODE (obsolete)..........................................................809

0.
w 01
6.2.112 Item ID 111 IDLE_DATA_TIMEOUT (obsolete)...............................................809

12
ou 3.
6.2.113 Item ID 112 MAX_TX_ADJ (obsolete)..............................................................809

2.
zh 201
6.2.114 Item ID 113 INI_MUTE ......................................................................................810

6.2.115 Item ID 114 FACTORY_INFO (obsolete) ..........................................................810
6.2.119 Item ID 118 DM_ADDR (obsolete) ....................................................................810
6.2.120 Item ID 119 CDMA_PN_MASK ........................................................................810
6.2.121 Item ID 120 SEND_TIMEOUT (not supported).................................................810
6.2.122 Item ID 121 FM_AGC_SET_VS_PWR..............................................................810
6.2.123 Item ID 122 FM_AGC_SET_VS_FREQ ............................................................ 811
6.2.124 Item ID 123 FM_AGC_SET_VS_TEMP............................................................ 811
6.2.125 Item ID 124 FM_EXP_HDET_VS_PWR ........................................................... 811
6.2.126 Item ID 125 FM_ERR_SLP_VS_PWR .............................................................. 811
6.2.127 Item ID 126 FM_FREQ_SENSE_GAIN ............................................................ 811
6.2.128 Item ID 127 CDMA_RX_LIN_OFF_0 ...............................................................812
6.2.129 Item ID 128 CDMA_RX_LIN_SLP....................................................................812
6.2.130 Item ID 129 CDMA_RX_COMP_VS_FREQ ....................................................812
6.2.131 Item ID 130 CDMA_TX_COMP_VS_FREQ.....................................................812
6.2.132 Item ID 131 CDMA_TX_COMP_VS_VOLT (obsolete)....................................812

Contents
6.2.133 Item ID 132 CDMA_TX_LIN_MASTER_OFF_0 .............................................813

6.2.134 Item ID 133 CDMA_TX_LIN_MASTER_SLP..................................................813
6.2.135 Item ID 134 CDMA_TX_LIN_VS_TEMP .........................................................813
6.2.136 Item ID 135 CDMA_TX_LIN_VS_VOLT .........................................................813
6.2.137 Item ID 136 CDMA_TX_LIM_VS_TEMP ........................................................813
6.2.138 Item ID 137 CDMA_TX_LIM_VS_VOLT.........................................................814
6.2.139 Item ID 138 CDMA_TX_LIM_VS_FREQ.........................................................814
6.2.140 Item ID 139 CDMA_EXP_HDET_VS_AGC .....................................................814
6.2.141 Item ID 140 CDMA_ERR_SLP_VS_HDET ......................................................814
6.2.142 Item ID 141 THERM...........................................................................................815
6.2.143 Item ID 142 VBATT_PA .....................................................................................815
6.2.144 Item ID 143 HDET_OFF.....................................................................................815
6.2.145 Item ID 144 HDET_SPN.....................................................................................815
6.2.146 Item ID 145 ONETOUCH_DIAL .......................................................................815
T
n PS
6.2.147 Item ID 146 FM_AGC_ADJ_VS_FREQ............................................................816
6.2.148 Item ID 147 FM_AGC_ADJ_VS_TEMP (obsolete) ..........................................816
34
6.2.149 Item ID 148 RF_CONFIG ...................................................................................816
6.2.150
om 8:
Item ID 149 R1_RISE .........................................................................................816
l.c :4
. c
te 13
6.2.151 Item ID 150 R1_FALL ........................................................................................816
6.2.152 Item ID 151 R2_RISE .........................................................................................816
.7 bk t
41 -b 1 a
6.2.153 Item ID 152 R2_FALL ........................................................................................817

3
15
ei .0
6.2.154 Item ID 153 R3_RISE .........................................................................................817

0.
w 01
6.2.155 Item ID 154 R3_FALL ........................................................................................817

12
ou 3.
6.2.156 Item ID 155 PA_RANGE_STEP_CAL...............................................................817

2.
zh 201
6.2.157 Item ID 156 LNA_RANGE_POL .......................................................................817

6.2.158 Item ID 157 LNA_RANGE_RISE ......................................................................817
6.2.159 Item ID 158 LNA_RANGE_FALL .....................................................................818
6.2.160 Item ID 159 LNA_RANGE_OFFSET ................................................................818
6.2.161 Item ID 160 POWER_CYCLES (obsolete) ........................................................818
6.2.162 Item ID 161 ALERTS_LVL ................................................................................818
6.2.163 Item ID 162 ALERTS_LVL_SHADOW.............................................................818
6.2.164 Item ID 163 RINGER_LVL_SHADOW (not supported) ...................................818
6.2.165 Item ID 164 BEEP_LVL_SHADOW ..................................................................819
6.2.166 Item ID 165 EAR_LVL_SHADOW....................................................................819
6.2.167 Item ID 166 TIME_SHOW .................................................................................819
6.2.168 Item ID 167 MESSAGE_ALERT (not supported)..............................................819
6.2.169 Item ID 168 AIR_CNT........................................................................................819
6.2.170 Item ID 169 ROAM_CNT...................................................................................819
6.2.171 Item ID 170 LIFE_CNT ......................................................................................820
6.2.172 Item ID 171 SEND_PIN......................................................................................820
6.2.173 Item ID 172 AUTO_ANSWER_SHADOW (obsolete) ......................................820
6.2.174 Item ID 173 AUTO_REDIAL_SHADOW (obsolete) ........................................820
6.2.175 Item ID 174 SMS.................................................................................................820

Contents
6.2.176 Item ID 175 SMS_DM (obsolete) .......................................................................820

6.2.177 Item ID 176 IMSI_MCC .....................................................................................820
6.2.178 Item ID 177 IMSI_11_12 ....................................................................................821
6.2.179 Item ID 178 DIR_NUMBER...............................................................................821
6.2.180 Item ID 179 VOICE_PRIV (not supported)........................................................821
6.2.181 Item ID 180 SPARE_B1 ......................................................................................821
6.2.182 Item ID 181 SPARE_B2 ......................................................................................821
6.2.183 Item ID 182 SPARE_W1.....................................................................................821
6.2.184 Item ID 183 SPARE_W2.....................................................................................822
6.2.185 Item ID 184 FSC..................................................................................................822
6.2.186 Item ID 185 ALARMS (not supported)...............................................................822
6.2.187 Item ID 186 STANDING_ALARM (not supported)...........................................822
6.2.188 Item ID 187 ISD_STD_PASSWD (not supported) .............................................822
6.2.189 Item ID 188 ISD_STD_RESTRICT (not supported) ..........................................822
T
n PS
6.2.190 Item ID 189 DIALING_PLAN (not supported) ..................................................822
6.2.191 Item ID 190 FM_LNA_CTL ...............................................................................822
34
6.2.192 Item ID 191 LIFE_TIMER_G .............................................................................823
6.2.193
om 8:
Item ID 192 CALL_TIMER_G ...........................................................................823
l.c :4
. c
te 13
6.2.194 Item ID 193 PWR_DWN_CNT (obsolete)..........................................................823
6.2.195 Item ID 194 FM_AGC ........................................................................................823
.7 bk t
41 -b 1 a
6.2.196 Item ID 195 FSC2 (obsolete)...............................................................................823

3
15
ei .0
6.2.197 Item ID 196 FSC2_CHKSUM (obsolete) ...........................................................823

0.
w 01
6.2.198 Item ID 197 WDC ...............................................................................................823

12
ou 3.
6.2.199 Item ID 198 HW_CONFIG .................................................................................824

2.
zh 201
6.2.200 Item ID 199 CDMA_RX_LIN_VS_TEMP.........................................................824

6.2.201 Item ID 200 CDMA_ADJ_FACTOR ..................................................................824
6.2.202 Item ID 201 CDMA_TX_LIM_BOOSTER_OFF (obsolete)..............................824
6.2.203 Item ID 202 CDMA_RX_SLP_VS_TEMP ........................................................824
6.2.204 Item ID 203 CDMA_TX_SLP_VS_TEMP.........................................................824
6.2.205 Item ID 204 PA_RANGE_VS_TEMP ................................................................825
6.2.206 Item ID 205 LNA_SWITCH_VS_TEMP (obsolete) ..........................................825
6.2.207 Item ID 206 FM_EXP_HDET_VS_TEMP .........................................................825
6.2.208 Item ID 207 N1M (obsolete) ...............................................................................825
6.2.209 Item ID 208 IMSI (obsolete) ...............................................................................825
6.2.210 Item ID 209 IMSI_ADDR_NUM........................................................................825
6.2.211 Item ID 210 ASSIGNING_TMSI_ZONE_LEN .................................................826
6.2.212 Item ID 211 ASSIGNING_TMSI_ZONE ...........................................................826
6.2.213 Item ID 212 TMSI_CODE ..................................................................................826
6.2.214 Item ID 213 TMSI_EXP......................................................................................826
6.2.215 Item ID 214 HOME_PCS_FREQ_BLOCK (obsolete) .......................................826
6.2.216 Item ID 215 DIR_NUMBER_PCS......................................................................827
6.2.217 Item ID 216 ROAMING_LIST ...........................................................................827
6.2.218 Item ID 217 MRU_TABLE (obsolete) ................................................................827

Contents
6.2.219 Item ID 218 REDIAL ..........................................................................................827

6.2.220 Item ID 219 OTKSL (not supported) ..................................................................828
6.2.221 Item ID 220 TIMED_PREF_MODE...................................................................828
6.2.222 Item ID 221 RINGER_TYPE..............................................................................828
6.2.223 Item ID 222 ANY_KEY_ANSWER ...................................................................828
6.2.224 Item ID 223 BACK_LIGHT_HFK (not supported) ............................................828
6.2.225 Item ID 224 RESTRICT_GLOBAL (obsolete)...................................................828
6.2.226 Item ID 225 KEY_SOUND.................................................................................828
6.2.227 Item ID 226 DIALS_SORTING_METHOD.......................................................829
6.2.228 Item ID 227 LANGUAGE_SELECTION (not supported) .................................829
6.2.229 Item ID 228 MENU_FORMAT...........................................................................829
6.2.230 Item ID 229 RINGER_SPKR_LVL ....................................................................829
6.2.231 Item ID 230 BEEP_SPKR_LVL..........................................................................829
6.2.232 Item ID 231 MRU2_TABLE ...............................................................................830
T
n PS
6.2.233 Item ID 232 VIBRATOR (not supported) ...........................................................830
6.2.234 Item ID 233 FLIP_ANSWERS (not supported)..................................................830
34
6.2.235 Item ID 234 DIAL_RESTRICT_LVLS (not supported) .....................................830
6.2.236
om 8:
Item ID 235 DIAL_STATE_TABLE_LEN (not supported)................................830
l.c :4
. c
te 13
6.2.237 Item ID 236 DIAL_STATE_TABLE (not supported) .........................................830
6.2.238 Item ID 237 VOICE_PRIV_ALERT (not supported) .........................................830
.7 bk t
41 -b 1 a
6.2.239 Item ID 238 IP_ADDRESS (obsolete) ................................................................831

3
15
ei .0
6.2.240 Item ID 239 CURR_GATEWAY (obsolete)........................................................831

0.
w 01
6.2.241 Item ID 240 DATA_QNC_ENABLED ...............................................................831

12
ou 3.
6.2.242 Item ID 241 DATA_SO_SET ..............................................................................831

2.
zh 201
6.2.243 Item ID 242 UP_LINK_INFO (not supported) ...................................................831

6.2.244 Item ID 243 UP_PARMS (not supported)...........................................................831
6.2.245 Item ID 244 UP_CACHE (not supported)...........................................................831
6.2.246 Item ID 245 ELAPSED_TIME ...........................................................................831
6.2.247 Item ID 246 PDM2 ..............................................................................................832
6.2.248 Item ID 247 RX_AGC_MINMAX......................................................................832
6.2.249 Item ID 248 VBATT_AUX .................................................................................832
6.2.250 Item ID 249 DTACO_CONTROL (not supported).............................................832
6.2.251 Item ID 250 DTACO_INTERDIGIT_TIMEOUT (not supported) .....................832
6.2.252 Item ID 251 PDM1 ..............................................................................................832
6.2.253 Item ID 252 BELL_MODEM (not supported)....................................................832
6.2.254 Item ID 253 PDM1_VS_TEMP ..........................................................................833
6.2.255 Item ID 254 PDM2_VS_TEMP ..........................................................................833
6.2.256 Item ID 255 SID_NID_LOCK ............................................................................833
6.2.257 Item ID 256 PRL_ENABLED.............................................................................833
6.2.258 Item ID 257 ROAMING_LIST_683 ...................................................................834
6.2.259 Item ID 258 SYSTEM_PREF .............................................................................834
6.2.260 Item ID 259 HOME_SID_NID ...........................................................................834
6.2.261 Item ID 260 OTAPA_ENABLED (not supported)..............................................834

Contents
6.2.262 Item ID 261 NAM_LOCK...................................................................................835

6.2.263 Item ID 262 IMSI_T_S1......................................................................................835
6.2.264 Item ID 263 IMSI_T_S2......................................................................................835
6.2.265 Item ID 264 IMSI_T_MCC .................................................................................836
6.2.266 Item ID 265 IMSI_T_11_12 ................................................................................836
6.2.267 Item ID 266 IMSI_T_ADDR_NUM ...................................................................836
6.2.268 Item ID 267 UP_ALERTS (not supported) .........................................................836
6.2.269 Item ID 268 UP_IDLE_TIMER (not supported).................................................836
6.2.270 Item ID 269 SMS_UTC.......................................................................................836
6.2.271 Item ID 270 ROAM_RINGER............................................................................837
6.2.272 Item ID 271 RENTAL_TIMER (not supported) .................................................837
6.2.273 Item ID 272 RENTAL_TIMER_INC (not supported) ........................................837
6.2.274 Item ID 273 RENTAL_CNT (not supported)......................................................837
6.2.275 Item ID 274 RENTAL_TIMER_ENABLED (not supported).............................837
T
n PS
6.2.276 Item ID 275 FULL_SYSTEM_PREF .................................................................837
6.2.277 Item ID 276 BORSCHT_RINGER_FREQ (not supported)................................837
34
6.2.278 Item ID 277 PAYPHONE_ENABLE (not supported).........................................837
6.2.279
om 8:
Item ID 278 DSP_ANSWER_DET_ENABLE (not supported) .........................837
l.c :4
. c
te 13
6.2.280 Item ID 279 EVRC_PRI (obsolete).....................................................................838
6.2.281 Item ID 280 AFAX_CLASS_20 (obsolete).........................................................838
.7 bk t
41 -b 1 a
6.2.282 Item ID 281 V52_CONTROL (not supported) ...................................................838

3
15
ei .0
6.2.283 Item ID 282 CARRIER_INFO (not supported)...................................................838

0.
w 01
6.2.284 Item ID 283 AFAX (not supported).....................................................................838

12
ou 3.
6.2.285 Item ID 284 SIO_PWRDWN (obsolete) .............................................................838

2.
zh 201
6.2.286 Item ID 285 PREF_VOICE_SO..........................................................................838

6.2.287 Item ID 286 VRHFK_ENABLED (not supported) .............................................839
6.2.288 Item 287 VRHFK_VOICE_ANSWER (not supported)......................................839
6.2.289 Item ID 288 PDM1_VS_FREQ...........................................................................839
6.2.290 Item ID 289 PDM2_VS_FREQ...........................................................................839
6.2.291 Item ID 290 SMS_AUTO_DELETE...................................................................839
6.2.292 Item ID 291 SRDA_ENABLED .........................................................................839
6.2.293 Item ID 292 OUTPUT_UI_KEYS ......................................................................840
6.2.294 Item ID 293 POL_REV_TIMEOUT (not supported)..........................................840
6.2.295 Item ID 294 SI_TEST_DATA_1 .........................................................................840
6.2.296 Item ID 295 SI_TEST_DATA_2 .........................................................................840
6.2.297 Item ID 296 SPC_CHANGE_ENABLED ..........................................................840
6.2.298 Item ID 297 DATA_MDR_MODE .....................................................................841
6.2.299 Item ID 298 DATA_PKT_ORIG_STR................................................................841
6.2.300 Item ID 299 UP_KEY (not supported)................................................................841
6.2.301 Item ID 300 DATA_AUTO_PACKET_DETECTION........................................841
6.2.302 Item ID 301 AUTO_VOLUME_ENABLED (not supported) ............................841
6.2.303 Item ID 302 WILDCARD_SID (not supported) .................................................841
6.2.304 Item ID 303 ROAM_MSG (not supported).........................................................841

Contents
6.2.305 Item ID 304 OTKSL_FLAG (not supported)......................................................842

6.2.306 Item ID 305 BROWSER_TYPE (not supported)................................................842
6.2.307 Item ID 306 SMS_REMINDER_TONE (not supported)....................................842
6.2.308 Item ID 307 UBROWSER (not supported) .........................................................842
6.2.309 Item ID 308 BTF_ADJUST (not supported) .......................................................842
6.2.310 Item ID 309 FULL_PREF_MODE (not supported)............................................842
6.2.311 Item ID 310 UP_BROWSER_WARN (not supported) .......................................842
6.2.312 Item ID 311 FM_HDET_ADC_RANGE (not supported)...................................842
6.2.313 Item ID 312 CDMA_HDET_ADC_RANGE (not supported) ............................842
6.2.314 Item ID 313 PN_ID (not supported)....................................................................842
6.2.315 Item ID 314 USER_ZONE_ENABLED (not supported)....................................842
6.2.316 Item ID 315 USER_ZONE (not supported) ........................................................842
6.2.317 Item ID 316 PAP_DATA (obsolete) ....................................................................843
6.2.318 Item ID 317 DATA_DEFAULT_PROFILE (not supported) ...............................843
T
n PS
6.2.319 Item ID 318 PAP_USER_ID ...............................................................................843
6.2.320 Item ID 319 PAP_PASSWORD ..........................................................................843
34
6.2.321 Item ID 320 STA_TBYE (not supported) ...........................................................843
6.2.322
om 8:
Item ID 321 STA_MIN_THR (not supported) ....................................................843
l.c :4
. c
te 13
6.2.323 Item ID 322 STA_MIN_RX (not supported).......................................................843
6.2.324 Item ID 323 STA_MIN_ECIO (not supported)...................................................843
.7 bk t
41 -b 1 a
6.2.325 Item ID 324 STA_PRI (not supported)................................................................843

3
15
ei .0
6.2.326 Item ID 325 PCS_RX_LIN_OFF_0 ....................................................................844

0.
w 01
6.2.327 Item ID 326 PCS_RX_LIN_SLP ........................................................................844

12
ou 3.
6.2.328 Item ID 327 PCS_RX_COMP_VS_FREQ .........................................................844

2.
zh 201
6.2.329 Item ID 328 PCS_TX_COMP_VS_FREQ..........................................................844

6.2.330 Item ID 329 PCS_TX_LIN_MASTER_OFF_0 ..................................................844
6.2.331 Item ID 330 PCS_TX_LIN_MASTER_SLP ......................................................845
6.2.332 Item ID 331 PCS_TX_LIN_VS_TEMP..............................................................845
6.2.333 Item ID 332 PCS_TX_LIM_VS_TEMP .............................................................845
6.2.334 Item ID 333 PCS_TX_LIM_VS_FREQ..............................................................845
6.2.335 Item ID 334 PCS_EXP_HDET_VS_AGC..........................................................846
6.2.336 Item ID 335 PCS_HDET_OFF............................................................................846
6.2.337 Item ID 336 PCS_HDET_SPN............................................................................846
6.2.338 Item ID 337 PCS_R1_RISE ................................................................................846
6.2.339 Item ID 338 PCS_R1_FALL ...............................................................................846
6.2.340 Item ID 339 PCS_R2_RISE ................................................................................846
6.2.341 Item ID 340 PCS_R2_FALL ...............................................................................847
6.2.342 Item ID 341 PCS_R3_RISE ................................................................................847
6.2.343 Item ID 342 PCS_R3_FALL ...............................................................................847
6.2.344 Item ID 343 PCS_PA_RANGE_STEP_CAL......................................................847
6.2.345 Item ID 344 PCS_PDM1_VS_FREQ..................................................................847
6.2.346 Item ID 345 PCS_PDM2_VS_FREQ..................................................................847
6.2.347 Item ID 346 PCS_LNA_RANGE_POL ..............................................................848

Contents
6.2.348 Item ID 347 PCS_LNA_RANGE_RISE .............................................................848

6.2.349 Item ID 348 PCS_LNA_RANGE_FALL ............................................................848
6.2.350 Item ID 349 PCS_LNA_RANGE_OFFSET .......................................................848
6.2.351 Item ID 350 PCS_RX_LIN_VS_TEMP..............................................................848
6.2.352 Item ID 351 PCS_ADJ_FACTOR.......................................................................848
6.2.353 Item ID 352 PCS_PA_RANGE_VS_TEMP .......................................................849
6.2.354 Item ID 353 PCS_PDM1_VS_TEMP .................................................................849
6.2.355 Item ID 354 PCS_PDM2_VS_TEMP .................................................................849
6.2.356 Item ID 355 PCS_RX_SLP_VS_TEMP .............................................................849
6.2.357 Item ID 356 PCS_TX_SLP_VS_TEMP..............................................................849
6.2.358 Item ID 357 PCS_RX_AGC_MINMAX ............................................................850
6.2.359 Item ID 358 PA_OFFSETS .................................................................................850
6.2.360 Item ID 359 CDMA_TX_LIN_MASTER (obsolete)..........................................850
6.2.361 Item ID 360 VEXT (not supported).....................................................................850
T
n PS
6.2.362 Item ID 361 VLCD_ADC_CNT (not supported)................................................850
6.2.363 Item ID 362 VLCD_DRVR_CNT (not supported) .............................................850
34
6.2.364 Item ID 363 VREF_ADJ_PDM_CNT (not supported) .......................................850
6.2.365
om 8:
Item ID 364 IBAT_PER_LSB (not supported)....................................................851
l.c :4
. c
te 13
6.2.366 Item ID 365 IEXT (not supported) ......................................................................851
6.2.367 Item ID 366 IEXT_THR (not supported) ............................................................851
.7 bk t
41 -b 1 a
6.2.368 Item ID 367 CDMA_TX_LIN_MASTER0.........................................................851

3
15
ei .0

0.
w 01

12
ou 3.

2.
zh 201
6.2.372 Item ID 371 TIME_FMT_SELECTION (not supported) ...................................852

6.2.373 Item ID 372 SMS_BC_SERVICE_TABLE_SIZE ..............................................852
6.2.374 Item ID 373 SMS_BC_SERVICE_TABLE ........................................................852
6.2.375 Item ID 374 SMS_BC_CONFIG ........................................................................853
6.2.376 Item ID 375 SMS_BC_USER_PREF..................................................................853
6.2.377 Item ID 376 LNA_RANGE_2_RISE ..................................................................853
6.2.378 Item ID 377 LNA_RANGE_2_FALL .................................................................853
6.2.379 Item ID 378 LNA_RANGE_12_OFFSET ..........................................................853
6.2.380 Item ID 379 NONBYPASS_TIMER...................................................................853
6.2.381 Item ID 380 BYPASS_TIMER............................................................................854
6.2.382 Item ID 381 IM_LEVEL1 ...................................................................................854
6.2.383 Item ID 382 IM_LEVEL2 ...................................................................................854
6.2.384 Item ID 383 CDMA_LNA_OFFSET_VS_FREQ...............................................854
6.2.385 Item ID 384 CDMA_LNA_12_OFFSET_VS_FREQ.........................................854
6.2.386 Item ID 385 AGC_PHASE_OFFSET .................................................................855
6.2.387 Item ID 386 RX_AGC_MIN_11 .........................................................................855
6.2.388 Item ID 387 PCS_LNA_RANGE_2_RISE .........................................................855
6.2.389 Item ID 388 PCS_LNA_RANGE_2_FALL........................................................855
6.2.390 Item ID 389 PCS_LNA_RANGE_12_OFFSET .................................................855

Contents
6.2.391 Item ID 390 PCS_NONBYPASS_TIMER..........................................................855

6.2.392 Item ID 391 PCS_BYPASS_TIMER ..................................................................856
6.2.393 Item ID 392 PCS_IM_LEVEL1 ..........................................................................856
6.2.394 Item ID 393 PCS_IM_LEVEL2 ..........................................................................856
6.2.395 Item ID 394 PCS_CDMA_LNA_OFFSET_VS_FREQ......................................856
6.2.396 Item ID 395 PCS_CDMA_LNA_12_OFFSET_VS_FREQ................................856
6.2.397 Item ID 396 PCS_AGC_PHASE_OFFSET ........................................................857
6.2.398 Item ID 397 PCS_RX_AGC_MIN_11 ................................................................857
6.2.399 Item ID 398 – 466................................................................................................857
6.2.400 Item ID 467 HDR_CON_SUSPEND (obsolete) .................................................857
6.2.401 Item ID 468 HDR_PRE_CC_CYC_ENABLED.................................................857
6.2.402 Item ID 469 HDR_PRE_CC_CYC .....................................................................857
6.2.403 Item ID 470 HDR_SRCH_PARAMS (obsolete).................................................857
6.2.404 Item ID 471 HDRSMP_KEEP_ALIVE_START (obsolete) ...............................857
T
n PS
6.2.405 Item ID 472 HDRSMP_KEEP_ALIVE_SENT (obsolete) .................................858
6.2.406 Item ID 473 HDRSMP_KEEP_ALIVE_REQ_INT............................................858
34
6.2.407 Item ID 474 HDRAMP_ADDRESS_DATA .......................................................858
6.2.408
om 8:
Item ID 475 HDRSCP_SESSION_STATUS.......................................................859
l.c :4
. c
te 13
6.2.409 Item ID 476 HDRSCP_TOKEN..........................................................................859
6.2.410 Item ID 477 HDRSCP_PROTOCOL_SUBTYPE ..............................................859
.7 bk t
41 -b 1 a
6.2.411 Item ID 478 HDRAMP_DUAL_EXPIRE_TIME (obsolete)..............................859

3
15
ei .0
6.2.412 Item ID 479 HDRSTREAM_CURR_STREAM_CFG .......................................859

0.
w 01
6.2.413 Item ID 480 HDR_SET_MNGMT_SAME_CHAN ...........................................860

12
ou 3.
6.2.414 Item ID 481 HDR_SET_MNGMT_DIFF_CHAN..............................................860

2.
zh 201
6.2.415 Item ID 482 HDRLUP_UNSOLICITED_ENABLED........................................860

6.2.416 Item ID 483 HDRAMAC_INITIAL_CONFIG...................................................861
6.2.417 Item ID 484 HDRAMAC_POWER_PARAMS ..................................................861
6.2.418 Item ID 485 HDRFMAC_DRC_GATING..........................................................861
6.2.419 Item ID 486 HDRFMAC_HANDOFF_DELAYS...............................................861
6.2.420 Item ID 487 HDRRMAC_POWER_PARAMS ..................................................862
6.2.421 Item ID 488 HDRRMAC_RATE_PARAMS ......................................................862
6.2.422 Item ID 489 HDRSLP_RESET_SEQNO............................................................863
6.2.423 Item ID 490 – 553................................................................................................863
6.2.424 Item ID 554 HDRFMAC_DRC_LOCK..............................................................863
6.2.425 Item ID 555 – 561................................................................................................863
6.2.426 Item ID 562 HYBRID_PREFERENCE ..............................................................863
6.2.427 Item ID 563 – 578................................................................................................864
6.2.428 Item ID 579 HDR_AN_AUTH_NAI ..................................................................864
6.2.429 Item ID 580 HDR_AN_AUTH_PASSWORD ....................................................864
6.2.430 Item ID 581 – 582................................................................................................864
6.2.431 Item ID 583 HDRKEP_CONFIG........................................................................864
6.2.432 Item ID 584 HDRAUTH_CONFIG ....................................................................865
6.2.433 Item ID 585 – 707................................................................................................865

Contents
6.2.434 Item ID 708 COLLOC_DISALLOWED_TIME (obsolete)................................865

6.2.435 Item ID 709 HOLD_HDR_TIME (obsolete) ......................................................865
6.2.436 Item ID 710 – 711................................................................................................865
6.2.437 Item ID 712 HDRSCP_AN_AUTH_STATUS (obsolete) ...................................865
6.2.438 Item ID 713 – 718................................................................................................865
6.2.439 Item ID 719 HDRSMPKA_START_TIME.........................................................865
6.2.440 Item ID 720 HDRSMPKA_SENT_TIME...........................................................865
6.2.441 Item ID 721 – 817................................................................................................866
6.2.442 Item ID 818 HDRRX_DIVERSITY_CTRL .......................................................866
6.2.443 Item ID 819 – 826................................................................................................866
6.2.444 Item ID 827 HDRRUP_SRCH_PARAMS ..........................................................866
6.2.445 Item ID 828 – 831................................................................................................866
6.2.446 Item ID 832 HDRDO_NOT_DISTURB .............................................................866
6.2.447 Item ID 833 – 896................................................................................................866
T
n PS
6.2.448 Item ID 897 HDRRUP_OVERRIDE_ALLOWED.............................................867
34
A Alphabetical NV Item List .............................................................................. 868
om 8:
l.c :4
c
B Feature Query Bit Masks ............................................................................... 882
.
te 13
C Common Fields .............................................................................................. 884

.7 bk t
41 -b 1 a
3
15
D Additional References ................................................................................... 887

ei .0
0.
w 01
12
E Diag Optimization Using Qshrink ................................................................. 889

ou 3.
2.
zh 201
E.1 Introduction.........................................................................................................................889
E.2 Changes in code ..................................................................................................................889
E.3 Phase 2 ................................................................................................................................889
E.4 The Hash File......................................................................................................................890
E.5 Expected memory savings ..................................................................................................891

Tables
Tables
Table 1-1 MSM version phones.........................................................................................................39
Table 1-2 CDMA frequency band phones .........................................................................................41
Table 1-3 Analog capability phones ..................................................................................................41
Table 1-4 SSPR capability phones.....................................................................................................42
Table 1-5 Revision history.................................................................................................................42
Table 1-6 Reference documents and standards..................................................................................47
Table 2-1 Connector pinout for RS-232 mode ..................................................................................49
Table 2-2 Async-HDLC frame fields ................................................................................................50
Table 2-3 Connector pinout for RS-232 in Modem mode.................................................................51
Table 3-1 Constant formats................................................................................................................55
Table 3-2 Keypress values .................................................................................................................79
T
n PS
Table 3-3 DIP switches*....................................................................................................................96
Table 3-4 NV item read and write protection ..................................................................................104
34
Table 3-5 Diagnostic packets with secure operations......................................................................107
om 8:
l.c :4
c
Table 4-1 Diagnostic packet summary ............................................................................................161
.
te 13
Table 5-1 MuxPDU categories ........................................................................................................168
.7 bk t
Table 5-2 Expected MUX values.....................................................................................................172

41 -b 1 a
3
Table 5-3 Actual MUX values.........................................................................................................173
15
ei .0
Table 5-4 Index to reverse rate mapping .........................................................................................209

0.
w 01
12
Table 5-5 DRC index to DRC rate mapping....................................................................................214

ou 3.
2.
zh 201
Table 5-6 DRC index to packet length to number of info bits mapping..........................................233
Table 5-7 1xEV-DO searcher states.................................................................................................236
Table 5-8 Field1 through Field3 ......................................................................................................239
Table 5-9 Index to protocol name....................................................................................................454
Table 5-10 DRC index to DRC rate mapping....................................................................................466
Table 5-11 Conversion table for log item codes................................................................................781
Table 6-1 Number of NAMs per phone...........................................................................................783
Table A-1 Alphabetical NV item list................................................................................................868
Table B-1 Feature query bit masks...................................................................................................882
Table C-1 Common fields ................................................................................................................884
Table D-1 QXDM interface control documents ...............................................................................887
Table D-2 Subsystem interface control documents ..........................................................................887

1 Introduction
1.1 Purpose
This specification describes the serial data interfaces of the Qualcomm CDMA Dual-Mode
Subscriber Station (DMSS). This packet interface is supported over an RS-232 interface.
1.2 Scope
T
n PS
This manual may be used to design external equipment that will communicate with DMSS
software for the following phones:
34
om 8:
CARD5500 FFA5100 QCP-860 l.c :4 SURF1000™ SURF5000™ SURF6000™
. c
FFA3100 FFA5105 QCP-1960 SURF3100™ SURF5100™ SURF6050™
te 13
FFA3300 FFA5500 QCP-2760 SURF3100C™ SURF5105™ SURF6100™

.7 bk t
41 -b 1 a
FFA5000 FFA6000 SURF3300™ SURF5500™ SURF6500™

3
15
ei .0
FFA6050
0.
w 01
FFA6300
12
ou 3.
2.
zh 201
NOTE Throughout this document, interpret the term phone as phone, Form-Fit Accurate (FFA)
phone, or Subscriber Unit Reference Platform (SURF™).
This manual is intended to be a technical reference for engineers who are designing external
equipment that communicates with Qualcomm phones and uses the information it retrieves. An
example of this external equipment is the Qualcomm Mobile Diagnostic Monitor software.

Introduction
1.3 Using this manual

Currently, this manual documents the interface to numerous phones and will be expanded for
future Qualcomm phones. The phones can be categorized, which minimizes the use of long lists
when referring to them. The categories are:
 MSM™ version phones (see Table 1-1)
 CDMA frequency band phones (see Table 1-2)
 Analog capability phones (see Table 1-3)
 System selection for preferred roaming (SSPR) capability phones (see Table 1-4)
A reference to MSM3000® phones includes the QCP-860, QCP-1960, QCP-2760, and
SURF1000™ phones. A phone may also belong in multiple categories, e.g., the SURF1000 is
an MSM3000, cellular-800-MHz CDMA frequency band, analog capability, SSPR phone.
Table 1-1 lists the MSM version phones.
T
n PS
Table 1-1 MSM version phones
34
MSM version Model
om 8:
MSM3000 QCP-860 l.c :4
. c
QCP-1960
te 13
QCP-2760
.7 bk t
41 -b 1 a
3
SURF1000-800
15
ei .0
SURF1000-1900
0.
w 01
12
MSM3100® FFA3100-800
ou 3.
2.
zh 201
FFA3100-Trimode
SURF3100-800
SURF3100-1900
SURF3100-Trimode
SURF3100C-800
MSM3300™ FFA3300-1900
FFA3300-Trimode
SURF3300-800
SURF3300-1900
SURF3300-Trimode

Introduction
Table 1-1 MSM version phones (Continued)

MSM version Model
MSM5000™ FFA5000-800
FFA5000-1900
SURF5000-800
SURF5000-1900
MSM5100™ FFA5100-1900
FFA5100-Trimode
SURF5100-Trimode
MSM5105™ FFA5105-1900
SURF5105-1900
T
SURF5105-Baseband
n PS
SURF5105-Trimode
34
MSM5500® CARD5500-Trimode
om 8:
FFA5500-Trimode
l.c :4
. c
te 13
SURF5500-Trimode
.7 bk t
MSM6000™ FFA6000-Trimode
41 -b 1 a
3
SURF6000-Trimode
15
ei .0
0.
w 01
12
ou 3.
SURF6050-Trimode
2.
zh 201
SURF6100-Baseband
SURF6100-Trimode
MSM6300® FFA6300-Multimode
MSM6500® SURF6500-Trimode

Introduction
Table 1-2 CDMA frequency band phones

Trimode
Cellular 800 MHz PCS 1900 MHz Multimode
(800 and 1900 MHz)
FFA3100-800 FFA3300-1900 CARD5500-Trimode FFA6300-Multimode

FFA5000-800 FFA5000-1900 FFA3100-Trimode
QCP-860 FFA5100-1900 FFA3330-Trimode
SURF1000-800 FFA5105-1900 FFA5100-Trimode
SURF3100-800 QCP-1960 FFA5500-Trimode
SURF3100C-800 QCP-2760 FFA6000-Trimode
SURF3300-800 SURF1000-1900 FFA6050-Trimode
SURF5000-800 SURF3100-1900 FFA6100-Trimode
SURF3300-1900 SURF3100-Trimode
SURF5105-Trimode
SURF5500-Trimode
SURF6000-Trimode
T
SURF6050-Trimode
n PS
SURF6100-Trimode
SURF6500-Trimode
34
om 8:
l.c :4
c
Table 1-3 Analog capability phones
.
te 13
Model
.7 bk t
41 -b 1 a
CARD5500-Trimode SURF1000-800
3
FFA3100-800 SURF3100-800
15
ei .0
FFA3100-Trimode SURF3100-Trimode
0.
w 01
FFA3330-Trimode SURF3100C-800
12
FFA5000-800 SURF3300-800
ou 3.
FFA5000-1900 SURF3300-Trimode
2.
zh 201
FFA5100-1900 SURF5000-800
FFA5105-1900 SURF5105-1900
FFA5500-Trimode SURF5105-Baseband
QCP-860 SURF6050-Trimode
QCP-2760 SURF6100-Baseband
SURF6100-Trimode
SURF6500-Trimode

Introduction
Table 1-4 SSPR capability phones

Qualcomm standard IS-683-A standard1
QCP-1960 prior to rel 4.0 CARD5500-Trimode SURF1000-800

SURF1000-1900 prior to rel 4.0 FFA3100-800 SURF1000-1900 rel 4.0 and later
FFA3100-Trimode SURF3100-800
FFA3300-1900 SURF3100-1900
FFA5000-800 SURF3100C-800
FFA5000-1900 SURF3300-800
FFA5100-1900 SURF3300-1900
FFA5105-1900 SURF5000-800
FFA6100-Trimode SURF5105-Baseband
FFA6300-Multimode SURF5105-Trimode
T
n PS
QCP-1960 rel 4.0 and later SURF6000-Trimode
34
SURF6100-Baseband
om 8:
SURF6100-Trimode
SURF6500-Trimode
l.c :4
. c
te 13
1. See [S7]
.7 bk t
41 -b 1 a
3
15
ei .0
1.4 Conventions
0.
w 01
12
ou 3.
Change bars indicate content that has been added or changed for this revision of the document.
2.
zh 201
1.5 Revision history

The revision history for this document is shown in Table 1-5.
Table 1-5 Revision history
Version Date Description
X1 Apr 2000 Initial release for Qualcomm CDMA Technologies
X2 Jun 2000 Added new packet definitions: streaming output configuration, extensible
parameter retrieval
Added LOG_CODEs 0x1030 through 0x1033; revised CMD_CODEs 13, 14, 23,
59, 62, 74 through 80, 82; revised LOG_CODEs 0x1015, 0x1019, 0x102C,
0x102D, 0x102F
X3 Sep 2000 Added new packet definition: GPS session control

Added reserved CMD_CODEs 99 through 107, 109; added LOG_CODEs
0x1034 through 0x1039; revised CMD_CODE 97; revised LOG_CODE 0x102C;
revised Chapters 1, 4, and Appendix C
X4 Nov 2000 Added new packet definitions: event report control, status snapshot
Added LOG_CODEs 0x103A through 0x103C; added NV Item reference
document to Chapters 1 and 6; revised LOG_CODE 0x1032. Revised
Chapters 1 and 4

Introduction
Table 1-5 Revision history (Continued)

X5 Dec 2000 Added documentation for FFA3300-1900, SURF3300-800, SURF3300-1900,

and SURF3300-Trimode
Added LOG_CODEs 0x103D through 0x1054; revised LOG_CODEs 0x1033
through 0x1035, 0x103B, 0x103C; in Chapter 5, removed log buffer information
X6 Mar 2001 Added documentation for FFA3330-Trimode, FFA5105-1900,

SURF5105-1900, and SURF5105-Baseband
Added new packet definitions: RLP statistics reset, TDSO statistics reset
Added reserved CMD_CODEs 110 through 112; revised LOG_CODE 0x103A;
updated reference and standards documents
X7 Jun 2001 Added documentation for FFA5100-1900, FFA5100-Trimode,

SURF5100-Trimode
Added LOG_CODEs 0x1055 through 0x1091; revised LOG_CODEs 0x1025,
0x1026, 0x102C, 0x102D, 0x1019; updated reference and standards documents
T
n PS
X8 Jul 2001 Editorial update only; replaced 1xEV-DO with 1xEV
X9 Sep 2001 Added documentation for CARD5500-Trimode, FFA5500-Trimode, and
34
SURF5500-Trimode
om 8:
Added LOG_CODEs 0x1092 through 0x10C7; revised CMD_CODE 108;
l.c :4
c
revised LOG_CODEs 0x1029, 0x102A, 0x105D through 0x105F, 0x1061,
.
te 13
0x1063, 0x1065, 0x1067 through 0x106A, 0x106C through 0x106F, 0x1071,
0x1074 through 0x1076, 0x107B, 0x107D, 0x107F, and 0x1083; updated
.7 bk t
reference and standards documents

41 -b 1 a
3
15
A Dec 2001 Added documentation for SURF3100C-800 and SURF5105-Trimode
ei .0
Added new packet definitions: subsystem dispatch, IS2000 status, and logging
0.
w 01
configuration; added LOG_CODEs 0x101C through 0x1020, 0x10C8, and

12
ou 3.
0x10D0; revised LOG_CODEs 0x1030, 0x105F through 0x1061, 0x1063,

2.
zh 201
0x1065, 0x1068, 0x1069, 0x106C, 0x1076, 0x107D through 0x107F, and

0x1081 through 0x1083
Changed document revision numbering system for internal administrative
tracking purposes only
B Jan 2002 Editorial update only
C Mar 2002 Added new packet definition: Log on demand

Added reserved CMD_CODEs 116 through 119; added LOG_CODEs 0x10CB
through 0x10CE; revised CMD_CODEs 53 and 115; revised LOG_CODEs
0x1013, 0x1025, 0x102E, 0x102F, 0x105F, 0x1060, 0x1061, 0x1063, 0x1064,
0x1067, 0x1068, 0x106A, 0x106B, 0x1073, 0x1074, 0x107A, 0x107E, and
0x1080
D May 2002 Added LOG_CODEs 0x10D1 through 0x10DC; added 1xEV-DO NV items to
Chapter 6; revised CMD_CODEs 108 and 112; revised LOG_CODEs 0x100D,
0x1014, 0x1018, 0x1061, 0x1063, 0x1064, 0x1068, 0x1069, 0x106D, and
0x107E
E Jun 2002 Added documentation for FFA6000-Trimode, FFA6050-Trimode,

SURF6000-Trimode, and SURF6050-Trimode
Added reserved CMD_CODEs 121 through 123; added reserved LOG_CODEs
0x10DE through 0x10E1; added 1xEV-DO NV items to Appendix A; revised
CMD_CODE 115; revised LOG_CODEs 0x105F, 0x1060, 0x1063, and 0x1064

Introduction

F Sep 2002 Added LOG_CODEs 0x10E2 and 0x10E3; added reserved CMD_CODEs
124 and 125; added reserved LOG_CODEs 0x10E4 through 0x115E;
revised CMD_CODEs 0, 89, and 97; revised LOG_CODEs 0x1003, 0x102F,
0x1063, 0x1067, 0x106F, 0x1076, 0x107F, 0x1099, 0x109A, and 0x10CB
through 0x10CE; revised Chapter 4
G Oct 2002 Added reserved LOG_CODE 0x10DD; revised CMD_CODEs 31, 98, 112, 115,
121, 123, 124, and 125; revised LOG_CODEs 0x100D, 0x1014, 0x1018,
0x1061, 0x1068, 0x1069, 0x106D, 0x107B, and 0x1155 through 0x1157; revised
Chapter 4
H Dec 2002 Added documentation for FFA6100-Trimode, FFA6300-Multimode,

SURF6100-Baseband, and SURF6100-Trimode
Added reserved CMD_CODEs 126 and 127; added MuxPDU categories in
Chapter 5 common structures; added LOG_CODEs 0x1084 through 0x108C,
0x10C2, 0x10C3, 0x1154, and 0x115E; added reserved LOG_CODEs 0x115F
T
and 0x1160; added NV item 897 to Chapter 6 and Appendix A
n PS
Revised CMD_CODE 108; revised LOG_CODEs 0x105D, 0x1061, 0x1064,
0x106B, 0x107A, 0x107D, 0x10DB, and 0x10DC
34
Updated standards documents; revised technical assistance information
om 8:
l.c :4
c
J Mar 2003 Added LOG_CODE 0x1161; revised CMD_CODEs 53 and 93; revised
.
te 13
LOG_CODEs 0x108B, 0x10C8, and 0x115E
.7 bk t
K Jun 2003 Added reserved LOG_CODEs 0x1164 through 0x1176

41 -b 1 a
3
Added LOG_CODEs 0x10BC through 0x10C1, 0x10C4 through 0x10C7, 0x1113
15
ei .0
through 0x1115, 0x1123 through 0x1125, 0x1133 through 0x1135, 0x1143

through 0x1145, 0x1162, and 0x1163
0.
w 01
12
Revised CMD_CODEs 12, 63, and 99; revised LOG_CODEs 0x102E and
ou 3.
0x1030
2.
zh 201
L Sep 2003 Added reserved LOG_CODEs 0x1179 through 0x117C; added LOG_CODEs
0x10E4, 0x1174, 0x1177, and 0x1178; revised CMD_CODEs 41, 63, and 93;
revised LOG_CODEs 0x1029, 0x102A, x102B, 0x102C, 0x10BC, 0x10BE,
0x10BF, and 0x10E3; revised Appendix C; updated standards documents
M Dec 2003 Added documentation for SURF6500-Trimode

Added LOG_CODEs 0x1160, 0x1179, and 0x117B; added reserved
LOG_CODEs 0x117D and 0x117E; revised LOG_CODEs 0x1068, 0x1093,
0x102E, 0x108D, 0x108E, 0x108F, and 0x10C4; revised Appendix C; updated
standards documents
N Mar 2004 Added reserved LOG_CODEs 0x117D through 0x1197; added LOG_CODE
0x1175; revised LOG_CODEs 0x1025, 0x1026, 0x102D, 0x1031, 0x10C4,
0x1162, 0x1163, 0x1174, and 0x1179; revised Appendix C
P Jun 2004 Added new packet definition: subsystem dispatch version 2

Added reserved LOG_CODEs 0x1198, 0x119A through 0x11B1, and 0x11B5
through 0x11E8; added LOG_CODEs 0x1183, 0x1199, 0x11B2, 0x11B3, and
0x11B4; revised CMD_CODE 115; revised LOG_CODE 0x1175
R Jul 2004 Revised LOG_CODEs 0x117F through 0x1182; updated standards documents
T Sep 2004 Added new packet definitions: event get mask, event set mask
Added reserved LOG_CODEs 0x11E9 through 0x1255; revised CMD_CODEs
89 and 128

Introduction

U Dec 2004 Added reserved LOG_CODEs 0x1256 through 0x1272

Revised CMD_CODEs 19 through 21, 24, and 128; revised LOG_CODEs
0x1019, 0x101A, 0x102D, 0x1030, 0x103A, 0x1068, 0x106E, 0x1076, 0x107E,
0x10BC, 0x10C4, 0x1157, 0x1174, 0x1175, 0x1179, 0x1184 through 0x118A,
and 0x119A through 0x11A3
Revised Appendix C
V Mar 2005 Added LOG_CODEs 0x1273 and 0x12C1; added reserved LOG_CODEs
0x1274 through 0x12C0, 0x12C2 through 0x12E5
Revised CMD_CODEs 32, 75, 83, 84, and 128; revised LOG_CODEs 0x1060,
0x1068, 0x108F, 0x10D9, 0x1184 through 0x118C, and generalized searcher
subpackets
W Jul 2005 Added LOG_CODEs 0x12E6 through 0x12E9

Revised CMD_CODEs 32, 41, 72, 112; revised LOG_CODEs 0x1084, 0x1192,
T
0x11BA, 0x1275 through 0x1279, 0x127A, and generalized searcher
n PS
subpacket–searcher1
Updated standards documents
34
Y Oct 2005 Added LOG_CODEs 0x12EA through 0x132A
om 8:
l.c :4
Revised CMD_CODE 108; revised LOG_CODEs 0x1089, 0x127C, 0x11B6
. c
through 0x11B7, 0x11BB through 0x11BE, 0x120E through 0x1212, and
te 13
generalized searcher subpacket – searcher1

.7 bk t
Revised NV item 10
41 -b 1 a
3
15
YA Jan 2006 Added LOG_CODEs 0x1164 through 0x1179, 0x1193, 0x11BF, 0x11C3, 0x11F5,
ei .0
0x11F6, 0x11F8, 0x11F9, 0x1200, 0x120C, 0x120D, 0x1211 through 0x1216,

0.
w 01
0x127D through 0x1286, 0x1289, 0x132B through 0x132D, and 0x1335

12
ou 3.
Revised LOG_CODE 0x108A

2.
zh 201
Added reserved LOG_CODES 0x132E, 0x1336 through 0x133A, and 0x1350
YB Jan 2006 Added LOG_CODEs 0x116A through 0x1173 and 0x132F through 0x1333
Restored LOG_CODEs 0x1174 through 0x1179
YC Apr 2006 Added LOG_CODEs 0x1176, 0x11C1, 0x11C4, 0x1219, 0x12E8, 0x132E,
0x1336 through 0x133A, 0x134F, 0x1350, and 0x1353 through 0x1355,
Revised LOG_CODE 0x10D9, 0x1273, and 0x1335
YD Sep 2006 Added LOG_CODEs 0x1198, 0x11C5, 0x11C6, 0x12E8, 0x1356, and 0x135D
Revised CMD_CODEs 53, 96, and 124
Revised LOG_CODEs 0x107E, 0x1082, 0x108F, 0x1192, 0x11F5, 0x11F6,
0x11F8, 0x11F9, 0x1200, 0x120C, 0x120D, 0x1211 through 0x1215, 0x127D,
0x1282, 0x1289, and 0x1350
Revised Appendix C
YE Jan 2007 Added LOG_CODEs 0x11C7, 0x11EB, 0x128A, 0x128B, 0x128C, 0x128D,
0x128E, 0x128F, 0x135A, 0x135B, 0x135C, 0x135E, 0x135F, 0x1360, 0x1361,
0x1362, 0x1363, 0x1364, 0x136F, 0x1370, 0x1371, 0x1372, 0x1374, 0x137C
0x1388, 0x1389, 0x138B, 0x138C, 0x138D, 0x13AF
Revised LOG_CODEs 0x1156, 0x1193, 0x1199, 0x127D, 0x127F, 0x1280,
0x1284, 0x1289
Deleted LOG_CODE 0x11A3
Obsoleted 0x136A, 0x1373

Introduction

YF Jun 2007 Added LOG_CODEs 0x1292, 0x1293, 0x1365, 0x1366, 0x1367, 0x1368,
0x13B2, 0x13B3, 0x13B4, 0x13B5, 0x13B6, 0x13B7, 0x13B8, 0x13B9, 0x13BE,
0x13BF, 0x13C0, 0x13C1, 0x13CC, 0x13CD, 0x13CF
Revised LOG_CODEs 0x1356
YG Feb 2008 Added LOG_CODES 0x1294, 0x1295, 0x1296, 0x1297, 0x1298, 0x1299,
0x129A, 0x129D, 0x129E, 0x129F, 0x12A0, 0x12A2, 0x12A4, 0x12A5, 0x12A6,
0x12A7, 0x12A8, 0x12A9, 0x12AA, 0x12AB, 0x13DF, 0x13E0, 0x13E1, 0x13E2,
0x13E3, 0x13E8, 0x13E9; added Appendix D, Additional References
Revised LOG_CODES 0x135D, 0x1370, 0x1371, 0x138A
YH Feb 2009 Added LOG_CODES 0x1291, 0x129C, 0x12A1, 0x12A3, 0x12AE, 0x12B0,
0x12B1, 0x12B3, 0x12B5, 0x12B6, 0x133B, 0x133C, 0x133D, 0x133E, 0x133F,
0x1340, 0x1341, 0x1342, 0x1343, 0x1344, 0x1345, 0x1346, 0x1347, 0x1348,
0x1349, 0x134A, 0x134B, 0x134C, 0x134D, 0x134E, 0x13E4, 0x13E5, 0x13E6,
0x13E7, 0x1437,0x1438, 0x1439, 0x143A, 0x143B,0x143C,0x1455,0x1456,;
T
n PS
added CMD_CODES 141, 142, 143Revised LOG_CODES 0x1198, 0x11B2,
0x11C1, 0x122A, 0x1284, 0x1296,0x12E8, 0x1350, 0x1355, 0x1370, 0x13E2,
0x13E3
34
om 8:
YJ Oct 2009 Added LOG_CODES 0x129C, 0x135A, 0x1440, 0x1476, 0x1477, 0x1478,
0x147B, 0x147E, 0x147F, 0x1480, 0x1481, 0x1482, , 0x1487, 0x1488, 0x148F,
l.c :4
. c
0x1490, 0x1491, 0x1492, 0x1493, 0x1494, 0x1495
te 13
Revised LOG_CODES 0x12A4, 0x1384, 0x138A, 0x13E1

.7 bk t
41 -b 1 a
YK Mar 2010 Added LOG_CODES 0x14CA, 0x14CB, 0x14D3, 0x14D4, 0x14D5, 0x14D6,
3
Appendix E
15
ei .0
Revised LOG_CODES 0x1036, 0x1037, 0x1384, 0x1387, 0x1476, 0x147E,

0.
w 01
0x147F, 0x1482, 0x1490, 0x1491, 0x1492, 0x1493, 0x1494, 0x1495,

12
ou 3.
CMD_CODE 146
2.
zh 201
YL Jan 2011 Added LOG_CODES 0x1241, 0x1436, , 0x14D8, 0x14DE, 0x14E0, 0x14E1, ,
0x14EC, 0x14ED, 0x14F0, 0x14F1, 0x14F2, , 0x150D, 0x150E, 0x150F,
0x1510, 0x1511, 0x1512, , 0x151B, 0x151C
Revised LOG_CODES 0x1076, 0x1273, 0x1370, 0x1384, 0x1476, 0x147C,

0x148F
YM May 2011 Revised LOG_CODES 0x1440, 0x1476

Updated References
YN Jun 2011 Revised LOG_CODE 0x1476
YP May 2012 Added LOG_CODES 0x1544, 0x1567, 0x1599

Revised LOG_CODES 0x135F, 0x1374, 0x138A, 0x1476, 0x147B, 0x1510
Note: There is no Rev. I, O, Q, S, X, or Z per Mil. standards.

Introduction
1.6 References
Reference documents, which may include Qualcomm, standards, and resource documents, are
listed in Table 1-6. Reference documents that are no longer applicable are deleted from this table;
therefore, reference numbers may not be sequential.
Table 1-6 Reference documents and standards
Ref. Document
Qualcomm
Q2 DMSS Download Protocol Interface Specification and 80-39912-1

Operational Description
Q3 Nonvolatile Memory Items List Application Note CL93-V0454-1
Q5 QXDM Professional® Software User Guide 80-V1241-21
Q6 Application Note: Software Glossary for Customers CL93-V3077-1
T
n PS
Q7 Profiling Subsystem Interface Control Document 80-V5628-1
34
Q8 Qualcomm MSM™ Interface (QMI) Architecture 80-VB816-1
om 8:
Q9 QMI Global Constant Definitions l.c :4 80-VB816-2
. c
Q10 Diagnostic Services Interface Specification and Operational 80-V6135-1
te 13
Description
.7 bk t
41 -b 1 a
Standards 3
15
S1 cdma2000® High Rate Packet Data Air Interface Specification TIA/EIA/IS-856 (Nov 2000)
ei .0
0.
w 01
S2 Data Service Options for Wideband Spread Spectrum TIA/EIA/IS-707-A (Apr 1999)
12
ou 3.
Systems
2.
zh 201
S3 High Speed 25-Position Interface for Data Terminal Equipment TIA/EIA-530-A (Dec 1998)
and Data Circuit-Terminating Equipment, Including Alternative
26-Position Connector
S4 Medium Access Control (MAC) Standard for cdma2000® TIA/EIA/IS-2000.3-A (Mar 2000)
Spread Spectrum Systems
S5 Mobile Station-Base Station Compatibility Standard for IS-95-A (May 1995)

Dual-mode Wideband Spread Spectrum Cellular System
S6 Mobile Station-Base Station Compatibility Standard for TIA/EIA-95-B (Feb 1999)

Wideband Spread Spectrum Cellular Systems
S7 Over-the-Air Service Provisioning of Mobile Stations in Spread TIA/EIA/IS-683-A (Jun 1998)

Spectrum Systems
S8 Personal Station-Base Station Compatibility Requirements for J-STD-008 (Aug 1995)

1.8 to 2.0 GHz Code Division Multiple Access (CDMA)
Personal Communications Systems
S9 Physical Layer Standard for cdma2000® Spread Spectrum TIA/EIA/IS-2000.2-A (Mar 2000)
Systems
S10 Position Determination Service Standard for Dual-mode TIA/EIA/IS-801 (Nov 1999)
S11 Recommended Minimum Performance Standards for 800 MHz TIA/EIA/IS-55 (Dec 1991)
Dual-mode Mobile Stations

Introduction
Table 1-6 Reference documents and standards (Continued)

Ref. Document
S12 Test Data Service Option (TDSO) for cdma2000® Spread 3GPP2 C.P9005 (Jun 2000)
Spectrum Systems
S13 Upper Layer (Layer 3) Signaling Standard for cdma2000® TIA/EIA/IS-2000.5-A (Mar 2000)
S14 Recommended Minimum Performance Standards for ANSI/TIA-97-E-2003 (Feb 2003)

cdma2000® Spread Spectrum Base Stations
S15 Short Message Service for Spread Spectrum Systems TIA/EIA-637-B (Jan 2002)
S16 Technical Realization of Short Message Service (SMS) 3GPP TS 23.040 (1999)
S17 Technical Realization of Cell Broadcast Service (CBS) 3GPP TS 23.041 (1999)
S18 cdma2000® High Rate Broadcast-Multicast Packet Data Air TIA-1006 (Feb 2004)
Interface Specification
T
n PS
S19 Navstar GPS Space Segment/Navigation User Interfaces ICD-GPS-200C (Oct 1993)
Interface Control Document
34
S20 Medium Access Control (MAC) Standard for cdma2000® TIA/EIA/IS-2000.3-C (May 2002)
om 8:
Spread Spectrum Systems - Release C
l.c :4
. c
te 13
S21 Cellular Radiotelecommunications Intersystem Operations EIA/IS-41
S22 Physical Layer Standard for cdma2000® Spread Spectrum TIA/EIA/IS-2000.2-C (May 2000)
.7 bk t
41 -b 1 a
Systems - Release C
3
15
ei .0
S23 Physical Layer Standard for cdma2000® Spread Spectrum TIA/EIA/IS-2000.2 (August 2000)
0.
w 01
Systems (2000)
12
ou 3.
S24 Terminal Equipment to User Equipment (TE-UE) multiplexer 3GPP TS 27.010

2.
zh 201
protocol
S25 Mobile radio interface Layer 3 specification; Core network 3GPP TS 24.008
protocols; Stage 3
1.7 Technical assistance

For assistance or clarification on information in this guide, submit a case to Qualcomm CDMA
Technologies a https://support.cdmatech.com/.
If you do not have access to the CDMATech Support Service website, register for access or send
email to support.cdmatech@qualcomm.com.
1.8 Acronyms
For definitions of terms and abbreviations, see [Q6].

2 Protocol Description
The DMSS supports the following:

 Asynchronous RS-232 Protocol
 Standard Access Terminal (AT) Command mode
Phones that support AT Command mode will power up in that mode, and the proprietary AT
command needs to be sent first to switch the phone into the Async Protocol Diagnostic mode.
T
n PS
2.1 Asynchronous
34
om 8:
Async-HDLC mode is a software implementation of the High-level Data Link Control (HDLC)
l.c :4
c
over an asynchronous link.
.
te 13
.7 bk t
2.1.1 Connector
41 -b 1 a
3
15
The serial port connector is provided by a special data cable with a Qualcomm-specific
ei .0
0.
w 01
connector, as well as the appropriate voltage translation for each phone. The cable used by all
12
FFA phones is MCN CV90-87013-1.

ou 3.
2.
zh 201
The connector pinout for the RS-232 mode is defined in Table 2-1 and is as specified in the
EIA-530 Standard [S3]. The DMSS serial port is wired as the Data Circuit-terminating
Equipment (DCE). This is the standard pinout that is presented at the special cable interface.
Table 2-1 Connector pinout for RS-232 mode
Contact Signal name Direction Function
2 TXD- Input Tx data, to DCE
3 RXD- Output Rx data, from DCE
7 GND N/A Signal ground

Protocol Description
2.1.2 Asynchronous Data Protocol

Asynchronous mode is used in the DMSS for serial port communication. It consists of an
asynchronous serial connection running at 38400 bps. The port must be configured for 8-bit
characters, 1 stop bit, and no parity. Unless otherwise stated, the bit ordering for the packet
definitions in this document is least significant bit (a.k.a. Bit0 or 0x01) to most significant bit
(a.k.a. Bit7 or 0x80).
2.1.2.1 Async-HDLC frame format

An Async-HDLC frame consists of the fields specified in Table 2-2. This is specified in
ISO-3309:1984-PDAD1.
Table 2-2 Async-HDLC frame fields

Field Length (bits) Description
T
Information Variable Message
n PS
Frame Check 16 CRC-CCITT standard 16-bit CRC
34
Ending Flag 8 Ending character
om 8:
l.c :4
. c
te 13
2.1.2.1.1 Information field
.7 bk t
The information field consists of all messages used to control the DMSS operation. This includes
41 -b 1 a
3
both request messages sent from the external device to the DMSS and responses sent from the
15
ei .0
DMSS to the external device.

0.
w 01
If the information to be sent contains either the ending flag (0x7E) or the escape character
12
ou 3.
(0x7D), the escape character is inserted into the data stream and the byte is XORed with the
2.
zh 201
escape complement value (0x20), then sent. On the receiving end, this means that any escape
character should be discarded, and the next byte should be XORed with the escape complement
value. Note that this same procedure should be performed if either of these special characters
appears as part of the Cyclic Redundancy Check (CRC) as well.
2.1.2.1.2 Frame check

The frame check field detects errors in the address, control, and information fields. It is
generated by a CRC using the standard CRC-CCITT-16 generator polynomial of
X16 + X12 + X5 + 1. The CRC is first initialized to all ones and once calculated, the ones’
complement of the CRC is transmitted. The receiver performs the CRC calculation on the
received bits, including the CRC bits, and compares the ones’ complement of the result against a
known constant (0x0F47). Note that inserted and removed escape bytes are not included in the
CRC calculation.
The following is a packet example (see Section 3.4.26 for the packet’s complete description) of a
Time Stamp Request message that shows the bytes in the order they should be sent in HEX:
1D 1C 3B 7E

Protocol Description
2.1.2.1.3 Ending flag

The ending flag delineates the end of a frame. It always consists of the 8-bit binary sequence
01111110.
2.2 IS-707A–compliant Modem mode

All phones power up in Modem mode. The appropriate command must be given first before the
Diagnostic mode is activated.
2.2.1 Connector
The serial port connector is provided by a special data cable with a Qualcomm-specific
connector, as well as the appropriate voltage translation for each phone. The cable used by all
FFA phones is MCN CV90-87013-1.
T
The connector pinout for the RS-232 mode is defined in Table 2-3 and is as specified in the
n PS
EIA-530 Standard [S3]. The DMSS serial port is wired as the DCE. This is the standard pinout
that is presented at the special cable interface.
34
om 8:
l.c :4
c
Table 2-3 Connector pinout for RS-232 in Modem mode
.
te 13
Contact Signal name Direction Function

.7 bk t
41 -b 1 a
2 TXD- Input Tx data, to DCE

3
15
ei .0
3 RXD- Output Rx data, from DCE

0.
w 01
4 RFR/ Input Ready for receive

12
ou 3.
2.
zh 201
5 CTS/ Input Clear to send
6 DCD/ Input Data carrier detect
7 GND N/A Signal ground
8 RI/ Output Ring indicator
20 DTR/ Input Data terminal ready
2.2.2 Data protocol

Standard protocol is as specified in the IS-707A Standard.
The port must be configured for 19200 bps (or 115200 bps for MSM5000 phones), 8-bit
characters, 1 stop bit, and no parity.
To switch the phone into Async Protocol Diagnostic mode (described in Section 2.1.2), give the
AT command AT$QCDMG\r.

3 Packet Definitions
Packets are exchanged between the DMSS and the Diagnostic Monitor (DM) in a strict
master/slave fashion. The DM sends a packet, then the DMSS processes it and returns a response
or an error packet. No packets are produced asynchronously by the DMSS, and every packet
receives precisely one response. (Exceptions to the master/slave method are described in
Section 3.1.)
In this document, the term DM is used to refer to the external equipment communicating with the
T
DMSS through a serial interface. This is for notational convenience only, as any external
n PS
equipment may source and sink these data packets.
34
For commands and logging, the DM considers all targets identical unless indicated in the
om 8:
document, (for instance, logged AGC values [0x1001]).
l.c :4
. c
te 13
3.1 Streaming diagnostic communications enhancements

.7 bk t
41 -b 1 a
3
This section explains the changes in communications between the DMSS and the DM.
15
ei .0
The enhanced DMSS diagnostics system allows the DMSS to send unsolicited diagnostic
0.
w 01
12
packets (referred to as streaming diagnostics), violating the existing master/slave relationship

ou 3.
between the DMSS and the DM.

2.
zh 201
When configured, the DMSS will send existing diagnostic packets when the data is available,
rather than storing the data in a queue until it is requested by the DM. The following describes
the data that may be streamed and how to configure it:
 Streamed message response
To configure the streamed message response, the DM sends a Message Request with the
desired MSG_LEVEL, as defined in Section 3.4.28.1. The response to this packet will be a
Message Response as defined in Section 3.4.28.2, with the QUANTITY field set to zero and
the DROP_CNT set to its current value. All other data is arbitrary for this response since it is
merely an ACK.
As messages are generated in the DMSS, given available bandwidth, a Message Response
message will be streamed. The DM will handle this packet in the same manner that it handles
a Message Response message in a nonstreaming phone. The data, except for the
QUANTITY field, is entirely the same. The QUANTITY field in a streaming phone is set to
a nonzero value for tools compatibility.
To configure the streamed message response to off (no unsolicited messages), the DM sends
a Message Request message with the MSG_LEVEL field set to MSG_LVL_NONE.

Packet Definitions
 Streamed log response

To configure the streamed log response, the DM sends a Logging Mask Request
(Section 3.4.12.1) or an Logging Configuration (115 / 0x73) (Section 3.4.113) with the
desired logging mask.
As log data becomes available, and sufficient bandwidth exists, the DMSS will check the
logging mask and send a Log Response (Section 3.4.13.2). The DM will handle this packet
in the same manner that it handles a Log Response message in a nonstreaming phone. The
data is entirely the same.
To configure the streamed message response to off (no unsolicited Log Response messages),
the DM sends a Logging Mask Request message or an Extended Logging Mask Request
message with the logging mask set to zero.
 Streamed event report
The Streamed Event Report is a feature that is incorporated into the DMSS streaming
T
diagnostic communications enhancements feature. If the latter feature is disabled in the
n PS
DMSS software, event report messages will not be delivered.
34
To configure the streamed event report, the DM sends an Event Report Control Request
message (see Section 3.4.93.1 for details).
om 8:
l.c :4
c
Extended message packet
.

te 13
This packet is generated by the DMSS with no associated request packet. The service is
.7 bk t
41 -b 1 a
configured using the Extended Message Configuration Request/Response (see

3
Section 3.4.123).
15
ei .0
0.
w 01
A description of the extended debug message service is located in Section 3.4.123.

12
ou 3.
2.
zh 201
3.2 Error handling

Error packets are given a packet ID that is keyed to the type of error being indicated, but the
contents of the error packet are the first 16 bytes of the packet sent by the DM. This measure is
taken for the convenience of the debuggers of DM software (see Section 3.4.16 through 3.4.21,
3.4.63, and 3.4.68).
If the DMSS detects a bad CRC on an incoming message, no response will be given.

Packet Definitions
3.3 DMSS security plan

Phone hardware is capable of being used in a number of ways that are potentially damaging to
the network or to the viability of the phone itself. It could be:
 Used as a jammer, causing direct damage to the network capacity
 Programmed to eavesdrop on other users’ calls, reducing the inherent privacy of CDMA
calls
 Programmed to use an ESN other than its assigned ESN, facilitating fraud
 Loaded with invalid software, rendering the phone unusable, or it could be loaded with
unauthorized software upgrades, which could lead to configuration control problems or
worse
Unfortunately, many of these operations are indistinguishable from common operations that will
be required for factory test, maintenance, or software updates in the field. It is necessary to
T
provide the means to perform these operations, but only to authorized users.
n PS
In this effort, a plan has been formulated that creates a password, unique for each phone. In order
34
to use any of the protected features in the phone, it will now be necessary to send this password
to the phone to unlock these features.
om 8:
l.c :4
c
The protected operations are:
.
te 13
 Downloading software to the phone’s memory

.7 bk t
41 -b 1 a
Peeking or poking memory in the phone

3

15
ei .0
 Reading or writing to I/O addresses in the phone

0.
w 01
12
 Changing the ESN

ou 3.
2.
zh 201
 Changing the password in the phone

Qualcomm created a new diagnostic packet, the Security Password Request/Response, that sends
the password to the phone in an attempt to unlock the phone.
 In the special case where a security password has not yet been written to a phone, the phone
will operate much like the current phone.
 An ESN other than 0 cannot be overwritten.
 These operations are available:
 Memory peek and poke
 I/O read and write operations
 Code download capability
The definition and the packets affected by this new feature are described in Section 3.4.67 and
included in Table 4-1. If the use of a packet is affected by the security plan, this fact is also
mentioned in the section for that packet.

Packet Definitions
3.4 Diagnostic packet structure

This section contains a description of each type of packet exchanged by the DMSS and the DM.
Chapter 4 provides a summary of all packets and their properties. There are also several packets
documented in Chapter 4 that are no longer supported. These have been supplanted by other
packets or functions and are included only for historical reasons.
Constants are specified in the formats shown in Table 3-1.
Table 3-1 Constant formats

Constant type Example
Binary byte 00000000b
Binary word 00000000 00000000b
T
Decimal 0
n PS
Hexadecimal byte 0x00
34
Hexadecimal word 0x0000
om 8:
l.c :4
Addressing is done using flat 32-bit addresses. The first word is the high-order address word, and
. c
te 13
the second word is the low-order address word.
.7 bk t
Unless otherwise specified, all indexes, such as NAM in a 4-NAM phone, are specified as
41 -b 1 a
3
C indexes, beginning at zero. Thus, appropriate values for the NAM index in a 4-NAM phone
15
ei .0
are 0, 1, 2, or 3.
0.
w 01
Unless otherwise specified, all variables not referenced to IS-95-A are unsigned.
12
ou 3.
2.
zh 201

Packet Definitions
3.4.1 Version Number (0 / 0x00)

When the DM sends a Version Number Request message, the DMSS responds with a Version
Number Response message that contains software version information and other static
configuration data.
3.4.1.1 Version Number Request
Field Length (bytes) Description
CMD_CODE (0 / 0x00) 1 Message ID – The DM sets CMD_CODE to 0 for this

message
3.4.1.2 Version Number Response
T
CMD_CODE (0 / 0x00) 1 Message ID – The DMSS sets CMD_CODE to 0 for this
n PS
message
34
COMP_DATE 11 Compilation date – ASCII chars indicating the date of
compilation for the executable, e.g., Jun 11 1992; there is no
om 8:
null-termination
l.c :4
. c
te 13
COMP_TIME 8 Compilation time – ASCII chars indicating the time of
compilation for the executable, e.g., 23:59:59; there is no
.7 bk t
null-termination
41 -b 1 a
3
15
REL_DATE 11 Release date – ASCII chars indicating the date of formal
ei .0
release for the executable, e.g., Jun 11 1992; there is no

0.
w 01
null-termination
12
ou 3.
REL_TIME 8 Release time – ASCII chars indicating the time of formal

2.
zh 201
release for the executable, e.g., 23:59:59; there is no

null-termination
VER_DIR 8 Version directory – ASCII chars giving the name of the

directory in which the executable was prepared; no
null-termination; this string is the phone software version; it
will always be two letters followed by four numbers (ABxyzz)
translating to AB x.y.zz
SCM 1 Station class mark – See IS-95-A 2.3.3; in J-STD-008 2.3.3,

this is a slotted/nonslotted indicator
MOB_CAI_REV 1 Mobile common air interface revision; (MOB_P_REV)

protocol revision of the subscriber station; see IS-95-A
6.7.4.7 or J-STD-008 2.7.4.7
MOB_MODEL 1 Manufacturer’s mobile model; see IS-95-A 6.7.4.7 or

J-STD-008 2.7.4.7
MOB_FIRM_REV 2 Manufacturer’s mobile firmware revision (software version);

see IS-95-A 6.7.4.7 or J-STD-008 2.7.4.7
SLOT_CYCLE_INDEX 1 Slot cycle index; see IS-95-A 6.7.4.7 or J-STD-008 2.7.4.7.
MSM_VER 2 Mobile station modem revision – Reports which revision of

MSM is in this phone

Packet Definitions
3.4.2 ESN (1 / 0x01)

When the DM sends an ESN Request message, the DMSS responds with an ESN Response
message that contains the ESN.
3.4.2.1 ESN Request

message
3.4.2.2 ESN Response
T
message
n PS
ESN 4 Electronic serial number; see IS-95-A 2.3.2 or
34
J-STD-008 2.3.2
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Packet Definitions
3.4.3 Memory Peek (2 / 0x02, 3 / 0x03, 4 / 0x04)

When the DM sends a Memory Peek Request message to the DMSS, the DMSS responds with a
Memory Peek Response message that contains the contents of a block of memory starting at the
given ADDRESS and consisting of LENGTH items.
The request may ask for BYTES, WORDS, or DWORDS.
The ADDRESS is specified as a 32-bit flat address.
This packet is protected by the DMSS security plan. The Security Password Request message
must be sent to the DMSS successfully before this message will be accepted.
3.4.3.1 Memory Peek Request
CMD_CODE 1 Message ID – The DM sets CMD_CODE to one of the
T
(2 / 0x02, 3 / 0x03, following values:
n PS
4 / 0x04)  2 – Specifies BYTE peek
 3 – Specifies WORD peek
34
 4 – Specifies DWORD peek
om 8:
ADDRESS 4 Address of peek region start; given as a flat address
l.c :4
. c
te 13
LENGTH 2 Length of peek region – Number of BYTES, WORDS, or
DWORDS desired; the maximum number of BYTES
.7 bk t
returned is 16, the maximum number of WORDS returned

41 -b 1 a
3
is 8, and the maximum number of DWORDS returned is 4
15
ei .0
0.
w 01
3.4.3.2 Memory Peek Response

12
ou 3.
2.
The Memory Peek Response message repeats the address and length data for the convenience of
zh 201
the external process.
CMD_CODE 1 Message ID – The DMSS sets CMD_CODE to one of the

(2 / 0x02, 3 / 0x03, following values:
4 / 0x04)  2 – Specifies BYTE peek
 3 – Specifies WORD peek
 4 – Specifies DWORD peek
ADDRESS 4 Address of peek region start; given as a flat address
LENGTH 2 Length of peek region – Number of BYTES, WORDS, or

DWORDS desired; the maximum number of BYTES
returned is 16, the maximum number of WORDS returned
is eight, and the maximum number of DWORDS returned
is four
DATA 16 Requested memory – Contents of the requested block of

memory

Packet Definitions
3.4.4 Memory Poke (5 / 0x05, 6 / 0x06, 7 / 0x07)

When the DM sends a Memory Poke Request message to the DMSS, the DMSS writes the data
provided into its memory and responds with a Memory Poke Response message. The poke
request may specify BYTES, WORDS, or DWORDS, and has a maximum size of four bytes,
two words, or two dwords. The response to a correctly formatted Memory Poke Request is a
copy of the request.
must be successfully sent to the DMSS before this message will be accepted.
3.4.4.1 Memory Poke Request
CMD_CODE 1 Message ID – The DM sets CMD_CODE to 5 to specify

(5 / 0x05, 6 / 0x06, BYTE poke, to 6 to specify WORD poke, or to 7 to specify
T
7 / 0x07) DWORD poke
n PS
ADDRESS 4 Address at which to write POKE_DATA; given as a flat
address
34
om 8:
LENGTH 1 Number of items (bytes, words, or dwords) to be written
l.c :4
c
POKE_DATA 4 or 8 (dword) Data to be written
.
te 13
.7 bk t
3.4.4.2 Memory Poke Response message

41 -b 1 a
3
15
The Memory Poke Response message is a copy of the Memory Poke Request message. It serves
ei .0
0.
w 01
to acknowledge the successful receipt of the request message and the successful poke of the data
12
contained in that request.

ou 3.
2.
zh 201

Packet Definitions
3.4.5 Port Output Byte (8 / 0x08)

The DM sends a Port Output Byte Request message to cause the DMSS to perform an output to a
given (byte) port. The Port Output Byte Response message is a copy of the request message and
serves to acknowledge the successful receipt and processing of the request.
The purpose of the port-output word and byte requests is to allow engineers to directly access the
CDMA hardware via the DM if necessary.
NOTE The ports are extremely hardware dependent. See specific Qualcomm hardware ASIC
references for appropriate addresses and values.
Currently, port addressing is done by sending a 16-bit offset from 0x0300000—ports are
memory-mapped.
T
n PS
3.4.5.1 Port Output Byte Request
34
om 8:
Field Length (bytes)
l.c :4 Description
. c
te 13
message
.7 bk t
41 -b 1 a
PORT_ADDR 2 3 Port address to which output is to be performed

15
DATA 1 Data byte to output
ei .0
0.
w 01
12
ou 3.
3.4.5.2 Port Output Byte Response

2.
zh 201

message
PORT_ADDR 2 Port address to which output is to be performed
DATA 1 Data byte to output

Packet Definitions
3.4.6 Port Output Word (9 / 0x09)

The DM sends a Port Output Word Request message to cause the DMSS to perform an output
from a given (word) port. The Port Output Word Response message is a copy of the request
message and serves to acknowledge the successful receipt and processing of the request.
NOTE The ports are extremely hardware dependent. See specific hardware references for appropriate
addresses and values.
memory-mapped.
3.4.6.1 Port Output Word Request
T
n PS
34
om 8:
message
l.c :4
. c
te 13
PORT_ADDR 2 Port address to which output is to be performed
DATA 2 Data word to output

.7 bk t
41 -b 1 a
3
15
ei .0
3.4.6.2 Port Output Word Response

0.
w 01
The format of the Port Output Word Response message is identical to the format of the Port
12
ou 3.
Output Word Request message.

2.
zh 201

Packet Definitions
3.4.7 Port Input (10 / 0x0A)

The DM sends a Port Input Request message to cause the DMSS to perform an input from a
given (byte) port and return the byte in a Port Input Response message.
memory-mapped.
3.4.7.1 Port Input Request
T
n PS
CMD_CODE (10 / 0x0A) 1 Message ID – The DM sets CMD_CODE to 10 for this
34
message
om 8:
PORT_ADDR 2 Port address from which to perform input
l.c :4
. c
te 13
3.4.7.2 Port Input Response

.7 bk t
41 -b 1 a
3
15
ei .0
CMD_CODE (10 / 0x0A) 1 Message ID – The DMSS sets CMD_CODE to 10 for this
0.
w 01
message
12
ou 3.
PORT_ADDR 2 Port address from which input was performed

2.
zh 201
DATA 1 Data byte input

Packet Definitions
3.4.8 Port Input Word (11 / 0x0B)

The DM sends a Port Input Word Request message to cause the DMSS to perform an input from
a given (word) port and return the word in a Port Input Word Response message.
memory-mapped.
3.4.8.1 Port Input Word Request
T
n PS
CMD_CODE (11 / 0x0B) 1 Message ID – The DM sets CMD_CODE to 11 for this
34
message
om 8:
PORT_ADDR 2 Port address from which to perform input
l.c :4
. c
te 13
3.4.8.2 Port Input Word Response

.7 bk t
41 -b 1 a
3
15
ei .0
CMD_CODE (11 / 0x0B) 1 Message ID – The DMSS sets CMD_CODE to 11 for this
0.
w 01
message
12
ou 3.
PORT_ADDR 2 Port address from which input was performed

2.
zh 201
DATA 2 Data word input

Packet Definitions
3.4.9 Status (12 / 0x0C)

The Status Request message asks for current DMSS status information. This information is
returned in the Status Response message.
3.4.9.1 Status Request
CMD_CODE (12 / 0x0C) 1 Message ID – The DM sets CMD_CODE to 12 for this

message
3.4.9.2 Status Response
CMD_CODE (12 / 0x0C) 1 Message ID – The DMSS sets CMD_CODE to 12 for this
T
message
n PS
RESERVED 3 This field is unused
34
ESN 4 Electronic serial number; see IS-95-A 2.3.2 or J-STD-008
om 8:
2.3.2
l.c :4
. c
RF_MODE 2 Current mode of the RF hardware; valid values are:
te 13
 0 – Analog
.7 bk t
 1 – CDMA cellular
41 -b 1 a
3
 2 – CDMA PCS
15
 3 – Sleep mode
ei .0
 4 – GPS
0.
w 01
 5 – 1xEV-DO
12
ou 3.
2.
zh 201
MIN1 (Analog) 4 Analog MIN1 for the current NAM (valid only for analog
capability phones)
MIN1 (CDMA) 4 CDMA MIN1 for the current NAM

For IS-95-A compliance, these are set to the same value;
see IS-95-A 2.3.1 or J-STD-008 6.3.1. (MIN1 is equivalent
to IMSI_S1.)
MIN2 (Analog) 2 Analog MIN2 for the current NAM (valid only for analog
capability phones)
MIN2 (CDMA) 2 CDMA MIN2 for the current NAM

see IS-95-A 2.3.1, or J-STD-008 6.3.1. (MIN2 is equivalent
to IMSI_S2.)
RESERVED 1 This field is unused
CDMA_RX_STATE 2 Current CDMA Rx process state; valid values are:

 0 – Entering CDMA state
 1 – Sync Channel state
 2 – Paging Channel state
 3 – Traffic Channel Initialization state
 4 – Traffic Channel state
 5 – Exit state

Packet Definitions

CDMA_GOOD_FRAMES 1 Valid only for Sync and Paging Channel states; valid values
are:
 1 – Good frames received since the last status request
 0 – Five or more bad frames and no good frames
received since the last status request
 -1 – Unknown; no good or bad frames received for two
or more status requests
ANALOG_CORRECTED_ 2 Count of good frames (analog only); saturates at 65535;

FRAMES only valid for analog capability phones
ANALOG_BAD_ 2 Count of bad frames (analog only); saturates at 65535; only

FRAMES valid for analog capability phones
ANALOG_WORD_ 2 Number of word sync sequences received in Analog

SYNCS Control or Voice Channel modes; saturates at 65535; see
IS-95-A 3.7.1; only valid for analog capability phones
T
ENTRY_REASON 2 Reason call processing entered; use the field RF_MODE to
n PS
determine which interpretation of the following values to
use:
34
 CDMA mode (Cellular and PCS)
om 8:
l.c :4  0 – Normal CDMA operation
c
 1 – Continue previous operation
.
te 13
 2 – Enter offline CDMA mode
 3 – Originate call in CDMA mode
.7 bk t
41 -b 1 a
 Analog mode
3
 0 – Normal analog operation
15
ei .0
 1 – Digital-to-analog handoff
0.
w 01
 2 – Originate call in Analog mode

12
ou 3.
 3 – Page response
2.
zh 201
 4 – Voice channel assignment

 6 – Enter offline Analog mode
CURRENT_CHAN 2 Current center frequency channel for analog or CDMA
CDMA_CODE_CHAN 1 CDMA code channel (CDMA only); invalid after any Handoff
Direction message on the traffic channel; see IS-95-A
7.1.3.1 or J-STD-008 3.1.3.1
PILOT_BASE 2 Pilot PN of current cell (CDMA only); see IS-95-A 7.1.3.2 or

J-STD-008 3.1.3.2
SID 2 Current system ID; see IS-95-A 7.7.1.3 or J-STD-008

3.7.1.3
NID 2 Current network ID; see IS-95-A 7.7.1.3 or J-STD-008

3.7.1.3
LOCAID 2 Current location area ID (analog only); only valid for analog
capability phones; see IS-95-A 2.3.4.2
RSSI 2 Current RSSI (RF signal strength) level for analog; only
valid for analog capability phones. To convert to
dBm/30 KHz, use -110 + (RSSI * 62/255). This value is a
rather rough estimate.
POWER 1 Current mobile output power level index for analog; only
valid for analog capability phones; see IS-95-A
Table 2.1.2-1

Packet Definitions
3.4.10 Obsolete (13 / 0x0D)

This is no longer supported.
3.4.11 Obsolete (14 / 0x0E)

3.4.12 Logging Mask (15 / 0x0F)

The Logging Mask Request message is sent by the DM to the DMSS to instruct the DMSS to
collect (or to stop collecting) log data of a specified sort. The mask is a 32-bit value with each bit
position specifying a different type of log data—the first log item represented by bit 0, the second
represented by bit 1, etc. When a log item becomes available in the DMSS, it consults the mask,
and if the bit corresponding to that log item type is 1, then the log item is placed in a queue
waiting for output. The DM should use the Log Request (Section 3.4.13.1) to retrieve log
T
n PS
messages from the DMSS log output queue, one at a time.
The particular bit is directly related to the log codes given in Chapter 5. For example, to turn on
34
reverse link frame types logging, LOG_CODE 0x1003, you would set bit 3 in the log mask,
om 8:
which is a value of 0x00000008. See Section 5.1 and Section 5.2 for a description of all log
l.c :4
c
messages and Section 5.4 for a table of log codes.
.
te 13
There is no restriction on the set of log mask bits, other than the bandwidth of the channel
.7 bk t
41 -b 1 a
between the DM and the DMSS. If the log queue in the DMSS is full when a new log message is
3
created, the new log message will be dropped. Therefore, if the DM cannot request and receive
15
ei .0
the queued log items fast enough, log data will be lost.
0.
w 01
12
ou 3.
After receiving and processing a Logging Mask Request message, the DMSS returns a Logging
2.
zh 201
Mask Response message to the DM.
3.4.12.1 Logging Mask Request
CMD_CODE (15 / 0x0F) 1 Message ID – The DM sets CMD_CODE to 15 for this

message
MASK 4 32-bit mask identifying items to log; note that this is sent in
Intel-ordered format, low byte first
3.4.12.2 Logging Mask Response
CMD_CODE (15 / 0x0F) 1 Message ID – The DMSS sets CMD_CODE to 15 for this
message
3.4.13 Log (16 / 0x10)

The DM sends a Log Request message to retrieve a single queued log item from the DMSS. The
DMSS removes the oldest log item (if any) and places it in a Log Response message and outputs
this to the DM. See Section 3.4.12 for further logging discussion.

Packet Definitions
3.4.13.1 Log Request

message
3.4.13.2 Log Response
message
MORE 1 More log data available indicator; indicates how many log
entries (not including the one returned with this message)
are queued in the DMSS
LENGTH 2 Length of the included LOG_ITEM, in bytes
T
n PS
LOG_ITEM LENGTH Log data; see Chapter 5 for LOG_ITEM formats
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Packet Definitions
3.4.14 Nonvolatile Memory Peek (17 / 0x11)

Because the nonvolatile memory of the DMSS is not addressed as normal RAM and ROM are
addressed, it requires a separate peek and poke facility.
The DMSS requests the contents of a region of the DMSS nonvolatile memory using the
Nonvolatile Memory Peek Request message. The DMSS retrieves the data and returns it in a
Nonvolatile Memory Response message.
NOTE You will normally want to use a Nonvolatile Item Read—it knows the layout of the NV, while
peek only does raw reads.
The NVM is treated as a flat 16-bit address space. An ADDRESS of 0x1000 accesses the
0x1000th byte of NVM. The current DMSS uses 8 K of NVM, which means that addresses are
limited to 0x0000 through 0x3FFF.
T
n PS
This operation is no longer active for most addresses.
34
3.4.14.1 Nonvolatile Memory Peek Request
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a

3
message
15
ei .0
0.
w 01
ADDRESS 2 16-bit word address of region to read in NV memory; NV

12
memory starts at address 0

ou 3.
2.
zh 201
LENGTH 1 Number of bytes to return, up to 32
3.4.14.2 Nonvolatile Memory Peek Response
message
ADDRESS 2 16-bit word address of region to read in NV memory; NV

LENGTH 1 Number of bytes in PEEK_DATA array, up to 32
PEEK_DATA 32 Data array – The first LENGTH bytes are the peek data

Packet Definitions
3.4.15 Nonvolatile Memory Poke (18 / 0x12)

The DM sends a Nonvolatile Memory Poke Request message to the DMSS to write values to the
DMSS nonvolatile memory. The DMSS writes the data to nonvolatile memory, then returns a
Nonvolatile Memory Poke Response message.
NOTE To set a specific item stored in the NV, the Nonvolatile Item Write Request should be used, as
it handles all the NV layout problems.
You will normally want to use a Nonvolatile Item Write—it knows the layout of the NV, while
Poke only does raw writes.
This operation is no longer active for most addresses.
T
n PS
3.4.15.1 Nonvolatile Memory Poke Request
34
om 8:
l.c :4
c
message
.
te 13
ADDRESS 2 16-bit word address of region to write in NV memory; NV

.7 bk t

41 -b 1 a
3
15
LENGTH 1 Number of bytes in POKE_DATA array, up to 32
ei .0
0.
w 01
POKE_DATA 32 Data array – The first LENGTH bytes are the poke data
12
ou 3.
2.
zh 201
3.4.15.2 Nonvolatile Memory Poke Response

The format of the Nonvolatile Memory Poke Response message is identical to the format of the
Nonvolatile Memory Poke Request message.
3.4.16 Bad Command (19 / 0x13)

This message is special. The DM should not be generating request packets of this type. If the DM
sends a message that is unrecognized by the DMSS, the DMSS returns a Bad Command
Response message. This message contains the unrecognized message.
message
DATA Variable Unrecognized message

(1 or more)

Packet Definitions
3.4.17 Bad Parameters (20 / 0x14)

sends a recognizable message that has invalid or inconsistent parameters, the DMSS returns a
Bad Parameters Response message. This message contains the malformed message.
message
DATA Variable Malformed message

(1 or more)
3.4.18 Bad Length (21 / 0x15)

T
sends a message with an invalid length, the DMSS returns a Bad Length Response message. This
n PS
message contains the original message.
34
om 8:
CMD_CODE (21 / 0x15) 1
l.c :4 Message ID – The DMSS sets CMD_CODE to 21 for this
. c
message
te 13
DATA Variable Original message

.7 bk t
41 -b 1 a
(1 or more)
3
15
ei .0
0.
w 01
3.4.19 Obsolete (22 / 0x16)

12
ou 3.

2.
zh 201
3.4.20 Obsolete (23 / 0x17)


Packet Definitions
3.4.21 Bad Mode (24 / 0x18)

sends a message requesting an action that can only be performed when the DMSS is in a
particular mode, and the DMSS is not in that mode, the DMSS returns a Bad Mode Response
message. This message contains the original message. Chapter 4 lists the mode requirements for
each request message type.
message
DATA Variable Original message

(1 or more)
3.4.22 Temporal Analyzer Graph (25 / 0x19)
T
n PS
The DM requests data for plotting vocoder rates, Rx power, Tx power, Tx gain adjust, and frame
error rate by sending a Temporal Analyzer Graph Request message to the DMSS. The data is
34
returned in a Temporal Analyzer Graph Response message.
om 8:
l.c :4
. c
3.4.22.1 Temporal Analyzer Graph Request
te 13
.7 bk t

41 -b 1 a
3
15
ei .0
message
0.
w 01
12
ou 3.
3.4.22.2 Temporal Analyzer Graph Response

2.
zh 201
message
RX_AGC 1 Current value of the Rx AGC register

See IS-95-A 6.1.2.3.1 or J-STD-008 2.1.2.3.1.
See Appendix C for the conversion to dBm formula.
TX_ADJ 1 Current value of Tx gain adjust register

See IS-95-A 6.1.2.3.1 or J-STD-008 2.1.2.3.1.
See Section 5.3.23 of this document for conversion to dBm
(use TX_ADJ in place of POWER_CTL_VALS).
To calculate the Tx power in dBm, as an estimate of actual
Tx power based on Rx power and Tx gain adjust:
 tx_pwr = -76 - rx_pwr + tx_adj (PCS)
 tx_pwr = -73 - rx_pwr + tx_adj (Cellular)
See IS-95-A 6.1.2.3.1 or J-STD-008 2.1.2.3.1.
TX_VOC_RATE 1 Current vocoder Tx rate; see RX_VOC_RATE for more

information

Packet Definitions

RX_VOC_RATE 1 Current vocoder Rx rate; valid values are:
 0 – Vocoder data was blanked
 1 – Rate 1/8 data
 4 – Rate 1 data
 14 – Frame erasure
 15 – Invalid vocoder data
FER_BAD_FRAMES 4 Total number of bad frames received; the sum of the

number of forward traffic channel frames of 9600 bps with
bit errors (MUX1_FOR_9) and the number of forward traffic
channel erasure frames (MUX1_FOR_10 and
MUX2_FOR_26); see IS-95-A 6.4.5.4. and J-STD-008
2.4.5.4
FER_TOTAL_FRAMES 4 Total number of frames received; the sum of all the forward
T
traffic channel frame types (MUX1_FOR_1 through
n PS
MUX1_FOR_14 and MUX2_FOR_1 through
MUX2_FOR_26); see IS-95-A 6.4.5.4. and J-STD-008
34
2.4.5.4
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Packet Definitions
3.4.23 Markov Statistics (26 / 0x1A)

The DM sends a Markov Statistics Request message to retrieve the current values of the
accumulated Markov statistics. These statistics are returned by the DMSS in a Markov Statistics
Response message. The statistics have meaning only during the time a Markov call is in progress
(mode is 3, 7, 8, 10, or 54).
3.4.23.1 Markov Statistics Request

message
3.4.23.2 Markov Statistics Response
T
n PS
message
34
om 8:
MODE 1 Rx software mode (service option); see IS-95-A 6.7.1.3.2.4
or J-STD-008 2.7.1.3.2.4; valid values are:
l.c :4
. c
 0 – No mode (phone not in a call)
te 13
 1 – Voice (IS-96) (CAI SO 0x8001)

.7 bk t
 2 – Loopback (IS-126) (CAI SO 0x0002)

41 -b 1 a
3
 3 – Markov (CAI SO 0x8002)
15
ei .0
 4 – Data (IS-707A) (CAI SO 0x0004)

0.
w 01
 5 – Voice (IS-96A) (CAI SO 0x0001)

12
 6 – Voice 13k (CAI SO 0x8000)

ou 3.
 7 – Markov (“new” 13k) (CAI SO 0x801F)

2.
zh 201
 8 – Markov (“new” 8k) (CAI SO 0x801E)

 9 – Loopback (13k)(IS-126) (CAI SO 0x0009)
 10 – Markov (“old” 13k) (CAI SO 0x801C)
 11 – EVRC (CAI SO 0x0003)
 54 – Markov (CAI SO 0x0036)
 55 – Loopback (CAI SO 0x0037)
MARKOV_RATE 2 Rate for Markov processing; valid values are:

 0 – Rate variable
 1 – Rate 1/8
 2 – Rate 1/4
 3 – Rate 1/2
 4 – Rate 1
RX_STATE 2 Receive task state; valid values are:

 0 – Entering CDMA state
 1 – Sync Channel state
 2 – Paging Channel state
 3 – Traffic Channel Initialization state
 4 – Traffic Channel state
 5 – Exit state
TOTAL_FRAMES 4 Total number of Markov frames; this counter is reset to zero

at the start of each Markov call

Packet Definitions
BAD_FRAMES 4 Total number of bad frames (erasures and full rate with bit
errors); this counter is reset to zero at the start of each
Markov call
MARKOV_DATA 4 * 10 * 2 Accumulated Markov statistics

The data is represented as four sets of 10 words each. The
four sets in order are for 1) full rate expected, 2) half rate
expected, 3) quarter rate expected, and 4) eighth rate
expected. The contents of each set is as follows, by index:
 0 – Full rate frames received
 1 – Unused
 2 – Unused
 3 – Signaling frames received
 4 – Unused
 5 – 1/2 rate frames received
T
n PS
 8 – Full rate frames with bit errors received
 9 – Erasures (rate determination failed) received
34
BIT_ERRORS 4 Total number of bit errors
om 8:
l.c :4
c
RATE_OK_WITH_ERR 4*2 Number of frames for each correct rate decision which
.
te 13
contain bit errors
.7 bk t
41 -b 1 a
3
3.4.24 Markov Statistics Reset (27 / 0x1B)
15
ei .0
The accumulated Markov Statistics maintained in the DMSS are reset to zero when the DM
0.
w 01
12
sends a Markov Statistics Reset Request message. The DMSS zeros the accumulators and
ou 3.
responds by sending a Markov Statistics Reset Response message.

2.
zh 201
3.4.24.1 Markov Statistics Reset Request
FieldField Length (bytes) Description

message
3.4.24.2 Markov Statistics Reset Response

The format of the Markov Statistics Reset Response message is identical to the format of the
Markov Statistics Reset Request message.

Packet Definitions
3.4.25 Diag Version (28 / 0x1C)

The DM checks the version of the DM/DMSS packet interface in use by the DMSS by sending a
Diag Version Request message. The DMSS responds by sending a Diag Version Response
message containing the version number. If the version being used by the DMSS is not the same
as that being used by the DM, proper interpretation of all packets is not guaranteed.
3.4.25.1 Diag Version Request

message
3.4.25.2 Diag Version Response
T
n PS
message
34
om 8:
DIAG_VERSION 2 Version of diagnostic interface used by DMSS
l.c :4
c
The version number is 7. For streaming capability phones,
.
te 13
the version number is 8.
.7 bk t
41 -b 1 a
3.4.26 Time Stamp (29 / 0x1D)

3
15
ei .0
The Time Stamp Request message is sent from the DM to the DMSS to request the current time
0.
w 01
in the DMSS. This is returned in the Time Stamp Response message. The format of a DMSS time
12
ou 3.
stamp is as follows:
2.
zh 201
←  48 bits → ← 16 bits →
1.25 ms counter 1/32 chip counter
The 1.25 ms counter has ~11 K years of dynamic range. The 1/32 chip counter has 1.25 ms
dynamic range. It rolls over at count 49152.
The DMSS gets the current time from the Sync channel of a CDMA cell. Until such time as this
occurs, any time stamp received from the DMSS will be counting from Jan 6, 1980 (the start of
GPS time). This is useful for relative timing but not for absolute time.
3.4.26.1 Time Stamp Request
CMD_CODE (29 / 0x1D) 1 Message ID – The DM sets CMD_CODE to 29 for this

message

Packet Definitions
3.4.26.2 Time Stamp Response
CMD_CODE (29 / 0x1D) 1 Message ID – The DMSS sets CMD_CODE to 29 for this
message
TIME_STAMP 8 Current time read from DMSS system time clock; see
Section 3.4.26 for format description
3.4.27 Temporal Analyzer Parameters (30 / 0x1E)

The DM sends a Temporal Analyzer Parameters Request message to the DMSS to enable the
reporting of specified items and to establish the displayed searcher window size. After
establishing the parameters, the DMSS returns a Temporal Analyzer Parameters Response
message to the DM.
T
3.4.27.1 Temporal Analyzer Parameters Request
n PS
34
om 8:
CMD_CODE (30 / 0x1E) 1 Message ID – The DM sets CMD_CODE to 30 for this
l.c :4
c
message
.
te 13
SET_MASK 2 Mask enabling the reporting of certain sets of pilots; valid
values are:
.7 bk t
41 -b 1 a
 0x8000 – Enables active set members

3
15
 0x4000 – Enables candidate set members
ei .0
 0x2000 – Enables neighbor set members

0.
w 01
 0x1000 – Enables remaining set members

12
ou 3.
Other bits are reserved; see IS-95-A 6.6.6.1.2 or

2.
zh 201
J-STD-008 2.6.6.1.2 for more information on pilot sets
WIN_SIZE 2 Window size; this is the size of displayed searcher window

in units of 1/2 chip. Note that this does not change the
window size that the searcher uses to search, only the size
of the window reported by the searcher in a log message
(see Section 5.3.16 of this document); see IS-95-A
6.6.6.2.1 or J-STD-008 2.6.6.2.1.
3.4.27.2 Temporal Analyzer Parameters Response
CMD_CODE (30 / 0x1E) 1 Message ID – The DMSS sets CMD_CODE to 30 for this
message

Packet Definitions
3.4.28 Message (31 / 0x1F)

As a diagnostic aid, the DMSS records text messages at various points in its execution. The
messages provide developers with some insight into the behavior of the DMSS program. The
messages consist of fixed text, determined at compile time, plus three DWORD parameters that
are determined at run time. A severity level is associated with each message. The module name
and source code line number of each message is also reported.
The DM can extract these stored messages from the DMSS by sending a Message Request
message. The Message Request message contains a severity level code to specify that messages
below the given level are to be discarded. The DMSS returns a single message in the Message
Response message and indicates whether additional messages are waiting to be retrieved.
NOTE Severity levels are compile-time configurable in DMSS as well; therefore, some of these
message levels will never be available. For example, even if you request MSG_LVL_LOW
and above, some modules may only contain MSG_LVL_HIGH and above.
T
n PS
These messages are subject to change and may not be present in all versions of software, or in
all phones. These messages are not, and never will be, documented.
34
3.4.28.1 Message Request
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a

3
message
15
ei .0
0.
w 01
MSG_LEVEL 2 Minimum message severity level; valid values are:

12
 0000 – All messages (MSG_LVL_LOW)

ou 3.
 0001 – Medium and above (MSG_LVL_MED)

2.
zh 201
 0002 – High and above (MSG_LVL_HIGH)

 0003 – Error and above (MSG_LVL_ERROR)
 0004 – Fatal error only (MSG_LVL_FATAL)
 00FF – No messages (MSG_LVL_NONE)
3.4.28.2 Message Response
message
QUANTITY 2 Number of messages in the message queue in the phone,

including this one; (all fields in the message are still sent,
but the data is not valid from MSG_LEVEL on)
 0 – No message included in this packet
 nonzero – Message included, and quantity -1 messages
remain on the queue in the phone
DROP_CNT 4 Total drop count; if the DM cannot retrieve the messages as

fast as they are generated by the DMSS, the newly arriving
messages are dropped
TOTAL_MSGS 4 Total number of messages generated by DMSS

Packet Definitions

MSG_LEVEL 1 Severity level of the message; see MSG_LEVEL
descriptions in Section 3.4.28.1.
FILE_NAME 13 NULL-terminated filename identifying location of message,

such as mccdma.c; long filenames are truncated to this
length
LINE_NUMBER 2 Line number identifying location of message in file

FILE_NAME
FMT_STRING 40 Fixed text string with formatting specifiers; formatting

specifiers in the text string are replaced with the formatted
contents of CODE1, CODE2, and CODE3 in the order they
are encountered; formatting specifiers allowed are:
 %x – Hexadecimal word display
 %u – Decimal word display
 %d – Decimal word display
T
 %c – Character display
n PS
 %lx – Long (dword) hexadecimal display
 %ld – Long (dword) decimal display
34
CODE1 4 First replaceable value, signed; this is used as the value for
om 8:
the first formatting specifier
l.c :4
. c
CODE2 4 Second replaceable value, signed; this is used as the value
te 13
for the second formatting specifier

.7 bk t
41 -b 1 a
CODE3 4 Third replaceable value, signed; this is used as the value

3
for the third formatting specifier
15
ei .0
0.
w 01
TIME 8 Time the message was originally generated (not

transmitted)
12
ou 3.
The format is the same as in the Time Stamp (29 /

2.
zh 201
0x1D)(see Section 3.4.26).

Packet Definitions
3.4.29 Handset Emulation Keypress (32 / 0x20)

Handset keypresses and other handset conditions can be provided through the serial data
interface. The DM sends a Handset Emulation Keypress Request message containing the
indicated keypress. This keypress is inserted into the stream of keypresses between the handset
driver and the user interface software. A Handset Emulation Keypress Response message is
returned to the DM.
Handset Emulation Keypress Requests were previously honored only when actual handset input
was prohibited. This restriction required DM messages to lock and then unlock the handset. It is
now up to the user to decide whether keypress input should be allowed from both sources
simultaneously. See Section 3.4.30 for more information on locking and unlocking.
3.4.29.1 Handset Emulation Keypress Request
T
n PS
message
34
HOLD 1 Key release indicator; valid values are:
om 8:
 0 – Selected keypress will be emulated, then a key
release will be emulated
l.c :4
. c
 1 – Selected keypress will be emulated, but no key
te 13
release will be emulated; this is used to simulate the

effect of holding down a key, such as CLEAR or END;
.7 bk t
41 -b 1 a
you should send a second message with a Release

3
15
code after the appropriate amount of timer
ei .0
0.
w 01
KEY 1 Desired keypress

12
ou 3.
2.
zh 201
KEY keypress values are given in Table 3-2.

Table 3-2 Keypress values
Key Value Explanation
HS_NONE 0x00 Do not use
RESERVED 0x01 – 0x08 Reserved
HS_PF1_K 0x09 Left/left side special function button
HS_PF2_K 0x0A Right/right side special function button
HS_MSG_K 0x0B Message button
HS_POUND_K 0x23 # key
HS_STAR_K 0x2A * key
HS_0_K 0x30 0 key
HS_1_K 0x31 1 key
HS_2_K 0x32 2 key
HS_3_K 0x33 3 key
HS_4_K 0x34 4 key
HS_5_K 0x35 5 key

Packet Definitions
Table 3-2 Keypress values (Continued)

HS_6_K 0x36 6 key
HS_7_K 0x37 7 key
HS_8_K 0x38 8 key
HS_9_K 0x39 9 key
HS_SEND_K 0x50 Send key
HS_END_K 0x51 End key
HS_HOME_K1 0x51 Legacy duplicate of HS_END_K
HS_CLR_K 0x52 Clear key

Clear all when held down
T
HS_UP_K 0x54 Up key
n PS
HS_DOWN_K 0x55 Down key
34
HS_PWR_K 0x6F Power key
om 8:
HS_INFO_K 0x70l.c :4 Info/OK button
. c
te 13
HS_SEL_K2 0x70 Legacy duplicate of HS_INFO_K
HS_FREE_K 0x71 Phone placed in hands-free cradle

.7 bk t
41 -b 1 a
3
HS_PHONE_K 0x72 Phone lifted from hands-free cradle
15
ei .0
HS_IGN_OFF_K 0x73 Ignition was turned off

0.
w 01
12
ou 3.
HS_IGN_ON_K 0x74 Ignition was turned on

2.
zh 201
HS_EXT_PWR_ON_K 0x78 External power turned on
HS_EXT_PWR_OFF_K 0x79 External power turned off
RESERVED 0x7A Reserved

RESERVED 0x7B Reserved
HS_HFK_CORD_K 0x7C Coil cord carkit

HS_HFK_NOCORD_K 0x7D Noncoil cord carkit
HS_HEADSET_K 0x7E Headset (hands-free mode)
HS_DEV_UNKNOWN_K 0x7F Unknown device (hands-free mode)
HS_EXT_DEV_K 0x80 External device attached
HS_LSPKR_K 0x86 Loudspeaker key
HS_PTT_K 0x87 PTT key
HS_VOL_UP_K 0x8F Volume up key
HS_VOL_DOWN_K 0x90 Volume down key
HS_FA_K 0x91 L-/2/FA key
HS_FB_K 0x92 R-/B/FB key
HS_SF1_K 0x93 L+/1/SF1 key

Packet Definitions
Table 3-2 Keypress values (Continued)

HS_SF2_K 0x94 R+/A/SF2 key
HS_R_UP_K 0x95 R+ key
HS_R_DOWN_K 0x96 R- key
HS_F1_K 0x97 F1 key
HS_F2_K 0x98 F2 key
HS_F3_K 0x99 F3 key
HS_F4_K 0x9A F4 key
HS_F5_K 0x9B F5 key
HS_LS1_K 0x9E Left soft key
T
HS_LSK_K3 0x9E Left front key
n PS
HS_LS2_K 0x9F Right soft key
34
HS_RSK_K4 0x9F Right front key
om 8:
HS_TASK_K
l.c :4
0xA0 Task key
. c
te 13
HS_VIDEO_K 0xA1 Video key
.7 bk t
HS_CAMERA_K 0xA2 Camera key

41 -b 1 a
3
15
HS_WEB_K 0xA5 Web key
ei .0
0.
w 01
HS_RELEASE_K 0xFF Key to note that all keys are up

12
ou 3.
1HS_HOME_K is also known as HS_END_K.

2.
zh 201
2HS_SEL_K is also known as HS_INFO_K.

3HS_LSK_K is also known as HS_LS1_K.
4HS_RSK_K is also known as HS_LS2_K.
3.4.29.2 Handset Emulation Keypress Response

The format of the Handset Emulation Keypress Response message is identical to the format of
the Handset Emulation Keypress Request message. It is sent by the DMSS in response to the
request message.

Packet Definitions
3.4.30 Handset Emulation Lock/Unlock (33 / 0x21)

To prevent the collision of input, you may want to restrict remote input of handset keystrokes.
You can lock and unlock the handset by using a Handset Emulation Lock/Unlock Request
message. The DMSS returns a Handset Emulation Lock/Unlock Response message after
performing the lock or unlock activity.
3.4.30.1 Handset Emulation Lock/Unlock Request

message
LOCK 2 Lock/unlock command; valid values are:

 0 – DMSS will lock the handset (preventing user input)
and process Handset Emulation Keypress Request
messages
T
n PS
 1 – DMSS will unlock the handset
34
3.4.30.2 Handset Emulation Lock/Unlock Response
om 8:
The format of the Handset Emulation Lock/Unlock Response message is identical to the format
l.c :4
. c
of the Handset Emulation Lock/Unlock Request message. It is sent by the DMSS in response to
te 13
the request message.

.7 bk t
41 -b 1 a
3
15
3.4.31 Handset Emulation Display (34 / 0x22)

ei .0
0.
w 01
The DM uses the Handset Emulation Display Request message to get a “snapshot” of the DMSS
12
ou 3.
screen and annunciator status. The DMSS returns a Handset Emulation Display Response
2.
zh 201
message.
The display of the DMSS is actually composed of two sets of components. There is a “normal”
screen and annunciator set, then a “blink” screen and annunciator set. Every BLINK_RATE ms,
the DMSS switches between the two sets. Any differences in the sets will make that difference
appear to blink. For instance, if the roam annunciator is set in ANNUNCIATORS but not in
BLINK_ANNUNCIATORS, the roam annunciator will blink.
3.4.31.1 Handset Emulation Display Request

message

Packet Definitions
3.4.31.2 Handset Emulation Display Response
CMD_CODE (34 / 0x22) 1 Message ID
BACKLIGHT 1 Current state of the backlight; valid values are:

 0 – Off
 1 – On
SCREEN 4 * 12 One byte for each character position on the screen in

row-by-row format (screen dimensions are 4 by 12)
Screen characters:
 0x00 – Blank
 0x01 – Lowercase a with overbar
 0x02 – Lowercase s with overbar
 0x03 – 3 by 3 block
 0x04-0x05 – Inverse E and V
T
 0x10-0x11 – Right and left pointing triangles
n PS
 0x12-0x13 – Left and right double quote marks
 0x14-0x15 – Up and down pointing triangles
34
 0x16-0x19 – Uppercase E with diacritical marks
 0x1A – Inverse crosshatch fill
om 8:
 0x1B – Inverse L
l.c :4
. c
 0x1C – Dialshuttle down
te 13
 0x1D – Ellipse (...)

.7 bk t
 0x1E – Dialshuttle up
41 -b 1 a
 0x1F – Dialshuttle press

3
15
 0x20 – Space
ei .0
 0x21-0x7E – Normal ASCII characters

0.
w 01
 0x7F – House
12
ou 3.
 0x80-0x89 – Reverse numbers 0 to 9 (white on black)

2.
zh 201
 0x8A-0x8F – Increasing volume bars

 0x90-0x94 – Uppercase A with diacritical marks
 0x95-0x99 – Uppercase O with diacritical marks
 0x9A – Left arrow with overbar
 0x9B – Horizontal line with overbar
 0x9C – Right arrow with overbar
 0x9D – Check mark
 0x9E – Division sign
 0x9F – Crosshatch fill
 0xA0 – Space with overbar0xA1-0xBA – Capital A to Z
with overbar
 0xBB – # with overbar
 0xBC-0xBF – Uppercase I with diacritical marks
 0xC0 – Up pointing arrow (solid head)
 0xC1 – Up and down pointing arrow
 0xC2 – Down pointing arrow filed
 0xC3 – Uppercase C with cedilla
 0xC4 – Down to the left pointing arrow (line head)
 0xC5-0xC6 – Up and down pointing arrows
 0xC7-0xC8 – Right and left pointing arrows
 0xC9-0xCC – Uppercase U with diacritical marks
 0xCD-0xCE – Left, right special function outlines

Packet Definitions

SCREEN (cont) 4 * 12  0xCF – Center special function outline
 0xD0 – Pound sterling
 0xD1 – Yen sign
 0xD2 – Broken bar
 0xD3 – Uppercase ligature OE
 0xD4 – Copyright sign
 0xD5 – Left double angle quote mark
 0xD6 – Left single quote mark
 0xD7 – Degree sign
 0xD8 – Plus/minus sign
 0xD9 – Middle dot
 0xDA – Inverse P
 0xDB – Invert exclamation mark
 0xDC – Full box outline
 0xDD – Lock icon
0xDE-0xDF – Inverse H and T
T

n PS
 0xE0 – Lowercase ligature oe
 0xE1 – Right double angle quote mark
34
 0xE2 – Invert question mark
0xE3 – Uppercase N with tilde
om 8:

 0xE4 – Multiplication sign
l.c :4
. c
 0xE5 – Uppercase Y with diacritical mark
te 13
 0xE6-0xFF – Lowercase letters with diacritical marks

.7 bk t
41 -b 1 a
ANNUNCIATORS 2 Current state of the annunciators, one bit per annunciator;

3
valid values are:
15
ei .0
 00000000 00000001b – CDMA

0.
w 01
 00000000 00000010b – In use

12
ou 3.
 00000000 00000100b – No service

2.
zh 201
 00000000 00001000b – Roam

 00000000 00010000b – Message
 00000000 00100000b – Voice mail
 00000000 01000000b – Silent notification
BLINK_SCREEN 4 * 12 Like SCREEN, but shown during the BLINK portion of the
screen cycle
BLINK_ANNUNCIATORS 2 Like ANNUNCIATORS, but shown during the BLINK

portion of the screen cycle
RSSI 1 Number of bars set in the RSSI annunciator (1 to 5)
BLINK_RATE 2 Pause between toggling from the normal screen set to the
blink screen set and then back again
This is in milliseconds.
RESERVED 1 Reserved for Qualcomm’s use
3.4.32 Obsolete (35 / 0x23)

This message has been replaced by the Parameter Retrieval 2 (67 / 0x43)(Section 3.4.64).

Packet Definitions
3.4.33 Parameter Set (36 / 0x24)

The DM can set/change the value of the parameters stored in the DMSS by sending a Parameter
Set Request message. This message requests that a specified parameter be set to a specified
value. If the DM provides a value of -1 (0xFFFF) for PARM_ID, then the DMSS sets all the
parameters to zero. After setting the parameter or parameters, the DMSS responds with a
Parameter Set Response message that contains a time stamp indicating the time the parameters
were set.
3.4.33.1 Parameter Set Request

message
PARM_ID 2 Parameter ID; the parameter identifier is defined in
T
Appendix E, Table E-1 of [S5] or Appendix E, Table E-1 of
n PS
[S8] or ANNEX E of [S6] with the additional special ID of -1
(0xFFFF) to indicate that all settleable parameters are to be
34
reset to zero (0); this bypasses all resettability restrictions
om 8:
PARM_VALUE 4 Parameter value; the desired new value for the parameter
l.c :4
. c
te 13
3.4.33.2 Parameter Set Response

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
message
12
ou 3.
SET_TIME 8 Time the operation was processed; the format is the same
2.
zh 201
as in the Time Stamp (29 / 0x1D)(see Section 3.4.26)
3.4.34 Obsolete (37 / 0x25)


Packet Definitions
3.4.35 Nonvolatile Item Read (38 / 0x26)

Data stored in the DMSS nonvolatile memory is available to the DM through use of the
Nonvolatile Item Read Request message. The DM specifies the item by ID in the request
message and, after retrieving the data, the DMSS returns it in a Nonvolatile Item Read Response
message. This response message contains the item in ITEM_DATA and is identical in format to
the request message. Some of these NV memory items are considered to be service programming
variables, and these are protected by a security code. In order to read these items, the Service
Programming Code Request Message command must be given first with the correct code (see
Section 3.4.62).
This message should be used rather than the Nonvolatile Memory Peek Request to retrieve a
specific item, since that does not handle any of the NV memory layout issues.
NOTE NV_ITEM and ITEM_DATA are documented as Chapter 6.
T
3.4.35.1 Nonvolatile Item Read Request
n PS
34
om 8:
message
l.c :4
. c
te 13
NV_ITEM 2 Item ID – The DM sets this field to select the item to be
read. The values shall be as shown in Chapter 6.
.7 bk t
41 -b 1 a
3
ITEM_DATA 128 Nonvolatile memory data item – The DM may specify
15
parameters in this area (to select one of an array of
ei .0
elements, for example). The DMSS places the requested

0.
w 01
data in this field. The format shall be as shown in Chapter

12
ou 3.
6.
2.
zh 201
STATUS 2 Status of the NV Read operation – The DMSS sets this field
on return to indicate the status of the read operation:
 0 – Request completed OK
 1 – Internal DMSS use
 2 – Unrecognizable command
 3 – NV memory is full (should not get this status in a
read response)
 4 – Command failed
 5 – Variable was not active (never written)
 6 – Bad parameter in command block (may indicate this
item does not exist for this phone or for the specified
index for this phone)
 7 – Item was read-only (should not get this status in a
read response)
 8 – Item not defined for this target
 9 – Free memory exhausted
 10 – Internal use
3.4.35.2 Nonvolatile Item Read Response

The format of the Nonvolatile Item Read Response message is identical to the format of the
Nonvolatile Item Read Request message.

Packet Definitions
3.4.36 Nonvolatile Item Write (39 / 0x27)

The DM changes the value of an item stored in the DMSS nonvolatile memory by sending a
Nonvolatile Item Write Request message. The DM specifies the item and its new value. This
message will be accepted by the DMSS only if the DMSS has been placed in the offline state
with a Mode Change Request message. Some of these NV memory items are considered to be
Service Programming variables, and these are protected by a security code. In order to write
these items, the Service Programming Code Request message command must be given first with
the correct code (see Section 3.4.62).
This message should be used rather than the Nonvolatile Memory Poke Request to write a
specific item, since that does not handle any of the NV memory layout issues.
NOTE NV_ITEM and ITEM_DATA are documented as Chapter 6.
For the special case of writing the ESN, this packet is protected by the DMSS security plan. The
T
Security Password Request message must be successfully sent to the DMSS before this message,
n PS
with the NV_ITEM == NV_ESN_I, will be accepted. Also note that the security plan password
overrides the SPC, so if a successful Security Password Request has been sent to the phone, the
34
SPC is not needed to read or write the service programming items (see Section 3.4.62).
om 8:
l.c :4
. c
3.4.36.1 Nonvolatile Item Write Request
te 13
.7 bk t
41 -b 1 a

3 Description
15
ei .0
message
0.
w 01
12
ou 3.
NV_ITEM 2 Item ID – The DM sets this field to select the item to be

written. The values are as described in Chapter 6.
2.
zh 201
ITEM_DATA 128 Nonvolatile memory data item – The DM may specify

parameters in this area (to select one of an array of
elements, for example). The DMSS places the data to be
written in this field. The format is as described in Chapter 6.
STATUS 2 Status of the NV Write operation – The DMSS sets this field
to indicate the status of the write operation:
 1 – Internal DMSS use
 3 – NV memory is full
 5 – Variable was not active (never written) (should not
get this status in a write response)
 6 – Bad parameter in command block (may indicate this
item does not exist for this phone or for the specified
index for this phone)
 7 – Item was read-only

Packet Definitions
3.4.36.2 Nonvolatile Item Write Response

The format of the Nonvolatile Item Write Response message is identical to the format of the
Nonvolatile Item Write Request message.
3.4.37 Obsolete (40 / 0x28)

3.4.38 Mode Change (41 / 0x29)

Certain actions by the DMSS are not possible during normal operation. These include IS-55 type
analog tests, writes to DMSS nonvolatile memory, and others. The DMSS is instructed to enter
the special test modes and to return to normal operation using the Mode Change Request
message. The offline modes are Offline Analog and Offline Digital. The only exit from the
offline modes is through a restart. The DMSS may be power cycled to produce this reset, or the
T
DM may send a Reset mode to reset the DMSS. The Reset Mode command will cause the phones
n PS
to power cycle.
34
The Mode Change Response message is returned to the DM to indicate that the Mode Change
om 8:
Request message has been received correctly and the mode change has been requested. The
l.c :4
c
actual mode change will occur a short time later. Use the Status Request message (Section 3.4.9)
.
te 13
to monitor the call processing state. When the ENTRY_REASON field of the Status Response
message is 2 (Offline CDMA) or 6 (Offline Analog), the mode change has indeed completed.
.7 bk t
41 -b 1 a
Verify the offline status of the phone before attempting any commands that require the phone to
3
15
be in that state.
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Packet Definitions
3.4.38.1 Mode Change Request

message
MODE 2 Selected operating mode; valid values are:

 0 – Offline Analog mode
 1 – Offline Digital mode
 2 – Reset
 3 – Offline Factory Test mode
 4 – Online mode; in this mode, the mobile can acquire
the system and make calls; it is the default mode
 5 – Low Power mode; in this mode, the mobile will be in
least power consumption and mobile will neither attempt
any acquisitions nor be on a system; it is used for
charging, Game mode, etc.
 6 – Power Off mode
T
n PS
Valid mode switching is, switch from:
 Online mode to Offline Factory Test mode, or Offline
34
Digital/Analog
 Offline Factory Test mode to Online mode or Offline
om 8:
Digital/Analog or Reset
l.c :4
. c
 Low Power mode to Online mode and vice versa
te 13
 Offline Digital/Analog to Reset

.7 bk t
Invalid mode switching is, switch from:

41 -b 1 a
3
 Offline Digital/Analog to Offline Factory Test mode
15
ei .0
 Offline Digital/Analog to Online mode

0.
w 01
 Online mode to Reset

12
ou 3.
2.
zh 201
3.4.38.2 Mode Change Response

The format of the Mode Change Response message is identical to the format of the Mode
Change Request message.
3.4.39 Error Record Retrieval (42 / 0x2A)

When the DMSS software encounters an error condition, it stores an error record in its
nonvolatile memory. An error is defined uniquely by its source file and line number. Another
invocation of an error that has already been recorded does not allocate another error record, it
increments the count for the existing error. There are dozens of potential errors in the DMSS
code, however, there is room in NV for 20 different error records, each of which includes the
number of times the error has occurred, the source file and line of the location of the software
reporting the error, and whether the error was fatal. Fatal errors cause the DMSS to reset,
nonfatal errors do not.
The error number (0 to 19) does not indicate anything about the errors other than the order in
which they were recorded. It is just a 20-position array, and as a new error needs to be recorded,
a new error record is used to record it.

Packet Definitions
3.4.39.1 Error Record Retrieval Request

message
3.4.39.2 Error Record Retrieval Response
message
ERR_COUNT 2 Error count; the number of ERR_RECORDS that have valid

error data
ERR_IGNORED 2 Errors ignored count; the number of errors ignored since

last DMSS reset; this happens when another error record
T
cannot be allocated, or the COUNT for a given error is
n PS
saturated
34
ERR_RECORDS 20 * 13 20 of the following five records
om 8:
20 occurrences of the l.c :4
following record, one per
. c
error
te 13
ADDR 1 Error address; this is the index (0 to 19) of this error record;
.7 bk t
41 -b 1 a
it is sequential.
3
15
ei .0
COUNT 1 Error count; this is the number of times this error has been
recorded; if the value is zero, this error record is empty;
0.
w 01
saturates at 255
12
ou 3.
2.
zh 201
FILENAME 8 Root name of file; this is the root name of the file where the
error was detected, such as mobile for mobile.c; long
filenames are truncated to the first eight characters
LINE_NUM 2 Line number within file; this is the line number within
FILE_NAME where the error was detected
FATAL 1 Error fatal indicator; if the value is nonzero, the error was
fatal; if the value is zero, the error was nonfatal

Packet Definitions
3.4.40 Error Record Clear (43 / 0x2B)

The accumulated error statistics in the DMSS can be cleared by sending an Error Record Clear
Request message. A single error record (identified by index, 0 to 19) or all error records
(identified by index -1) may be cleared with a single Error Record Clear Request message. After
clearing the specified error record, the DMSS shall send an Error Record Clear Response
message to the DM.
3.4.40.1 Error Record Clear Request

message
ERROR_REC 1 Index of error record to be cleared; if ERROR_REC is -1

(0xFF), the DMSS shall clear all error records; if
ERROR_REC is between 0 and 19 inclusive, the DMSS
T
n PS
shall clear the error record specified by ERROR_REC
34
3.4.40.2 Error Record Clear Response
om 8:
The format of the Error Record Clear Response message is identical to the format of the Error
l.c :4
. c
Record Clear Request message.
te 13
.7 bk t
41 -b 1 a
3.4.41 Symbol Error Rate Counter Reset (44 / 0x2C)

3
15
ei .0
Every receive frame the decoder constructs symbol error measurements. For each rate, the
0.
w 01
decoder reencodes the decoded data and compares this reencoded data to the decoder input. Each
12
ou 3.
frame, these discrepancies are reported and accumulated. The DMSS resets the accumulated
2.
zh 201
counters whenever it receives a Symbol Error Rate Counter Reset message.
3.4.41.1 Symbol Error Rate Counter Reset Request

message
3.4.41.2 Symbol Error Rate Counter Reset Response

The Symbol Error Rate Counter Reset Response message is sent by the DMSS to acknowledge
the successful resetting of the symbol error accumulators. It is identical in format to the Symbol
Error Rate Counter Reset Request message.
3.4.42 Symbol Error Rate Counter Report (45 / 0x2D)

The DM retrieves the symbol error counters by sending a Symbol Error Rate Counter Report
Request message. The DMSS responds by sending a Symbol Error Rate Counter Report
Response message. The counters are not reset. Note that counters for each rate are updated every
frame, so a meaningful measure of the symbol error rate must be made while sending frames of
the same rate.

Packet Definitions
3.4.42.1 Symbol Error Rate Counter Report Request

message
3.4.42.2 Symbol Error Rate Counter Report Response
CMD_CODE (45 / 0x2D) 1 Message ID – The DMSS sets CMD_CODE to 45 for this
message
FRAME_COUNT 4 Number of receive frames over which the accumulations

have been made
SER_1 4 Sum of all full-rate frame symbol error counts
T
SER_2 4 Sum of all half-rate frame symbol error counts
n PS
SER_4 4 Sum of all quarter-rate frame symbol error counts
34
SER_8 4 Sum of all eighth-rate frame symbol error counts
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Packet Definitions
3.4.43 Directed Test (46 / 0x2E)

The DMSS is commanded to perform offline tests using the Directed Test Request message. The
DMSS responds to the DM by performing, or in some cases, initializing, the specified test, then
sending Directed Test Response message containing results. The set of directed tests consists of
the Analog tests specified in Section 8 of [S11].
The phone must be in an offline state for these tests to be performed. Use the Mode Change
Request message (Section 3.4.38) with mode set to Offline Analog.
3.4.43.1 Directed Test Request
CMD_CODE (46 / 0x2E) 1 Message ID – The DM sets CMD_CODE to 46 for this

message
TEST_CODE 2 Directed test code – The DM sets this code to specify the
T
desired test as follows:
n PS
 0x00 – CARRIER_ON
34
 0x01 – CARRIER_OFF
 0x02 – LOAD_SYNTH
om 8:
 0x03 – SET_ATTN
l.c :4
c
 0x04 – RXMUTE
.
te 13
 0x05 – RXUNMUTE
 0x06 – TXMUTE
.7 bk t
41 -b 1 a
 0x07 – TXUNMUTE
3
 0x08 – ST_ON
15
ei .0
 0x09 – ST_OFF
0.
w 01
 0x0A – Reserved
12
ou 3.
 0x0B – Reserved
2.
zh 201
 0x0C – Reserved
 0x0D – Reserved
 0x0E – Reserved
 0x0F – RCVS1 test
 0x10 – WSTS test
 0x11 – SAT_ON
 0x12 – SAT_OFF
 0x13 – TERMINATE test
 0x14 – CDATA test
 0x15 – DTMF_ON
 0x16 – DTMF_OFF
 0x17 – COMPANDER_ON
 0x18 – COMPANDER_OFF
 0x19 – RSSI test
TEST_PARAMETERS 6 Parameters for directed test – The DM supplies parameters

for some of the directed tests. This field shall be zero-filled
to length 6 bytes by the DM for all tests not requiring 6
bytes of parameters.
3.4.43.1.1 LOAD_SYNTH (TEST_CODE 0x02)

If TEST_CODE equals 0x02 (LOAD_SYNTH), the DMSS shall set the RF synthesizer channel
to the value specified in TEST_PARAMETERS.

Packet Definitions
Subfield Length (bytes)
SYNTH_CHANNEL 2
3.4.43.1.2 SET_ATTN (TEST_CODE 0x03)

If TEST_CODE equals 0x03 (SET_ATTN), the DMSS shall set the RF power attenuation to the
value specified in TEST_PARAMETERS.
ATTN 1
3.4.43.1.3 SAT_ON (TEST_CODE 0x11)

If TEST_CODE equals 0x11 (SAT_ON), the DMSS shall enable the transmission of SAT. The
T
color code of the SAT frequency that the DMSS may expect to receive is specified in
n PS
TEST_PARAMETERS.
34
om 8:
l.c :4
c
SAT 1
.
te 13
.7 bk t
41 -b 1 a
3
SAT value SAT frequency
15
ei .0
0 5970 Hz
0.
w 01
12
1 6000 Hz
ou 3.
2.
zh 201
2 6030 Hz
3.4.43.1.4 CDATA (TEST_CODE 0x14)

If TEST_CODE equals 0x14 (CDATA), the DMSS shall transmit continuous five-word Reverse
Control Channel messages. The digital color code shall be 10. Each of the five words shall
consist of the 48-bit data pattern specified by TEST_PARAMETERS. The data messages shall
be contiguous. Subsequent reception (by the DMSS) of a Mode Change Request message shall
terminate the transmission.
CDATA 6
3.4.43.1.5 DTMF_ON (TEST_CODE 0x15)

If TEST_CODE equals 0x15 (DTMF_ON), the DMSS shall activate the DTMF generator with
the tones associated with the TEST_PARAMETERS.
DTMF 1

Packet Definitions
DTMF value DTMF key frequencies
0x01 1
0x02 2
0x03 3
0x04 4
0x05 5
0x06 6
0x07 7
0x08 8
0x09 9
0x0A 0
T
n PS
0x0B *
34
0x0C #
om 8:
l.c :4
c
3.4.43.2 Directed Test Response
.
te 13

.7 bk t
41 -b 1 a
3
CMD_CODE (46 / 0x2E) 1 Message ID – The DMSS sets CMD_CODE to 46 for this
15
message
ei .0
0.
w 01
TEST_CODE 2 Directed test code – The DMSS shall set this field equal to
12
the TEST_CODE field in the Directed Test Request

ou 3.
message just received

2.
zh 201
TEST_RESULTS 2 Results of test – The DMSS returns results for some of the
directed tests it performs; this field shall be ignored by the
DM except for the values of TEST_CODE listed in the
following text
3.4.43.2.1 RCVS1 (TEST_CODE 0x0F)

If TEST_CODE equals 0x0F (RCVS1 test), the DMSS shall set TEST_RESULTS.
NUM_UNCORR 1
NUM_CORR 1
3.4.43.2.2 WSTS (TEST_CODE 0x10)

If TEST_CODE 0x10 (WSTS test), the DMSS shall set TEST_RESULTS.
WORD_SYNCS 2

Packet Definitions
3.4.43.2.3 RSSI (TEST_CODE 0x19)

If TEST_CODE equals 0x19 (RSSI test), the DMSS shall set TEST_RESULTS.
RSSI 2
3.4.44 DIP Switch Retrieval (47 / 0x2F)

The DM requests the software DIP switch settings by sending a DIP Switch Retrieval Request
message to the DMSS. The DMSS responds by sending a DIP Switch Retrieval Response
message to the DM that contains the current setting of the software switches. Each bit is the
value of a single switch. The DIP switches are not true DIP switches but software-only, and they
reset upon power cycle.
DIP switches are highly hardware dependent and their meanings are volatile; any permanent
T
configuration options will be given NV items or DIAG packets.
n PS
34
3.4.44.1 DIP Switch Retrieval Request

om 8: Description
l.c :4
. c
te 13
message
.7 bk t
41 -b 1 a
3
SWITCHES 2 Not used in request message
15
ei .0
0.
w 01
3.4.44.2 DIP Switch Retrieval Response

12
ou 3.
The format of the DIP Switch Retrieval Response message is identical to the format of the DIP
2.
zh 201
Switch Retrieval Request message. The current value of the switches is returned in the field
SWITCHES.
Table 3-3 DIP switches*

DIP Switch Switches bit mask Meaning if set
BIO_SW1_M 00000000 10000000b IF loopback
BIO_SW2_M 00000000 01000000b Reload reverse link long code each 80-ms frame
BIO_SW3_M 00000000 00100000b Forward link scrambling disable
BIO_SW4_M 00000000 00010000b Forward link puncturing disable
BIO_SW5_M 00000000 00001000b Reverse link power control disable
BIO_SW6_M 00000000 00000100b Turn Tx power on during acquisition and sync channel
BIO_SW7_M 00000000 00000010b Sounder mode
BIO_SW8_M 00000000 00000001b Force reverse link voice to full rate
BIO_SW9_M 00000001 00000000b Turn off Sleep mode operation

Packet Definitions
Table 3-3 DIP switches*

DIP Switch Switches bit mask Meaning if set
BIO_SW10_M 00000010 00000000b Suppress VOX and audio filters
*Extra disclaimer: These values are extremely subject to change with no prior notice. Qualcomm does not
guarantee that these values will retain their functions in future versions of code.
3.4.45 DIP Switch Set (48 / 0x30)

The DM changes the value of one or more of the software DIP switches by sending a DIP Switch
Set Request message. The DMSS responds by setting the value of the switch word to the value
given in the DIP Switch Set Request message, and sending a DIP Switch Set Response message
in return. Note that all the switches are set at once, so it is necessary to read the current switch
settings and return the current values of all the switches that are not being changed.
T
DIP switches are highly hardware dependent and their meanings are volatile; any permanent
n PS
configuration switches options will be given NV items or DIAG packets.
34
3.4.45.1 DIP Switch Set Request
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
message
3
15
ei .0
SWITCHES 2 New value for software DIP switches; see Table 3-3
0.
w 01
12
ou 3.
3.4.45.2 DIP Switch Set Response

2.
zh 201
The format of the DIP Switch Set Response message is identical to the format of the DIP Switch
Set Request message.
3.4.46 Vocoder PCM Loopback (49 / 0x31)

The DM requests the DMSS to order the vocoder to start or stop PCM loopback by sending the
DMSS a Vocoder PCM Loopback Request message. The DMSS requests the vocoder to start or
stop performing PCM loopback according to the status of the Boolean field PCM_LB.
In PCM loopback, the vocoder loops back the PCM samples from the encoder’s input samples as
the decoder’s output samples. Voice entering the DMSS’ microphone should be echoed in the
DMSS’ earpiece.

Packet Definitions
3.4.46.1 Vocoder PCM Loopback Request

message
PCM_LB 1 PCM loopback on/off indicator; valid values are:

 0 – Stop PCM loopback
 1 – Start PCM loopback
3.4.46.2 Vocoder PCM Loopback Response

The format of the Vocoder PCM Loopback Response message is identical to the format of the
Vocoder PCM Loopback Request message.
3.4.47 Vocoder PKT Loopback (50 / 0x32)
T
n PS
The DM requests the DMSS to order the vocoder to start or stop packet loopback by sending the
DMSS a Vocoder PKT Loopback Request message. The DMSS requests the vocoder to start or
34
stop performing packet loopback according to the status of the Boolean field PKT_LB.
om 8:
In packet loopback, the vocoder loops vocoder input packages back as output. The DMSS will
l.c :4
. c
thus echo back any vocoder data it receives over the air.
te 13
.7 bk t
41 -b 1 a
3.4.47.1 Vocoder PKT Loopback Request

3
15
ei .0

0.
w 01
12
ou 3.

message
2.
zh 201
PKT_LB 1 PKT loopback on/off indicator; valid values are:

 0 – Stop packet loopback
 1 – Start packet loopback
3.4.47.2 Vocoder PKT Loopback Response

The format of the Vocoder PKT Loopback Response message is identical to the format of the
Vocoder PKT Loopback Request message.
3.4.48 Obsolete (51 / 0x33)

3.4.49 Obsolete (52 / 0x34)


Packet Definitions
3.4.50 Call Origination (53 / 0x35)

The DM may cause an origination from the DMSS by sending a Call Origination Request
message. The message specifies the dialed digits and the desired service option. The DMSS
originates the call and responds with a Call Origination Response message. A successful
response message does not guarantee a successful call origination. The phone’s call processing
state should be monitored using the Phone State (63 / 0x3F) (Section 3.4.60) and/or the Status
(12 / 0x0C) (Section 3.4.9).
3.4.50.1 Call Origination Request

message
NUM_DIGITS 1 Number of digits – The DM shall set this field to be the
T
number of valid digits in the DIGITS field
n PS
DIGITS 32 Dialed digits; ASCII chars 0 to 9, #, * only
34
SO 2 Service option; valid values are:
om 8:
 1 – Voice (IS-96)
l.c :4
c
 2 – 8K loopback
.
te 13
 3 – Markov (“old” 8K)
 4 – Reserved
.7 bk t
 5 – Voice, IS-96-A
41 -b 1 a
3
 6 – Voice, 13 K
15
ei .0
 7 – Rate Set 2 Markov (“new” 13K)

0.
w 01
 8 – Rate Set 1 Markov (“new” 8K)

12
 9 – 13 K loopback
ou 3.
 10 – 13 K Markov (“old” 13K)

2.
zh 201
 11 – EVRC
 14 – Rate Set 2 SMS
 17 – 13K voice (IS-733)
 22 – MDR (RS1 in both directions)
 23 – MDR (RS1 forward, RS2 reverse)
 24 – MDR (RS2 forward, RS1 reverse)
 25 – MDR (RS2 in both directions)
 36 – MDR data pattern testing (RS1 in both directions)
 37 – MDR data pattern testing (RS2 in both directions)
 54 – IS-2000 Markov
 55 – IS-2000 loopback
 68 – 4GV narrow band
 65534 – SMS
See IS-95-A 6.7.1.3.2.4, or J-STD-008 2.7.1.3.2.4, but this
is a local mapping of service options.
3.4.50.2 Call Origination Response
message

Packet Definitions
3.4.51 Call End (54 / 0x36)

To terminate a call in progress, the DM sends a Call End Request message to the DMSS.
3.4.51.1 Call End Request

message
3.4.51.2 Call End Response

The format of the Call End Response message is identical to the format of the Call End Request
message. It is sent from the DMSS to the DM to acknowledge receipt of the request message.
3.4.52 Obsolete (55 / 0x37)
T
n PS
34
om 8:
3.4.53 Obsolete (56 / 0x38) l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
3.4.54 Obsolete (57 / 0x39)
15
ei .0
0.
w 01

12
ou 3.
2.
zh 201
3.4.55 Switch to Downloader (58 / 0x3A)

Sending a Switch to Downloader Request message will cause a jump to the resident downloader.
In response, the phone sends a Switch to Downloader Response message before it jumps to the
resident downloader. The DMSS must be in an offline state in order to accept this command (see
Section 3.4.38 for information on changing modes). Once in the resident downloader, the packet
protocol is defined by [Q2].
3.4.55.1 Switch to Downloader Request
CMD_CODE (58 / 0x3A) 1 Message ID – The downloader sets CMD_CODE to 58 for

this message
3.4.55.2 Switch to Downloader Response

The format of the Switch to Downloader Response message is identical to the format of the
Switch to Downloader Request message. It is sent from the DMSS to the downloader.

Packet Definitions
3.4.56 Reserved (59 / 0x3B)
3.4.57 Obsolete (60 / 0x3C)

3.4.58 Obsolete (61 / 0x3D)

3.4.59 Obsolete (62 / 0x3E)

3.4.60 Phone State (63 / 0x3F)
T
n PS
The Phone State Request message asks for current DMSS state information. This information is
returned in the Phone State Response message. This state includes both Analog and CDMA
34
states, corresponding to states defined in IS-95-A and J-STD-008. CDMA states refer to both
om 8:
800 MHz and 1900 MHz (PCS) operation. In addition, an event count will be given to indicate
l.c :4
. c
that enough of the phone’s operating state has changed that additional information should be
te 13
requested. The event count will be initialized at phone powerup and will count events that could
.7 bk t
change the active pilot set or the analog equivalent. Events will include handoffs, call setups, call
41 -b 1 a
3
teardowns, idle handoffs, and analog rescans. For example, if the event count had changed since
15
ei .0
the last time the packet was requested, the Status Response message could be requested to see if
0.
w 01
the PILOT_BASE had changed.

12
ou 3.
2.
zh 201
3.4.60.1 Phone State Request

message

Packet Definitions
3.4.60.2 Phone State Response
message
PHONE_STATE 1 Overall phone state; most significant bit indicates whether

the state is Analog or CDMA
 0x00 – No service (either mode)
Analog states:
 0x01 – Initialization
 0x02 – Idle
 0x03 – Voice channel initialization
 0x04 – Waiting for order
 0x05 – Waiting for answer
 0x06 – Conversation
 0x07 – Release
T
 0x08 – System access
n PS
CDMA states:
 0x81 – Initialization
34
 0x82 – Idle
om 8:
 0x83 – Voice channel initialization
l.c :4
c
 0x84 – Waiting for order
.
te 13
 0x85 – Waiting for answer
 0x86 – Conversation
.7 bk t
41 -b 1 a
 0x87 – Release
3
 0x88 – Update overhead information
15
ei .0
 0x89 – Mobile station origination attempt

0.
w 01
 0x8a – Page response

12
ou 3.
 0x8b – Order/message response

2.
zh 201
 0x8c – Registration access

 0x8d – Message transmission
 0x8E – Use subsystem cmd 75 (subsys 30,
cmd_code 2) to obtain detailed state information
1xEV-DO states:
 0x10 – Phone is offline
 0x11 – Phone is offline 1xEV-DO
 0x12 – Phone is offline analog
 0x13 – Reset
 0x14 – Powerdown
 0x15 – Powersave
 0x16 – Powerup
 0x17 – Low Power mode
 0x18 – Dedicated System Measurement mode
(searcher)
 0x40 – 1xEV mode
EVENT_COUNT 2 Count of state-changing events; indicates that enough of a

change has occurred that other packets should be
consulted for new data; will be initialized to 0 at powerup
and will wrap at 65535

Packet Definitions
3.4.61 Pilot Sets (64 / 0x40)

The Pilot Sets Request message asks for the current members of all pilot sets. This information is
returned in the Pilot Sets Response message. Before this packet was created, the only way to get
this information was to collect searcher log packets and try to compile the information from
them, which may or may not have been accurate due to lost log packets. The information
reported is the number of pilots in each set, the PN offsets and strength, and the pilot increment
for the remaining set. This information will only be valid when the phone is in CDMA mode.
Note that all bytes specified below in the response packet are always transmitted, but only the
first ACTIVE_CNT * 4 + CANDIDATE_CNT * 4 + NEIGHBOR_CNT * 4 bytes are valid data.
3.4.61.1 Pilot Sets Request

message
T
n PS
3.4.61.2 Pilot Sets Response
34
om 8:
l.c :4 Description
. c
te 13
message
.7 bk t
41 -b 1 a
PILOT_INC 2 Pilot increment for remaining set searches

3
15
ei .0
ACTIVE_CNT 1 Count of pilots in the active set (0 to 6)

0.
w 01
CANDIDATE_CNT 1 Count of pilots in the candidate set (0 to 6)

12
ou 3.
NEIGHBOR_CNT 1 Count of pilots in the neighbor set (0 to 20); if IS-95-B capa-

2.
zh 201
bility (0 to 40)
PILOT_SETS Sum of the above There will be one of the following records for each of the
counts of the members of each of the above sets, in the given order –
record below active set first, then candidate, then neighbor.
PILOT_PN 2 PN offset of the member
PILOT_STRENGTH 2 Strength of this pilot; this value is the same as the pilot
strength field in the Pilot Strength Measurement message
(see IS-95-A 6.7.2.3.2.5); the LSByte of this field is set to
-2 * 10 * log10(PS) where PS is the strength of the pilot,
computed by adding the ratios of received pilot energy
per chip, EC, to total received spectral density (noise and
signals), I0, of at most k usable multipath components,
where k is the number of demodulating elements supported
by the mobile station.
PS (dB) = -PILOT_STRENGTH/2
See IS-95-A 6.6.6.2.2 or J-STD-008 2.6.6.2.2.

Packet Definitions
3.4.62 Service Programming Code (65 / 0x41)

The Service Programming Code Request message sends a security code to the phone in an
attempt to enable service programming. Until the correct code is either sent to the phone using
this message or entered on the handset, the items in the service programming menus will not be
allowed to be programmed into, or read from, the phone. The Service Programming Code (SPC)
is exactly the NV item SEC_CODE (see Chapter 6). Whether the given code was the correct one
or not is returned in the Service Programming Code Response message. Also, if an incorrect SPC
is given, the diagnostic task in the phone will time out for 10 sec before responding to any further
requests.
The items protected from being read or written by the SPC are listed in Table 3-4. See Chapter 6
for item definitions.
Table 3-4 NV item read and write protection
T
NV Item Read protected? Write protected?
n PS
NV_LOCK_CODE_I No Yes
34
NV_SEC_CODE_I Yes Yes
NV_FSC_I
om 8: Yes Yes
l.c :4
. c
te 13
NV_OTKSL_I Yes Yes
.7 bk t
NV_WDC_I No Yes
41 -b 1 a
3
15
NV_SLOT_CYCLE_INDEX_I No Yes
ei .0
0.
w 01
NV_CDMA_SID_LOCK_I No Yes
12
ou 3.
NV_ANALOG_SID_LOCK_I No Yes
2.
zh 201
NV_ANALOG_FIRSTCHP_I No Yes
NV_ANALOG_HOME_SID_I No Yes
NV_ANALOG_REG_I No Yes
NV_PCDMACH_I No Yes
NV_SCDMACH_I No Yes
NV_NAM_CHKSUM_I No Yes
NV_MIN1_I No Yes
NV_MIN2_I No Yes
NV_MOB_TERM_HOME_I No Yes
NV_MOB_TERM_FOR_SID_I No Yes
NV_MOB_TERM_FOR_NID_I No Yes
NV_ACCOLC_I No Yes
NV_SID_NID_I No Yes
NV_MIN_CHKSUM_I No Yes
NV_IMSI_MCC_I No Yes
NV_IMSI_11_12_I No Yes

Packet Definitions
Table 3-4 NV item read and write protection (Continued)

NV Item Read protected? Write protected?
NV_IMSI_ADDR_NUM_I No Yes
NV_DIR_NUMBER_I No Yes
NV_DIR_NUMBER_PCS_I No Yes
3.4.62.1 Service Programming Code Request

message
SECURITY_CODE 6 6 bytes of security code, in ASCII format (digits 0 to 9 only)
T
n PS
3.4.62.2 Service Programming Code Response
34
om 8:
l.c :4
c
message
.
te 13
SPC_RESULT 1 Result of the SPC; valid values are:

.7 bk t
1 – Code was correct and Service Programming (SP) is

41 -b 1 a
3 
unlocked
15
ei .0
 0 – Code was incorrect and SP is still locked

0.
w 01
If the code was incorrect, the phone will time out for 10 sec
12
before responding to any more requests through the serial

ou 3.
interface.
2.
zh 201
3.4.63 Bad SPC Mode (66 / 0x42)

sends a request to read or write an item that is considered part of service programming, and the
correct SPC has not yet been entered to unlock service programming, this command code is sent
in response. This message contains the first 16 bytes of the offending message.
message
DATA 16 First 16 bytes of disallowed request
3.4.64 Parameter Retrieval 2 (67 / 0x43)

The DM requests the CDMA retrievable and settable parameters (IS-95-A or J-STD-008
Appendix E) by sending a Parameter Retrieval 2 Request message to the DMSS. The DMSS
responds by sending a Parameter Retrieval 2 Response message that contains the entire set of
CDMA retrievable and settable parameters and a timestamp. The timestamp identifies the time
the parameters were placed into the Parameter Retrieval 2 Response message.

Packet Definitions
3.4.64.1 Parameter Retrieval 2 Request

message
3.4.64.2 Parameter Retrieval 2 Response
message
TIME_STAMP 8 Time the parameters were retrieved; the format is the same
REV_TC_PARMS 14 * 4 Reverse traffic channel parameters; each parameter is

represented as a dword (4 bytes); the parameters are as
T
described in IS-95-A or J-STD-008 Appendix E
n PS
FOR_TC_PARMS 14 * 4 Forward traffic channel parameters; each parameter is
34
om 8:
l.c :4
c
PAG_PARMS 7*4 Paging channel parameters; each parameter is represented
.
te 13
as a dword (4 bytes); the parameters are as described in
IS-95-A or J-STD-008 Appendix E
.7 bk t
41 -b 1 a
ACC_PARMS 8*4 Access channel parameters; each parameter is represented

3
15
ei .0

0.
w 01
12
LAYER2_PARMS 4*5 Layer 2 parameters; each parameter is represented as a

ou 3.
dword (4 bytes); the parameters are as described in IS-95-A

2.
zh 201
or J-STD-008 Appendix E
SYS_TIME 8 Other system time; the parameter is the SYS_TIME field

from the most recently received Sync Channel message;
see IS-95-A 7.7.1.3 or J-STD-008 3.7.1.3
MUX2_FOR_PARMS 26 * 4 MUX2 forward traffic channel parameters; each parameter is

described in J-STD-008 Appendix E
MUX2_REV_PARMS 26 * 4 MUX2 reverse traffic channel parameters; each parameter is

3.4.65 Serial Mode Change (68 / 0x44)

The Serial Mode Change Request message tells the phone to change its serial mode from
Diagnostic mode to Data Services mode (modem-emulation mode). The phone responds with the
Service Programming Code Response message and a short time later switches to Data Services
mode. This message is only implemented in phones with Data Services. After this command is
issued, the phone will no longer be in Diagnostic mode but will be able to accept AT commands.

Packet Definitions
3.4.65.1 Serial Mode Change Request

message
3.4.65.2 Serial Mode Change Response
message
MODE_CHG_RESULT 1 Result of the mode change; valid values are:

 1 – Mode successfully changed to Data mode
 0 – Mode was not successfully changed
T
n PS
3.4.66 Obsolete (69 / 0x45)
34
om 8:
l.c :4
c
3.4.67 Security Password (70 / 0x46)
.
te 13
The Security Password Request message sends the security password to the phone in an attempt
.7 bk t
41 -b 1 a
to unlock secure operations. Diagnostic packets with secure operations are listed in Table 3-5.
3
15
ei .0
0.
w 01
Table 3-5 Diagnostic packets with secure operations

12
ou 3.
Packet type Section

2.
zh 201
Memory Peek Request/Response 3.4.3
Memory Poke Request/Response 3.4.4
Port Output Byte Request/Response 3.4.5
Port Output Word Request/Response 3.4.6
Port Input Request/Response 3.4.7
Port Input Word Request/Response 3.4.8
NV Memory Peek Request/Response 3.4.14
NV Memory Poke Request/Response 3.4.15
In addition to the packets listed in Table 3-5, the NV Item Write Request for the NV items that
are protected by the service programming code (see Section 3.4.62) will be accepted if the
security password is successfully given to the phone. The ESN of an unlocked phone can also be
written using the NV Item Write Request.
The phone responds with the Security Password Response message, which contains a status
telling whether the password is correct. If an incorrect password is sent to the phone, the phone
will power off.
For more information on the DMSS security plan, see Section 3.3.

Packet Definitions
3.4.67.1 Security Password Request

message
PASSWORD 8 8 bytes of security password
3.4.67.2 Security Password Response
message
PASSWORD_OK 1 Password result; valid values are:

 1 – Correct password
T
 0 – Incorrect password; phone will power off
n PS
3.4.68 Bad Security Mode (71 / 0x47)
34
om 8:
l.c :4
c
sends a request to perform an operation that is considered a secure operation, and the correct
.
te 13
security password has not yet been entered to unlock the phone, this command code is sent in
.7 bk t
response. This message contains the first 16 bytes of the offending message. See Section 3.4.67
41 -b 1 a
3
and Section 3.3 for information on security.
15
ei .0
0.
w 01

12
ou 3.
2.
zh 201
message
DATA 16 First 16 bytes of disallowed request

Packet Definitions
3.4.69 Preferred Roaming List Write (72 / 0x48)

Since the Preferred Roaming List (PRL) is an item that is too large to write to NV memory using
the NV Item Write Request message, the Preferred Roaming List Write Request/Response is
used instead.
For the interpretation of the PRL data, see [S7].
The PRL must be divided into subblocks of 120 bytes each and sent piece by piece to the phone,
where it is reconstructed and written to NV memory. Other information is included in each
message, such as how many bits of good data are contained in a particular block, whether this is
the first block, and whether there will be more blocks coming. The phone reassembles the PRL
and writes it with a command to NV when it has been successfully reassembled. The phone
responds, acknowledging receipt of each block, and returning some status on the state of the
PRL.
The sequencing required to write the PRL is:
T
1. A Mode Change (Offline) Request packet is sent to the subscriber station.
n PS
2. A Service Programming Code Request is sent to the phone to unlock the ability to program
34
this item. The Offline and SPC commands may be sent to the subscriber station in either
om 8:
order. l.c :4
. c
3. The DM determines the size of the PRL that it wants to send to the phone and breaks it up
te 13
into N blocks of size 120 bytes or less (for the last block).
.7 bk t
41 -b 1 a
4. The blocks are sent to the phone in order, specifying the sequence number and whether there
3
15
are more blocks coming, using the Preferred Roaming List Write Request message. Other
ei .0
messages, except for Preferred Roaming List Read Request, may be interspersed between
0.
w 01
12
these messages.
ou 3.
2.
zh 201
PRL data created by the QPST Roaming List Editor or read by the PST or DM from a phone has
the following format:
VERSION 1 Version of the format of this file; valid values are:

 1 – QUALCOMM nonstandard PRL format
 2 – IS-683A standard PRL format
NUM_BITS 2 or 4 Number of valid bits in the data block; if VERSION is 2, the

size of NUM_BITS is 4 bytes
DATA NUM_BITS/8 Block of PRL data; this is the smallest number of bytes which
contains NUM_BITS bits (NUM_BITS divided by 8 and
rounded up); it is just this DATA field that is sent to the phone
using the PRL Write message

Packet Definitions
The following shows a typical transaction:
DM Subscriber Station
Mode Change (offline) ⎯⎯⎯⎯⎯⎯→
←⎯⎯⎯⎯⎯⎯ Mode Change Response
Srv. Programming Code ⎯⎯⎯⎯⎯⎯→
←⎯⎯⎯⎯⎯⎯ Srv. Programming Code Rsp
PR List Write Request 0 ⎯⎯⎯⎯⎯⎯→
(more) ←⎯⎯⎯⎯⎯⎯ PR List Write Rsp, got block 0
PR List Write Request 1 ⎯⎯⎯⎯⎯⎯→
(more) ←⎯⎯⎯⎯⎯⎯ PR List Write Rsp, got block 1
…
PR List Write Request N ⎯⎯⎯⎯⎯⎯→
T
n PS
(no more) ←⎯⎯⎯⎯⎯⎯ PR List Write Rsp, with NV status
34
3.4.69.1 Preferred Roaming List Write Request
om 8:
l.c :4
c
.
te 13

.7 bk t
message
41 -b 1 a
3
15
SEQ_NUM 1 Sequence number of this block of data; valid values are:
ei .0
 0 – First block
0.
w 01
 All subsequent blocks – Previous SEQ_NUM + 1

12
ou 3.
MORE 1 Block status; valid values are:

2.
zh 201
 1 – More data blocks to come

 0 – Last data block
NAM 1 NAM with which this PRL is associated
NUM_BITS 2 Number of valid bits in the data block (1 to 960); this will
always be exactly 960 except for the last block, which may
have fewer valid bits
DATA 120 Block of PRL data; all bytes will always be sent across the
link, but only NUM_BITS bits are valid data

Packet Definitions
3.4.69.2 Preferred Roaming List Write Response

The Preferred Roaming List Write Response message returns a status telling whether the block
was successfully received, and any NV status, if appropriate.
CMD_CODE (72 / 0x48) 1 Message ID – The phone sets CMD_CODE to 72 for this
message
PR_LIST_STATUS 1 Status of Preferred Roaming List Write; valid values are:

 0 – Received block successfully (not the last block)
 1 – Received last block successfully and wrote completed
PRL to NV
 2 – Received block with SEQ_NUM out of order
 3 – Overflowed maximum PRL size
NV_STATUS 2 If PR_LIST_STATUS is 1 (wrote PRL to NV), then this field

contains the status returned by the NV task; otherwise, this
T
field is undefined; valid values are:
n PS
34
om 8:
 3 – NV memory is full
l.c :4
c
.
te 13
 5 – Variable was not active (should not get this status for
a write command)
.7 bk t
41 -b 1 a
 6 – Bad parameter in command block

3
 7 – Item was read-only
15
ei .0

0.
w 01

12
ou 3.
2.
zh 201
3.4.70 Preferred Roaming List Read (73 / 0x49)

Since the Preferred Roaming List (1900-MHz phones only) is an item that is too large to read
from NV memory using the NV Item Read Request message, the Preferred Roaming List Read
Request/Response is used instead. The PRL is read from the phone’s NV memory, divided into
subblocks, and read piece by piece from the phone until all of it has been retrieved and
reconstructed by the DM. Other information is included in the message, such as how many bits
of valid data are contained in a particular block, whether this is the first block, and whether there
will be more blocks coming. The DM should request the subblocks in order, requesting
subsequent pieces of the list if more are available, and reassemble the PRL.
Sequencing requirements are:
The DM sends a request for the first block of the Preferred Roaming List using the Preferred
Roaming List Read Request message with the SEQ_NUM set to zero.
1. Depending on the response from the phone, subsequent messages are sent until the whole
Preferred Roaming List has been retrieved.
2. Requests should be made for the PRL associated with each NAM one at a time.
3. Other messages, except for the Preferred Roaming List Write Request, may be interspersed
with these requests.

Packet Definitions
The following shows a typical transaction:
DM Subscriber Station
PR List Read Request 0 ⎯⎯⎯⎯⎯⎯→
←⎯⎯⎯⎯⎯⎯ PR List Read Rsp, block 0 (more)
PR List Read Request 1 ⎯⎯⎯⎯⎯⎯→
←⎯⎯⎯⎯⎯⎯ PR List Read Rsp, block 1 (more)
…
PR List Read Request N ⎯⎯⎯⎯⎯⎯→
←⎯⎯⎯⎯⎯⎯ PR List Read Rsp, block N (no more)
3.4.70.1 Preferred Roaming List Read Request
T
n PS
message
34
om 8:
SEQ_NUM 1 Sequence number
l.c :4
c
 0 – First request for the PRL
.
te 13
 Subsequent requests – SEQ_NUM equal to the previous
SEQ_NUM + 1
.7 bk t
41 -b 1 a
NAM 1 PRL associated with this NAM is the one requested

3
15
ei .0
0.
w 01
3.4.70.2 Preferred Roaming List Read Response

12
ou 3.
The Preferred Roaming List Read Response message returns a status telling whether there were
2.
zh 201
any errors, repeats the sequence number, returns the data block, and tells whether there are more
blocks to come.
CMD_CODE (73 / 0x49) 1 Message ID – The phone sets CMD_CODE to 73 for this
message
PR_LIST_STATUS 1 Status of Preferred Roaming List Read; valid values are:

 0 – No errors
 1 – NV read failure

Packet Definitions

NV_STATUS 2 If PR_LIST_STATUS is 1 (status from NV was not normal
DONE status), then this field contains the status returned by
the NV task; otherwise this field is undefined
 3 – NV memory is full (should not get this status for a read
request)
 5 – Variable was not active
 6 – Bad parameter in command block
 7 – Item was read-only (should not get this status for a
read request)
 9 – Free memory exhausted (should not get this status for
a read request)
T
n PS
SEQ_NUM 1 Sequence number of this block of data; valid values are:
34
 0 – First block
om 8:
 All subsequent blocks – Previous SEQ_NUM + 1
l.c :4
c
MORE 1 Block status; valid values are:
.
te 13
 1 – More data blocks after this one

 0 – Last data block
.7 bk t
41 -b 1 a
3
NUM_BITS 2 Number of valid bits in the data block (1 to 960)
15
ei .0
DATA 120 Block of PRL data; all bytes will always be sent across the
0.
w 01
link, but only NUM_BITS bits are valid data

12
ou 3.
2.
zh 201
3.4.71 Obsolete (74 / 0x4A)


Packet Definitions
3.4.72 Subsystem Dispatch (75 / 0x4B)

The DMSS diagnostics protocol, the Subsystem Dispatcher, extends the diagnostic command
interface by assigning a unique command code space to a subsystem. Commands in a subsystem
follow the same protocol rules as a standard Request/Response packet in the DMSS diagnostics
service.
NOTE As the functions and capabilities of the DMSS are expanded, the list of subsystem IDs defined
by Qualcomm will expand as well. Subsystem IDs from 250 to 255 are reserved for customer
use. Customers who define their own special diagnostic packets should use these subsystem
IDs. They will not collide with Qualcomm usage.
3.4.72.1 Subsystem Dispatch Request
T
n PS
message
34
SUBSYS_ID 1 Subsystem identifier; this is an enumeration of all defined
subsystems
om 8:
SUBSYS_CMD_CODE 2
l.c :4
Command code for the given subsystem; defines the
. c
subsystem packet in the same manner that the CMD_CODE
te 13
field defines this packet as a dispatch packet

.7 bk t
41 -b 1 a
REQUEST Variable Request packet data for this command; defined separately
3
for each command
15
ei .0
0.
w 01
3.4.72.2 Subsystem Dispatch Response

12
ou 3.
2.
zh 201

message
SUBSYS_ID 1 Subsystem Identifier; this is an enumeration of all defined

subsystems
SUBSYS_CMD_CODE 2 Command code for the given subsystem; defines the

RESPONSE Variable Response packet data for this command; defined separately
for each command
3.4.73 Obsolete (76 / 0x4C)

3.4.74 Obsolete (77 / 0x4D)


Packet Definitions
3.4.75 Obsolete (78 / 0x4E)

3.4.76 Obsolete (79 / 0x4F)

3.4.77 Obsolete (80 / 0x50)

3.4.78 Feature Query (81 / 0x51)

When the DM sends a Feature Query Request message, the DMSS responds with a Feature
Query Response message.
T
n PS
The reported bit mask describes which features are enabled and disabled in a particular phone
model or software revision. This bit mask can be used to access NV items or other features
34
dynamically.
om 8:
l.c :4
. c
3.4.78.1 Feature Query Request
te 13
.7 bk t

41 -b 1 a
3
15
ei .0
message
0.
w 01
12
ou 3.
3.4.78.2 Feature Query Response

2.
zh 201
message
LENGTH 2 Length in bytes of the included FEATURE_MASK
FEATURE_MASK LENGTH Bit mask of features for this phone model and software
revision; see Appendix B for bit mask descriptions
3.4.79 Obsolete (82 / 0x52)

3.4.80 Obsolete (83 / 0x53)

3.4.81 Obsolete (84 / 0x54)


Packet Definitions
3.4.82 IS-95-B Frame Error Rate (85 / 0x55)

When the DM sends an IS-95-B Frame Error Rate Request message, the DMSS responds with an
IS-95-B Frame Error Rate Response message.
This message will only exist in targets that contain the IS-95-B MDR feature.
3.4.82.1 IS-95-B Frame Error Rate Request

message
3.4.82.2 IS-95-B Frame Error Rate Response
T
n PS
message
34
BAD_FRAMES 4*8 Array of 4-byte elements containing the number of bad
om 8:
frames received, per channel (8 channels), by the DMSS;
l.c :4
c
the DMSS channels appear in the array in the following
.
te 13
order:
 0 – F-FCH
.7 bk t
41 -b 1 a
3  1 to 7 – F-SCCH1 to F-SCCH7
15
TOTAL_FRAMES 4*8 Array of 4-byte elements containing the total number of
ei .0
frames received, per channel (8 channels), by the DMSS;

0.
w 01
the DMSS channels appear in the array in the following

12
ou 3.
order:
2.
zh 201
 0 – F-FCH
 1 to 7 – F-SCCH1 to F-SCCH7

Packet Definitions
3.4.83 IS-95-B Get F-SCCH Walsh Codes (86 / 0x56)

When the DM sends an IS-95-B Get F-SCCH Walsh Codes Request message, the DMSS
responds with an IS-95-B Get F-SCCH Walsh Codes Response message.
3.4.83.1 IS-95-B Get F-SCCH Walsh Codes Request

message
3.4.83.2 IS-95-B Get F-SCCH Walsh Codes Response
T
n PS
message
34
NUM_ASET 2 Number of active set entries in the ASET_ENTRIES array
ASET_ENTRIES 19 * 6
om 8:
Array of six active set entries; see Section 3.4.83.2.1 for
l.c :4
. c
format description
te 13
Note: Entries for pilots not active will exist in the packet but
.7 bk t
will not contain valid data.

41 -b 1 a
3
15
ei .0
3.4.83.2.1 IS-95-B Active Set Entry

0.
w 01
12
ou 3.

2.
zh 201
PILOT_PN 2 PN offset of the pilot
NUM_F_SCCH 1 Number of forward supplemental code channels active in the

pilot
WALSH_CODE 2*8 Array of Walsh codes for each channel

Note: Entries for supplemental code channels that are not
active will exist in the packet but will not contain valid data.
Array Index for Walsh codes:
 0 – F-FCH
 1 to 7 – F-SCCH1 to F-SCCH7

Packet Definitions
3.4.84 IS-95-B Set Maximum Number F-SCCH (87 / 0x57)

When the DM sends an IS-95-B Set Maximum Number F-SCCH Request message, the DMSS
responds with an IS-95-B Set Maximum Number F-SCCH Response message.
3.4.84.1 IS-95-B Set Maximum Number F-SCCH Request

message
SERVICE_OPTION 2 Service option for which this setting will take effect
NUM_SCCH 1 Sets the maximum number of forward supplemental code

channels for the specified service option to allow in all
subsequent calls
T
n PS
3.4.84.2 IS-95-B Set Maximum Number F-SCCH Response
34
om 8:
Field Length (bytes)l.c :4 Description
. c
te 13
message
.7 bk t
41 -b 1 a
3
3.4.85 IS-95-B Parameter Retrieval (88 / 0x58)
15
ei .0
0.
w 01
The IS-95-B Parameter Retrieval Request/Response is exactly the same as the Parameter
12
ou 3.
Retrieval 2 Request/Response, except that the IS-95-B parameters are also retrieved and
2.
zh 201
returned. This packet is only available for IS-95-B–capable phones and replaces the Parameter
Retrieval Request/Response in Section 3.4.32 for those targets. The Parameter Retrieval 2
Request/Response in Section 3.4.64 is still valid for IS-95-B targets.
3.4.85.1 IS-95-B Parameter Retrieval Request

message

Packet Definitions
3.4.85.2 IS-95-B Parameter Retrieval Response
message
TIME_STAMP 8 Time the parameters were retrieved; the format is the same
REV_TC_PARMS 14 * 4 Reverse traffic channel parameters; each parameter is
FOR_TC_PARMS 14 * 4 Forward traffic channel parameters; each parameter is

PAG_PARMS 7*4 Paging channel parameters; each parameter is represented

T
n PS
ACC_PARMS 8*4 Access channel parameters; each parameter is represented
34
LAYER2_PARMS 4*5
om 8:
Layer 2 parameters; each parameter is represented as a
l.c :4
. c
dword (4 bytes); the parameters are as described in IS-95-A
te 13
or J-STD-008 Appendix E
.7 bk t
41 -b 1 a
SYS_TIME 8 Other system time; the parameter is the SYS_TIME field

3
from the most recently received Sync Channel message; see
15
ei .0
IS-95-A 7.7.1.3 or J-STD-008 3.7.1.3

0.
w 01
MUX2_FOR_PARMS 26 * 4 MUX2 forward traffic channel parameters; each parameter is

12
ou 3.

2.
zh 201
MUX2_REV_PARMS 26 * 4 MUX2 reverse traffic channel parameters; each parameter is

REV_SCCH 4*2*7 IS-95-B reverse supplemental code channel parameters; the

parameters are arranged in an array of seven channels,
R-SCCH1 to R-SCCH7; see Section 3.4.85.3 for the
description of each channel entry
FOR_SCCH 4*2*7 IS-95-B forward supplemental code channel parameters; the

parameters are arranged in an array of seven channels,
F-SCCH1 to F-SCCH7; see Section 3.4.85.3 for the
description of each channel entry

Packet Definitions
3.4.85.3 IS-95-B channel parameter entry
SECONDARY 4 9600 bps or 14400 bps frame, primary traffic only; each
parameter is represented as a dword (4 bytes); the
parameters are as described in Tables 6.4.5.2-3 and
6.4.5.4-3 of [S6]
PRIMARY 4 9600 bps or 14400 bps frame, blank-and-burst with

secondary traffic only; each parameter is represented as a
dword (4 bytes); the parameters are as described in Tables
6.4.5.2-3 and 6.4.5.4-3 of [S6]
3.4.86 Embedded File System Operation (89 / 0x59)

When the DM sends an Embedded File System Operation Request message, the DMSS responds
with an Embedded File System Operation Response message.
T
n PS
Since multiple operations can be performed with this request message, each operation includes
operation-specific data necessary to complete the operation. Each operation is documented
34
separately in this section.
om 8:
Due to buffer limitations, read and write operations are performed in blocks, often requiring
l.c :4
. c
multiple blocks to complete a read or write operation. Multiple blocks are written using a simple
te 13
sequence numbering scheme and multiple request/response packets. A sequence number of 0

.7 bk t
41 -b 1 a
indicates a new file. If a sequence number of 0 is specified, any unfinished file transfer will be
3
purged and the new sequence will begin. If the sequence number is overrun, the sequence
15
ei .0
number following 0xFF should be 0x01.

0.
w 01
12
ou 3.
3.4.86.1 Embedded File System Operation Request

2.
zh 201

message
OPERATION 1 Operation to be performed on the EFS; valid values are:

 0 – Create directory
 1 – Remove directory
 2 – Display directory list
 3 – Display file list
 4 – Read file
 5 – Write file
 6 – Remove file
 7 – Get file attributes
 8 – Set file attributes
 10 – Iterative directory list
 11 – Iterative file list
 12 – Space available
OP_SPEC_DATA Variable Operation-specific data; see Section 3.4.86.3 through

Section 3.4.86.17 for formats for each operation

Packet Definitions
3.4.86.2 Embedded File System Operation Response
message
OPERATION 1 Operation specified in request message
STATUS 1 Status of specified operation; valid values are:

 0 – Success
 1 – FS device failure
 2 – Reserved
 3 – Reserved
 4 – File open
 5 – File already exists
 6 – File does not exist
 7 – Directory already exists
 8 – Directory does not exist
T
n PS
 9 – Directory not empty
 10 – Unknown operation
34
 11 – Illegal operation
 12 – Parameter error
om 8:
 13 – Bad file name
l.c :4
c
 14 – Reserved
.
te 13
 15 – Reserved
 16 – Reserved
.7 bk t
41 -b 1 a
 17 – Invalid operation for remote file

3
15
 18 – Reserved
ei .0
 19 – Reserved
0.
w 01
 20 – Reserved
12
ou 3.
 21 – Reserved
2.
zh 201
 22 – Out of file system space

 23 – Block full
 24 – Out of master directory space
 25 – Out of file block list (similar to I-nodes) space
OP_SPEC_DATA Variable Operation-specific data; this data is only provided if the

value of the STATUS field is Success; see Section 3.4.86.3
through Section 3.4.86.17 for formats for each operation
3.4.86.3 Common data structures for operations

This section outlines common structures that are used by multiple operations.
3.4.86.3.1 Filename/directory name structure
LENGTH 1 Operation-specific data; this data is only provided if the

value of the STATUS field is Success; see Section 3.4.86.3
through Section 3.4.86.17 for formats for each operation
NAME LENGTH Null-terminated ASCII string containing the absolute name

of the file or directory being specified (unless otherwise
specified)

Packet Definitions
3.4.86.3.2 Data block structure
LENGTH 2 Length of DATA, maximum of 256 bytes
DATA LENGTH Data for this block
3.4.86.3.3 File attributes structure
ATTRIBUTES 2 Attributes of new file; valid values are:

 0x00FF – Unrestricted
 0x007F – Permanent; cannot be removed or truncated
 0x00BF – Read-only
 0x0037 – System permanent; file will remain after a
system reformat
T
 0x001F – Remote file; resides outside file system
n PS
address space
34
BUFFERING_OPTION 1 Whether to allow file buffering for this file; valid values are:
om 8:
 0 – Prohibit file buffering; physical writes must be
l.c :4completed on the device before write operations are
. c
acknowledged
te 13
 1 – Allow file buffering; the EFS may use RAM to buffer

.7 bk t
written data to an open file; this increases the slight

41 -b 1 a
possibility of data loss in the event of an abnormal

3
15
powerdown of the DMSS
ei .0
0.
w 01
CLEANUP_OPTION 1 Cleanup option in case of failure; valid values are:

12
ou 3.
 0 – Close file as is
 1 – Delete file and remove from directory
2.
zh 201
 2 – Truncate file from specified position

 3 – Revert to last check-pointed version
3.4.86.4 Create directory operation
3.4.86.4.1 Operation Specific Data for Create Directory Request
DIR_NAME Variable Directory name; see Section 3.4.86.3.1 for format

description
3.4.86.4.2 Operation Specific Data for Create Directory Response

No additional information is necessary.
3.4.86.5 Remove directory operation
NOTE The specified directory must be empty to remove it.

Packet Definitions
3.4.86.5.1 Operation Specific Data for Remove Directory Request

description
3.4.86.5.2 Operation Specific Data for Remove Directory Response

3.4.86.6 Display Directory List Operation
3.4.86.6.1 Operation Specific Data for Display Directory List Request
T
n PS
description
34
om 8:
3.4.86.6.2 Operation Specific Data for Display Directory List Response
l.c :4
. c
te 13
.7 bk t
NUM_ITEMS 1 Number of items listed in this directory

41 -b 1 a
3
15
DIR_LISTINGS Variable Directory listing; see Section 3.4.86.3.1 for format
ei .0
description
0.
w 01
12
ou 3.
3.4.86.7 Display File List Operation

2.
zh 201
NOTE The contents of this section are identical to that in Display Directory List Operation.
3.4.86.8 Read File Operation
3.4.86.8.1 Operation Specific Data for Read File Request
SEQUENCE_NUMBER 1 Sequence number; 0 indicates new listing
FILE_NAME Variable Filename; see Section 3.4.86.3.1 for format description.

Note: Only include this data if requesting the first block of a
file. If SEQUENCE_NUMBER is nonzero, this field is
omitted.

Packet Definitions
3.4.86.8.2 Operation Specific Data for Read File Response
SEQUENCE_NUMBER 1 Sequence number for multiple block reads; this number is 0

for the first block of a file
MORE 1 Flag to specify if more blocks are to be sent to complete the

file transfer; valid values are:
 0 – No more blocks will follow
 1 – At least one more block remains
TOTAL_LENGTH 4 Total length of file; specified in first block of read-only
DATA_BLOCK Variable Data block; see Section 3.4.86.3.2 for format description
3.4.86.9 Write File Operation
T
3.4.86.9.1 Operation Specific Data for Write File Request
n PS
34
om 8:
SEQUENCE_NUMBER 1 Sequence number for multiple block writes; use 0 to start a
l.c :4
new file
. c
te 13
MORE 1 Flag to specify if more blocks are to be sent to complete the
file transfer; valid values are:
.7 bk t
41 -b 1 a
 0 – No more blocks will follow

3
15
 1 – Another block will follow
ei .0
0.
w 01
BEGIN_DATA Variable Data for beginning block of file transfer (format described
12
below in Beginning Block Data)

ou 3.
Note: Only include this data if sending the first block of a file.
2.
zh 201
During subsequent blocks, this field has length 0.
DATA_BLOCK Variable See Section 3.4.86.3.2 for format description
3.4.86.10 Beginning Block Data
OVERWRITE 1 Flag to specify whether to overwrite an existing file with

same name; valid values are:
 0 – Do not overwrite file
 1 – Overwrite file
TOTAL_LENGTH 4 Total length of file to be transferred
ATTRIBUTES 4 Attributes; see Section 3.4.86.3.3 for format description
FILE_NAME Variable Filename; see Section 3.4.86.3.1 for format description.

Note: Only include this data if sending the first block of a file.
During subsequent blocks, this field has length 0.

Packet Definitions
3.4.86.10.1 Operation Specific Data for Write File Response
SEQUENCE_NUMBER 1 Sequence number of transfer
3.4.86.11 Remove File Operation
3.4.86.11.1 Operation Specific Data for Remove File Request
FILE_NAME Variable Filename; see Section 3.4.86.3.1 for format description
3.4.86.11.2 Operation Specific Data for Remove File Response
T
n PS
3.4.86.12 Get File Attributes Operation
34
om 8:
l.c :4
c
3.4.86.12.1 Operation Specific Data for Get File Attributes Request
.
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
3.4.86.12.2 Operation Specific Data for Get File Attributes Response

12
ou 3.
2.
zh 201
CREATION_DATE 4 File creation date; see Time Stamp (29 / 0x1D)

(Section 3.4.26) for information
LENGTH 4 Logical length of file
3.4.86.13 Set File Attributes Operation
3.4.86.13.1 Operation Specific Data for Set File Attributes Request

3.4.86.13.2 Operation Specific Data for Set File Attributes Response


Packet Definitions
3.4.86.14 Remote File Link Operation

This operation creates a link to a file that does not reside in the file system’s data partition.
3.4.86.14.1 Operation Specific Data for Remote File Link Request
BASE_ADDRESS 4 System address for start of file to be referenced
LENGTH 4 Length (in bytes) of file to be referenced
3.4.86.14.2 Operation Specific Data for Remote File Link Response

T
n PS
3.4.86.15 Iterative Directory List Operation
34
NOTE This section is only valid for builds FS 3.0. If this command is enabled, the Display Directory
om 8:
List Operation will not be supported. l.c :4
. c
te 13
3.4.86.15.1 Operation Specific Data for Iterative Directory List Request

.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.

2.
zh 201
description
3.4.86.15.2 Operation Specific Data for Iterative Directory List Response

LOGICAL_SIZE 4 Size of file data
PHYSICAL_SIZE 4 Amount of space consumed on device
DIRNAME_LENGTH 1 Length of directory path in DIR_LISTINGS
DIR_LISTINGS Variable Directory listing; see Section 3.4.86.3.1 for format description
3.4.86.16 Iterative File List Operation
NOTE The contents of this section are identical to that in Iterative Directory List Operation.

Packet Definitions
3.4.86.17 Space Available Operation
3.4.86.17.1 Operation Specific Data for Space Available Request

No additional information is required.
3.4.86.17.2 Operation Specific Data for Space Available Response
SPACE_AVAIL 4 Number of bytes available in the file system
3.4.87 Reserved (90 / 0x5A)
3.4.88 Reserved (91 / 0x5B)
T
n PS
3.4.89 Communications Configuration (92 / 0x5C)
34
om 8:
When the DM sends a Communications Configuration Request message, the DMSS responds
l.c :4
c
with a Communications Configuration Response message.
.
te 13
This command is used to query available communication speeds (bit rates) and to change the bit
.7 bk t
rate in the DMSS. If a bit rate change command is issued, the DMSS will change its bit rate
41 -b 1 a
3
immediately after issuing the response. A delay of approximately 500 ms is expected for this
15
ei .0
transition to occur. If the target is capable of streaming output, streaming output will be turned
0.
w 01
off before the bit rate change.

12
ou 3.
2.
zh 201
3.4.89.1 Communications Configuration Request

message
SUB_CMD 1 Indicates which communications configuration command is

being issued; valid values are:
 0 – RS-232 Configuration Information Request
 1 – RS-232 Configuration Change Request
BITRATE 4 Bit rate to be set; the value is the number of bits/second;

valid values are:
 19200
 38400 (default at DMSS startup)
 57600
 115200
Note: This field is only sent on a change request, not an
information request.

Packet Definitions
3.4.89.2 Communications Configuration Response
message
SUB_CMD 1 Indicates which communications configuration command is

being issued; valid values are:
 0 – RS-232 Configuration Information Request
 1 – RS-232 Configuration Change Request
CMD_SPECIFIC_DATA Variable Command-specific data; based on the value of the

SUB_CMD field, one of the following will be used:
 0 – RS-232 Info Response Type; see Section 3.4.89.2.1
 1 – RS-232 Command Response Type; see
Section 3.4.89.2.2
T
3.4.89.2.1 RS232 Info Response Type
n PS
34
om 8:
COUNT 1 Number of BITRATES options to be listed
l.c :4
c
BITRATES 4 * COUNT Array of 4-byte components with COUNT entries
.
te 13
.7 bk t
41 -b 1 a
3.4.89.2.2 RS232 Command Response Type 3

15
ei .0

0.
w 01
12
SUCCESS 1 Boolean value indicating success of bit rate change; valid

ou 3.
values are:
2.
zh 201
 0 – Unsuccessful
 1 – Successful
3.4.90 Obsolete (93 / 0x5D)

This has been replaced by Logging Configuration (cmd_code 115 / 0x73), Operation 3 (see
Section 3.4.113).
3.4.91 Reserved (94 / 0x5E)
3.4.92 Reserved (95 / 0x5F)
3.4.93 Event Report Control (96 / 0x60)

When the DM sends an Event Report Control Request message, the DMSS responds with an
Event Report Control Response message. This command is used to configure the service, as well
as for the service to send information. See Section 3.4.94 for information on the Event Report
message.

Packet Definitions
3.4.93.1 Event Report Control Request

message
OPERATION_SWITCH 1 Turn scheduling on or of

 0 – Off
 1 – On
3.4.93.2 Event Report Control Response
message
T
LENGTH 2 Length – The DMSS sets LENGTH to 0 for this message
n PS
3.4.94 Event report (96 / 0x60)
34
om 8:
When enabled, the DMSS sends an event report message that contains all accumulated event
l.c :4
c
data in the DMSS. This message contains a variable length response.
.
te 13
.7 bk t
3.4.94.1 Event Report message

41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.
message
2.
zh 201
LENGTH 2 Length in bytes of the fields included in EVENTS
EVENTS LENGTH Series of events; the format is described in

Section 3.4.94.1.1
3.4.94.1.1 EVENT item definition
EVENT_ID 2 Unique event ID; the format is described in EVENT_ID

format description on following page
TIME Variable Time the event was originally generated (not transmitted);
the format is the same as in the Time Stamp (29 / 0x1D) (see
Section 3.4.26); the length of the timestamp will be
determined by a flag in the EVENT_ID; see EVENT_ID
format description n following
PAYLOAD_LEN 0 or 1 Length in bytes of the included PAYLOAD_DATA (if

applicable)
PAYLOAD_DATA PAYLOAD_LEN Payload data; if this particular EVENT_ID is specified to

contain extra data, it will be included in this field

Packet Definitions
3.4.94.1.2 EVENT_ID format description
EVENT_ID 12 Unique event ID
RESERVED 1 Reserved flag bit
PAYLOAD_LENGTH_ 2 Flag to specify whether PAYLOAD _DATA is present in event

FLAG  0 – No payload data
 1 – One byte of payload data, no PAYLOAD_LENGTH
field
 2 – Two bytes of payload data, no PAYLOAD_LENGTH
field
 3 – One byte PAYLOAD_LENGTH field specifying length
of payload data to follow it
TIME_LENGTH 1 Whether this timestamp is a full or half timestamp; the first

event in a buffer will always have a full system timestamp; to
conserve bandwidth, subsequent events will have a
T
n PS
truncated timestamp containing bits 8 to 23 of the full system
timestamp; if the most significant half of the system time
34
stamp rolls over, a full system timestamp will be delivered;
valid values are:
om 8:
 0 – Full system timestamp is 8 bytes
l.c :4
c
 1 – Truncated timestamp is 2 bytes
.
te 13
.7 bk t
41 -b 1 a
3.4.95 Obsolete (97 / 0x61)

3
15
ei .0

0.
w 01
12
ou 3.
3.4.96 Extensible Parameter Retrieval (98 / 0x62)

2.
zh 201
The Extensible Parameter Retrieval Request message is sent by the DM to the DMSS to instruct
the DMSS to read CDMA retrievable and settable parameters, or proprietary (“extra”)
Qualcomm parameters, and a timestamp. The DM may also request the valid range of parameters
from the DMSS.
To set or clear parameters, see Section 3.4.33 for information.
After receiving and processing an Extensible Parameter Retrieval Request message, the DMSS
returns an Extensible Parameter Retrieval Response message to the DM.
3.4.96.1 Extensible Parameter Retrieval Request

message
SUB_CMD 1 Subcommand; valid values are:

 0 – Retrieve the valid range of parameters defined in the
TIA/EIA standards
 1 – Retrieve specified TIA/EIA standard parameters
 2 – Retrieve the valid range of Qualcomm proprietary
parameters
 3 – Retrieve specified Qualcomm proprietary parameters

Packet Definitions

START_PARM_ID 2 First parameter ID in the specified range
Note: This field is ignored by the DMSS if SUB_CMD
denotes an ID range request.
END_PARM_ID 2 Last parameter ID in the specified range; this value must be

≥ START_PARM_ID
Note: This field is ignored by the DMSS if SUB_CMD
3.4.96.2 Extensible Parameter Retrieval Response
CMD_CODE (98 / 0x62) 1 Message ID – The AMSS sets CMD_CODE to 98 for this
message
T
SUB_CMD 1 Subcommand; values are:
n PS
 0 – Retrieve the valid range of parameters defined in
the TIA/EIA standards
34
 1 – Retrieve specified TIA/EIA standard parameters
om 8:
l.c :4  2 – Retrieve the valid range of Qualcomm proprietary
c
parameters
.
te 13
 3 – Retrieve specified Qualcomm proprietary
parameters
.7 bk t
41 -b 1 a
START_PARM_ID 2 If SUB_CMD denotes an ID range request, this field will

3
15
contain the first parameter ID that is valid for the DMSS;
ei .0
if SUB_CMD denotes a parameter retrieval request, this

0.
w 01
field will contain the first parameter ID that is specified in

12
ou 3.
the request message

2.
zh 201
END_PARM_ID 2 If SUB_CMD denotes an ID range request, this field will

contain the last parameter ID that is valid for the DMSS;
if SUB_CMD denotes a parameter retrieval request, this
field will contain the last parameter ID that is specified in
the request message
TIME 8 CDMA timestamp; the format is the same as in the Time

Stamp (29 / 0x1D) (see Section 3.4.26)
Note: This field is omitted by the DMSS if SUB_CMD
PARM_ARRAY 4 * (END_PARM_ An array of parameter values indexed from

ID-START_PARM_ START_PARM_ID (index 0) to END_PARM_ID (index
ID+1) END_PARM_ID-START_PARM_ID+1); any entry in this
array that is not supported by the DMSS will contain a
value of -1
Note 1: This field is omitted by the DMSS if SUB_CMD
Note 2: This command does not currently support PARM
values that are >32 bits in length. Any parameters
defined by the TIA/EIA standards to be >32 bits will
contain a value of -1.

Packet Definitions
3.4.97 Status Snapshot (99 / 0x63)

When analyzing log and static event data collected from the DMSS, it is useful to have a starting
reference for the state of the DMSS at the time log and event collection begins. The Status
Snapshot Request/Response provides a set of data useful for this purpose. Additional fields may
be appended to the end of the response packet.
3.4.97.1 Status Snapshot Request

message
3.4.97.2 Status Snapshot Response
T
n PS
CMD_CODE 1 Message ID – The DMSS sets CMD_CODE to 99 for this
message
34
om 8:
ESN 4 Electronic serial number; see [S5] Section 2.3.3 or [S8]
Section 2.3.2
l.c :4
. c
te 13
IMSI_S1 4 First part of operational International Mobile Station Identifier
(IMSI)
.7 bk t
41 -b 1 a
3
IMSI_S2 2 Second part of operational IMSI
15
ei .0
IMSI_S 8 ISMI_S1 and IMSI_S2 converted to a 32-bit value

0.
w 01
12
IMSI_11_12 1 Mobile network code (MNC) for operational IMSI address

ou 3.
2.
zh 201
MCC 2 Mobile country code
IMSI_ADDR_NUM 1 Number of address digits in IMSI
SID 2 System ID of system in use
NID 2 Network ID of system in use
P_REV 1 Highest protocol revision of which the base station is capable
PREV_IN_USE 1 Protocol revision currently used between the base and

mobile stations
MOB_P_REV 1 Highest protocol revision of which the DMSS software is

capable
BAND_CLASS 1 Band class; see Appendix C for a description
FREQUENCY 2 Cellular or PCS channel number of center radio frequency
OPERATION_MODE 1 Radio operation mode

 0 – Analog (FM)
 1 – CDMA
 2 – PCS
 3 – 900 MHz
 4 – Sleep
 5 – Global Positioning Service (GPS)

Packet Definitions
MC_STATE 1 Call processing main state; values are:

 0 – CDMA_ENTER (enter)
 1 – CDMA_INIT (initialization)
 2 – CDMA_IDLE (idle)
 3 – CDMA_SYS_ACC (system access)
 4 – CDMA_TC (traffic channel)
 5 – CDMA_EXIT (exit)
MC_SUBSTATE 1 Call processing substate

 If MC_STATE = 1, Initialization, possible substate values
are:
 0 – CDMA_PIL_ACQ (pilot channel acquisition)
 1 – CDMA_SYNC_ACQ (sync channel acquisition)
 2 – CDMA_SYNC_MSG (process sync channel
message)
 3 – CDMA_JUMP (jump to hyperspace)
T
 4 – CDMA_UNJUMP (jump back from hyperspace)
n PS
 If MC_STATE = 2, Idle, possible substate values are:
 0 – CDMA_IDLE_INIT (initial entry into idle)
34
 1 – CDMA_IDLE_MSG_PENDING (send ACK and
om 8:
l.c :4 leave message pending; system access finished,
c
process message now)
.
te 13
 2 – CDMA_UNSLOTTED (idle not operating in Slotted
mode)
.7 bk t
 3 – CDMA_SLOTTED (idle operating in Slotted mode)

41 -b 1 a
3
 4 – CDMA_OVHD (system access update overhead
15
ei .0
information)
0.
w 01
 If MC_STATE = 3, System Access, possible substate

values are:
12
ou 3.
 0 – CDMA_UPDATE_OVH (update overhead

2.
zh 201
information)
 1 – CDMA_ORIG (mobile station origination attempt)
 2 – CDMA_PAGE_RES (page response)
 3 – CDMA_ORD_RES (mobile station order/message
response)
 4 – CDMA_REG (registration access)
 5 – CDMA_MSG (message transmission)
 6 – CDMA_PACA_CAN (PACA cancel substate)
 If MC_STATE = 4, Traffic Channel, possible substate
values are:
 0 – CDMA_TCI (traffic channel initialization)
 1 – CDMA_WFO (waiting for order)
 2 – CDMA_WFA (waiting for mobile station answer)
 3 – CDMA_CONV (conversation)
 4 – CDMA_RELEASE (release)
Note: CDMA_ENTER and CDMA_EXIT states do not have
substates.

Packet Definitions
3.4.98 Reserved (100 / 0x64)
3.4.99 Reserved (101 / 0x65)
3.4.100 Reserved (102 / 0x66)
3.4.101 Reserved (103 / 0x67)
3.4.102 Reserved (104 / 0x68)
3.4.103 Reserved (105 / 0x69)
T
3.4.104 Reserved (106 / 0x6A)
n PS
34
3.4.105 Reserved (107 / 0x6B)
om 8:
l.c :4
. c
te 13
3.4.106 GPS Session Control (108 / 0x6C)
.7 bk t
41 -b 1 a
When the DM sends a GPS Session Control Request message, the DMSS responds with a GPS
3
Session Control Response message.
15
ei .0
0.
w 01
Multiple session control operations can be performed with this message. Some operations
12
include supporting data necessary to complete the operation. Each operation is documented
ou 3.
separately in this section.

2.
zh 201

Packet Definitions
3.4.106.1 GPS Session Control Request
CMD_CODE (108 / 1 Message ID – The DM sets CMD_CODE to 108 for this

0x6C) message
GPS_CONTROL 1  0 – Obsolete; start GPS position determination session)

 1 – Submit IS-801 Provide Acquisition Assistance
message
 2 – Submit IS-801 Provide Sensitivity Assistance
message
 3 – Obsolete; switch to GPS Search mode (GPS
searcher only)
 4 – Obsolete; switch to normal Search mode (CDMA and
GPS searcher)
 5 – Obsolete; submit IS-801 Provide Location Response
message
 6 – Obsolete; clear session
T
7 – AFLT-only and GPS search setting
n PS

 8 – Submit IS-801 Almanac message
9 – Submit IS-801 Ephemeris message
34

 10 – TCP connect; send a command to the position
om 8:
l.c :4 determination module to open a TCP connection
c
 11 – TCP disconnect; send a command to the position
.
te 13
determination module to close its TCP connection
.7 bk t
DATA_LENGTH 2 Number of bytes of supporting data

41 -b 1 a
3
SUPPORTING_DATA DATA_LENGTH Value of the SUPPORTING_DATA field depends on the
15
ei .0
value of the GPS_CONTROL field; see Section 3.4.106.1.1

0.
w 01
for descriptions
12
ou 3.
2.
zh 201
3.4.106.1.1 GPS_CONTROL value and associated SUPPORTING_DATA

 If GPS_CONTROL = 0, length of data is 6 bytes and the SUPPORTING_DATA refers to:
 SESSION_TYPE – Position determination session type
 PRIORITY – Position determination priority
 NUM_MEASUREMENTS – Position determination number measurements
 SEARCH_MODE – Position determination search mode
 SEARCH_DELAY – Position determination search delay
 FIX_TYPE – Position determination fix type
 If GPS_CONTROL = 1, the value of SUPPORTING_DATA is:
 ACQ_DATA – IS-801 Provide Acquisition Assistance message
 SENSE_DATA – IS-801 Provide Sensitivity Assistance message
 If GPS_CONTROL = 3 or 4, SUPPORTING_DATA is not used
 PL_DATA – IS-801 Provide Location Response message

Packet Definitions
 If GPS_CONTROL = 6, SUPPORTING_DATA is not used

 If GPS_CONTROL = 7, length of data is 1 byte and the value of SUPPORTING_DATA is:
 PD_AFLT – Position determination AFLT
– 0 – AFLT start
– 1 – AFLT get results
– 2 – AFLT end
– 0x10 – GPS search does not use sensitivity assist data
– 0x13 – GPS search does not use sensitivity assist data but search is longer for better
sensitivity
– 0x1b – GPS search uses sensitivity assist data for the best sensitivity
T
ALMANAC_DATA – IS-801 Provide Almanac message
n PS

34
EPHEMERIS_DATA – IS-801 Provide Ephemeris message
om 8:

l.c :4
c
 If GPS_CONTROL = 10, and the length of data is 9 bytes, the SUPPORTING_DATA is:
.
te 13
 USE_LOCAL (0) – Use the IP address and port information provided in the next two
.7 bk t
fields and not what is stored in NV

41 -b 1 a
3
15
IP_ADDRESS – IP address that the position determination module should use for
ei .0

establishing the TCP connection
0.
w 01
12
ou 3.
 PORT – Port ID that the position determination module should use for establishing the
2.
zh 201
TCP connection
 If GPS_CONTROL = 10, and the length of data is 1 byte, the SUPPORTING_DATA is:
 USE_DEFAULT (1) – Use IP address and port ID stored in NV for establishing the TCP
connection
 If GPS_CONTROL = 11, SUPPORTING_DATA is not used
3.4.106.2 GPS Session Control Response
message
GPS_CONTROL 1 Position determination session control; see

Section 3.4.106.1 for descriptions

Packet Definitions
3.4.107 Reserved (109 / 0x6D)
3.4.108 Reserved (110 / 0x6E)
3.4.109 Reserved (111 / 0x6F)
3.4.110 IS2000 Status (112 / 0x70)

The IS2000 Status Request message asks for current DMSS status information. This information
is returned in the IS2000 Status Response message. This message includes status of the Active
Set, Control Hold, and Reverse SCH. It is a super set of the original Status Request/Response
pair, and most of the additional information was introduced in the IS-2000 Standard. Additional
fields may be appended to the end of the response packet.
T
3.4.110.1 IS2000 Status Request
n PS
34
om 8:
l.c :4
c
message
.
te 13
3.4.110.2 IS2000 Status Response

.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.
message
2.
zh 201
RF_MODE 1 RF mode; values are:

 0 – Analog
 1 – CDMA
 2 – PCS
 3 – 900 MHz
 4 – Sleep
 5 – GPS
 6 – 1xEV-DO
CDMA_RX_STATE 2 Current state; values are:

 0 – CDMA_STATE (Initialization state)
 1 – SC_STATE (Sync Channel state)
 2 – PC_STATE (Paging Channel state)
 3 – TCI_STATE (Traffic Channel Initialization state)
 4 – TC_STATE (Traffic Channel state)
 5 – EXIT_STATE (Exit state)

Packet Definitions
CDMA_GOOD_FRAMES 1 Whether frames we are receiving are good – CDMA only

This is valid only for Sync and Paging Channel states;
values are:
 1 – Good frames received since the last status request
 0 – Five or more bad frames and no good frames
received since the last status request
 -1 – Unknown; no good or bad frames received for two
or more status requests
ANALOG_CORRECTED_ 2 Good frame count – Analog only

FRAMES
ANALOG_BAD_FRAMES 2 Bad frame count – Analog only
ANALOG_WORD_SYNCS 2 Number of word sync sequences received in analog

control – Analog only
T
ENTRY_REASON 2 Entry reason; the reason for entering the current state
n PS
Use the field RF_MODE to determine which interpretation
of the following values to use:
34
 CDMA mode (Cellular and PCS):
om 8:
l.c :4  0 – Normal CDMA operation
. c
 2 – Enter offline CDMA mode
te 13
 3 – Originate call in CDMA mode

.7 bk t
 Analog mode:
41 -b 1 a
3
 0 – Normal analog operation
15
ei .0
 1 – Digital-to-analog handoff
0.
w 01
 2 – Originate call in Analog mode

12
 3 – Page response
ou 3.
 4 – Voice channel assignment

2.
zh 201

 6 – Enter offline Analog mode
CURR_CHAN 2 Center frequency channel
SID 2 Current system ID
NID 2 Current network ID
LOCAID 2 Current location ID – Analog only
RSSI 2 Current RSSI (RF signal strength) level for analog
POWER 1 Current mobile output power level index for analog
NUM_PILOTS 1 Number of pilots in the active set
ASET 6 * 15 Active sets; see Aset structure description that follows this
table
STRUCTURE CONTROL_HOLD Control hold status
ENABLE 1 Values are:

 0 – Disabled
 1 – Enabled
GATING_RATE 1 If control hold enabled, indicates the pilot gating rate
FSCH_RATE 1 Forward supplemental channel rate; see Appendix C for a

description

Packet Definitions
STRUCTURE RSCH Reverse supplemental channel
ACTIVE 1 Value is 1 if this RSCH is active
RATE 1 RSCH rate
WALSH_ID 1 Walsh ID used
BS_P_REV 1 Base station protocol revision
FCH Fundamental channel
FOR_RC 1 Forward radio configuration
REV_RC 1 Reverse radio configuration
DCCH Dedicated control channel
T
n PS
SCH Supplemental channel
34
om 8:
l.c :4
c
.
te 13
.7 bk t
3.4.110.2.1 Six instances of the following Aset structure

41 -b 1 a
3
15
ei .0

0.
w 01
PILOT_PN 2 Pilot PN of the current active pilot

12
ou 3.
PILOT_REC_TYPE 1 Pilot rec type; values are:

2.
zh 201
 0x00 – 1X common transmit diversity pilot

 0x01 – 1X auxiliary pilot
 0x02 – 1X auxiliary transmit diversity pilot
 0x03 – 3X common pilot
 0x04 – 3X auxiliary pilot
STRUCTURE FCH Fundamental channel record
ENABLE 1 Whether the current channel is enabled
CODE_CHAN 2 Code for current channel
QOF_MASK_ID 1 Quasiorthogonal function mask ID
STRUCTURE DCCH Dedicated code channel record
STRUCTURE SCH Supplemental channel record

Packet Definitions
3.4.111 RLP Statistics Reset (113 / 0x71)

The DMSS provides a facility to reset the accumulated operating statistics of the Radio Link
Protocol used for data services. These statistics are delivered to QXDM or other support tools by
the logging mechanism.
3.4.111.1 RLP Statistics Reset Request
message
SR_ID 1 Radio link protocol service ID
3.4.111.2 RLP Statistics Reset Response
T
n PS
34
message
om 8:
l.c :4
c
3.4.112 TDSO Statistics Reset (114 / 0x72)
.
te 13
The DMSS provides a facility to reset the accumulated operating statistics of the Test Data
.7 bk t
41 -b 1 a
Service Option (TDSO). These statistics are delivered to QXDM or other support tools by the
3
15
logging mechanism. Since the statistics sets overlap, use of this command resets log data for both
ei .0
0.
w 01
the Simple TDSO and the Full TDSO.

12
ou 3.
2.
zh 201
3.4.112.1 TDSO statistics reset request
message
3.4.112.2 TDSO statistics reset response
message
3.4.113 Logging Configuration (115 / 0x73)

The Logging Configuration Request message is sent by the DM to the DMSS to configure the
logging service of the DMSS diagnostics subsystem; see Section 5.1 for format and terminology
of a log code.

Packet Definitions
Each equipment ID is configured separately using this command. A bit-mask is used to denote
all items for the specified equipment ID. The mask is an array of bytes in which each bit denotes
a log item’s configuration. A bit value of 1 specifies that the item is enabled. A bit value of 0
specifies that the item is disabled. The following formulas (C syntax) specify how to look up a
bit in the mask, given item ID:
extern byte log_mask[];

array_index = item_id / 8; /* The array index for 'item_id' */
byte_mask = 0x01 << (item_id % 8); /* The bit within the byte of'item_id'
*/
if (log_mask[array_index] & byte_mask) /* Check if bit is set */
log_mask[array_index] |= byte_mask; /* Set the bit in the mask */
log_mask[array_index] &= ~byte_mask; /* Clear the bit in the mask */
T
When a log item becomes available in the DMSS, it consults the configuration for that item. If it
n PS
is enabled, and if adequate resources are available, the item is logged.
34
After receiving and processing a Logging Configuration Request message, the DMSS returns a
om 8:
Logging Configuration Response message to the DM.
l.c :4
. c
This log mask format is different than the Extended Logging Mask Request/Response
te 13
(CMD_CODE 93). This is due to confusion caused by that nonstandard format. The format of
.7 bk t
41 -b 1 a
the mask in this packet is defined below. For compatibility purposes, CMD_CODE 93 is still
3
supported.
15
ei .0
0.
w 01
3.4.113.1 Logging Configuration Request

12
ou 3.
2.
zh 201
message
RESERVED 3 Reserved
OPERATION 4 Specifies the operation to be performed; values are:

 0 – Disable logging service
 1 – Retrieve ID ranges
 2 – (Reserved)
 3 – Set log mask
 4 – Get log mask
OPERATION_DATA Variable Operation-specific data; see Section 3.4.113.3 through

3.4.113.2 Logging Configuration Response
message
RESERVED 3 Reserved

Packet Definitions

OPERATION 4 Specifies the operation to be performed; values are:
 0 – Disable logging service
 1 – Retrieve ID ranges
 3 – Set log mask
 4 – Get log mask
STATUS 4 Specifies the status of the operation; values are:

 0 – Success
 1 – Invalid equipment ID
OPERATION_DATA Variable Operation-specific data; see Section 3.4.113.3 through

3.4.113.3 Common data structures for operations
T
n PS
This section outlines common structures that are used by multiple operations.
34
om 8:
3.4.113.3.1 Logging range structure l.c :4
. c
te 13
EQUIP_ID 4 Specifies the equipment ID; range is 0 to 15; this may

.7 bk t
41 -b 1 a
change in the future; the equipment IDs currently in use are:

3
15
 0 – OEM
ei .0
 1 – 1X
0.
w 01
12
ou 3.
2.
zh 201
 4 – WCDMA
 5 – GSM
 6 – MSP
 7 – UMTS
 8 – TDMA
 9 – BOA
 10 – DTV
 11 – APPS
 12 – DSP
NUM_ITEMS 4 Total number of items supported for this equipment ID; the
range of supported items for the specified equipment ID is 1
to NUM_ITEMS; a value of 0 means the equipment ID is not
supported
3.4.113.3.2 Logging mask structure
RANGE 8 Range; this is the Logging range structure (see

Section 3.4.113.3.1)
MASK (NUM_ITEMS + 7) / 8 Array of (NUM_ITEMS + 7) / 8 bytes containing the

mask for the specified equipment ID

Packet Definitions
3.4.113.4 Disable Logging Operation
3.4.113.4.1 Disable Logging Operation Request

No additional information specified.
3.4.113.4.2 Disable Logging Operation Response

3.4.113.5 Retrieve Logging ID Ranges Operation
3.4.113.5.1 Retrieve Logging ID Operation Request

T
n PS
3.4.113.5.2 Retrieve Logging ID Ranges Operation Response
34
om 8:
RANGES 4 * 16 16 instances of NUM_ITEMS, indexed by equipment ID
l.c :4
. c
te 13
3.4.113.6 Set Logging Mask Operation

.7 bk t
41 -b 1 a
3
15
ei .0
3.4.113.6.1 Set Logging Mask Request

0.
w 01
12

ou 3.
2.
zh 201
MASK_STRUCTURE Variable Logging mask structure; see Section 3.4.113.3.2 for format
description
3.4.113.6.2 Set Logging Mask Response
description
3.4.113.7 Get Logging Mask Operation
3.4.113.7.1 Get Logging Mask Request
EQUIP_ID 4 Equipment ID; see Logging range structure

(Section 3.4.113.3.1) for the enumeration of equipment IDs

Packet Definitions
3.4.113.7.2 Get Logging Mask Response
description
3.4.114 Reserved (116 / 0x74)
3.4.115 Reserved (117 / 0x75)
3.4.116 Reserved (118 / 0x76)
3.4.117 Reserved (119 / 0x77)
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Packet Definitions
3.4.118 Log On Demand (120 / 0x78)

When the DM sends a Log On Demand Request message with a log code, the DMSS checks if
the log code exists and calls the function associated with it. The status is returned through the
response message. However, this command does not guarantee data logging or change the
logging configuration (see Section 3.4.113 for more details).
3.4.118.1 Log On Demand Request
message
LOG_CODE 2 Log code requested
3.4.118.2 Log On Demand Response
T
n PS
34
om 8:
message
l.c :4
c
LOG_CODE 2 Log code received
.
te 13
STATUS 1 Specifies the status returned by DMSS; values are:

.7 bk t
41 -b 1 a
3  0 – Logging request and operation successful

(LOG_ON_DEMAND_SENT_S)
15
ei .0
 1 – Logging request acknowledged, success of logging

0.
w 01
unknown (LOG_ON_DEMAND_ACKNOWLEDGE_S)
12
 2 – Logging attempted, but log packet was dropped or

ou 3.
disabled (LOG_ON_DEMAND_DROPPED_S)
2.
zh 201
 3 – Request unsuccessful, log code not supported for this

service (LOG_ON_DEMAND_NOT_SUPPORTED_S)
 4 – Unable to log this packet in the present context
(LOG_ON_DEMAND_FAILED_ATTEMPT_S)
3.4.119 Extended Message (121 / 0x79)

This packet is generated by the DMSS with no associated request packet (see Section 3.1 for
details). The service is configured using the Extended Configuration Request/Response message
defined in Section 3.4.123.
A description of the Extended Debug Service message is located in Section 3.4.123.

Packet Definitions
3.4.119.1 Extended message
message
TS_TYPE 1 Timestamp type; an enumeration indicating the format of the

TIME field; values are:
 0 – CDMA time
 1 – WIN32 (used in off-target environments); see
Microsoft® documentation for time stamp format
NUM_ARGS 1 Specifies the number of 32-bit arguments listed in the ARGS

field
DROP_CNT 1 Total number of messages dropped between this message

and the previous one
If the DMSS possesses insufficient resources to send a
T
message, the message is dropped. The next successful
n PS
message sent by the service will have a nonzero value in this
field, denoting the number of messages (up to 255) dropped
34
since the last successful message sent.
om 8:
TIME 8 Time the message was originally generated (not transmitted);
l.c :4
c
the format is the same as in the Time Stamp (29 / 0x1D) (see
.
te 13
Section 3.4.26)
LINE_NUMBER 2 Line number identifying location of the message in the file

.7 bk t
41 -b 1 a
denoted by FILE_NAME
3
15
ei .0
SS_ID 2 Subsystem identifier; see Section 3.4.123.2 for description

0.
w 01
SS_MASK 4 Subsystem mask; see Section 3.4.123.2 for description

12
ou 3.
ARGS 4 * NUM_ARGS Array of 32-bit signed arguments, corresponding to the

2.
zh 201
printf-style FMT_STRING; this array contains NUM_ARGS

32-bit arguments
FMT_STRING Variable NULL-terminated ASCII string containing a printf()-style

format string, with formatting specifiers; formatting specifiers
in the text string are replaced with the formatted contents of
ARGS in the order they are encountered
Formatting specifiers allowed are:
 %x – hexadecimal word display
 %u – decimal word display
 %d – decimal word display
 %c – character display
 %lx – long (dword) hexadecimal display
 %ld – long (dword) decimal display
Note: This mechanism does not support float (%f) or string
(%s) types.
FILE_NAME Variable NULL-terminated ASCII file name string identifying the

location of message, such as “mccdma.c”

Packet Definitions
3.4.120 Reserved (122 / 0x7A)
3.4.121 Diagnostic Protocol Loopback (123 / 0x7B)

This command echoes the request packet in the response packet. It is used for testing and
debugging the diagnostic service itself. It has no effect on DMSS.
3.4.121.1 Diagnostic Protocol Loopback Request
message
PAYLOAD N Payload of Loopback message; any size is allowed, as long

as the service will accept a packet of that size
Note: If the payload is too large for DIAG to handle, the
T
packet will be dropped and no response will be generated.
n PS
34
3.4.121.2 Diagnostic Protocol Loopback Response
om 8:
If successful, the response is exactly the same as the request.
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
message
15
ei .0
0.
w 01
PAYLOAD N Payload of Loopback message; any size is allowed, as long

12
as the service will accept a packet of that size

ou 3.
2.
zh 201
3.4.122 Extended Build ID (124 / 0x7C)

This packet is an extension to the version number request/response packet (CMD_CODE 0) (see
Section 3.4.1).
3.4.122.1 Extended Build ID Request
message

Packet Definitions
3.4.122.2 Extended Build ID Response
NOTE Additional strings or fields may someday be added to the end of this packet, following the two
existing NULL-terminated ASCII strings.
CMD_CODE (124 / 0x7C) 8 Message ID – The DMSS sets CMD_CODE to 124 for
this message
Version 8 Version of the response; defines the value of the MSM

Revision field; values are:
 0 – Older targets with a 16-bit hardware version
register
 1 – Older targets with a 32-bit hardware version
register
 2 – Current AMSS targets with a 32-bit hardware
T
version register
n PS
Reserved 16 Reserved
34
MSM Revision 16, 20 or 32 An extension of the MSM_VER field from the version
om 8:
number response packet (see Section 3.4.1.2); length
l.c :4
c
and format is dependent on the Version field; values are:
.
te 13
 0 – Length is 16 bits and derived from the 16-bit
hardware version register; format varies depending
.7 bk t
41 -b 1 a
on the target build

3
 1 – Length is 20 bits and derived from the 32-bit
15
ei .0
hardware version register; format is described by the

0.
w 01
following offsets in the 32-bit hardware version

12
register:
ou 3.
 Bits 19:4 = Bits 27:12 of the hardware version

2.
zh 201
register
 Bits 3:0 = Bits 31:28 of the hardware version
register
 2 – Length is 32 bits and is the value of the full 32-bit
hardware version register
Reserved 16, 12 or 0 Padding to align the MSM Revision field to 4 bytes;

length is dependent on the Version field; values are:
 0 – Length is 16 bits
Mobile Model Number 32 Manufacturer's mobile model number – An extension of

MOB_MODEL field from the version number response
packet (see Section 3.4.1.2)
Mobile Software Revision Variable Mobile software revision string – A NULL-terminated

ASCII string; if string is nonexistent, a NULL char
indicates an empty string; an extension of the VER_DIR
field from the version number response packet (see
Section 3.4.1.2)
Mobile Model String Variable Mobile model string – An ASCII NULL-terminated string;
if string is nonexistent, a NULL char indicates an empty
string

Packet Definitions
3.4.123 Extended Message Configuration (125 / 0x7D)

These packets are used to configure the extended debug message service. When the debug
message service is configured via this packet, the service will send message packets in the format
of extended message packet, defined in Section 3.4.119.
3.4.123.1 Overview of debug message service description

The debug message service provides printf()-style debugging with build time and runtime
granularity. This granularity is achieved by assigning various technology areas to a subsystem
within the service. Each subsystem defines up to 32 categories (denoted by a 32-bit mask) by
which debug messages may be identified. The external device may configure each subsystem
individually using a 32-bit mask for each subsystem.
3.4.123.2 Terminology
Subsystem ID (SSID) – Unique identifier assigned to an internal client of the debug message
T

n PS
service.
Subsystem mask – 32-bit mask with each bit denoting a category assigned by the internal
34

client denoted by subsystem ID. The value 1 denotes the category is enabled. The value 0
om 8:
denotes the category is disabled. This mask is specified with the definition of each message.
l.c :4
. c
te 13
 Build mask – 32-bit mask specified at compile-time to determine which messages are to be
compiled in for each subsystem. This build-time granularity is available to enable build
.7 bk t
41 -b 1 a
managers to compile out certain categories of messages to save ROM. During compilation, a
3
15
bitwise AND (&) is performed between the buildmask and the subsystem mask of each
ei .0
0.
w 01
message. If the & operation is nonzero, the message is compiled in.

12
ou 3.
 Runtime mask (RT mask) – 32-bit mask specified by the external device at runtime to
2.
zh 201
configure messages for a subsystem. At runtime, the message’s subsystem mask the
subsystem’s RT mask are compared with a bitwise AND (&). If the result if nonzero, the
message service attempts to send the message.
 Dropped message – If insufficient resources exist to send a message that is enabled, the
message is dropped. The next successful message sent will contain a count of the number of
messages dropped since the last successful message.
 Legacy message – Message defined using the categorization paradigm used with command
code 31 (see Section 3.4.28 for details). Many of these messages are mapped to different
subsystems inside the DMSS. All unmapped messages become part of the legacy subsystem
(subsystem ID 0).
 Legacy message support – Most legacy messages are mapped to a particular subsystem,
using bits in the subsystem mask to denote MSG_LEVEL. All unmapped legacy messages
belong to subsystem ID 0.
The service is capable of emulating the legacy debug message system. This emulation mode
is enabled when the debug message service is enabled using the message request packet.
When this occurs, unmapped legacy debug messages (subsystem ID 0) will be sent using the
message response packet (see Section 3.4.28.2 for details).

Packet Definitions
NOTE Even if legacy packets are all that are desired, it is still recommended to use the extended
debug message service rather than legacy mode. Using the extended message packet described
in Section 3.4.119 improves both the DMSS CPU and the bandwidth utilization.
3.4.123.3 Extended Message Configuration Template

All requests and responses for the extended message configuration packet start with the
following template.
CMD_CODE (125 / 0x7D) 1 Message ID – The DM/DMSS sets CMD_CODE to 125 for
this message
SUBCMD 1 Subcommand enumerating type of command; values are:

 1 – Get subsystem ID ranges
 2 – Get subsystem build mask
 3 – Get subsystem runtime mask
T
n PS
 4 – Set subsystem runtime mask
 5 – Set all subsystem runtime masks
34
SUBCMD_DATA Variable Additional data, if applicable, for the given subcommand;
om 8:
l.c :4see Section 3.4.123.4 for format descriptions
. c
te 13
3.4.123.4 Common subcommand data structures

.7 bk t
41 -b 1 a
3
3.4.123.5 Command status
15
ei .0
0.
w 01

12
ou 3.
STATUS 1 Specifies the status of the operation; values are:

2.
zh 201
 0 – Unsuccessful
 1 – Success
3.4.123.5.1 Subsystem ID Range Structure

This structure lists a range of subsystem IDs. The number of valid subsystem IDs in this range is
calculated using the following formula:
SSID_RANGE_CNT = SSID_LAST - SSID_FIRST + 1;
SSID_FIRST 2 First subsystem ID in the range of subsystem IDs

represented by this structure
SSID_LAST 2 Last subsystem ID in the range of subsystem IDs

represented by this structure
3.4.123.6 Get Subsystem ID Ranges (Subcommand 1)

Sent by the DM to query the subsystem ID ranges of the mobile.

Packet Definitions
3.4.123.6.1 Get Subsystem ID Ranges Request
message
SUBCMD 1 Subcommand – The DM sets SUBCMD to 1 for this message
3.4.123.6.2 Get Subsystem ID Ranges Response
CMD_CODE (125) 1 Message ID – The DMSS sets CMD_CODE to 125 for this
message
SUBCMD 1 Subcommand – The DMSS sets SUBCMD to 1 for this

message
T
STATUS 1 Status; see Section 3.4.123.5 for format description.
n PS
RSVD 1 Reserved
34
RANGE_CNT 4 Number of subsystem range structures to follow
om 8:
l.c :4
c
RANGES 4* An array of subsystem ID range structures containing
.
RANGE_CNT RANGE_CNT entries; see Section 3.4.123.5.1 for format
te 13
description
.7 bk t
41 -b 1 a
3
3.4.123.7 Get Subsystem Build Masks (Subcommand 2)
15
ei .0
0.
w 01
Sent by the DM to query build masks for a range of subsystem IDs.

12
ou 3.
2.
zh 201
3.4.123.7.1 Get Subsystem Build Masks Request
CMD_CODE (125) 1 Message ID – The DM sets CMD_CODE to 125 for this

message
SUBCMD 1 Subcommand – The DM sets SUBCMD to 2 for this message
SSID_RANGE 4 Subsystem ID range; see Section 3.4.123.5.1 for format

description
3.4.123.7.2 Get Subsystem Build Masks Response
message

message

description.
Note: The subsystem range in the response may not be the
same as the range specified in the request. This can occur
due to packet size limitations.

Packet Definitions

STATUS 1 Status; see Section 3.4.123.5 for format description.
RSVD 1 Reserved
BLD_MASKS 4 * (SSID_LAST - Build mask array for the range of subsystem IDs specified in
SSID_FIRST + 1) SSID_RANGE; array index 0 denotes SSID_FIRST, etc.
Note: An unsupported subsystem IDs is assigned a value of
0 in this array.
3.4.123.8 Get Subsystem Run-time Masks (Subcommand 3)

Sent by the DM to query run-time masks for a range of subsystem IDs.
3.4.123.8.1 Get Subsystem Run-time Masks Request
T
n PS
34
message
om 8:
SUBCMD 1 Subcommand – The DM sets SUBCMD to 3 for this
l.c :4
message
. c
te 13
description
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Packet Definitions
3.4.123.8.2 Get Subsystem Run-time Masks Response
message

message
description
STATUS 1 Status; see Section 3.4.123.5 for format description
RSVD 1 Reserved
T
RT_MASKS 4 * (SSID_LAST - Run-time mask array for the range of subsystem IDs
n PS
SSID_FIRST + 1) specified in SSID_RANGE; array index 0 denotes
SSID_FIRST, and so on
34
Note: An unsupported subsystem IDs is assigned a value
om 8:
of 0 in this array.
l.c :4
. c
te 13
3.4.123.9 Set Subsystem Run-time Masks (Subcommand 4)
.7 bk t
Sent by the DM to set the run-time masks for a range of subsystem IDs.
41 -b 1 a
3
15
ei .0
3.4.123.9.1 Set Subsystem Run-time Masks Request

0.
w 01
12
ou 3.

2.
zh 201

message

message

description
Note: If the subsystem ID range contains at least one
invalid subsystem ID, the response status will indicate
failure. All valid SSIDs in the request message are still set.
RSVD 2 Reserved

Packet Definitions
3.4.123.9.2 Set Subsystem Run-time Masks Response
message

message
description.
STATUS 1 Status
See Section 3.4.123.5 for format description.
RSVD 1 Reserved
T
n PS
34
om 8:
Note: An unsupported subsystem IDs is assigned a value
l.c :4
c
of 0 in this array.
.
te 13
3.4.123.10 Set All Run-time Masks (Subcommand 5)

.7 bk t
41 -b 1 a
3
Sent by the DM to set the run-time masks for all subsystem IDs.
15
ei .0
0.
w 01
12
3.4.123.10.1 Set All Run-time Masks Request

ou 3.
2.
zh 201

message

message
RSVD 2 Reserved
RT_MASK 4 Run-time mask to be set to all subsystem IDs

Packet Definitions
3.4.123.10.2 Set All Run-time Masks Response
message

message
STATUS 1 Status; see Section 3.4.123.5 for format description
RSVD 1 Reserved
RT_MASK 4 Run-time mask for all subsystem IDs
3.4.124 Reserved (126 / 0x7E)
T
3.4.125 Reserved (127 / 0x7F)
n PS
34
3.4.126 Subsystem Dispatch Version 2 (128 / 0X80)
om 8:
l.c :4
c
This DMSS diagnostic protocol, the Subsystem Dispatcher Version 2 (cmd_code 128 / 0x80), is
.
te 13
an extension of the subsystem dispatcher packet (cmd_code 75 / 0x4B). Its response packet
contains two more mandatory fields, status and delayed_response_id.
.7 bk t
41 -b 1 a
3
The packet enables having multiple responses for a single request.
15
ei .0
If the immediate response has a zero delayed_response_id, then the response is complete. No
0.
w 01
delayed response will be sent.

12
ou 3.
2.
zh 201
If the immediate response has a nonzero delayed_response_id, then a delayed response will be
sent in the future. This delayed response will have the same delayed_response_id value as the
immediate response.
There is a limitation that a given delayed_response_id is valid for a maximum of 10 min, i.e., the
time must be less than 10 min from the time the initial request is made until the final delayed
response is sent from the phone. In the case of multiple delayed responses, all responses must be
sent from the phone within that period. For situations where data must be sent over an extended
period of time, use logging or additional command/response messages instead.
NOTE As the functions and capabilities of the DMSS are expanded, the list of subsystem IDs defined
by Qualcomm will expand as well. Subsystem IDs from 250 to 255 are reserved for customer
use. Customers who define their own special diagnostic packets should use these subsystem
IDs. They will not collide with Qualcomm usage.

Packet Definitions
3.4.126.1 Subsystem Dispatch Version 2 Request
CMD_CODE (128 / 0X80) 1 Message ID – The DM sets CMD_CODE to 128 for this
message
SUBSYS_ID 1 Subsystem identifier

Note: Subsystem identifiers are the same for both
Subsystem Dispatcher Version 2 (CMD_CODE 128 / 0x80)
and Subsystem Dispatcher packet (CMD_CODE 75 / 0x4B).
This is an enumeration of all defined subsystems.
SUBSYS_CMD_CODE 2 Command code for the given subsystem; defines the

REQUEST Variable Request packet data for this command; this is defined in the
corresponding subsystem ICD
T
n PS
3.4.126.2 Subsystem Dispatch Version 2 Response
34
om 8:
l.c :4
c
.
te 13
message
SUBSYS_ID 1 Subsystem identifier; this is an enumeration of all defined

.7 bk t
41 -b 1 a
subsystems
3
15
ei .0
SUBSYS_CMD_CODE 2 Command code for the given subsystem; this defines the
0.
w 01

12

ou 3.
2.
zh 201
STATUS 4 Status; values are:

 0 – Success
 >0 – Error code
DELAYED_RESPONSE_ 2 Delayed response identifier; values are:

ID  0 – Only one response (immediate response)
 >0 – Multiple responses (immediate response followed by
delayed response)

Packet Definitions

RESPONSE_COUNT 2 Response count
 For single delayed responses:
 0 – First response (immediate)
 1 – Second response (delayed/final)
All other values are reserved.
 For multiple delayed responses:
 0x8000 – First response (immediate)
 0x8001 – Second response (delayed/intermediate)
 0x8002 – Third, fourth, etc., counting up in sequence
(delayed/intermediate)
 0x0nnn – Last response sign bit dropped
(delayed/final)
The responses must come out of the phone in order. The
sign bit basically acts as a “more to come” bit and is set to
zero on the final response. Note that the sequence count
cannot wrap; the maximum number of delayed responses is
T
32 K, though given the 10-min limit, this should be sufficient.
n PS
RESPONSE Variable Response packet data for this command; this is defined in
34
the corresponding subsystem ICD
om 8:
Note: If different, the RESPONSE packet data payload
l.c :4
should match CMD_CODE, SUBSYS_ID,
. c
SUBSYS_CMD_CODE, and DELAYED_RESPONSE_ID
te 13
quadruplets for unique identification purposes.

.7 bk t
41 -b 1 a
3
3.4.127 Event Get Mask (129 / 0x81)
15
ei .0
0.
w 01
The Event Get Mask Request message is sent by the DM to the DMSS to get the current event
12
ou 3.
mask.
2.
zh 201
The event mask is a byte array where each bit denotes an event ID’s configuration. A bit value
of 1 specifies that the item is enabled. A bit value of 0 specifies that the item is disabled. The
event mask representation is similar to the log mask representation described in Section 3.4.113.
EVENT_LAST_ID is the last event ID supported. The event mask array is of size
(EVENT_LAST_ID / 8 + 1).
NOTE The first byte at index zero (i.e., left-most) in the event mask array is the least significant byte;
last byte (i.e., right-most) is the most significant byte. Within a byte, the right-most bit is the
least significant bit and the left-most bit is the most significant bit.
3.4.127.1 Event Get Mask Request
message
PAD 1 Stores the pad to make it byte-aligned
RESERVED 2 Reserved

Packet Definitions
3.4.127.2 Event Get Mask Response
message
ERROR_CODE 1 Error code if error; otherwise, 0
RESERVED 2 Reserved
NUM_BITS 2 Total number of events supported by the phone, i.e.,

EVENT_LAST_ID + 1
MASK Variable Array of (EVENT_LAST_ID/8 + 1) bytes
3.4.128 Event Set Mask (130 / 0x82)

The Event Set Mask Request message is sent by the DM to the DMSS to set the event mask.
T
NUM_BITS specifies the mask length of the user. If the number of bits specified in the Set Mask
n PS
command is smaller than the total number of bits supported, then only the specified bits are set
34
starting from the beginning; the remaining bits are not changed.
om 8:
l.c :4
c
3.4.128.1 Event Set Mask Request
.
te 13

.7 bk t
41 -b 1 a
3
15
message
ei .0
0.
w 01
PAD 1 Stores the pad to make it byte-aligned

12
ou 3.
RESERVED 2 Reserved
2.
zh 201
NUM_BITS 2 Number of bits in the mask that needs be set

Requested bits will be set (bits 0 to NUM_BITS - 1);
remaining bits (NUM_BITS to EVENT_LAST_ID + 1) will be
left unchanged
MASK Variable Array of (NUM_BITS/8 + 1) bytes
3.4.128.2 Event Set Mask Response
message
ERROR_CODE 1 Error code if error; otherwise, 0
RESERVED 2 Reserved
NUM_BITS 2 Total number of bits in the event mask supported by the

phone, i.e., EVENT_LAST_ID + 1
MASK Variable Array of (EVENT_LAST_ID/8 + 1) bytes

Packet Definitions
3.4.129 Reserved (141 / 0x8D)
3.4.130 Reserved (142 / 0x8E)
3.4.131 Reserved (143 / 0x8F)
3.4.132 Optimized extended message (146 / 0x92)

This packet is generated by the DMSS with no associated request packet (see Section 3.1 for
details). The service is configured using the Extended Configuration Request/Response message
defined in Section 3.4.123. A description of the Extended Debug Service message is located in
Section 3.4.123.
The Qshrink message service is designed to optimize memory use in debug messages. Qshrink
T
extended messages do not contain format string and file name as compared to extended message
n PS
(CMD_CODE 121 / 0x79). The debug strings associated with debug messages are hashed and
stored locally to reduce memory footprint. The hash value is sent as a message field to the tool to
34
print actual debug string.
om 8:
l.c :4
c
See Appendix E and [Q10] for more information.
.
te 13
.7 bk t
41 -b 1 a

3
15
ei .0
0.
w 01
message
12
ou 3.
TS_TYPE 1 Timestamp type; an enumeration indicating the format of the

2.
zh 201
TIME field; values are:

 0 – CDMA time
 1 – WIN32 (used in off-target environments); see
Microsoft documentation for timestamp format
NUM_ARGS 1 Specifies the number of 32-bit arguments listed in the ARGS

field
DROP_CNT 1 Total number of messages dropped between this message

and the previous one; if the DMSS possesses insufficient
resources to send a message, the message is dropped; the
next successful message sent by the service will have a
nonzero value in this field, denoting the number of messages
(up to 255) dropped since the last successful message sent
TIME 8 Time the message was originally generated (not

transmitted); the format is the same as in the TimeStamp
(29 / 0x1D) (see Section 3.4.26)
LINE_NUMBER 2 Line number identifying location of the message in the file

denoted by FILE_NAME
SS_ID 2 Subsystem identifier; see Section 3.4.123.2 for description
SS_MASK 4 Subsystem mask; see Section 3.4.123.2 for description

Packet Definitions

HASH 4 Hash value generated by Qshrink tool for debug string
ARGS 4*NUM_ARGS Array of 32-bit signed arguments, corresponding to the

printf-style FMT_STRING; this array contains NUM_ARGS
32-bit arguments
3.4.133 Further diagnostic packets

As the functions and test capabilities of the DMSS are expanded, it is guaranteed that the valid
CMD_CODEs will expand as well. If you are going to define your own special codes, define
your codes where they will not collide with Qualcomm’s. CMD_CODEs 246 to 255 are reserved
for customer use only.
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

4 Diagnostic Packet Summary
Table 4-1 summarizes the diagnostic packet structures (see Section 3.4), modes in which they are
valid, and whether they are supported.
Table 4-1 Diagnostic packet summary
Protected by
Packet name Code Mode
security
T
DMSS Version Number 0 Any No
n PS
DMSS ESN 1 Any No
34
Memory Peek Byte 2 Any Yes
Memory Peek Word

om 8:
l.c :4 3 Any Yes
. c
te 13
Memory Peek Dword 4 Any Yes
.7 bk t
Memory Poke Byte 5 Any Yes

41 -b 1 a
3
15
Memory Poke Word 6 Any Yes
ei .0
0.
w 01
Memory Poke Dword 7 Any Yes

12
ou 3.
Port Output Byte 8 Any Yes

2.
zh 201
Port Output Word 9 Any Yes
Port Input Byte 10 Any Yes
Port Input Word 11 Any Yes
Status 12 Any No
Obsolete 13-14 – –
Logging Mask 15 Any No
Log Request 16 Any No
Nonvolatile Memory Peek 17 Any Yes
Nonvolatile Memory Poke 18 Any Yes
Bad Command Response 19 Any No
Bad Parameters Response 20 Any No
Bad Length Response 21 Any No
Bad Mode Response 24 Any No
Temporal Analyzer Graph 25 Any No
Markov Statistics 26 Any No

Diagnostic Packet Summary
Table 4-1 Diagnostic packet summary (Continued)

Protected by
security
Markov Statistics Reset 27 Any No
Diag Version 28 Any No
Time Stamp 29 Any No
Temporal Analyzer Parameters 30 Any No
DMSS Message 31 Any No
Handset Emulation Keypress 32 Any No
Handset Emulation Lock 33 Any No
Handset Emulation Display 34 Any No
Obsolete 35 Any No
T
n PS
Parameter Set 36 Any No
34
Obsolete 37 – –
om 8:
Nonvolatile Item Read 38
l.c :4 Any No
c
Nonvolatile Item Write 39 Offline Some
.
te 13
Obsolete 40 – –
.7 bk t
41 -b 1 a
Mode Change 41 Any No

3
15
ei .0
Error Record Retrieval 42 Any No

0.
w 01
12
Error Record Clear 43 Any No

ou 3.
2.
zh 201
Symbol Error Rate Reset 44 Any No
Symbol Error Rate Report 45 Any No
Directed Test 46 Offline No
DIP Switch Retrieval 47 Any No
Dip Switch Set 48 Any No
Vocoder PCM Loopback 49 Any No
Vocoder PKT Loopback 50 Any No
Call Origination 53 Any No
Call End 54 Any No
Switch to Downloader 58 Offline No
Reserved 59 – –
Phone State 63 Any No
Pilot Sets 64 Any No


Protected by
security
Service Programming Code 65 Any No
Bad SPC Mode Response 66 Any No
Parameter Retrieval 2 67 Any No
Serial Mode Change 68 Any No
Obsolete 69 – –
Security Password 70 Any No
Bad Security Mode Response 71 Any No
Preferred Roaming List Write 72 Offline No
Preferred Roaming List Read 73 Any No
T
n PS
Obsolete 74 – –
34
Subsystem Dispatch 75 Any No
om 8:
Obsolete 76-80
l.c :4 – –
c
Feature Query 81 Any No
.
te 13
Obsolete 82 – –
.7 bk t
41 -b 1 a
SMS Read 83 Any No

3
15
ei .0
SMS Write 84 Offline No

0.
w 01
12
IS-95-B Frame Error Rate 85 Any No

ou 3.
2.
zh 201
IS-95-B Get F-SCCH Walsh Codes 86 Any No
IS-95-B Set Maximum Number F-SCCH 87 Any No
IS-95-B Parameter Retrieval 88 Any No
Embedded File System Operation 89 Any No
Reserved 90-91 – –
Communications Configuration 92 Any No
Extended Logging Mask 93 Any No
Event Report Control 96 Any No
Obsolete 97 – –
Extensible Parameter Retrieval 98 Any No
Status Snapshot 99 Any No
GPS Session Control 108 Any No
IS2000 Status 112 Any No


Protected by
security
RLP Statistics Reset 113 Any No
TDSO Statistics Reset 114 Any No
Logging Configuration 115 Any No
Log On Demand 120 Any No
Extended Message Packet 121 Any No
Reserved 122 – –
Diagnostic Protocol Loopback 123 Any No
Extended Build ID 124 Any No
T
n PS
Extended Message Configuration 125 Any No
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

5 Log Record Formats
This chapter defines the structure of the LOG_ITEM field of the Log Response message
(Section 3.4.13.2).
Because the DMSS can, in many cases, log data much faster than it could possibly be logged (the
searcher, for instance) the DMSS does not indicate to the DM whether log messages have been
dropped. For time-critical items such as vocoder packets, examination of the packet timestamp
will reveal missing packets. Since traffic channel frames are 20 ms, a vocoder packet should be
T
generated every 20 ms. A 40 ms gap indicates a missing packet.
n PS
The exact timing of log record generation is dependent on context. For instance, forward channel
34
messages are logged whenever the base station sends a forward channel message to the DMSS.
om 8:
This will vary depending on channel state and base station configuration. The same is true for
l.c :4
c
reverse channel messages such as access probe attempts, which has timing based on a
.
te 13
pseudorandom function whose parameters are specified by the base station.

.7 bk t
41 -b 1 a
Log requests can be made to the DMSS as fast as the DM cares to. If the DM requests a log
3
(using a Log Request message) from the DMSS and none is present, the DMSS will immediately
15
ei .0
return a Log Response message with a LENGTH field of zero. Sending Log Request packets
0.
w 01
whenever there are no other diagnostic packets that need to be sent is quite reasonable.
12
ou 3.
2.
zh 201
NOTE All bit fields specified in this chapter are listed in order from Least Significant Bit (LSB) to
Most Significant Bit (MSB).

Log Record Formats
5.1 Log record structure

Log records all share a common format.
LENGTH 2 Length of the log record; this is the entire record including
LENGTH, LOG_CODE, and TIMESTAMP
LOG_CODE 2 Specifies the log item (see Section 5.3 or Section 5.2 for
codes).
LOG_CODE is the 16-bit logging code and consists of the
following fields:
 Equipment identifier – Most significant 4 bits of the log
code specify the equipment ID
 Item identifier – Least significant 12 bits of the log code
specify the log item ID within the equipment ID
TIMESTAMP 8 DMSS timestamp; this is the same format as in the Time
T
n PS
Stamp (29 / 0x1D) (see Section 3.4.26).
DATA LENGTH-12 Data specific to that log type; see Section 5.3 for
34
description of each type of data that can be included in this
om 8:
field.
l.c :4
. c
te 13
5.2 Common structures in log records

.7 bk t
41 -b 1 a
3
15
ei .0
5.2.1 Channel Set masks

0.
w 01
These bit masks specify the active channels for a particular log record, subrecord, or frame.
12
ou 3.
2.
zh 201
5.2.1.1 Forward Dedicated Channel Set mask

This bit mask specifies the active dedicated forward link channels. This structure is used in
several log records.
F_FCH 1 Forward fundamental channel; if this channel is active, this

field is set to 1
F_SCH0 1 Forward supplement channel 0; if this channel is active,

this field is set to 1
F_SCH1 1 Forward supplement channel 1; if this channel is active,

F_DCCH 1 Forward dedicated control channel; if this channel is

active, this field is set to 1
NUM_F_SCCH 3 Number of active supplemental code channels; this field is

only valid for IS-95-B MDR calls; during non-IS-95-B MDR
calls, this field is set to 0
RESERVED 1 Reserved

Log Record Formats
5.2.1.2 Reverse Dedicated Channel Set mask

This bit mask specifies the active dedicated reverse link channels. This structure is used in
R_FCH 1 Reverse fundamental channel; if this channel is active, this

field is set to 1
R_SCH0 1 Reverse supplement channel 0; if this channel is active,

R_SCH1 1 Reverse supplement channel 1; if this channel is active,

R_DCCH 1 Reverse dedicated control channel; if this channel is

active, this field is set to 1.
RESERVED 4 Reserved
T
n PS
5.2.2 Channel radio configurations
34
om 8:
This structure specifies Radio Configurations (RC) for physical channels.
l.c :4
. c
te 13
5.2.2.1 Forward channel radio configurations
.7 bk t
This structure specifies the RC for the dedicated forward link channels. This structure is used in
41 -b 1 a
3
15
ei .0
0.
w 01

12
ou 3.
FOR_FCH_RC 4 F-FCH radio configuration

2.
zh 201
FOR_SCH0_RC 4 F-SCH0 radio configuration
FOR_SCH1_RC 4 F-SCH1 radio configuration
FOR_DCCH_RC 4 F-DCCH radio configuration; see Appendix C for radio

configuration descriptions
5.2.2.2 Reverse channel radio configurations

This structure specifies the radio configurations for the dedicated reverse link channels. This
structure is used in several log records.
REV_FCH_RC 4 R-FCH radio configuration
REV_SCH0_RC 4 R-SCH0 radio configuration
REV_SCH1_RC 4 R-SCH1 radio configuration
REV_DCCH_RC 4 R-DCCH radio configuration; see Appendix C for radio

configuration descriptions

Log Record Formats
5.2.3 MuxPDU Categories

Table 5-1 defines the internal constants used to represent the Dedicated Control Channel
MuxPDU categories in Fast Forward Power Control Statistics (LOG_CODE 0x10C2) and
Reverse Power Control Statistics (LOG_CODE 0x10C3). These categories are further
documented in [S4].
Table 5-1 MuxPDU categories
R-DCCH F-DCCH R-DCCH F-DCCH
MuxPDUType 1 MuxPDUType 1 MuxPDUType 2 MuxPDUType 2
Category Constant Category Constant Category Constant Category Constant
1 143 1 159 1 175 1 203
2 144 2 160 2 176 2 204
3 145 3 161 3 177 3 205
T
4 146 4 162 4 178 4 206
n PS
5 147 5 163 5 179 5 207
34
6 148 6 164 6 180 6 208
om 8:
7 149 7
l.c :4
165 7 181 7 209
. c
te 13
8 150 8 166 8 182 8 210
.7 bk t
9 151 9 167 9 183 9 211

41 -b 1 a
3
15
10 152 10 168 10 184 10 212
ei .0
0.
w 01
11 153 11 169 11 185 11 213

12
ou 3.
12 154 12 170 12 186 12 214

2.
zh 201
13 155 13 171 13 187 13 215
14 156 14 172 14 188 14 216
15 157 15 173 15 189 15 217
— — — — 16 190 16 218
— — — — 17 191 17 219
— — — — 18 192 18 220
— — — — 19 193 19 221
— — — — 20 194 20 222
— — — — 21 195 21 223
— — — — 22 196 22 224
— — — — 23 197 23 225
— — — — 24 198 24 226
— — — — 25 199 25 227
— — — — 26 200 26 228
— — — — 27 201 27 229

Log Record Formats
5.3 Log Packet DATA

This section describes the type of data that can be included in the DATA section of each log
packet.
NOTE Some data types are obsolete and are included for historical reasons.
5.3.1 Temporal Analyzer (LOG_CODE 0x1000) (obsolete)

This has been replaced by LOG_CODE 0x1019, 0x101A, and 0x102D (see Section 5.3.26,
Section 5.3.27, and Section 5.3.42, respectively).
5.3.2 AGC Power Control (LOG_CODE 0x1001) (obsolete)

This has been replaced by LOG_CODE 0x1016 (see Section 5.3.23).
T
n PS
5.3.3 Forward Link Frame Types (LOG_CODE 0x1002) (obsolete)
34
This has been replaced by LOG_CODE 0x100E (see Section 5.3.15).
om 8:
l.c :4
. c
5.3.4 Reverse Link Frame Types (LOG_CODE 0x1003) (obsolete)
te 13
.7 bk t

41 -b 1 a
3
15
ei .0
5.3.5 Access Channel (LOG_CODE 0x1004)

0.
w 01
12
ou 3.
This holds information for access channel messages.

2.
zh 201
ACCESS_MESSAGE 110 Access channel message, as sent

See IS-95-A/B 6.7.1 or J-STD-008 2.7.1.
5.3.6 Reverse Link Channel Traffic (LOG_CODE 0x1005)

This holds information for reverse channel traffic messages.
REV_TC_MESSAGE 255 Reverse traffic channel message, as sent

See IS-95-A/B 6.7.2 or J-STD-008 2.7.2.
5.3.7 Sync Channel (LOG_CODE 0x1006)

This holds information for sync channel messages.
SYNC_MESSAGE 148 Sync channel message, as received

See IS-95-A/B 7.7.1 or J-STD-008 3.7.1.

Log Record Formats
5.3.8 Paging Channel (LOG_CODE 0x1007)

This holds information for paging channel messages.
PAGING_MESSAGE 255 Paging channel message, as received

See IS-95-A/B 7.7.2 or J-STD-008 3.7.2.
5.3.9 Forward Link Channel Traffic (LOG_CODE 0x1008)

This holds information for forward channel traffic messages.
FWD_TC_MESSAGE 255 Forward traffic channel message, as sent

See IS-95-A/B 7.7.3 or J-STD-008 3.7.3.
T
n PS
5.3.10 Forward Link Vocoder (LOG_CODE 0x1009)
34
om 8:
This holds information for the forward link vocoder packet.
l.c :4
. c
te 13
.7 bk t
DATA 36 Raw vocoder data

41 -b 1 a
3
15
RATE 1 Vocoder data rate
ei .0

0.
w 01

12
ou 3.

2.
zh 201

REVLINK 1 0
5.3.11 Reverse Link Vocoder (LOG_CODE 0x100A)

This holds information for the reverse link vocoder packet.
DATA 36 Raw vocoder data

Log Record Formats
RATE 1 Vocoder data rate

REVLINK 1 1
5.3.12 Finger (LOG_CODE 0x100B) (obsolete)

T
n PS
5.3.13 Searcher (LOG_CODE 0x100C) (obsolete)
34
om 8:
l.c :4
c
.
te 13
5.3.14 Reserved (LOG_CODE 0x100D)

.7 bk t
41 -b 1 a
3
15
ei .0
5.3.15 Markov Frame Rate Statistics (LOG_CODE 0x100E)

0.
w 01
12
ou 3.
This holds Markov or voice frame statistics for the forward link. It also includes forward traffic
2.
zh 201
channel rates. This makes the older LOG_CODE 0x1002 obsolete.
COUNT 1 Number of entries in the array
ENTRIES 1 to 100 of the following record; each record represents a

1 to 100 of the following record single received frame
MAX_INX 1 Decision index for this frame = (EXPECTED_MUX * 16) +

ACTUAL_MUX
Where EXPECTED_MUX (upper nibble) is the MUX index
predicted by the Markov process, encoded as indicated in
Table 5-2, and ACTUAL_MUX (lower nibble) is the MUX
index determined by the DMSS’s rate determination
algorithm, encoded as indicated in Table 5-3.
See also IS-95-A 6.4.5.4 and J-STD-008 2.4.5.4.
BIT_ERRS 1 Number of bit errors in this frame; this is 0 if the phone is

not in Markov mode
Table 5-2 describes the EXPECTED_MUX values that are set in the upper nibble of the
MAX_INX byte. These are the types of frames expected based on the Markov algorithm or a
special flag to indicate a non-Markov frame. The descriptions “Set A” and “Set B” refer to

Log Record Formats
column headings in Table 5-3 and indicate which set should be used to decode the
ACTUAL_MUX value in the lower nibble. The description “non-Markov” refers to just that (for
example, voice call).
Table 5-2 Expected MUX values
MUX Description
0x0 9600 Markov
0x1 14400 Markov (Set A)
0x5 4800 Markov
0x6 2400 Markov
T
n PS
0x7 1200 Markov
34
0x8 14400 Markov (Set B)
om 8:
0x9 7200 Markov (Set B)
l.c :4
. c
0xA 3600 Markov (Set B)
te 13
0xB 1800 Markov (Set B)

.7 bk t
41 -b 1 a
3
0xC 13 kbps non-Markov (Set A)
15
ei .0
0xD 13 kbps non-Markov (Set B)

0.
w 01
12
0xE (reserved)
ou 3.
2.
zh 201
0xF 8 kbps non-Markov

Log Record Formats
Table 5-3 describes the ACTUAL_MUX values that are set in the lower nibble of the MAX_INX
byte. The value is interpreted as coming from one of the following sets depending on the value of
EXPECTED_MUX. The applicable value is chosen based on whether the EXPECTED_MUX
value indicated “Set A” or “Set B”.
Table 5-3 Actual MUX values
MUX 8 kbps 13 kbps (Set A) 13 kbps (Set B)
0x0 9600 primary 14400 primary 7200 secondary (B&B)
0x1 9600 1/2 primary + signaling 14400 1/2 primary + signaling 7200 1/8 primary + signaling +
secondary
0x2 9600 1/4 primary + signaling 14400 1/4 primary + signaling 3600 primary
0x3 9600 1/8 primary + signaling 14400 1/8 primary + signaling 3600 1/8 primary + signaling
0x4 9600 signaling (B&B) 14400 signaling (B&B) 3600 signaling (B&B)
T
0x5 4800 primary 14400 1/2 primary + secondary 3600 1/8 primary + secondary
n PS
0x6 2400 primary 14400 1/4 primary + secondary 3600 secondary (B&B)
34
0x7 1200 primary 14400 1/8 primary + secondary 1800 primary
om 8:
0x8 Erased frame (poor quality) 14400 secondary (B&B)
l.c :4 1800 secondary (B&B)
. c
te 13
0x9 Frame quality insufficient to 14400 1/8 primary + signaling + Erased frame (poor quality)
decide upon rate secondary
.7 bk t
41 -b 1 a
0xA 9600 1/2 primary + secondary 7200 primary (reserved)

3
15
ei .0
0xB 9600 1/4 primary + secondary 7200 1/4 primary + signaling (reserved)
0.
w 01
0xC 9600 1/8 primary + secondary 7200 1/8 primary + signaling (reserved)
12
ou 3.
2.
zh 201
0xD 9600 secondary (B&B) 7200 signaling (B&B) (reserved)
0xE (reserved) 7200 1/4 primary + secondary (reserved)
0xF (reserved) 7200 1/8 primary + secondary (reserved)
5.3.16 Searcher, Ver 2 (LOG_CODE 0x100F) (obsolete)

5.3.17 Handset Status (LOG_CODE x1010) (obsolete)


Log Record Formats
5.3.18 Vocoder Error Mask (LOG_CODE 0x1011)

This records the offending packet when Markov services report errors.
DATA 24 Raw Markov data
RATE 1 Markov data rate

T
REVLINK 2 0 – Forward link
n PS
34
5.3.19 Analog Voice Channel (LOG_CODE 0x1012)
om 8:
This holds analog voice channel current information. This record is generated whenever it is
l.c :4
c
requested.
.
te 13
.7 bk t

41 -b 1 a
3
15
SID 2 System ID
ei .0
See IS-95-A 2.6.1.1.2.

0.
w 01
12
ou 3.
CHANNEL 2 Channel number

2.
zh 201
See IS-95-A 2.1.1.1.
SCC 1 SAT color code

See IS-95-A table 3.7.1.1-2.
RSSI 1 RSSI (received signal strength)
POWER 1 Transmit power level index

See IS-95-A table 2.1.2-1.

Log Record Formats
5.3.20 Access Channel Probe (LOG_CODE 0x1013)

This holds information about an attempted access channel probe.
SEQ_NUM 1 Access probe sequence number
PROBE_NUM 1 Access probe number
RX_AGC 1 Receive AGC; see Appendix C for the conversion to

dBm formula
TX_ADJ 1 Transmit gain adjust
PSIST 1 Number of persistence tests performed
CHANNEL 1 Access channel number
RANDOM_M 1 PN randomization delay
T
BACKOFF_RS 1 Sequence backoff
n PS
BACKOFF_RT 1 Probe backoff
34
INT_CORR 1 Interference correction; see IS-95-A 6.6.3.1.1 or
om 8:
l.c :4J-STD-008 2.6.3.1.1 for information on all these
c
variables
.
te 13
.7 bk t
5.3.21 Reserved (LOG_CODE 0x1014)

41 -b 1 a
3
15
ei .0
0.
w 01
5.3.22 Test Mobile Command (LOG_CODE 0x1015) (obsolete)

12
ou 3.

2.
zh 201

Log Record Formats
5.3.23 Sparse AGC/Closed Loop Power Control (LOG_CODE 0x1016)

This holds AGC values and power control entries for hardware using the MSM3000 and
MSM3100 phones.
ADC_THERM 1 Calibrated thermistor ADC sample; signed twos

complement
BATT_VOLT 1 Calibrated battery voltage
TX_PWR_LIMIT 1 CDMA Tx power limit (high 8-bits); see Appendix C for

the conversion to dBm formula
AGC_VALS 100 100 CAGC values sampled every 20 ms; see

Appendix C for the conversion to dBm formula
POWER_CTL_VALS 100 100 power control values sampled every 20 ms; signed
twos complement to convert to dB -(value/2); see
T
IS-95-A 6.1.2.3.1 or J-STD-008 2.1.2.3.1 for more
n PS
information on AGC_VALS and POWER_CTL_VALS
34
TX_PWR_VALS 100 100 CAGC Tx power estimate values (high 8-bits of a
10-bit value) sampled at 20-ms intervals; see
om 8:
Appendix C for the conversion to dBm formula.
l.c :4
. c
To calculate the transmit power in dBm as an estimate
te 13
of actual Tx power based on receive power and transmit

gain, adjust the following:
.7 bk t
41 -b 1 a
3
 tx_pwr = -76 - rx_pwr + tx_adj (PCS)
15
 tx_pwr = -73 - rx_pwr + tx_adj (Cellular)
ei .0
0.
w 01
12
ou 3.
2.
zh 201
5.3.24 Band Change (LOG_CODE 0x1017)

This holds notification of a band class change. This record will be generated every time the band
class or channel changes.
CHANNEL 2 Channel
5.3.26 General Temporal Analyzer (LOG_CODE 0x1019) (obsolete)

This has been replaced by LOG_CODE 0x119F (see Section 5.3.279).
5.3.27 General Temporal Analyzer with Supplemental Channels

(LOG_CODE 0x101A) (obsolete)

Log Record Formats
5.3.28 Reserved (LOG_CODE 0x101B)
5.3.29 Analog Forward Channel (LOG_CODE 0x101C)

This holds channel data for the analog forward channel.
DATA 200
5.3.30 Analog Reverse Channel (LOG_CODE 0x101D)

This holds channel data for analog reverse channel.
T
DATA 200
n PS
34
5.3.31 Analog Handoff (LOG_CODE 0x101E)
om 8:
This holds channel data for analog handoff entry.
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
handoff_type 1 Handoff type; values are:

3
15
 0 – CDMA-to-analog
ei .0
 1 – Analog handoff
0.
w 01
12
ou 3.
2.
zh 201
change_mask 1 Reason for handoff
amps_vc 2 AMPS voice channel number
scc 1 SCC
pwr_level 1 Power level
system_id 2 System identification code

Log Record Formats
5.3.32 FM Slot Statistics (LOG_CODE 0x101F)

This holds the FM Slot Statistics entry.
invalid_words 4 Invalid words
good_words 4 Good words
single_errs 4 Single errors
multiple_errs 4 Mulitple errors
total_rx_isr 4 Total received frames
no_free_buffs 4 Count of “out of free buf” conditions
skip_words 4 Number of words skipped after a DFM reset
slot_count_1 4 Number of words decoded after 1 slot
T
n PS
34
om 8:
l.c :4
. c
te 13
error_slot_count_1 4 Number of errors in 1 slot decoded words

.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12

ou 3.
2.
zh 201
new_sync_erase_value 1 New status of sync erasure
old_sync_erase_value 1 Old status of sync erasure
sync_erase_count 4 Number of sync erasures
sync_erase_error_count 4 Number of errors during sync erasure
out_of_sync_frames 4 Number of out-of-sync frames
out_of_sync_count 4 Number of out-of-sync
dword new_time_value 4 Current time
old_time_value 4 Old time

Log Record Formats
5.3.33 FOCC Word Sync Count (LOG_CODE 0x1020)

This holds the Forward Analog Control Channel (FOCC) word sync count.
ws_count 4 FOCC word sync count
5.3.34 Reserved (LOG_CODE 0x1021 – 0x1024)
5.3.35 RLP Rx Frames (LOG_CODE 0x1025)

This holds information for the received RLP 3 frames.
T
SERVICE_ID 1 SR_ID of this data SO
n PS
COUNT 1 Number of RLP frames that are in this log packet
34
Payload n COUNT occurrences of the fields described in
om 8:
Section 5.3.35.1
l.c :4
. c
te 13
5.3.35.1 Count occurrences

.7 bk t
41 -b 1 a
3
15
ei .0
PHY_CHAN 4 Values are:

0.
w 01
 0 – FCH
12
ou 3.
 1 – DCCH
2.
zh 201
 2 – SCH0
 3 – SCH1
 4 – SCCH0
 5 – SCCH1
 6 – SCCH2
 7 – SCCH3
 8 – SCCH4
 9 – SCCH5
 10 – SCCH6
 11 – SCCH7
 12 – PDCH
MUX_PDU 3 Values are:

 0 – MuxPdu1
 1 – MuxPdu2
 2 – MuxPdu3
 3 – MuxPdu5
Reserved 1 Reserved

Log Record Formats
PHY_CHAN_RATE 14 Values are:

 96 – 9600 bps
 192 – 19200 bps
 384 – 38400 bps
 768 – 76800 bps
 1536 – 153600 bps
 144 – 14400 bps
 288 – 28800 bps
 576 – 57600 bps
 1152 – 115200 bps
TIME_DELTA 1 Values are:

 0 – If same frame time as previous RLP 3 frame
 1 – If next frame time from previous RLP 3 frame
T
n PS
FRAME_LEN 16 Bits in the physical layer; for example:
34
 171 – bits in RS 1 FCH/DCCH
 170 – bits in single-sized MUX PDU 3
om 8:
 346 – bits in double-sized MUX PDU 3
l.c :4
. c
te 13
TAIL 2 Number of bytes logged from the end of the RLP 3 frame; for
.7 bk t
FCH/DCCH, includes type bits at end of frame

41 -b 1 a
3
15
HEAD 6 Number of bytes logged from the front of the RLP 3 frame:
ei .0
 FCH/DCCH frame – Does not include the Mux Mixed

0.
w 01
Mode bit
12
ou 3.
 SCH frame – Includes the 6-bit MUX header

2.
zh 201
PAYLOAD (tail + head) HEAD+TAIL bytes logged from the RLP frame

Log Record Formats
5.3.36 RLP Tx Frames (LOG_CODE 0x1026)

This holds information for the transmitted RLP 3 frames.
Payload n COUNT occurrences of the fields described in

Section 5.3.36.1
PHY_CHAN 4 Values are:
T
 0 – FCH
n PS
 1 – DCCH
 2 – SCH0
34
 3 – SCH1
om 8:
 4 – SCCH0
l.c :4
 5 – SCCH1
. c
 6 – SCCH2
te 13
 7 – SCCH3
.7 bk t
 8 – SCCH4
41 -b 1 a
3
 9 – SCCH5
15
ei .0
 10 – SCCH6
0.
w 01
 11 – SCCH7
12
 12 – PDCH
ou 3.
2.
zh 201
MUX_PDU 3 Values are:

 0 – MuxPdu1
 1 – MuxPdu2
 2 – MuxPdu3
 3 – MuxPdu5
Reserved 1 Reserved
PHY_CHAN_RATE 14 Values are:

 96 – 9600 bps
 192 – 19200 bps
 384 – 38400 bps
 768 – 76800 bps
 1536 – 153600 bps
 144 –14400 bps
 288 – 28800 bps
 576 – 57600 bps
 1152 – 115200 bps
TIME_DELTA 1 Values are:

 0 – If same frame time as previous RLP 3 frame
Reserved 1 Reserved

Log Record Formats
FRAME_LEN 16 Bits in the physical layer; for example:

 171 – bits in RS 1 FCH/DCCH
 170 – bits in single-sized MUX PDU 3
 346 – bits in double-sized MUX PDU 3
TAIL 2 Number of bytes logged from the end of the RLP 3 frame; for
FCH/DCCH, includes type bits at the end of frame
HEAD 6 Number of bytes logged from the front of the RLP 3 frame:
 FCH/DCCH frame – Does not include the Mux Mixed
Mode bit
 SCH frame – Includes the 6-bit MUX header
T
n PS
5.3.38 Forward Link Frame Types (LOG_CODE 0x1029) (obsolete)
34
om 8:
This has been replaced by LOG_CODE 0x10C2 (see Section 5.3.180).
l.c :4
. c
te 13
5.3.39 Reverse Link Frame Types (LOG_CODE 0x102A) (obsolete)

.7 bk t
41 -b 1 a

3
15
ei .0
0.
w 01
5.3.40 Fast Forward Power Control (LOG_CODE 0x102B) (obsolete)

12
ou 3.
2.

zh 201
5.3.41 Reverse Power Control (LOG_CODE 0x102C) (obsolete)

5.3.42 Searcher and Finger (LOG_CODE 0x102D) (obsolete)


Log Record Formats
5.3.43 Service Configuration (LOG_CODE 0x102E)

This holds service configuration information. This record is only available in IS-2000–capable
targets. This packet will be sent every time there is a change to one of the field values.
SERVICE_OPTION 2 Service option
FOR_CH_RC 2 Forward channels Radio Configurations; see

Section 5.2.2.1 for format description
REV_CH_RC 2 Reverse channels Radio Configurations; see

FCH_FRAME_SIZE 1 Frame size on FCH; values are:

 00 – Either 5-ms or 20-ms frame sizes (not dynamically
switchable)
 01 – 20-ms frame size only
T
 10 – 5-ms frame size only
n PS
 11 – Both 5-ms and 20-ms frame sizes (dynamically
switchable)
34
See Section 2.7.4.27.2 of [S13] for a description.
DCCH_FRAME_SIZE 1
om 8:
Frame size on DCCH; values are:
l.c :4
. c
0 – Service option connection does not use forward
te 13

traffic channel traffic
.7 bk t
 1 – Service option connection uses primary traffic on the

41 -b 1 a
3
forward traffic channel
15
ei .0
 2 – Service option connection uses secondary traffic on

0.
w 01
the forward traffic channel

12
See Section 2.7.4.27.1 of [S13] for a description.

ou 3.
2.
zh 201
FOR_TRAFFIC 1 Forward traffic channel type; values are:

 0 – Service option connection does not use forward
forward traffic channel
the forward traffic channel
See Section 2.7.4.18 of [S23] for a description.
REV_TRAFFIC 1 Reverse traffic channel type; values are:

 0 – Service option connection does not use reverse
reverse traffic channel
the reverse traffic channel
FOR_MUX_OPTION 2 Forward multiplex option; see Section 2.7.4.18 of [S13] for

a description
REV_MUX_OPTION 2 Reverse multiplex option; see Section 2.7.4.17 of [S13] for

a description

Log Record Formats

FOR_RATE 1 Forward fundamental channel transmission rates; bit mask
values (4 bits):
 0x01 – Full rate allowed
 0x02 – 1/2 rate allowed
REV_RATE 1 Reverse fundamental channel transmission rates; bit mask

values (4 bits):
 0x01 – Full rate allowed
T
NUM_FOR_SCH 1 Number of active forward supplemental channels (SCH or
n PS
SCCH)
34
NUM_REV_SCH 1 Number of active reverse supplemental channels
om 8:
SCH_INFO 4 * (NUM_FOR_ Supplemental channel information; see Section 5.3.43.1 for
l.c :4
c
SCH+ NUM_REV_ format description
.
te 13
SCH)
.7 bk t
41 -b 1 a
5.3.43.1 Supplemental Channel Information

3
15
ei .0
This holds service configuration information for supplemental channels, or supplemental code
0.
w 01
channels.
12
ou 3.
2.
zh 201
SCH_ID 1 Supplemental channel identifier mask; the mask uses the

following bits:
 0x07 – Supplemental channel ID
 0x08 – 0 for forward link, 1 for reverse link
 0xF0 – Reserved
SCH_MUX_OPTION 2 Supplemental channel multiplex option; see Section

2.7.4.18 of [S13] for a description
SCH_CODING_TYPE 1 Type of coding on this SCH or SCCH

 0 – Convolutional
 1 – Turbo
5.3.44 Active Set and Channel Configuration (LOG_CODE 0x102F)

(obsolete)
5.3.45 Quick Paging Channel (LOG_CODE 0x1030) (obsolete)


Log Record Formats
5.3.46 RLP Statistics (LOG_CODE 0x1031)

This record is generated approximately every 0.5 sec to give an update of RLP statistics.
This record is only available in IS-2000–capable targets.
SERVICE_ID 1 Service identification number
RESET_TIME 8 Timestamp at the time these statistics were last reset to 0
NAKS_RECEIVED 4 Total number of Negative Acknowledgement frames

received
RE_XMITS_NOT_FOUND 4 Number of retransmitted frames not found
LARGEST_CONTIG_ 2 Largest block of consecutive erasures

ERASURE
T
RESETS 1 Number of resets
n PS
ABORTS 1 Number of NAK aborts
34
LAST_RTT 4 Number of 20-ms time frames for the last round-trip time
measurement
om 8:
l.c :4
c
RLP_BLOB_USED 1 Block of bytes used
.
te 13
 0 – Not received
 1 – Specified NAK scheme
.7 bk t
41 -b 1 a
3
 2 – Specified RTT
15
ei .0
 3 – Specified RTT and NAK scheme

0.
w 01
RX_REXMIT_FR_CNT 4 Number of received retransmitted frames

12
ou 3.
RX_IDLE_FR_CNT 4 Number of received idle frames

2.
zh 201
RX_FILL_FR_CNT 4 Number of received fill frames
RX_BLANK_FR_CNT 4 Number of received blank frames
RX_NULL_FR_CNT 4 Number of received null frames
RX_NEW_DATA_FR_CNT 4 Total number of received new data frames
RX_20MS_FR_CNT 4 Number of received fundamental data frames
RX_TOTAL_BYTES 4 Total number of transmitted bytes
RX_RLP_ERASURES 4 Number of Radio Link Protocol erasures received
RX_MUX_ERASURES 4 Number of multiplexer erasures received
TX_REXMIT_FR_CNT 4 Number of transmitted retransmitted frames
TX_IDLE_FR_CNT 4 Number of transmitted idle frames
TX_NEW_DATA_FR_CNT 4 Total number of transmitted new data frames
TX_20MS_FR_CNT 4 Number of received fundamental data frames
TX_TOTAL_BYTES 4 Total number of received bytes
TX_NAKS_CNT 1 Number of TX_NAKS entries to follow
TX_NAKS TX_NAKS_CNT * Array of sent NAKs counts – single NAKs, double NAKs,
4 et. al.

Log Record Formats
5.3.47 Simple Test Data Service Option Counters (LOG_CODE 0x1032)

This record is for simple Test Data Service Option (TDSO) transmit and receive counters.
FOR_MUX_OPTION 2 Forward MUX option
REV_MUX_OPTION 2 Reverse MUX option
Transmit FCH frame counters
E1_T1 4 Rate 1 with no signaling
E2_T2 4 Rate 1/2 with no signaling
E1_TD 4 Rate 1 with dim-and-burst signaling
T
n PS
E2_TD 4 Rate 1/2 with dim-and-burst signaling
34
om 8:
l.c :4
. c
E1_TB 4 Rate 1 with blank-and-burst signaling
te 13
E2_TB 4 Rate 1/2 with blank-and-burst signaling

.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12
EB_TB 4 Blank
ou 3.
2.
zh 201
EB_TO 4 Frame category other than blank
Transmit SCH0 frame counters
ES1X_T1X 4 1 x (9.6 or 14.4), depending on SCH MUX option
ES1X_TB 4 1 x (9.6 or 14.4) expected, blank transmitted instead

ESB_TB 4 Blank
Received FCH frame counters
E1_R1 4 Error-free Rate 1 frame with no dim-and-burst
E1_RERR 4 Rate 1 with bit errors detected by the service option

Log Record Formats

E1_RD 4 Dim-and-burst frame
E1_RB 4 Blank-and-burst
E1_R2 4 Rate 1/2 frame with no dim-and-burst
E1_RFL 4 Rate 1 physical layer frame with insufficient physical layer

frame quality
E1_RE 4 Insufficient frame quality (erasure)
E2_R2 4 Error-free Rate 1/2 frame with no dim-and-burst

T
n PS
34
E2_R1 4 Rate 1 frame with no dim-and-burst
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
frame quality
3
15
ei .0

0.
w 01

12
ou 3.

2.
zh 201

frame quality

Log Record Formats

frame quality
EN_RN 4 Null
EN_RB 4 Blank
EN_RO 4 Other
Received SCH0 frame counters
ES1X_R1X 4 Error-free 1 x (9.6 or 14.4) frame

T
n PS
34
ES1X_RERR 4 1 x (9.6 or 14.4) frame with bit errors
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
ES1X_RE 4 Expected 1 x (9.6 or 14.4), erasure

0.
w 01
12
ou 3.

2.
zh 201
ES1X_RB 4 1 x (9.6 or 14.4) expected, blank received

ESB_RB 4 Blank
ESB_RO 4 Frame category other than blank

Log Record Formats
5.3.49 IS-801 Forward Link (LOG_CODE 0x1036)

IS-801 messages received over the forward link are logged in this message.
header Length 1
header Variable, 0 ..
header Length
MSG 1-255 IS-801 Forward Link message received from base station;
see Section 4.2.4 of [S10] for format
5.3.50 IS-801 Reverse Link (LOG_CODE 0x1037)

IS-801 messages transmitted over the reverse link are logged in this message.
T
n PS
header Length 1
34
header Variable, 0 ..
om 8:
header Length
l.c :4
. c
te 13
MSG 1-255 IS-801 Reverse Link message transmitted by mobile
station; see Section 3.2.4 of [S10] for format
.7 bk t
41 -b 1 a
3
15

ei .0
0.
w 01
12
ou 3.
5.3.52 Factory Test Mode Forward CRC Summary (LOG_CODE

2.
zh 201
0x103A)
This reports the forward link frames demodulation counters while in Factory Test Mode.
FCH_TOTAL_FRAMES 4 Total cumulative frames received on the Forward FCH
FCH_FER 4 Total cumulative frame errors on the Forward FCH
SCH_TOTAL_FRAMES 4 Total cumulative frames received on the Forward SCH
SCH_FER 4 Total cumulative frame errors on the Forward FCH
SCH_NUM_DTX 4 Total cumulative discontinuous transmission frames on the

Forward SCH
DCCH_TOTAL_FRAMES 4 Total cumulative frames received on the Forward DCCH;

this field is only valid with IS-2000 P2 enabled
DCCH_FER 4 Total cumulative frame errors on the Forward DCCH; this

field is only valid with IS-2000 P2 enabled
DCCH_NUM_DTX 4 Total cumulative discontinuous transmission frames on the

Forward DCCH; only valid with IS-2000 P2 enabled

Log Record Formats
5.3.53 Reserved (LOG_CODE 0x103B – 0x103C)
5.3.54 Full test data service option counters (LOG_CODE 0x103D)

This record is for full Test Data Service Option (TDSO) transmit and receive counters. For
additional information, see [S12] Tables 13 through 17.
FOR_MUX_OPTION 2 Forward MUX option
REV_MUX_OPTION 2 Reverse MUX option
Transmit FCH frame counters
TDSO_E1_T1 4 Rate 1 with no signaling
TDSO_E1_TD 4 Rate 1 with dim-and-burst signaling
T
TDSO_E1_TB 4 Rate 1 with blank-and-burst signaling
n PS
TDSO_EB_TB 4 Blank
34
TDSO_EB_TO 4 Frame category other than blank
om 8:
l.c :4
c
Transmit SCH0 frame counters
.
te 13
TDSO_E1X_T1X 4 1 x (9.6 or 14.4), depending on SCH MUX option

.7 bk t
41 -b 1 a
TDSO_E2X_T2X 4 3 2 x (9.6 or 14.4), depending on SCH MUX option

15
ei .0
0.
w 01

12
ou 3.

2.
zh 201
TDSO_E1X_TB 4 1 x (9.6 or 14.4) expected, blank transmitted instead
TDSO_ESB_TB 4 Blank
Received FCH frame counters for fundicated channelFCH/DCCH
TDSO_E1_R1 4 Error-free Rate 1 frame with no dim-and-burst
TDSO_E1_RERR 4 Rate 1 with bit errors
TDSO_E1_RD 4 Dim-and-burst frame
TDSO_E1_RO 4 Other rate frame
TDSO_E1_RB 4 Blank-and-burst
TDSO_E1_RFL 4 Rate 1 physical layer frame with insufficient physical layer

frame quality
TDSO_E1_RE 4 Insufficient frame quality (erasure)
TDSO_EN_RN 4 Null

Log Record Formats
TDSO_EN_RB 4 Blank
TDSO_EN_RO 4 Other
Received SCH0 frame counters
TDSO_E1X_R1X 4 Error-free 1 x (9.6 or 14.4) frame
TDSO_E1X_RERR 4 1 x (9.6 or 14.4) frame with bit errors
T
n PS
34
om 8:
l.c :4
c
TDSO_E1X_RE 4 Expected 1 x (9.6 or 14.4), erasure
.
te 13

.7 bk t
41 -b 1 a
TDSO_E4X_RE 4 3 Expected 4 x (9.6 or 14.4), erasure

15
ei .0
0.
w 01

12
ou 3.
TDSO_E1X_RB 4 1 x (9.6 or 14.4) expected, blank received

2.
zh 201
TDSO_EB_RB 4 Blank
TDSO_EB_RO 4 Frame category other than blank
Received PDU counters for the supplemental channels
TDSO_E3_R3 4 Error-free rate 3 MuxPDU
TDSO_E3_RERR 4 Rate 3 MuxPDU with errors
TDSO_E3_RE 4 Insufficient frame quality, erasures
TDSO_E2_R2 4 Error-free rate 2 MuxPDU
TDSO_E2_RERR 4 Rate 2 MuxPDU with errors
TDSO_E2_RE 4 Insufficient frame quality, erasures
TDSO_E1A_R1A 4 Error-free rate 1a MuxPDU
TDSO_E1A_RERR 4 Rate 1a MuxPDU with errors
TDSO_E1A_RE 4 Insufficient frame quality, erasures

Log Record Formats
TDSO_E1B_R1B 4 Error-free rate 1b MuxPDU
TDSO_E1B_RERR 4 Rate 1b MuxPDU with errors
TDSO_E1B_RE 4 Insufficient frame quality, erasures
5.3.55 Bluetooth General (LOG_CODE 0x103E)

This holds Bluetooth® driver-related general information. These packets are logged periodically
once every 0.5 sec.
BT_DRIVER_STATE 1 Bluetooth driver state; values are:

 0 – Offline (BT_DRIVER_STATE_OFFLINE)
 1 – Pending QDSP (BT_DRIVER_STATE_PENDING_
T
n PS
QDSP)
 2 – HW init (BT_DRIVER_STATE_HW_INIT)
34
 3 – Online (BT_DRIVER_STATE_ONLINE)
om 8:
l.c :4
c
BT_HCI_MODE 1 Bluetooth HCI mode; values are:
.
te 13
 0 – Off (BT_HCIM_OFF)
 1 – Standard on (BT_HCIM_STANDARD_HCI_ON)
.7 bk t
41 -b 1 a
 2 – APIT on (BT_HCIM_APIT_HCI_ON)
3
 3 – RC2SIO on (BT_HCIM_RC2SIO_ON)
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201
5.3.56 Bluetooth Baseband General (LOG_CODE 0x103F)

This holds device-independent Bluetooth baseband-related information. These packets are
logged periodically once every 0.5 sec.
BB_BT_STATE 1 Bluetooth baseband state; values are:

 0 – Standby (BT_BB_STANDBY)
 1 – Inquiry (BT_BB_INQUIRY)
 2 – Inquiry scan (BT_BB_INQUIRY_SCAN)
 3 – Page (BT_BB_PAGE)
 4 – Page scan (BT_BB_PAGE_SCAN)
 5 – Connection (BT_BB_CONNECTION)
BB_BD_ADDR 6 Bluetooth address, consists of 6 bytes
BB_BT_CLK 4 Bluetooth clock (master’s)
BB_BT_CLK_OFFSET 4 Offset between native clock and master’s Bluetooth (BT)

clock
BB_IAC 2 2-byte general inquiry access code (GIAC)
BB_TOTAL_TX_PKTS 4 Total packets transmitted at BT baseband layer
BB_TOTAL_RX_PKTS 4 Total packets received at BT baseband layer

Log Record Formats
BB_TX_VOICE_PKT 2 Total voice packets transmitted at BT baseband layer
BB_RX_VOICE_PKT 2 Total voice packets received at BT baseband layer
BB_RX_STATUS_READ 2 Hardware register of status of last received packet
BB_MISC_RX_OVERFLOW 1 Miscellaneous receive buffer overflow

 0xFF – Miscellaneous receive buffer is overflowed
 0x00 – No overflow
BB_EVENT_OVERFLOW 1 Event buffer overflow

 0xFF – Event buffer is overflowed
BB_RF_CHIP 1 RF chip in use
T
 0 – Qualcomm (BT_BB_RFU1)
n PS
 1 – Ericsson P2D (BT_BB_RFU2)
 2 – Ericsson R1A (BT_BB_RFU3)
34
 3 – Broadcomm (BT_BB_RFU4)
om 8:
l.c :4 4 – Philsar (BT_BB_RFU5)
c
 5 – Lucent (BT_BB_RFU6)
.
te 13
 6 – Default (BT_BB_RFU_DEFAULT)
.7 bk t
41 -b 1 a
3
15
ei .0
5.3.57 Bluetooth Baseband Device-Specific (LOG_CODE 0x1040)

0.
w 01
12
This holds device-specific Bluetooth baseband-related information. These packets are logged
ou 3.
periodically once every 0.5 sec. There is one packet logged for each baseband connection to a
2.
zh 201
remote Bluetooth device.
BB_DEVICE_IDX 1 Device index of the remote Bluetooth (BT) device
BB_BT_DEVICE_STATE 1 Device state of the remote BT device; values are:

 0 – Standby (BT_BB_STANDBY)
 1 – Inquiry (BT_BB_INQUIRY)
 2 – Inquiry scan (BT_BB_INQUIRY_SCAN)
 3 – Page (BT_BB_PAGE)
 4 – Page scan (BT_BB_PAGE_SCAN)
 5 – Connection (BT_BB_CONNECTION)
BB_REMOTE_BD_ADDR 6 Bluetooth device address of the remote BT device
BB_AM_ADDRESS 1 Active member address
BB_EST_POLL_INT 2 Estimated poll interval

Log Record Formats
BB_ENABLED_PKT_TYPE 2 Current Tx packet type; values are:

 0 – Poll (BT_BB_PACKET_POLL)
 3 – DM1 (BT_BB_PACKET_DM1)
 4 – DH1 (BT_BB_PACKET_DH1)
 5 – HV1 (BT_BB_PACKET_HV1)
 9 – AUX1 (BT_BB_PACKET_AUX1)
BB_SCO_ENCODING 1 SCO encoding type; values are:

 0 – Mu-Law
T
n PS
 1 – A-Law
 2 – CVSD
34
om 8:
BB_TX_POWER 2 l.c :4 Nominal transmit power
. c
BB_RX_POWER 2 Nominal receive power
te 13
BB_SUPERVISION_TO 2 Supervision timeout

.7 bk t
41 -b 1 a
3
BB_POLL_INTERVAL 2 Poll Interval
15
ei .0
BB_HOLD_MODE_EN 1 Enable QDSP hold mode; values are:

0.
w 01
 0xFF – Enabled
12
ou 3.
 0x00 – Not enabled

2.
zh 201
BB_SNIFF_MODE_EN 1 Enable QDSP sniff mode; values are:

BB_PARK_MODE_EN 1 Enable QDSP park mode; values are:

BB_L2CAP_OVERFLOW 1 QDSP L2CAP Rx buffer overflow; values are:

 0xFF – QDSP L2CAP Rx buffer is overflowed
BB_TX_FLOW_ON 1 Transmit flow control; values are:

 0x01 – On
 0x00 – Off

Log Record Formats

BB_RX_FLOW_ON 1 Receive flow control; values are:
 0x01 – On
 0x00 – Off
BB_ENCRYPT_KEY 16 16-byte encryption key LSB to MSB
BB_TX_ENCRYPT_ON 1 Enable transmit encryption; values are:

 0x01 – Enabled
BB_RX_ENCRYPT_ON 1 Enable receive encryption; values are:

 0x01 – Enabled
T
n PS
BB_PKT_ERR_RATE 4 Packet error rate (values TBD)
BB_RX_DATA_RATE 4 Receive data rate (values TBD)
34
om 8:
BB_TX_DATA_BYTES 4 Total bytes transmitted – L2CAP and link manager
protocol (LMP)
l.c :4
. c
te 13
BB_RX_DATA_BYTES 4 Total bytes received – L2CAP and LMP
.7 bk t
BB_SRCH_HITS 2 Searcher hit count

41 -b 1 a
3
15
BB_TX_PACKET_CNT 2 Baseband transmit packet count
ei .0
0.
w 01
BB_RX_PACKET_CNT 2 Baseband receive packet count

12
ou 3.
BB_RETRANS_PKT_CNT 2 Baseband retransmission packet count

2.
zh 201
BB_CRC_FAIL_CNT 2 Baseband CRC failure count
BB_HEC_FAIL_CNT 2 Baseband header error check (HEC) fail count
BB_HDR_FEC_CORR_CNT 2 Baseband header forward error correction (FEC)

corrected count
BB_PYLD_FEC_CORR_CNT 2 Baseband payload FEC corrected count
BB_PYLD_FEC_FAIL_CNT 2 Baseband payload FEC correction failed count
5.3.58 Bluetooth Link Manager Protocol (LOG_CODE 0x1041)

This holds Bluetooth link manager protocol (LMP) related information. These packets are
logged periodically once every 0.5 sec. There is one packet logged for each link-level connection
to a remote Bluetooth device.

Log Record Formats
LM_DEVICE_IDX 1 Device index specifying to which remote Bluetooth (BT)

device the packet refers
LM_ACL_STATE 1 State of the Asynchronous Connectionless Link (ACL)

connection; values are:
 0 – Down (BT_LM_CONN_DOWN)
 1 – Detaching (BT_LM_CONN_DETACHING)
 2 – Going down (BT_LM_CONN_GOING_DOWN)
 3 – BB Up (BT_LM_CONN_BB_UP)
 4 – Wait for host accept (BT_LM_CONN_W4_HOST_
ACCEPT)
 5 – Wait for remote accept (BT_LM_CONN_W4_
REMOTE_ACCEPT)
 6 – Version (BT_LM_CONN_VERSION)
 7 – Features (BT_LM_CONN_FEATURES)
 8 – Security (BT_LM_CONN_SECURITY)
T
n PS
 9 – Setup complete (BT_LM_CONN_SETUP_CMPLT)
 10 – Up (BT_LM_CONN_UP)
34
om 8:
LM_ROLE 1 Remote BT device’s role; values are:
l.c :4
c
 0 – Master (BT_ROLE_MASTER)
.
te 13
 1 – Slave (BT_ROLE_SLAVE)
 2 – TBD (BT_ROLE_TBD)
.7 bk t
41 -b 1 a
3
15
ei .0
LM_SCO1_STATE 1 State of the first SCO connection; this field’s values are the
0.
w 01
same as those for the LM_ACL_STATE field

12
ou 3.
LM_SCO2_STATE 1 State of the second SCO connection; this field’s values are
2.
zh 201
the same as those for the LM_ACL_STATE field
LM_LINK_MODE 1 Link mode of the ACL connection; values are:

 0 – Active (BT_MODE_ACTIVE)
 1 – Hold (BT_MODE_HOLD)
 2 – Sniff (BT_MODE_SNIFF)
 3 – Park (BT_MODE_PARK)
LM_AUTH_STATE 1 Local authentication state for the ACL connection; values

are:
 0 – Normal (BT_AUTH_NORMAL)
 1 – Wait for link key (BT_AUTH_W4_LINK_KEY)
 2 – Wait for pin code (BT_AUTH_W4_PIN_CODE)
 3 – Pairing (BT_AUTH_PAIRING)
 4 – Authenticating (BT_AUTH_AUTHENTICATING)
 5 – Pairing key change (BT_AUTH_PAIRING_KEY_
CHANGE)
 6 – Timer (BT_AUTH_TIMER)
 7 – Authentication after timer
(BT_AUTH_AUTH_AFTER_ TIMER)
 8 – Key change (BT_AUTH_KEY_CHANGE)
 9 – Key change after encryption off (BT_AUTH_KEY_
CHANGE_AFTER_ENCRYPT_OFF)

Log Record Formats
LM_REMOTE_AUTH_ 1 Remote authentication state for the ACL connection; this

STATE field’s values are the same as those for the
LM_AUTH_STATE field
LM_ENCRYPT_STATE 1 Encryption state for the ACL connection; values are:

 0 – Normal (BT_ENCRYPT_NORMAL)
 1 – Setup (BT_ENCRYPT_SETUP)
 2 – Setup wait for authentication
(BT_ENCRYPT_SETUP_ W4_AUTH)
 3 – Turn on/off (BT_ENCRYPT_TURN_ON_OFF)
 4 – Turn on/off wait for authentication (BT_ENCRYPT_
TURN_ON_OFF_W4_AUTH)
 5 – Remote turn on/off
(BT_ENCRYPT_REMOTE_TURN_ ON_OFF)
 6 – Stop/start (BT_ENCRYPT_STOP_START)
T
n PS
LM_CONN_HNDL 2 Connection handle to the remote BT device
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.59 Bluetooth L2CAP (LOG_CODE 0x1042)

This holds Bluetooth L2CAP protocol-related information. These packets are logged periodically
once every 0.5 sec. There is one packet logged for each L2CAP-level connection to a remote
Bluetooth device.
L2CAP_IDX 1 L2CAP device index
L2CAP_STATE 1 L2CAP channel state; values are:

 0 – Closed (BT_L2_CLOSED)
 1 – Wait for L2CAP connect request
(BT_L2_W4_L2CAP_ CONNECT_RQST)
 2 – Wait for L2CAP connect response (BT_L2_W4_
L2CAP_CONNECT_RSP)
 3 – Wait for L2CA connect response
(BT_L2_W4_L2CA_ CONNECT_RSP)
T
 4 – Configuration (BT_L2_CONFIG)
n PS
 5 – Open (BT_L2_OPEN)
 6 – Wait for L2CAP disconnect response
34
(BT_L2_W4_L2CAP _DISCONNECT_RSP)
om 8:
 7 – Wait for L2CA disconnect response (BT_L2_W4_
l.c :4L2CA_DISCONNECT_RSP)
. c
te 13
L2CAP_CONFIG_REQ_ 1 L2CAP configuration request state; values are:

.7 bk t
41 -b 1 a
STATE  0 – Configuration start (BT_L2_CONFIG_START)

3
15
 1 – Request sent (BT_L2_RQST_SENT)
ei .0
 2 – Request received (BT_L2_RQST_RCVD)

0.
w 01
 3 – Configuration end (BT_L2_CONFIG_END)

12
ou 3.
2.
zh 201
L2CAP_CONFIG_RSP_ 1 L2CAP configuration response state; this field’s values are

STATE the same as those for the L2CAP_CONFIG_REQ_ STATE
field
L2CAP_CONN_STATUS 1 L2CAP link manager connection status; values are:

 0 – Down (BT_LM_CONN_DOWN)
 1 – Detaching (BT_LM_CONN_DETACHING)
 2 – Going down (BT_LM_CONN_GOING_DOWN)
 3 – BB up (BT_LM_CONN_BB_UP)
 4 – Wait for host accept (BT_LM_CONN_W4_HOST_
ACCEPT)
 5 – Wait for remote accept (BT_LM_CONN_W4_
REMOTE_ACCEPT)
 6 – Version (BT_LM_CONN_VERSION)
 7 – Features (BT_LM_CONN_FEATURES)
 8 – Security (BT_LM_CONN_SECURITY)
 9 – Setup complete (BT_LM_CONN_SETUP_CMPLT)
 10 – Up (BT_LM_CONN_UP)
L2CAP_BD_ADDR 1 BD_ADDR of device to which the L2CAP channel is

connected
L2CAP_CONN_HNDL 2 ACL connection handle
L2CAP_PSM 2 Protocol service multiplexer (PSM) value for the connection

Log Record Formats
L2CAP_LOCAL_CID 2 Local (source) L2CAP channel ID
L2CAP_REMOTE_CID 2 Remote (destination) L2CAP channel ID
L2CAP_RESULT 2 Not used
L2CAP_STATUS 2 Not used
5.3.60 Bluetooth Service Discovery (LOG_CODE 0x1043)

This holds Bluetooth service discovery protocol (SDP) related information. These packets are
logged periodically once every 0.5 sec. There is one packet logged for each SDP connection to a
remote Bluetooth device.
T
SDP_BD_ADDR 6 Service discovery protocol’s copy of the local device’s
n PS
Bluetooth address
34
SDP_CID 2 L2CAP channel ID assigned to service discovery protocol
(SDP)
om 8:
l.c :4
c
SDP_TID 2 SDP transaction ID
.
te 13
SDP_CONNECTED 1 Boolean field describing whether the SDP is in

Connected state
.7 bk t
41 -b 1 a
3
SDP_REQUEST_PENDING 1 Boolean field describing whether an SDP request is
15
ei .0
pending
0.
w 01
SDP_BT_APP_ID 2 SDP application ID

12
ou 3.
2.
zh 201
SDP_NUM_RESP_RECV 2 Number of responses received by the SDP
SDP_TOT_SRV_REC_ 2 Number of service records in the SDP’s database

COUNT
SDP_TOT_ATTR_BYTE_ 2 Number of attribute bytes in the SDP’s database

COUNT
SDP_ATTR_LIST_BYTE_ 2 Number of attribute list bytes in the SDP’s database

COUNT

Log Record Formats
5.3.61 Bluetooth RFCOMM Session-specific (LOG_CODE 0x1044)

This holds information related to a particular RFCOMM session. These packets are logged
periodically once every 0.5 sec. There is one packet logged for each RFCOMM session
connection to a remote Bluetooth device.
RC_SSN_IDX 1 RFCOMM session index of the current RFCOMM session
RC_MCC_STATE 1 RFCOMM multiplexer control channel state

 1 – Disconnected (BT_RCDS_DISCONNECTED)
 2 – Connecting L2CAP (BT_RCDS_CONNECTING_
L2CAP)
 3 – Connecting DLC (BT_RCDS_CONNECTING_DLC)
 4 – Connected (BT_RCDS_CONNECTED)
 5 – Disconnecting DLC
(BT_RCDS_DISCONNECTING_ DLC)
T
 6 – Disconnecting L2CAP (BT_RCDS_
n PS
DISCONNECTING_L2CAP)
34
om 8:
RC_CID 2 RFCOMM channel ID assigned to the current RFCOMM
session
l.c :4
. c
te 13
RC_BD_ADDR 6 Bluetooth device address of the remote device connected
to the current RFCOMM session
.7 bk t
41 -b 1 a
3
RC_INITIATOR 1 Boolean field describing whether the local device is session
15
initiator
ei .0
0.
w 01
12
ou 3.
5.3.62 Bluetooth RFCOMM DLCI Connection-Specific (LOG_CODE

2.
zh 201
0x1045)
This holds information related to a particular DLCI connection within a RFCOMM session.
These packets are logged periodically once every 0.5 sec. There is one packet logged for each
DLCI connection to a remote Bluetooth device.
RC_SSN_IDX 1 Session index of the current RFCOMM connection
RC_DLCI 1 DLCI value of the current RFCOMM connection
RC_DLCI_STATE 1 DLCI state of the current RFCOMM connection; values

are:
 1 – Disconnected (BT_RCDS_DISCONNECTED)
 2 – Connecting L2CAP
(BT_RCDS_CONNECTING_ L2CAP)
 3 – Connecting DLC
(BT_RCDS_CONNECTING_DLC)
 4 – Connected (BT_RCDS_CONNECTED)
 5 – Disconnecting DLC
(BT_RCDS_DISCONNECTING_ DLC)
 6 – Disconnecting L2CAP (BT_RCDS_
DISCONNECTING_L2CAP)

Log Record Formats

RC_DLCI_PID 2 DLCI port identifier of the current RFCOMM connection
RC_DLCI_DIRECTION 1 Boolean field describing whether the local device is

session initiator
RC_SERVER_CHANNEL 1 RFCOMM server channel used for the current

RFCOMM session
RC_APP_ID 2 RFCOMM application ID
RC_MAX_FRAME_SIZE 2 Maximum frame size for RFCOMM frames
RC_EXPECTED_RX_MASK 1 RFCOMM expected receive mask
RC_LOCAL_MSC_V24_ 1 RFCOMM local MSC V24 signals

SIGNALS
RC_FAR_MSC_V24_ 1 RFCOMM far MSC V24 signals

SIGNALS
T
n PS
RC_TX_ERRORS 2 Total number of RFCOMM transmit errors
34
RC_RX_ERRORS 2 Total number of RFCOMM receive errors
om 8:
RC_TX_DATA_BYTES 4 l.c :4 Total number of RFCOMM data bytes transmitted
c
RC_RX_DATA_BYTES 4 Total number of RFCOMM data bytes received
.
te 13
RC_TX_UIH_FRAMES 4 Total number of RFCOMM UIH frames transmitted

.7 bk t
41 -b 1 a
RC_RX_UIH_FRAMES 4 Total number of RFCOMM UIH frames received

3
15
ei .0
RC_TX_WM_MAX_CNT 2 Maximum value of the RFCOMM transmit watermark

0.
w 01
RC_RX_WM_MAX_CNT 2 Maximum value of the RFCOMM receive watermark

12
ou 3.
2.
zh 201
RC_TX_WM_CURRENT_ 2 Maximum value of the RFCOMM transmit watermark

CNT
RC_RX_WM_CURRENT_ 2 Current value of the RFCOMM receive watermark

CNT

Log Record Formats
5.3.63 Bluetooth Audio Gateway (LOG_CODE 0x1046)

This holds Bluetooth Audio Gateway (AG) profile-related information. These packets are logged
periodically once every 0.5 sec. There is one packet logged for each audio gateway connection to
a remote Bluetooth device.
AG_STATE 1 State of the AG during a connection setup; values are:

 0 – Not active (BT_AGS_NORMAL)
 1 – Enabling BT driver (BT_AGS_ENABLING_BT_
DRIVER)
 2 – Connecting RFCOMM (BT_AGS_CONNECTING_
RFCOMM)
 3 – Enabled (BT_AGS_ENABLED)
 4 – Ringing the headset (BT_AGS_CONNECTING_AT)
 5 – Waiting audio connect
(BT_AGS_WAITING_AUDIO_ CONNECT)
T
n PS
 6 – Connecting SCO link
(BT_AGS_CONNECTING_SCO)
34
 7 – Connected (BT_AGS_CONNECTED)
 8 – Disabling BT driver (BT_AGS_DISABLING_BT_
om 8:
l.c :4 DRIVER)
. c
te 13
AG_APP_ID 1 Application ID of the AG (for internal use by local Bluetooth

.7 bk t
device)
41 -b 1 a
3
15
AG_BD_ADDR 6 Bluetooth (BT) device address of the remote device
ei .0
0.
w 01
AG_MY_SERVER_CHA 1 RFCOMM server channel used by the local BT device

12
NNEL
ou 3.
2.
zh 201
AG_REMOTE_SERVER 1 RFCOMM server channel used by the remote BT device

_CHANNEL
AG_RFCOMM_PID 1 RFCOMM port identifier assigned to AG profile
AG_SCO_HANDLE 1 SCO handle assigned to AG profile
5.3.65 Bluetooth LMP Signaling Received (LOG_CODE 0x1048)

This holds information related to an individual Link Manager Protocol (LMP) signaling message
being received. All the bytes in the packet are logged. There is one packet logged for each LMP
signaling message received.
LENGTH 2 Length of the LMP signaling message
IDX 1 Device index of the remote device from which the message
is received
BUFFER 17 Array of bytes of size BT_LP_LOG_BUFFER_SIZE

Log Record Formats
5.3.66 Bluetooth LMP Signaling Transmitted (LOG_CODE 0x1049)

This holds information related to an individual Link Manager Protocol (LMP) signaling message
being transmitted. All the bytes in the packet are logged. There is one packet logged for each
LMP signaling message transmitted.
LENGTH 2 Length of the LMP signaling message
IDX 1 Device index of the remote device to which the message is

transmitted
BUFFER 17 Array of bytes of size BT_LP_LOG_BUFFER_SIZE
5.3.67 Bluetooth Baseband (L2CAP only) Received (LOG_CODE

0x104A)
This holds information related to an individual baseband message being received. Logging at this
T
level is not supported for non-L2CAP baseband messages. Only the first 10 and the last 10 bytes
n PS
are logged. If the received message contains bytes in the range of 1 to 20, all the bytes are
34
logged. There is one packet logged for each message received.
om 8:
l.c :4
c
LENGTH 2 Length of the (L2CAP only) baseband message
.
te 13
IDX 1 Device index of the remote device from which the message
is received
.7 bk t
41 -b 1 a
3
BUFFER 20 Array of bytes of size BT_PYLD_LOG_BUFFER_SIZE
15
ei .0
0.
w 01
5.3.68 Bluetooth Baseband (L2CAP only) Transmitted (LOG_CODE

12
ou 3.
0x104B)
2.
zh 201
This holds information related to an individual baseband message being transmitted. Logging at
this level is not supported for non-L2CAP baseband messages. Only the first 10 and the last 10
bytes are logged. If the transmitted packet contains bytes in the range of 1 to 20, all the bytes are
logged. There is one packet logged for each message transmitted.
LENGTH 2 Length of the (L2CAP only) baseband message
IDX 1 Device index of the remote device to which the message is

transmitted

Log Record Formats
5.3.69 Bluetooth L2CAP Signaling Received (LOG_CODE 0x104C)

This holds information related to an individual L2CAP signaling message being received. All the
bytes in the message are logged. There is one packet logged for each L2CAP signaling message
received.
LENGTH 2 Length of the L2CAP signaling message
LOCAL_CID 2 L2CAP channel ID on which the signaling message is

received
BUFFER 32 Array of bytes of size BT_L2_LOG_BUFFER_SIZE
5.3.70 Bluetooth L2CAP Signaling Transmitted (LOG_CODE 0x104D)

This holds information related to an individual L2CAP signaling message being transmitted. All
T
n PS
the bytes in the message are logged. There is one packet logged for each L2CAP signaling
message transmitted.
34
om 8:
l.c :4 Description
c
LENGTH 2 Length of the L2CAP signaling message
.
te 13

.7 bk t
transmitted
41 -b 1 a
3
15
BUFFER 32 Array of bytes of size BT_L2_LOG_BUFFER_SIZE
ei .0
0.
w 01
12
ou 3.
5.3.71 Bluetooth L2CAP Data Received (LOG_CODE 0x104E)

2.
zh 201
This holds information related to an individual L2CAP data message being received. Only the
first 10 and the last 10 bytes are logged. If the message contains bytes in the range of 1 to 20, all
the bytes are logged. There is one packet logged for each L2CAP data message received.

LENGTH 2 Length of the L2CAP data message
LOCAL_CID 2 L2CAP channel ID on which the data message is received
5.3.72 Bluetooth L2CAP Data Transmitted (LOG_CODE 0x104F)

This holds information related to an individual L2CAP data message being transmitted. Only the
the bytes are logged. There is one packet logged for each L2CAP data message transmitted.
LENGTH 2 Length of the L2CAP data message
LOCAL_CID 2 L2CAP channel ID on which the data message is transmitted

Log Record Formats
5.3.73 Bluetooth SDP Signaling Received (LOG_CODE 0x1050)

This holds information related to an individual Service Discovery Protocol (SDP) signaling
message being received. All the bytes in the message are logged. There is one packet logged for
each SDP signaling message received.
LENGTH 2 Length of the SDP signaling message

received
BUFFER 128 Array of bytes of size BT_SD_RX_LOG_BUFFER_SIZE
5.3.74 Bluetooth SDP Signaling Transmitted (LOG_CODE 0x1051)

This holds information related to an individual Service Discovery Protocol (SDP) signaling
T
n PS
message being transmitted. All the bytes in the message are logged. There is one packet logged
for each SDP signaling message transmitted.
34
om 8:
l.c :4 Description
c
LENGTH 2 Length of the SDP signaling message
.
te 13

.7 bk t
transmitted
41 -b 1 a
3
15
BUFFER 64 Array of bytes of size BT_SD_TX_LOG_BUFFER_SIZE
ei .0
0.
w 01
12
ou 3.
5.3.75 Bluetooth RFCOMM Signaling Received (LOG_CODE 0x1052)

2.
zh 201
This holds information related to an individual RFCOMM signaling message being received. All
the bytes in the message are logged. There is one packet logged for each RFCOMM signaling
message received.

LENGTH 2 Length of the RFCOMM signaling message
DLCI 1 Data link connection identifier of the connection on which the

RFCOMM signaling message is received

received
BUFFER 25 Array of bytes of size BT_RC_LOG_BUFFER_SIZE

Log Record Formats
5.3.76 Bluetooth RFCOMM Signaling Transmitted (LOG_CODE

0x1053)
This holds information related to an individual RFCOMM signaling message being transmitted.
All the bytes in the message are logged. There is one packet logged for each RFCOMM signaling
message transmitted.
LENGTH 2 Length of the RFCOMM signaling message

RFCOMM signaling message is transmitted

transmitted
BUFFER 25 Array of bytes of size BT_RC_LOG_BUFFER_SIZE
T
n PS
5.3.77 Bluetooth RFCOMM Data Received (LOG_CODE 0x1054)
34
This holds information related to an individual RFCOMM data message being received. Only the
om 8:
l.c :4
c
the bytes are logged. There is one packet logged for each RFCOMM data message received.
.
te 13
.7 bk t

41 -b 1 a
3
15
LENGTH 2 Length of the RFCOMM data message
ei .0
0.
w 01

12
RFCOMM data message is received

ou 3.
2.
zh 201
LOCAL_CID 2 L2CAP channel ID on which the data message is received
5.3.78 Bluetooth RFCOMM Data Transmitted (LOG_CODE 0x1055)

This holds information related to an individual RFCOMM data message being transmitted. Only
the first 10 and the last 10 bytes are logged. If the message contains bytes in the range of 1 to 20,
all the bytes are logged. There is one packet logged for each RFCOMM data message
transmitted.
LENGTH 2 Length of the RFCOMM data message

RFCOMM data message is transmitted
LOCAL_CID 2 L2CAP channel ID on which the data message is transmitted

Log Record Formats
5.3.79 Reserved (LOG_CODE 0x1056 – 0x105C)
5.3.80 1xEV-DO Searcher (LOG_CODE 0x105D) (obsolete)

This packet has been replaced by 1xEV-DO Searcher, Ver 2 (LOG_CODE 0x1089); see
Section 5.3.124.
5.3.81 1xEV-DO Handoff State (LOG_CODE 0x105E)

This supplies the handoff state of the active set pilots. Data is generated only on a change in the
active set or the candidate set. Data for this packet is both sampled and logged asynchronously
each time active set is changed. Counters are reset at the start of the session.
ModemState 1 Indicates the state of 1xEV-DO SRCH; values are:
T
n PS
 0 – Start
 1 – Acquisition
34
 2 – Sync
 3 – Idle
om 8:
 4 – Connected
l.c :4
. c
te 13
NumPilotsInActiveSet 1 Number of pilots in active set

.7 bk t
41 -b 1 a
3
15
ei .0
Repeat for each pilot in active set

0.
w 01
12
ou 3.

2.
zh 201
PilotPN 2 PN offset
DRCCoverIndex 1 DRC cover of the pilot as supplied in the TCA message
MACIndex 1 Power control bit of the pilot as supplied in the TCA message
RPCCellIndex 1 Represents the cell index of the pilot; pilots from the same
cell have the same RPCCellIndex
PilotStrength 1 Strength of the pilot in the active set; this is in the range of
[0,63]; conversion to dB is –val/2 dB

Log Record Formats
5.3.82 1xEV-DO Active Set Pilot (LOG_CODE 0x105F)

This supplies the details of the predicted and the serving pilots for the AT. This packet may be
logged every time the DRC cover is changed by the predictor. Data for this packet is both
sampled and logged asynchronously after a change in ASET. This packet may be logged on
demand when not in Sleep state.
Length
Field Description
(bytes)
NumActiveSetPilots 1 Number of pilots in the active set after the set transition
PredictedPN 2 PN for the pilot predicted by the predictor; 0xFFFF indicates an

invalid PN
PredictedDRCCoverIndex 1 DRC cover of the predicted pilot; valid only if PredictedPN is not
equal to 0xFFFF
PredictedMACIndex 1 RPC index associated with the predicted pilot; valid only if
T
PredictedPN is not equal to 0xFFFF
n PS
PredictedPNSINR 2 SINR of the predicted pilot; valid only if PredictedPN is not equal
34
to 0xFFFF
om 8:
ServingPN 2 DRC cover of the serving pilot; 0xFFFF indicates an invalid PN
l.c :4
. c
ServingDRCCoverIndex 1 DRC cover of the best serving pilot; valid only if ServingPN is not
te 13
equal to 0xFFFF
.7 bk t
41 -b 1 a
ServingRPCIndex 1 MAC index associated with the serving pilot; valid only if
3
ServingPN is not equal to 0xFFFF
15
ei .0
ServingSINR 2 SINR of the serving pilot; valid only if ServingPN is not equal to
0.
w 01
0xFFFF
12
ou 3.
2.
zh 201

Log Record Formats
5.3.83 1xEV-DO Reverse Link Packet Summary (LOG_CODE 0x1060)

This provides a summary of the reverse link packet at the level of the physical layer. Every frame
that is sent out at the AT is logged. Data for this packet is both sampled and logged
asynchronously for each packet to be transmitted on the reverse channels. This packet is
supported in Rev 0 only.
Length
Field Description
(bytes)
ReverseRateLimit 1 Rate limit value as specified by the reverse rate limit message; see
Table 5-4 for reverse rate mapping
CurrentRate 1 Provides the current rate at which the AT has sent the last packet
over the ReverseTrafficChannel; see Table 5-4 for reverse rate
mapping
CombinedBusyBit 1 Busy bit used to calculate the new rate; if any of the reverse
activity bits from the sectors of the AT active set is 1, then this is
T
set to 1; otherwise, it is set to 0
n PS
RandomVariable 4 Represents the random variable that was used to calculate the
34
new reverse rate; this is multiplied by a factor of 255 to produce a
om 8:
value from 0 to 255
l.c :4
c
TransitionProbability 4 Transition probability (in units of 1/255) that was used to calculate
.
te 13
the new reverse rate; this is the probability that satisfies the
condition specified in Section 8.5.6.1.5.2 of IS-856.
.7 bk t
41 -b 1 a
3
PAMax 1 Represents the Max PA headroom at which the AT is restricted to
15
transmit; see Table 5-4 for reverse rate mapping
ei .0
0.
w 01
ConditionRRI 1 Provides the reverse rate that was calculated based on the above
12
factors; uses the algorithm as specified in Section 8.5.6.1.5.2 of

ou 3.
IS-856; see Table 5-4 for reverse rate mapping

2.
zh 201
ActualRRI 1 RRI at which the ReverseLinkPacket was transmitted; this should

be < ConditionRRI; see Table 5-4 for reverse rate mapping
Note: If ActualRRI < ConditionRRI, then the Reverse Rate is
demoted as there is not enough data to be sent.
NumPadBytes 1 Number of pad bytes included in the reverse link packets
The mapping from index to reverse rate in bits/second is given in Table 5-4.
Table 5-4 Index to reverse rate mapping

Index Rate in BPS
0 0
1 9600
2 19200
3 38400
4 76800
5 153600

Log Record Formats
5.3.84 1xEV-DO Data Rate Control Channel - ARQ Buffer

(LOG_CODE 0x1061) (obsolete)
This packet has been replaced by 1xEV-DO Data Rate Control Channel - ARQ Buffer, Ver 2
(LOG_CODE 0x108C); see Section 5.3.127.
5.3.85 1xEV-DO Reverse Traffic Rate Count (LOG_CODE 0x1062)

This contains the number of reverse link traffic packets transmitted at various rates. Data for this
packet is sampled every time a traffic packet is transmitted. The data is logged every 1 sec.
Counters are reset at the start of the session. This packet is supported in Rev 0 only.
Rate9600 4 Counter for the number of packets transmitted at 9600 bps
Rate19200 4 19200 bps counter
T
n PS
34
om 8:
l.c :4
. c
te 13
Average reverse link throughput can be computed using the following formula:
.7 bk t
41 -b 1 a
3

153600
15
Ratex X x
ei .0
x = 9600
0.
AvgThroughput = -------------------------
w 01
12

153600
ou 3.
Ratex
2.
zh 201
x = 9600

Log Record Formats
5.3.86 1xEV-DO Reverse Power Control (LOG_CODE 0x1063)

This holds the Reverse Power Control values polled at the modem. Data for this packet is
sampled every PN roll (26.67 ms). The data is logged up to every 10 frames. This packet is
supported in Rev 0 only.
NumRecords 1 Number of frames logged in this packet (max = 10)
Repeat for NumRecords
RxAGC 2 Signed; receive signal strength; in the unit of 1/256th dB.
TxTotalLimited 2 Signed; total Tx limited power; in the unit of 1/256th dB.
T
n PS
TxAdjust 2 Signed; Tx closed loop adjustment value; in the unit of
1/256th dB
34
RPCHistory 2 Signed; RPC decisions for last frame; the RPC bit stream
om 8:
l.c :4is punctured every n bits by a DRCLock bit (where n is the
c
DRCLockPeriod); the TxAdjust holds during this time.
.
te 13
See Section 9.3.1.3.2.2 of IS-856 for more information on
DRCLock puncturing.
.7 bk t
41 -b 1 a
TxPilot 2 Signed; Tx pilot power; in the unit of 1/256th dB

3
15
ei .0
DRCChannelGain 2 Signed; current DRC channel gain

0.
w 01
12
ACKChannelGain 2 Signed; current ACK channel gain

ou 3.
2.
zh 201
DataChannelGain 2 Signed; current data channel gain
PilotChannelGain 2 Signed; current pilot channel gain
MaxTxPwrRRI [Bit3:Bit0]: 1 Maximum recommended RRI value based on available Tx

DRCLockPeriod power [Bit3:Bit0]
[Bit7:Bit4] DRC lock period; indicates which RPC bits are “hold”
[Bit7:Bit4]; values are:
 0 – Hold is every 8 slots
 1 – Hold is every 16 slots
DRCChannelGain, ACKChannelGain, and DataChannelGain are converted to channel-to-pilot

ratios (in dB) using the following equations:
drc/pilot (dB)= 20 log (DRCChannelGain) – 20 log (PilotChannelGain)
ack/pilot (dB)= 20 log (ACKChannelGain) – 20 log (PilotChannelGain)
data/pilot (dB)= 20 log (DataChannelGain) – 20 log (PilotChannelGain)
To convert Rx and Tx power to full dB scale, use val / 256.

Log Record Formats
5.3.87 1xEV-DO Finger (LOG_CODE 0x1064) (obsolete)

This packet has been replaced by 1xEV-DO Finger, Ver 2 (LOG_CODE 0x108A); see
Section 5.3.125.
5.3.88 1xEV-DO Debug Hex Dump (LOG_CODE 0x1065)

This generic format packet provides a data hex dump for debugging purposes only. The exact
details of byte fields can be decided on a need basis. Data for this packet is both sampled and
logged asynchronously after reception of a packet.
Length 2 Number of bytes in this packet
Data Length Data that is logged
T
n PS
5.3.89 1xEV-DO ARQ Effective Receive Rate (LOG_CODE 0x1066)
34
This data type represents the rate at which the packet was decoded at the AT. This packet is
om 8:
sampled once every decoder interrupt. Since decoder interrupt can contain multiple physical
l.c :4
layer packets depending upon the data rate, this log packet is a variable-length packet. Data for
. c
te 13
this packet is both sampled and logged asynchronously once every decoder interrupt. This packet
will be logged after receiving the 1xEV-DO decoder interrupt.
.7 bk t
41 -b 1 a
3
The effective receive rate will be:
15
ei .0
RateDecoded * slots_alloted/slots_required
0.
w 01
12
For example, if a 38.4 kbps packet needs 8 slots to decode instead of the alloted 16 slots, then the
ou 3.
2.
zh 201
effective rate is 38.4 * 2 = 76.8 kbps.
NumPackets 1 Number of decode packets
Repeat for NumPackets
DecPktSlots[7:4]: : 1 Bit 4 to Bit 7 represents the number of slots taken to

DecPktRate[3:0] receive a packet with the above requested rate.
Bit 0 to Bit 3 represents the data rate at which the traffic
channel packet was decoded. This represents the 4-bit
DRC value requested by the AT. This value is obtained
from the decoder header.
CRCCheck [Bit15]: 2 CRCCheck [Bit15] MSB represents the CRC pass/fail

HSTR [Bit8:Bit0] status of the packet
 1 – Passed
 0 – Failed
HSTR[Bit8:Bit0] represents the half-slot reference count
when the preamble was detected for this packet. This is
read from the decoder header.

Log Record Formats
DecPktRate contains the DRC index value. Mapping of DRC Index to the corresponding data
rate in bps is given in Table 5-5.
5.3.90 1xEV-DO Forward Traffic Rate Slot Count

This packet has been replaced by LOG_CODE 0x1084 (see Section 5.3.119).
5.3.91 1xEV-DO Air Link Summary (LOG_CODE 0x1068)

This log packet summarizes the air link performance. The log record contains two sets of records
each to be updated at the PN roll. The data collected over two PN rolls is transmitted to the
diagnostic tool. Data for this packet is sampled every PN roll (26.67 ms). The data is logged
every other PN roll (53.34 ms). This packet is used to display information on the Air Link
Summary graphical display.
T
n PS
This log record contains two sets of records from the following table:
34
om 8:
DRCBuffer 1*8 DRC indices predicted by the predictor for the 16 slots of
l.c :4
c
the previous frames; each DRC index is 4 bits; two DRC
.
te 13
indices are combined into 1 byte:
 Bit[3:0] of 0th byte represents the DRC index for slot-0.
.7 bk t
41 -b 1 a
 Bit[7:4] of 7th byte represents the DRC index for

3
slot-15.
15
ei .0
A value of 0xF indicates that the DRC channel is off.

0.
w 01
12
BestASPSINRBuffer 2 bytes * 16 SINR for the BEST ASP for the previous frame’s last 16
ou 3.
odd half slots; this represents both the antennas

2.
zh 201
PktRcvdFlag [Bit7]: 1  PktRcvdFlag – Indicates whether any packet was

PAState[Bit6]: received in the last 16 slots [Bit7]
 PAState – Indicates the state of the power amplifier
BestASPPredicted
[Bit6]; values are:
[Bit3:Bit0]
 0 – Off
 1 – On
 BestASPPredicted – The current best ASP index value
predicted by the predictor [Bit3:Bit0]
ASPFilteredSINR 2 bytes * 6 Filtered SINR for the 6 ASPs [1,6]
PilotPNASP 2 bytes * 6 Pilot PN for the 6 ASPs [1,6]
RPC[1-6] int16 * 6 Filtered RPC values read from the DSP for six possible
ASPs [1,6]. RPC[. .] values are IIR filtered by the DSP
over past 64 samples. Since each is a 16 bit value, the
range mapping is as follows: [-32768, 32767] ~ [-1, 1], i.e.,
RPC[n] / 32767
DSP uses the following IIR filter:
RPC[n] = (1-a) * RPC[n-1] + a * RPCInst[n]
where a = 64/(2^15)
PERInst 2 Instantaneous Packet Error Rate; this value is calculated

once every 16 packets are received.
PERInst = Number of bad packets / 16
16384 = 100%

Log Record Formats
PERSequence 2 Packet Error Rate sequence; this represents the number

of times the PERInstantaneous value is calculated
HSTR 2 Current half slot reference count (DSP register)
RPCCellIndex[1-6] 1*6 RPC cell map for each ASP index
5.3.91.1 PER averaging equations

The following formulas are used for the short-term and long-term average computations of the
packet error rate:
PERShort[n] = (1-a) * PERShort[n-1] + a * PERInst[n] where a = 1048/(2 ^16)
PERLong[n] = (1-a) * PERLong[n-1] + a * PERInst[n] where a = 105/(2 ^16)
T
5.3.91.2 Requested data rate averaging equations
n PS
Short-term average and long-term average of the requested data rate may be computed by
34
averaging the DRC rate indices packed in the DRCBuffer over the past 1000 slots and 10000
om 8:
slots respectively. The following formulas are used for the short-term and long-term average
l.c :4
c
computations of requested data rates:
.
te 13
DataRateReqShortTerm[n] = (1-a) * DataRateReqShortTerm[n-1] + a * DRCRate[n],

.7 bk t
where a = 64/(2^16)
41 -b 1 a
3
DataRateReqLongTerm[n] = (1-a) * DataRateReqLongTerm[n-1] + a * DRCRate[n],
15
ei .0
where a = 7/(2^16)
0.
w 01
12
where DRCRate[n] in bps is obtained from the DRCBuffer field by mapping the DRC index to
ou 3.
2.
zh 201
the DRC rate for every slot. Table 5-5 presents the mapping of DRC index to DRC rate in bps.
Table 5-5 DRC index to DRC rate mapping
DRC index Data rate requested in bps
0 0
1 38400
2 76800
3 153600
4 307200 (S)
5 307200 (L)
6 614400 (S)
7 614400 (L)
8 921600
9 1228800 (S)
10 1228800 (L)
11 1843200
12 2457600

Log Record Formats

13 1536000
14 3072000
15 DRC channel is Off
SINR values are converted to dB units using the following equation:

SINR(dB) = 10 x Log10 (SINR/512)
5.3.92 1xEV-DO Power (LOG_CODE 0x1069)

This holds power values polled at the modem. Data for this packet is sampled every PN roll
[26.67 ms]. The data is logged every other PN roll.
T
n PS
Two instances of following record
34
om 8:
l.c :4 Description
c
ATType [Bit3:Bit0]: 1 ATType [Bit3:Bit0] gives the type of the AT unit
.
te 13
RatchetMode [Bit4]:  1 – MSM4500

 2 – MSM5500
.7 bk t
PAState [Bit5]
41 -b 1 a
RatchetMode [Bit4] register shows the state of the Tx

3
15
power limiting
ei .0
 0 – Tx power not limited

0.
w 01
 1 – Tx power is limited
12
ou 3.
PAState [Bit5] gives the state of the power amplifier

2.
zh 201
 0 – PA off
 1 – PA on
TxOpenLoopPower 2 Signed; Tx power determined by the open loop adjust

mechanism; in units of 1/256 dBm
TxClosedLoopAdjust 2 Signed; Tx power determined by the closed loop adjust

mechanism; in units of 1/256 dB and in the range of
[-128,127] dB
TxPilotPower 2 Signed; represents the pilot power that is transmitted over

the pilot channel; this is calculated based on the
TxOpenLoopPower and the TxClosedLoopAdjust; in units
of 1/256 dBm
TxTotalPower 2 Signed; register holds the total Tx power as determined by

the entire Tx AGC mechanism; in units of 1/256 dBm
RxAGC0 2 Signed; represents the field that holds the total receive
power as seen by Antenna 0; in units of 1/256 dBm
RxAGC1 2 Signed; represents this field that holds the total receive
power as seen by the Antenna 1; in units of 1/256 dBm

Log Record Formats
NOTE All the power fields are in the range of [-128,127] dBm, unless otherwise noted.
Conversion to full dB(m) scale is val/256.
5.3.93 1xEV-DO Forward Link Packet Snapshot (LOG_CODE 0x106A)

This logs the user-defined packet snapshot of the forward link packet supplied by the decoder at
the AT. A small portion of every frame that is received at the AT is logged if the CRC check
succeeded. A generic format has been provided for this packet. As this packet is used for
debugging only, the exact details of byte fields can be decided on an as-needed basis. Data for
this packet is both sampled and logged asynchronously after reception of a packet.
Packet Type 1  0 – Control

 1 – Traffic
T
n PS
34
om 8:
l.c :4
. c
5.3.94 1xEV-DO Session Attempt (LOG_CODE 0x106B) (obsolete)
te 13
.7 bk t
This packet has been replaced by 1xEV-DO Session Attempt, Ver 2 (LOG_CODE 0x1088); see
41 -b 1 a
3
Section 5.3.123.
15
ei .0
0.
w 01
5.3.95 1xEV-DO Access Attempt (LOG_CODE 0x106C)

12
ou 3.
2.
zh 201
This contains access probe sequence information. Data for this packet is both sampled and
logged asynchronously after the entire access probe sequence completes. Attempts, Success, and
Failure counters are reset at the start of the session.
TransactionID 1 Transaction ID of the Connection Request sent by the AT
ProbeNumStep 1 Number of probes per probe sequence
MaxProbeSequence 1 Maximum number of probe sequences
ProbeSequenceCount 1 Number of probe sequences sent for this access attempt
Result 1 Result of probe sequence; values are:

 0 – ACAck not received
 1 – ACAck received
 2 – TCA message received
 3 – Probe Interrupted
Other values are reserved
Duration 2 Time (in slots) to complete the attempt
SuccessCount 4 Counter for total number of successful attempts
FailureCount 4 Counter for total number of failed attempts per session
AttemptsCount 4 Counter for total number of attempts in this session

Log Record Formats
PN 2 PN of the sector that sends the ACAck or the TCA

message; this field is reserved if Result field = 0 or 3
SectorID 3 Sector ID on which the Access Probe was sent
ColorCode 1 Color Code on which the Access Probe was sent
Repeat ProbeSequenceCount times
ProbeCount 1 Number of probes sent in the probe sequence
5.3.96 1xEV-DO Reverse Activity Bits Buffer (LOG_CODE 0x106D)
T
This logs the reverse activity (RA) bits received for all pilots in the active set. Data for this
n PS
packet is sampled once every slot [1.67 ms]. The data is logged once every PN roll [16 slots] in
34
Connected state. This packet is supported in Rev 0 only.
om 8:
Field
l.c :4
Length (bytes) Description
. c
te 13
RAB 2*6 Reverse Activity Bit values received from the sectors in
the active set; this is sampled for each slot; if a bit is 1,
.7 bk t
41 -b 1 a
then RAB bit HIGH was received from the sector.

3
15
Bit 0 to 15: Each bit corresponds to a slot
ei .0
 Byte0 – RAB received from ASPIndex=1

0.
w 01

12
ou 3.

2.
zh 201

5.3.97 1xEV-DO Connection Attempt (LOG_CODE 0x106E)

This contains the connection attempt information such as traffic channel allocation
success/failure and the reason for such. Data for this packet is both sampled and logged
asynchronously after the end of the connection attempt. Counters are reset when the AT is power
cycled.
TransactionId 1 Transaction ID associated with the ConnectionDeny

message; if there is no response from the AN or a
ConnectionDeny message is not received, this field
represents the TransactionId that was used to send the
ConnectionRequest message
MessageSequence 1 Represents message sequence present in the TCA

message received; valid only if a TCA message is
received, that is, if the most significant nibble of result
field = 1 or 2

Log Record Formats

Result 1 Least significant nibble of this field indicates the following
possible connection attempt outcomes:
 0 – ConnectionDenyReceived with
DenyReason=General
DenyReason=Network Busy
DenyReason=Authentication or billing failure
 3 – Maximum access probes
 4 – System lost (supervision failures)
 5 – Not preferred (SD told OVHD to switch systems,
QC redirect, Access network ID)
 6 – Redirect (ALMP received a redirect message)
 7 – Connection setup timeout
 8 – PowerDownReceived
 9 – OfflineReceived
T
 A – NAMChangeReceived
n PS
 B – UserAbort
 C – AccessHandoff
34
 D through E – Reserved
om 8:
 F – Success
l.c :4
c
Most significant nibble of this field indicates the following
.
te 13
reception status of the TCA and RTCACK messages:
 0 – Not received either TCA or RTCACK message
.7 bk t
41 -b 1 a
 1 – Received TCA message but not received RTCACK

3
message
15
ei .0
 2 – Received both TCA and RTCACK messages

0.
w 01
12
ou 3.
Duration 2 Time (in slots) taken to complete the attempt

2.
zh 201
SuccessCount 4 Counter for total number of successful connections
FailureCount 4 Counter for total number of connection failures
AttemptsCount 4 Counter for total number of connection attempts since

powerup
PN 2 Interpret this field as follows:

 If Result field indicates a ConnectionDeny message
was received then it represents the PN of the sector
that sent the ConnectionDeny message.
 If Result field indicates a TCA message was received
then it represents the PN of the sector that sent the
TCA message.
 For all other cases, it represents the PN of the sector
we were on at the time we declared that the connection
setup failed.

Log Record Formats

SectorID 3 Interpret this field as follows:
was received then it represents the SectorID of the
sector that sent the ConnectionDeny message.
then it represents the SectorID of the sector that sent
the TCA message.
 For all other cases, it represents the SectorID of the
sector we were on at the time we declared that the
connection setup failed.
ColorCode 1 Interpret this field as follows:

was received then it represents the ColorCode of the
sector that sent the ConnectionDeny message.
then it represents the ColorCode of the sector that sent
T
n PS
the TCA message.
 For all other cases, it represents the ColorCode of the
34
sector we were on at the time we declared that the
connection setup failed.
om 8:
NumHo 1
l.c :4
Number of times the active set pilot changed during the
. c
connection attempt.
te 13
.7 bk t
41 -b 1 a
5.3.98 1xEV-DO Page message (LOG_CODE 0x106F)

3
15
ei .0
This provides the statistic for the number of page messages received by the AT. Page message is
0.
w 01
received on the Control Channel. Data for this packet is both sampled and logged
12
ou 3.
asynchronously each time the page message is received. Counters are reset when the AT is power
2.
zh 201
cycled.
HSTR 2 Half-slot time reference for the preamble of the MAC layer
packet containing page
AttemptsCount 4 Counter for total number of page attempts this session
PN 2 PN of the sector that sent the page message

Log Record Formats
5.3.99 1xEV-DO RLP Statistics (LOG_CODE 0x1070)

This contains information relevant to the transmit and receive chains of the RLP stack. Data for
this packet is both sampled and logged every 4 sec. Counters are reset at the start of the session.
ServiceID 1 Identifies the RLP service
ResetTime 8 Timestamp for the last statistics reset
NaksReceived 4 Number of Naks received in a single message
ReXmitsNotFound 4 Number of retransmissions not found
ANNakBytesRequested 8 Number of bytes requested by the AN for retransmission
RxDuplicateBytes 8 Number of received duplicate frames
RxReXmitBytes 8 Number of bytes retransmitted
T
n PS
RxNewDataBytes 8 Number of new data frames received
RxTotalBytes 8 Total number of bytes received
34
NaksSent 4 Number of NAK messages sent
om 8:
l.c :4
c
ATNakBytesRequested 4 Number of NAK bytes requested by the AT for
.
te 13
retransmission
TxReXmitBytes 8 Number of transmitted retransmitted bytes

.7 bk t
41 -b 1 a
3
TxNewDataBytes 8 Number of new data bytes transmitted
15
ei .0
TxTotalBytes 8 Total number of bytes transmitted

0.
w 01
12
ou 3.
NakTimeouts 4 NAK timeouts or aborts

2.
zh 201
ResetCount 4 Total resets that have occurred, initiated either by the AN

or the AT
ATResetRequestCount 4 Number of resets requested by the AT
ANResetAckCount 4 Number of ACKs received from the AN
ANResetRequestCount 4 Number of times the reset was requested by the AN

Log Record Formats
5.3.100 1xEV-DO Connection Release (LOG_CODE 0x1071)

This represents the reason for a call termination. Data for this packet is both sampled and logged
asynchronously after connection release.
Reason 1 Reason for call termination

 0 – AN connection close
 1 – AT connection close
 2 – System lost (supervision failures, TCA message
rejected)
 3 – Not preferred (SD told OVHD to switch systems,
QC redirect, Access network ID).
 7 – NAMChangeReceived
T
n PS
 8 – PageMessageReceived
 9 – Unspecified (ALMP rude close)
34
Other values are reserved.
om 8:
l.c :4
c
5.3.101 1xEV-DO Reverse Activity Bits (LOG_CODE 0x1072)
.
te 13
This provides information about the Reverse Activity Bit (RAB). The information given here is
.7 bk t
41 -b 1 a
obtained from the Traffic Channel Assignment (TCA). Data for this packet is both sampled and
3
15
logged asynchronously for every TCA message received. This packet is supported in Rev 0 only.
ei .0
0.
w 01
12

ou 3.
2.
zh 201
NumPilots 1 Number of pilots as specified by the TCA message
Repeat for NumPilots

RABitLength 1 Represents the number of slots over which a single RAB
is sent, this value is sent out as a part of TCA message
RABOffset 1 Frame offset for the RAB bits sent over the forward link
PN 2 PN of the sector sending the RAB

Log Record Formats
5.3.102 1xEV-DO High Resolution Temporal Analyzer (LOG_CODE

0x1073)
This contains the high resolution Temporal Analyzer (TA) search results for the selected pilot.
Data for this packet is both sampled and logged once every 2 sec.
Currently, this is not implemented.
TAStartX2 2 Absolute RTC offset of the starting position of the TA

search (in chipx2)
Antenna 1 Antenna over which TA search was performed

 00 – Antenna 0
 01 – Antenna 1
 1X – Antenna1 and Antenna2 noncoherently combined
T
n PS
TAWinSize 1 Window size of the TA search
34
NumSamples 1 Number of high resolution temporal analyzer search
samples. [= TAWinSize * 2]. Max 128 samples
om 8:
l.c :4
. c
te 13
Repeat for NumSamples
.7 bk t
41 -b 1 a
3
15
ei .0
PeakEng 2 Peak energy found at chipx2 resolution

0.
w 01
12
ou 3.
5.3.103 1xEV-DO Reverse Link Packet Snapshot (LOG_CODE 0x1074)

2.
zh 201
This logs a user-defined packet snapshot of the reverse link packet sent to the encoder driver for
transmission at the AT. Data for this packet is both sampled and logged synchronously for each
packet to be transmitted on reverse traffic channels. The first few bytes of the packet are logged.
A generic format has been provided for this packet. This packet needs to be used for debugging
only, and the exact details of byte fields can be decided on an as-needed basis.
Packet Type 1  0 – Control

 1 – Traffic

Log Record Formats
5.3.105 1xEV-DO Signaling Access Channel (LOG_CODE 0x1076)

This logs the signaling messages that are transmitted over the access channel. Data for this
packet is both sampled and logged asynchronously each time a signaling message is sent on the
access channel. The message format given for this packet is common to all other signaling
packets.
Band 1 Frequency band
ChanNum 2 CDMA channel number
PilotPN 2 Pilot PN offset
HSTR 2 Half-slot reference counter that represents the time

reference when the preamble was detected
SubType [Bit5:Bit7]: 1  SubType [Bit5:Bit7]
T
Is_hdris890 [Bit4]:  For protocols 0x15-0x17; application subtype
n PS
values are:
SeqValid [Bit3]:
– 0 – Default packet application
34
AckSeqValid [Bit2]:
– 1 – Multiflow packet application
Fragmented [Bit1]:
om 8:
– 2 – 3G1X circuit services notification
Reliable [Bit0]
l.c :4 application
. c
te 13
– 3 – Enhanced multiflow packet application
– 4 – Multilink multiflow packet application
.7 bk t
 For other protocols, the values of protocol subtype

41 -b 1 a
3
are used
15
ei .0
Note: Test application (IS-890) is not included in the

0.
w 01
application subtype since it is already handled by Bit4

12
 Is_hdris890 [Bit4] – If 1, then this signaling packet is

ou 3.
an IS-890 (test applications) packet

2.
zh 201
 SeqValid [Bit3] – If 1, sequence number of the

message is valid
 AckSeqValid [Bit2] – If 1, the AckSeqNo is a valid
acknowledgement
 Fragmented [Bit1] – Packet was fragmented if Bit1 = 1
 Reliable [Bit0] – Signaling Link Protocol delivery
mechanism was reliable if Bit0 = 1
SeqNo 1 Sequence number of the message
AckSeqNo 1 Sequence number of the acknowledgement
SyncCCFlag 1 Applicable only for control channel messages, ignored

otherwise; set to 1 if the message was received on
synchronous control channel capsule; set to 0 if on async
control channel capsule
MSG NumBytes Actual bit exact signaling message; the first 8 bits are the
SNP header as defined in Section 2.5.4.4 of IS-856A
(1 bit InConfigurationProtocol, 7 bit Type as per table
2.5.4-1); the rest of the bits are formatted as per the
Message Formats section for the given protocol Type and
Subtype, beginning with MessageID

Log Record Formats
5.3.106 1xEV-DO Signaling Reverse Traffic Channel (LOG_CODE

0x1077)
This logs the signaling messages that are transmitted over the reverse traffic channel. Data for
this packet is both sampled and logged asynchronously each time a signaling message is sent on
the reverse traffic channel. The field formats and descriptions are the same as LOG_CODE
0x1076.
5.3.107 1xEV-DO Signaling Control Channel Directed (LOG_CODE

0x1078)
This logs the signaling messages that are transmitted over the control channel. Data for this
packet is both sampled and logged asynchronously each time a signaling message is sent on the
control channel. The field formats and descriptions are the same as LOG_CODE 0x1076.
T
5.3.108 1xEV-DO Signaling Forward Traffic Channel (LOG_CODE
n PS
0x1079)
34
This logs the signaling messages that are transmitted over the forward traffic channel. Data for
om 8:
this packet is both sampled and logged asynchronously each time a signaling message is sent on
l.c :4
. c
the forward traffic channel. The field formats and descriptions are the same as LOG_CODE
te 13
0x1076.
.7 bk t
41 -b 1 a
3
15
5.3.109 1xEV-DO Pilot Sets (LOG_CODE 0x107A) (obsolete)
ei .0
0.
w 01
This packet has been replaced by 1xEV-DO Pilot Sets, Ver 2 (LOG_CODE 0x108B); see
12
ou 3.
Section 5.3.126.
2.
zh 201

Log Record Formats
5.3.110 1xEV-DO Traffic Channel Assignment (LOG_CODE 0x107B)

This provides the details of the soft handoff at the AT. Data for this packet is both sampled and
logged asynchronously every time TCA is received. See Section 6.6.6.2 of IS-856 for additional
information.
SoftHandoffCellCount 1 Number of cells involved in the soft handoff; obtained as

[Bit4:Bit0] part of TCA message
DRCLength [Bit2:Bit0] 1 DRC length in slots used by the AT to transmit a single

DRC value
DRCChannelGain 1 Ratio of the power level of the DRC channel (when it is

[Bit6:Bit0] transmitted) to the power level of the reverse traffic pilot
channel expressed as twos complement value in units of
0.5 dB; valid range is –9 dB to +6 dB, inclusive
T
ACKChannelGain 1 Ratio of the power level of the ACK channel (when it is
n PS
[Bit6:Bit0] transmitted) to the power level of the reverse traffic pilot
channel expressed as twos complement value in units of
34
0.5 dB; valid range is –3 dB to +6 dB, inclusive
om 8:
FrameOffset [Bit4:Bit0] 1 Frame offset used by the AT when transmitting on reverse
l.c :4
c
traffic channel
.
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.111 1xEV-DO Signaling Control Channel Broadcast (LOG_CODE

0x107C)
This logs the signaling messages that are transmitted over the forward channels with the
broadcast addressing mechanism. Data for this packet is both sampled and logged
asynchronously each time a signaling message is sent on the forward link with broadcast
addressing. The field formats and descriptions are the same as LOG_CODE 0x1076.
5.3.112 1xEV-DO General Temporal Analyzer (LOG_CODE 0x107D)

(obsolete)
This has been replaced by LOG_CODE 0x1089 and LOG_CODE 0x108A (see Section 5.3.124
and Section 5.3.125, respectively).
5.3.113 1xEV-DO State (LOG_CODE 0x107E)
T
n PS
This contains the state information for various modules in the AT. Data for this packet is both
sampled and logged asynchronously after any of the protocols state change occurs. This packet
34
may be logged on demand.
om 8:
l.c :4
. c
te 13
ATState 1 Summary of AT states; can be one of the following:

.7 bk t
41 -b 1 a
 0 – Inactive (AT switched to 1X or is in Deep Sleep)

3
15
ei .0
 2 – Sync
0.
w 01
 3 – Idle
12
ou 3.
 4 – Access
2.
zh 201
 5 – Connected
All other values are reserved
SessionState 1 Summary session layer states; values are:

 0 – Closed
 1 – AMP setup
 2 – AT-initiated negotiation
 3 – AN-initiated negotiation
 4 – Open
 5 – Closing
ALMPState 1 ALMP state information; values are:

 0 – Inactive
 1 – Initialization
 2 – Idle
 3 – Connected
InitState 1 Initialization protocol state information; values are:

 0 – Inactive
 1 – Network determination
 2 – Pilot acquisition
 3 – Sync

Log Record Formats

IdleState 1 Idle State Protocol state information; values are:
 0 - Inactive
 1 - Monitor
 2 - Sleep
 3 - Connection setup
 4 - Suspend
ConnectedState 1 Connected state protocol state information; values are:

 0 – Inactive
 1 – Open
RouteUpdateState 1 Route update protocol state; values are:

 0 – Inactive
 1 – Idle
T
 2 – Connection Setup
n PS
 3 – Connected
34
 4 – Synchronize connection setup
om 8:
l.c :4
c
OvhdMsgState 1 Overhead message protocol state; values are:
.
te 13
 0 – Inactive
 1 – Process All messages
.7 bk t
41 -b 1 a
 2 – Sleep
3
 3 – Frequency Change In Progress
15
ei .0
 4 – Access Handoff In Progress

0.
w 01
 5 – Wait for Link

12
ou 3.

2.
zh 201
HDRHybridMode 1 Hybrid mode bit; values are:

 0 – Off
 1 – On
5.3.114 1xEV-DO Forward Rate Statistics (LOG_CODE 0x107F)

(obsolete)
This packet has been replaced by LOG_CODE 0x1084 (see Section 5.3.119).
5.3.115 1xEV-DO Sector (LOG_CODE 0x1080)

This packet contains information about the sector to which the AT is listening. This is logged
when a new sector ID is received on the control channel. Data for this packet is both sampled and
logged asynchronously after receiving a new sector ID on the control channel. This packet may
be logged on demand.
Sector ID 16 128-bit sector address of the serving sector
SubnetMask 1 Sector subnet identifier

Log Record Formats
Color Code 1 Color code corresponding to the sector
PNOffset 2 Sector PN offset
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.117 1xEV-DO Rx Partial RLP (LOG_CODE 0x1082)

This contains Rx partial RLP logging information. Data for this packet is sampled
asynchronously. The data is logged asynchronously for every RLP packet that is received. The
log packet is sent when the log buffer is full.
PktBlockInfo 1  Bit 1 to 0 – Service ID

 Bit 7 to 2 – Header length; length of the actual header
bytes logged for that sr_id
NumPkts 1 Number of partial RLP packets logged
NumPkts occurrences of the following fields
T
n PS
PktInfo 2  Bit 0 to 3 – phy_chan rate; values are:
 0x0 – Rate not determined
34
 0x1 – 38.4 kbps
om 8:
l.c :4  0x2 – 76.8 kbps
c
 0x3 – 153.6 kbps
.
te 13
 0x4 – 307.2 short kbps
 0x5 – 307.2 long kbps
.7 bk t
41 -b 1 a
3  0x6 – 614.4 short kbps

 0x7 – 614.4 long kbps
15
ei .0
 0x8 – 921.6 kbps

0.
w 01
 0x9 – 1.2288 short Mbps

12
 0xa – 1.2288 long Mbps

ou 3.
 0xb – 1.843 short Mbps

2.
zh 201
 0xc – 2.456 Mbps

 Bit 4 – channel; values are:
 0 – Traffic
 1 – Control
 Bit 5 to 14 – pkt_len
 Bit 15 – Reserved
TimeReference 1 Slot time reference (STR)
Partial_pkt Min Partial RLP packet

(Header length,
pkt_len)
The partial_pkt field is an N bit field, where N is equal to header_len * 8 bits. This field should
be treated as a single N bit sequence with Bit 0 as the LSB and Bit N-1 as the MSB.
Bit offset Field name
Bit 0:1 2-bit stream ID
Bit 2:21 22-bit RLP sequence number in big-endian order
Bit 22:N Data payload
Display should be similar to 1X RLP packet output.

Log Record Formats
5.3.118 1xEV-DO Tx Partial RLP (LOG_CODE 0x1083)

This contains Tx partial RLP logging information. Data for this packet is sampled
asynchronously. The data is logged asynchronously for every RLP packet that is transmitted. The
log packet is sent when the log buffer is full.
PktBlockInfo 1  Bit 0 to 1– Service ID

 Bit 2 to 7 – Header length; length of the actual header
bytes logged for that sr_id
T
n PS
PktInfo 2  Bit 0 to 3 – phy_chan rate; values are:
 0x0 – Rate not determined
34
 0x1 – 9.2 kbps
om 8:
l.c :4  0x2 – 38.4 kbps
c
 0x3 – 76.8 kbps
.
te 13
 0x4 – 153.6 kbps
 0x5 – 153.6 kbps
.7 bk t
41 -b 1 a
3  Bit 4 – channel; values are:

 0 – Traffic
15
ei .0
 1 – Access
0.
w 01
 Bit 5 to 14 – pkt_len
12
Bit 15 – Reserved
ou 3.

2.
zh 201
TimeReference 1 26.6667 ms frame count
Partial_pkt Min Partial RLP packet

(Header length,
pkt_len)
The partial_pkt field is an N bit field, where N is equal to header_len * 8 bits. This field should
be treated as a single N bit sequence with Bit 0 as the LSB and Bit N-1 as the MSB.
Bit 0:1 2-bit stream ID
Bit 2:21 22-bit RLP sequence number in big-endian order
Bit 22:N Data payload
Display should be similar to 1X RLP packet output.

Log Record Formats
5.3.119 1xEV-DO Forward Statistics Summary (LOG_CODE 0x1084)

This contains the information about the forward channel frame counts. It contains the good and
bad CRC counters for Control and Traffic Channel packets. It also contains the number of FL
traffic channel and control channel packets received at various rates. These values are updated if
the CRC has passed for the decoded packets. Each rate counter name also includes the
SlotsDecoded part that indicates the number of slots taken to decode the particular rate packet.
Data for this packet is both sampled and logged every second. This packet is supported in Rev 0
only.
CC38400_Good 4 Counter for 38.4 k control channel packets with good CRC
CC38400_Bad 4 Counter for 38.4 k control channel packets with bad CRC
T
n PS
TC38400_Good 4 Counter for 38.4 k traffic channel packets with good CRC
34
TC38400_Bad 4 Counter for 38.4 k traffic channel packets with bad CRC
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
TC307200Short_Good 4 Counter for 302.2 (short) traffic channel packets with good
CRC
12
ou 3.
2.
zh 201
TC307200Short_Bad 4 Counter for 302.2 (short) traffic channel packets with bad
CRC
TC307200Long_Good 4 Counter for 307.2 (long) traffic channel packets with good
CRC
TC307200Long_Bad 4 Counter for 307.2 (long) traffic channel packets with bad
CRC
TC614400Short_Good 4 Counter for 614.4 k (short) traffic channel packets with good
CRC
TC614400Short_Bad 4 Counter for 614.4 k (short) traffic channel packets with bad
CRC
TC614400Long_Good 4 Counter for 614.4 k (long) traffic channel packets with good
CRC
TC614400Long_Bad 4 Counter for 614.4 k (long) packets decoded in 2 slots
TC921600_Bad 4 Counter for 921.6 k traffic channel packets decoded with

bad CRC
TC1228800Short_Good 4 Counter for 1228.8 k (short) traffic channel packets with

good CRC
TC1228800Short_Bad 4 Counter for 1228.8 k (short) traffic channel packets with bad
CRC

Log Record Formats

TC1228800Long_Good 4 Counter for 1228.8 (long) traffic channel packets with good
CRC
TC1228800Long_Bad 4 Counter for 1228.8 (long) traffic channel packets with bad
CRC
TC2457600_Good 4 Counter for 2457 k traffic channel packets with good CRC
TC2457600_Bad 4 Counter for 2457 k traffic channel packets with bad CRC
TCRate38400[0-15] 4 * 16 Counter for 38.4 k rate packets decoded in 1 to 16 slots
TCRate76800[0-7] 4*8 Counter for 76.8 k packets decoded in 1 to 8 slots
T
n PS
TCRate307200Short[0-1] 4*2 Counter for 302.2 (short) packets decoded in 1 to 2 slots
TCRate307200Long[0-3] 4*4 Counter for 307.2 (long) packets decoded in 1 to 4 slots
34
TCRate614400Short 4 Counter for 614.4 k (short) packets decoded in 1 slot
om 8:
l.c :4
c
TCRate614400Long[0-1] 4*2 Counter for 614.4 k (long) packets decoded in 1 to 2 slots
.
te 13

.7 bk t
41 -b 1 a
TCRate1228800Short 4 Counter for 1228.8 k (short) packets decoded in 1 slot

3
15
ei .0
TCRate1228800Long[0-1] 4*2 Counter for 1228.8 k (long) packets decoded in 1 to 2 slots

0.
w 01
TCRate1843200 4 Counter for 1843.2 k packets decoded in 1 slot

12
ou 3.
TCRate2457600 4 Counter for 2457 k packets decoded in 1 slot

2.
zh 201
CCRate38400[0-15] 4 * 16 Counter for 38.4 k rate CC packets decoded in 1 to 16 slots
CCRate76800[0-7] 4*8 Counter for 76.8 k CC packets decoded in 1 to 8 slots
Seq_Num 4 Sequence number
The Display Tool would provide a packet to reset these counts in the AT databases. Upon
reception of the reset packet, the DMSS would reset all the counters to zero.
The throughput when served is calculated by using the following formula. The mapping of
DRCIndex to packet length to the number of info bit is given in Table 5-6.
 2457600
( TCx_Good × num_ info_bit ( x ) )
x = 38400
ThroughputWhenServed = ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
2457600  packet_len(x)  2457600
 j × Ratex [ j ]  +
1.67      ( TCx_Bad × packet_len ( x ) )
x = 38400  j=1  x = 38400

Log Record Formats
Table 5-6 DRC index to packet length to number of info bits mapping
Rate Packet_len Num_info_bit
1 16 1024
2 8 1024
3 4 1024
4 2 1024
5 4 2048
6 1 1024
7 2 2048
8 2 3072
9 1 2048
T
n PS
10 2 4096
11 1 3072
34
12 1 4096
om 8:
l.c :4
. c
te 13
The instantaneous real throughput is computed as follows:
.7 bk t
41 -b 1 a
3
TotalGoodDataServed
InstRealThroughput(seq_num) = ------------------------------------------------------
15
ei .0
Seq_Num
0.
w 01
where
12
ou 3.
2.
zh 201
TotalGoodDataServed =  2457600
x = 38400
( TCx_Good × num_ info_bit ( x ) )
The instantaneous throughput is computed as follows:
TotalGoodDataServed – TotalGoodDataServedInLastPacket
InstThroughput(1 sec) = --------------------------------------------------------------------------------------------------------------------------------------------------
Seq_Num – Seq_Num_InLastPacket

Log Record Formats
5.3.120 1xEV-DO Access Channel MAC Capsule (LOG_CODE 0x1085)

This logs the data contained in a full Access Channel (AC) MAC Layer capsule. Data for this
packet is both sampled and logged asynchronously every time a whole AC capsule is received.
pkt_length 2 Size of the AC MAC capsule
data pkt_length Full AC MAC capsule. It contains:

 MAC Layer header
 MAC Layer payload
 FCS
See Sections 8.3.6.1, 8.3.6.2, and Figure 8.1.2-2 of [S2]
for more information
5.3.121 1xEV-DO Control Channel MAC Packets (LOG_CODE 0x1086)
T
n PS
This logs the data contained in a Control Channel (CC) packet as it comes out of the decoder.
Data for this packet is both sampled and logged asynchronously every time a CC packet is
34
decoded.
om 8:
l.c :4
c
.
te 13
pkt_length 2 Size of the CC MAC packet

.7 bk t
41 -b 1 a
data pkt_length CC MAC layer packet as it comes out of the decoder. It

3
15
contains:
ei .0
 CC Header
0.
w 01
 MAC Layer header/payload (possibly several)

12
ou 3.
See Sections 8.2.6.1, 8.2.6.2, and Figure 8.1.2-1 of [S2]

2.
zh 201
for more information
5.3.122 s1xEV-DO Receive ATI List (LOG_CODE 0x1087)

This provides a list of currently valid UATIs. Data for this packet is both sampled and logged
asynchronously every time a UATI assignment is received and every time an n-address timer
expires if multiple UATIs are currently valid.
num_records 1 Number of UATIs in the list
uati_value 4 * num_records 32-bit address(es) used to validate received messages
5.3.123 1xEV-DO Session Attempt, Ver 2 (LOG_CODE 0x1088)

This holds a record containing session attempt information. Data for this packet is both sampled
and logged asynchronously for session attempt end. Counters are reset when the AT is power
cycled. This packet may be logged on demand.

Log Record Formats
TransactionId 1 Transaction ID associated with the UATI Request message
Result 1 Result; values are:

 0 – Received UATIAssignment message
 1 – Did not receive UATIAssignment message
RATI 4 RATI used for opening a session
Duration 2 Time (in slots) taken to complete the attempt
SuccessCount 4 Counter for total number of successful attempts to open a

session
FailureCount 4 Counter for total number of failed attempts to open a session
AttemptsCount 4 Counter for total number of attempts to open a session since

powerup
T
PN 2 PN of the sector that sent the UATIAssignment message; this
n PS
field is reserved if the Result field is 0x1
34
UATIColorCode 1 UATI ColorCode as part of the UATIAssignment message;
this field is reserved if the Result code is 1
om 8:
l.c :4
c
Full UATI 16 Full UATI as part of the UATI Assignment message; this field
.
is reserved if the Result code is 1
te 13
.7 bk t
41 -b 1 a
5.3.124 1xEV-DO SearcherData – Type1 (LOG_CODE 0x1089)

3
15
ei .0
This reports the searcher results for the most recently searched pilots. In the acquisition state this
0.
w 01
packet will provide the results of predetect and detect searches. In the steady state, it is
12
ou 3.
recommended that only the active set pilots are reported so as to keep the packet size small. For
2.
zh 201
each active set pilot in the most recently searched search list, the four largest peaks and their
respective positions (in chipx2) are reported. Data for this packet is both sampled and logged
asynchronously each time the active set pilots are searched. This packet is supported on
MSM6550™ targets and earlier.
SrchState 1 Denotes the state of the searcher task; see Table 5-7 for
nomenclature
SrchSubstate 1 Reserved; denotes the substate of the searcher task
SrchWinSize 2 Contains the search window size
Channel 2  Bit 0 to 10 – Frequency number

 Bit 11 to 15 – Band class
MSTRx8 4  Bit 0 to 17 – MSTR in chipx8 units

 Bit 8 to 31 – Reserved
NumPilots 1 Number of pilots searched in the most recent search cycle

Log Record Formats
Repeat for each pilot
Reserved [Bit 15]: 2  Reserved [Bit 15]

PilotSet [Bit14:Bit12]:  PilotSet [Bit14:Bit12]; denotes the set to which the pilot
PN belongs; values are:
AntSel [Bit11:Bit10]:
 000 – Does not belong to any set [Empty Set]
Reserved [Bit 9]:  001 – Remaining Set
PilotPN [Bit8:Bit0]  010 – Neighbor Set
 011 – Candidate Set
 100 – Active Set
 101, 110, 111 – Reserved
 AntSel [Bit11:Bit10]; contains the antenna diversity
mode used for searching this pilot; values are:
 00 – Antenna0
 01 – Antenna1
 10 – Ant0+Ant1
T
n PS
 11 – Reserved
 Reserved [Bit 9]
34
 PilotPN [Bit8:Bit0]; pilotPN of the pilot in the search
results
om 8:
l.c :4
c
WinCenterx2 2 Position of window center in Chipx2 units used to get
.
te 13
these results
EarliestPeakPos 2 Position of earliest peak in Chipx2 units as decided using

.7 bk t
41 -b 1 a
last search results

3
15
ei .0
Peak1PNPhase 2 Signed; PN phase of Peak1 in units of 1/2 chip

0.
w 01
Peak1C2I 2 Energy received of Peak1

12
ou 3.
2.
zh 201
Peak2PNPhase 2 Signed; PN phase of the Peak2 in units of 1/2 chip
Table 5-7 lists the 1xEV-DO searcher states.

Table 5-7 1xEV-DO searcher states
Searcher state State ID
Start (inactive) 0x00
Acquisition 0x01
Synchronization 0x02
Idle 0x03
Idle suspended 0x3a
Idle broadcast 0x3b

Log Record Formats
Table 5-7 1xEV-DO searcher states (cont.)

Searcher state State ID
Idle off-frequency searching (OFS) 0x3c
Broadcast access 0x3d
Sleep 0x3e
Reacquisition 0x3f
Traffic 0x04
Traffic suspended 0x4a
Traffic OFS 0x4c
5.3.125 1xEV-DO Finger, Ver 2 (LOG_CODE 0x108A)
T
This supplies details about the finger assignments of the demodulator. Data for this packet is both
n PS
sampled and logged triage rate (30 ms). This packet may be logged on demand when not in sleep
state.
34
om 8:
l.c :4
. c
te 13
SrchState 1 State of the HDRSRCH state machine; see Table 5-7 for
nomenclature
.7 bk t
41 -b 1 a
MSTR 4 Mobile station (AT) time reference offset relative to the

3
15
RTC timebase in units of 1/8 chip
ei .0
0.
w 01
MSTRError 2 MSTR offset relative to earliest arriving in-lock and

12
enabled active set pilot in units of 1/8 chip

ou 3.
2.
zh 201
MSTRPilotPN 2 Pilot PN of the finger, which the MSTR is tracking;

typically, the earliest arriving finger
NumFingers 1 Number of fingers (12 max)
Repeat for NumFingers
PilotPN 2 PN offset in units of 64 PN chips of a pilot relative to the

zero offset PN sequence; 0xFFFF indicates that the finger
is unassigned
RTCOffset [Bit17:0] 4 Signed; RTCOffset [Bit17:0] offset in the RTC buffer for
this pilot in units of 1/8 chip
C2I 2 If Diversity is enabled, represents the combined ant0 and

ant1 C2I; if Diversity is disabled, represents the strength of
the current finger regardless of which antenna the finger is
on

Log Record Formats

LockFlag [Bit0]: 1  Lock state for this finger [Bit0]
Antenna [Bit1]: :  1 – Locked
 0 – Unlocked
Diversity [Bit2]: :
 Antenna selection [Bit1] valid only when diversity is
FingIndex [Bit6:Bit3]
disabled
 0 – Antenna0
 1 – Antenna1
 Diversity [Bit2] indicates whether the diversity is
enabled for the AT
 0 – Disabled
 1 – Enabled
 Finger index [Bit6:Bit3] indicates the index of the
demodulator finger
 0000 – finger0
 …
 1011 – finger11
T
n PS
RPCCellIdx [Bit2:0]: : 1 RPC cell index [Bit2:0] is a value/index assign to a cell by
ASPIdx [Bit5:3] AT, range 1 to 6
34
ASP index [Bit5:3] is a value/index assign to a sector by
om 8:
AT, range 1 to 6
l.c :4
c
When the best serving sector changes the type of handoff
.
te 13
can be determined by looking at the RPCCellIndex.
 If the ASPindex and the RPCCellindex are both the
.7 bk t
same, there is no handoff.

41 -b 1 a
3
 If the ASPindex is different and the RPCCellindex is
15
ei .0
the same, there is a softer handoff.

0.
w 01
 If the ASPindex and the RPCCellindex are both

12
different, there is a soft handoff.

ou 3.
2.
zh 201
Antenna0C2I 2 C/I equivalent of the finger for antenna 0; valid only when
Diversity is enabled
Antenna1C2I 2 C/I equivalent of the finger for antenna 1; valid only when
Diversity is enabled
A Finger record is valid only when the PN offset is not equal to 0xFFFF. It may be ignored
otherwise. Finger Index field shows the index of the physical hardware finger to which the
record corresponds.
Finger RSSI (C/I) is converted into dB units using the following formula:
C_I0 (dB) = 10 x Log10 (C2I/512)

Log Record Formats
5.3.126 1xEV-DO Pilot Sets, Ver 2 (LOG_CODE 0x108B)

This contains the details of the pilot sets maintained by the AT. Data for this packet is both
sampled and logged once every second. This packet may be logged on demand.
PNInc 1 Pilot PN increment used by the AT
ASETCount 1 Number of pilots in the active set (max = 6)
ASETWindow 1 Search window to be used for ASET
Channel 2  Bit 0 to Bit 10 – ASET channel number

 Bit 11 to Bit 15 – Band class
nomenclature
CSETCount 1 Number of pilots in the candidate set (max = 6)
T
n PS
CSETWindow 1 Search window to be used for CSET
34
NSETCount 1 Number of pilots in the neighbor set (max = 40)
om 8:
RSETWindow 2 l.c :4Remaining set search window size
. c
te 13
Repeat the following fields for (ASETCount+CSETCount+NSETCount)

.7 bk t
occurrences
41 -b 1 a
3
15
ei .0

0.
w 01
12

ou 3.
2.
zh 201
PilotEng 2 Pilot energy
Field 1 2 Definition depends upon the set type; see Table 5-8
Field1 through Field3 have different meanings depending upon the pilot types as described in
Table 5-8.
Table 5-8 Field1 through Field3
Field name ASET(max=6) CSET(max=6) NSET(max=40)
Field1 Reserved [Bit15:11] Candi frequency number Neighbor freq number

DRCCover [Bit10:8] [Bit10:0] [Bit10:0]
RPCIndex [Bit7:4] Band class [Bit15:11] Band class [Bit15:11]
ASPIndex [Bit:3:0]

Log Record Formats
Table 5-8 Field1 through Field3 (cont.)

Field name ASET(max=6) CSET(max=6) NSET(max=40)
Field2 DropTimerActive [Bit9] DropTimerActive [Bit9] WindowSize

DropTimerExpired [Bit8] DropTimerExpired [Bit8]
MacIndex [Bit7:0] Reserved [Bit7:0]
Field3 WinCenterx2 WinCenterx2 WindowOffset [Bit2:0]

Reserved [Bit7:3]
AGE [Bit15:8]
Finger RSSI and Pilot Energies are converted into dB units using the following formulas:
C_I0 (dB) = 10 x Log10 (fingRSSI/512)
PilotStrength(dB) = 10 x Log10 (pilotEnergy/512)
T
n PS
5.3.127 1xEV-DO Data Rate Control Channel – ARQ Buffer, Ver 2
(LOG_CODE 0x108C)
34
om 8:
This logs the DRC cover, DRC value, and ACK/NACK status that is transmitted on the RL in
l.c :4
c
every slot. In addition, this also logs the slot count, DRC Lock, and the Best ASP that is
.
te 13
transmitted on both the FL and RL in every slot. This buffer is sampled every PN roll and is
logged every other PN roll in Connected state only. This packet is supported in Rev 0 only.
.7 bk t
41 -b 1 a
3
15
Two instances of the following record
ei .0
0.
w 01
12
ou 3.

2.
zh 201
ACKEna [Bit13] 2 * 16 This is sampled for each slot (16 slots per PN roll).
ACK/NACK [Bit12]:  ACKEna [Bit13]; denotes whether the ACK channel is
DRCValue [Bit11:Bit8]: enabled or disabled
 1 – Enabled [Bit12 is valid]
DRCCover [Bit2:Bit0]
 0 – Disabled [Bit12 is not valid]
 ACK/NACK [Bit12]; represents the ACK or NACK that was
transmitted on the RL
 0 – ACK was transmitted
 1 – NACK was transmitted
 DRC Value [Bit11:Bit8]; represents the DRC Rate
requested by the AT. DRCValue contains the DRC index;
mapping of DRC index and corresponding data rate is
given in .
 DRCCover (Bit2:Bit0); cover used to transmit DRC; the
DRC Cover is that of the best ASP
SlotCnt 1 Slot count
DRCLock [11. .0] 2 DRC lock

 Bit0 – DRC Lock for ASP1
 Bit1 – DRC Lock for ASP1 valid
 Bit2 – DRC Lock for ASP2
 …
 Bit10 – Lock for ASP6

Log Record Formats

DRCLockUpdateSlot 1 Slot for DRC Lock update
BestASP_RL [Bit2:0]: : 1 byte * 16 Best ASP FL is determined by the SINR; BestASP_FL is the
BestASP_FL [Bit5:3] ASP_FL with the highest SINR; BestASP_RL = BestASP_FL;
in order to determine PN for BEST asp, log finger data packet
(0x108a) and map the ASPIdx field to its corresponding
PilotPN
5.3.128 1xEV-DO Acquisition Information (LOG_CODE 0x108D)

This contains the acquisition statistics for every 1xEV-DO acquisition attempt. Data for this
packet is both sampled and logged asynchronously. This packet may be logged on demand. See
Table 5-7 for searcher state nomenclature.
Sampling is triggered by every 1xEV-DO acquisition attempt; the packet is sampled after:
T
Pilot acquisition failure (SRCH state transition 1 → 0)
n PS

 Sync channel acquisition failure (SRCH state transition 2 → 0)
34
 Sync channel acquisition success (SRCH state transition 2 → 3)
om 8:
l.c :4
. c
te 13
Channel 2 Channel
.7 bk t
41 -b 1 a
 Bit 0 to Bit 10 – Channel number

3
15
ei .0
0.
w 01
Result 1 Acquisition results indicating acquisition success or the

12
reason for failure

ou 3.
 0 – Acquisition success (up to and including Sync

2.
zh 201
acquisition)
 1 – Micro search failure
 2 – Pilot acquisition failure
 3 – FLL failure
 4 – Slam failure
 5 – Sync failure
SrchCmd 1 Acquisition search command

 Bit 0 to Bit 3 – Acquisition mode
 1 – Micro search
 2 – Shallow search
 3 – Deep search
 4 – Full search
 Bit 4 to Bit 7 – Acquisition stage
 0 – Deep search
 1 – Shallow search
 0xF – Not applicable
 All other values are reserved

Log Record Formats

TotalTimeNo1xTuneaway 2 If the acquisition succeeded, represents the total
acquisition time in milliseconds excluding any time spent
in 1X tuneaway; includes pilot acquisition time, RF
warm-up plus tune time, FLL lock acquisition time, and
slam time; does not include sync acquisition time.
If the acquisition failed, represents the acquisition time up
to the failure.
TotalTime1xTuneaway 2 If the acquisition succeeded, represents the total

acquisition time in milliseconds including any time spent in
1X tuneaway; includes pilot acquisition time, RF warm-up
plus tune time, FLL lock acquisition time, and slam time.
This does not include sync acquisition time.
If the acquisition failed, represents the acquisition time up
to the failure.
PilotAcqTime 2 Pilot acquisition time in milliseconds excluding 1X
T
tuneaway; valid only if Result is not equal to 1 or 2
n PS
FLLLockTime 2 FLL lock acquisition time in milliseconds; value saturates
34
at 0xFFFF; valid only if Result is not equal to 1, 2, or 3
om 8:
SlamTime 2 MSTR slam time in milliseconds; value saturates at
l.c :4
c
0xFFFF; valid only if Result is not equal to 1, 2, 3, or 4
.
te 13
RfWarmupTuneTime 1 RF warm-up and tune time in milliseconds

.7 bk t
41 -b 1 a
Coset 1 Coset for successful pilot acquisition; invalid if pilot

3
acquisition fails (i.e., Result is equal to 1 or 2)
15
ei .0
SystemTime 5 Raw system time included in the sync message in PN roll

0.
w 01
units; invalid if pilot or sync acquisition fails (i.e., Result is

12
ou 3.
not equal to 0)
2.
zh 201
PNOffset 2 PN information included in the sync message; invalid if

pilot or sync acquisition fails (i.e., Result is not equal to 0)
FingRSSISync 2 Raw finger RSSI value in sync state; invalid if search does
not enter sync state (i.e., Result is equal to 1, 2, 3, or 4).
AGC0_Sync 2 Signed; AGC of the primary Rx chain in Sync state in units

of 1/256 dBm; invalid if search does not enter sync state
(i.e., Result is not equal to 1, 2, 3 or 4).
AGC1_Sync 2 Signed; AGC of the diversity Rx chain in Sync state in

units of 1/256 dBm; AGC1_Sync = -32768 (0x8000)
indicates that Rx diversity is disabled
AttemptCount 2 Cumulative count of total acquisition attempts from reset;

value saturates at 0xFFFF
AttemptCountSuccess 2 Cumulative count of total acquisition successes from

reset; considered an acquisition success when both pilot
acquisition and sync acquisition succeed (i.e., Result is
equal to 0); value saturates at 0xFFFF
AttemptCountFailure 2 Cumulative count of total acquisition failures from reset;

considered an acquisition failure when any of pilot
acquisition, FLL lock acquisition, or sync acquisition fail
(Result is not equal to 0); value saturates at 0xFFFF
TotalTime 4 Cumulative acquisition time starting from reset in units of

milliseconds; excludes sync channel acquisition time

Log Record Formats
TotalFailureTime 4 Cumulative time starting from reset in millisecond units
Reserved 0 or more Reserved
Conversion to full dBm scale is val/256.

The raw finger RSSI value is converted into dB units using the following formula:
FingRSSI(dB) = 10 x Log10 (FingRSSI/512)
5.3.129 1xEV-DO Reacquisition Information (LOG_CODE 0x108E)

This contains the reacquisition statistics in Slotted mode for every wakeup from sleep. Data for
this packet is both sampled and logged asynchronously. This packet may be logged on demand.
See Table 5-7 for searcher state nomenclature.
T
n PS
Sampling is triggered at every 1xEV-DO wakeup; the packet is sampled after:
Reacquisition on old pilot or RAHO (SRCH state transition 3f → 3)
34

om 8:
 Acquisition loss after sleep (SRCH state transition 3f → 0)
l.c :4
. c
te 13
.7 bk t
SleepCycleCount 4 Incremental count from reset; incremented by 1 every time

41 -b 1 a
3
the packet is logged; value saturates at 0xFFFFFFFF
15
ei .0
SleepDuration 2 Amount of time 1xEV-DO slept before this wakeup; in

0.
w 01
units of milliseconds
12
ou 3.
RfWarmupTuneTime 1 RF warm-up and tune time in milliseconds

2.
zh 201
Tune2SCCstart 1 From “Tune Done” to start of SCC in half-slot units
SrchCount 1 Number of reacquisition searches before doing

reacquisition, RAHO, or declaring system loss
SlewX2 1 Signed; slew of reacquisition pilot or RAHOed to pilot in

chipx2 units
Result 1 Reacquisition result

 0 – Reacquisition on old pilot
 1 – RAHO
 2 – Lost acquisition after sleep
 3 – Lost acquisition, dsp not ready
LastSrchState 1 Last SRCH state before waking up; one of the following
states:
 SRCH state 0x3A
 SRCH state 0x3E
PilotEnergy 2 New pilot energy after RAHO; valid only if Result is equal
to 0 or 1
PilotPN 2 New pilot PN after RAHO; valid only if Result is equal to 0

or 1

Log Record Formats

OldPNEnergy 2 Old PN energy before handoff; valid only if Result is equal
to 1
OldPN 2 Old PN before handoff; valid only if Result is equal to 1
FailureCount 2 Cumulative count of “lost acquisition after sleep,” starting

from reset; value saturates at 0xFFFF
Time fields may be converted from half-slot units to milliseconds using the following conversion
factor:
half-slot = (80ms)/(3 * 16 * 2) = 0.833 ms
Pilot Energy is converted into dB units using the following formula:
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.130 1xEV-DO Sleep Information (LOG_CODE 0x108F)

This contains the reacquisition statistics in Slotted mode for every wakeup from sleep. Data for
this packet is both sampled and logged asynchronously. This packet may be logged on demand.
See Table 5-7 for searcher state nomenclature.
Sampling is triggered at every sleep cycle; this packet is sampled after any of the following state
changes:
 SRCH state 3 → 3e
 SRCH state 3c → 3e
 SRCH state 3 → 0
 SRCH state 3 → 1xEV-DO access
T
n PS
SleepCycleCount 4 Incremental count from reset; incremented by 1 every time
34
the packet is logged; value saturates at 0xFFFFFFFF
om 8:
AwakeTime 2 Duration in milliseconds from warm-up ISR until any of the
l.c :4
c
following 1xEV-DO searcher state changes:
.
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
 SRCH state 3 → 1xEV-DO access

0.
w 01
12
SccStart2CcDec 2 Time from start of SCC to the time when the decoder ISR
ou 3.
recognizes the first CC packet; in half-slot units

2.
zh 201
CcDec2Sleep 2 Time from when the decoder receives the last CC packet
before going to sleep to when the 1xEV-DO searcher
enters Sleep state; in half-slot units; field is invalid and set
to 0xFFFF if the SRCH state transition was not 3 → 3e
DeadTime 2 Time from finger assignment to the start of SCC, in

half-slot units
SlotCount 1 Number of slots taken to decode the last CC packet prior

to logging the packet
CcRate 1 Control channel rate
CcStatus 1 Control channel status

 0 – Good CRC
 1 – Missed CC preamble
 2 – Bad CRC
 3 – False CRC pass
NextSrchState 1 Indicates the next searcher state at the time of logging;

may be one of the following:
 SRCH state 0x3E
 SRCH state 0x04
 SRCH state 0x00
 1xEV-DO Access state (logged as SRCH state 0x03
since it is a substate of the searcher idle state)

Log Record Formats

PilotPN 2 ASET pilot at the time of logging
PilotEnergy 2 ASET pilot energy at the time of logging
HandoffCount 1 Number of idle handoffs during the current wakeup period;

value saturates at 0xFF
OfsStatus 1 Off-frequency search status

 0 – No off-freq search
 1 – Off freq search but no off-freq handoff
 2 – Off freq handoff
The next three fields are invalid if OFSStatus is equal to 0
OfsChannel 2  Bit 0 to Bit 10 – Channel number

T
OfsPN 2 Strongest Off frequency PN searched
n PS
OfsPNEnergy 2 Raw energy of the strongest searched off-freq pilot
34
CcMerCount 2 Cumulative CC MER count from reset; value saturates at
om 8:
l.c :4 0xFFFF
. c
SCI 1 Sleep cycle index; see the translation formula below
te 13
ReacqLossCount 2 Cumulative “acquisition loss after sleep” count from reset;

.7 bk t
41 -b 1 a

3
15
ei .0
CmacExpiryCount 2 Cumulative CMAC timer expiry count from reset; value

saturates at 0xFFFF
0.
w 01
12
ou 3.
IhoCount 4 Cumulative Idle Handoffs count from reset; value

2.
zh 201
saturates at 0xFFFFFFFF
OfsCount 4 Cumulative count of off-frequency searches from reset;

value saturates at 0xFFFFFFFF
OfsHandoffCount 2 Cumulative Off-Frequency Handoff count from reset;

ChanHashCount 1 Cumulative idle state channel hashing count from reset;

value saturates at 0xFF

Log Record Formats
Time fields may be converted from half-slot units to milliseconds using the following formula:
half-slot = (80ms)/(3 * 16 * 2) = 0.833 ms
slot = half-slot*2 = 1.667ms
Slot Cycle Index is converted into ms using the following formula:
SCI = 2SCI * 4 slots (for SCI from 0x0 to 0x6)
SCI = 2(SCI-0x7) * 768 slots (for SCI from 0x7 to 0x1c)
OfsPNEnergy and PilotEnergy are converted into dB units using the following formula:
5.3.131 Forward Dedicated Control Channel (LOG_CODE 0x1090)

This holds information for the Forward Dedicated Control Channel message.
T
n PS
34
FWD_DCCH_MESSAGE 255 Forward Dedicated Control Channel message, as sent;
see Sections 5 3.7.3.3 and 4 3.2.2 of [S4]
om 8:
l.c :4
. c
te 13
5.3.132 Reverse Dedicated Control Channel (LOG_CODE 0x1091)

.7 bk t
41 -b 1 a
This holds information for the reverse dedicated control channel message.
3
15
ei .0

0.
w 01
12
ou 3.
REV_DCCH_MESSAGE 255 Reverse Dedicated Control Channel message, as

received; see Sections 5 2.7.2.3 and 4 2.2.1 of [S4]
2.
zh 201
5.3.134 Active Set (LOG_CODE 0x1093)

This holds information for the active set information logging. This is similar to Active Set and
Channel Configuration (LOG_CODE 0x102F) but is simpler. This packet will be sent every time
there is a change to one of the field values.
RF_MODE 1 RF mode; values are:

 0 – Analog
 1 – CDMA
CURR_CHAN 2 Center frequency channel
NUM_PILOTS 1 Number of pilots
ASET 6 * 15 Active set; see Section 5.3.134.1

DM_ACTIVE_SET_TYPE for the type format description

Log Record Formats

FSCH_RATE 1 F-SCH rate; the rate is the same for all F-SCHs; valid only
when at least one F-SCH is active; see Appendix C
RSCH 3 Only one supplemental CH is supported; see

Section 5.3.134.2 for the type format description
5.3.134.1 DM_ACTIVE_SET_TYPE Information
PILOT_PN 2 Pilot PNs currently in the active set
PILOT_REC_TYPE 1 Describes which type of pilot is active
FCH 4 FCH; see Section 5.3.134.1.1 for the type format

description
T
DCCH 4 DDCH; see Section 5.3.134.1.1 for the type format
n PS
description
34
SCH 4 SCH; see Section 5.3.134.1.1 for the type format
description
om 8:
l.c :4
. c
te 13
5.3.134.1.1 CHAN_INFO_TYPE Information
.7 bk t
41 -b 1 a

3
15
ei .0
ENABLE 1 Indicates that this channel is active when set to 1

0.
w 01
CODE_CHAN 2 Code for current channel – CDMA only

12
ou 3.
QOF_MASK_ID 1 QOF mask ID

2.
zh 201
5.3.134.2 DM_ASET_RSCH_TYPE Information
ACTIVE 1 Indicates that this R-SCH is active when set to 1
RATE 1 Channel rate; see Appendix C for a description
WALSH_ID 1 Walsh ID of this R-SCH

Log Record Formats
5.3.136 GPS Visit Parameters (LOG_CODE 0x1096)

This log holds information about the important variables for a particular GPS visit.
VISIT_ID 1 Visit ID for this visit
SESS_ID 1 Session ID for the Position Location Session
TS_FIRST_VISIT 8 Timestamp for the first GPS visit in the session
FING_POS 4 Master Finger Position at the time of Sync80 for this visit
FING_PN 4 PN to which master finger was assigned at start of the visit
FING_RSSI 4 RSSI for the master finger at the start of the visit
SCOMB_OFF 4 Symbol Combiner Offset (from Master Finger) at the time

of Sync80 which triggered this GPS visit
T
TRK_LO 2 TRK Lo PDM at which PDM was frozen for the visit
n PS
AGC_SETTLE_TS 2 Time it took for the AGC loop to settle
34
AGCPDM 2 AGC PDM at which AGC loop settled
om 8:
l.c :4
c
DCPDMI 2 DC PDM I at which AGC loop settled
.
te 13
DCPDMQ 2 DC PDM Q at which AGC loop settled
.7 bk t
41 -b 1 a
INITAGCPDM 2 3 AGC PDM value to which DSP was initialized

15
INITDCPDMI 2 DC PDM I value to which DSP was initialized
ei .0
0.
w 01
INITDCPDMQ 2 DC PDM Q value to which DSP was initialized

12
ou 3.
CDMA_GAIN_STATES 1 Gain States for CDMA at the time of tuneaway

2.
zh 201
CDMA_RX_AGC 2 CDMA Rx AGC at the time of tuneaway; see Appendix C

for the conversion to dBm formula
TUNEAWAY_TIME 2 Time for which MS tuned away for this visit

Log Record Formats
5.3.137 GPS Measurement (LOG_CODE 0x1097)

This holds information about all the GPS measurements that are obtained during a position
location session. This log also contains information that can be used to associate the GPS
measurements with the GPS visit and the Search mode in which the SV was found.
SESS_TAG 1 Position Location Session ID
NUM_SVS 1 Number of SVs (Max Value 16)
COMMON_TS 4 Offset of “Common Time” from start of first visit (in units of
1 ms); the “Common Time” is the time to which all the
GPS measurements are propagated for reporting in
IS-801 message
SV_MEASUREMENTS NUM_SVS * 20 See Section 5.3.137.1 for the type format description
T
n PS
5.3.137.1 SV_MEAS_VAR_TYPE Information
34
om 8:
SV_PRN_NUM 1 SV PRN number
l.c :4
. c
te 13
MEAS_CP 4 Measured SV Code Phase in GPS CX1024
MEAS_DOPP 2 Measured SV Doppler in 0.2 Hz units

.7 bk t
41 -b 1 a
3
DOPP1 1 Doppler1 from IS801
15
ei .0
C_N0 4 C/N0 in IEEE floating Point format (stored in uint32

0.
w 01
because compiler won't allow packed floats)

12
ou 3.
2.
zh 201
SRCH_MODE 1 Mode in which the Search Result was obtained
VISIT_ID 1 Visit ID in which Search result was obtained
DELTA_T_FOR_PROP 2 Time in 1ms units for which the SV Search result was
propagated
CP_PROPAGATION 2 Code Phase Propagation in GPS CX1024 units; this value

is added to measured code phase to obtain reported code
phase
DOPP_PROPAGATION 2 Doppler Propagation in 0.2 Hz units
5.3.138 Removable User Identity Module Debug (LOG_CODE 0x1098)

This holds raw data communicating between the RUIM card and Mobile Equipment.
LENGTH 1 Specifies the data followed in bytes.
DATA LENGTH Includes control byte and information byte; a control byte
indicates the following data is:
 1 – 1 transmitted byte
 2 – 1 received byte
 3 – 8-byte timestamp

Log Record Formats
5.3.139 Simple TDSO Counter for DCCH (LOG_CODE 0x1099)

(obsolete)
This log code is obsolete.
5.3.140 Full TDSO Counter for DCCH (LOG_CODE 0x109A) (obsolete)

This log code is obsolete.
5.3.142 Point-to-point Protocol Tx Frames (LOG_CODE 0x109C)

This holds the raw data for the Point-to-Point Protocol (PPP) transmit frames.
T
n PS
DATA 186 Raw PPP Tx data
34
om 8:
5.3.143 Point-to-point Protocol Rx Frames (LOG_CODE 0x109D)
l.c :4
. c
te 13
This holds the raw data for the Point-to-Point Protocol (PPP) receive frames.
.7 bk t
41 -b 1 a
3
15
ei .0
DATA 186 Raw PPP Rx data

0.
w 01
12
ou 3.
2.
zh 201
5.3.144 Security PKX MM Statistics (LOG_CODE 0x109E)

This holds information for the security PKX MM statistics.
op seclog_op_type Operation type; seclog_op_type

op_seqno 1 Sequence number for correlation
duration_ms 2 Time used for operation [ms]
base_bit_len 2 Data for bit length of base
modulo_bit_len 2 Data for bit length of modulo
exponent_bit_len 2 Data for bit length of exponent
result_bit_len 2 Data for bit length of result

Log Record Formats
5.3.145 Security PKX MM Operation (LOG_CODE 0x109F)

This holds information for the security PKX MM operation.
base 128 Data for base number
modulo 128 Data for modulo number
exponent 128 Data for exponent number
result 128 Data for resulting number
5.3.146 Security Encoding Statistics (LOG_CODE 0x10A0)

This holds information for the security encoding statistics.
T
n PS
34
op_seqno 1
om 8:
Sequence number for correlation
l.c :4
. c
te 13
duration_ms 2 Time used for operation [ms]
.7 bk t
plaintext_bit_len 4 Data for bit length of plaintext

41 -b 1 a
3
15
ciphertext_bit_len 4 Data for bit length of ciphertext
ei .0
0.
w 01
12
ou 3.
5.3.147 Security Encoding Operation Destination Statistics

2.
zh 201
(LOG_CODE 0x10A1)
This holds information for the security encoding operation destination statistics.
key 8 Data for ptr to key used
cbc_state 8 Data for last CBC block (64 bit)
5.3.148 Security Encoding Operation ARC4 Statistics (LOG_CODE

0x10A2)
This holds information for the security encoding operation ARC4 statistics.
sbox_index_1 2 Data for S-Box swapping index 1
sbox_index_2 2 Data for S-Box swapping index 2
sbox_data 256 Data for S-Box data

Log Record Formats
5.3.149 Security Encoding Operation Plaintext (LOG_CODE 0x10A3)

This holds information for the security encoding operation plaintext.
frg_seqno 1 Sequence number for fragmentation
data 900 Data for plaintext fragment; an array of bytes of size

SEC_MAX_LOG_SIZE
5.3.150 Security Encoding Operation Ciphertext (LOG_CODE 0x10A4)

This holds information for the security encoding operation ciphertext.
T
n PS
34
om 8:
data 900 l.c :4Data for ciphertext fragment; an array of bytes of size
c
SEC_MAX_LOG_SIZE
.
te 13
.7 bk t
5.3.151 Security Encoding Operation message Authentication Code

41 -b 1 a
3
(LOG_CODE 0x10A5)
15
ei .0
0.
w 01
This holds information for the security encoding operation message authentication code.
12
ou 3.
2.
zh 201
hash_op seclog_op_type Data for hashing algorithm used

seclog_op_type
mac 20 Data for resulting message authentication code
5.3.152 Security Hashing Statistics (LOG_CODE 0x10A6)

This holds information for the security hashing statistics.
duration_ms 2 Time used for operation in milliseconds
hash_data_bit_len 4 Data for bit length of input

Log Record Formats
5.3.153 Security Hashing Operation Input (LOG_CODE 0x10A7)

This holds information for the security hashing operation input.
data 900 Data for hashing input data; an array of bytes of size
SEC_MAX_LOG_SIZE
5.3.154 Security Hashing Operation Hash (LOG_CODE 0x10A8)

This holds information for the security hashing operation hash.
T
n PS
34
hash 20 Data for hash result data
om 8:
l.c :4
c
5.3.155 Security Secure Sockets Layer Session (LOG_CODE 0x10A9)
.
te 13
This holds information for the security secure sockets layer session.
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
session_tag 1 Identifier for a session

12
ou 3.
server_name 64 ASCII based hostname/dot-addr

2.
zh 201
server_port 2 Port number on which the server listens
version 2 Secure sockets layer (SSL) version negotiated
session_id_len 1 Session ID length
session_id 32 Session ID data

ciphersuite 2 SSL ciphersuite negotiated
server_random 32 Server’s SSL-Random
client_random 32 Client’s SSL-Random
nagle_mode 1 Nagle mode enabled/disabled
reneg_byte_trigger 4 Renegotiation trigger (number of bytes)
reneg_max_count 4 Maximum number of renegotiations
reneg_max_time 4 Maximum time allowed for renegotiation
reneg_last_time 4 Time of last renegotiation
start_time_h 1 Time session was opened – hour
start_time_m 1 Time session was opened – minute
start_time_s 1 Time session was opened – second
handshake_max_msg_size 2 Largest handshake message found

Log Record Formats
handshake_tx_total_bytes 2 Number of bytes sent during handshake
handshake_rx_total_bytes 2 Number of bytes received during handshake
handshake_duration_ms 2 Duration of handshake phase in milliseconds
5.3.156 Security Secure Sockets Layer Session Server Certification

(LOG_CODE 0x10AA)
This holds information for the security secure sockets layer session server certification.
frg_seqno 1 Fragment number (starts at 0)
T
n PS
frg_len 2 Length of this fragment
34
cert_data 900 Fragment data; an array of bytes of size
SEC_MAX_LOG_SIZE
om 8:
l.c :4
. c
te 13
5.3.157 Security Secure Sockets Layer Session Cipherdata
(LOG_CODE 0x10AB)
.7 bk t
41 -b 1 a
3
15
This holds information for the security secure sockets layer session cipherdata.
ei .0
0.
w 01
12

ou 3.
2.
zh 201
premaster_secret_len 1 Length of premaster secret
premaster_secret 48 Premaster secret
master_secret 48 Master secret (always 48 bytes)
client_mac_secret_len 1 Client message authentication code write secret length
client_mac_secret 20 Client message authentication code write secret
server_mac_secret_len 1 Server message authentication code write secret length
server_mac_secret 20 Server message authentication code write secret
client_cipher_key_len 1 Client encryption key length
client_cipher_key 16 Client encryption key
server_cipher_key_len 1 Server encryption key length
server_cipher_key 16 Server encryption key
client_cipher_iv_len 1 Client cipher init vector length
client_cipher_iv 16 Client cipher init vector
server_cipher_iv_len 1 Server cipher init vector length
server_cipher_iv 16 Server cipher init vector

Log Record Formats
5.3.158 Security Secure Sockets Layer Session Statistics (LOG_CODE

0x10AC)
This holds information for the secure sockets layer session statistics.
state 1 Session state
uptime 4 Time since session open [sec]
tx_total_bytes 4 Total application data transmitted
rx_total_bytes 4 Total application data received
num_resume 2 Number of session resumptions
num_reneg 2 Number of session renegotiations
T
n PS
5.3.159 Security Secure Sockets Layer Transmitted Statistics
34
(LOG_CODE 0x10AD)
om 8:
l.c :4
c
This holds information for the security secure sockets layer transmitted statistics.
.
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
num_bytes 2 Number of bytes transmitted

0.
w 01
12
ou 3.
duration 4 Duration ssl_write - dss_write

2.
zh 201
5.3.160 Security Secure Sockets Layer Received Statistics

(LOG_CODE 0x10AE)
This holds information for the security secure sockets layer received statistics.
num_bytes 2 Number of bytes transmitted
duration 4 Duration dss_read - ssl_read

Log Record Formats
5.3.161 Security Secure Sockets Layer Handshake Protocol Hello

Request (LOG_CODE 0x10AF)
This holds information for the security secure sockets layer handshake protocol hello request.
5.3.162 Security Secure Sockets Layer Handshake Protocol Client

Hello (LOG_CODE 0x10B0)
This holds information for the security secure sockets layer handshake protocol client hello.
T
n PS
version 2 Secure sockets layer version
34
random 32 Client random
om 8:
session_id_len 1 Session ID length (0 to 32)
l.c :4
. c
te 13
session_id 32 Session ID
cipherlist_len 1 Number of entries in cipherlist

.7 bk t
41 -b 1 a
3
cipherlist 20 Available ciphersuites
15
ei .0
comprlist_len 1 Number of entries in compression list

0.
w 01
12
ou 3.
comprlist 1 Available compression routines

2.
zh 201
5.3.163 Security Secure Sockets Layer Handshake Protocol Server

Hello (LOG_CODE 0x10B1)
This holds information for the security secure sockets layer handshake protocol server hello.
version 2 Selected protocol version
random 32 Server random
session_id_len 1 Session ID length (0<1<=32)
session_id 32 Session ID
ciphersuite 2 Selected ciphersuite
compression 1 Selected compression routine

Log Record Formats
5.3.164 Security Secure Sockets Layer Handshake Protocol Server DH

Key Exchange (LOG_CODE 0x10B2)
This holds information for the security secure sockets layer handshake protocol server DH key
exchange.
modulo_len 2 DH modulo length
modulo 128 DH modulo
svr_pubkey_len 2 DH server public key length
svr_pubkey 128 DH server public key
base_len 2 DH base length
T
base 256 DH base
n PS
signature_len 1 Message signature length
34
signature 20 Optional message signature
om 8:
l.c :4
. c
te 13
RSA Key Exchange (LOG_CODE 0x10B3)
.7 bk t
41 -b 1 a
3
15
This holds information for the security secure sockets layer handshake protocol server RSA key
ei .0
exchange.
0.
w 01
12
ou 3.

2.
zh 201
modulo_len 2 RSA modulo length
modulo 128 RSA modulo
svr_pubkey_len 2 RSA server public key length
svr_pubkey 128 RSA server public key
signature_len 1 Message signature length
signature 20 Optional message signature

Hello Done (LOG_CODE 0x10B4)
This holds information for the security secure sockets layer handshake protocol server hello
done.

Log Record Formats
5.3.167 Security Secure Sockets Layer Handshake Protocol Client DH

Key Exchange (LOG_CODE 0x10B5)
This holds information for the security secure sockets layer handshake protocol client DH key
exchange.
clnt_pubkey_len 2 DH client public key length
clnt_pubkey 128 DH client public key

RSA Key Exchange (LOG_CODE 0x10B6)
T
This holds information for the security secure sockets layer handshake protocol client RSA key
n PS
exchange.
34
om 8:
l.c :4
c
.
te 13
encr_secret 48 RSA encrypted premaster secret

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
Finished (LOG_CODE 0x10B7)

12
ou 3.
This holds information for the security secure sockets layer handshake protocol client finished.
2.
zh 201
md5_hash 16 Client’s handshake MD5 hash
sha_hash 20 Client’s handshake SHA hash

Finished (LOG_CODE 0x10B8)
This holds information for the security secure sockets layer handshake protocol server finished.
md5_hash 16 Server’s handshake MD5 hash
sha_hash 20 Server’s handshake SHA hash

Log Record Formats
5.3.171 Security Secure Sockets Layer Cipherspec Protocol Change

(LOG_CODE 0x10B9)
This holds information for the security secure sockets layer cipherspec protocol change.
5.3.172 Security Secure Sockets Layer Alert Protocol Alert

(LOG_CODE 0x10BA)
This holds information for the security secure sockets layer alert protocol alert.
T
n PS
level 1 Alert level
34
id 1 Alert ID (description)
om 8:
l.c :4
c
5.3.173 Reserved (LOG_CODE 0x10BB)
.
te 13
.7 bk t
41 -b 1 a
5.3.174 Quick Paging Channel, Ver 2 (LOG_CODE 0x10BC) (obsolete)

3
15
ei .0

0.
w 01
12
ou 3.
5.3.175 Enhanced Access Probe (LOG_CODE 0x10BD)

2.
zh 201
This holds information for each Reverse Enhanced Access Channel probe transmitted.
RLGAIN_COM_PILOT 1 Gain adjustment of the enhanced access channel or

reverse common control channel relative to the reverse
pilot channel; is received on the Enhanced Access
Parameters message; is a twos complement value in units
of 0.125 dB
SUB_ATT_NUMBER 1 Access subattempt number of the access attempt to which
the access probe belongs; there is a subattempt for each
BS to which an Access probe is sent
SEQUENCE_NUMBER 1 Sequence number of the access subattempt
ACCESS_PROBE_ 1 Probe number of the access sequence corresponding to

NUMBER the access probe
EACH_NUM_STEP 1 Maximum number of access probes a mobile station is to

transmit in a single access probe sequence
PSIST_DELAY 1 Number of persistence tests performed; if more than 255

are performed, this value will be 255

Log Record Formats

SEQUENCE_BKOFF 1 Enhanced access channel sequence backoff; one less
than the maximum number of slots a mobile station is to
delay due to random backoff between successive EA
probe sequences
PROBE_BKOFF 1 Enhanced access channel probe backoff; one less than the
maximum number of slots a mobile station is to delay due
to random backoff between consecutive EA probes
EACH_SLOT 1 N, where the slot duration of the enhanced access channel

is (N+1) x 1.25 ms
FCCCH_ID 1 Forward common control channel number
EACH_ID 1 Enhanced access channel identification
EACH_SLOT_OFFSET1 1 First slot offset for the enhanced access channels;

received in the Enhanced Access Parameters message
T
n PS
BASE_ID 2 Base station identification
EACH_SLOT_OFFSET2 1 Relative slot offset for the enhanced access channels;
34
received in the Enhanced Access Parameters message
om 8:
ACC_RATE 1 Enhanced Access Channel rate selection for transmission
l.c :4
. c
te 13
Data rate Frame length
Value
(kbps) (ms)
.7 bk t
41 -b 1 a
0 9600 20
3
15
ei .0
1 19200 20
0.
w 01
2 19200 10
12
ou 3.
2.
zh 201
3 38400 20
4 38400 10
5 38400 5
RX_AGC 1 Received AGC power; see Appendix C for the conversion

to dBm formula
TX_AGC 1 Transmit AGC power; see Appendix C for the conversion to

dBm formula
TX_ADJ 1 Transmit gain adjust
INT_CORR 1 Interference-correction
ACC_PREAMBLE_TX_ 4 floor(SYS_TIME/EACH_SLOTs), where SYS_TIME is the

LOW32BIT system time in units of 1.25 ms, at which the preamble is to
be transmitted; is the lower 32 bits of this 42 bit value
ACC_PREAMBLE_TX_ 2 High 10 bits of the 42 bit value, whose lower 32 bits is the
HIGH16BIT acc_preamble_tx_low32bit field
PDU_LENGTH 2 Length in bits of the transmitted access probe

Log Record Formats
5.3.176 BCCH Frame Information (LOG_CODE 0x10BE)

This holds information for the BCCH frame.
BCCH_BIT_RATE 1 Bit rate

 0 – 4800- or 160-ms frame
 1 – 9600- or 80-ms frame
 2 – 19200- or 40-ms frame
BCCH_CODE-RATE 1 Code rate

 0 – Code rate 1/4
BCCH_CODE-CHAN 1 Walsh code number
NUM_FRAMES 1 Total number of BCCH frames in the log; see

NUM_FRAMES field table and descriptions below
T
n PS
NUM_FRAMES instances of the following field
34
om 8:
l.c :4
. c
te 13
FRAME-QUALITY 2 2 bits per frame (or 1 byte for 4 frames); values are:
 10 – Bad frame
.7 bk t
41 -b 1 a
 11 – Good frame
3
15
ei .0
0.
w 01
5.3.177 FCCCH Frame Information (LOG_CODE 0x10BF)

12
ou 3.
This holds information for the FCCCH frame.

2.
zh 201
FCCCH_BIT_RATE 1 Bit rate

 0 – 9600
 1 – 19200
 2 – 38400
FCCCH_CODE-RATE 1 Code rate

FCCCH_CODE-CHAN 1 Walsh code number
NUM_FRAMES 1 Total number of FCCCH frames in the log; see

NUM_FRAMES instances of the following field
FRAME-QUALITY 2 2 bits per frame (or 1 byte for 4 frames); values are:
 10 – Bad frame
 11 – Good frame

Log Record Formats
5.3.178 FDCH Frame Information (LOG_CODE 0x10C0)

This holds FDCH frame information.
FRAME_OFFSET 1 Frame offset
NUM_SUB_RECORDS 1 Total number of FDCH subrecords; see

NUM_SUB_RECORDS field table and descriptions below
NUM_SUB_RECORDS instances of the following record
FDCH_SUB_RECORD Variable FDCH subrecord; see description in Section 5.3.178.1.
T
5.3.178.1 FDCH_SUB_RECORD
n PS
34
om 8:
ASSIGNED_CHANNELS 1 l.c :4 Assigned channels; see description in
c
Section 5.3.178.1.1
.
te 13
NUM_FRAMES 1 Total number of FDCH frame in the FDCH subrecord;

see NUM_FRAMES field table and descriptions below
.7 bk t
41 -b 1 a
3
FOR_FCH_RC 1 or 0 Included only if FCH is assigned
15
ei .0
 1 – RC1
0.
w 01
 2 – RC2
12
ou 3.
 3 – RC3
2.
zh 201
 4 – RC4
 5 – RC5
FOR_DCCH_RC 1 or 0 Included only if DCCH is assigned

 1 – RC1
 2 – RC2
 3 – RC3
 4 – RC4
 5 – RC5
FWD_SCH_INFORMATION 7 or 0 Included only if SCH is assigned; see

Section 5.3.178.1.2
NUM_FRAMES instances of the following record
FDCH_FRAME Variable FDCH frame; see description in Section 5.3.178.1.3
NOTE The F-FCH or F-DCCH MUXPDU type can be derived from the Radio Configurations
information.

Log Record Formats
5.3.178.1.1 ASSIGNED_CHANNELS
R-PICH 1  0 – Control Hold mode (only DCCH must be set to 1 in

this case)
 1 – Not in Control Hold mode
FCH 1  0 – FCH not assigned

 1 – FCH assigned
DCCH 1  0 – DCCH not assigned

 1 – DCCH assigned
SCH0 1  0 – SCH0 not assigned

 1 – SCH0 assigned
SCCH 3 Number of SCCH assigned
RESERVED 1 Reserved
T
n PS
5.3.178.1.2 FWD_SCH_INFORMATION
34
om 8:
l.c :4 Description
c
FOR_SCH_RC 1 3 – RC3
.

te 13
 4 – RC4
5 – RC5
.7 bk t

41 -b 1 a
3
FOR_SCH0_MUX-OPTION_ 1 Higher 8 bits (MSB) of FOR_SCH0_MUX_OPTION
15
ei .0
HI
0.
w 01
FOR_SCH0_MUX-OPTION_ 1 Lower 8 bits (LSB) of FOR_SCH0_MUX_OPTION

12
ou 3.
LO
2.
zh 201
SCH_FRAME-LENGTH 1  0 – 20-ms frame

 1 – 40-ms frame
SCH0_NUM_BITS 1 SCH rate; values are:

 0 – 1x
 1 – 2x
 2 – 4x
 3 – 8x
 4 – 16x
 5 – 32x
NUM_MUX_PDU-PER_ 1 Total number of MUXPDU per SDU frame

SCH_FRAME
NUM_LTU_PER-SCH_ 1 Total number of LTU per SDU frame

FRAME
NOTE The FOR SCH MUX category type can be derived from the FOR_SCH0_MUX_
OPTION(HI+LOW)

Log Record Formats
5.3.178.1.3 FDCH_FRAME
FCH_CATEGORY 1 or 0 Included only if FCH is assigned; contains the value of

F-FCH MUX category type; see Tables 2-55 and 2-56 in
[S20]
DCCH-CATEGORY 1 or 0 Included only if DCCH is assigned; contains the value of

F-DCCH MUX category type; see Tables 2-57 and 2-58
in [S20]
SCCH_FRAME- ASSIGNED- Contains one byte for each SCCH, indicating the
CATEGORY CHANNELS.SCCH category of the received frame for each SCCH.
SCH_FRAME- 1 or 0 Included only if SCH is assigned; values are:

CATEGORY  0 – Sufficient quality
 2 – Insufficient quality
 1 – DTX
T
SCH_FRAME-INFO Variable Included only if SCH is assigned, and this frame is not
n PS
DTX; see Section 5.3.178.1.3.1 for format description
34
om 8:
5.3.178.1.3.1 F_SCH_MUX_PDU_INFORMATION_TYPE l.c :4
c
This indicates whether the LTU frame is received with sufficient or insufficient quality.
.
te 13
.7 bk t

41 -b 1 a
3
15
LTU_CATEGORY 1 or 0 Included only if SCH_FRAME_CATEGORY indicates that
ei .0
the SCH frame was received with "insufficient quality"

0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.179 RDCH Frame Information (LOG_CODE 0x10C1)

This holds the RDCH frame information.
FRAME_OFFSET 1 Frame offset
NUM_SUB_RECORDS 1 Total number of RDCH subrecords; see

NUM_SUB_RECORDS field table and descriptions
below
RDCH_SUB_RECORD Variable See description in Section 5.3.179.1.
T
n PS
5.3.179.1 RDCH_SUB_RECORD
34
om 8:
l.c :4
c
ASSIGNED_CHANNELS 1 See description in Section 5.3.178.1.1.
.
te 13
NUM_FRAMES 1 Total number of RDCH frame in the subrecord; see

.7 bk t
41 -b 1 a
3
REV_FCH_RC 1 or 0 Included only if FCH is assigned
15
ei .0
 1 – RC1
0.
w 01
 2 – RC2
12
ou 3.
 3 – RC3
2.
zh 201
 4 – RC4
FCH_GATING 1 or 0 Included only if FCH is assigned

 1 – 1/8 gating
 0 – No gating
REV_DCCH_RC 1 or 0 Included only if DCCH is assigned

 1 – RC1
 2 – RC2
 3 – RC3
 4 – RC4
REV_SCH_INFORMATION 6 or 0 Included only if SCH is assigned; see description in

Section 5.3.179.1.1.
NUM_FRAMES instances of the following record
RDCH_FRAME Variable See description in Section 5.3.179.1.2.
NOTE The R-FCH or R-DCCH MUXPDU type can derived from the Radio Configurations
information.

Log Record Formats
5.3.179.1.1 REV_SCH_INFORMATION
REV_SCH_RC 1  3 – RC3
 4 – RC4
REV_SCH0_MUX- 1 Higher 8 bits (MSB) of REV_SCH0_MUX_OPTION

OPTION_HI
REV_SCH0_MUX- 1 Lower 8 bits (LSB) of REV_SCH0_MUX_OPTION

OPTION_LO
SCH_FRAME-LENGTH 1  0 – 20-ms frame

SCH0_NUM_BITS 1 SCH rate; values are:

 3 – 1x
 4 – 2x
T
n PS
 5 – 4x
 6 – 8x
34
 7 – 16x
 8 – 32x
om 8:
l.c :4
c
NUM_MUX_PDU-PER_ 1 Total number of MUX PDU per SDU
.
te 13
SCH_FRAME
.7 bk t
41 -b 1 a
The REV SCH MUX category type can derived from the REV_SCH0_MUX_
3
NOTE
15
OPTION(HI+LOW)
ei .0
0.
w 01
12
ou 3.
5.3.179.1.2 RDCH_FRAME
2.
zh 201
FCH_FORMAT 1 or 0 Included only if FCH is assigned; contains the value of

R-FCH MUX category type; see Tables 2-42 and 2-43
in [S20]
DCCH_FORMAT 1 or 0 Included only if DCCH is assigned; contains the value

of R-DCCH MUX category type; see Tables 2-44 and
2-45 in [S20]
SCCH_FRAME-FORMAT ASSIGNED- Contains one byte for each SCCH, indicating the
CHANNELS.SCCH category of the received frame for each SCCH
SCH_FORMAT 1 Included only if SCH is assigned; values are:

 0 – DTX
 1 – TXed
If SCH_FORMAT indicates that this frame was transmitted (TXed), include NUM_MUX_PDU_PER_
SCH_FRAME instances of the following field; otherwise, do not include additional fields.
SR_ID 1 Indicates the SR_ID of each MuxPDU in the SCH

frame

Log Record Formats
5.3.180 Fast Forward Power Control Statistics (LOG_CODE 0x10C2)

This combines data from Fast Forward Power Control (LOG_CODE 0x102B) and Forward Link
Frame Types (LOG_CODE 0x1029) for better correlation of data points. It contains frame type
information for the forward link and fast forward power control information. The record is
accumulated over several frames. The DMSS will terminate accumulation, send the log record,
and start a new accumulation upon any of the following events:
 Frame offset changes due to a hard handoff
 Radio configuration changes for any channel
 Service option changes
 Maximum accumulation size is reached
 Call is ended
T
n PS
34
FOR_CH_RC 2 Forward channels Radio Configurations; see
om 8:
l.c :4
c
.
te 13
FRAME_OFFSET 1 Frame offset, in 1.25 ms units; base station specifies the

.7 bk t
frame offset; timestamp in Section 5.1 will be generated

41 -b 1 a
during the 20-ms frame time; to calculate the frame time to

3
15
1.25 ms, use the following formula:
ei .0
frame_time = ((((log_hdr_timestamp >> 16) -

0.
w 01
FRAME_OFFSET) >> 4) << 4) + FRAME_OFFSET

12
ou 3.
2.
zh 201
FPC_MODE 1 Forward power control mode indicator; see [S9] Section

2.1.3.1.10.1
FPC_PRI_CHAN 1 Primary inner power control subchannel indicator

 0 – F-FCH setpoint
 1 – F-DCCH setpoint
See [S9] Section 2.1.3.1.10.3
FPC_SUBCHAN_GAIN 1 Subchannel gain in units of 0.25 dB
SUB_RECORDS Variable A series of subrecords; see Section 5.3.180.1 for format

description

Log Record Formats
5.3.180.1 Fast Forward Power Control Info Subrecord

This holds active channel and per-frame information for FL frames. The DMSS will start a new
subrecord immediately after the existing subrecord if the active channel set changes.
CHAN_SET_MASK 1 Dedicated forward channel set mask; contains bit fields

indicating whether a particular channel is present; see
FRAME_CNT 1 Number of frames contained in this subrecord
FRAME_BUF Variable A series of frame records; see Section 5.3.180.2 for

format description
5.3.180.2 Fast Forward Power Control Info Frame Records

This holds fast forward power control and frame type information for each forward link frame.
T
n PS
NOTE Not all fields will be present in each frame entry. Only fields that represent active channels
34
specified in the CHAN_SET_MASK field in Section 5.3.180.1 will exist in each frame entry.
om 8:
l.c :4
. c
te 13
.7 bk t
DEC_HISTORY 2 16 1-bit decisions for the previous frame; each bit

41 -b 1 a
3
represents a decision for 1 power control group (PCG);
15
ei .0
the bits are ordered chronologically from MSB to LSB,

with the MSB representing the most recent PCG
0.
w 01
decision
12
ou 3.
2.
zh 201
F_FCH 2 (if FCH is active) Forward fundamental channel information; see

F_SCH0 2 (if SCH0 is active) Forward supplement channel 0 information; see

F_SCH1 2 (if SCH1 is active) Forward supplement channel 1 information; see

F_DCCH 2 (if DCCH is active) Forward dedicated control channel information; see
F_SCH 2 (if SCH0 is active) Additional forward supplemental channel information;

see Section 5.3.180.6 for format description
F_SCCH 2 (if any SCCH Forward supplemental code channel information; see
channels are active) Section 5.3.180.7 for format description

Log Record Formats
5.3.180.3 Fast Forward Power Control Info Fundamental Channel Info Subrecord
This holds frame information for the fundamental channel.
POWER 1 F-FCH current power control subchannel outer loop

setpoint in 0.125 dB units
RATE/TYPE 1 Forward fundamental channel frame rate and type;

contains two fields, each 4 bits in length.
Least significant 4 bits – frame rate
 0 – Erasure/Blank
 1 – 1/8 rate frame
 4 – Full rate frame
Most significant 4 bits – See FCH_FRAME_TYPE in
T
Appendix C.
n PS
34
5.3.180.4 Fast Forward Power Control Info Supplemental Channel 0/1 Info Subrecord
om 8:
This holds frame information for supplemental channels 0 and 1.
l.c :4
. c
te 13
.7 bk t
POWER 1 F-FCH current power control subchannel outer loop

41 -b 1 a
3
15
ei .0
RATE 1 Forward supplement channel frame rate; see

0.
w 01
SCH_FRAME_RATE in Appendix C
12
ou 3.
2.
zh 201
5.3.180.5 Fast Forward Power Control Info Dedicated Control Channel Info Subrecord
This holds frame information for the dedicated control channel.
POWER 1 DCCH current power control subchannel outer loop

MUX_PDU 1 Forward dedicated control channel MuxPDU category;

see Section 5.2.3 for values

Log Record Formats
5.3.180.6 Fast Forward Power Control Info Additional Supplemental Channel Info
Subrecord
This holds additional frame information for supplemental channel 0.
DELTA 1 Setpoint for the difference between F-FCH current power

control subchannel outer loop and the F-SCH current
power control subchannel outer loop, in 0.125 dB units;
this field is only present if F-SCH0 is active
Reserved 1 Reserved
5.3.180.7 Fast Forward Power Control Info Supplemental Code Channel Info Subrecord
This holds additional frame information for supplemental code channels.
T
n PS
F_SCCH1_F_SCCH7 2 Frame rate information for F-SCCH channels 1-7; each
34
channel has a 2-bit entry in this field; the fields are ordered
from least significant to most significant bits, representing
om 8:
F-SCCH1 through F-SCCH7 in that order, as described in
l.c :4
c
the Channel Entry Bit Mask.
.
te 13
Channel Entry Bit Mask

 0x0003 – F-SCCH1
.7 bk t
41 -b 1 a
 0x000C – F-SCCH2
3
15
 0x0030 – F-SCCH3
ei .0
 0x00C0 – F-SCCH4
0.
w 01
 0x0300 – F-SCCH5
12
ou 3.
 0x0C00 – F-SCCH6
2.
zh 201
 0x3000 – F-SCCH7
 0xC000 – Reserved
Frame rate – See SCH_FRAME_RATE in Appendix C.

Log Record Formats
5.3.181 Reverse Power Control Statistics (LOG_CODE 0x10C3)

This holds reverse power control and RL frame type information. The record is accumulated
over several frames. The DMSS will terminate accumulation, send the log record, and start a new
accumulation upon any of the following events:
 Frame offset changes due to a hard handoff
 Radio configuration changes for any channel
 Service option changes
 Maximum accumulation size is reached
 Call is ended
T
n PS
FRAME_OFFSET 1 Frame offset, in 1.25 ms units; base station specifies the
frame offset; timestamp in Section 5.1 will be generated
34
during the 20-ms frame time; to calculate the frame time to
1.25 ms, use the following formula:
om 8:
l.c :4frame_time = ((((log_hdr_timestamp >> 16) -
c
FRAME_OFFSET) >> 4) << 4) + FRAME_OFFSET
.
te 13

.7 bk t
41 -b 1 a

3
15
ei .0
PILOT_GATING_RATE 1 Gated transmission rate; see [S9] Section 2.1.3.2.3

0.
w 01
STEP_SIZE 1 Closed loop power control step size in dB

12
ou 3.
2.
zh 201
FRAME_CNT 1 Number of subrecords in this log record; subrecords are

variable length
Reserved 1 Reserved
FRAME_BUF Variable A series of subrecords; see Section 5.3.181.1 for format

description
5.3.181.1 Reverse Power Control Info Frame Record

This holds reverse power control and frame type information for each dedicated RL frame.
DEC_HISTORY 2 16 1-bit decisions for the previous frame; each bit

represents a decision for 1 power control group (PCG);
the bits are ordered chronologically from MSB to LSB, with
the MSB representing the most recent PCG decision.
PCG bit decision values are:
 0 – Increase transmit power
 1 – Decrease transmit power
RX_AGC_VALS 1 Signed receive power sample; see Appendix C for the

conversion to dBm formula
TX_PWR_VALS 1 Total transmit power measured from CDMA AGC; see

Appendix C for the conversion to dBm formula

Log Record Formats

TX_GAIN_ADJ 1 Signed power control value; to convert to dB:
tx_adj = -(value/2)
A value of 0x7F indicates that the transmitter is off.
MAX_PWR_LIMITED 1 Reports whether Max Power Protection is in effect; values

are:
 0 – Not applicable
 1 – Not in effect
 2 – In effect
TX_PWR_LIMIT 1 Upper limit on Tx power; see Appendix C for the

conversion to dBm formula
CH_COUNT 1 Count of channel records for this frame
CH_INFO Variable Series of channel records
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.181.2 Reverse Power Control Info Channel Record

This holds reverse power control and frame type information for each channel.
CH_INFO 1 Contains bit fields containing channel information.

Least significant 2 bits – CH_TYPE
Channel Type
 0 – FCH
 1 – SCH0
 2 – SCH1
 3 – DCCH
Next significant 2 bits – FCH_TYPE
Present for FCH only; for all other channels, these bits are
reserved; see FCH_FRAME_TYPE in Appendix C for
values.
T
Most significant 4 bits – CH_RC
n PS
Reverse channels radio configuration
34
CH_RATE 1 For all channels except DCCH, this is the data rate for the
channel, as noted below.
om 8:
For FCH channel, values are:
l.c :4
. c
 0 – ERASURE
te 13
 1 – EIGHTH_RATE
.7 bk t
 2 – QUARTER_RATE
41 -b 1 a
3
 3 – HALF_RATE
15
ei .0
 4 – FULL_RATE
0.
w 01
For SCH0 and SCH1, see SCH_FRAME_RATE in

12
Appendix C for values.

ou 3.
For DCCH, this is the MUX PDU category; see

2.
zh 201
Section 5.2.3 for values.
CH_TO_PICH 2 Signed power ratio between the current channel and

R-PICH, in 0.125 dB units
A value of 0x7FFF indicates that this channel was DTXed
for this frame.
If CH_TO_PICH is different from 0x7FFF, the ratio in dB is:
ch_to_pich = 0.125 * CH_TO_PICH

Log Record Formats
5.3.181.3 Reverse Channels Power Calculations

The following table outlines the equations for calculating transmit power for each active IS-2000
channel. These calculations are only valid for calls where RC ≥ 3.
Field Description
R_PICH_PWR R-PICH transmit power

In linear scale (note that inactive or DTXed channels are not used in
summation):
R_PICH_PWR (mW) = ( 10 ^ (tx_pwr / 10) ) / ( 1 + (10 ^ (fch_to_pich / 10) ) +
(10 ^ (dcch_to_pich / 10) ) + (10 ^ (sch0_to_pich / 10) ) + (10 ^ (sch1_to_pich /
10) ) )
To convert to dBm:
r_pich_pwr (dBm) = 10 * log10 ( R_PICH_PWR (mW) )
Note: The following values are only valid if the corresponding channel is active and not DTXed.
T
FCH_TO_PICH R-FCH transmit power in dBm:
n PS
r_fch_tx_pwr = r_pich_pwr + fch_to_pich
34
SCH0_TO_PICH R-SCH0 transmit power in dBm:
r_sch0_tx_pwr = r_pich_pwr + sch0_to_pich
om 8:
l.c :4
c
SCH1_TO_PICH R-SCH1 transmit power in dBm:
.
te 13
r_sch1_tx_pwr = r_pich_pwr + sch1_to_pich
.7 bk t
DCCH_TO_PICH R-DCCH transmit power in dBm:

41 -b 1 a
3
r_dcch_tx_pwr = r_pich_pwr + dcch_to_pich
15
ei .0
0.
w 01
12
5.3.182 Searcher and Finger Info, Ver 2 (LOG_CODE 0x10C4)

ou 3.
2.
zh 201
(obsolete)
5.3.183 Service Configuration, Ver 2 (LOG_CODE 0x10C5)

This holds the information for the service configuration.
FWD_MUX_OPTION 2 Forward fundamental and dedicated control channel

multiplex option
REV_MUX_OPTION 2 Reverse fundamental and dedicated control channel

multiplex option
FWD_NUM_BITS 1 Set of number of bits per frame of the forward fundamental

channel
REV_NUM_BITS 1 Set of number of bits per frame of the reverse fundamental

channel
CHANNELS_INFO 1 Channel mask; see description in Section 5.3.183.1
NUM_CON_REC 1 Number of service option connection records; see

NUM_CON_REC field table and descriptions below

Log Record Formats

NUM_LPM_ENTRIES 1 Number of Logical-to-Physical Mapping entries; see
NUM_LPM_ENTRIES field table and descriptions below
NUM_LTU_TABLES 1 Number of LTU tables included; see NUM_LTU_TABLES

field table and descriptions below
FCH_INFO 2 or 0 Included only if FCH is assigned; see description in

Section 5.3.183.2
DCCH_INFO 2 or 0 Included only if DCCH is assigned; see description in

Section 5.3.183.2
F_SCH_INFO 7 or 0 Included only if F-SCH is in the SCR; see description in

Section 5.3.183.3
R_SCH_INFO 7 or 0 Included only if R-CH is in the SCR; see description in

Section 5.3.183.3
T
n PS
NUM_CON_REC instances of the following record
34
CON_REC_INFO Variable
om 8:
See description in Section 5.3.183.4
l.c :4
. c
te 13
NUM_LPM_ENTRIES instances of the following record

.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
LPM_INFO 5 See description in Section 5.3.183.5

12
ou 3.
2.
zh 201
NUM_LTU_TABLES instances of the following record
LTU_INFO Variable See description in Section 5.3.183.6
LTU_TAB_ID Included only if NUM_LTU_TABLES is > 0; see

description in Section 5.3.183.7
One instance of the following record
LTU_TAB_ID_RECORD 2 or 0 Included only if NUM_LTU_TABLES is > 0; see

description in Section 5.3.183.7

Log Record Formats
5.3.183.1 CHANNELS_INFO
FCH 1 Fundamental channel is active
DCCH 1 Dedicated control channel is active
F_SCH 1 Forward supplemental channel is active
R_SCH 1 Reverse supplemental channel is active
RESERVED 4 Reserved
5.3.183.2 CH_INFO
FWD_RC 1 Forward channel radio configuration
T
n PS
REV_RC 1 Reverse channel radio configuration
34
5.3.183.3 SCH_INFO
om 8:
l.c :4
c
.
te 13
SCH_MUX_HI 1 Higher 8 bits (MSB) of SCH_MUX_OPTION

.7 bk t
41 -b 1 a
SCH_MUX_LO 1 Lower 8 bits (LSB) of SCH_MUX_OPTION

3
15
ei .0
SCH_RC 1 Supplemental channel radio configuration

0.
w 01
CODING 1 Convolutional/turbo coding indicator

12
ou 3.
 0 – Convolutional only
2.
zh 201
 1 – Coding depends on bit rate
FRAME_SIZE 1 Frame size; see description in Section 5.3.183.3.1.
MAX_RATE 1 Maximum negotiated data rate
FRAME_OFFSET 1 Supplemental channel frame offset
5.3.183.3.1 FRAME_SIZE
FRAME_40_USED 1 40-ms frames are used
FRAME_80_USED 1 80-ms frames are used
RESERVED 6 Reserved

Log Record Formats
5.3.183.4 CON_REC_INFO
CON_REF 1 Connection reference
SERVICE_OPTION_HI 1 Higher 8 bits (MSB) of service option
SERVICE_OPTION_LO 1 Lower 8 bits (LSB) of service option
FOR_TRAFFIC 1 Traffic type used for forward link
REV_TRAFFIC 1 Traffic type used for reverse link
UI_ENCRYPT_ MODE 1 Encryption mode indicator for user information

privacy
SR_ID 1 Service reference identifier
RLP_BLOB_LEN 1 RLP information block of bits length
T
QOS_PARMS_LEN 1 Length of the block of Quality of Service parameters
n PS
RLP_BLOB RLP_BLOB_LEN RLP Information block
34
QOS_PARMS QOS_PARAMS_LEN QoS parameters
om 8:
l.c :4
c
5.3.183.5 LPM_INFO
.
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
LOGICAL_RESOURCE 1 Logical resource identifier

0.
w 01
12
ou 3.
PHYSICAL_RESOURCE 1 Physical resource identifier

2.
zh 201
FORWARD_REVERSE_ 1 Forward/reverse flag; see description in

FLAG Section 5.3.183.5.1
PRIORITY 1 Multiplexing priority
5.3.183.5.1 FORWARD_REVERSE_FLAG
FORWARD 1 Forward
REVERSE 1 Reverse
RESERVED 6 Reserved

Log Record Formats
5.3.183.6 LTU_INFO
LTU_TABLE_ID 1 LTU table identifier
NUM_ROWS 1 Number of LTU rows; see NUM_ROWS field table and

descriptions below
NUM_ROWS instances of the following record
LTU_ROW 3 See description in Section 5.3.183.6.1
5.3.183.6.1 LTU_ROW
T
n PS
NBITS_IDX 1 SCH number of information bits index
34
om 8:
LTU_LEN_HI 1 Higher 8 bits (MSB) of LTU_LEN
l.c :4
c
LTU_LEN_LO 1 Lower 8 bits (LSB) of LTU_LEN
.
te 13
.7 bk t
5.3.183.7 LTU_TAB_ID_RECORD
41 -b 1 a
3
15
ei .0

0.
w 01
FSCH0_LTU_TAB_ID 1 Forward Supplemental Channel LTU Table ID; this field

12
ou 3.
shall be set to 0 if the F-SCH is to use default LTU sizes or

2.
zh 201
if F-SCH is not part of the SCR
RSCH0_LTU_TAB_ID 1 Reverse Supplemental Channel LTU Table ID; this field

shall be set to 0 if the R-SCH is to use default LTU sizes or
if R-SCH is not part of the SCR

Log Record Formats
5.3.184 Active Set Information, Ver 2 (LOG_CODE 0x10C6)

This holds the information for the pilots in the active set.
RF_MODE 1 RF mode
 0 – Analyze
 1 – CDMA
CURR_CHAN 2 Center frequency or CDMA channel number
CHAN_INFO 1 Channel information; see description in Section 5.3.184.1
NUM_PILOTS 1 Number of pilots in the active set; see NUM_PILOTS field

table and descriptions below
RESERVED 2 Reserved
T
n PS
NUM_PILOTS instances of the following record
34
om 8:
l.c :4
. c
te 13
ACTIVE_SET_PILOT_ Variable See description in Section 5.3.184.2
RECORD
.7 bk t
41 -b 1 a
3
15
5.3.184.1 CHAN_INFO
ei .0
0.
w 01
12

ou 3.
2.
zh 201
FCH 1 Fundamental Channel is active
DCCH 1 Dedicated Control Channel is active
NUM_SCCH 3 Number of supplemental code channels is active [0 to 7]
RESERVED 3 Reserved

Log Record Formats
5.3.184.2 ACTIVE_SET_PILOT_RECORD
PILOT_PN 2 PN offset of this pilot
PILOT_REC_TYPE 1 Type of pilot that the finger is demodulating; this field shall
be set as indicated in table 3.7.2.3.2.21-6 of [S13]
RESERVED 1 Reserved
PILOT_TYPE_RECORD Variable or 0 Included only if PILOT_REC_TYPE does not indicate a

common pilot, or a pilot of the same type as the pilot in the
last ACTIVE_SET_PILOT_RECORD; see description in
Section 5.3.184.2.1
FCH_CHANNEL_ 4 or 0 Included only if FCH is assigned; see description in

CONFIGURATION Section 5.3.184.2.2
DCCH_CHANNEL_ 4 or 0 Included only if DCCH is assigned; see description in

T
n PS
NUM_SCCH instances of the following record
34
om 8:
l.c :4
c
.
te 13
SCCH_CHANNEL_ 4 or 0 Included only if NUM_SCCH > 0; see description in

.7 bk t
41 -b 1 a
3
15
ei .0
5.3.184.2.1 PILOT_TYPE_RECORD
0.
w 01
12
ou 3.

2.
zh 201
TD_PILOT_FIELDS 2 or 0 Included only if PILOT_REC_TYPE is 000 or 010; see

description in Section 5.3.184.2.1.1
AUX_PILOT_FIELDS 3 or 0 Included only if PILOT_REC_TYPE is 001 or 010; see

description in Section 5.3.184.2.1.2
RESERVED 0 to 4 Size of this field is chosen to make the total length of this
record a multiple of 4 bytes
5.3.184.2.1.1 TD_PILOT_FIELDS
TD_POWER_LEVEL 1 Transmit diversity power level
TD_MODE 1 Transmit diversity mode
5.3.184.2.1.2 AUX_PILOT_FIELDS
WALSH 2 Walsh code for auxiliary pilot
QOF 1 Quasiorthogonal function index for the auxiliary transmit

diversity pilot

Log Record Formats
5.3.184.2.2 CHANNEL_CONFIGURATION
CODE_CHAN 2 Code channel
QOF_MASK_ID 1 Quasiorthogonal function index
RESERVED 1 Reserved
5.3.185 Reduced Active Set Information (LOG_CODE 0x10C7)

This holds the information for the pilots in the reduced active set.
NUM_SUB_RECORDS 1 Number of subrecords in the log packet; see

NUM_SUB_RECORDS field table and descriptions below
T
n PS
34
om 8:
l.c :4 Description
. c
REDUCED_ACTIVE_ Variable See description in Section 5.3.185.1
te 13
SET_PILOT_RECORD
.7 bk t
41 -b 1 a
3
5.3.185.1 REDUCED_ACTIVE_SET_PILOT_RECORD
15
ei .0
0.
w 01

12
ou 3.
TIME_OFFSET 1 Indicates the number of frames (20 ms) between this and
2.
zh 201
last subrecord; if this is the first subrecord of this packet,

this shall be set to 0
ACTIVE_SCH 1 Active SCH mask; see description in Section 5.3.185.1.1
NUM_PILOTS 1 Number of pilots for this time offset
R_SCH_INFO 4 or 0 Included only if R-SCH is active; see description in

Section 5.3.185.1.2
REDUCED_ACTIVE_ 8 See Section 5.3.185.1.3

SET_PILOT
RESERVED 1 See below
NUM_PILOTS instances of the following record
REDUCED_ACTIVE_ 8 or 0 Included only if F-SCH is active; see description in

SET_PILOT Section 5.3.185.1.3

Log Record Formats
One instance of the following record
RESERVED 1 Reserved
5.3.185.1.1 ACTIVE_SCH
F_SCH 1 F-SCH is active
R_SCH 1 R-SCH is active
RESERVED 6 Reserved
5.3.185.1.2 R_SCH_INFO
T
n PS
34
SCH_MUX_OPTION 2 R-SCH MUX option
om 8:
SCH_NUM_BITS_IDX 1 R-SCH rate
l.c :4
. c
te 13
SCH_WALSH_ID 1 R-SCH walsh channel
.7 bk t
41 -b 1 a
3
5.3.185.1.3 REDUCED_ACTIVE_SET_PILOT
15
ei .0
0.
w 01

12
ou 3.
PILOT_PN 2 Pilot PN sequence offset index

2.
zh 201
SCH_MUX_OPTION 2 F-SCH MUX option
NUM_BITS_SCH 1 SCH rate enum
QOF_MASK_ID 1 Quasiorthogonal function index
CODE_CHAN 2 Code channel
5.3.186 Triage (LOG_CODE 0x10C8) (obsolete)

5.3.187 Reserved (LOG_CODE 0x10C9 – 0x10CF)

Log Record Formats
5.3.188 System Arbitration Module (LOG_CODE 0x10D0)

This packet supplies details of the System Arbitration Events. Data for this packet is both
sampled and logged asynchronously after an event or change in SAM state.
EventID [bit3:bit0]: 1  Bit 0 to Bit 3 – Event ID

EventStatus [bit7:bit4]  Bit 4 to Bit 7 – Event status (Events 0, 1, 3)
Values are listed in Section 5.3.188.1 and
Section 5.3.188.2
Module 1 Module ID of module making SAM request
RequestDur 2 Requested Lock duration (Events 0, 1, 3, 7)
RequestTime 8  Lock Until Time (Events 0, 1, 3)

 Lock Required At Time (Event 5)
T
n PS
LockTime 8 Current “Lock Until Time” or next “Lock Required At Time”
(see Lock Type)
34
LockType [bit7]: 1 Bit 7 – Lock type
om 8:
LockOwner [bit6:bit0]  1 – Locked (LockTime contains “Lock Until Time”)
l.c :4
. c
 2 – Pending (LockTime contains “Lock Required At
te 13
Time”)
.7 bk t
Bit 0 to Bit 6 – Lock owner; module ID of current or next

41 -b 1 a
pending lock
3
15
ei .0
LockPriority 1 Priority of current (or pending) lock owner

0.
w 01
RequestPriority 1 Priority of requesting module

12
ou 3.
2.
zh 201
5.3.188.1 Event ID Values
Request Lock] 0 Module is requesting an immediate lock on physical layer

resources
Extend Lock 1 Module is extending an already owned lock
Retain Lock 2 Module is indefinitely extending an already owned lock
Lock and Notify 3 Module has been given a lock on the physical layer
(Granted) resources
Unlock 4 Module is releasing the lock it currently owns
Lock Required At 5 Module requires a physical layer lock at the time indicated
Lock Not Required 6 Module no longer requires any physical layer lock
Lock and Notify 7 Module is requesting the physical layer resources, when
(Request) available
Set Priority 8 Priority of module is being changed

Log Record Formats
5.3.188.2 Event Status Values
Granted 0 Lock or Extension has been granted
Denied (Locked) 1 Lock cannot be granted – Another module currently owns

lock
Denied (Priority) 2 Lock cannot be extended or granted – Ahigher priority

module needs the lock
Denied (Rejected) 3 Lock cannot be granted – Another module owns the lock
and has refused to release
Unlocking 4 Lock will be granted – Another module owns the lock and
will release it soon
5.3.189 Reserved (LOG_CODE 0x10D1)
T
n PS
5.3.190 System Determination Last Main Action (LOG_CODE 0x10D2)
34
om 8:
This logs information on system determination state and variables.
l.c :4
. c
te 13
.7 bk t
Last_action 1 SD last action; possible bit mask values are:

41 -b 1 a
3
 Bit 0 – Continue
15
ei .0
 Bit 1 – Acquire CDMA

0.
w 01
 Bit 2 – Acquire AMPS

12
 Bit 3 – Acquire 1xEV-DO

ou 3.
 Bit 4 – Dedicated Measurement

2.
zh 201
 Bit 5 – Background Measurement

 Bit 6 – Power Save
 Bit 7 – Accept
 Bit 8 – Reject; not supported
 Bit 9 – Release; not supported
The following two fields (AcqBand and AcqChannel) are valid only if last_action is acquire CDMA, acquire
AMPS, or acquire 1xEV-DO.
AcqBand 1 Frequency band for last acquired system

 0 – Cellular
 1 – PCS
 2 – Reserved
 3 – JCDMA
 4 – KPCS
AcqChannel 2 Channel number for last acquired system
The following 2 fields (ActionInfo1 and ActionInfo2) are valid only if last_action is acquire CDMA, acquire
AMPS, or Dedicated Measurement.

Log Record Formats

ActionInfo1 1 Field definition depends upon the last action type.
 Acquire CDMA – block_or_sys
 CDMA PCS frequency blocks or cellular systems
 0 – PCS A
 1 – PCS B
 2 – PCS C
 3 – PCS D
 4 – PCS E
 5 – PCS F
 6 – Cellular A
 7 – Cellular B
 Acquire AMPS – is_amps_2nd_cch
 0 – FALSE
 1 – TRUE
 Dedicated Measurement – measurement_type
T
 0 – Rx Power
n PS
 1 – Pilot Strength
ActionInfo2 2 Field definition depends upon the last action type.
34
 Acquire CDMA – is_new_mode_or_blksys (byte)
om 8:
l.c :4  0 – FALSE
c
 1 – TRUE
.
te 13
 Acquire AMPS – max_redirect_delay (word)
 Registration Randomization backoff
.7 bk t
41 -b 1 a
 Dedicated Measurement – measurement_id (word)

3
15
ei .0
Sd_state 1 System determination state

0.
w 01
12
 1 – Alt Acquisition
ou 3.
 2 – Reacquisition
2.
zh 201
 3 – Operation
Srv_is_on 1 Indicates whether there is a serving system

 0 – FALSE
 1 – TRUE
Is_reselection [Bit2]: 1 The reselection timer is active if Bit2 = 1

Is_ho [Bit1]: The software is in handoff between systems if Bit1 = 1
Is_redir [Bit0] The software is currently handling redirection if Bit0 = 1
The remaining fields hold information about the current serving system; they are valid only if srv_is_on is
TRUE
Mode 1 System mode; values are:

 0 – Inactive
 1 – AMPS
 2 – CDMA
 3 – 1xEV-DO
Band 1 Frequency band for the serving system; values are:

 0 – Cellular
 1 – PCS
 2 – Reserved
 3 – JCDMA
 4 – KPCS

Log Record Formats
Roam 1 Roaming indication; values are:

 0 – Off
 1 – On
 2 – Flashing
Channel 2 Channel number
System_id 4 or 16 Variable length field; definition and length depend on the

mode
 CDMA or AMPS – Length = 4 bytes
 SID [2 bytes] – System ID of CDMA or AMPS
system
 NID [2 bytes] – Network ID of CDMA system
 1xEV-DO – length = 16 bytes
 SectorID[16 bytes] – Sector ID of 1xEV-DO system
T
n PS
5.3.191 System Determination Last Hybrid Action (LOG_CODE
0x10D3)
34
om 8:
This logs information about system determination state and variables when in 1xEV-DO Hybrid
l.c :4
c
mode.
.
te 13
The field format and descriptions are the same as LOG_CODE 0x10D2 in Section 5.3.190.
.7 bk t
41 -b 1 a
3
5.3.192 Reserved (LOG_CODE 0x10D4 – 0x10D8)
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.193 Rate Determination Algorithm Frame Information

(LOG_CODE 0x10D9)
This holds Rate Determination Algorithm (RDA) frame information.
RC 2 RC structure for all the channels and frame offset; see

Assigned Channels 1 RDA channel bit mask; see Section 5.3.193.2 for format
description
Reserved 1 Reserved
Buffer Variable Buffer subrecords; see Section 5.3.193.3 for format

description
T
5.3.193.1 RC
n PS
34
om 8:
FCH_RC 3
l.c :4 FCH radio configuration; RC 1, 2, 3, 4, 5
c
DCCH_RC 3 DCCH radio configuration; RC 3, 4, 5
.
te 13
SCH_RC 3 SCH radio configuration; RC 3, 4, 5

.7 bk t
41 -b 1 a
Reserved 7 Reserved
3
15
ei .0
0.
w 01
5.3.193.2 Assigned channels

12
ou 3.
2.
zh 201
Reserved 1 Reserved
FCH 1 FCH is active
DCCH 1 DCCH is active
SCH0 1 SCH0 is active

Reserved 3 Reserved
RESERVED 1 Reserved
5.3.193.3 Buffer
FCH RDA Subrecord 32 If Field FCH is present, FCH RDA subrecord; see
DCCH RDA Subrecord 16 If Field DCCH is present, DCCH RDA subrecord;

see Section 5.3.193.5 for format description
SCH RDA Subrecord 20 If Field SCH0 is present, SCH RDA subrecord; see

Log Record Formats
5.3.193.4 FCH RDA Subrecord
Full FCH RDA Subrecord 8 See Section 5.3.193.4.1 for format description
Half FCH RDA Subrecord 8 See Section 5.3.193.4.1 for format description
Quarter FCH RDA Subrecord 8 See Section 5.3.193.4.1 for format description
Eighth FCH RDA Subrecord 8 See Section 5.3.193.4.1 for format description
5.3.193.4.1 FCH RDA subrecord type
Reserved 4 Reserved
SER 2 Symbol error rate per frame
T
n PS
Decision 1 Data rate
 0 – Erasure
34
 1 – Eighth-rate data
 2 – Quarter-rate data
om 8: 3 – Half-rate data

l.c :4
. c
 4 – Full-rate data
te 13
Reserved 1 Reserved
.7 bk t
41 -b 1 a
3
15
ei .0
5.3.193.5 DCCH RDA subrecord

0.
w 01
12

ou 3.
2.
zh 201
Reserved 4 Reserved
Reserved 4 Reserved
Reserved 2 Reserved
Reserved 2 Reserved
SER 2 Symbol error rate per frame
DECISION 1 Data rate; full, DTX, erasure
DCCH QUADEC Status 1 DCCH QUADEC status type; see Section 5.3.193.5.1
for format description
5.3.193.5.1 DCCH QUADEC status type
Reserved 1 Reserved
Reserved 2 Reserved
Reserved 5 Reserved

Log Record Formats
5.3.193.6 SCH RDA subrecord
Reserved 4 Reserved
SCH_RDA_INFO_TYPE 8 This field is a union of two structures; the structure

that should be used depends upon the value of the
CODETYPE field
 If the value of CODETYPE is 0 then SCH
convolutional decoder will be used; see
Section 5.3.193.6.1
 If the value of CODETYPE is 1 then SCH Turbo
decoder will be used; see Section 5.3.193.6.2
Reserved 2 Reserved
Reserved 2 Reserved
RATE 2 Max Data rate of SCH; 1x, 2x, 4x, 8x, 16x, and 32x
T
n PS
DECISION 1 Data rate:
 0 – Erasure
34
 1 – Eighth-rate data
om 8:
l.c :4  2 – Quarter-rate data
 3 – Half-rate data
. c
 4 – Full-rate data
te 13
CODETYPE 1  0 – CONVOLUTIONAL
.7 bk t
41 -b 1 a
 1 – TURBO
3
15
ei .0
0.
w 01
5.3.193.6.1 SCH convolutional decoder

12
ou 3.
2.
zh 201
Reserved 2 Reserved
SER 2 Number of symbol errors found in the current frame
Reserved 1 Reserved
Reserved 3 Reserved
5.3.193.6.2 SCH Turbo decoder
Reserved 2 Reserved
Reserved 1 Reserved
Reserved 1 Reserved
Reserved 4 Reserved

Log Record Formats
5.3.194 Reserved (LOG_CODE 0x10DA)
5.3.195 Position Engine Full (LOG_CODE 0x10DB) (obsolete)

5.3.196 Position Engine Partial (LOG_CODE 0x10DC) (obsolete)

5.3.197 Reserved (LOG_CODE 0x10DD – 0x10E1)
5.3.198 MPEG-4 YUV Frame (LOG_CODE 0x10E2)

This packet contains the complete MPEG-4 video YUV frame. The frame contains the data that
T
n PS
are converted into RGB and then sent to the LCD display. The data is logged just before the
frame is sent to the LCD. Each frame is broken down into multiple log packets that can then be
34
reconstructed back into the complete frame.
om 8:
l.c :4
c
.
te 13
FrameNumber 2 Frame number within current video

.7 bk t
41 -b 1 a
ChunkNumber 2 Data block within current frame

3
15
ei .0
DataSize 2 Number of valid bytes in the YUV buffer

0.
w 01
YUV 1 * 512 Dump of YUV data from frame

12
ou 3.
2.
zh 201
5.3.199 MPEG-4 Clip Statistics (LOG_CODE 0x10E3) (obsolete)

This has been replaced by LOG_CODE 0x10E4 (see Section 5.3.200).

Log Record Formats
5.3.200 MPEG-4 Clip Statistics, Ver 2 (LOG_CODE 0x10E4)

This structure contains statistics for a completed MPEG-4 clip.
DECODED_FRAME_RATE 4 Actual playback rate (frames decoded only)
DISPLAYED_FRAME_RATE 4 Actual playback rate (frames displayed)
NUM_FRAMES 4 Number of frames in the clip
NUM_FRAMES_DROPPED_ 4 Number of frames dropped by the codec

UNRECOVERABLE
NUM_FRAMES_DROPPED_ 4 Number of frames dropped due to insufficient decode

DECODE_TIME time
NUM_FRAMES_DROPPED_ 4 Number of frames dropped due to insufficient
RENDER_TIME rendering time
T
n PS
MAX_MSEC_VIDEO_AHEAD 4 Maximum time (ms) that video was ahead of audio
MAX_MSEC_VIDEO_BEHIND 4 Maximum time (ms) that video was behind audio
34
VIDEO_ENCODED_BITRATE 4 Encoded image bitrate
om 8:
l.c :4
c
VIDEO_ENCODED_ 4 Encoded video frame rate
.
te 13
FRAMERATE
.7 bk t
AUDIO_FORMAT 4 Audio format

41 -b 1 a
3
 0 – EVRC 8K
15
ei .0
 1 – QCELP 13K
 2 – AMR
0.
w 01
 3 – AAC
12
ou 3.
 4 – CMX MIDI
2.
zh 201
 5 – MP3
 6 – G723
AUDIO_ENCODED_ 4 Encoded audio bitrate

FRAMERATE
5.3.201 Reserved (LOG_CODE 0x10E5 – 0x1112)
5.3.202 Framed Um Received PPP (LOG_CODE 0x1113)

This holds information for the PPP packets received on the Um interface when they are framed
using HDLC framing.
NOTE Um is the air interface between the mobile station (access terminal) and base station (access
network) for service network data.
DATA 186 Framed PPP data

Log Record Formats
5.3.203 Framed Rm Received PPP (LOG_CODE 0x1114)

This holds information for the PPP packets received on the Rm interface when they are framed
using HDLC framing.
NOTE Rm is the interface between the mobile station and the terminal device (laptop).
5.3.204 Framed AN Received PPP (LOG_CODE 0x1115)

This holds information for the PPP packets received on the AN interface on 1xEV-DO when they
are framed using HDLC framing.
T
n PS
NOTE AN is the air interface between the access terminal and access network for data on the access
34
network stream. This is applicable only for 1xEV-DO systems.
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.
5.3.206 Framed Um Transmit PPP (LOG_CODE 0x1123)

2.
zh 201
This holds information for the PPP packets transmitted on the Um interface after they have been
framed using HDLC framing.
5.3.207 Framed Rm Transmit PPP (LOG_CODE 0x1124)

This holds information for the PPP packets transmitted on the Rm interface after they have been
5.3.208 Framed AN Transmit PPP (LOG_CODE 0x1125)

This holds information for the PPP packets transmitted on the AN interface on 1xEV-DO after
they have been framed using HDLC framing.

Log Record Formats
5.3.210 Unframed Um Received PPP (LOG_CODE 0x1133)

This holds information for the PPP packets received on the Um interface after they have been
unframed.
DATA 186 Unframed PPP data
T
n PS
5.3.211 Unframed Rm Received PPP (LOG_CODE 0x1134)
34
This holds information for the PPP packets received on the Rm interface after they have been
unframed.
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
5.3.212 Unframed AN Received PPP (LOG_CODE 0x1135)

0.
w 01
12
ou 3.
This holds information for the PPP packets received on the AN interface on 1xEV-DO after they
2.
zh 201
have been unframed.
5.3.214 Unframed Um Transmit PPP (LOG_CODE 0x1143)

This holds information for the PPP packets transmitted on the Um interface before they are
5.3.215 Unframed Rm Transmit PPP (LOG_CODE 0x1144)

This holds information for the PPP packets transmitted on the Rm interface before they are

Log Record Formats
5.3.216 Unframed AN Transmit PPP (LOG_CODE 0x1145)

This holds information for the PPP packets transmitted on the AN interface on 1xEV-DO before
they are framed using HDLC framing.
T
n PS
5.3.218 Position Engine Full, Ver 2 (LOG_CODE 0x1154)
34
This holds information for the Position Engine used by gpsOne®. All data are stored in unsigned
integer format unless specified otherwise.
om 8:
l.c :4
. c
te 13
LOG_TYPE 1 Log type

.7 bk t
41 -b 1 a
0 – Invalid
3

15
 1 – Navigation solution
ei .0
 2 – AA data
0.
w 01
 3 – Clock data
12
ou 3.
 4 – Search results
2.
zh 201
 5 – Standalone parameters
 6 – Ephemeris database info
 7 – Missing/old ephemeris info
GPS_SESSION_COUNT 4 Counts the number of GPS fixes attempted and acts as an

ID for all the various logs (as described in LOG_TYPE)
pertaining to a certain fix
RESERVED_1 4 Reserved
PE_DATA Variable Contains various information based on the LOG_TYPE
The various PE data fields are shown Section 5.3.218.1.

Log Record Formats
5.3.218.1 LOG_TYPE = 1 (Navigation solution)
PE_DATA Field Length (bytes) Description
POS_FLAG 2 Position flag; values are:

 0x0000 – No info
 0x0001 – 2D fix
 0x0002 – 3D fix
 0x0004 – Overdetermined
 0x0008 – Too few SVs
 0x0010 – Differential correction
 0x0020 – Position not updated
 0x0040 – External updated position
 0x0080 – Velocity fix included
 0x0100 – ITAR violation
 0x0200 – Solve for time fix
 0x0400 – Clock bias hold fix
 0x0800 – Position fix propagated over time
T
 0x1000 – Convergence Failure
n PS
 0x2000 – Millisecond Error Detected
34
 0x4000 – Reserved
om 8:
l.c :4
. c
te 13
FAILURE_FLAG 2 Failure flag; values are:
 0x0000 – No info
.7 bk t
41 -b 1 a
 0x0001 – Matrix inversion failure

3
 0x0002 – Too few Svs
15
ei .0
 0x0004 – May need more ephemerides

0.
w 01
 0x0008 – High PDOP ( > 100.0 )

12
ou 3.
 0x0010 – FDIC error

2.
zh 201
 0x0020 – Clock only correction

 0x0040 – ITAR position violation
 0x0080 – ITAR velocity violation
 0x0100 – Failed to generate initial seed position
 0x0200 – Time error (Gps Week = UNKNOWN)
 0x0400 – Millisecond error detected
WEEK_NUMBER 2 Week number of fix
FIX_TIME_MS 4 Milliseconds into week for fix, range 0 to (604800000 -1)

(ms)
UTC_FIX_TIME_MS 4 Time adjusted for leap seconds, range 0 to

(604800000 -1) (ms)
REF_COUNT 4 Receiver’s reference ms counter value
POS_COUNT 4 Number of positions

Log Record Formats

INIT_POS_LALO 8*3 Initial position described by:
 Latitude (radians)
 Longitude (radians)
 Altitude (m)
Data type double is used for all of the above; field is
invalid if POS_FLAG bit 0x0040 is set
RAW_POS_LALO 8*3 Unfiltered position described by:

 Altitude (m)
Data type double is used for all of the above; field is
POS_LALO 8*3 Filtered final position described by:

T
n PS
 Altitude (m)
34
Data type double is used for all of the above
om 8:
VEL_ENU 4*3 East, North, and Up velocity:
l.c :4
c
 Veast (m/s)
.
te 13
 Vnorth (m/s)
 Vup (m/s)
.7 bk t
41 -b 1 a
Data type float is used for all of the above

3
15
ei .0
POS_SIGMA 4 Position uncertainty (m), float data type

0.
w 01
POS_SIGMA_LALO 4*2 Position uncertainty described by:

12
ou 3.
 Latitude uncertainty (m)

2.
zh 201
 Longitude uncertainty (m)

POS_SIGMA_VERTICAL 4 Vertical position uncertainty (m), float data type
VEL_SIGMA 4 Velocity uncertainty (m/s), float data type; field is invalid if

POS_FLAG bit 0x0040 is set
CLOCK_BIAS 4 Receiver’s clock bias (m), float data type
CLOCK_DRIFT_RATE 4 Receiver’s clock drift (m/s), float data type
FILTERED_ALT 4 Filtered altitude (m), float data type
ALT_SIGMA 4 Altitude uncertainty (m), float data type
MAG_DEVIATION 4 Magnetic deviation from true north (deg), float data type;
field is invalid if POS_FLAG bit 0x0040 is set
PDOP 4 Position dilution of precision, float data type; field is invalid

if POS_FLAG bit 0x0040 is set
HDOP 4 Horizontal DOP, float data type; field is invalid if

VDOP 4 Vertical DOP, float data type; field is invalid if POS_FLAG

bit 0x0040 is set

Log Record Formats

FIX_INFO 1 This has the following data starting from the LSB:
 First fix (set true when we have a first fix) – length 2
bits
 Drift estimated (set true when clock drift is estimated
from a difference of two clock biases) – length 2 bits
 Mag deviation (set true if magnetic deviation is good) –
length 4 bits
This field is invalid if POS_FLAG bit 0x0040 is set
NUM_SVS 1 Number of SVs used in the position calculation; field is

TOTAL_SVS 1 Total number of SVs detected by searcher, including the

ones not used in position calculation; field is invalid if
SV_PRN 1 * 16 PRN of SV – 16 instances; field is invalid if POS_FLAG
T
bit 0x0040 is set
n PS
IODE 1 * 16 IODE used – 16 instances; field is invalid if POS_FLAG bit
34
0x0040 is set
om 8:
SV_WEIGHT 4 * 16 1/(weight used in position calculation), float data type; 0.0
l.c :4
c
indicates not used due to cross correlation flag; negative
.
number indicates that SV is dropped due to FDIC
te 13
correction; 16 instances; field is invalid if POS_FLAG bit

.7 bk t
0x0040 is set
41 -b 1 a
3
SV_RESIDUAL 4 * 16 Measurement residuals (m), float data type – 16
15
ei .0
instances; field is invalid if POS_FLAG bit 0x0040 is set

0.
w 01
12
ou 3.
2.
zh 201
5.3.218.2 LOG_TYPE = 2 (AA data)

The units of AA data are in IS-801 format unless specified otherwise.
ASSIST_GPS_MS 4 Time of applicability in msec of the GPS week, range 0 to

(604800000 -1) (ms)
DELTA_TIME_MS 4 Delta time set by PE (msec), signed integer
NUM_SVS 1 Number of GPS SVs
TIME_OF_APP 1 CDMA system time reference for the GPS AA data
DOPP_INCL 1 Doppler (0th order) term included
ADD_DOPP_INCL 1 Additional Doppler info included
CODE_PH_INCL 1 Code phase info included
REF_PN 2 Reference PN
AZ_EL_INCL 1 Azimuth and elevation angle included
PRIVATE_1 1 Private - Internal Use Only

Log Record Formats

PRIVATE_2 4 Private - Internal Use Only
The log includes NUM_SVS occurrences of the following fields.
SV_PR 1 SV PRN number
DOPPLER_0 2 0th order Doppler, signed integer
DOPPLER_1 1 1st order Doppler, signed integer
DOPP_WINDOW 2 Doppler search window
T
n PS
CODE_PHASE 2 GPS code phase
CODE_PHASE_INT 1 Integer number of code periods since the last GPS bit
34
boundary
om 8:
GPS_BIT_NUM 1 Two least significant bits of bit number (within GPS frame)
l.c :4
c
currently being transmitted
.
te 13
CODE_PHASE_ 2 Code phase search window

.7 bk t
WINDOW
41 -b 1 a
3
15
AZIMUTH 1 Azimuth of SV
ei .0
0.
w 01
ELEVATION 1 Elevation of SV
12
ou 3.
2.
zh 201

Log Record Formats
5.3.218.3 LOG_TYPE = 3 (Clock data)
WEEK_NUMBER 2 Week number at REF_COUNT (weeks)
GPS_MS 4 GPS msec at REF_COUNT (msec), range 0 to

(604800000 -1)
TIME_BIAS 4 Time bias (msec), float data type
TIME_UNCERTAINTY 4 Time uncertainty (msec), float data type
MS_AMBIGUITY 2 Msec ambiguity (msec)
FREQ_BIAS 4 Frequency bias (m/s), float data type
FREQ_UNCERTAINTY 4 Frequency uncertainty (m/s), float data type
T
PRIVATE_1 1 Private – internal use only
n PS
34
om 8:
l.c :4
. c
te 13
5.3.218.4 LOG_TYPE = 4 (Search results data)

.7 bk t
41 -b 1 a
3
15
ei .0
NUM_SVS 1 Number of SVs in the search results

0.
w 01
12
ou 3.

2.
zh 201
WEEK_NUMBER 2 Week number at REF_COUNT (weeks)
GPS_MS 4 GPS msec at REF_COUNT (msec), range 0 to

(604800000 -1)
TIME_BIAS 4 Time bias (msec), float data type
TIME_UNCERTAINTY 4 Time uncertainty (msec), float data type
MS_AMBIGUITY 2 Msec ambiguity (msec)

FREQ_BIAS 4 Frequency bias (m/s), float data type
FREQ_UNCERTAINTY 4 Frequency uncertainty (m/s), float data type

Log Record Formats
SV_PRN 1 SV PRN number
SEARCH_MODE 1 (not yet implemented)
MEAS_STATUS 2 Search results status; values are:

 0x0000 – No info
 0x0001 – Sub ms time is valid
 0x0002 – Sub bit time is valid
 0x0004 – SV time is known
 0x0008 – Bit edge confirmed from signal
 0x0010 – Measured velocity
 0x0020 – Fine velocity if true, coarse velocity if false
 0x0040 – Channel has continuous lock
 0x0080 – SV is healthy
T
 0x0100 – Good SV data parity
n PS
 0x0200 – Last update from difference, not
measurement
34
 0x0400 – Cross correlation indication
 0x0800 – Multipath indication
om 8:
 0x1000 – Bad measurement, do not use
l.c :4
. c
te 13
SNR_DB 2 Signal-to-noise ratio, power (0.1 dB/bit); currently set to

.7 bk t
41 -b 1 a
same value as CNO_DB

3
15
ei .0
CNO_DB 2 Signal-to-noise in 1 Hz bandwidth (0.1 dB/bit)

0.
w 01
SV_TIME_SUB_MS 4 Sub ms SV time, range of 0 to 0.99999 (ms), float data

12
ou 3.
type
2.
zh 201
SV_TIME_MS 4 Ms of the week, range 0 to (604800000 -1) (ms)
SV_TIME_UNC_MS 4 SV time sigma estimate (ms), float data type
SV_SPEED 4 SV speed (m/s) +ve for -ve Doppler, float data type
SV_SPEED_UNC 4 SV speed sigma estimate (m/s), float data type
5.3.218.5 LOG_TYPE = 5 (Standalone parameters)
PRIVATE_1 1 Private – Internal use only
DEMOD 1 Demodulate almanac, ephemeris, time
REF_SV 1 Reference SV for SV time difference
REF_COUNT 4 Receiver’s reference ms counter value for SV time

difference
NUM_SVS 1 Number of SVs in the data

Log Record Formats
SV_PROC 1 Processing flag

 1 – Collect ephemeris for this SV
 2 – SV time/speed differences available for this SV
DELTA_TIME_MS 4 SV time - Ref SV time (msec), float data type
DELTA_TIME_UNC_MS 4 1-sided difference uncertainty (msec), float data type
DELTA_SPEED 4 SV speed - Ref SV speed (m/s), float data type
DELTA_SPEED_UNC 4 1-sided speed uncertainty (m/s), float data type
T
5.3.218.6 LOG_TYPE = 6 (Ephemeris information)
n PS
34
om 8:
NUM_SV 1 Number of SVs in ephemeris data base, 0 to 16
l.c :4
c
GPS_MSEC 4 Msec of the GPS week for the ephemeris data, range 0 to
.
te 13
(604800000 -1) (ms)
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
The log includes NUM_SVS occurrences of the following field.

2.
zh 201
SV_PRN 1 PRN number of missing SV in ephemeris
5.3.218.7 LOG_TYPE = 7 (Missing/old ephemeris information)
NUM_SV 1 Number of SVs in this log
GPS_MSEC 4 Msec of the GPS week for the ephemeris data, range 0 to
(604800000 -1) (ms)

Log Record Formats
SV_PRN 1 PRN number of the SV
AGE 1 Indicates the age of this SV’s ephemeris information, in units

of 15 min.
 0x00 – Indicates 0 to 15 min, etc.
 0xFF – Reserved to indicate ephemeris unavailable for
this SV
5.3.219 Memory Debug (LOG_CODE 0x1155)

This packet holds memory debug information.
T
n PS
alloc_num 4 Unique ID for this memory allocation operation
34
mem_ptr 4 Pointer to the allocated memory
om 8:
size 4
l.c :4 Size in bytes of the allocated memory
. c
te 13
alloc_tcb_id 4 ID of the task that performed this particular allocation
.7 bk t
alloc_line_num 4 Line number in the file where the call to allocate memory
41 -b 1 a
3
was made
15
ei .0
alloc_heap_used 4 Number of bytes used in the heap after the memory

0.
w 01
allocation
12
ou 3.
free_tcb_id 4 ID of the task that freed the allocated memory; will be zero
2.
zh 201
if the memory has not been freed yet
free_line_num 4 Line number in the file where the call to free memory was
made; will be zero if the memory has not been freed yet
free_heap_used 4 Number of bytes used in the heap just before the memory
was freed; will be zero if the memory has not been freed
yet
status 4 Field of type mem_debug_status_type that indicates the

status of the allocation. Possible values are:
 1 – MEM_DEBUG_STATUS_OK
 2 – MEM_DEBUG_STATUS_MULTIPLY_FREED
 3 – MEM_DEBUG_STATUS_BAD_ADDRESS
 4 – MEM_DEBUG_STATUS_OVERRUN
 5 – MEM_DEBUG_STATUS_POSSIBLE_LEAK
heap_name Variable Null-terminated string containing the name of the heap

from which memory was allocated
alloc_file_name Variable Null-terminated string containing the name of the file from
which the call to allocate memory was made
free_file_name Variable Null-terminated string containing the name of the file from
which the call to free memory was made; this string will be
empty if the memory has not been freed yet

Log Record Formats
5.3.220 System Level Task Profiling (LOG_CODE 0x1156)

This packet contains system-level information such as the number of tasks and their IDs, total
time samples elapsed, etc.
num_tasks 4 Number of tasks in the system (in REX's task list)
task_id 4 Unique identifier for the task
stack_size 4 Stack size (in number of bytes) for the task; if an ISR, this
will be the size of the system stack
task_sl 4 Stack limit value; this value will be the limit of the system
stack for an ISR
max_intlock_time 4 Maximum time, in units of microseconds, for which the

task or ISR has kept interrupts locked
T
max_intlock_lr 4 Value of the link register during the call to rex_int_lock that
n PS
corresponds to the maximum lock time for a task or ISR;
indicates from where the call to rex_int_lock was made
34
task_names Variable A null-terminated string representing the name of the task
om 8:
l.c :4
. c
te 13
5.3.221 Per Task Profiling (LOG_CODE 0x1157)
.7 bk t
41 -b 1 a
This packet contains profiling information for a specific task. The same packet is also used to
3
send profiling information about ISRs. Many of the fields will be zero or null for ISRs because
15
ei .0
the fields do not make sense in that context.

0.
w 01
12
ou 3.

2.
zh 201
task_id 4 Unique identifier for the task or ISR
sp 4 Stack pointer stored in the TCB of the task (except for the
current task, for which the contents of the stack pointer
register are returned)
sigs 4 Value of the sigs field from the task’s TCB; this represents
the mask of signals set for the task
wait 4 Value of the wait field from the task’s TCB; this represents
the mask of signals on which the task is currently waiting
pri 4 Value of the pri field from the task's TCB; this denotes the
priority of the task
time_samples 4 Measure of the CPU time used by the task; this field
contains the number of time samples during which this task
was running, if this is available; otherwise, this field is set
to the value of the slices field in the TCB; slices field
denotes the number of times a task has been scheduled.
Bit 2 of the flags field determines which of the two
meanings applies.

Log Record Formats

total_samples 4 Total number of time samples elapsed so far, or the total
number of scheduling operations performed by REX so far;
bit 2 of the flags field determines which of the two
meanings applies
flags 1 Field whose individual bits contain information about the

task; see Bit Organization for flags Field below
5.3.221.1 Bit Organization for flags Field

The bits in the flags field are organized as follows:
Bit Description
Bit [ 0 ] Interrupt state

 1 – Interrupts are locked
T
 0 – Interrupts are not locked
n PS
34
Bit [ 1 ] Suspend state
om 8:
 1 – Task is suspended (by way of a request via rex_suspend_task)
l.c :4
c
 0 – Task is not suspended
.
te 13
Bit [ 2 ]  0 – time_samples field contains the value of the slices field in the TCB; the
slices field is a count of the number of times a task has been scheduled,
.7 bk t
41 -b 1 a
and is an estimated measure of the CPU time allotted to a task

3
1 – time_samples field contains more accurate profiling information
15

ei .0
generated by using a timer to measure how long the task has run; typically,
0.
w 01
the bit is 0 if the build does not have software task profiling turned on
12
ou 3.
2.
zh 201
5.3.222 Reserved (LOG_CODE 0x1158 – 0x115D)

Log Record Formats
5.3.223 Position Engine Partial, Ver 2 (LOG_CODE 0x115E)

This holds information for the Position Engine used by gpsOne. All data is stored in unsigned
integer format unless specified otherwise. This is a subset of information contained in Position
Engine Full, Ver 2 (LOG_CODE 0x1154).
LOG_TYPE 1 Log type

 0 – Invalid
 11 – Navigation solution, partial
 12 – AA data, partial
 13 – Ephemeris database info, partial
 14 – Missing ephemeris info, partial
The PE_PARTIAL_DATA field will contain various
information based on the values of this field.
GPS_SESSION_COUNT 4 This counts the number of GPS fixes attempted and acts
T
as an ID for all the various logs (as described in
n PS
LOG_TYPE) pertaining to a certain fix
34
om 8:
RESERVED_2 4 l.c :4Reserved
. c
te 13
PE_PARTIAL_DATA Variable Contains various information based on the LOG_TYPE

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
The various PE partial data fields are shown in Section 5.3.223.1.
5.3.223.1 LOG_TYPE = 11 (Navigation solution, partial)
PE_PARTIAL_ DATA
Field
POS_FLAG 2 Position flag; values are:

 0x0000 – No info
 0x0001 – 2D fix
 0x0002 – 3D fix
 0x0004 – Overdetermined
 0x0010 – Differential correction
 0x0020 – Pos not updated
 0x0040 – External updated position
 0x0080 – Velocity fix included
T
 0x0100 – ITAR violation
n PS
 0x0200 – Solve for time fix
 0x0400 – Clock bias hold fix
34
 0x0800 – Position fix propagated over time
om 8:
 0x1000 – Convergence Failure
 0x2000 – Millisecond Error Detected
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
FAILURE_FLAG 2 Failure flag; values are:
ei .0
 0x0000 – No info
0.
w 01
 0x0001 – Matrix inversion failure

12
ou 3.

2.
zh 201
 0x0004 – May need more ephemerides

 0x0008 – High PDOP ( > 100.0 )
 0x0010 – FDIC error
 0x0020 – Clock only correction
 0x0040 – ITAR position violation
 0x0080 – ITAR velocity violation
 0x0100 – Failed to generate initial seed position
 0x0200 – Time error (Gps Week = UNKNOWN
 0x0400 – Millisecond error detected
FIX_TIME_MS 4 Milliseconds into week for fix,

range 0 to (604800000 -1) (ms)
POS_LALO 8*3 Filtered final position described by:

 Altitude (m)
Data type double is used for all of the above

Log Record Formats
PE_PARTIAL_ DATA
Field
RAW_POS_LALO 8*3 Unfiltered position described by:
 Altitude (m)
Data type double is used for all of the above; this field is
VEL_ENU 4*3 East, North, and Up velocity

 Veast (m/s)
 Vnorth (m/s)
 Vup (m/s)
POS_SIGMA 4 Position uncertainty (m), float data type
T
VEL_SIGMA 4 Velocity uncertainty (m/s), float data type
n PS
HDOP 2 Horizontal DOP (0.1/bit); this field is invalid if POS_FLAG
bit 0x0040 is set
34
NUM_SVS 1 Number of SVs used in the position calculation; this field
om 8:
is invalid if POS_FLAG bit 0x0040 is set
l.c :4
. c
te 13
TOTAL_SVS 1 Total number of SVs detected by searcher, including the
ones not used in position calculation; this field is invalid if
.7 bk t

41 -b 1 a
3
15
ei .0
The log includes TOTAL_SVS occurrences of the following fields.

0.
w 01
12
ou 3.

2.
zh 201
SV_PRN 1 PRN of SV; this field is invalid if POS_FLAG bit 0x0040 is

set
SV_WEIGHT 4 1/(weight used in position calculation), float data type

 0.0 indicates not used due to cross correlation flag
 Negative number indicates that SV is dropped due to
FDIC correction
This field is invalid if POS_FLAG bit 0x0040 is set
SV_RESIDUAL 4 Measurement residuals (m), float data type

Log Record Formats
5.3.223.2 LOG_TYPE = 12 (AA data, partial)

The units of AA data are in IS-801 format unless specified otherwise.
PE_PARTIAL_DATA
Field
NUM_SVS 1 Number of GPS SVs
ASSIST_GPS_MS 4 Time of applicability in msec of the GPS week, range

0 to (604800000 -1) (ms)
T
n PS
5.3.223.3 LOG_TYPE = 16 (Ephemeris information, partial)
34
PE_PARTIAL_DATA
om 8:
Field l.c :4
c
NUM_SVS 1 Number of SVs in ephemeris data base
.
te 13
.7 bk t

41 -b 1 a
3
15
ei .0

0.
w 01
12
SV_PRN 1 PRN number of existing SVs in ephemeris

ou 3.
2.
zh 201
5.3.223.4 LOG_TYPE = 17 (Missing ephemeris information, partial)
PE_PARTIAL_DATA
Field
NUM_SVS 1 Number of SVs missing from ephemeris data base
SV_PRN 1 PRN number of missing SVs in ephemeris
5.3.224 Reserved (LOG_CODE 0x115F)

Log Record Formats
5.3.225 WMS Read (LOG_CODE 0x1160)

This packet contains the result of a specific WMS message read request operation.
MSG_MODE 1 Message mode

 0x00 – WMSDIAG_MSG_MODE_FORCE_ CDMA
(force CDMA)
 0x01 – WMSDIAG_MSG_MODE_FORCE_ GW (force
GW; GW only)
 0x02 – WMSDIAG_MSG_MODE_AUTO_ SELECT
(autoselect)
 0x04 – WMSDIAG_MSG_MODE_INVALID_ VALUE
(invalid value; do not select, used when reading a
message if an invalid value is returned by the WMS
interface)
T
n PS
TRANSACTION_ID 1 User-specified identification number
STATUS 1 Status of the command
34
 0x00000000 – WMSDIAG_STATUS_READ_ OK (read
om 8:
l.c :4OK)
c
 0x00000001 – WMSDIAG_STATUS_READ_ FAIL (read
.
te 13
failed)
.7 bk t
41 -b 1 a
3
RESERVED_BYTE1 1 Reserved
15
ei .0
TAG_TYPE 4 State of a given message

0.
w 01
 0x00000000 – WMSDIAG_TAG_TYPE_ NONE (none)

12
ou 3.
 0x00000001 – WMSDIAG_MOBILE_
2.
zh 201
TERMINATE_READ (mobile-terminated and read)

TERMINATED_NOT_READ (mobile-terminated and not
read)
ORIGINATE_SENT (mobile-originated and sent)
ORIGINATE_NOT_SENT (mobile-originated and not
sent)
 0x00000005 – MSDIAG_MOBILE_
ORIGINATE_SENT_NOT_RECEIVED
(mobile-originated and sent but not received; GW only)
ORIGINATE_SENT_NOT_STORED (mobile-originated
and sent but not stored; GW only)
ORIGINATE_SENT_STORED (mobile-originated, sent,
and stored; GW only)
ORIGINATE_TEMPLATE (mobile-originated template)
 0x0000000A – WMSDIAG_TAG_TYPE_
INVALID_VALUE (invalid value; do not select, used
when reading a message if an invalid value is returned
by the WMS interface)

Log Record Formats
STORAGE_TYPE 4 Type of memory in which message is stored

 0x00000000 – WMSDIAG_STORAGE_ TYPE_NONE
(none)
 0x00000001 – WMSDIAG_STORAGE_
TYPE_GW_RAM (GW RAM; GW only)
 0x00000002 – WMSDIAG_STORAGE_ TYPE_SIM
(SIM card; GW only)
 0x00000003 – WMSDIAG_STORAGE_ TYPE_GW_NV
(GW NV; GW only)
TYPE_CDMA_RAM (CDMA RAM)
 0x00000005 – WMSDIAG_STORAGE_ TYPE_RUIM
(R-UIM card)
TYPE_CDMA_NV (CDMA NV)
T
TYPE_INVALID_VALUE (invalid value; do not select,
n PS
used when reading a message if an invalid value is
returned by the WMS interface)
34
om 8:
INDEX 4 Integer value representing the index of a message
l.c :4
. c
te 13
TELESERVICE_TYPE 4 If the upper 16-bits of this value are zero, the lower 16-bits
carry the value. See [S21] for an interpretation of the value
.7 bk t
carried on the lower 16-bits in this case.

41 -b 1 a
3
If the upper 16-bits of this value are nonzero, the values are
15
ei .0
mapped as the following type of service:

0.
w 01
 0x00010000 – WMSDIAG_TELESVC_
12
TYPE_IS91_PAGE (IS-91 page)

ou 3.
2.
zh 201
TYPE_IS91_VOICE_MAIL (IS-91 voicemail)

TYPE_IS91_SHORT_MESSAGE (IS-91 short message)
 0x00040000 – WMSDIAG_TELESVC_ TYPE_MWI
(MWI; voicemail notification through Message Waiting
Indication in CDMA/Analog mode)
TYPE_SMS_MESSAGE (broadcast SMS messages)
 0x0FFFFFFF – WMSDIAG_TELESVC_
TYPE_UNKNOWN (unknown)
ADDR_DIGIT_MODE 1 Address digit mode

 0x00 – WMSDIAG_ADDR_DIGIT_MODE_ 4_BIT (4-bit
mode; DTMF digits)
 0x01 – WMSDIAG_ADDR_DIGIT_MODE_ 8_BIT (8-bit
mode)
 0x03 – WMSDIAG_ADDR_DIGIT_MODE_

Log Record Formats

ADDR_NUM_MODE 1 Address number mode
 0x00 – WMSDIAG_NOT_DATA _
NETWORK_ADDRESS (not data network address)
 0x01 – WMSDIAG_DATA _NETWORK_ ADDRESS
(data network address)
 0x03 – WMSDIAG_ADDR_NUM_MODE_
ADDR_NUM_TYPE 1 Address number type; see [S15]
ADDR_NUM_PLAN_ 1 Number plan; see [S15]

TYPE
SUBADDR_TYPE 1 Subaddress type; see [S15]
T
n PS
DATA_FORMAT 1 Data format
 0x00 – WMSDIAG_DATA_FORMAT_CDMA (CDMA
34
[IS-95]; encoded bearer data as defined in [S15]
 0x01 – WMSDIAG_DATA_FORMAT_ ANALOG_CLI
om 8:
(analog CLI [IS-91])
l.c :4
c
 0x02 – WMSDIAG_DATA_FORMAT_
.
te 13
ANALOG_VOICE_MAIL (analog voicemail [IS-91])
 0x03 – WMSDIAG_DATA_FORMAT_ ANALOG_SMS
.7 bk t
41 -b 1 a
(analog SMS [IS-91])

3
 0x04 – WMSDIAG_DATA_FORMAT_
15
ei .0
ANALOG_AWISMS (analog AWISMS [IS-95 alert with

0.
w 01
information SMS]; encoded bearer data as defined in

12
[S15]
ou 3.
 0x05 – WMSDIAG_DATA_FORMAT_MWI (MWI;

2.
zh 201
Message Waiting Indication as voicemail; 1-byte data

which contains the voicemail count)
 0x06 – WMSDIAG_DATA_FORMAT_ GW_PP_SMS
(GW point-to-point SMS; GW only; encoded TPDU as
defined in [S16])
 0x07 – WMSDIAG_DATA_FORMAT_GW_ CB_SMS
(GW CB SMS; GW only; encoded CB-SMS page as
defined in [S17])
 0x09 – WMSDIAG_DATA_FORMAT_ INVALID_VALUE
interface)

Log Record Formats

TPDU_TYPE (GW only) 1 TPDU type
 0x00 – WMSDIAG_TPDU_TYPE_DELIVER (deliver)
 0x01 – WMSDIAG_TPDU_TYPE_
DELIVER_REPORT_ACK (deliver report Ack)
 0x02 – WMSDIAG_TPDU_TYPE_
DELIVER_REPORT_ERROR (deliver report error)
 0x03 – WMSDIAG_TPDU_TYPE_SUBMIT (submit)
 0x04 – WMSDIAG_TPDU_TYPE_SUBMIT_
REPORT_ACK (submit report Ack)
REPORT_ERROR (submit report error)
STATUS_REPORT (submit status report)
 0x07 – WMSDIAG_TPDU_TYPE_ COMMAND
(command)
 0x08 – WMSDIAG_TPDU_TYPE_NONE (none)
T
 0x0A – WMSDIAG_TPDU_TYPE_INVALID_ VALUE
n PS
34
interface)
om 8:
l.c :4
. c
IS_BROADCAST (GW 1 Broadcast
te 13
only)  0x00 – WMSDIAG_NOT_IS_BROADCAST

.7 bk t
(not broadcast)
41 -b 1 a
 0x01 – WMSDIAG_IS_BROADCAST (broadcast)

3
15
ei .0
0.
w 01
SUBADDR_ODD_OR_ 1 Specifies whether odd or even number of digits in the

12
ou 3.
EVEN subaddress
2.
zh 201
 0x00 – WMSDIAG_SUBADDR_EVEN (even)

 0x01 – WMSDIAG_SUBADDR_ODD (odd; ignore last
4-bits of subaddress in 4-bit mode)
TL_ACK_NEEDED 1 Determines if client needs a confirmation on whether the

message was received
 0x00 – WMSDIAG_TL_ACK_NO_ CONFIRMATION
(no confirmation)
 0x01 – WMSDIAG_TL_ACK_ CONFIRMATION_REQ
(confirmation required)
SERVICE_PRESENT 1 Determines if service is present

 0x00 – WMSDIAG_NO_SERVICE_ PRESENT (no
service)
 0x01 – WMSDIAG_SERVICE_PRESENT (service
present)
IS_MO 1 Mobile message

 0x00 – WMSDIAG_MOBILE_TERMINATE_ MSG
(mobile-terminated message)
 0x01 – WMSDIAG_MOBILE_ORIGINATE_ MSG
(mobile-originated message)

Log Record Formats

SERVICE_TYPE 4 Type of service; see [S15]
ADDR_NUM_DIGITS 2 Number of digits in address (first part of the buffer), should

be < 256
SUBADDR_NUM_ 2 Number of digits in the subaddress (second part of the

DIGITS buffer), should be < 256 (set to 0 if no subaddress)
USER_DATA_LENGTH 4 Length of the data (third part of the buffer)
DATA ADDR Contains the information regarding the 3-array structures

(ADDR_NUM_ used for this packet
DIGITS number of If we let the first byte of the packet be byte 0 and,
bytes) +
ADDR_NUM_DIGITS = A
SUBADDR
(SUBADDR_ SUBADDR_NUM_DIGITS = S
NUM_DIGITS USER_DATA_LENGTH = D
number of bytes) Then:
T
n PS
USER_DATA 1 – Bytes 0 → (A -1) represent the address for the message
(USER_DATA_ (the first A bytes of the packet).
34
LENGTH number
2 – Bytes A → (A + S - 1) represent the subaddress for the
of bytes)
message (the next S bytes of the packet).
om 8:
3 – Bytes (A + S) → (A + S + D - 1) represent the raw data
l.c :4
. c
(the last D bytes of the packet). For the actual format of the
te 13
raw data, see DATA_FORMAT.

.7 bk t
41 -b 1 a
3
15
ei .0
5.3.226 Triage, Ver 2 (LOG_CODE 0x1161)

0.
w 01
12
ou 3.
This holds information for fingers before and after finger assignment algorithm (triage) executes.
2.
zh 201
LOG_HDR_TYPE 4 Log header
FING_CNT 1 Number of active fingers
Reserved 3 To force structure alignment
PRETRIAGE 8 * FING_CNT Report the finger information before triage executes; see
POSTTRIAGE 8 * FING_CNT Report the finger information after triage executes; see
5.3.226.1 Triage finger information

This holds the finger status information.
F_POS 4 Absolute finger position
F_PILOT 2 Finger’s pilot assignment
F_SECT 1 Finger’s sector in Aset assignment
F_RSSI 1 For each finger, indicates the current RSSI value

Log Record Formats
5.3.227 RLP Rx FDCH frames (LOG_CODE 0x1162)

This logs the RLP frames carried over the forward fundicated channels such as F-FCH and
F-DCCH.
Payload n COUNT occurrences of the following table
PHY_CHAN 4  0 – FCH
T
 1 – DCCH
n PS
 12 – PDCH
34
MUX_PDU 3 0 – MuxPdu1
om 8:

1 – MuxPdu2
l.c :4

. c
te 13
RESERVED 1 Reserved
.7 bk t
41 -b 1 a
3
PHY_CHAN_RATE 14  96 – 9600 bps
15
ei .0
 144 – 14400 bps

0.
w 01
12
ou 3.
TIME_DELTA 1  0 – If same frame time as previous RLP 3 frame

2.
zh 201
Reserved 1 Reserved
FRAME_LEN 16 Bits in the physical layer

171 – bits in RS 1 FCH/DCCH
TAIL 2 Number of bytes logged from the end of the RLP 3 frame;
for FCH/DCCH, includes type bits at end of frame
HEAD 6 Number of bytes logged from the front of the RLP 3 frame

Log Record Formats
5.3.228 RLP Tx FDCH frames (LOG_CODE 0x1163)

This logs the RLP frames carried over the reverse fundicated channels such as R-FCH and
R-DCCH.
Payload n COUNT occurrences of the following table
5.3.228.1 COUNT occurrences
PHY_CHAN 4  0 – FCH
T
 1 – DCCH
n PS
 12 – PDCH
34
MUX_PDU 3 0 – MuxPdu1
om 8:

1 – MuxPdu2
l.c :4

. c
te 13
Reserved 1 Reserved
.7 bk t
41 -b 1 a
3
PHY_CHAN_RATE 14  96 – 9600 bps
15
ei .0
 144 –14400 bps

0.
w 01
12
ou 3.
TIME_DELTA 1  0 – If same frame time as previous RLP 3 frame

2.
zh 201
Reserved 1 Reserved
FRAME_LEN 16 Bits in the physical layer

171 – bits in RS 1 FCH/DCCH
TAIL 2 Number of bytes logged from the end of the RLP 3 frame;
for FCH/DCCH, includes type bits at end of frame
HEAD 6 Number of bytes logged from the front of the RLP 3 frame

Log Record Formats
5.3.229 Streaming Reception Statistics (LOG_CODE 0x1164)

This holds the data-received statistics of the streaming client. It is generated whenever the client
sends out an RTCP RR due to RTCP RR timer interval expiry.
channelNo 1 Channel number for which the statistics is being generated
chDataRxRateInBPS 4 Reception rate for the channel over the most recent RTCP
Interval
totalDataRxRateInBPS 4 Reception rate computed over the most recent RTCP

Interval, across all RTP channels
duration_in_buffer 4 Total duration currently residing in the client for this channel
that can be rendered
buf_low_mark_duration 4 Watermark that will trigger a RTCP Receiver Report to be

sent out once the data buffered goes below this watermark
T
n PS
buf_high_mark_duration 4 Watermark that will trigger a RTCP Receiver report to be
sent out once the data buffered goes above this watermark
34
durationIsBelowLowMark 1  0 – Default
om 8:

l.c :4 1 – If the buffered duration is below the low watermark
. c
te 13
durationIsAboveHighMark 1  0 – Default
.7 bk t
41 -b 1 a
 1 – If the buffered duration is above high watermark

3
15
ei .0
0.
w 01
12
5.3.230 RTSP Describe Request (LOG_CODE 0x1165)

ou 3.
2.
zh 201
This holds the RTSP Describe request that the Streaming client sends the server at the start of a
streaming session.
cnt 4 Length of the array RTSP_BYTE that holds the RTSP

Describe request
rtsp_byte cnt Character array that holds the RTSP Describe from the
client
5.3.231 RTSP Setup Request (LOG_CODE 0x1166)

This holds the RTSP Setup request that the streaming client sends the server during a streaming
session setup.

Setup request
rtsp_byte cnt Character array that holds the RTSP Setup request from
the client

Log Record Formats
5.3.232 RTSP Play Request (LOG_CODE 0x1167)

This holds the RTSP Play request that the streaming client sends to the server during a streaming
session.
cnt 4 Length of the array RTSP_BYTE that holds the RTSP Play
request
rtsp_byte cnt Character array that holds the RTSP Play request from the
client
5.3.233 RTSP Pause Request (LOG_CODE 0x1168)

This holds the RTSP Pause request that the streaming client sends to the server to pause a
streaming session.
T
n PS
34
Pause request
om 8:
l.c :4
c
rtsp_byte cnt Character array that holds the RTSP Pause request from
.
te 13
the client
.7 bk t
41 -b 1 a
5.3.234 RTSP Teardown Request (LOG_CODE 0x1169)

3
15
ei .0
This holds the RTSP Teardown request that the streaming client sends to the server to end a
0.
w 01
12
session.
ou 3.
2.
zh 201

Teardown request
rtsp_byte cnt Character array that holds the RTSP Teardown request
from the client
5.3.235 RTSP Server Response (LOG_CODE 0x116A)

This holds the RTSP response from the server to the client.

response from the server
rtsp_byte cnt Character array that holds the RTSP response message
from the server to the client

Log Record Formats
5.3.236 RTCP Receiver Report (LOG_CODE 0x116B)

This holds the data pertaining to the RTCP Receiver Report (RR) which the client sends out to
the server. These reports are sent out when the RTCP RR timer interval expires, when the
buffered data hits the high/low watermark, etc.
channelNo 1 Channel number
sourceSSRC 4 SSRC identifier for this channel
fractionLost 1 Fraction of data lost on this channel
cumulativeNumberOf 4 Number of packets lost on a cumulative basis on this

PacketsLost channel
highestSequenceNumber 4 Highest sequence number of the packet received on this

Received channel
T
interarrivalJitter 4 Jitter rate between two successive arrivals on this channel
n PS
lastSR 4 Middle 32 bits of the 64 bits in the NTP timestamp in the
34
most recently received Sender Report
om 8:
delaySinceLastSR 4 Time since last Sender Report was received
l.c :4
. c
cumulativeBytesReceived 4 Number of bytes received on a cumulative basis
te 13
.7 bk t
41 -b 1 a
5.3.237 RTCP Sender Report (LOG_CODE 0x116C)

3
15
ei .0
This holds the data pertaining to the RTCP Sender Report (SR). The server sends this out at
0.
w 01
regular intervals.
12
ou 3.
2.
zh 201
senderSSRC 4 SSRC of the sender
NTP_timestamp_low 4 Lower NTP timestamp of the packets
NTP_timestamp_high 4 Higher NTP timestamp of the packets

RTP_timestamp 4 Timestamp of the RTP packet
packet_count 4 Total count of packets sent
octet_count 4 Total count of octets sent as packets

Log Record Formats
5.3.238 RTP Statistics (LOG_CODE 0x116D)

This holds the RTP statistics for the received RTP data. It is generated whenever the RTP
Statistics logging timer expires, which is set to 500 ms.
sizeOfThisRTPPacket 4 Size of this RTP packet
totalNoOfPacketsRcvdOn 4 Cumulative number of RTP packets received on this

ThisChannel channel
currentNoOfPackets 4 Current number of packets residing on this channel waiting

BufferedOnThisChannel to be processed
durationOfBufferedDataIn 4 Presentation duration for

Msec currentNoOfPacketsBufferedOnThisChannel
T
endOfStreamDetected 1 Flag to note that the end of the stream has been detected
n PS
on this channel
34
Jitter 4 Network jitter (in timestamp units)
om 8:
dataRate 4l.c :4 Channel Data rate in BPS
. c
te 13
5.3.239 SDP File (LOG_CODE 0x116E)

.7 bk t
41 -b 1 a
3
This holds contents of the SDP that is used for the streaming session.
15
ei .0
0.
w 01

12
ou 3.
Cnt 4 Length of the SDP text stored in the character array SDP_BYTE
2.
zh 201
Sdp_byte Variable length Character array that holds SDP text

character array
5.3.240 RTSP Client Response (LOG_CODE 0x116F)

This holds the RTSP response that the client sends out in response to an RTSP request from the server.
Cnt 4 Length of the array RTSP_BYTE that holds the RTSP Client
response
rtsp_byte Variable length Character array that holds the RTSP response from the client
character array

Log Record Formats
5.3.241 RTP Header (LOG_CODE 0x1170)

This holds the header of the received RTP packet. This is generated when the RTP data packet is
stored in the client’s buffers internally, ready to be processed.
size 4 Length of the RTP header and also the length of the array
RTP_CONTENT that holds the RTP header
rtp_content size Byte array that holds the header of the RTP packet
5.3.242 RTP Packet (LOG_CODE 0x1171)

This holds the entire RTP packet that is stored in the client’s internal buffers, ready to be
processed.
T
n PS
size 4 Length of the RTP packet and also the length of the array
34
RTP_CONTENT that holds the entire RTP packet
om 8:
rtp_content size Byte array that holds the RTP packet
l.c :4
. c
te 13
5.3.243 RTP Audio Sample (LOG_CODE 0x1172)

.7 bk t
41 -b 1 a
3
This holds the audio sample that is being fed to the audio thread to be played out.
15
ei .0
0.
w 01

12
ou 3.
SAMPLE_INFO 14 Media sample information as described below

2.
zh 201
size 4 Length of the array RTP_CONTENT that holds the audio

sample
rtp_content size Byte array that holds the Audio sample data
Expansion of SAMPLE_INFO
trackno 1 Media track number

rtp_timestamp 4 RTP timestamp units
display_timestamp 4 RTP timestamp in milliseconds scale
enh_video_layer_no 1 Always set to 0 in case of RTP audio samples
rawts 4 Raw timestamp of this audio sample

Log Record Formats
5.3.244 RTP Video Sample (LOG_CODE 0x1173)

This holds the video sample that is being fed to the video thread to be decoded and rendered.
SAMPLE_INFO 14 Media sample info as described below
size 4 Length of the array RTP_CONTENT that holds the video

sample
rtp_content size Byte array that holds the video sample data
Expansion of SAMPLE_INFO
trackno 1 Media track number
T
n PS
rtp_timestamp 4 RTP timestamp units
34
display_timestamp 4 RTP timestamp in milliseconds scale
om 8:
enh_video_layer_no 1 Set to nonzero for samples from enhanced video layer;
l.c :4
c
otherwise, set to 0
.
te 13
rawts 4 Raw timestamp of this video sample

.7 bk t
41 -b 1 a
3
5.3.245 Searcher4 – 1X (LOG_CODE 0x1174) (obsolete)
15
ei .0
0.
w 01
This has been replaced by LOG_CODE 0x119B (see Section 5.3.276).

12
ou 3.
2.
zh 201
5.3.246 Sleep Statistics (LOG_CODE 0x1175) (obsolete)

5.3.247 Service Configuration, Version 3 (LOG_CODE 0x1176)

This holds the information for the service configuration.
FOR_MUX_OPTION 16 Forward fundamental and dedicated control channel

multiplex option
REV_MUX_OPTION 16 Reverse fundamental and dedicated control channel

multiplex option
FOR_NUM_BITS 8 Set of number of bits per frame of the forward

fundamental channel
REV_NUM_BITS 8 Set of number of bits per frame of the reverse

fundamental channel

Log Record Formats

CHANNELS 8 Channel mask:
 Bit 1 – FCH is active
 Bit 2 – DCCH is active
 Bit 3 – F-SCH is active
 Bit 4 – R-SCH is active
 Bit 5-8 – Reserved
NUM_CON_REC 8 Number of service option connection records
NUM_LPM_ENTRIES 8 Number of logical-to-physical mapping entries
NUM_LTU_TABLES 8 Number of LTU tables included
If FCH is active, include the following two fields:
FOR_FCH_RC 8 Forward fundamental channel radio configuration
T
REV_FCH_RC 8 Reverse fundamental channel radio configuration
n PS
If DCCH is active, include the following two fields:
34
FOR_DCCH_RC 8 Forward dedicated control channel radio
om 8:
l.c :4 configuration
. c
REV_DCCH_RC 8 Reverse dedicated control channel radio
te 13
configuration
.7 bk t
41 -b 1 a
If F-SCH is active, include the following fields:

3
15
ei .0
SCH_MUX_HI 8 Forward supplemental channel multiplex option, high

0.
w 01
byte
12
ou 3.
SCH_MUX_LO 8 Forward supplemental channel multiplex option, low

2.
zh 201
byte
SCH_RC 8 Forward supplemental channel radio configuration

FRAME_SIZE 8  Bit 1 – 40 ms frames are used

 Bit 2 – 80 ms frames are used
FOR_SCH_FRAME_ OFFSET 8 Forward supplemental channel frame offset
If R-SCH is active, include the following fields:
SCH_MUX_HI 8 Reverse supplemental channel multiplex option, high

byte
SCH_MUX_LO 8 Reverse supplemental channel multiplex option, low

byte
SCH_RC 8 Reverse supplemental channel radio configuration

Log Record Formats

FRAME_SIZE 8  Bit 1 – 40 ms frames are used

 Bit 2 – 80 ms frames are used
REV_SCH_FRAME_OFFSET 8 Reverse supplemental channel frame offset
NUM_CON_REC of the following fields:
CON_REF 8 Connection reference
T
n PS
SERVICE_OPTION_HI 8 High byte of service option
SERVICE_OPTION_LO 8 Low byte of service option
34
FOR_TRAFFIC 8 Traffic type used for forward link
om 8:
l.c :4
c
REV_TRAFFIC 8 Traffic type used for reverse link
.
te 13
UI_ENCRYPT_ MODE 8 Encryption mode indicator for user information

privacy
.7 bk t
41 -b 1 a
3
15
ei .0
RLP_BLOB_LEN 8 RLP information block of bits length

0.
w 01
12
ou 3.
QOS_PARMS_LEN 8 Length of the block of QoS parameters

2.
zh 201
RLP_BLOB 0 or 8 x RLP Information block

RLP_BLOB_LEN
QOS_PARMS 0 or 8 x Quality of Service parameters

QOS_PARMS_
LEN
NUM_LPM_ENTRIES of the following fields:
LOGICAL_ RESOURCE 8 Logical resource identifier
PHYSICAL_ RESOURCE 8 Physical resource identifier
FORWARD_REVERSE_FLAG 8  Bit 1 – Forward mapping indicator

 Bit 2 – Reverse mapping indicator
PRIORITY 8 Multiplexing priority
NUM_LTU_TABLES occurrences of the following LTU records, including the NBITS_IDX,

LTU_LEN_HI and LTU_LEN_LO:
LTU_TABLE_ID 8 LTU table identifier
NUM_ROWS 8 Number of LTU rows

Log Record Formats

NUM_ROWS instances of the following records:
NBITS_IDX 8 SCH number of information bits index
LTU_LEN_HI 8 High LTU length; number of LTUs per physical layer

supplemental channel frame
LTU_LEN_LO 8 Low LTU length; number of LTUs per physical layer

supplemental channel frame
If NUM_LTU_TABLES > 0, include the following fields:
FSCH0_LTU_TAB_ID 8 Forward Supplemental Channel LTU Table ID; set to

0 if the F-SCH is to use default LTU sizes or if F-SCH
is not part of the SCR
RSCH0_LTU_TAB_ID 8 Reverse Supplemental Channel LTU Table ID; set to

0 if the R-SCH is to use default LTU sizes or if
R-SCH is not part of the SCR
T
n PS
If DCCH is active, include the following fields:
34
FOR_DCCH_MUX_OPTION 16 Forward DCCH MUX option
om 8:
REV_DCCH_MUX_OPTION 16
l.c :4 Reverse DCCH MUX option
. c
te 13
5.3.248 Searcher4 – 1xEV-DO (LOG_CODE 0x1177)

.7 bk t
41 -b 1 a
3
This packet holds information about Searcher4 searches for mobiles with 1xEV-DO. The field
15
ei .0
formats and descriptions are the same as LOG_CODE 0x1174.

0.
w 01
12
ou 3.
5.3.249 Searcher4 – AFLT (LOG_CODE 0x1178)

2.
zh 201
This packet holds information about Searcher4 searches for mobiles with AFLT. The field
formats and descriptions are the same as LOG_CODE 0x1174.
5.3.250 Enhanced Finger Information (LOG_CODE 0x1179) (obsolete)

This has been replaced by LOG_CODE 0x119A (see Section 5.3.275).
5.3.251 Obsolete (LOG_CODE 0x117A)
5.3.252 WMS Set Routes (LOG_CODE 0x117B)

This packet indicates the status for the routes of the various message classes and whether it was
successful or failed. It does not return the actual routes and storage types for each message class.

Log Record Formats
TRANSACTION_ID 1 User-specified identification number
STATUS 1 Status
 0x00 – WMSDIAG_STATUS_SET_ROUTES_OK (set
routes was successful)
 0x01 – WMSDIAG_STATUS_SET_ROUTES_FAIL (set
routes failed)
5.3.253 Reserved (LOG_CODE 0x117C – 0x117E)
T
n PS
5.3.254 1xEV-DO Multicast Packet Rate Metrics (LOG_CODE 0x117F)
34
This contains information about the Multicast and Control Channel packet CRC pass and failure
counts for each packet rate. Also included are metrics on the number of slots taken to decode
om 8:
each rate for Multicast packets. Data for this packet is both sampled and logged every second.
l.c :4
. c
te 13
The counters are reset at the start of the session.
.7 bk t
41 -b 1 a

3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201
BC38400_Good 4 Counter for 38.4 k traffic channel packets with good CRC
BC38400_Bad 4 Counter for 38.4 k multicast packets with bad CRC
BC76800_Good 4 Counter for 76.8 k multicast packets with good CRC

BC307200Short_Good 4 Counter for 302.2 k (short) multicast packets with good

CRC
BC307200Short_Bad 4 Counter for 302.2 k (short) multicast packets with bad CRC
BC307200Long_Good 4 Counter for 307.2 k (long) multicast packets with good

CRC
BC307200Long_Bad 4 Counter for 307.2 k (long) multicast packets with bad CRC

Log Record Formats


CRC
BC614400Short_Bad 4 Counter for 614.4 k (short) multicast packets with bad CRC
BC614400Long_Good 4 Counter for 614.4 k (long) multicast packets with good

CRC
BC614400Long_Bad 4 Counter for 614.4 k (long) packets decoded in 2 slots
BC921600_Bad 4 Counter for 921.6 k multicast packets decoded with bad

CRC
T
n PS
CRC
34
BC1228800Short_Bad 4 Counter for 1228.8 k (short) multicast packets with Bad
CRC
om 8:
BC1228800Long_Good 4
l.c :4
Counter for 1228.8 k (long) multicast packets with good
. c
CRC
te 13
BC1228800Long_Bad 4 Counter for 1228.8 k (long) multicast packets with bad

.7 bk t
41 -b 1 a
CRC
3
15
ei .0

0.
w 01

12
ou 3.
BC2457600_Good 4 Counter for 2457. k multicast packets with good CRC

2.
zh 201
BC2457600_Bad 4 Counter for 2457. k multicast packets with bad CRC
BCRate38400[0-15] 4 * 16 Counter for 38.4 k packets decoded in 1 to 16 slots
BCRate76800[0-7] 4*8 Counter for 76.8 k packets decoded in 1 to 8 slots

BCRate307200Short[0-1] 4*2 Counter for 302.2 k (short) packets decoded in 1 to 2 slots
BCRate307200Long[0-3] 4*4 Counter for 307.2 k (long) packets decoded in 1 to 4 slots
BCRate614400Short 4 Counter for 614.4 k (short) packets decoded in 1 slot
BCRate1228800Short 4 Counter for 1228.8 k (short) packets decoded in 1 slot
BCRate1843200 4 Counter for 1843.2 k packets decoded in 1 slot
BCRate2457600 4 Counter for 2457. k packets decoded in 1 slot

Log Record Formats
5.3.255 1xEV-DO Multicast Physical Channel Metrics (LOG_CODE

0x1180)
This contains counts of CRC pass/failures for MAC packets on each physical channel
(interlace-multiplex pair). Data for this packet is both sampled and logged every 2 seconds. The
counters are reset at the start of the session.
MultiplexCount 1 Number of multiplexes configured; valid values are 4, 8,

and 16
MonitoredIMPairs 8 Bitfield in which each bit identifies whether an

interlace-multiplex pair is being monitored by the AT;
rightmost (MultiplexCount x 4) bits are valid
MultiplexCount x 4 of the following (i.e., one record for each physical channel)
T
n PS
34
CRCPass 4 Number of multicast MAC packet CRC passes on this
om 8:
physical channel (interlace-multiplex pair)
l.c :4
. c
CRCFail 4 Number of multicast MAC packet CRC failures on this
te 13
physical channel (interlace-multiplex pair)

.7 bk t
41 -b 1 a
3
5.3.256 1xEV-DO Multicast ECB Status (LOG_CODE 0x1181)
15
ei .0
0.
w 01
This contains information on each error control block (ECB) completed. Data for this packet is
12
ou 3.
both sampled and logged each time an ECB column is completed.

2.
zh 201
ChannelId 1 Value assigned by AT to identify this multicast channel;

actual value is arbitrary
FlowId 4 ID of active flow being transmitted on this logical channel;

there may be other flows associated with this channel
OuterCode 1 This ECB's outer code parameter, as defined by [S18]
ColumnsPerECB 1 Column number of ECB
SecPacketIncluded 1 Indicates whether an IS-856 security packet was included

in the ECB column; 1 = yes, 0 = no
Reserved 1 4 Reserved
ColumnsPerECB of the following
DataErasures 1 Number of erasures in data packets for this column
TotalErasures 1 Total number of erasures including parity packets for this

column

Log Record Formats
5.3.257 1xEV-DO Multicast Logical Channel Metrics (LOG_CODE

0x1182)
This contains information on each active multicast logical channel. Data for this packet is both
sampled and logged every 2 seconds. The counters are reset at the start of the session.
LogicalChanCount 1 Number of records in this packet (one for each logical

channel)
Repeat for each logical channel
ChannelId 1 ID assigned to this logical channel by the AT; value is
T
arbitrary
n PS
FlowID 4 ID of active flow transmitted on this channel; there may be
other flows associated with this channel.
34
MACPacketsCRCPassed 4 Number of MAC packets received with passing CRCs
om 8:
l.c :4
c
MACPacketsCRCFailed 4 Number of MAC packets received with failing CRCs
.
te 13
MACPacketsMissed 4 Number of MAC packets missed

.7 bk t
41 -b 1 a
ECBNoErasures 4 Number of ECB's that have no erasures

3
15
ei .0
ECBDecodePass 4 Number of decoded ECBs

0.
w 01
ECBDecodeAbort 4 Number of ECBs that were unable to decode

12
ou 3.
MACPacketsDelivered 4 Number of MAC packets delivered to upper layer

2.
zh 201
SecurityLayerPackets 4 Number of IS-856 Security Layer Packets received
MACReserved1 4 Reserved field for additional MAC information
MACReserved2 4 Reserved field for additional MAC information
SecPacketCount 4 Number of MCS Security Packets received

SecBytecount 4 Number of bytes received by MCS Security Layer
SecReserved1 4 Reserved field for additional security metrics
SecReserved2 4 Reserved field for additional security metrics
FramingPacketCount 4 Number of framing packets received
FramingByteCount 4 Number of framing bytes received
PacketsDelivered 4 Number of higher layer packets delivered
PacketsDropped 4 Number of higher layer packets dropped due to bad FCS
BytesDelivered 4 Total number of bytes delivered
FramingReserved1 4 Reserved field for additional framing information
FramingReserved2 4 Reserved field for additional framing information

Log Record Formats
5.3.258 1xEV-DO Debug Display (LOG_CODE 0x1183)

This contains 1xEV-DO information for debug display. Data for this packet is both sampled and
logged asynchronously every 990 ms.
Channel 2 Bit 0 to Bit 10 – Channel number

Bit 11 to Bit 15 – Band class
RxAGC0 1 Signed; total receive power as seen by Antenna0, in dBm
RxAGC1 1 Signed; total receive power as seen by Antenna1, in dBm
TxAGC 1 Signed; transmit signal strength in the Connected state, in

dBm (128 dBm indicates the value is not applicable)
ServingPN 2 PN offset of the serving active set pilot
AsetPN[6] 2*6 PN offsets for all pilots in the active set; 0xFFFF indicates
T
an invalid value
n PS
SleepMode 1 1xEV-DO Sleep mode; valid values are:
34
 0 – 426 ms sleep (SCC)
om 8:
 1 – 5.12 sec sleep (CCC)
l.c :4
c
 2 – 40.96 sec sleep (long sleep)
.
te 13
 3 – Until reacquisition handoff
 4 – Release A enhanced idle protocol sleep (see
.7 bk t
Release A SCI field description)

41 -b 1 a
3
15
ei .0
SCI 1 Bit 0 to Bit 2 – Release 0 slot cycle SCI

0.
w 01
12
This indicates the period for which the AT has gone to

ou 3.
sleep; valid values are:

2.
zh 201
 0 – 5.12 sec
 1 – 10.24 sec
 2 – 20.48 sec
 3 – 40.96 sec
 4 – Not applicable (possible if the AT is operating on
Release A SCIs)
Bit 3 to Bit 7 – Release A slot cycle SCI

This indicates the Slot Cycle Index for which the AN has
assigned the AT to sleep. This is supported for Release A
only.
For 0 ≤ relA_sci ≤ 6:
Sleep Period = (2^relA_sci) x 4 x 80 / 48 ms
For 7 ≤ relA_sci ≤ 15:
Sleep Period = (2^(relA_sci-7)) x 4 x 80 / 48 ms
nomenclature
RxDiv 1 Receive diversity; valid values are:

 0 – Single diversity (Rx0 only)
 1 – Dual diversity

Log Record Formats
ProtState 1 Summary of the AT protocol states; valid values are:

 0 – Inactive (AT switched to 1X or is in Deep Sleep)
 2 – Sync
 3 – Idle
 4 – Access
 5 – Connected
SessionState 1 Summary of the Session layer states; valid values are:

 0 – Closed
 1 – AMP setup
 2 – AT-initiated negotiation
 3 – Initiated negotiation
 4 – Open
T
n PS
UATIInfo 4 Bit 0 to Bit 23 – 24-bit UATI for the AT
34
Bit 24 to Bit 31 – Color code of the subnet on which AT is
located
om 8:
l.c :4
c
StreamConfig[0-3] 2*4 Stream configuration (Rel0). Valid values for each stream
.
are:
te 13
 0x0000 – Default signaling application

.7 bk t
 0x0001 – Default packet application for AN

41 -b 1 a
3
 0x0002 – Default packet application for SN
15
ei .0
 0x0003 – Default test application

0.
w 01
 0xFFFF – Stream not used

12
 0x0BAD – No information
ou 3.
2.
zh 201

Log Record Formats
5.3.259 1xEV-DO Tuneaway Information (LOG_CODE 0x1184)

This contains the information related to tuneaway events where the 1xEV-DO radio is
temporarily suspended to allow the AT to look for 1X pages. Data for this packet is sampled
asynchronously; it triggers every time there is an event related to an 1xEV-DO tuneaway. The
data is logged at the conclusion of each tuneaway.
Version 1 Version number of the packet
StartTCTimeStamp 8 Timestamp of the start of traffic transmission
TuneAwayTimeStamp 8 Timestamp at the decision to tune away the radio
TuneBackTimeStamp 8 Timestamp at the decision to tune back
ResumeTimeStamp 8 Timestamp at the resumption of traffic transmission
TuneAwayReason 1 Reason for tuneaway
T
n PS
 0 – GPS
 1 – 1X paging
34
 2 – Unknown
om 8:
l.c :4
c
PerformedOFS 1 Whether an OFS was performed
.
te 13
StartOFSTimeStamp 8 Time the OFS started if we performed an OFS

.7 bk t
41 -b 1 a
TuneAwayCountSinceReset 4 Total number of tuneaways since last reset

3
15
ei .0
TuneBackCountSinceReset 4 Total number of tunebacks since last reset

0.
w 01
TrafficSuspendTimeSince 4 Total traffic suspend time since last reset

12
ou 3.
Reset
2.
zh 201
TrafficTimeSinceReset 4 Total traffic time since last reset

TuneAwayTimeSinceReset 4 Total tuneaway time since last reset
TuneAwayCountSinceCall 4 Total number of tuneaways since last call
TuneBackCountSinceCall 4 Total number of tunebacks since last call

TrafficSuspendTimeSince 4 Total traffic suspended time since last call
Call
TrafficTimeSinceCall 4 Total traffic time since last call
TuneAwayTimeSinceCall 4 Total tuneaway time since last call
Reserved 0 or more Reserved; may expand in the future

Log Record Formats
5.3.260 1xEV-DO Tuneaway RRI Information (LOG_CODE 0x1185)

This logs information related to RRI information before and after an 1xEV-DO tuneaway. Data
for this packet is both sampled and logged asynchronously whenever a tuneaway completes.
Length
Field Description
(bytes)
Version 1 Version number of packet
TuneAwayRRI 1 RRI value before the last tuneaway
TuneBackRRI 1 RRI value after the last tuneaway
CumTuneAwayRRISinceReset 4 Cumulative RRI values prior to tuneaways since the

last reset
CumTuneBackRRISinceReset 4 Cumulative RRI values after tuneaways since the last

reset
T
TotalTuneAwayCountSinceReset 4 Total number of tuneaways used to calculate average
n PS
RRI since reset
34
CumTuneAwayRRISinceCall 4 Cumulative RRI values prior to tuneaways since the
last call
om 8:
l.c :4
c
CumTuneBackRRISinceCall 4 Cumulative RRI values after tuneaways since the last
.
te 13
call
TotalTuneAwayCountSinceCall 4 Total number of tuneaways used to calculate average

.7 bk t
41 -b 1 a
RRI since call

3
15
ei .0

0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.261 1xEV-DO Connection Termination Statistics (LOG_CODE

0x1186)
This contains information about the past connection terminations and is logged after any EV-DO
connection termination or failed connection origination attempt. Data for this packet is both
sampled and logged asynchronously; it is triggered at EV-DO connection termination.
Length
Field Description
(bytes)
StartTimeOfLastCall 8 Timestamp of the start of the last call/connection
EndTimeOfLastCall 8 Timestamp of the end of the last call/connection
LastCallReleaseReason 1 High-level reason for call termination

 0 – AN connection close
T
 1 – AT connection close
n PS
 2 – System lost (supervision failures, TCA message
rejected)
34
 3 – Not preferred (SD told OVHD to switch systems;
QC redirect, access network ID)
om 8:
l.c :4
c
.
te 13
 7 – NAMChangeReceived
.7 bk t
41 -b 1 a
 8 – PageMessageReceived
3
15
 9 – Unspecified (ALMP rude close)
ei .0

0.
w 01
12
ou 3.
TrafficTimeSinceReset 4 Total time in ms in connected state since the last reset

2.
zh 201
TrafficTimeOfCall 4 Total time in ms in connected state since the start of the

last call connection
TotalCallTerms 2 Total number of call terminations since the last reset
FTCMACSupervisionFailure 2 Number of times there was an FTCMAC supervision

Count failure
CCMACTrafficSupervision 2 Number of times a CCMAC traffic supervision failure

FailureCount occurred
CCMACTrafficSuspended 2 Number of times a CCMAC traffic suspended

SupervisionFailureCount supervision failure occurred
CCMACIdleSupervision 2 Number of times a CCMAC idle supervision failure

DRCSupervisionFailureCount 2 Number of times a DRC supervision failure occurred
TCAConnectionSetupFailure 2 Number of times a TCA connection setup failure

Count occurred
RTCACKConnectionSetup 2 Number of times an RTCACK connection setup failure

QCTrafficSupervisionFailure 2 Number of times a QC traffic supervision failure occurred

Count
QCIdleSupervisionFailure 2 Number of times a QC idle supervision failure occurred

Count

Log Record Formats
Length
Field Description
(bytes)
SPTrafficSupervisionFailure 2 Number of times an SP traffic supervision failure
Count occurred
SPIdleSupervisionFailure 2 Number of times an SP idle supervision failure occurred

Count
APTrafficSupervisionFailure 2 Number of times an AP traffic supervision failure

Count occurred
APIdleSupervisionFailure 2 Number of times an AP idle supervision failure occurred

Count
ConnectionCloseReceived 2 Number of times a connection close request was

Count received
ConnectionCloseSentCount 2 Number of times a connection close request was sent
1xHanddownCount 2 Number of times a 1X handdown occurred
T
n PS
1xHanddownIgnoredCount 2 Number of times a 1X handdown was ignored
34
om 8:
l.c :4
c
5.3.262 1xEV-DO Connected State Protocol Stack Statistics
.
te 13
(LOG_CODE 0x1187)
.7 bk t
41 -b 1 a
This contains information about the number of connected state-related protocol events for the
3
15
ei .0
current and past calls. Data for this packet is sampled asynchronously whenever a given event
0.
w 01
happens. The data is logged when triggered at the EV-DO connection termination or every 6 sec
12
during a connection.
ou 3.
2.
zh 201
RUPMessageCountSince 4 Total number of RUP messages since last reset

Reset
TCAMessageCountSince 4 Total number of TCA messages received since last

Reset reset
ResetReportMessageCount 4 Total number of reset report messages since last reset

SinceReset
NeighborListMessageCount 4 Total number of neighbor list messages since last reset

SinceReset
TCCMessageCountSince 4 Total number of TCC messages since last reset

Reset
TotalUsersCountSince 4 Total number of users on acquired ANs since last reset

Reset
UsersMessagesCount 4 Total number of users messages since last reset

SinceReset
TCAMPilotCountSince 4 Total number of TCAM pilots since last reset

Reset

Log Record Formats

RUPWithZeroKeepCount 4 Total number of RUP messages with zero keep pilots
SinceReset since last reset
RUPWithOFSNeighbors 4 Total number of RUP messages with OFS neighbors

CountSinceReset since last reset
HardHandoffCountSince 4 Total number of hard handoffs since last reset

Reset
UATIAssignmentCount 4 Total number of UATI assignment messages since last

SinceReset reset
RUPPilotCountSince 4 Total number of pilots in RUP messages since last

Reset reset
RUPMessageCountSince 4 Total number of RUP messages since the start of the

Call current call
TCAMessageCountSince 4 Total number of TCA messages received since the start
T
n PS
Call of the current call
ResetReportMessage 4 Total number of reset report messages since the start
34
CountSinceCall of the current call
om 8:
NeighborListMessage 4 Total number of neighbor list messages since the start
l.c :4
c
CountSinceCall of the current call
.
te 13
TCCMessageCountSince 4 Total number of TCC messages since the start of the

.7 bk t
Call current call

41 -b 1 a
3
15
TotalUsersCountSince 4 Total number of users on acquired ANs since the start
ei .0
Call of the current call

0.
w 01
12
UsersMessagesCount 4 Total number of users messages since the start of the

ou 3.
SinceCall current call

2.
zh 201
TCAMPilotCountSince 4 Total number of TCAM pilots since the start of the

Call current call
RUPWithZeroKeepCount 4 Total number of RUP messages with zero keep pilots

SinceCall since the start of the current call
RUPWithOFSNeighbors 4 Total number of RUP messages with OFS neighbors

CountSinceCall since the start of the current call
HardHandoffCountSinceCall 4 Total number of hard handoffs since the start of the

current call
UATIAssignmentCount 4 Total number of UATI assignment messages since the

SinceCall start of the current call
RUPPilotCountSinceCall 4 Total number of pilots in RUP messages since the start

of the current call

Log Record Formats
5.3.263 1xEV-DO Connected State Transmit Statistics (LOG_CODE

0x1188)
This packet contains information about the number of connected state-related Tx events for the
1stAttemptSuccessCount 4 Total number of first attempt successful transmissions since

SinceReset last reset
2ndAttemptSuccess 4 Total number of second attempt successful transmissions

CountSinceReset since last reset
T
3rdAttemptSuccessCount 4 Total number of third attempt successful transmissions since
n PS
TransmitFailureCount 4 Total number of transmit failures since last reset
34
SinceReset
om 8:
1stAttemptSuccessCount 4 Total number of first attempt successful transmissions since
l.c :4
c
SinceCall last call
.
te 13
2ndAttemptSuccess 4 Total number of second attempt successful transmissions

.7 bk t
CountSinceCall since last call

41 -b 1 a
3
15
3rdAttemptSuccessCount 4 Total number of third attempt successful transmissions since
ei .0
SinceCall last call

0.
w 01
12
TransmitFailureCount 4 Total number of transmit failures since last call

ou 3.
SinceCall
2.
zh 201
5.3.264 1xEV-DO Connected State RMAC Statistics (LOG_CODE

0x1189)
This contains information about the number of connected state-related RMAC events for the
current and past calls. Data for this packet is sampled asynchronously whenever a relevant event
occurs. The data is logged when triggered at the EV-DO connection termination or every 6 sec
DRCSupervisionEntryCountSince 4 Total number of DRC supervision entries since

Reset last reset
DRCSupervisionExitCountSince 4 Total number of DRC supervision exits since last

Reset reset
RLSISupervisionEntryCountSince 4 Total number of RLSI supervision entries since
Reset last reset
RLSISupervisionExitCountSince 4 Total number of RLSI supervision exits since last

Reset reset

Log Record Formats

TotalDRCSupervisionTimeSince 4 Total DRC supervision time since last reset
Reset
TotalRLSISupervisionTimeSince 4 Total RLSI supervision time since last reset

Reset
AccumulatedBroadcastRRLValues 4 Total accumulated broadcast RRL values since

BroadcastRRLCountSinceReset 4 Total number of broadcast RRL values collected

since last reset
AccumulatedUnicastRRLValues 4 Total accumulated unicast RRL values since last

SinceReset reset
UnicastRRLCountSinceReset 4 Total number of unicast RRL values collected

since last reset
RRIAtPaLimitCountSinceReset 4 Total number of times the RRI value was railed at
T
n PS
the PA limit
EncoderWindowMissedCount 4 Total number of times the encoder window was
34
SinceReset missed since last reset
om 8:
EncoderWindowMissedDropped 4
l.c :4 Total number of bytes dropped due to misses of
c
ByteCountSinceReset the encoder window since last reset
.
te 13
RABCountSinceReset 4 Total number of RAB bits since last reset

.7 bk t
41 -b 1 a
RTCFramesCountSinceReset 4 Total number of RTC frames since last reset

3
15
ei .0
RateInertiaFramesCountSince 4 Total number of rate inertia frames since last

0.
w 01
Reset reset
12
ou 3.
DRCSupervisionEntryCount 4 Total number of DRC supervision entries since

2.
zh 201
SinceCall last call
DRCSupervisionExitCountSince 4 Total number of DRC supervision exits since last

Call call
RLSISupervisionEntryCountSince 4 Total number of RLSI supervision entries since

Call last call
RLSISupervisionExitCountSince 4 Total number of RLSI supervision exits since last

Call call
TotalDRCSupervisionTimeSince 4 Total DRC supervision time since last call

Call
TotalRLSISupervisionTimeSince 4 Total RLSI supervision time since last call

Call
AccumulatedBroadcastRRLValues 4 Total accumulated broadcast RRL values since

SinceCall last call
BroadcastRRLCountSinceCall 4 Total number of broadcast RRL values collected

since last call
AccumulatedUnicastRRLValues 4 Total accumulated unicast RRL values since last

SinceCall call
UnicastRRLCountSinceCall 4 Total number of unicast RRL values collected

since last call

Log Record Formats

RRIAtPaLimitCountSinceCall 4 Total number of times the RRI value was railed at
the PA limit
EncoderWindowMissedCount 4 Total number of times the encoder window was

SinceCall missed since last call
EncoderWindowMissedDropped 4 Total number of bytes dropped due to misses of

ByteCountSinceCall the encoder window since last call
RABCountSinceCall 4 Total number of RAB bits since last call
RTCFramesCountSinceCall 4 Total number of RTC frames since last call
RateInertiaFramesCountSinceCall 4 Total number of rate inertia frames since last call
Reserved 0 or more Reserved; may be expanded in the future
5.3.265 1xEV-DO Connected State Search Statistics (LOG_CODE
T
n PS
0x118A)
34
This packet contains information about the number of connection-related searcher events for the
om 8:
l.c :4
c
.
te 13
.7 bk t
41 -b 1 a
Length
3
Field Description
15
(bytes)
ei .0
0.
w 01

12
ou 3.
ServingSectorHandoffCountSince 4 Total number of serving sector handoffs since last

2.
zh 201
LastReset reset
ASetPilotAddEventCountSince 4 Total number of active set pilot add events since last
LastReset reset
ASetPilotDropEventCountSince 4 Total number of active set pilot drop events since last
LastReset reset
RSet2CSetPilotAddEventCount 4 Total number of remaining set to candidate set add

SinceLastReset events since last reset
Nset2RSetPilotDropEventCount 4 Total number of neighbor set to remaining set drop

SinceLastReset events since last reset
DropTimerStartEventCountSince 4 Total number of drop timer start events since last

LastReset reset
DropTimerCancelEventCount 4 Total number of drop timer cancel events since last

SinceLastReset reset
DropTimerExpiredEventCount 4 Total number of drop timer expired events since last

SinceLastReset reset
OFSCountSinceLastReset 4 Total number of off frequency searches since last

reset
ASetPilotCountSinceLastReset 4 Total number of active set pilots for all triages since
last reset

Log Record Formats
Length
Field Description
(bytes)
CSetPilotCountSinceLastReset 4 Total number of candidate set pilots for all triages
since last reset
NSetPilotCountSinceLastReset 4 Total number of neighbor set pilots for all triages

since last reset
AssignedFingersCountSinceLast 4 Total number of assigned fingers for all triages since

Reset last reset
LockedFingersCountSinceLast 4 Total number of locked fingers for all triages since

Reset last reset
TriageCycleCountSinceLastReset 4 Total number of triage cycles since last reset
ServingSectorHandoffCountSince 4 Total number of serving sector handoffs since last

LastCall call
ASetPilotAddEventCountSince 4 Total number of active set pilot add events since last
T
n PS
LastCall call
ASetPilotDropEventCountSince 4 Total number of active set pilot drop events since last
34
LastCall call
om 8:
RSet2CSetPilotAddEventCount 4 l.c :4Total number of remaining set to candidate set add
c
SinceLastCall events since last call
.
te 13
Nset2RSetPilotDropEventCount 4 Total number of neighbor set to remaining set drop

.7 bk t
SinceLastCall events since last call

41 -b 1 a
3
15
DropTimerStartEventCountSince 4 Total number of drop timer start events since last call
ei .0
LastCall
0.
w 01
12
DropTimerCancelEventCount 4 Total number of drop timer cancel events since last

ou 3.
SinceLastCall call
2.
zh 201
DropTimerExpiredEventCount 4 Total number of drop timer expired events since last

SinceLastCall call
OFSCountSinceLastCall 4 Total number of off frequency searches since last call
ASetPilotCountSinceLastCall 4 Total number of active set pilots for all triages since
last call
CSetPilotCountSinceLastCall 4 Total number of candidate set pilots for all triages

since last call
NSetPilotCountSinceLastCall 4 Total number of neighbor set pilots for all triages

since last call
AssignedFingersCountSinceLast 4 Total number of assigned fingers for all triages since

Call last call
LockedFingersCountSinceLastCall 4 Total number of locked fingers for all triages since

last call
TriageCycleCountSinceLastCall 4 Total number of triage cycles since last call
CurrentRSSI 1 Current RSSI level in dBm
CurrentDataLevelIndicator 1 Current data level indicator 0 to 8; 8 indicates the

highest data rate and 0 indicates almost no data rate

Log Record Formats
5.3.266 1xEV-DO FTC Physical Layer Packet (LOG_CODE 0x118B)

This logs the data contained in a forward traffic physical layer packet as it comes out of the
decoder. Data for this packet is both sampled and logged asynchronously every time an FTC
packet is decoded.
log_seq_num 2 Sequence number of the log packet
num_phy_layer_pkts 1 Number of physical layer packets contained in the

log packet
pkt_len_in_16bytes [Bit 6: Bit 0]: 1 pkt_len_in_16bytes [Bit 6: Bit 0] – Length of the

pkt_rev [Bit 7] physical layer packet in units of 16 bytes
pkt_rev [Bit 7] – Packet's physical layer revision;
valid values are:
 0 – Release 0
T
 1 – Release A
n PS
34
data ( pkt_len_in_16 FTC physical layer packet as it comes out of the
bytes * 16 ) decoder; contains one or more FTC MAC packets
om 8:
l.c :4
. c
te 13
5.3.267 1xEV-DO RTC Physical Layer Packet (LOG_CODE 0x118C)
.7 bk t
41 -b 1 a
This logs the data contained in a reverse traffic physical layer packet before being sent to the
3
encoder. Data for this packet is both sampled and logged asynchronously every time an RTC
15
ei .0
packet is decoded.
0.
w 01
12
ou 3.

2.
zh 201
log_seq_num 2 Sequence number of log packet
pkt_len_in_16bytes [Bit 6: Bit 0]: 1 pkt_len_in_16bytes [Bit 6: Bit 0] – Length of physical

pkt_rev [Bit 7] layer packet in units of 16 bytes
pkt_rev [Bit 7] – Packet's physical layer revision;
valid values are:
 0 – Release 0
 1 – Release A
data ( pkt_len_in_16 RTC physical layer packet before being sent to the
bytes * 16 ) encoder
5.3.268 Reserved (LOG_CODE 0x118D – 0x1191)

Log Record Formats
5.3.269 1xEV-DO RevASUFwdStats (LOG_CODE 0x1192)

This logs the CRC and early-decode statistics for Rev A forward traffic channel single-user
packets and control channel packets. The CRC statistics contain the CRC pass counts for each
transmission format and the CRC failure counts for each DRC. The early-decode statistics
include the number of packets terminated early at each slot position. Data for this packet is both
sampled and logged every second. This packet is supported in Rev A only.
Length
Field Description
(bytes)
Seq_num 4 Sequence number of the log packet
TC0_128bits_Good 4 Counter for DRC 0 [128, 16, 1024] traffic channel packets
with good CRC
with good CRC
T
n PS
with good CRC
34
with good CRC
om 8:
l.c :4
c
TC0_Bad 4 Counter for DRC 0 traffic channel packets with bad CRC
.
te 13
.7 bk t
with good CRC

41 -b 1 a
3
15
ei .0
with good CRC

0.
w 01
12
ou 3.
with good CRC

2.
zh 201
with good CRC
TC2_128bits_Good 4 Counter for DRC 2 [128, 8, 512] traffic channel packets with
good CRC
good CRC
good CRC
good CRC
good CRC
good CRC
good CRC

Log Record Formats
Length
Field Description
(bytes)
good CRC
good CRC
good CRC
good CRC
good CRC
T
n PS
good CRC
34
om 8:
good CRC
l.c :4
. c
te 13
good CRC
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
good CRC
12
ou 3.
2.
zh 201
good CRC
good CRC
good CRC
good CRC
good CRC
good CRC
good CRC
good CRC

Log Record Formats
Length
Field Description
(bytes)
good CRC
good CRC
good CRC
good CRC
good CRC
T
n PS
good CRC
34
om 8:
l.c :4
c
.
te 13
good CRC
.7 bk t
41 -b 1 a
3
15
ei .0
good CRC
0.
w 01
12
ou 3.
2.
zh 201
good CRC
TC0_128bits[0-15] 4 * 16 Counter for DRC 0 [128, 16, 1024] traffic channel packets
decoded in 1 to 16 slots

Log Record Formats
Length
Field Description
(bytes)
TC2_128bits[0-7] 4*8 Counter for DRC 2 [128, 8, 512] traffic channel packets
T
n PS
34
om 8:
l.c :4
c
.
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201
TC6_128bits[0] 4*1 Counter for DRC 6 [128, 1, 64] traffic channel packets
decoded in 1 slot
decoded in 1 slot
decoded in 1 slot
decoded in 1 slot

Log Record Formats
Length
Field Description
(bytes)
decoded in 1 slot
decoded in 1 slot
decoded in 1 slot
T
n PS
34
om 8:
decoded in 1 slot
l.c :4
c
.
te 13
decoded in 1 slot
.7 bk t
41 -b 1 a
3
decoded in 1 slot
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201
decoded in 1 slot
CCSht_128bits_Good 4 Counter for Short control channel packet [128,4,1024] with

good CRC
CCSht_256bits_Good 4 Counter for Short Control channel packet [256,4,1024] with

good CRC
CCSht_512bits_Good 4 Counter for Short Control channel packet [512, 4, 1024] with
good CRC
CCSht_Bad 4 Counter for short control channel packets with bad CRC
CC38400_Good 4 Counter for 38.4 K control channel packets with good CRC
CC38400_Bad 4 Counter for 38.4 K control channel packets with bad CRC
CC76800_Good 4 Counter for 76.8 K control channel packets with good CRC
CC76800_Bad 4 Counter for 76.8 K control channel packets with bad CRC
CCSht_128bits[0-3] 4*4 Counter for short control channel packet [128, 4, 1024]
CCSht_256bits[0-3] 4*4 Counter for short control channel packet [256, 4, 1024]
CCSht_512bits[0-3] 4*4 Counter for Short control channel packet [512, 4, 1024]

Log Record Formats
Length
Field Description
(bytes)
CCRate38400 [0-15] 4 * 16 Counter for 38.4 K rate CC packets decoded in 1 to 16 slots
CCRate76800 [0-7] 4*8 Counter for 76.8 K CC packets decoded in 1 to 8 slots
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.269.1 Traffic channel formulas
5.3.269.1.1 Packet error rate

The Packet Error Rate is computed using the following formula:
5.3.269.1.2 Throughput when served

This is the AT throughput during the time it is served by the AN. The throughput when served for
single-user packet is computed using the following formula:
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
The xmit_slots_y in the denominator is the nominal transmit duration in slots, which is the same
15
ei .0
for all transmission formats of a particular DRC.

0.
w 01
12
ou 3.
5.3.269.1.3 Instantaneous throughputs

2.
zh 201
This is the AT throughput averaged over time, including the time the AN did not serve the AT.
The formula is:
where:

Log Record Formats
5.3.269.2 Control channel short packet formulas
5.3.269.2.1 Throughput when served

The throughput when served for control channel short packets is computed using the following
formula:
The CRC failed statistic for short control channel packet is recorded only as a collective sum
given by bad_cnt_sht_cc in the denominator. The trans_slots_sht_cc is the nominal transmit
duration which is equal to four slots for all short CC transmission formats.
T
n PS
5.3.269.2.2 Instantaneous throughput
34
om 8:
l.c :4
. c
te 13
where:
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201
Legend
 SHT_CC_TF – Set of all transmission formats for control channel short packets given by
{[128, 4, 1024], [256, 4, 1024], [512, 4, 1024]}
 SUP_TF – Set of all transmission formats for single-user packets; this set does not include
the control channel packet statistics
 DRC – Set of all DRCs from 0 through 14
 good_cnt_x – Total number of good packets received for the transmission format x
 bad_cnt_y – Total number of bad packets received for DRC y
 pkt_len_bits_x – Packet size a in bits of a transmission format x [a, b, c]
 xmit_slots_y – Nominal transmit duration b in slots for a transmission format [a, b, c] of
DRC y
 early_dec_x[j] – Total number of good packets of transmission format x that were decoded in
slot j

Log Record Formats
 total_good_data_served – Total number of CRC passed bits received by AT so far

 total_good_data_served_prev – Total number of CRC passed bits received by AT as reported
by previous log packet
 log_seq_num – Log packet sequence number
 log_seq_num_prev – Log sequence number of previous log packet received
 bad_cnt_sht_cc – Total number of bad short control channel packets
 trans_slots_sht_cc – Nominal transmit duration of short control channel packets
5.3.270 1xEV-DO RevAMUFwdStats (LOG_CODE 0x1193)

This packet logs the CRC and early-decode statistics for Rev A forward traffic channel multiuser
packets. The CRC statistics contain the CRC pass counts for each transmission format and CRC
failure counts for each DRC. The early-decode statistics include the number of packets
T
terminated early at each slot position. The sampling period and the logging period are every
n PS
second. This packet is supported in Rev A only.
34
om 8:
l.c :4
c
Seq_num 4 Sequence number of the log packet
.
te 13
TC3_128bits_Good 4 Counter for DRC 3 [128,4,256] multiuser traffic channel

packets with good CRC
.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01

12
ou 3.

2.
zh 201

TC3_bad 4 Counter for DRC 3 multiuser traffic channel packets with

bad CRC


bad CRC


bad CRC
TC10_4096bits_Good 4 Counter for DRC 10 [4096, 2, 644,128] multiuser traffic

channel packets with good CRC

bad CRC
TC13_5120bits_Good 4 Counter for DRC 13 [5120, 2, 64]4,128] multiuser traffic

channel packets with good CRC

bad CRC

Log Record Formats

TC3_128bits[0-3] 4x4 Counter for DRC 3 [128, 4, 256] multiuser traffic channel
packets decoded in 1 to 4 slots
T
n PS
34
om 8:
l.c :4
c
The Display tool would provide a packet to reset these counts in the AT databases. Upon
.
te 13
reception of the reset packet, the DMSS would reset all the counters to zero.
.7 bk t
41 -b 1 a
3
5.3.270.1 Packet error rate
15
ei .0
0.
w 01
The Packet Error Rate for Multi-user packet could be computed using the following formula:
12
ou 3.
2.
zh 201
5.3.270.2 Throughput when served

This is the AT throughput during the time it is served by AN. The throughput when served for
multiuser packet traffic is calculated using the following formula:

Log Record Formats
5.3.270.3 Instantaneous throughput

Where
T
n PS
Legend
34
 MUP_TF – The set of all transmission formats for multiuser packets
om 8:
 MUP_DRCs – The set of all multiuser packet DRCs
l.c :4
. c
good_cnt_x – The total number of good packets received for the transmission format x
te 13

bad_cnt_x – The total number of bad packets received for DRC x

.7 bk t

41 -b 1 a
3
 pkt_len_bits_x – The packet size a in bits of a transmission format x [a, b, c]
15
ei .0
xmit_slots_y – The nominal transmit duration b in slots for a transmission format [a, b, c] of
0.
w 01

12
DRC y
ou 3.
2.
zh 201
 early_dec_x[j] – The total number of good packets of transmission format x that were
decoded in slot j
 total_good_data_served – The total number of CRC passed bits received by AT so far
 total_good_data_served_prev – The total number of CRC passed bits received by AT as
reported by previous log packet
 log_seq_num – Log packet sequence number
 log_seq_num_prev – Log sequence number of previous log packet received

Log Record Formats
5.3.272 MPEG-4 Clip Statistics, Ver 3 (LOG_CODE 0x1198)

This structure contains statistics for a completed MPEG-4 clip.
DECODED_FRAME_RATE 4 Actual playback rate (frames decoded only)
DISPLAYED_FRAME_RATE 4 Actual playback rate (frames displayed)
NUM_FRAMES 4 Number of frames in the clip
NUM_FRAMES_DROPPED_ 4 Number of frames dropped by the codec

UNRECOVERABLE
NUM_FRAMES_DROPPED_ 4 Number of frames dropped due to insufficient decode

DECODE_TIME time
NUM_FRAMES_DROPPED_ 4 Number of frames dropped due to insufficient
RENDER_TIME rendering time
T
n PS
MAX_MSEC_VIDEO_AHEAD 4 Maximum time (ms) that video was ahead of audio
MAX_MSEC_VIDEO_BEHIND 4 Maximum time (ms) that video was behind audio
34
VIDEO_ENCODED_BITRATE 4 Encoded image bitrate
om 8:
l.c :4
c
VIDEO_ENCODED_ 4 Encoded video frame rate
.
te 13
FRAMERATE
.7 bk t
AUDIO_FORMAT 4 Audio format

41 -b 1 a
3
 0 – Unknown Codec
15
ei .0
 1 – EVRC 8K
 2 – QCELP
0.
w 01
 3 – AAC
12
ou 3.
 4 – GSM AMR
2.
zh 201
 11 – MP3
 12 – WMA
 17 – CONCURRENT CODEC
 18 – COOK
 19 – SIPR
VIDEO_FORMAT 4 Video format

 0 – Unknown Codec
 5 – MPEG4
 6 – H.263
 7 – H.264
 8 – STILL IMAGE
 9 – TIMED TEXT
 10 – JPEG
 13 – WMV1
 14 – WMV2
 15 – WMV3
 16 – OSCAR
 20 – RV30
 21 – RV40
AUDIO_ENCODED_ 4 Encoded audio bitrate

FRAMERATE

Log Record Formats

videoAVSyncDrops 4 Video drops due to audio/video synchronization
failure
FramesDroppedofMacroBlock 4 Number of frames dropped due to macroblock errors

Errors
MaxConsecVideoDrops 4 Maximum consecutive video drops
VideoFramesInterpolated 4 Number of video frames interpolated
maxVideoLead 4 Maximum video data lead
minVideoLead 4 Minimum video data lead
numAudioFrames 4 Number of audio frames
maxAudioDataLead 4 Maximum audio data lead
minAudioDataLead 4 Minimum audio data lead
T
n PS
maxAudioDrop 4 Maximum consecutive audio drops
nullAudioSamples 4 Number of Null audio samples in clip
34
5.3.273 MOBILE_IP Performance (LOG_CODE 0x1199) om 8:
l.c :4
. c
te 13
This is used to log MIP call setup times, on demand for various stages of a MIP call. The log
.7 bk t
frame will be logged each time the reported performance delay is reported via F3 (provided that
41 -b 1 a
3
the corresponding logging bit is enabled).
15
ei .0
0.
w 01

12
ou 3.
Delay 4 Delay; range is 0 to 2^32 -1 (measured) delay in ms

2.
zh 201
Type of delay 1 Type of delay

 0 – PERF_UM_PPP_DELAY
 1 – PERF_RM_PPP_DELAY
 2 – PERF_MIP_INIT_REG_DELAY
 3 – PERF-MIP_REREG_DELAY
 4 – PERF_TOTAL_CALL_SETUP_DELAY
 5 – PERF_TOTAL_HANDOFF_DELAY
 6 – PERF_MIP_DEREG_DELAY
5.3.274 Generalized Searcher (LOG_CODEs 0x119A – 0x11A2)

The Generalized Searcher log packets consist of LOG_CODEs 0x119A through 0x11A2. Each
log contains:
 Log packet definition – Unique definition for each log packet; see Section 5.3.275 through
Section 5.3.283 for details
 Log packet structure – Shared structure used by all Generalized Searcher log packets; see
Section 5.3.274.1 for details
 Subpacket for generalized searcher – Unique subpacket identified by subpacket ID; each log
packet may contain one or more subpackets; see Section 5.3.285 for details

Log Record Formats
5.3.274.1 Generalized Searcher log packet structure
Version 1 Version field shall be set to 1 for the Generalized Searcher

log packets; all other values are reserved for future field
configurations
Number Sub-packets 1 Number of subpackets concatenated on the end of the

packet
Reserved 2 Reserved
Sub-Packets Variable One or more subpackets concatenated together compose

this field
5.3.275 Srch TNG Finger Status (LOG_CODE 0x119A)

The Srch TNG Finger Status log packet uses the Generalized Searcher log packet structure
T
n PS
described in Section 5.3.274.1. This packet will include a minimum of an RF subpacket
(Section 5.3.285.2) and Finger Info subpacket (Section 5.3.285.4). This packet replaces
34
Enhanced Finger Information (LOG_CODE 0x1179).
om 8:
l.c :4
c
5.3.276 Srch TNG 1X Searcher Dump (LOG_CODE 0x119B)
.
te 13
The Srch TNG 1X Searcher Dump log packet uses the Generalized Searcher log packet structure
.7 bk t
41 -b 1 a
described in Section 5.3.274.1. This is a technology-independent packet that is logged after the
3
15
return of a 1X searcher dump. This packet will contain an RF subpacket (Section 5.3.285.2) and
ei .0
the appropriate subpacket for whichever searcher technology was used to do the search, such as a
0.
w 01
12
Searcher1 subpacket (Section 5.3.285.6) or a Searcher4 subpacket (Section 5.3.285.7). This

ou 3.
packet deprecates Searcher4 – 1X (LOG_CODE 0x1174).

2.
zh 201
5.3.277 Srch TNG General Status (LOG_CODE 0x119C)

The Srch TNG General Status log packet uses the Generalized Searcher log packet structure
described in Section 5.3.274.1. This packet will include a minimum of a Searcher Status
subpacket (Section 5.3.285.1), RF subpacket (Section 5.3.285.2), Active Info subpacket
(Section 5.3.285.3), and Finger Info subpacket (Section 5.3.285.4).
This packet deprecates Searcher and Finger (LOG_CODE 0x102D), Searcher and Finger Info
Ver 2 (LOG_CODE 0x10C4), General Temporal Analyzer (LOG_CODE 0x1019), and General
Temporal Analyzer with Supplemental Channels (LOG_CODE 0x101A).
5.3.278 Srch TNG Demod Info (LOG_CODE 0x119D)

The Srch TNG Demod Info log packet uses the Generalized Searcher log packet structure
(Section 5.3.285.2), Active Info subpacket (Section 5.3.285.3), Finger Info subpacket
(Section 5.3.285.4), and Demod Status subpacket (Section 5.3.285.11).

Log Record Formats
5.3.279 Srch TNG Sleep Stats (LOG_CODE 0x119E)

The Srch TNG Sleep Stats log packet uses the Generalized Searcher log packet structure
described in Section 5.3.274.1. This packet will include a Sleep Stats subpacket
(Section 5.3.285.8). This packet deprecates Sleep Statistics (LOG_CODE 0x1175).
5.3.280 Srch TNG Quick Paging Channel Info (LOG_CODE 0x119F)

The Srch TNG Quick Paging Channel Info log packet uses the Generalized Searcher log packet
structure described in Section 5.3.274.1. This packet will include a minimum of a QPCH
subpacket (Section 5.3.285.9). This packet deprecates Quick Paging Channel (LOG_CODE
0x1030) and Quick Paging Channel Ver 2 (0x10BC)
5.3.281 Srch TNG AFC Info (LOG_CODE 0x11A0)

The Srch TNG AFC Info log packet uses the Generalized Searcher log packet structure described
T
n PS
in Section 5.3.274.1. This packet will include a minimum of an AFC Info subpacket
(Section 5.3.285.10).
34
om 8:
5.3.282 Srch TNG Acquisition Info (LOG_CODE 0x11A1)
l.c :4
. c
te 13
The Srch TNG Acquisition Info log packet uses the Generalized Searcher log packet structure
described in Section 5.3.274.1. This packet will include a minimum of an Acquisition Info
.7 bk t
41 -b 1 a
subpacket (Section 5.3.285.13).

3
15
ei .0
0.
w 01
5.3.283 Srch TNG Finger Channel Estimate (LOG_CODE 0x11A2)

12
ou 3.
The Srch TNG Finger Channel Estimate log packet uses the Generalized Searcher log packet
2.
zh 201
structure described in Section 5.3.274.1. This packet will include a minimum of an RF subpacket
(Section 5.3.285.2), Finger Info subpacket (Section 5.3.285.4), and Filtered Pilot Symbol
subpacket (Section 5.3.285.5).
5.3.284 Srch TNG Finger Statistics (LOG_CODE 0x11A3)

The Srch TNG Finger Statistics log packet uses the Generalized Searcher log packet structure
(Section 5.3.285.2) and a TC Call Staistics subpacket (Section 5.3.285.14).
5.3.285 Generalized Searcher subpackets

Each General Searcher subpacket has a subpacket header.

Log Record Formats
Sub-packet ID 1 Unique subpacket identifier; subpacket IDs are:

 1 – Searcher Status subpacket (see Section 5.3.285.1 for
format description)
 2 – RF subpacket (see Section 5.3.285.2 for format
description)
 3 – Active Info subpacket (see Section 5.3.285.3 for format
description)
 4 – Finger Info subpacket (see Section 5.3.285.4 for format
description)
 5 – Filtered Pilot Symbol subpacket (see Section 5.3.285.5
for format description)
 6 – Searcher1 subpacket (see Section 5.3.285.6 for format
description)
 7 – Searcher4 subpacket (see Section 5.3.285.7 for format
description)
 8 – Sleep Stats subpacket (see Section 5.3.285.8 for format
T
n PS
description)
 9 – QPCH subpacket (see Section 5.3.285.9 for format
34
description)
 10 – AFC subpacket (see Section 5.3.285.10 for format
om 8:
description)
l.c :4
c
 11 – Traffic Demod Status subpacket (see Section 5.3.285.11
.
te 13
 12 – Channel Estimator subpacket (see Section 5.3.285.12
.7 bk t
41 -b 1 a

3
 13 – Acquisition Info subpacket (see Section 5.3.285.13 for
15
ei .0
format description)
0.
w 01
 14 –TC Call Statistics subpacket (see Section 5.3.285.14 for

12
format description)
ou 3.
 15 to 17 – Reserved
2.
zh 201
 18 – Idle Demod Stats subpacket (see Section 5.3.285.15 for

format description)
Sub-packet Version 1 Version number of the subpacket; if the version is unknown to

the parsing tool, the subpacket should be skipped
Sub-packet Size 2 Size in bytes of the subpacket including the header; if the
version of the subpacket is unknown, this size can be used to
skip the subpacket and decode the next subpacket.
This field shall be a multiple of 4. If the subpacket structure is
not a multiple of 4, padding will be automatically added at
subpacket creation. Consequently, if the subpacket size is larger
than the parsing tool expects, but it is an ID and version it
understands, the parsing tool should parse as much as it
understands and ignore the remaining bytes, treating them as a
reserved field.
Sub-packet Specific Sub-packet Size Variable length data specific to the particular subpacket ID and
Data version

Log Record Formats
5.3.285.1 Searcher Status Subpacket
Sub-packet Header 4 Subpacket header as defined in Section 5.3.285
Searcher State 1 Searcher state; see Appendix C for a description
Reserved 1 Reserved
Forward RC 2 Forward channel RC; see Section 5.2.2.1 for format

description
5.3.285.2 RF Subpacket
T
RX0 Band Class 1 CAI band class; valid only if RX0 chain is enabled; see
n PS
Appendix C for a description; a value of 0xFF indicates the
RF chain is disabled
34
RX1 Band Class 1 CAI band class; valid only if RX1 chain is enabled; see
om 8:
Appendix C for a description; a value of 0xFF indicates the
l.c :4
c
RF chain is disabled
.
te 13
RX0 CDMA Channel 2 CDMA channel number; valid only if RX0 chain is enabled
.7 bk t
41 -b 1 a
RX1 CDMA Channel 2 3 CDMA channel number; valid only if RX1 chain is enabled
15
RX0 AGC 1 AGC value for Ant0; valid only if RX0 chain is enabled
ei .0
0.
w 01
Rx strength in dBm = -63.248 + ((AGC * 334 ) / 1000)

12
ou 3.
RX1 AGC 1 AGC value for Ant1; valid only if RX1 chain is enabled
2.
zh 201
Rx strength in dBm = -63.248 + ((AGC * 334 ) / 1000)
Tx Power 2 CDMA transmit power, in -1/10 dBm units, signed
Tx Gain Adj 1 Signed power control value

tx_adj = -(value/2)
A value of 0x7F indicates that the transmitter is off.
Tx Power Limit 1 Transmit power limit; values of TX_PWR_LIMIT of 0 and

255 represent saturated values such that the actual value
of tx_pwr_limit_dbm could be respectively lower (for
TX_PWR_LIMIT=0) or higher (for TX_PWR_LIMIT=255)
than the given equation due to saturation.
Tx Power Limit in dBm = -52.33 + TX_PWR_LIMIT/3
5.3.285.3 Active Info Subpacket
Sub-packet Header 4 Subpacket header as defined in

Section 5.3.285
Coherent Integration 2 Coherent integration length used in Active

Length searches
Non-Coherent Integration 1 Noncoherent integration length used in

Length Active searches

Log Record Formats

Truncation Factor 1 Truncation factor used in Active searches
Num Actives 1 Number of sectors in the Active set
Max Num Peaks 1 Maximum number of peaks in for each

sector in Active information
Reference PN 2 PN of the reference pilot
Active Info 12 + (6 * Max Num Peaks) + R ) Active information, array of size Num
* Num Actives Actives
R = 0 if Max Num Peaks is even, See Section 5.3.285.3.1 for format
2 if Max Num Peaks is odd description.
5.3.285.3.1 Active Information, array of size Num Actives
T
n PS
Pilot PN 2 Pilot PN (0 to 511)
34
Cell 1 Cell membership ID
om 8:
Num Valid 1 Number of valid peaks the searcher returned for this sector
l.c :4
c
Peaks
.
te 13
Window 4 PN position of the active search window center, in chipx8

.7 bk t
Center (0 to 262144)
41 -b 1 a
3
15
Support 4 Supported CAI channels for this pilot (see Supported Channel
ei .0
Channel Mask Mask Table below)

0.
w 01
12
Peak Pos 4 * Max Num Peaks Array of Absolute Peak Positions, in chipx8 units (0 to 262144)
ou 3.
2.
zh 201
Peak Energy 2 * Max Num Peaks Array of peak energies
where:
 Nc = coherent integration length in chips
 Nnc = noncoherent integration length in chips
 T = coherent truncation in bits of Searcher4
Reserved 2 if Max Num Peaks is odd Reserved

0 if Max Num Peaks is even
5.3.285.3.2 Supported Channel Mask Table
Field Bit position Length (bits)
PCH 0 1
BCCH 1 1
CCCH 2 1
QPCH 3 1
FCH 4 1

Log Record Formats
DCCH 5 1
SCCH 6 1
SCH 7 1
PDCCH 0 8 1
PDCCH 1 9 1
GCH 0 10 1
GCH 1 11 1
RCCH 12 1
ACKCH 13 1
CPCCH 14 1
T
CACH 15 1
n PS
Reserved 16 to 31 16
34
om 8:
5.3.285.4 Finger Info Subpacket l.c :4
. c
te 13
Length
Field Description
(bytes)
.7 bk t
41 -b 1 a
3
15
ei .0
Pilot Filter Gain Factor 1 Pilot filter gain (gPF = PILOT_FILTER_GAIN_FACTOR / 128)
0.
w 01
12
ou 3.
Reserved 1 Reserved
2.
zh 201
Antenna Config 1 Antenna configuration

 0 – RX0 (fingers operating on Rx0)
 2 – DIV (receive diversity is on)
 3 – Simultaneous mode (fingers operating on Rx0)
Num Fingers 1 Number of finger records
Finger Info 20 * Finger information; see Section 5.3.285.4.1 for format

NUM_FINGS description

Log Record Formats
5.3.285.4.1 Finger Information
Pilot PN 2 Finger's pilot assignment (0xFFFF indicates unassigned

finger)
RSSI 2 Indicates the current RSSI value for the finger; if

ANT_CONF=2, then this field represents RSSI for the paired
finger; the RSSI combining algorithm is described by the
DIV_COMB_ALGO; to convert to Pilot Ec /I0 in dB:
where gPF equals 1/8 for BAND_CLASS 0 and 1/4 for

BAND_CLASS 1
T
RX0 RSSI 2 Represents RSSI for finger tracking RX0; this is valid only if
n PS
ANT_CONF=2
34
RX1 RSSI 2 Represents RSSI for finger tracking RX1; this is valid only if
ANT_CONF=2
om 8:
Position 4
l.c :4
Absolute finger position, in 1/8 chip units (0 to 262144)
. c
te 13
Enabled Channel Mask 4 Enabled Channel Mask (format described below in Enabled
Channel Mask)
.7 bk t
41 -b 1 a
3
Status 2 Finger status (format described below in Finger Status)
15
ei .0
Reserved 2 Reserved
0.
w 01
12
ou 3.
2.
zh 201
5.3.285.4.1.1 Enabled Channel Mask
PCH 0 1
Primary BCCH 1 1
Secondary BCCH 1 2 1
FCCCH 9 1
QPCH 10 1
FCH 11 1
DCCH 12 1
SCCH 13 1

Log Record Formats
SCH 14 1
PDCCH 0 15 1
PDCCH 1 16 1
GCH 0 17 1
GCH 1 18 1
RCCH 19 1
ACKCH 20 1
CPCCH 21 1
CACH 22 1
Reserved 23 to 31 9
T
n PS
5.3.285.4.1.2 Finger Status
34
Field Bit Length Description
om 8:
position (bits)
l.c :4
. c
te 13
Reference Finger 0 1 Field is set to 1 if this finger is the reference finger
.7 bk t
Assigned 1 1 Field is set to 1 if the finger is assigned

41 -b 1 a
3
Locked 2 1 Field is set to 1 if the finger is in lock
15
ei .0
0.
w 01
RX0 Locked 3 1 Field is set to 1 if receive chain 0 is locked

12
ou 3.
RX1 Locked 4 1 Field is set to 1 if receive chain 1 is locked

2.
zh 201
TD Mode 5 to 6 2 TD_MODE, transmit diversity mode

 0 – None
 1 – Reserved l
 2 – OTD
 3 – STS
TD Power 7 to 8 2 TD_POWER_LEVEL, transmit diversity power level;

valid only if in TD mode-
 0 – -9 dB
 1 – -6 dB
 2 – -3 dB
 3 – 0 dB
Reserved 9 to 15 11 Reserved

Log Record Formats
5.3.285.5 Filtered Pilot Symbol Subpacket
Antenna Config 1 Antenna configuration

Pilot Filter Gain Factor 1 Pilot filter gain (gPF = PILOT_FILTER_GAIN_FACTOR /

128)
Reserved 1 Reserved
T
n PS
Num Fingers 1 Number of fingers records
34
Pilot Filter Data 8 * Num Fingers Pilot filter data; see Section 5.3.285.5.1 for format
description
om 8:
l.c :4
. c
te 13
5.3.285.5.1 Pilot Filter Data
.7 bk t
41 -b 1 a

3
15
ei .0
RX0 Pilot Filter I 2 Snapshot of the I Pilot Filter on RX0, signed

0.
w 01
RX0 Pilot Filter Q 2 Snapshot of the Q Pilot Filter on RX0, signed

12
ou 3.
RX1 Pilot Filter I 2 Snapshot of the I Pilot Filter on RX1, signed

2.
zh 201
RX1 Pilot Filter Q 2 Snapshot of the Q Pilot Filter on RX1, signed
5.3.285.6 Searcher1 Subpacket
Num Peaks 1 Number of peaks returned from the searcher
Pilot Record Type 1 Pilot record type

 0x00 – Transmit diversity pilot
 0xFF – Common pilot
Gain 1 Searcher pregain (2 to 16)
Non Coherent Integration 1 Noncoherent integration length, in # passes (1 to 128)

Length
Coherent Integration 2 Coherent integrating length, in chips (1 to 4096)

Length
Pilot PN 2 Pilot PN (0 to 511)

Log Record Formats

Pilot Set Membership 4 Pilot set membership mask; see Section 5.3.285.6.1
Mask
Window Position 2 PN position of the starting point of the search window, in

chips (0 to 32767)
Window Size 2 Window size of the search window, in chips (0 to 32767)
Search Results 4 * Num Peaks Search results; see Section 5.3.285.6.2 for format
description
5.3.285.6.1 Pilot Set Membership Mask Table
Active Set 0 1
T
Candidate Set 1 1
n PS
Neighbor Set 2 1
34
Remaining Set 3 1
om 8:
PreCandidate Set
l.c :4 4 1
. c
te 13
Reserved 5 to 31 1
.7 bk t
41 -b 1 a
3
5.3.285.6.2 Search Results
15
ei .0
0.
w 01

12
ou 3.
Peak Position 2 Position of path relative to window, in 1/2 chip unit

2.
zh 201
Peak Energy 2 Instantaneous energy of path

Pilot energy Ec /I0 in dB is calculated as follows:
a1 = PATH_ENERGY * 512 / (9*Pregain^2)
a2 = 1/(non_coh*integration^2)
Precise:
energy = 10log10(max(1e-5, (a1*a2) -(1/integration) ))
Approximate:
energy = 10log10(max(1e-5, a1*a2))

Log Record Formats
5.3.285.7 Searcher4 Subpacket
Technology 1 Technology requesting this search queue

 0 – 1X CDMA
 1 – 1xEV-DO (shoulders)
 2 – 1xEV-DO (accumulated)
 3 – Reserved
 4 – AFLT
Queue 1 Searcher4 hardware queue to which the search was

programmed
 0 – HPQ0 (high priority queue 0)
T
 1 – LPQ (low priority queue)
n PS
 2 – Reserved
 3 – HPQ1 (high priority queue 1)
34
om 8:
l.c :4
c
Priority 1 Indicated by number; the higher number is the higher
.
te 13
priority
.7 bk t
Reserved 1 Reserved
41 -b 1 a
3
15
Frequency Offset 2 Searcher 4 rotator offset, in 4.6875 Hz units, signed
ei .0
0.
w 01
Num Tasks 1 Number of tasks programmed

12
ou 3.
Num Peaks 1 Number of peaks returned per search task

2.
zh 201
Tasks Num Tasks * Tasks; see Section 5.3.285.7.1 for format description
(16 + 8 * Num
Peaks)
5.3.285.7.1 Tasks
Length
Field Description
(bytes)
Pilot PN [Bit15:Bit6]: 2 Pilot PN [Bit15:Bit6]: : Pilot offset (0 to 511)

Antenna [Bit5:Bit4]: Antenna [Bit5:Bit4]: : Diversity antenna; values are:
1xEV-DO Burst Len  0 – Antenna 0
[Bit3:Bit2]:  1 – Antenna 1
QOF [Bit1:Bit0]:  2 – Dual antenna
 3 – Reserved
1xEV-DO Burst Len [Bit3:Bit2]: : Number of pilots bursts to
search (1 to 2)
QOF [Bit1:Bit0]: : Quasiorthogonal Function Index (0 to 3)

Log Record Formats
Length
Field Description
(bytes)
Coh Trunc [Bit15:Bit13]: 2 Coh Trunc [Bit15:Bit13]: : Coherent Truncation control
Coherent Len [Bit12:Bit0] parameter which controls where the coherent accumulation is
to be truncated/rounded prior to saturating for the noncoherent
8-bit squaring operation (value is number of bits truncated);
values are:
 0 – Truncate by 8 bits
 2 – Truncate by 2 bits (eqv to gain=16)
Coherent Len [Bit12:Bit0]: : Coherent integrating length, in
chips (0 to 4096)
T
n PS
Non Coh Len 1 Noncoherent integration length, in # passes (1 to 128)
34
Pilot Phase 1 Pilot phase (0 to 7)
om 8:
Walsh Index 2 Walsh channel index (0 to 511)
l.c :4
. c
Window Start 2 PN position of the starting point of the search window, in chips
te 13
(0 to 32767)
.7 bk t
41 -b 1 a
Window Size 2 3Window size of the search window, in chips (0 to 32767)

15
Pilot Set Membership 4 Pilot set membership mask; see Pilot Set Membership Mask
ei .0
Mask Table below

0.
w 01
12
ou 3.
Results 8 * (Num Results (format described below in Results Fields)

Peaks)
2.
zh 201
5.3.285.7.2 Pilot Set Membership Mask Table
Active Set 0 1
Candidate Set 1 1
Neighbor Set 2 1
Remaining Set 3 1
PreCandidate Set 4 1
Reserved 5 to 31 1

Log Record Formats
5.3.285.7.3 Results Fields
Length
Field Description
(bytes)
Peak_Position 4 Interpolated peak position from search, chipx16
Peak_Energy 2 Interpolated peak energy from search
where:
 Nc = coherent integration length in chips
 Nnc = noncoherent integration length in chips
 T = coherent truncation in bits of Searcher4
Reserved 2 Reserved
T
n PS
5.3.285.8 Sleep Stats Subpacket
34
om 8:
Length
Field Description
l.c :4
c
(bytes)
.
te 13
Sub-Packet Header 4 Subpacket header as defined in Section 5.3.285

.7 bk t
41 -b 1 a
Slot_Type 1 Indicates for which type of slot the mobile woke up; bit mapped
3
fields are:
15
ei .0
 40ms_Offset [Bit 7] – Alignment is 40-ms offset from the

0.
w 01
slot boundary
12
ou 3.
 BCN [Bit4:Bit6] – Broadcast channel number (0 indicates

no BCN)
2.
zh 201
 Marked [Bit3] – Slot is a marked slot

 Broadcast_Data_Burst [Bit2] – Slot is a broadcast data slot
 Broadcast_Page [Bit1] – Slot is a broadcast page slot
 General_Page [Bit0] – Slot is a general page slot
SCI 1 Slot cycle index in twos complement (-3 to 7)
Slot_Number 2 Slot number (0 to 2047)
Reacq Data Packet ID 1 Indicates reacquisition type and whether a reacq data packet
is included
 0 – Reacquisition was not attempted (no data packet is
included)
 1 – Success; reacquired the system (Reacq data packet is
included)
 2 – Failure; was unable to reacquire the system (Prior data
packet is included)
 3 – Fake; did not sleep, kept searching (Prior data packet is
included)
Reacq Data Packet Size 1 Size in bytes of the Reacq Data Packet; field is set to 0 if a
reacq data packet is not included and shall be a multiple of
4 bytes

Log Record Formats
Length
Field Description
(bytes)
Technology Data 1 Indicates sleep type and whether a subpacket is included
Pac12ket ID  0 – Sleep was not attempted
 1 – Slept on IS-95B/IS-2000 system (Online Technology
data packet is included)
 2 – Slept on IS-95A system (Online Technology data
packet is included)
 3 – Slept on QPCH system (Online Technology data packet
is included)
 4 – No time for sleep (no data packet is included)
 5 – Slept on QPCH system (Offline Technology data packet
is included)
Technology Data Packet 1 Size in bytes of the Technology Data Packet; field is set to 0
Size if a technology data packet is not included and shall be a
T
multiple of 4 bytes
n PS
Reacq or Prio Data Reacq Data If Reacq Data Packet ID is 0 this field is omitted; otherwise, the
Packet Packet Size designated data packet is included; see Section 5.3.285.8.1
34
for Reacq Data Packet format description; see
om 8:
Section 5.3.285.8.2 for Prio Data Packet format description
l.c :4
. c
Technology Data Packet Technology If Technology Data Packet size is 0 this field is omitted;
te 13
Data Packet otherwise, the designated data packet is included; see

Size Section 5.3.285.8.3 for format description
.7 bk t
41 -b 1 a
3
15
ei .0
5.3.285.8.1 Reacq Data Packet

0.
w 01
12
ou 3.
Length
Field Description
2.
zh 201
(bytes)
RF Band Class & 2 CAI band class and channel on which the mobile was
Channel reacquired; see Appendix C for a description; bit values are:
 [Bit15: Bit12] – RF band class
 [Bit11:Bit0] – RF channel
Pilot PN 2 Pilot PN offset on which the mobile reacquired (0 to 511)
Slew 2 Slew found after reacquisition, in chipx8, signed
Time 2 Time to reacquire, in 100-µs units
Type 1 Type of reacquisition

 1 – Normal reacquisition
 2 – Cheap fast RAHO
 3 – Expensive fast RAHO
 4 – RAHO
 5 – Ofreq RAHO
Neighbors Searched 1 Number of neighbors searched after reacquisition before

going back to sleep or transitioning to nonslotted mode

Log Record Formats
Length
Field Description
(bytes)
Old Active Pilot 2 Pilot from which it was handed off
Reacq Linear Ecio 4 Energy of the reacq pilot, in linear Ec/I0 * 9 * 216
Old Active Linear Ecio 4 Ec/I0 of the old active, in linear Ec/I0 units (0 if no handoff)
5.3.285.8.2 Prio Data Packet
Reserved 3 Reserved
Neighbors Searched 1 Number of neighbors searched after reacquisition before

returning to sleep or transitioning to nonslotted mode
T
n PS
5.3.285.8.3 Technology Data Packet
34
5.3.285.8.3.1 Online
om 8:
l.c :4
. c
te 13
Sleep Time 4 Amount of time the mobile slept, in chips

.7 bk t
41 -b 1 a
3
RF AGC at Decode 2 RF AGC at wakeup, signed
15
ei .0
Boundary Formula to convert to dBm:

0.
w 01
(value / 3) - 63.248, where value is signed

12
ou 3.
Setup Time 2 Time in 100-µs units between RF becoming stable and the
2.
zh 201
mobile being ready to demodulate
5.3.285.8.3.2 Offline
Sleep Time 4 Amount of time the mobile slept, in chips

RF AGC at Wakeup 2 RF AGC at wakeup, signed; formula to convert to dBm:
RF AGC at Recording 2 RF AGC at end of recording, signed; formula to convert to

End dBm:
Timeline Active Time 2 Time in 100-µs units between RTC on and being done
demodulating
Record Time 2 Time in chips recording samples
Antenna 1 Antenna (0,1,2); 2 means diversity
Queue 1 Queue on which the demodulation is located
Num_Paths 1 Number of paths used for demodulation
Reserved 1 Reserved

Log Record Formats
5.3.285.9 QPCH Subpacket
Slot_Number 2 Paging slot (0 to 2047); the paging slot numbering is also

used for broadcast slots
Transfer Reason 1 QPCH transfer reason (why QPCH could transfer back to
idle)
 0 – QPCH_NO_XFER
 1 – QPCH_SLOT_IMMINENT
 2 – QPCH_MC_NOT_VALID
 3 – QPCH_CH_EST_BAD_SIGNAL
 4 – QPCH_XFER_BCAST_DATA
 5 – QPCH_BP_AND_PG
 6 – QPCH_BP_NOT_SUPPORTED
 7 – QPCH_RWUP
T
 8 – QPCH_PI1_PI2_ON
n PS
 9 – QPCH_BI1_BI2_ON
 10 – QPCH_NEXT_SLOT_NOT_SUPPORTED
34
 11 – QPCH_CCI_HANDOFF
om 8:
 12 – QPCH_CCI_ON
l.c :4
c
 13 – QPCH_DISABLE_BIO_SWITCH
.
te 13
.7 bk t
41 -b 1 a
Rate 1 3 Rate for QPCH paging indicators:

 0 – 4800 bps
15
ei .0
 1 – 9600 bps
0.
w 01
12
ou 3.
Num_Configs 1 Number of QPCH configurations

2.
zh 201
Num_Indicators 1 Number of indicators in QPCH slot (0 to 6)
Reserved 2 Reserved
Configuration Data 12 * Configuration data block for each of the Num_Configs

Num_configs entries; see Section 5.3.285.9.1 for format description
Indicator Data 16 * Indicator data block for each of the Num_Indicators entries;
Num_Indicators see Section 5.3.285.9.2 for format description
5.3.285.9.1 Configuration Data
Length
Field Description
(bytes)
Pilot_PN 2 PN index of pilot (0 to 511)
PI_Walsh 1 Walsh code for paging indicators (0 to 128)

Log Record Formats
Length
Field Description
(bytes)
PI_Pwr_Level 1 Power level for paging indicator (0 to 7)
 000 – 5 dB below pilot channel transmit power
 101 – Same as pilot channel transmit power
 110 – 1 dB above pilot channel transmit power
 111 – 2 dB above pilot channel transmit power
BI_Supported 1 Broadcast indicator support

 0 – Broadcast indicators not supported
 1 – Broadcast indicators supported
T
n PS
BI_Walsh 1 Walsh code for broadcast indicators (0 to 128); this field is
only valid if BI_Supported is 1
34
BI_Pwr_Level 1 Power level for broadcast indicator (0 to 7); values are the
om 8:
same as PI_Pwr_Level; this field is only valid if
l.c :4
c
BI_Supported is 1
.
te 13
CCI_Supported 1 Configuration change indicator support

.7 bk t
41 -b 1 a
 0 – Configuration change indicators not supported

3
 1 – Configuration change indicators supported
15
ei .0
0.
w 01
12
CCI_Walsh 1 Walsh code for configuration change indicators (0 to 128);

ou 3.
this field is only valid if CCI_Supported is 1

2.
zh 201
CCI_Pwr_Level 1 Power level for configuration change indicator (0 to 7);

values are the same as PI_Pwr_Level; this field is only valid
if CCI_Supported is 1
Reserved 1 Reserved
5.3.285.9.2 Indicator Data
Length
Field Description
(bytes)
Status 1 Result of indicator demodulation (0 to 4)

 0 – Not applicable
 1 – Not detected
 2 – Detected
 3 – Erasure
 4 – Missed

Log Record Formats
Length
Field Description
(bytes)
Type 1 Type of indicator (0 to 5)

 0 – Paging indicator #1
 1 – Paging indicator #2
 2 – Configuration change indicator #1
 3 – Configuration change indicator #2
 4 – Broadcast indicator #1
 5 – Broadcast indicator #2
THI 1 THI threshold for indicator described by the type field

(0 to 255)
THB 1 THB threshold for indicator described by the type field

(0 to 255)
Position 2 Position of indicator (0 to 768)
T
n PS
Ind_I_Amp 2 Indicator amplitude on I channel, signed
34
Ind_Q_Amp 2 Indicator amplitude on Q channel, signed
om 8:
Common Pilot Energy 2 Common pilot energy (positive unsigned); to convert to Ec/I0,
l.c :4
c
divide by 1152
.
te 13
Diversity Pilot Energy 2 Diversity pilot energy (positive unsigned); to convert to Ec/I0,
.7 bk t
divide by 1152
41 -b 1 a
3
Reserved 2 Reserved
15
ei .0
0.
w 01
12
5.3.285.10 AFC Subpacket

ou 3.
2.
zh 201
Length
Field Description
(bytes)
Timestamp 8 System time of the first frequency entry; the first 48 bits are in
1.25-ms units, from midnight on Jan 6, 1980; the least
significant 16 bits are in 1/32 chip resolution
Mode 1 Frequency tracking mode

 0 – VCTCXO tracking only
 1 – Fixed bandwidth rotator and VCO tracking
 2 – Rotator/VCO tracking mode with bandwidth
proportional to Ec/I0
 3 – Rotator-only tracking
Gain 1 Gain mode

 Gain = 0 corresponds to Acquisition or Transfer Gains
 Gain = 1 corresponds with Tracking Gains setting for
frequency loops
This field is invalid if Frequency Tracking Mode is 1.
Pilot Filter Gain 1 Pilot filter gain

gPF = PILOT_FILTER_GAIN_FACTOR / 128
RF Band 1 CAI band class; see Appendix C for a description

Log Record Formats
Length
Field Description
(bytes)
RF CDMA Channel 2 CDMA channel number
VCO Slope 2 Calibrated slope of the voltage-controlled oscillator, used

to convert the Frequency Info data into Hz as specified in
Section 5.3.285.10.1; VCO slope is invalid if this field equals
0.
Thermistor 2 16-bit thermistor value, in degrees C, signed
Reserved 2 Reserved
Num_Entries 4 Number of frequency entries
Frequency Info 8* Frequency data block for each of the Num_Entries frequency
Num_Entries data points; see Section 5.3.285.10.1 for format description
T
5.3.285.10.1 Frequency Info
n PS
Length
34
Field Description
(bytes)
om 8:
VCO Accumulator 2 Value of the voltage-controlled oscillator's frequency
l.c :4
c
accumulator, signed
.
te 13
VCO Accumulator in Hz = VCO Accumulator * VCO Slope *

2^-20 * carrier frequency (in MHz)
.7 bk t
41 -b 1 a
3
Rotator Accumulator 2 Value of the finger rotator accumulator, in 1.1719 Hz per unit,
15
ei .0
signed
0.
w 01
Delta Time 2 Time in 1-ms units between this sample and the last sample
12
ou 3.
RSSI 2 Master finger RSSI

2.
zh 201
5.3.285.11 Traffic Demod Status Subpacket

FFPC Set Point 4 Current FCH FPC set point multiplied by 220, in db
FFPC Setpoint (dB) = (float)raw_log_value / 220
FPCSC Gain 2 Forward power control subchannel gain multiplied by 4,
in dB
FPC Gain (dB) = (float)raw_log_value / 4.0
FCH Ect Raw 2 Current fundamental channel chip energy to Nt noise floor
ratio (raw)
FCH Ecp Raw 2 Current fundamental channel pilot energy to Nt noise floor
ratio (raw)
FCH Nt Raw 2 Current value of noise floor during the most recent frame
(raw)

Log Record Formats
FPC Enable 1 Current status of whether forward power control is enabled

 1 – Enabled
 0 – Disabled
FPC Mode 1 Current forward power control mode

 0 – PRI_800Hz
 1 – PRI_400Hz_SEC_400Hz
 2 – PRI_200Hz_SEC_600Hz
 3 – PRI_EIB3
FPC History 2 Bit history of forward power control during the most recent
frame; packed 16-bit value representing the last 1.25-ms
pctl up and down bits
T
RPC History 2 Bit history of reverse power control during the most recent
n PS
frame; packed 16-bit value representing the last 1.25-ms
pctl up and down bits
34
Current RC 1 Current radio configuration setting (RC1...RC5) used by
om 8:
frame processing
l.c :4
c
 1 – RC1
.
te 13
 2 – RC2, etc.
.7 bk t
41 -b 1 a
3
Decoder Rate 1 Rate determination algorithm decision of most recent frame
15
ei .0
 0 – BLANK (Indicates data was blanked)

0.
w 01
 1 – EIGHTH_RATE (indicates rate 1/8 data)

12
 2 – QUARTER_RATE (indicates rate 1/4 data)

ou 3.
 3 – HALF_RATE (indicates rate 1/2 data)

2.
zh 201
 4 – FULL_RATE (indicates full-rate data)

 5 – NULL_RATE (indicates DTX rate)
Erasure 1 Indication of whether the most recent frame was an

erasure
 1 – Erasure
 0 – Not erasure
Reserved 3 Reserved
Frame Status 2*4 Current CRC status for each candidate rate (full, half,
quarter, eighth) used by RDA
Reserved 1 2*4 Reserved
Reserved 2 4*4 Reserved
5.3.285.12 Channel Estimator Subpacket
Channel Estimate 4 Channel estimate in linear Ec/I0 * 9 * 216

Log Record Formats
5.3.285.13 Acquisition Info Subpacket
Num Acq Successes 1 Total number of acquisition successes declared since

powerup (maximum of 255)
Num Acq Failures 1 Total number of acquisition failures declared since

powerup (maximum of 255)
Num Acq Entries 2 Number of acquisition logging entries reported in the

packet
Acq Entries 6 * Num Acq Acquisition attempts information; see

Entries Section 5.3.285.13.1 for format description
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.285.13.1 Acquisition Entry
State/Info Identifier 1 Identifier to determine what each field is reporting; see

Section 5.3.285.13.2 for format description
Timestamp 1 Last 8 bits of the phone’s “current time,” in 1.25-ms units;

this gives a resolution of 255 * 1.25 ms
Field 1 2 Field 1 definition is determined by State/Info Identifier; see
Field 2 2 Field 2 definition is determined by State/Info Identifier; see

5.3.285.13.2 State/Info Identifier and Field Definitions
T
5.3.285.13.2.1 State/info identifier
n PS
State/info
34
identifier State/info identifier Field 1 Field 2
om 8:
value l.c :4
. c
0x01 Attempt Type Frequency Mode Frequency Bin
te 13
0x02 Next Bin Frequency Mode Frequency Bin

.7 bk t
41 -b 1 a
3
0x10 Ready Acq Mode Antenna Configuration
15
ei .0
0x11 Tune CDMA Band Class CDMA Channel

0.
w 01
12
0x12 RX_AGC Check RX_AGC Value RX_AGC Threshold

ou 3.
2.
zh 201
0x20 Detect/Dwell Info Detect Peak Eng Threshold Dwell Peak Eng Threshold
0x21 Detect LGP LGP Pilot Num Detect LGP Peaks

Passed
0x22 Detect Num of Detect Searches Num Detect Peaks Passed
0x30 Dwell Num of Dwell Searches Num Dwell Peaks Passed
0x40 Verify Num Fingers Assigned RSSI Threshold
0x41 Verify RSSI Check High Resolution RSSI —
0x50 Acq Mode Pullin RSSI hysteresis Freq Err Delta Threshold
0x51 Freq Err Check VCO Acc Rot Acc
0x60 Trk Mode Pullin RSSI hysteresis Freq Err Delta Threshold
0x61 Freq Err Check VCO Acc Rot Acc
0x63 Rotator Transfer Check Rotator Transfer Threshold Post Transfer VCO Acc
0x70 Success ACQ Success Time —

Log Record Formats
State/info
identifier State/info identifier Field 1 Field 2
value
0x80 Failure ACQ Failure Time Num Failures Since Last
Success
All others Reserved Reserved Reserved
5.3.285.13.2.2 Field descriptions
Frequency Mode Acquisition frequency mode used for this acquisition attempt
 0 – Last good pilot; recent pilot information is available
 1 – Recent good system; recent good system VCO and rotator
accumulator information is available
 2 – Frequency/temperature; frequency/temperature table has VCO
T
and rotator accumulator information
n PS
 Normal; no extra information available, start from scratch
34
om 8:
Frequency Bin Acquisition frequency bin used for this acquisition attempt; value is
l.c :4
c
rotator units as a distance from the center frequency, in 1.1719 Hz per
.
te 13
unit
Acq Mode Acquisition mode selected by system determination

.7 bk t
41 -b 1 a
0 – Full acquisition

3
15
 1 – Mini acquisition
ei .0
 2 – Micro acquisition
0.
w 01

12
ou 3.
2.
zh 201
Antenna Configuration Antenna configuration

 0 – RX0 (fingers operating on RX0)
 1 – RX1 (fingers operating on RX1)
 3 – Simultaneous mode (fingers operating on RX0)
 4 – Simultaneous mode (fingers operating on RX1)
CDMA Band Class CAI band class; see Appendix C for a description
CDMA Channel CDMA channel number
RX_AGC value Raw AGC value for the current antenna

Rx strength in dBm = -63.248+ ((AGC * 334) / 1000)
RX_AGC Threshold Raw AGC threshold, threshold used if current acquisition is in

DB_ACQ_MICRO mode
Rx strength in dBm = -63.248+ ((AGC * 334) / 1000)
Detect Peak Eng Threshold Energy threshold for detect search peaks
Dwell Peak Eng Threshold Energy threshold for dwell search peaks
LGP Pilot Pilot PN (0 to 511) of the last good pilot
Num Detect LGP Peaks Passed Number of detect LGP peaks that passed the threshold check
Num of Detect Searches Number of detect searches programmed

Log Record Formats

Num Detect Peaks Passed Number of detect peaks that passed the threshold check
Num of Dwell Searches Number of dwell searches programmed
Num Dwell Peaks Passed Number of dwell peaks that passed the threshold check
Num Fingers Assigned Number of fingers assigned to dwell peaks
RSSI Threshold Finger RSSI threshold in high resolution units
High Resolution RSSI Finger RSSI in high resolution units
RSSI Hysteresis Finger RSSI hysteresis threshold in high resolution units
Freq Err Delta Threshold Frequency error delta threshold, in 1.1719 Hz per unit
VCO Acc Value of the voltage-controlled oscillator's frequency accumulator, in

1.1719 Hz per unit, signed
Rot Acc Value of the finger rotator accumulator, in 1.1719 Hz per unit, signed
T
n PS
Rotator Transfer Threshold Rotator transfer threshold (to the VCO Acc), in 1.1719 Hz per unit
34
Post Transfer VCO Acc VCO Acc value after rotator transfer, in 1.1719 Hz per unit
om 8:
ACQ Success Time Time in ms that this successful acquisition took
l.c :4
. c
ACQ Failure Time Time in ms that this failed acquisition took
te 13
Num Failures Since Last Success Number of unsuccessful acquisition attempts since the last successful
.7 bk t
41 -b 1 a
attempt
3
15
ei .0
0.
w 01
5.3.285.14 TC Call Statistics Subpacket

12
ou 3.

2.
zh 201
Current RC 2 Current radio configuration setting (RC1...RC5) used by

frame processing
 1 – RC1
 2 – RC2, etc.
TC Algorithm Status 2 TC Algorithm that was used for the call

 0 – TC1
 1 – TC2
Total Frames Received 4 Total number of frames received by the mobile
Total Frames Received 4 Total number of frames received as erasure

as Erasure
Number of Tx Off Events 4 Number of times the mobile station turned its transmitter off
Number of Tx Off Frames 4 Number of frames received while the mobile's transmitter
was off
Active Count 4 Number of Active set searches performed
Candidate Count 4 Number of Candidate set searches performed

Log Record Formats

Pre-candidate Count 4 Number of PreCandidate set searches performed
Neighbour Count 4 Number of Neighbor set searches performed
Remainder Count 4 Number of Remainder set searches performed
Unknown Count 4 Number of Unknown set searches performed
Add Report Events 4 Number of T_Add report events generated
Drop Report Events 4 Number of T_Drop report events generated
Comp Report Events 4 Number of T_Comp report events generated
TAdd PSMMs 4 Number of T_Add PSMMs actually sent
TDrop PSMMs 4 Number of T_Drop PSMMs actually sent
TComp PSMMs 4 Number of T_Comp PSMMs actually sent
T
PMROs 4 Number of PMROs received
n PS
PMRMs 4 Number of PMRMs received
34
Frame Quality Count 4 Number of frames used to calculate the following four fields
om 8:
l.c :4
c
FCH Ect Raw 4 Current fundamental channel chip energy to Nt noise floor
.
te 13
ratio (raw)
FCH Ecp Raw 4 Current fundamental channel pilot energy to Nt noise floor
.7 bk t
41 -b 1 a
ratio (raw)
3
15
ei .0
FCH Nt Raw 4 Current value of noise floor during the most recent frame
0.
w 01
(raw)
12
ou 3.
FPCSC Gain 4 Forward power control subchannel gain multiplied by 4, in

2.
zh 201
dB
FPC Gain (dB) = (float)raw_log_value / 4.0
Messages Received 4 Number of forward link messages received
Messages Sent 4 Number of reverse link messages sent
Handoff State Hist Size 2 Size of the Handoff State Histogram field
Re-Tx Count Hist Size 2 Size of the Re-Tx Count Histogram field
Erasure Count Hist Size 2 Size of the Erasure Count Histogram field
Ecio Table Hist Size 2 Size of the Ecio Histogram, Rx Histogram, Tx Histogram,
and Tx Adj Histogram fields
Handoff State Histogram 4 * Handoff Counts the number of frames received in each combination
State Hist Size of soft-handoff, 1-way to 6-way
Re-Tx Count Histogram 4 * Re-Tx Count Counts the number of times a reverse link message had to
Hist Size be sent before getting ACK from the BS, from 1 to 15 times
Erasure Count Histogram 4 * Erasure Counts the number of erasures received every 100 frames,
Count Hist Size in bins from 1 to 7+
Ecio Histogram 4 * Ecio Table Counts the number of frames at each EcIo level from 0 to
Hist Size -31.5 dB
Rx Histogram 4 * Ecio Table Counts the number of frames at each Rx level from -40 to
Hist Size -103 dBm

Log Record Formats

Tx Histogram 4 * Ecio Table Counts the number of frames at each Tx level from +32 to
Hist Size -31 dBm
Tx Adj Histogram 4 * Ecio Table Counts the number of frames at each Tx Adj level from +32
Hist Size to -31 dB
5.3.285.15 Idle Demod Stats Subpacket
Sub-packet Header 4 Sub-packet header
Channel 1 Idle Channel the stats apply to

 0 – PCH
 1 – BCCH
 2 – FCCCH
T
n PS
CRC 1 LSB is set if the frame CRC passed; only apples
34
to BCCH and FCCCH
om 8:
Frame SEC 2
l.c :4 Frame Symbol Error Count
. c
Frame Energy 4 Frame symbol energy
te 13
.7 bk t
41 -b 1 a
5.3.286 Reserved (LOG_CODE 0x11A4 – 0x11A8)

3
15
ei .0
0.
w 01
5.3.287 Reserved (LOG_CODE 0x11A9)

12
ou 3.
2.
zh 201
5.3.288 Reserved (LOG_CODE 0x11AA)
5.3.289 Reserved (LOG_CODE 0x11AB – 0x11B1)
5.3.290 Qtv™ Frame Decode Information (LOG_CODE 0x11B2)

This contains information about a decoded Qtv video frame.
TIMESTAMP 4 Frame timestamp
IS_I_FRAME 1 Frame value

 0 – P-frame
 1 – I-frame
NUM_BYTES 4 Number of bytes of data in the decode buffer
NUM_BYTES_PROCESSED 4 Number of bytes of data processed during decode
percentConcealedMBs 4 Percentage of macroblocks concealed

Log Record Formats
5.3.291 Qtv Frame Render Information (LOG_CODE 0x11B3)

This contains information about a video frame rendered by Qtv.
NUM_BYTES 4 Frame size, in bytes
FRAME_HEIGHT 4 Frame height, in pixels
FRAME_WIDTH 4 Frame width, in pixels
5.3.292 Qtv A/V Sync Information (LOG_CODE 0x11B4)

This contains information about A/V timing of rendered video.
T
n PS
34
DELAY 4 Delay between the frame’s ideal display time and the
om 8:
l.c :4 time at which it is being displayed, in ms; positive delays
c
mean late frames, negative delays mean frames are
.
te 13
being displayed early
FrameDropped 1 Frame dropped information

.7 bk t
41 -b 1 a
3
15
ei .0
5.3.293 Reserved (LOG_CODE 0x11B5)

0.
w 01
12
ou 3.
2.
zh 201
5.3.294 LOG_QTV_PDS2_STATS (LOG_CODE 0x11B6)

This contains the text of the download statistics.
DataRateInBPS 4 Data rate of the Incoming MP4 data in BPS
ClipStopTime 4 Total duration of the clip in seconds
DownloadTime 4 Total duration of data downloaded
total_bytes_buffer_can_hold 4 Total size of the buffer in Bytes
total_bytes_in_buffer 4 Size of the buffer occupied in bytes
5.3.295 LOG_QTV_PDS2_GET_REQUEST (LOG_CODE 0x11B7)

This contains the text of an HTTP Get request.
CNT 4 Number of bytes in HTTP_MSG_BYTE (little endian)
HTTP_MSG_BYTE CNT Text of the HTTP Get request; does not include
NULL-terminator character

Log Record Formats
5.3.296 LOG_QTV_PDS2_GET_RESP_HEADER (LOG_CODE 0x11B8)

This contains the text of an HTTP Get response header.
CNT 4 Number of bytes in HTTP_MSG_BYTE (little endian)
HTTP_MSG_BYTE CNT Text of the HTTP Get response header; does not include
5.3.297 Obsolete (LOG_CODE 0x11B9)
5.3.298 CMX Audio Input Data (LOG_CODE 0x11BA)

This holds the audio input data buffer for CMX that is sent from Qtv.
T
n PS
34
DATA 512 (max) Raw input data from Qtv to CMX; size can be up to 512
bytes
om 8:
CHUNK NUMBER 2
l.c :4Chunk number of current data buffer
. c
te 13
DATA SIZE 2 Specifies actual size of the data that is present in DATA
buffer
.7 bk t
41 -b 1 a
3
15
ei .0
5.3.299 RTSP OPTIONS Request (LOG_CODE 0x11BB)

0.
w 01
12
This contains the text of an RTSP OPTIONS request sent to the streaming server.
ou 3.
2.
zh 201
CNT 4 Number of bytes in RTSP_BYTE (little endian)
RTSP_BYTE CNT Text of the RTSP OPTIONS request; does not include
5.3.300 RTSP GET_PARAMETER Request (LOG_CODE 0x11BC)

This contains the text of an RTSP GET_PARAMETER request sent to the streaming server.
RTSP_BYTE CNT Text of the RTSP GET_PARAMETER request; does not

include NULL-terminator character

Log Record Formats
5.3.301 RTSP SET_PARAMETER Request (LOG_CODE 0x11BD)

This contains the text of an RTSP SET_PARAMETER request sent to the streaming server.
RTSP_BYTE CNT Text of the RTSP SET_PARAMETER request; does not

include NULL-terminator character
5.3.302 Qtv Video Bitstream Logging (LOG_CODE 0x11BE)

When enabled, the video bitstream is logged. The bitstream can be extracted from the logged
QXDM packets by using a Perl script.
T
n PS
CHUNKNUM 2 If a frame contains >512 bytes of data (maximum size of
the packet logged), it is broken into chunks; CHUNKNUM is
34
a count of the number of chunks per frame
om 8:
NBYTES 4 Number of valid bytes in DATA (always ≤ 512)
l.c :4
c
DATA 512 Video bitstream logged
.
te 13
.7 bk t
41 -b 1 a
5.3.303 Qtv ARM video decode time stats (LOG_CODE 0x11BF)

3
15
ei .0
This holds information of Qtv’s frame decode time statistics (ARM decode time). This log
0.
w 01
provides the average and peak ARM decode time taken for decoding a video frame. This log is
12
ou 3.
generated once at the end of the video clip. The worst case packet size for this log is 9 bytes.
2.
zh 201
Avg. decode time 4 Average decode time taken by the decoder for a frame
Peak decode time 4 Peak decode time taken by decoder for a frame
Video type 1 Video type that is played

 0 – MP4
 1 – H264
 2 – JPEG
 3 – WMV
 4 – OSCAR
5.3.304 Reserved (LOG_CODE 0x11C0)

Log Record Formats
5.3.305 LOG_QTV_CMD_LOGGING_C (LOG_CODE 0x11C1)

This log packet is used to log the commands and associated information that are sent to Qtv
through the Qtv Player API. Therefore this log record will be generated whenever the Qtv
command that supports command logging is invoked.
The LogQtvCmd function gets executed explicitly by the Qtv command APIs for which the
command logging is needed. The LogQtvCmd function logs the information about the log
header, timestamp, command name, command length, total number of supplied argument to that
command (if any), and the argument themselves.
If the supplied argument is of string type, it logs the string length and string argument. If it is a
double type, it logs the double variable information in to sign, exponent, and mantissa parts. If
the supplied argument type is integer, it logs the integer argument. This log is generated based on
the LogQtvCmd function call from the QTV command APIs. So, the frequency of logs depends
on the function call.
The packet size is varying in nature which depends on the supplied argument. The packet size of
T
n PS
the log command is different for different Qtv commands.
34
om 8:
timestamp 4 Time when the Qtv API was invoked and the command was
l.c :4
c
logged
.
te 13
cmd_name_len 2 Length of the command/length of the character array

.7 bk t
cmd-name
41 -b 1 a
3
15
cmd-name cmd_name_len Character array that holds the command name
ei .0
0.
w 01
num_args 2 Number of pairs of the fields arg_d_type and arg which

12
indicates the argument type and the argument

ou 3.
2.
zh 201
arg_d_type 1 One character byte which indicates the type of the field args
args Variable The command argument which is interpreted based on the

value in field arg_d_type:
 s – A string; see Section 5.3.305.1
 d – An integer; see Section 5.3.305.2
 u – An unsigned integer; Section 5.3.305.3
 g – A double; see Section 5.3.305.4
packetSequence 4 Packet sequence number

number
5.3.305.1 qtv_arg_str
If the field arg_d_type is of string type, i.e., equal to s, the field args should be interpreted as type
qtv_arg_str, as shown in the following table.
arg_str_len 2 Length of the string/length of the field arg-str
arg_str arg_str_len Character array that holds the string

Log Record Formats
5.3.305.2 arg_int
If the field arg_d_type is of integer type, i.e., it is equal to d, args field will be like the following
table.
Length
Field Description
(bytes)
arg_int 4 Integer argument
5.3.305.3 arg_uint
If the field arg_d_type is of unsigned integer type, i.e., equal to u, args field will be like the
following table.
arg_uint 4 Unsigned Integer argument
T
n PS
5.3.305.4 qtv_arg_double
34
If the field arg_d_type is of double type, i.e., equal to g, args field will be like the following table.
om 8:
l.c :4
. c
te 13
arg_double_sign 1 One byte that indicates whether it is a positive value (=1)

.7 bk t
41 -b 1 a
or a negative value (= -1)

3
15
ei .0
arg_double_int_part 4 Integer part of the double value

0.
w 01
arg_double_frac_part 2 Fractional part of the double value

12
ou 3.
2.
zh 201
5.3.307 Qtv video frame decode info (LOG_CODE 0x11C3)

This holds information regarding the video frame decoded. This log contains the number of
macro blocks in error (for each layer), frame type and if the presentation timestamp is
interpolated or not, etc., for a video frame. This log is generated for every video frame that is
decoded. The worst case packet size for this log is 23 bytes.
FrameType 1 Indicates the frame type decoded

 I_FRAME = 1
 P_FRAME = 2
 B_FRAME = 3
 FRUC_FRAME = 4
SuperFrameID 4 Super frame ID of the video frame if present, e.g.,

MediaFLO™.

Log Record Formats

Layer_Decoded 1 Layer decoded in the frame
 BASE_LAYER = 0
 ENH_LAYER = 1
 BASE_PLUS_ENH_LAYER = 2
NumIntraMBinBase 2 Number of Intra MB blocks in base layer
NumIntraMBinEnh 2 Number of Intra MB blocks in enhanced layer
NumInterMBinBase 2 Number of Inter MB blocks in base layer
NumInterMBinEnh 2 Number of Inter MB blocks in enhanced layer
NumErrorMBinBase 2 Number of Error MB blocks in base layer
NumErrorMBinEnh 2 Number of Error MB blocks in enhanced layer
T
VideoFramePTS 4 Presentation timestamp of the video frame
n PS
isInterpolated 1 Indicates whether the frame PTS is interpolated
34
 0 – Not interpolated
 1 – Interpolated
om 8:
l.c :4
. c
te 13
5.3.308 LOG_QTV_RTCP_COMPOUND_RR_C (LOG_CODE 0x11C4)

.7 bk t
41 -b 1 a
3
This log packet is used to log the RTCP compound RR packets. Therefore, this log record will be
15
ei .0
generated whenever Qtv sends an RR packet to the streaming server.

0.
w 01
12
When Qtv sends an RR packet, it logs basic RR packet information, the profile extension, SDES
ou 3.
2.
zh 201
information, and APP information. It also logs the information, so the frequency of logs depends
on how often Qtv sends RR packets, which is often specified by the server.
The packet size varies depending on the information in the packet.
sourceSSRC 4 Data source being reported
fractionLost 1 Fraction lost since last SR/RR
cumulativeNumberOfPacketsLost 4 Cumulative number of packets lost
highestSequenceNumberReceived 4 Highest sequence number received
interarrivalJitter 4 Inter-arrival jitter
lastSR 4 Last SR packet from this source
delaySinceLastSR 4 Delay since last SR
cumulativeBytesReceived 4 Cumulative bytes received
rtcpProfileExtLog RTCP_PROFILE_EXT_LOG Profile extensions; see

packet size Section 5.3.308.1 for
RTCP_PROFILE_EXT_LOG format
description

Log Record Formats

rtcpSdesLog RTCP_SDES_LOG packet SDES information; see
size Section 5.3.308.2 for
RTCP_SDES_LOG format
description
rtcpAppLog RTCP_APP_LOG packet size Application information; see

Section 5.3.308.3 for
RTCP_APP_LOG format description
5.3.308.1 RTCP_PROFILE_EXT_LOG
length 4 Length of profile extension data; if the packet does not contain profile
extensions, this field is set to 0
data Length Character array that holds the profile extension data
T
n PS
5.3.308.2 RTCP_SDES_LOG
34
om 8:
Field Length (bytes) l.c :4 Description
. c
te 13
type 1 SDES type; if the packet does not contain SDES information, this field is
set to 0
.7 bk t
41 -b 1 a
length 1 SDES Data/Description length; if the packet does not contain SDES
3
information, this field is set to 0
15
ei .0
0.
w 01
des Length Character array holding the SDES data/description

12
ou 3.
2.
zh 201
5.3.308.3 RTCP_APP_LOG
Subtype 1 Subtype to allow a set of APP packets to be defined under this
Ssrc 4 SSRC; if the packet does not contain APP information, this subtype
set to 0
Type 4 Character array for App Type (PVSS/PSS0/bill); if type is other than
this app_type, it will not be logged
app_type Variable as given PVSS or rate adaptation or billing app data:

below  RTCP_PVSS_APP_LOG if type is PVSS; see Section 5.3.308.3.1
 RTCP_NADU_APP_LOG if type is PSS0; see Section 5.3.308.3.2
 LGT_BILLING_INFO_LOG if type is bill; see Section 5.3.308.3.3

Log Record Formats
5.3.308.3.1 RTCP_PVSS_APP_LOG
If the field type in RTCP_APP_LOG is PVSS, field app_type in RTCP_APP_LOG will be
interpreted like this:
Subtype 1 Subtype of PVSS; if subtype is other than 0/1/2,

pvss_app_extra field will not be logged
sendTime 4 Send time
recvRate 4 Receiving rate
recvRateInterval 4 Receiving rate interval
playbackBufDepth 4 Playback buffer depth
highestCtrlMediaSeqNum 4 Highest control media sequence number
cumulativeBytes 4 Cumulative bytes
T
n PS
pvss_app_extra 20 or 4 PVSS APP extra data
 If Subtype is 0, see APP_EXTRA_DRC_LOG
34
 If Subtype is 1, see APP_EXTRA_BUFLOW_LOG
om 8:
l.c :4 If Subtype is 2, see PP_EXTRA_BUFHIGH_LOG
. c
te 13
.7 bk t
41 -b 1 a
5.3.308.3.1.1 APP_EXTRA_DRC_LOG
3
15
ei .0
If the field Subtype is 0 in RTCP_PVSS_APP_LOG, field pvss_app_extra in

0.
w 01
RTCP_PVSS_APP_LOG will be interrupted like this:

12
ou 3.
2.
zh 201
rebufCount 2 Rebuf count
missingPackets 2 Missing packets
cumulativePacketsReceived 4 Cumulative packets received
totalProcessedFrames 4 Total processed frames

totalSkippedFrames 4 Total skipped frames
cumulativePacketsLost 4 Cumulative packets lost
5.3.308.3.1.2 APP_EXTRA_BUFLOW_LOG
depletionRateInteger 2 Depletion rate integer part
depletionRateFraction 2 Depletion rate fraction

Log Record Formats
5.3.308.3.1.3 PP_EXTRA_BUFHIGH_LOG
fillRateInteger 2 Fill rate integer part
fillRateFraction 2 Fill rate fraction part
5.3.308.3.2 RTCP_NADU_APP_LOG
If the field Type in RTCP_APP_LOG is PSS0, app_type in RTCP_APP_LOG will be interpreted
like this:
T
ssrc 4 ssrc
n PS
playout_delay 2 Playout delay
34
Nsn 2 Next ADU sequence number
om 8:
l.c :4
c
rsv_nun 2 Next unit number
.
te 13
fbs 2 Buffer size

.7 bk t
41 -b 1 a
3
5.3.308.3.3 LGT_BILLING_INFO_LOG
15
ei .0
0.
w 01
If the field Type in RTCP_APP_LOG is “bill,” then field app_type in RTCP_APP_LOG will be
12
interpreted like this:

ou 3.
2.
zh 201
len 4 Billing information length
ptr Len Character array holding the billing information
5.3.309 QTV frame buffer release reason (LOG_CODE 0x11C5)

This log holds information about the reason for the release of Qtv’s frame buffer. Whenever a
frame buffer (YUV or RGB) of Qtv is released this log packet gives reason about why the buffer
is released. This log is generated for every frame that is released by Qtv.
Length
Field Description
(bytes)
Release Reason 4  0 – FRAME_RENDERED

 1 – FRAME_DROPPED_AVSYNC
 2 – FRAME_DROPPED_RENDER_FAILURE
 3 – FRAME_DROPPED_RENDER_SUBMIT_FAILURE
 4 – FRAME_DROPPED_DECODE_FAILURE
 5 – FRAME_FLUSHED
TimeStamp 4 Timestamp of the frame being released

Log Record Formats
5.3.310 QTV audio channel switch frame (LOG_CODE 0x11C6)

This log holds information of Qtv’s audio channel switch frame log packet. This log provides the
timestamp of the audio channel switch frame (in case of MFLO) and approximate delay between
the actual channel switch time and the time it is reported. This Log is generated once after the
audio channel switch frame is rendered, e.g., MFLO.
Audio frame Timestamp 4 Presentation timestamp of the audio channel switched

frame
ApproxDelay 4 Approximate delay between the actual channel switch time

and the time it is reported
5.3.311 LOG_QTV_RTP_DECRYPTED_PKT_C (LOG_CODE 0x11C7)
T
This log packet is used to log the decrypted RTP Packet. This log packet is logged after all the
n PS
AU’s within the RTP Packet have been completely decrypted.
34
om 8:
hdr 12
l.c :4Log record header
. c
te 13
size 4 Indicates the RTP packet size
.7 bk t
rtp_content Variable Array containing the complete decrypted RTP packet

41 -b 1 a
3
15
ei .0
This log is generated based on the decryption of the RTP packets. The frequency of logs depends
0.
w 01
12
on the number of decrypted RTP packets.

ou 3.
2.
zh 201
5.3.312 Reserved (LOG_CODE 0x11C8 – 0x11EA)
5.3.313 DPL log messages (LOG_CODE 0x11EB)

The log record structure of each log message sent by the DPL subsystem is defined in this
section.
DPL_ID 4 DPL interface ID to which this packet belongs; this is one

of the interface IDs enabled by the user for logging
SEQ_NUM 2 Used to identify each full length packet; this field is

incremented by 1 for every full length packet logged by
the MSM device; a missing SEQ_NUM indicates to the
postprocessing tool that a packet has been dropped by
DM. SEQ_NUM is 0 for the first logged packet
SEG_NUM + FINAL BIT 2 See SEG_NUM + FINAL BIT definition for format
description
DATA LENGTH - 20 Actual data being logged by the MSM device; contains
data transferred across various interfaces or over-the-air
links

Log Record Formats
SEG_NUM + FINAL BIT definition
Length
Field Description
(bytes)
FINAL BIT 1 (most Indicates whether this is the final segment for a given SEQ_NUM; this
significant bit) field occupies 1 bit. This is the most significant bit of the SEG_NUM +
FINAL BIT field.
SEG_BITS 15 Since full length packets can be quite big, these packets are separated
into smaller chunks (around 250 bytes) before logging; this field is used
to identify each such segment and is incremented by 1 for every
segment logged by the MSM device; a missing SEG_BITS indicates to
the postprocessing tool that a segment has been dropped by DM; this
field is 15 bits long; SEG_BITS is 0 for the first segment of a logged
packet
5.3.314 Reserved (LOG_CODE 0x11EC)
T
n PS
5.3.315 Reserved (LOG_CODE 0x11ED)
34
om 8:
l.c :4
c
5.3.316 Reserved (LOG_CODE 0x11EE)
.
te 13
.7 bk t
41 -b 1 a
5.3.317 Reserved (LOG_CODE 0x11F0)

3
15
ei .0
0.
w 01

12
ou 3.
2.
zh 201
5.3.322 MFLO RSSI VALUE DYNAMIC PARAMS (LOG_CODE 0x11F5)

This log code contains the information for the MediaFLO RSSI value dynamic parameters. This
log code is logged at TDM2/WOIS/LOIS/FRAME1 through FRAME4 Interrupts. This log code
is logged approximately at every 250 ms. The maximum size of this log code is 8 bytes.
Interrupt_type 1 Identifies which Interrupt type has occurred where this log
code is being logged; see Table C-1
Reserved1 2 Reserved
Reserved2 1 Reserved

Log Record Formats

rssi_int_part 2 Contains the value of RSSI (Received Signal Strength
Indicator) Integer part
rssi_fract_part 1 Contains the value of RSSI (Received Signal Strength

Indicator) Fractional part
rssi_value_positive 1 Indicates whether the RSSI Value is positive or negative
5.3.323 MFLO CB INFO DYNAMIC PARAMS (LOG_CODE 0x11F6)

This log code contains the information for the MediaFLO CB information dynamic parameters.
This log code is logged at the end of every superframe for all the active MLCs only if there are
any erasures in these code blocks. This log code is not logged frequently. This is logged
asynchronously. The maximum size of this log code is 10 bytes.
T
n PS
mlc_id 1 Contains the ID number of MLC (MediaFLo Logical
34
Channel)
om 8:
System 1 Indicates whether MediaFLO system being decoded is
l.c :4
c
wide or local; possible values are:
.
te 13
 MFLO WIDE System = 0
 MFLO LOCAL System =1
.7 bk t
41 -b 1 a
3
15
ei .0
Sf_number 4 Indicates the superframe number of the system being

decoded
0.
w 01
12
ou 3.
cb_type 1 Indicates whether the code block being decoded is a BASE

2.
zh 201
or ENHANCE layer; possible values are:

 BASE LAYER CODE BLOCK= 0
 ENHANCED_LAYER_CODE_BLOCK = 1
num_cbs 1 Indicates the number of code blocks present in this MLC in

this superframe
cb_erasure_info[1] 2 Indicates if there are any erasures present in any of the
Code Blocks being decoded currently; this is a bit map
corresponding to each Code Block
5.3.325 MFLO WIDE LOCAL DYNAMIC PARAMS (LOG_CODE 0x11F8)

This log code contains the information for the MediaFLO wide and local dynamic parameters.
This code is logged at TDM2 Interrupt. If programmed for TDM2, this log code is logged every
second. The size of this log code is 17 bytes.

Log Record Formats
flo_fft_local_start 4 Contains the symbol offset at which the LOCAL MLC is

starting in the current superframe
flo_fft_wic_id 1 Contains ID of the strongest Wide area
Reserved 2 Reserved
flo_fft_lic_id 1 Contains ID of the strongest Local area
Reserved 2 Reserved
Reserved 1 Reserved
Reserved 2 Reserved
Reserved 1 Reserved
T
n PS
Reserved 2 Reserved
34
om 8:
5.3.326 MFLO MLC PLP STATS PRERS PARAMS (LOG_CODE 0x11F9)
l.c :4
. c
This log code contains the information for the MediaFLO MLC PLP pre-RS statistics. This log
te 13
code is logged at the end of each Frame Interrupts. This is logged approximately every 250 ms.
.7 bk t
The size of this log code is 22 bytes.

41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.
code is being logged; for possible values, see Table C-1

2.
zh 201
Mlc_id 4 ID number of the MLC (MediaFLO Logical Channel) that is

being decoded in this superframe
System 1 Indicates whether the MediaFLO system being decoded is

wide system or local system; possible values are:
 MFLO WIDE System = 0
 MFLO LOCAL System =1
Num_Base_Layer_ 4 Contains the number of base layer good PLPs

Good_Plps
Num_Base_Layer_Eras_ 4 Contains the number of base layer erasure PLPs

Plps
Num_Enh_Layer_Good_ 4 Contains the number of enhanced layer good PLPs

Plps
Num_Enh_Layer_Eras_ 4 Contains the number of enhance layer erasure PLPs

Plps

Log Record Formats
5.3.327 Reserved (LOG_CODE 0x11FB)
5.3.328 Reserved (LOG_CODE 0x11FD)
5.3.329 Reserved (LOG_CODE 0x11FE)
5.3.330 MFLO MAC INFO STATIC PARAMS (LOG_CODE 0x1200)

This log code contains the information for the MediaFLO MLC MAC information static
parameters. This log code is logged at FRAME4 Interrupt or when the FDS has decided to do an
“Early Exit” procedure. This log code is logged approximately every 1 second. The size of this
log code is 8 bytes.
T
n PS
Interrupt type 8 Identifies which interrupt type has occurred where this log
34
Mac_layer_header 56 MAC header type
om 8:
l.c :4
. c
5.3.330.1 MAC header type
te 13
The following are the MAC Header type codes.

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
Mlc_id 8 ID number of the MLC (MediaFLO Logical Channel) that

12
ou 3.
is being decoded in this superframe

2.
zh 201
system_param_update_flag 1 Indicates whether the system params have been

updated or not; this is a toggle flag
Reserved 7 Reserved for future use
Mlc_rec 40 MLC REC type
5.3.330.2 MLC REC type

This data structure is a union of MLC_P0 type and MLC_P1 type. The way to identify which
structure of this union is to be used is determined by the field “present.” If the present bit is set, it
is always assumed to be MLC P1 TYPE structure. If the “present” field is set to ZERO, then the
MLC P0 Type structure is assumed.
The following are the MLC P1 type codes.
Present 1 Indicates which of the substructures is included in this

union
 0 – MLC P0 type is included
 1 – MLC P1 type is included

Log Record Formats
MLC P0 type 39 One of the structures that can be present, MLC P0 type
MLC P1 type 39 One of the structures that can be present, MLC P1 type
5.3.330.2.1 MLC P0 type

Next_sf_offset 10 Indicates the next superframe offset at which the MLC is

starting
fixed_length_reserved 29 Reserved
T
5.3.330.2.2 MLC P1 type
n PS
34
om 8:
Field Length (bytes)l.c :4 Description
c
start_offset 9 Contains the value of OFDM Symbol offset at which the
.
te 13
MLC for the OIS is present
.7 bk t
slot_info 7 Contains the OIS slot information

41 -b 1 a
3
15
strm_lens 23 Contains the stream lengths of the OIS that is being
ei .0
decoded
0.
w 01
12
ou 3.

2.
zh 201

Log Record Formats
5.3.340 MFLO FTAP PACKETRECORD HEADER PARAMS

(LOG_CODE 0x120C)
This log code contains the information for the MediaFLO FTAP packet record header
parameters. This log code is logged at the end of each superframe, only when the FTAP PLP data
logging mode is enabled. This log code is logged once every second. The maximum size of this
log code is 20 bytes. The RSSI information in this log code depends on logging another log
packet (MFLO RSSI VALUE DYNAMIC PARAMS (LOG_CODE 0x11F5)).
T
System Time 4 Gives the system time for MFLO System; this corresponds
n PS
to the superframe number in the system
34
Flow_id 4 Gives the ID number of the flow that is being decoded; this
flow ID number identifies the flow that is being reported in
om 8:
this log code
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
Stream Id 1 Gives the ID number of stream that is being decoded; this

3
15
stream number identifies the stream that is being reported
ei .0
in this log code.

0.
w 01
12

ou 3.
wide system or local system; possible values are:

2.
zh 201
 0 – MFLO WIDE System

 1 – MFLO LOCAL System
Trans Mode 1 Identifies the Trans mode in which the MLC is encoded –
The MLC mode can be one of the following:
 0 – REG_QPSK_1_3
 1 – REG_QPSK_1_2
 2 – REG_16_QAM_1_3
 3 – REG_16_QAM_1_2
 4 – REG_16_QAM_2_3
 5 – REG_16_QPSK_1_5
 6 – LAY_QPSK_1_3_ER_4
 7 – LAY_QPSK_1_2_ER_4
 8 – LAY_QPSK_2_3_ER_4
 9 – LAY_QPSK_1_3_ER_6_25
 10 – LAY_QPSK_1_2_ER_6_25
 11 – LAY_QPSK_2_3_ER_6_25

Log Record Formats

RS Code 1 Identifies the outer code at which the MLC is being
transmitted – The possible values are:
 0 – OUTER_CODE_NONE
 1 – OUTER_CODE_RS_7_8
 4 – OUTER_CODE_REP_4
Rssi_in_part 2 Contains the value of the RSSI (Received Signal Strength

Indicator) integer part
Rssi_Fract_part 1 Contains the value of the RSSI fractional part
RSSI_Value_positive 1 Indicates whether the RSSI value is positive or negative
NUM plp Records 4 Contains the number of PLP records present in the
T
subsequent FTAP packet records (LOG_CODE 0x120D) in
n PS
this superframe
34
5.3.341 MFLO FTAP PACKETRECORD PARAMS (LOG_CODE 0x120D)
om 8:
l.c :4
c
This log code contains the information for the MediaFLO FTAP packet record parameters. This
.
te 13
log code is logged at the end of each superframe when the FTAP PLP Data mode is enabled. This
.7 bk t
log code gets logged once every second. The maximum size of this log packet can be 1452 bytes.
41 -b 1 a
3
15
ei .0

0.
w 01
Log_packet_header 9 See Section 5.3.341.1 for the FTAP LOG packet header
12
ou 3.
type
2.
zh 201
PLP_record 111 * 13 = 1443 See Section 5.3.341.2 for the PLP record data type
 MAX_FTAP_PACKET_RECORDS = 111
5.3.341.1 FTAP LOG packet header type
System Time 4 Gives the System Time for MFLO System; corresponds to
the superframe number in the system
Log_seq_num 2 Identifies the sequence number used for the current PLP
Records in this superframe; this value is reset to zero for
every superframe
Last Packet 1 Identifies if this log packet is the last log packet for this
sequence of PLP records. If the current log packet is the
last packet, then this field is set to 1; otherwise, this is set to
0.
Actual Num of PLP 2 Identifies exact number of PLP records present in this
Records sequence of log packets for this superframe

Log Record Formats
5.3.341.2 PLP record data type
Flow_id 4 Gives ID number of the flow being decoded; identifies the

flow being reported in this log code
Data_record_or_parity 1 Identifies if the PLP record is for a data PLP or parity PLP. If
this bit is set to 1, this PLP is a parity; otherwise, it is a data
PLP.
Base_or_enhancement 1 Identifies if the PLP being processed is a base layer PLP or

an enhance layer PLP; possible values are:
 BASE LAYER CODE BLOCK = 0
 ENHANCED_LAYER_CODE_BLOCK = 1
preRSErasureIndicator 1 Identifies whether the PLP had any erasures before RS

correction
T
 0 – Indicates this PLP did not have erasures before RS
n PS
correction
 1 – Indicates this PLP had erasure before RS correction
34
om 8:
postRSErasureIndicator 1 Identifies whether the PLP had any erasures after RS
l.c :4
c
correction
.
te 13
 0 – Indicates this PLP does not have erasures after RS

correction
.7 bk t
41 -b 1 a
 1 – Indicates this PLP has erasure after RS correction

3
15
ei .0
0.
w 01
FTAP Sequence Number 4 Contains the value of FTAP sequence number sent by the
12
FTAP server
ou 3.
2.
zh 201
FTAP Test Signature 1 Contains the value of FTAP test signature sent by the FTAP
server
5.3.342 MFLO FTAP WOIS Parameters (Log Code 0x120E)

This holds information for the MediaFLO FTAP wide OIS parameters. This log code is logged
for every WOIS interrupt and is enabled when the FDS is placed in OIS reception mode. This log
code is logged once every second. The maximum size of this log code is 5 bytes.
sysTime 4 System time for the MediaFLO network; this corresponds to

the superframe number of the current superframe that is
being decoded.
woisCRC 1 WideOIS CRC; this is the CRC of the received OIS

messages collected in this superframe for the WIDE
system. Typically, this value is zero if there are no erasures.
Otherwise, this value will be a bitmap of all the erasures
happened during this superframe period.

Log Record Formats
5.3.343 MFLO FTAP LOIS Parameters (Log Code 0x120F)

This contains information for the MediaFLO FTAP local OIS parameters. This log code is
logged for every LOIS interrupt and is enabled when the FDS is placed in OIS reception mode.
This log code is logged once every second. The maximum size of this log code is 5 bytes.
sysTime 4 System time for the MediaFLO network; this corresponds to

the superframe number of the current superframe that is
being decoded
loisCRC 1 Local OIS CRC; this is the CRC of the received OIS
messages collected in this superframe for the LOCAL
system. Typically, this value is zero if there are no erasures.
Otherwise, this value will be a bitmap of all the erasures
happened during this superframe period.
T
5.3.344 MFLO FTAP WID LID Parameters (Log Code 0x1210)
n PS
This contains information for the MediaFLO FTAP wide identity code (WIC) information and
34
local identity code (LIC) information. This log code is logged for every WOIS interrupt and is
om 8:
enabled when the FDS is placed in WIC/LIC Reception mode. This log code is logged once
l.c :4
. c
every second. The maximum size of this log code is 6 bytes.
te 13
.7 bk t
41 -b 1 a
Field Length (bytes)3 Description

15
ei .0
0.
w 01
Wid 1 Wide area ID; this is the ID number for the WIDE system
12
ou 3.
that is being decoded in this superframe. This value can be

used for identifying which WIDE system is being decoded
2.
zh 201
in the current superframe number.
Lid 1 Local area ID; this is the ID number for the LOCAL system
that is being decoded in this superframe. This value can be
used for identifying which LOCAL system is being decoded
in the current superframe number.
5.3.345 MFLO OIS PLP STATS DYNAMIC_PARAMS (LOG_CODE

0x1211)
This log code replaces the existing log code 0x11FA and contains information for the MediaFLO
OIS PLP statistics dynamic parameters. This log code is logged at WOIS and LOIS Interrupts if
the WOIS/LOIS are being decoded/loaded completely. This log code is not logged at a particular
frequency; rather, it is logged only when the OIS decode happens asynchronously. The maximum
size of this log code is 16 bytes.
Sf_number 4 Gives the system time for the MFLO system; this
corresponds to the superframe number in the system
total_num_good_plps 4 Identifies the total number of good PLPs received during

the last OIS decode

Log Record Formats
total_num_erasures 4 Identifies the total number of erasure PLPs received during

the last OIS decode
ois_type 1 Identifies which interrupt type has occurred where this log
code is being logged; this could be WOIS or LOIS; possible
values are:
 0 – Wide OIS
 1 – Local OIS
5.3.346 MFLO OIS INFO STATIC PARAMS (LOG_CODE 0x1212)
T
This log code replaces the existing log code 0x11FC and contains information for the MediaFLO
n PS
OIS INFO static parameters. This log code contains various other data structures as defined
separately below and is logged at WOIS/LOIS interrupt. This log code is not logged at a
34
particular frequency; rather, it is logged only when the OIS decode happens asynchronously. The
maximum size of this log code is 1406 bytes.
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
spec_version 1 Contains the AIS spec version

3
15
 0 – Rev B
ei .0
 1 – Rev D
0.
w 01
12
ou 3.
2.
zh 201
ois_type 1 Identifies which interrupt type has occurred where this log
code is being logged; possible values are:
 0 – Wide OIS
 1 – Local OIS

Ois_info of OIS INFO 32+32+2+1336 = See OIS info type in Section 5.3.346.1
TYPE 1402
5.3.346.1 OIS info type
Fixed_data of OIS Fixed 32 See OIS info type in Section 5.3.346.2

Data Type
8 CTRL SEQ records of 8 * 4 = 32 See Ctrl sequence type in Section 5.3.346.3

CTRL SEQUENCE TYPE
Mlc_hdr of OIS MLC 2 See OIS MLC header type in Section 5.3.346.4
Header TYPE
Mlc_recs of MLC REC 167 * 8 = 1336 See MLC REC type in Section 5.3.346.5
TYPE

Log Record Formats
5.3.346.2 OIS fixed data type
System_time 4 Gives the system time for the MFLO system; this
network_id 2 Identifies the network in which the FLO device is decoding
Infrastructure_id 2 Identifies the infrastructure in the network that is being

actively decoded
lp_sec 1 Identifies the number of leap seconds in the system time
ltm_off 1 Identifies the local time

Daylt 1 Identifies whether daylight time is on or off
protocol_version 1 Contains the version of the protocol being used
min_protocol_version 1 Identifies the minimum protocol version required for this
T
system
n PS
min_monitor_cycle_index 1 Indicates the minimum monitor cycle index at which the
34
FLO device has to decode the control channel information
om 8:
num_data_symbols 2 Identifies the number of data symbols available in the
l.c :4
c
system
.
te 13
num_ppc_symbols 1 Identifies the number of position pilot symbols reserved for
position location services
.7 bk t
41 -b 1 a
3
data_mac_hdr_length 1 Gives the length of the MAC header being used in the
15
ei .0
current system
0.
w 01
ctrl_mac_hdr_length 1 Gives the length of the control MAC layer header being
12
ou 3.
used in the current system

2.
zh 201
strm_layer_hdr_length 1 Gives the length of the stream layer MAC header being
used in the current system
cpp_hdr_length 1 Gives the length of control channel protocol header
control_channel_mode 1 Identifies Trans mode in which the MLC is encoded. The

MLC mode can be one of the following:
 0 – REG_QPSK_1_3
 1 – REG_QPSK_1_2
 2 – REG_16_QAM_1_3
 3 – REG_16_QAM_1_2
 4 – REG_16_QAM_2_3
 5 – REG_16_QPSK_1_5
 6 – LAY_QPSK_1_3_ER_4
 7 – LAY_QPSK_1_2_ER_4
 8 – LAY_QPSK_2_3_ER_4
 9 – LAY_QPSK_1_3_ER_6_25
 10 – LAY_QPSK_1_2_ER_6_25
 11 – LAY_QPSK_2_3_ER_6_25

Log Record Formats

control_channel_outer_ 1 Identifies the outer code at which the MLC is being
code transmitted; possible values are:
ctrl_chan_alloc 1 Identifies if the control channel information is present or not
ctrl_chan_loc 2 Indicates at which symbol the control channel information is

located
ctrl_chan_slot_info 1 Indicates at which OFDM slot the control channel

information is located
T
ctrl_protocol_capsule_id 1 Identifies the control channel protocol capsule ID number
n PS
Num_ctrl_seq_pairs 1 Gives the number of control sequence pairs available in
34
this system
om 8:
l.c :4
c
.
te 13
.7 bk t
41 -b 1 a
5.3.346.3 Ctrl sequence type 3

15
ei .0

0.
w 01
12
bin0_ctrl_seq_num 2 Bin 0 control sequence number

ou 3.
2.
zh 201
bin1_ctrl_seq_num 2 Bin 1 control sequence number
5.3.346.4 OIS MLC header type
start_mlc 1 Contains the starting MLC number at which the control

channel information is available
num_mlcs 1 Identifies the number of MLCs needed for the control

channel information
5.3.346.5 MLC REC type

This data structure is a union of MLC_P0 type and MLC_P1 type. The way to identify which
structure of this union is to be used is determined by the field “present.” If the present bit is set, it
is always assumed to be MLC P1 TYPE structure. If the “present” field is set to ZERO, then the
MLC P0 Type structure is assumed.

Log Record Formats
Present 1 Indicates which substructure is present in this union

 0 – MLC P0 type is present
 1 – MLC P1 type is present
MLC P0 type 7 This is one of the structures that can be present.
MLC P1 type 7 This is one of the structures that can be present.
5.3.346.5.1 MLC P0 type
next_sf_offset 1 Indicates the next superframe offset at which the MLC is

starting
T
n PS
fixed_length_reserved 4 Reserved
Reserved 2 Reserved
34
om 8:
5.3.346.5.2 MLC P1 type
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
start_offset 2 Contains the value of the OFDM symbol offset at which the
3
15
MLC for the OIS is present
ei .0
0.
w 01
slot_info 1 Contains the OIS slot information

12
ou 3.
strm_lens 4 Contains the stream lengths of the OIS that is being

2.
zh 201
decoded
5.3.347 MFLO MLC PLP STATS POST PARAMS (LOG_CODE 0x1213)

This log code replaces the existing log code 0x120B and contains information for the MediaFLO
MLC PLP POSTRS statistics. This log code is logged at the end of every superframe for all
active MLCs. This log code is logged once every second. The maximum size of this log code is
40 bytes.
system_time 4 Gives the system time for MFLO system; this corresponds
to the superframe number in the system

being decoded in this Superframe

wide or local system; values for this field are:

Log Record Formats

Num_Base_Layer_ 4 Contains the number of Base Layer Good PLPs
Good_Plps
Num_Base_Layer_Eras_ 4 Contains the number of Base Layer Erasure PLPs

Plps
Num_Enh_Layer_Good_ 4 Contains the number of Enhanced Layer Good PLPs

Plps
Num_Enh_Layer_Eras_ 4 Contains the number of Enhance Layer Erasure PLPs

Plps
Num_Base_Layer_ 4 Contains the number of Base Layer Good Code Blocks

Good_CodeBlocks
Num_Base_Layer_Eras_ 4 Contains the number of Base Layer Erasure Code Blocks

CodeBlocks
Num_Enh_Layer_Good_ 4 Contains the number of Enhanced Layer Good Code
T
n PS
CodeBlocks Blocks
Num_Enh_Layer_Eras_ 4 Contains the number of Enhance Layer Erasure Code
34
CodeBlocks Blocks
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.348 MFLO MLC LOCATION DYNAMIC PARAMS (LOG_CODE

0x1214)
This log code replaces the existing log code 0x11EF and contains information for the MediaFLO
MLC LOCATION dynamic parameters. This log code is logged at either at Frame3 for the early
exit case or at the end of Frame4 interrupts for all the active MLCs. This log code is logged once
every second. The maximum size of this log code is 30 bytes.
Superframe Number 4 Gives the system time for the MFLO system and
Flo_fft_mlc_start_symbol 2 Gives the OFDM symbol value at which the MLC

(MediaFLO logical channel) starts in the current
superframe
Flo_fft_mlc_slot_offset 1 Gives the slot offset information for the MLC that is being
T
decoded
n PS
Flo_fft_mlc_slot_min 1 Defines the MLC dimension as the minimum slot value that
34
the current MLC can go within the superframe; useful for
decoding the MLC correctly
om 8:
Flo_fft_mlc_slot_total 4
l.c :4
Gives the total number of slots used by the current MLC
. c
being decoded in the current superframe
te 13
Flo_fft_mlc_slot_max 1 Defines the maximum value of the slot that the current MLC
.7 bk t
41 -b 1 a
can occupy; helpful in calculating the dimensions of the

3
MLC that is being decoded
15
ei .0
Flo_fft_mlc_mode 1 Identifies the Trans mode in which the MLC is encoded.

0.
w 01
The MLC mode can be one of the following:

12
ou 3.
 0 – REG_QPSK_1_3
2.
zh 201
 1 – REG_QPSK_1_2
 2 – REG_16_QAM_1_3
 3 – REG_16_QAM_1_2
 4 – REG_16_QAM_2_3
 5 – REG_16_QPSK_1_5
 6 – LAY_QPSK_1_3_ER_4
 7 – LAY_QPSK_1_2_ER_4
 8 – LAY_QPSK_2_3_ER_4
 9 – LAY_QPSK_1_3_ER_6_25
 10 – LAY_QPSK_1_2_ER_6_25
 11 – LAY_QPSK_2_3_ER_6_25
Mlc_id 1 ID number of the MLC (MediaFLO logical channel) that is


wide or Local; possible values are:
Reserved 4 Reserved
Flo_fft_mlc_num_cbs_in 1 Identifies the number of Code Blocks present in the current

_curr_sf SuperFrame

Log Record Formats

Flo_fft_mlc_outer_code 1 Identifies the outer code at which the MLC is being
transmitted; possible values are:
Flo_fft_mlc_strm1_bound 1 Informs whether stream 1 in the MLC is currently being

decoded or not. If it is not being decoded, this field is set to
FALSE; otherwise, this will be set to TRUE.
Flo_fft_mlc_strm2_bound 1 Informs whether stream 2 in the MLC is currently being

decoded or not. If it is not being decoded, this field is set to
FALSE; otherwise, this will be set to TRUE.
Stream_Length_ZERO 2 Contains the value of Stream Length for STREAM ZERO
T
(Stream0)
n PS
Stream_Length_ONE 2 Contains the value of Stream Length for STREAM ONE
34
(Stream1)
om 8:
Stream_Length_TWO 2 Contains the value of Stream Length for STREAM TWO
l.c :4
(Stream2)
. c
te 13
5.3.349 MFLO BOUND STREAM LIST PARAMS (LOG_CODE 0x1215)

.7 bk t
41 -b 1 a
3
15
This log code replaces the existing log code 0x120A and contains information for the MediaFLO
ei .0
bound stream list parameters. This log code is logged at FRAME1 through FRAME4 interrupts.
0.
w 01
This log code is logged approximately every 250 ms. The size of this log code is 12 bytes.
12
ou 3.
2.
zh 201
Interrupt_type 1 Identifies which interrupt type has occurred where this log
bound_flow_count 1 Gives the values of total number streams in the bound state
and information on the number of streams that are being
currently decoded
bound_flow 10 This field is of type Bound stream info typeand contains an

array of elements each belonging to Bound stream info
type. This field gives the information for all the flows which
are in BOUND state; see Section 5.3.349.1
5.3.349.1 Bound stream info type
Mlc_id 1 ID number of the MLC (MediaFLO logical channel) that is

Strm_id 1 Gives the ID number of the stream that is being decoded;

this stream number identifies the stream that is being
reported in this log code

Log Record Formats
Flow_id 4 Gives the ID number of the flow that is being decoded; this
flow ID number identifies the flow that is being reported in
this log code
Strm_uses_both_layers 1 Indicates whether or not the stream that is being reported

uses both base and enhance layers; this field is set to
TRUE only if the stream uses both base and enhance
layers
Byte_interleave_enabled 1 Identifies if the byte interleaving is enabled for this stream;

this field is set to TRUE if the byte interleaving is enabled;
otherwise, this is set to FALSE
Binding 1 Identifies the binding of the flow ID that gives information

about what kind of flow that this stream corresponds to;
possible values for this field are:
 0x00 – BINDING_MFLO_OVERHEAD
 0x01 – BINDING_RT_VIDEO_CODEC
T
n PS
 0x02 – BINDING_RT_AUDIO_CODEC
 0x03 – BINDING_NRT_MEDIA
34
 0x04 – BINDING_DATACAST
 0x05 – BINDING_TAP
om 8:
 0xFF – BINDING_NOT_USED
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
wide or local; possible values are:

3
15
ei .0

0.
w 01
12
ou 3.
2.
zh 201
5.3.350 MLO STRM INFO STATIC PARAMS (LOG_CODE 0x1216)

This log code replaces the existing log code 0x11FF. This log code is logged once every second.
The size of this log code is 24 bytes.
Stream Layer Header 2 * 12 = 24 This field is an array of two elements of type STRM_LAYER
header typeand gives the information for the stream layer
headers for both BASE and ENHANCED Layers; see
Section 5.3.350.1.
5.3.350.1 STRM_LAYER header type
stream0_pad_len 1 Identifies the value of PAD length used for stream 0 in the
current MLC being decoded; this value gives information on
the number of bytes of data that has been added as
“padding” to make the size of that PLP accurate for
physical layer PLP. If the actual data fits into PLP size, then
this field will be set to zero as there would be no padding.
stream1_pad_len 1 Similar to above; instead of referring to stream 0, this field

refers to padding used by stream 1 in the MLC

Log Record Formats

stream2_pad_len 1 Similar to above; instead of referring to stream 0, this field
refers to padding used by stream 2 in the MLC
fill_data_mac_hdr 7 Gives the MAC (medium access layer) capsule header

data. This is useful in decoding the stream header lengths
correctly; this field makes sure the other fields are aligned
correctly
Reserved2 1 Reserved for future use
T
n PS
5.3.353 MFLO_STREAM_PLP_STATS (LOG_CODE 0x1219)
34
This log packet contains the PLP statistics collected at the stream layer of the FDS. This log
om 8:
packet gives information on the number of good PLPs and number of erasure PLPs collected per
l.c :4
. c
flow ID basis. This log code is generated every superframe and logged approximately every
te 13
second. The worst case packet size for this log is 24 bytes. This log is generated once for each
.7 bk t
41 -b 1 a
flow that is active. The payload is explained in the following table.

3
15
ei .0

0.
w 01
12
SUPER_FRAME_NUMBER 4 bytes System time for MFLO system; corresponds to

ou 3.
(unsigned) the superframe number in the system

2.
zh 201
FLOW_ID 4 bytes ID number of the FLOW that is being decoded;

(unsigned) flow ID number identifies the flow that is being
reported in this log code
TOTAL_GOOD_PLPS_BASE_ 4 bytes Total number of good PLPs in the base layer for
LAYER (unsigned) the flow ID mentioned above
TOTAL_GOOD_PLPS_ 4 bytes Total number of good PLPs in the enhanced layer

ENHANCED_LAYER (unsigned) for the flow ID mentioned above
TOTAL_ERASURE_PLPS_BASE_ 4 bytes Total number of erasure PLPs in the base layer for
LAYER (unsigned) the flow ID mentioned above
TOTAL_ERASURE_PLPS_ 4 bytes Total number of erasure PLPs in the enhanced

ENHANCED_LAYER (unsigned) layer for the flow ID mentioned above
5.3.354 Reserved (LOG_CODE 0x121A)
5.3.356 Reserved (LOG_CODE 0x121C)

Log Record Formats
5.3.358 Reserved (LOG_CODE 0x121E)
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12

ou 3.
2.
zh 201
5.3.370 MFLO UBM WIDE LOCAL DYNAMIC

PARAMS(LOG_CODE 0x122A)
This log code contains the information for the MediaFLO wide and local dynamic parameters for
UBM platforms. This code is logged at TDM2 Interrupt. If programmed for TDM2, this log code
is logged every second. The size of this log code is 84 bytes.

Log Record Formats
T
n PS
34
5.3.378 Reserved (LOG_CODE 0x1232) om 8:
l.c :4
. c
te 13
.7 bk t

41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.387 Reserved (LOG_CODE 0x123B – 0x1240)
5.3.388 Interference Estimation Based on TPC (LOG_CODE 0x1241)

This is a new log packet supported in MediaFLO EV. It reports the interference estimate based on
TPC in the FLO Physical Layer Mode or EV mode.
Log_Packet_version 1 Log packet version
T
Sf_number 4 Captures the superframe number
n PS
FLO_ieP4 4 P4 value for intfVarEst computed in DSP
34
FLO_FFT_WTPC_AGC_Info 4 WTPC AGC information register
om 8:
FLO_FFT_LTPC_AGC_Info 4 WTPC AGC information register
l.c :4
. c
te 13
FLO_IE_GSArray0~6 2*7 AGC gain step tracking values
.7 bk t
FLO_FFT_WTPC_INTF0~6 4*7 WTPC interference estimate register sets

41 -b 1 a
3
FLO_FFT_LTPC_INTF0~6 4*7 LTPC interference estimate register sets
15
ei .0
0.
w 01
FLO_FFT_INTF_EST_STATUS 4 Snapshot of interference estimate status register

12
ou 3.
FLO_atEnabled (from DSP) 2 Adaptive thresholding enabled/disabled flag

2.
zh 201
FLO_atTfScale(from DSP) 2 Adaptive thresholding scaling factors
FLO_FFT_CI_EST_FREQ 4 Snapshot of frequency domain intfVarEst from C/I
FLO_FFT_TF_THRSH_VAL 4 Snapshot of time-filter threshold value
FLO_AGC_loop_DVGA_Error 4 Loop accumulator values for RSSI calculation
FLO_DVGA2_loop_Error 4 Loop accumulator values for RSSI calculation
5.3.390 CM Phone Event (LOG_CODE 0x1273)

This holds information for the CM phone event.
VERSION 1 Log packet version
PH_EVENT 4 Phone event; see Section 5.3.390.1 for values
IS_IN_USE 1 Indicates whether phone is currently in use

Log Record Formats
OPRT_MODE 4 Current operating mode:

 0 – Power off
 1 – Factory test mode
 2 – Offline
 3 – offline AMPS
 4 – Offline CDMA
 5 – Online
 6 – Low power mode
 7 – Reset
 8 – Network test for GSM/WCDMA/LTE
 9 – Offline request during power up
 10 – Pseudo online
TEST_CONTROL_TYPE 4 Current test control type:

0 – No testing
T

n PS
 1 – Loopback mode 1
 2 – Loopback mode 2
34
 3 – Loopback mode 1 with dummy signaling
 4 – Loopback mode 2 with dummy signaling
om 8:
l.c :4
. c
te 13
CDMA_LOCK_MODE 4 Indicates whether phone is CDMA locked until power
cycle:
.7 bk t
41 -b 1 a
 0 – Phone is not CDMA locked

3
 1 – Phone is CDMA locked until next power cycle
15
ei .0
0.
w 01
12
ANSWER_VOICE 4 Answer incoming voice call:

ou 3.
 0 – Voice
2.
zh 201
 1 – Fax once
 2 – Fax always
 3 – Modem once
 4 – Modem always

Log Record Formats
MODE_PREF 4 Indicates current mode preference:

 0 – AMPS only
 1 – Digital Only
 2 – Automatic
 3 – Emergency
 9 – CDMA only
 10 – 1xEV-DO only
 11 – CDMA or AMPS only
 12 – GPS only
 13 – GSM only
 14 – WCDMA only
 15 – Return to persistent mode preference
 16 – No change
 17 – Any service but 1xEV-DO
 18 – Remove 1xEV-DO component from current
mode preference
T
n PS
 19 – GSM or WCDMA only
 20 – Acquire digital non-1xEV-DO mode systems
34
 21 – Remove AMPS and 1xEV-DO component from
current mode preference
om 8:
 22 – CDMA or 1xEV-DO systems only
l.c :4
c
 23 – CDMA or AMPS or 1xEV-DO systems only
.
te 13
 24 – Remove AMPS component from current mode

preferences
.7 bk t
41 -b 1 a
 25 – WLAN systems only

3
15
 26 – CDMA and WLAN systems only
ei .0
 27 – HDR and WLAN systems only

0.
w 01
 28 – CDMA, HDR, and WLAN systems only

12
ou 3.
 29 – GSM and WLAN systems only

2.
zh 201
 30 – WCDMA and WLAN systems only

 31 – GSM/WCDMA and WLAN systems only
 32 – Acquire WLAN systems in addition to current
system
 33 – Remove WLAN systems from current system
 34 – Acquire CDMA, AMPS, HDR, and WLAN
systems
 35 – Acquire CDMA, AMPS, and WLAN systems
 36 – Acquire the mode that is common to (intersection
of) the current mode and the requested mode; if the
intersection is NULL, then force the requested
preferences
 37 – Use any service except HDR and WLAN
 38 – LTE only
 39 – LTE or GSM or WCDMA only
 40 – LTE or CDMA/1xEV-DO only
 41 – LTE or GSM or WCDMA or CDMA/1xEV-DO

Log Record Formats
PREF_TERM 4 Current preference term:

 0 – Permanent mode change
 1 – Until power cycle
 2 – Until end of next call or power cycle
 3 – Until end of next call or specified timeout or power
cycle
ACQ_ORDER_PREF 4 Acquisition order preferred by the client:

 0 – Automatically from the PRL
 1 – GSM first followed by WCDMA
 2 – WCDMA first followed by GSM
 3 – Do not change GSM/WCDMA acquisition order
SRV_DOMAIN_PREF 4 Service domain preferred by the client:
T
 0 – Prefer circuit-switched only
n PS
 1 – Prefer packet-switched only
 2 – Prefer circuit- and packet-switched
34
 3 – Any domain
om 8:
l.c :4  4 – No change
c
 5 – PS attach on demand
.
te 13
 6 – PS detach on demand
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
BAND_PREF 16 Indicates current band preference for CDMA, GSM,

WCDMA, and WLAN systems; bit mask values are (low 8
bytes):
 0x 0000 0001 – Band class 0, A side systems only
 0x 0000 0002 – Band class 0, B side systems only
 0x 0000 0003 – Band class 0 systems only
 0x 0000 0080 – GSM DCS systems only
 0x 0000 0100 – Extended GSM 900 systems only
 0x 0000 0200 – Primary GSM 900 systems only
T
n PS
34
 0x 0001 0000 – GSM 450 systems only
om 8:
l.c :4
c
.
te 13
 0x 0010 0000 – GSM railway GSM 900 systems only

 0x 0020 0000 – GSM PCS systems only
.7 bk t
41 -b 1 a
 0x 0040 0000 – WCDMA I IMT 2000 systems only

3
15
 0x 0080 0000 – WCDMA II PCS systems only
ei .0
 0x 0100 0000 – WCDMA III 1700 systems only

0.
w 01
 0x 0200 0000 – WCDMA IV 1700 systems only

12
ou 3.
 0x 0400 0000 – WCDMA V 850 systems only

2.
zh 201
 0x 0800 0000 – WCDMA VI 800 systems only
ROAM_PREF 4 Indicates current roam preference; bit mask values are:

 0x 0000 0001 – Home systems, roaming indication is
off
 0x 0000 0003 – Roaming indication off or solid on
 0x 0000 00FF – Any systems
 0x 0000 0100 – Do not change the roam preference
NAM_SEL 4 Indicates the NAM selection

 0 – NAM 1
 1 – NAM 2; for targets with more than 1 NAM
 2 – NAM 3; for targets with more than 2 NAMs
 3 – NAM 4; for targets with more than 3 NAMs
 4 – auto NAM; for targets with more than 1 NAM
CURR_NAM 4 Indicates the current NAM
PACKET_STATE 4 Current packet state:

 0 – NULL
 1 – Connect
 2 – Dormant

Log Record Formats
HYBR_PREF 4 Hybrid preference:

 0 – Off
 1 – On
 2 – No change
NETWORK_SEL_MODE_ 4 Network selection mode selected by the client:

PREF  0 – Automatic
 1 – Manual
 2 – Limited service
 3 – No change
PLMN 3 Identifier of the PLMN to be selected manually; see

T
USER_PREF_NETWORKS 251 User-preferred network list; see Section 5.3.390.3 for
n PS
format description
AVAILABLE_NETWORKS 964 Available networks; see Section 5.3.390.4 for format
34
description
IS_CDMA_SUBSCRIPTION_ 1
om 8:
Indicates whether the CDMA subscription/provisioning
l.c :4
. c
AVAILABLE information is available
te 13
IS_GW_SUBSCRIPTION_ 1 Indicates whether the GSM/WCDMA

.7 bk t
41 -b 1 a
AVAILABLE 3 subscription/provisioning information is available

15
RTRE_CONFIG 4 Current RTRE configuration:
ei .0
1 – Use R_UIM
0.
w 01

 2 – Use NV
12
ou 3.
 3 – Use SIM
2.
zh 201
RTRE_CONTROL 4 Current RTRE control:

 1 – R_UIM
 2 – NV
 3 – SIM
ORIG_SRV_DOMAIN_PREF 4 Service domain preference for PS attach/detach

commands:
 0 – Prefer circuit-switched only
 1 – Prefer packet-switched only
 2 – Prefer circuit- and packet-switched
 3 – Any domain
 4 – No change
 5 – PS attach on demand
 6 – PS detach on demand
DDTM_PREF 4 DDTM preference:

 0 – Disable DDTM
 1 – Enable DDTM
 2 – Do not change the DDTM preference

Log Record Formats
CUR_DDTM_STATUS 1 Current DDTM status
DDTM_ACT_MASK 4 DDTM action mask settings; bit mask values are:

 0x 0000 0000 – Empty action mask
 0x 0000 0001 – Suppress L2 ACKs in 1X
 0x 0000 0002 – Suppress 1X registrations
 0x 0000 0004 – Ignore pages with specified SO
 0x 0000 3FFF – Enable all DDTM actions
 0x 0000 4000 – Reserved by CM
DDTM_NUM_SRV_OPT 2 Number of DDTM options specified
DDTM_SRV_OPT_LIST 20 List of service options whose pages have to be ignored
CPHS_ALLOWED 4 Common PCN handset specifications:

 0 – CPHS procedures not supported
T
 1 – CPHS procedures supported
n PS
34
ALS_ALLOWED 4 Indicates whether alternate line service (ALS) operations
om 8:
l.c :4 are currently allowed for this phone; values are:
c
 0 – ALS operations not allowed
.
te 13
 1 – ALS operations allowed
Default value is 0.
.7 bk t
41 -b 1 a
3
LINE 4 Currently selected line:
15
ei .0
 0 – Line # 1
0.
w 01
 1 – Line # 2
12
ou 3.
2.
zh 201
LINE_SWITCHING 4 Line switching:

 0 – Line switching not allowed
 1 – Line switching allowed
REQUESTING_CLIENT_ID 4 Requesting client ID
CDMA_CAPABILITY 261 IS-2000 status message; see Section 5.3.390.5 for

format description
MSM_ID 4 Identifies the MSM that generated this event:

 0 – MSM ID is 6500
 1 – MSM ID is 6250
 2 – MSM that has control of DPRAM
 3 – MSM that does not have control of DPRAM

Log Record Formats
ORIG_DDTM_ACT_MASK 4 DDTM action mask settings used during origination; bit

mask values are:
 0x 0000 0000 – Empty action mask
 0x 0000 0001 – Suppress L2 ACKs in 1X
 0x 0000 0002 – Suppress 1X registrations
 0x 0000 0004 – Ignore pages with specified SO
 0x 0000 3FFF – Enable all DDTM actions
 0x 0000 4000 – Reserved by CM
Only present if VERSION is 2 or above
ASUBS_ID 1 Active Subscription-ID that these Ph preferences belong

to
 1 – SYS_MODEM_AS_ID_1
T
n PS
IS_HYBR_GW_ 1 Flag indicating the subscription availability of the Hybr
SUBSCRIPTION_ GW provisioning information
34
AVAILABLE  0 – Subscription not available
om 8:
l.c :4 1 – Subscription available
. c
te 13
STADBY_PREF 1 Indicates the current standby preference

.7 bk t
41 -b 1 a
 0 – None
3
15
ei .0
0.
w 01
 3 – No change
12
ou 3.
2.
zh 201
ACTIVE_SUBS 1 Active subscription-ID when standby preference is dual

standby
DEFAULT_VOICE_SUBS 1 Default subscription-ID used for voice call origination

DEFAULT_DATA_SUBS 1 Default subscription-ID used for data call origination


Log Record Formats

PRIORITY_SUBS 1 Subscription-ID that is given priority
LTE_BAND_PREF 8 Indicates current band preference for LTE systems; bit

mask values are (high 8 bytes):
 0x 0000 0001 – LTE_EUTRAN_BAND1
T
n PS
34
om 8:
l.c :4
c
.
te 13
.7 bk t
41 -b 1 a

3
15
ei .0

0.
w 01

12
ou 3.

2.
zh 201

 0x0000 0001 0000 0000 – LTE_EUTRAN_BAND33
 0x0000 0002 0000 0000 – LTE_EUTRAN_BAND34
 0x0000 0004 0000 0000 – LTE_EUTRAN_BAND35
 0x0000 0008 0000 0000 – LTE_EUTRAN_BAND36
 0x0000 0010 0000 0000 – LTE_EUTRAN_BAND37
 0x0000 0020 0000 0000 – LTE_EUTRAN_BAND38
 0x0000 0040 0000 0000 – LTE_EUTRAN_BAND39
 0x0000 0080 0000 0000 – LTE_EUTRAN_BAND40
 0x 7FFF FFFF FFFF FFFF – Any band class systems
 0x 8000 0000 0000 0000 – Do not change the band
preference

Log Record Formats
5.3.390.1 Phone event

This section describes the enum values for PH_EVENT.
Enum
End reason Comments
value
0 CM_PH_EVENT_OPRT_MODE Operating mode was changed
1 CM_PH_EVENT_TEST_CONTROL_TYPE Operating mode type needs to be updated
2 CM_PH_EVENT_SYS_SEL_PREF System selection preference was changed
3 CM_PH_EVENT_ANSWER_VOICE Answer voice as data was changed;

CDMA only
4 CM_PH_EVENT_NAM_SEL NAM selection was changed; CDMA only

5 CM_PH_EVENT_CURR_NAM Current NAM was changed; CDMA only
6 CM_PH_EVENT_IN_USE_STATE In-use state was changed
T
n PS
7 CM_PH_EVENT_CDMA_LOCK_MODE CDMA lock mode was changed; CDMA
only
34
8 CM_PH_EVENT_UZ_CHANGED User zone selection was changed; CDMA
om 8:
l.c :4 only
. c
9 CM_PH_EVENT_MAINTREQ CDMA maintenance required command;
te 13
CDMA only
.7 bk t
41 -b 1 a
10 CM_PH_EVENT_STANDBY_SLEEP Entering powerdown sleep mode

3
15
ei .0
11 CM_PH_EVENT_STANDBY_WAKE Exiting powerdown sleep mode

0.
w 01
12 CM_PH_EVENT_INFO Phone information this event sent only to

12
ou 3.
the client that requested this information

2.
zh 201
through cm_ph_cmd_get_ph_info
13 CM_PH_EVENT_PACKET_STATE Packet state was changed; CDMA only
14 CM_PH_EVENT_INFO_AVAIL Phone information now available;

automatically generated after a client does
activation
15 CM_PH_EVENT_SUBSCRIPTION_AVAILABLE Subscription information available

16 CM_PH_EVENT_SUBSCRIPTION_NOT_ Subscription information is not available
AVAILABLE
17 CM_ PH_EVENT_SUBSCRIPTION_CHANGED Subscription information changed
18 CM_PH_EVENT_AVAILABLE_NETWORKS_ Requested available networks are

CONF available; GSM/WCDMA/LTE only
19 CM_PH_EVENT_PREFERRED_NETWORKS_ Requested preferred networks are

CONF available; GSM/WCDMA/LTE only
20 CM_PH_EVENT_FUNDS_LOW Funds running low; GSM/WCDMA/LTE

only
21 CM_PH_EVENT_WAKEUP_FROM_STANDBY Command is sent to lower layers to wake

up from deep sleep (standby)
22 CM_PH_EVENT_NVRUIM_CONFIG_CHANGED RTRE configuration changed; CDMA only
23 CM_PH_EVENT_PREFERRED_NETWORKS_ Requested preferred networks were

SET written to (U)SIM; GSM/WCDMA only

Log Record Formats
Enum
End reason Comments
value
24 CM_PH_EVENT_DDTM_PREF DDTM preference change
25 CM_PH_EVENT_PS_ATTACH_FAILED Packet service attach failed
26 CM_PH_EVENT_RESET_ACM_COMPLETED ACM reset on (U)SIM; GSM/WCDMA/LTE

only
27 CM_PH_EVENT_SET_ACMMAX_COMPLETED Value written to the (U)SIM;

GSM/WCDMA/LTE only
28 CM_PH_EVENT_CDMA_CAPABILITY_UPDATED CDMA capability updated
29 CM_PH_EVENT_LINE_SWITCHING Line switching setting updated
30 CM_PH_EVENT_SELECTED_LINE Selected line setting updated
31* CM_PH_EVENT_SECONDARY_MSM Invoke event callback even if the event is

from secondary MSM
T
n PS
32** CM_PH_EVENT_TERMINATE_GET_NETWORKS Current get network request terminated
34
33** CM_PH_EVENT_DDTM_STATUS DDTM status changed
om 8:
*This value is present only if feature FEATURE_UMTS_1X_HANDOVER_1XMSM or FEATURE_UMTS_
l.c :4
c
1X_HANDOVER_UMTSMSM is defined.
.
te 13
**If both FEATURE_UMTS_1X_HANDOVER_1XMSM and FEATURE_UMTS_1X_HANDOVER_
UMTSMSM are not defined, decrement the value by 1.
.7 bk t
41 -b 1 a
3
15
ei .0
5.3.390.2 PLMN
0.
w 01
12
ou 3.

2.
zh 201
IDENTITY 3 PLMN ID
5.3.390.3 USER_PREF_NETWORKS
LENGTH 1 Number of PLMNs in the list
INFO 250 PLMN information; see Section 5.3.390.3.1 for format

description
5.3.390.3.1 INFO
PLMN 3 PLMN ID
ACCESS_TECH 2 Access technology:

 1 – GSM
 2 – GSM compact
 4 – UMTS radio
 8 – LTE

Log Record Formats
5.3.390.4 AVAILABLE_NETWORKS
LENGTH 4 Number of PLMNs in the list
INFO 960 PLMN information; see Section 5.3.390.4.1 for format

description
5.3.390.4.1 INFO
Length
Field Description
(bytes)
PLMN 3 PLMN ID
RAT 4 Radio access technology of the PLMN:

 0 – GSM
T
 1 – UMTS
n PS
 2 – LTE
34
PLMN_SERVICE_ 4 Type of service:
om 8:
CAPABILITY  0 – Network cannot provide service
l.c :4
. c
 1 – Circuit-switched
te 13
 2 – Packet-switched
.7 bk t
 3 – Both CS and PS
41 -b 1 a
3
15
ei .0
PLMN_FORBIDDEN 1 Indicates PLMN is forbidden

0.
w 01
12
LIST_CATEGORY 4 Indicates type of PLMN:

ou 3.
 0 – SYS_DETAILED_PLMN_LIST_CATEGORY_HPLMN
2.
zh 201
 1 – SYS_DETAILED_PLMN_LIST_CATEGORY_
PREFERRED
 2 – SYS_DETAILED_PLMN_LIST_CATEGORY_USER_
PREFERRED
 3 – SYS_DETAILED_PLMN_LIST_CATEGORY_
OPERATOR_PREFERRED
 4 – SYS_DETAILED_PLMN_LIST_CATEGORY_OTHER
SIGNAL_QUALITY 4 Signal quality of the PLMN:

 0 – High
 1 – Low
SIGNAL_STRENGTH 4 PLMN signal strength
5.3.390.5 CDMA_CAPABILITY
TYPE 1 Message type
PAYLOAD_LEN 4 Message payload length in bits
PAYLOAD 256 Message payload

Log Record Formats
5.3.392 1xEV-DO MultiRLPRevStatistics (LOG_CODE 0x1275)

This contains Reverse MRLP statistics information. Data for this packet is both sampled and
logged every 4 seconds. Counts are reset at RLP initialization.
Version 1 Specifies the version of this log packet
RLP Flow 1 Identifies RLP
ResetTime 8 Timestamp for last statistics reset
ANNakBytesRequested 8 Number of bytes requested by the AN for retransmission
T
TxReXmitBytes 8 Number of transmitted retransmitted bytes
n PS
TxNewDataBytes 8 Number of new data bytes transmitted
34
TxTotalBytes 8 Total number of bytes transmitted
om 8:
l.c :4
c
ResetCount 4 Total resets that have occurred, initiated by either the AN
.
or the AT
te 13

.7 bk t
41 -b 1 a
3
ANResetAckCount 4 Number of Acks received from the AN
15
ei .0

0.
w 01
12
ou 3.
2.
zh 201
5.3.393 1xEV-DO MultiRLPFwdStatistics (LOG_CODE 0x1276)

This contains Forward MRLP statistics information. Data for this packet is both sampled and
logged every 4 seconds. Counts are reset at RLP initialization.

Version 1 Specifies the version of this log packet
RLP ID 1 Identifies RLP flow ID
ResetTime 8 Timestamp for last statistics reset
ATNakBytesRequested 8 Number of bytes requested by the AT for retransmission
RxReXmitBytes 8 Number of received retransmitted bytes
RxNewDataBytes 8 Number of new data bytes received
RxTotalBytes 8 Total number of bytes received
NakTimeouts 4 Nak timeouts or aborts
ResetCount 4 Total resets that have occurred, initiated by either the AN

or the AT

Log Record Formats
ANResetAckCount 4 Number of Acks received from the AN
5.3.394 1xEV-DO Rx Partial MultiRLP Packet (LOG_CODE 0x1277)

This packet contains Rx MRLP packet logging information. Data for this packet is both sampled
and logged asynchronously for every RLP packet that is received. The log packet is sent when
the log buffer is full.
RLP Flow [4:0] 1 Bit 4:0 – RLP Flow

Reserved[7:5] Bit 7:5 – Reserved
T
Pkt Length 1 Header length, length of the actual header bytes logged
n PS
for that RLP Flow
34
om 8:
l.c :4
c
NumPkts occurrences of the following fields for the RLP ID in the PktBlockInfo
.
te 13
.7 bk t

41 -b 1 a
3
Phys_chan_rate [3:0] 3 Bit 3:0: : Phy_chan rate
15

ei .0
Channel [4:4]  0x0 – Rate not determined

0.
w 01
 0x1 – 38.4 Kbps

Pkt_length [17:5]
12
ou 3.
 0x2 – 76.8 Kbps

Reserved [23:18]
2.
zh 201
 0x3 – 153.6 Kbps

 0x4 – 307.2 Short Kbps
 0x5 – 307.2 Long Kbps
 0x6 – 614.4 Short Kbps
 0x7 – 614.4 Long Kbps
 0x8 – 921.6 Kbps
 0x9 – 1.2288 Short Mbps
 0xa – 1.2288 Long Mbps
 0xb – 1.843 Mbps
 0xc – 2.456 Mbps
 0xd – 1.536 Mbps
 0xe – 3.072 Mbps
 Bit 4: : Channel
 0 – Traffic
 1 – Control
 Bit 17:5: : Pkt_len
 Bit 23:18: : Reserved
TimeReference 1 Slot time reference (STR)
Partial_pkt Min (Header

length, pkt_len)

Log Record Formats
The Partial_pkt field is an N bit field where N is equal to header_len * 8 bits. This field should be
treated as a single N bit sequence with Bit 0 as the LSB and Bit N-1 as the MSB.
Bit (N-1):(N-2) 2-bit Stream ID
Bit (N-3):(N-3 -RLPIDLength) RLP ID
Bit (N-3-RLPIDLength): Sequence Number

Bit (N-3-RLPIDLength - SequenceSpace)
Bit (N-3-RLPIDLength - SequenceSpace):0 Data Payload
5.3.395 1xEV-DO Tx Partial MultiRLP Packet (LOG_CODE 0x1278)

This packet contains Tx MRLP packet logging information. Data for this packet is both sampled
and logged asynchronously for every RLP packet that is transmitted. The log packet is sent when
T
n PS
the log buffer is full.
34
om 8:
RLP Flow [4:0] 1 l.c :4  Bit 4:0 – RLP Flow
c
Reserved [7:5]  Bit 7:5 – Reserved
.
te 13
.7 bk t
41 -b 1 a
Pkt Length 1 3 Header length, length of the actual header bytes logged
for that RLP flow
15
ei .0

0.
w 01
12
ou 3.
2.
zh 201
Phy_chan_rate [5:0] 3  Bit 5:0: : phy_chan rate

Channel [6:6]  0x0 – Rate not determined
 Other values are reserved
Pkt_len [20:7]
 Bit 6: : channel
Reserved [23:21]
 0 – Traffic
 1 – Access
 Bit 20:7: : pkt_len
 Bit 23:21: : Reserved
TimeReference 1 26.6667 ms frame count
Partial_pkt Min (Header

length, pkt_len)

Log Record Formats
The partial_pkt field is an N bit field where N is equal to header_len * 8 bits. This field should be
treated as a single N bit sequence with Bit 0 as the LSB and Bit N-1 as the MSB.
Bit (N-1):(N-2) 2-bit Stream ID
Bit (N-3):(N-3 -RLPIDLength) RLP ID
Bit (N-3-RLPIDLength): Sequence Number

Bit (N-3-RLPIDLength - SequenceSpace)
Bit (N-3-RLPIDLength - SequenceSpace):0 Data Payload
5.3.396 1xEV-DO EqualizerData (LOG_CODE 0x1279)

This supplies details about the equalizer assignments of the demodulator. Data for this packet is
both sampled and logged at a triage rate (30 ms).
T
n PS
34
Version 1 Version number of the log packet (Version 0)
SrchState 1
om 8:
State of the HDRSRCH state machine; see Table 5-7 for
l.c :4
. c
nomenclature
te 13
MSTR 4 Mobile station (AT) time reference offset relative to the

.7 bk t
41 -b 1 a
3 RTC timebase in units of 1/8 chip

15
MSTRError 2 MSTR offset relative to earliest arriving in-lock and
ei .0
enabled active set pilot in units of 1/8 chip

0.
w 01
12
ou 3.
DemodSelect 1 Demod device selection:

2.
zh 201
 0 – Rake
 1 – Equalizer
COMX8 4 Center of mass RTCOffset offset for the best ASP in units
of 1/8 chip; [Bit 17:0] contain valid values; others are
reserved
Reserved [Bit 7:5] 1  [Bit 7:5] – Reserved

EqStatus [Bit 4]  [Bit 4] – Equalizer status
 1 – On
ECount [Bit 3:0]
 0 – Off
 [Bit 3:0] – Number of equalizers; maximum valid value
is 4; all others are reserved
Serving PN 2 PN offset corresponding to best ASP

BestASP [Bit 3:0]  [Bit 3:0] – Best ASP index; valid values are 1 to 6

Log Record Formats
Repeat for ECount
Length
Field Description
(bytes)

TapLength [Bit 13:9]  [Bit 13:9] – Filter tap length of the equalizer; only odd
values are valid (00001, 00011,…,01111)
LStep [Bit 8:6]
 [Bit 8:6] – LMS step size of the equalizer
EqIndex [Bit 5:2]  [Bit 5:2] – Indicates the index of the equalizer
Diversity [Bit 1]  0000 – Equalizer 0
Antenna [Bit 0]  0001 – Equalizer 1
 0010 – Equalizer 2
 All other values are reserved.
 [Bit 1] – Indicates whether diversity is enabled for the AT
 0 – Diversity disabled
 1 – Diversity enabled
T
n PS
 [Bit 0] – Antenna selection; valid only when diversity is
disabled
34
 0 – Antenna0
 1 – Antenna1
om 8:
l.c :4
. c
te 13
LStep3 [Bit 9:7]  [Bit 9:7] – LMS step size for third pass
.7 bk t
41 -b 1 a
 1 – Enabled
LStep2 [Bit 6:4]
3
 0 – Disabled/default/second pass not enabled
15
ei .0
PassUsed [Bit 3:2]

 [Bit 6:4] – LMS step size for second pass
0.
w 01
NumPass [Bit 1:0]  1 – Enabled

12
ou 3.
 0 – Disabled/default
2.
zh 201
 [Bit 3:2] – Training pass used for demod device selection

 [Bit 1:0] – Number of training passes per half slot; valid
values are 1 to 3
C2I 4 C/I of the current equalizer
Equalizer C/Is are converted into dB units using the following formula:
C_I0 (dB) = 10 x Log10 (C2I/512)

Log Record Formats
5.3.397 1xEV-DO EqualizerC2IBuffer (LOG_CODE 0x127A)

This logs the Equalizer C/I values in every slot. In addition, this also logs the slot count in every
slot. This buffer is sampled every PN roll and is logged every other PN roll in the Connected
state only.
Two instances of the following fields
Length
Field Description
(bytes)
DemodDecision [Bit 15] 2 * 16 Sampled for each slot; 16 slots per PN roll
[Bit 15] – DemodDecision
T
Reserved [Bit 14:2] 
n PS
BestEqId [Bit 1:0]  0 – Rake used in current slot for demod
 1 – Equalizer used in current slot for demod
34
 [Bit 14:2] – Reserved
 [Bit 1:0] – Best equalizer index; invalid if Rake was used
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
EBuffer 2 * 16 Sampled for each slot; 16 slots per PN roll; equalizer

0.
w 01
performance indicator for previous frame provided on a slot

12
ou 3.
basis by the DSP

2.
zh 201
ARBuffer 2 Sampled for each slot; 16 slots per PN roll; rake performance
indicator for previous frame provided on a slot basis by the
DSP
SlotCnt 1 Slot count

Log Record Formats
5.3.399 1xEV-DO SearcherData – Type2 (LOG_CODE 0x127C)

This packet reports the searcher results for the most recently searched pilots. In the acquisition
state, this packet provides the results of predetect and detect searches. In the steady state it is
recommended that only Active set pilots are reported so as to keep the packet size small. For
each Active set pilot in the most recently searched search list, the six largest peaks and their
respective positions (in chipx2) are reported. This packet also reports the results from the center
of mass computation for 1xEV-DO equalizer. At any time only either of the two searcher log
packets with log codes 0x1089 (Type1) or 0x127C (Type2) can be logged. This packet is
supported on MSM6800 and later targets.
Data for this packet is both sampled and logged asynchronously every time the pilot active set is
searched (30 ms).
T
n PS
nomenclature
34
SrchSubstate [reserved] 1 Denotes the substate of the searcher task
SrchWinSize 2
om 8:
Contains the search window size
l.c :4
. c
te 13
Channel 2  [Bit 15:11] – Band class
 [Bit 10:0] – Frequency number
.7 bk t
41 -b 1 a
3
15
ei .0
MSTRx8 4  [Bit 31:18] – Reserved

0.
w 01
 [Bit 17:0] – MSTR in chipx8 units

12
ou 3.
2.
zh 201
NumPilots 1 Number of pilots searched in most recent search cycle

EqStatus [Bit 0]  [Bit 0] – Equalizer on/off status
 0 – Off
 1 – On
BestASP 1 Best ASP Index; valid values are 1 to 6; all other values are
reserved

Log Record Formats
Repeat for each pilot
Reserved [Bit 15]: 2  Reserved [Bit 15]

PilotSet [Bit 14:12]:  PilotSet [Bit 14:12] – Denotes the set to which the pilot
PN belongs; valid values are:
AntSel [Bit 11:10]:
 000 – Does not belong to any set (empty set)
Reserved [Bit 9]:  001 – Remaining set
PilotPN [Bit 8:0]  010 – Neighbor set
 011 – Candidate set
 100 – Active set
 101,110,111 – Reserved
 AntSel [Bit 11:10] – Contains the antenna diversity
mode used for searching this pilot; valid values are:
 00 – Antenna0
 01 – Antenna1
 10 – Ant0+Ant1
T
n PS
 11 – Reserved
 Reserved [Bit 9]
34
 PilotPN [Bit 8:0] – Pilot PN of the pilot in the search
results
om 8:
l.c :4
. c
te 13
WinCenterx2 2 Position of window center in chipx2 units used to get these
results
.7 bk t
41 -b 1 a
3
EarliestPeakPos 2 Position of earliest peak in chipx2 units as decided using
15
last search results
ei .0
0.
w 01
PeakPNPhase 2*6 Signed; PN phase of each peak in units of 1/2 chip; number
12
ou 3.
of search peaks = 6
2.
zh 201
PeakC2I 2*6 Energy received of each peak; number of search peaks = 6
If EqStatus is ON and if PilotPN belongs to ASET, the following fields are valid
PeaksUsedforCOM 1 Bit n set to 1 to indicate that peak n+1 was used for center
of mass computation; valid values are 0x01, 0x03, 0x07,
0x0F, 0x1F, and 0x3F
PeakThreshold 1 Signed; energy threshold for peaks used in center of mass

computation; value to be divided by 2
CenterOfMass 2 Signed; center of mass RTCOffset of active set pilot in units

of 1/2 chip

Log Record Formats
5.3.400 1xEV-DO RevARLGains (LOG_CODE 0x127D)

This packet logs digital gains for each Rev A reverse link channel when a RTC MAC Subtype 3
connection is active. It also logs power control bits and information on the subpacket being
transmitted each subframe. The sampling period is every subframe when RTC MAC Subtype 3 is
active (6.66 ms). A log packet is generated every 8 subframes (53.3 ms). This packet is supported
in Rev A only.
NumRecords 1 Number of frames logged in this packet; maximum = 8
SubframeN 1 Number associated with the logged subframe
Reserved [Bit 15-13] 2  TxThrottle – Indicates whether Tx channel gains are
T
TxThrottle [Bit 12] being throttled
n PS
 TxMaxPower – Indicates whether Tx AGC is at max
TxMaxPower [Bit 11]
power
34
TxMinPower [Bit 10]  TxMinPower – Indicates whether Tx AGC is at min
om 8:
RPC [Bit 9:Bit 8] l.c :4 power
RPC – Indicates RPC bit received in current subframe;
c
PAEnabled [Bit 7] 
.
values are:
te 13
TransmissionMode [Bit 6]
 00 – Hold
SPn [Bit 5:Bit 4]
.7 bk t
 01 – Up
41 -b 1 a
PacketSizeIndex [Bit
3
 10 – Down
15
3:Bit 0]
ei .0
 11 – Reserved
0.
w 01
 PAEnabled – Indicates whether PA is on

12
 Transmission Mode – Indicates the transmission mode

ou 3.
of the data packet being transmitted in this subframe;

2.
zh 201
only valid if PacketSize is nonzero

 0 – HiCap
 1 – LoLat
 SPn – Indicates the Subpacket number being
transmitted for the data packet transmitted in this
subframe; only valid if PacketSize is nonzero
 PacketSizeIndex – Indicates the physical layer packet
size transmitted in this subframe:
 0 – Null Rate, no packet being transmitted
 1 – 128 bits
 2 – 256 bits
 3 – 512 bits
 4 – 768 bits
 5 – 1024 bits
 6 – 1536 bits
 7 – 2048 bits
 8 – 3072 bits
 9 – 4096 bits
 10 – 6144 bits
 11 – 8192 bits
 12 – 12288 bits
PilotGainHalfSlot0 2 Linear pilot power in halfslot 0 of SubframeN
AckGainHalfSlot0 2 Linear ACK channel power in halfslot 0 of SubframeN

Log Record Formats

PilotGainHalfSlot1 2 Linear pilot power in halfslot 1 of SubframeN
RRIGainHalfSlot1 2 Linear RRI channel power in halfslot 1 of SubframeN
DSCGainHalfslot1 2 Linear DSC channel power in halfslot 1 of SubframeN
DRCGainHalfslot1 2 Linear DRC channel power in halfslot 1 of SubframeN
DataGainHalfSlot1 2 Linear data channel power in halfslot 1 of SubframeN
AuxGainHalfSlot1 2 Linear Auxiliary pilot gain in halfslot 1 of SubframeN
TxOpenLoop 2 Tx open loop power in 1/256 dB (signed)
TxTotal 2 Total Tx limited power in units of 1/256 dB (signed)
TxPilot 2 Tx pilot power in the unit of 1/256 dB (signed)
TxAdjust 2 Tx closed loop adjustment value in units of 1/256 dB

(signed)
T
n PS
PaHeadroom 2 Max recommended headroom available (signed, in .25 dB
units)
34
om 8:
DRCChannelGain, ACKChannelGain, and DataChannelGain are converted to channel-to-pilot
l.c :4
. c
ratios (in dB) using the following equations:
te 13
ack/pilot (dB) = 20 log (ACKGainHalfslot0) - 20 log (PilotGainHalfSlot0)

.7 bk t

41 -b 1 a
3
drc/pilot (dB) = 20 log (DRCGainHalfslot1) - 20 log (PilotGainHalfSlot1)
15

ei .0
0.
w 01
 rri/pilot (dB) = 20 log (RRIGainHalfslot1) - 20 log (PilotGainHalfSlot1)

12
ou 3.
 dsc/pilot (dB) = 20 log (DSCGainHalfslot1) - 20 log (PilotGainHalfSlot1)

2.
zh 201
An intermediate computation is needed to find the data channel gain and the auxiliary pilot gain.
Compute the value of dataChannelGain based the PacketSizeIndex:
PacketSizeIndex < 6 – dataChannelGain = DataGainHalfslot1
PacketSizeIndex = {6,7,8, or 9} – dataChannelGain = DataGainHalfslot1* sqrt(2)
PacketSizeIndex = {10, or 11} – dataChannelGain = sqrt(3) * DataGainHalfslot1* sqrt(2)
PacketSizeIndex = 12 – dataChannelGain = (sqrt(3) * DataGainHalfslot1) / cos(pi/8)
Then,
 data/pilot (dB) = 20 log (dataChannelGain) - 20 log (PilotGainHalfSlot1)
 aux/data (dB) = 20 log (AuxGainHalfslot1) - 20 log (dataChannelGain)
To convert Tx AGC values to full dB scale, use val/256.

Log Record Formats
5.3.401 1xEV-DO RevARLMetrics (LOG_CODE 0x127E)

This packet logs the number of reverse link traffic packets transmitted and the early termination
statistics for each packet size and transmission mode. The sampling period and the logging
period are both every second. This packet is supported in Rev A only.
Seq Num 4 Sequence number of the log packet
Three (3) instances of the following, one for each interlace on the reverse link:
HiCapPS1Subpacket0Acks 4 Number of Acks received for the first subpacket of all

PS1 (128 bit) packets sent in this interlace
HiCapPS1Subpacket1Acks 4 Number of Acks received for the second subpacket of all

T
HiCapPS1Subpacket2Acks 4 Number of Acks received for the third subpacket of all
n PS
34
HiCapPS1Subpacket3Acks 4 Number of P-ARQ Acks received after 4 subpackets for
om 8:
l.c :4
c
HiCapPS1pArqNaks 4 Number of P-ARQ Nacks received after 4 subpackets for
.
te 13
.7 bk t
HiCapPS1TotalPackets 4 Total number of PS1 (128 bit) packets sent in this

41 -b 1 a
interlace
3
15
ei .0

0.
w 01

12
ou 3.

2.
zh 201




interlace






Log Record Formats

interlace





T
n PS
interlace
34
om 8:
l.c :4
c
.
te 13

.7 bk t

41 -b 1 a
3
15
ei .0

0.
w 01
12

ou 3.

2.
zh 201

interlace






interlace




Log Record Formats



interlace



T
n PS
34
om 8:
l.c :4
c
interlace
.
te 13

.7 bk t

41 -b 1 a
3
15
ei .0

0.
w 01
12

ou 3.

2.
zh 201



interlace






interlace


Log Record Formats





interlace

T
n PS
34
om 8:
l.c :4
c
.
te 13

.7 bk t

41 -b 1 a
3
15
ei .0
interlace
0.
w 01
12
LoLatPS1Subpacket0Acks 4 Number of Acks received for the first subpacket of all

ou 3.

2.
zh 201
LoLatPS1Subpacket1Acks 4 Number of Acks received for the second subpacket of all

LoLatPS1Subpacket2Acks 4 Number of Acks received for the third subpacket of all

LoLatPS1Subpacket3Acks 4 Number of P-ARQ Acks received after 4 subpackets for

LoLatPS1pArqNaks 4 Number of P-ARQ Nacks received after 4 subpackets for

LoLatPS1TotalPackets 4 Total number of PS1 (128 bit) packets sent in this

interlace






Log Record Formats

interlace





T
n PS
interlace
34
om 8:
l.c :4
c
.
te 13

.7 bk t
PS4(768 bit) packets sent in this interlace

41 -b 1 a
3
15
ei .0

0.
w 01
12

ou 3.

2.
zh 201

interlace






interlace




Log Record Formats



interlace



T
n PS
34
om 8:
LoLatPS7TotalPackets 4 l.c :4Total number of PS7 (2048 bit) packets sent in this
c
interlace
.
te 13

.7 bk t

41 -b 1 a
3
15
ei .0

0.
w 01
12

ou 3.

2.
zh 201



interlace






interlace


Log Record Formats





interlace

T
n PS
34
om 8:
l.c :4
c
.
te 13

.7 bk t

41 -b 1 a
3
15
ei .0
interlace
0.
w 01
12

ou 3.

2.
zh 201





interlace
UnexpectedPARQnaks 4 Number of P-ARQ NAKs received after an H-ARQ ACK

was already received for same packet

Log Record Formats
5.3.401.1 Formulas for computing reverse link statistics

These statistics are calculated over all transmission modes and all packet sizes.
 “Average RL PER (%)” (for both HiCap and LoLat modes over all packet sizes)
 “Instantaneous RL PER (%)”
T
n PS
34
 “Average RL TransmittedThroughput (kbps)” for both HiCap and LoLat modes over all
packet sizes. Average throughput calculated over the actual RL packet transmission time:
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
Where
ou 3.
2.
zh 201
and
 “Average RL Overall Throughput (kbps)” for both HiCap and LoLat modes over all packet
sizes
Where

Log Record Formats
 “Instantaneous RL Throughput (kbps)” for both HiCap and LoLat modes over all packet
sizes
Where
Legend
T
TM – The set of transmission modes: {HiCap=HC, LoLat=LL}
n PS

 PS – The set of all packet sizes: {128, 256, 12288}
34
SP – The set of all packet (termination-1) in subframes: {0, 1, 2, 3}. For example 0 means
om 8:

the packet terminates in 1 subframe.
l.c :4
. c
te 13
 PARQ_Naks(t,ps,tm) – Current, accumulative total number of P-ARQ NAK’s for packet size
ps, transmission mode tm.
.7 bk t
41 -b 1 a
3
TotalPktsSent(t,ps,tm) – Current, accumulative total number of packets sent for packet size
15

ei .0
ps, transmission mode tm.

0.
w 01
12
PktsSent(t,ps,tm,sp) – Current, accumulative number of packets sent for packet size ps,
ou 3.

transmission mode tm that are successfully terminated in sp+1 subframes.
2.
zh 201
 Seq_Num(t) – Log Sequence Number for the current (t) log packet as given in the ìSeq Numî
field of the log packet

Log Record Formats
5.3.402 1xEV-DO RevARMAC3T2PResource (LOG_CODE 0x127F)

This packet reports the RTCMAC Subtype 3 T2P resource-related information. Some are
AT-wide fields; some are per flow. The sampling period and the logging period are both every
subframe (4 slots = 6.66 ms). This packet is supported in Rev A only.
TxT2P 4 T2P of packet currently being transmitted over the air
PacketID 1 Packet ID of the packet currently being transmitted over the

air
SubframeCount 1 Current subframe count
PacketSizeIndex 1 Packet size of the packet currently being transmitted over

the air
T
 0 – 0 bits
n PS
 1 – 128 bits
 2 – 256 bits
34
 3 – 512 bits
om 8:
 4 – 768 bits
 5 – 1024 bits
l.c :4
. c
 6 – 1536 bits
te 13
 7 – 2048 bits
.7 bk t
 8 – 3072 bits
41 -b 1 a
3
 9 – 4096 bits
15
ei .0
 10 – 6144 bits
0.
w 01
 11 – 8192 bits
12
 12 – 12288 bits
ou 3.
2.
zh 201
SumPayload 2 Aggregate allotted payload size of eligible flows in current

packet
NormalHDR 1  TRUE – If we have not tuned away and RLSI is not in

effect
 FALSE – Otherwise
PilotStrength 4 (signed) Raw value of PilotStrength (pilot_strength) function

(PilotStrength)
FRAB 2 (signed) Filtered Reverse Activity Bit (from DSP, in Q15 format)
NumFlows 1 Number of active MAC flows
Repeat for each flow
FlowAllotment 2 Actual size (in bytes) of this flow
T2POutflow 4 Raw value of actual T2P resource withdrawn from this

flow's bucket in proportion to its allotment
BucketLevel 4 (signed) Raw value of current bucket level
QRAB 1 (signed) Flow specific QRAB
MacFlowID 1 ID of this MAC flow
ΔT2PInflow 4 (signed) Raw value of the T2P inflow increment or decrement for
this flow

Log Record Formats

T2PInflow 4 Raw value of the average T2P resource added to bucket
for this flow
T2PHoldTime 1 Lifetime in subframes of the T2P allocation from Grant

message
BucketSaturationLevel 4 Raw value of the bucket saturation level
BucketFactor 4 (signed) Raw value of the BucketFactor (T2PInflow, FRAB) function
Use the following table to convert the raw values of different fields of this log packet to
RTCMAC Subtype 3 variables in linear or decibel.
Format of the variable

Field name of the log
Conversion formula after conversion
packet
(linear or dB)
T
n PS
TxT2P 10*Log10(TxT2P/1024) dB
PilotStrengthPilotStrength PilotStrengthPilotStrength/1048576 dB
34
om 8:
T2POutflow 10*Log10(T2POutflow/1024)
l.c :4 dB
. c
BucketLevel BucketLevel/1024 Linear
te 13
ΔT2PInflow ΔT2PInflow/1024 Linear

.7 bk t
41 -b 1 a
3
T2PInflow 10*Log10 (T2PInflow/1024) dB
15
ei .0
BucketSaturationLevel 10*Log10 (BucketSaturationLevel/1024) dB

0.
w 01
12
ou 3.
BucketFactor BucketFactor/1048576 Linear

2.
zh 201

Log Record Formats
5.3.403 1xEV-DO RevARMAC3PacketInfo (LOG_CODE 0x1280)

This packet reports the RTCMAC Subtype 3 packet determination information. Some are
AT-wide fields; some are per flow. The sampling period and the logging period are both every
subframe (4 slots = 6.66 ms). This packet is supported in Rev A only.
Version 1 Version number of the log packet (latest version = 1)
Subframe count 1 Current subframe count
Cand_ps_set 2 Final candidate packet size set. This should be treated as a

12-bit bit-mask. If a bit is set to 1, it indicates the presence
of corresponding packet size (e.g., 0x0 = set is empty; 0x3
= set is {128, 256}). The mapping between bit positions and
packet sizes is as follows:
 0 – 128 bits
 1 – 256 bits
T
n PS
 2 – 512 bits
 3 – 768 bits
34
 4 – 1024 bits
 5 – 1536 bits
om 8:
 6 – 2048 bits
l.c :4
c
 7 – 3072 bits
.
te 13
 8 – 4096 bits
 9 – 6144 bits
.7 bk t
41 -b 1 a
 10 – 8192 bits
3
15
 11 – 12288 bits
ei .0
0.
w 01
12
ou 3.
Rand_num 2 (signed) or 0 This field is only included in version 1 and later. Uniform
random number in the range [-256,255]; used for
2.
zh 201
randomization of allocation stagger in PotT2POutflow

calculation.
Ps_Info 1  [Bit 5:7] – Reserved

 [Bit 4] – Transmission mode
 0: HI_CAP mode
 1: LO_LAT mode
 [Bit 0:3] – Final packet size index decided by RTC MAC
See Section 5.3.402 for the mapping between index and
size.
Tx_t2p_max 2 Raw value of maximum transmit T2P
Round_down_quantum 2 Smallest unit of data allotted to a flow in the round-down

algorithm
Number of Flows 1 Number of active MAC flows
Repeat for each flow
InitialQueueSize 4 Initial queue size queried from PCP in bytes
PotT2POutflow 4 Raw value of potential T2P outflow from the bucket of this
flow
Q_Outflow 4 Maximum number of bytes allowed to be deducted from

bucket

Log Record Formats
SuggestedFlowAllocation 4 Suggested flow allocation (in bytes) as decided by RTC

MAC algorithm
ActualFlowAllocation 4 Actual flow allocation (in bytes) as decided by PCP
FlowSetInfo 1  [Bit 6:7] – Reserved

 [Bit 5] – eligible_flow_set
 [Bit 4] – non_empty_flow_set
 [Bit 0:3] – MAC flow ID
Use the following table to convert the raw values of different fields of this log packet to
RTCMAC Subtype 3 variables in linear or decibel.
Field name of the log Conversion formula Format of the variable after
T
packet conversion (linear or dB)
n PS
Tx_t2p_max Tx_t2p_max/4 dB
34
PotT2POutflow 10*log(PotT2POutflow /1024) dB
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.404 1xEV-DO RevARABUpdateInfo (LOG_CODE 0x1281)

This packet logs the FRAB, QRAB, QRABps, pilot strength, DRCLock, SlotQRAB, and
SlotFRAB. In addition, it also logs the subframe number and the best ASP in every subframe.
This buffer is sampled every subframe and is logged in every two frames (eight subframes) in the
connected state only. This packet is supported in Rev A only. The sampling period is every
subframe and the logging period is every other frame in Connected state only.
Count 1 Number of subframes in the log packet
Count instances of the following record (max is 8)
Subframe_n 1 Subframe is being logged (mod 255)
Serving_asp 1 Best ASP
T
n PS
Pilot_strength 2x6 Pilot strength per ASP
Frab 2 FRAB soft decision max
34
om 8:
Slot_frab_per_asp 2x6 l.c :4SlotFRAB per ASP
c
Reserved[Bit 15:14] 2 Sampled for each subframe
.
te 13
Slot_qrab_per_asp  Slot_qrab_per_asp [Bit 13:8] represents SlotQRAB for

[Bit 13:8] each ASP
.7 bk t
41 -b 1 a
Drc_lock_per_asp  0 – Unloaded
3
15
[Bit 7:2]  1 – Loaded
ei .0
 Drc_lock_per_asp [Bit 7:2] denotes DRCLock bit

Qrab_ps [Bit 1]
0.
w 01
received from each ASP

12
Qrab [Bit 0]
ou 3.
 1 – In lock
2.
zh 201
 0 – Out of lock
 Qrab_ps [Bit 1] represents QRAB value based on pilot
strength
 0 – Unloaded
 1 – Loaded
 Qrab [Bit 0] represents QRAB hard decision
 0 – Unloaded
 1 – Loaded

Log Record Formats
5.3.405 1xEV-DO DRC-ARQ-DSCBuffer (LOG_CODE 0x1282)

This packet logs the DRC cover, DRC value, DSC value (1xEV-DO Rev A only) and the
ACK/NACK status for single-user and multiuser (1xEV-DO Rev A only) that are transmitted on
the reverse link in every slot. In addition, this also logs the slot count, DRC lock, and the best
ASP that are transmitted on both the forward and reverse link in every slot. This buffer is
sampled every PN roll and is logged every other PN roll in the connected state only. The
sampling period is at every PN roll. The logging period is at every other PN roll in the connected
state only.
Two instances of the following record
ForcedACK [Bit 14] 2 x 16 Sampled for each slot; 16 slots per PN roll
ACKEna [Bit 13]  ForcedACK [Bit 14] represents if the ACK/NACK was
T
redundant or not.
n PS
ACK/NACK [Bit 12]
 0 – ACK/NAK was not forced
DRCValue [Bit 11:8]
 1 – ACK/NAK was forced
34
MUPAck/Nack [Bit 7]  ACKEna [Bit 13] denotes if the ACK channel is enabled
om 8:
DSCValue [Bit 6:4] l.c :4or disabled:
c
DRCCover [Bit 2:0]  1 – ACK enabled; Bit12 is valid
.
te 13
 0 – ACK disabled; Bit12 is not valid
 ACK/NACK [Bit 12] represents the ACK or NACK that
.7 bk t
41 -b 1 a
3 was transmitted on the reverse link:

15
ei .0

0.
w 01
 DRC Value [Bit 11:8] represents the DRC rate requested

12
by the AT; DRCValue contains the DRC index. Mapping

ou 3.
of DRC index and corresponding data rate is given in

2.
zh 201
Table 5-6.
 MUPAck/Nack [Bit 7] represents whether the ACK that
was transmitted on the reverse link was for multiuser
packets:
 1 – MUPAck was transmitted
 0 – MUPAck was not transmitted
 DSCValue [Bit 6:4] represents the DSC value transmitted
by the AT
 DRCCover [Bit 2:0] cover used to transmit DRC; DRC
cover is that of the best ASP; a value of 7 indicates that
the DRC channel is disabled
SlotCnt 1 Slot Count
DRCLock [Bit 11. .0] 2  [Bit 0] – DRC lock for ASP1

 [Bit 1] – DRC lock for ASP1 valid
 [Bit 2] – DRC lock for ASP2
 [Bit 10] – DRC lock for ASP6
DRCLockUpdateSlot 1 Slot for DRC lock update

Log Record Formats
BestASP_RL [Bit 2:0] 1 x 16 Sampled for each slot; 16 slots per PN roll
BestASP_FL [Bit 5:3] Forward link and reverse link best Active Set Pilot Index
DRCGainBoost 2 Gain boost applied to the DRC channel on the reverse link
 Bit(n)
 1 – Gain boost applied to DRC channel in slot(n)
 0 – Gain boost not applied to DRC channel in slot(n)
DSCGainBoost 2 Gain boost applied to the DSC channel on the reverse link
 Bit(n)
 1 – Gain boost applied to DSC channel in slot(n)
 0 – Gain boost not applied to DSC channel in slot(n)
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.407 1xEV-DO FwdLinkPktHeaderInfo (LOG_CODE 0x1284)

This packet logs the forward link physical layer packet headers. These headers contain physical
layer-related information about each FL packet decoded. This sampling period is every decoder
interrupt and the logging period is 53.3 ms.
Version 1 Version number of the log packet
Record count 1 Number of packet headers in this log packet
Record count instances of the following (max of 16)
Half slot time reference 2 Half slot time reference generated by the MDSP
corresponding to the start of the packet
Data length 1 Physical layer packet size, in units of 4 bytes
DRC value 1 DRC of the packet
T
n PS
Packet type 1 Type of the decoded packet; see Section 5.3.407.1 for the
enumeration
34
Sequence number 1 Sequence number for reordering packets
om 8:
l.c :4
c
Bit fields 1 This is a bit mask; see Section 5.3.407.2 for bit field
.
definitions
te 13
.7 bk t
41 -b 1 a
5.3.407.1 Packet type enumeration

3
15
ei .0
Value Packet type enumeration

0.
w 01
12
ou 3.
0x00 Single-user traffic channel packet

2.
zh 201
0x08 Multiuser traffic channel packet decoded at at MAC index

MUP_PREAMBLE_BASE
0x09 Multiuser traffic channel packet decoded at at MAC index

MUP_PREAMBLE_BASE+1
0x0A Multiuser traffic channel packet decoded at at MAC index

MUP_PREAMBLE_BASE+2
0x0B Multiuser traffic channel packet decoded at at MAC index
MUP_PREAMBLE_BASE+3
0x0C Multiuser traffic channel packet decoded at at MAC index

MUP_PREAMBLE_BASE+4
0x10 Rel 0 (standard) control channel packet
0x11 Rev A (short) control channel packet
0x12 Rev A control channel packet received at user-defined short packet MAC index
0x18 Broadcast
0x19 Enhanced broadcast
0x1A Platinum broadcast

Log Record Formats
5.3.407.2 Bit field definitions
Slots to decode 6 Bits 5:0 – Number of slots the decoder used to decode the
packet
CRC status 2 Bits 7:6 – Indicates whether the packet has passed or failed
CRC
 0x00 – CRC failure
 0x01 – CRC pass
 0x02 – CRC false pass
This log packet is generated every 26.66 ms. The worst case packet size for this log is 114 bytes.
5.3.408 1xEV-DO RevARLArqStatus (LOG_CODE 0x1285)
T
This packet logs Reverse Link ARQ information for each subframe in an active Rev A
n PS
connection. It also logs information on the subpacket being transmitted each subframe. The
sampling period is every subframe when RTC MAC Subtype 3 is active (6.66 ms). A log packet
34
is generated every 8 subframes (53.3 ms). This packet is supported in Rev A only.
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
NumRecords 1 Number of frames logged in this packet; maximum – 8
15
ei .0

0.
w 01
12

ou 3.
2.
zh 201
PacketID 1 Number associated with the packet being transmitted

0xFF – No packet is in transmission

Log Record Formats
H-ARQ [Bit 7:Bit 6] 1  H-ARQ – Indicates H-ARQ received. Values are:

P-ARQ [Bit 5]  00 – No H-ARQ (Idle)
 01 – H-ARQ Nak received (Nak)
PacketStatus [Bit 4:Bit 0]
 10 – H-ARQ Ack received (Ack)
 11 – Reserved
 P-ARQ – Indicates P-ARQ received
 0 – P-ARQ Ack implied (Idle)
 1 – P-ARQ Nak received (Nak)
 Packet Status – Indicates status of the packet loaded
into the encoder in the previous subframe. Values are:
 0 – Idle (no packet transmitted)
 1 – Cancel (loaded packet cancelled due to
continuing previous packet)
 2 – Accepted (loaded packet transmitted)
 20 – FW Error
 24 – SW Error
T
n PS
 Other values reserved
34
Reserved [Bit 15:Bit 10] 2  AuxPilotEnabled – Indicates whether the auxiliary pilot
om 8:
AuxPilotEnabled [Bit 9] l.c :4 is enabled in this subframe
c
TransmissionMode
.
te 13
of the data packet being transmitted in this subframe.
[Bit 8]
Only valid if packet size is nonzero.
Interlace [Bit 7:Bit 6]
.7 bk t
 0 – HiCap
41 -b 1 a
3
SPn [Bit 5:Bit 4]  1 – LoLat
15
ei .0
PacketSize [Bit 3:Bit 0]  Interlace – Current interlace

0.
w 01
 SPn – Indicates the subpacket number being

12
transmitted for the data packet transmitted in this

ou 3.
subframe. Only valid if packet size is nonzero

2.
zh 201
 PacketSize – Indicates the physical layer packet size

transmitted in this subframe
 0 – Null rate, no packet being transmitted
 1 – 128 bits
 2 – 256 bits
 3 – 512 bits
 4 – 768 bits
 5 – 1024 bits
 6 – 1536 bits
 7 – 2048 bits
 8 – 3072 bits
 9 – 4096 bits
 10 – 6144 bits
 11 – 8192 bits
 12 – 12288 bits

Log Record Formats
5.3.409 1xEV-DO RevARLPktStatus (LOG_CODE 0x1286)

This packet logs status info on each packet sent on the Rev A reverse link. The sampling period
is variable; information is sampled when a reverse link packet transmission completes. A log
packet is generated containing status on a maximum of 8 reverse link packets. This packet is
supported in Rev A only.
PacketCount 1 Number of RL packets logged in this packet; maximum – 8
Repeat for PacketCount
DataBytesSent 2 Number of non-padding bytes sent in RL packet
Reserved [Bit 15:Bit 11]: 2 PARQNakReceived – Indicates whether the entire
T

n PS
PARQNakReceived packet was Nak’d
[Bit 10]:  AuxPilotEnabled – Indicates whether the Auxiliary Pilot
34
is enabled for this packet
AuxPilotEnabled [Bit 9]:
om 8:
TransmissionMode l.c :4 of the data packet being transmitted in this subframe
c
[Bit 8]:  0 – HiCap
.
te 13
Interlace [Bit 7:Bit 6]:  1 – LoLat
Subpackets [Bit 5:Bit 4]:  Interlace – Current interlace
.7 bk t
41 -b 1 a
PacketSize [Bit 3:Bit 0]  Subpackets – Indicates the one less than the number of
3
subframes that were required to transmit the packet
15
ei .0
 PacketSize – Indicates the physical layer packet size

0.
w 01
 1 – 128 bits
12
ou 3.
 2 – 256 bits
2.
zh 201
 3 – 512 bits
 4 – 768 bits
 5 – 1024 bits
 6 – 1536 bits
 7 – 2048 bits
 8 – 3072 bits
 9 – 4096 bits
 10 – 6144 bits
 11 – 8192 bits
 12 – 12288 bits
Subframe_t2p[4] 1x4 t2p ratio for the data channel for each of the 4 possible
subframes, in dB/4
RRIgain[4] 1 x 4 (signed) RRI gain for each of the 4 possible subframes, in signed
dB/4

Log Record Formats
5.3.411 1xEV-DO RevAPCPPktStats (LOG_CODE 0x1289)

This packet contains logging information on a per data queue basis for each RMAC layer packet
queued for transmission. The sampling period is asynchronous; every RLP packet that is
collected for transmission. The log packet is sent when a connection layer packet is given to
RMAC.
version 1 Version number of the PCP packet statistics log

(Version 0)
log_record_number 1 nth record number, modulo 256
previous_packet_canceled 1  TRUE – if the previous connection layer packet was

canceled by RMAC
 FALSE – if the packet was not canceled
T
n PS
packet_overflowed 1  TRUE – if the current connection layer packet exceeds
the log packet parameters
34
 FALSE – if the packet fits within the log packet bounds
om 8:
l.c :4
c
format_a_packet 1  TRUE – if the current connection layer packet is
.
te 13
format a
 FALSE – if the packet is format b
.7 bk t
41 -b 1 a
3
15
ei .0
max_packet_size 2 Maximum packet size allowed by RMAC for this

connection layer packet (RMAC Best PS)
0.
w 01
12
ou 3.
num_queues 1 Number of data queues logged by this log packet

2.
zh 201
num_queues occurrences of the following fields:
queue_type 1 Possible values:

 HDRLOG_PCP_PKT_STATS_RLP_NEW_Q – if this
logged data queue contains new RLP data
 HDRLOG_PCP_PKT_STATS_RLP_RETX_Q – if this
logged data queue contains retransmit RLP data
 HDRLOG_PCP_PKT_STATS_RLP_FLUSH_Q – if this
logged data queue contains RLP flush data
 HDRLOG_PCP_PKT_STATS_SLP_NEW_Q – if this
logged data queue contains new SLP data
 HDRLOG_PCP_PKT_STATS_SLP_RETX_Q – if this
logged data queue contains retransmit SLP data
 HDRLOG_PCP_PKT_STATS_TEST_APP_Q – if this
logged data queue contains Test App data
mac_flow_id 1 MAC flow for which this data queue is registered
stream_id 1 Stream on which this data queue transmits
substream_id 1 Used by RLP to identify this data queue as a particular

RLP flow
pending_size 2 Number of reported pending bytes for this data queue
num_packets 1 Number of packets collected from this data queue

Log Record Formats

The maximum number of occurrences (10) of the following fields is allocated and the first num_packets
are valid. If there are more than 10 packets, the packet_overflowed bit will be set to TRUE and only the
first 10 packets will be valid.
header 1*4 Union of two fields

 rlp_seqno – Holds the packet’s 22-bit RLP header if
this logged data queue contains RLP data
 slp_header – Holds the packet’s SLP header if this
logged data queue contains SLP data
packet_size 2 Packet size including any PCP headers
5.3.412 1xEV-DO SubtypeStreamConfig (LOG_CODE 0x128A)

This packet contains the subtype negotiated for each protocol and the application types mapped
to each stream in each personality. This packet is sampled upon acquisition, connection, and
T
n PS
on-demand.
34
om 8:
Version 1 l.c :4 Version number of the log packet (Version 0)
. c
te 13
CurrentPersonality 2 AT’s current personality index; shall be one of the
personality indices of the personality record given below
.7 bk t
41 -b 1 a
PersonalityCount 1 Number of personalities

3
15
ei .0
PersonalityCount instances of the following record

0.
w 01
PersonalityIndex 1 Index of the personality

12
ou 3.
ProtocolSubtypes[28] 2 x 28 Array of 28 words (2 bytes), each representing the subtype

2.
zh 201
negotiated for this personality for each of the protocols;

Table 5-9 gives the mapping of array indices to protocol
names
ApplicationType[4] 2x4 Array of 4 words (2 bytes), each representing the

application type mapped to each of the stream identified by
the array indices
Table 5-9 Index to protocol name

Array index Protocol name
0 Physical Layer protocol
1 Control Channel MAC protocol
2 Access Channel MAC protocol
3 Forward Traffic Channel MAC protocol
4 Reverse Traffic Channel MAC protocol
5 Key Exchange protocol
6 Authentication protocol
7 Encryption protocol

Log Record Formats
Table 5-9 Index to protocol name (cont.)

Array index Protocol name
8 Security protocol
9 Packet Consolidation protocol
10 Air Link Management protocol
11 Initialization protocol
12 Idle State protocol
13 Connected State protocol
14 Route Update protocol
15 Overhead Messages protocol
16 Session Management protocol
T
17 Address Management protocol
n PS
18 Session Configuration protocol
34
19 Stream protocol
om 8:
20 Stream 0 application (signalling)
l.c :4
. c
te 13
21 Stream 1 application
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
24 Broadcast Multicast Services

12
ou 3.
25 Virtual Stream protocol

2.
zh 201
26 Virtual Stream Application VS
27 Generic Multimode Capability Discovery protocol

Log Record Formats
5.3.413 1xEV-DO RevARUPTCList (LOG_CODE 0x128B)

This packet contains information about the current RouteUpdateTriggerCodeList. It is logged
whenever entries are added or removed from the existing RouteUpdateTriggerCodeList.
version 1 Version number of the log packet (Version 0)
list_size 1 Negotiated size for the RouteUpdateTriggerCodeList
num_entries 1 Number of RouteUpdateTriggerCode entries that are

currently in the RouteUpdateTriggerCodeList
num_entries occurrences of the following fields (max = 5)
subnet_id 1 x 16 Full subnet ID of the current sector in a 16 byte array
timestamp 4 Timestamp (in units of 1.28s) when the trigger code was
received
T
n PS
trigger_code 2 Trigger code for the sector defined by the subnet_id
rup_was_acked 1 TRUE – If the RouteUpdate sent in response to the
34

trigger code was ACKED
om 8:
l.c :4 FALSE – If the RouteUpdate has not been ACKED
. c
te 13
subnet_mask 1 Subnet mask of the current sector

.7 bk t
41 -b 1 a
3
15
5.3.414 1xEV-DO EnhMRLPFwdStats (LOG_CODE 0x128C)

ei .0
0.
w 01
This packet contains Forward Enhanced Multiflow Packet Application (EMPA) RLP statistics
12
ou 3.
information. The logging and sampling periods are every second. Counts are reset at RLP
2.
zh 201
initialization.
link_flow 1 Link flow ID
route 1 Route number
flow_protocol 1 Flow protocol
route_protocol 1 Route protocol
packet_stream 1 Indicates whether the link flow is packet-based
segment_sequencing 2 Indicates whether the link flow is doing segment-based

sequencing
reset_time 8 Timestamp of the last statistic reset
at_nak_bytes_requested 8 Number of bytes requested by the AT NAKs
at_nak_windows_requested 8 Number of NAK windows the AT sent out
rx_rexmit_bytes 8 Number of bytes of retransmitted data received
rx_rexmit_frames 8 Number of RLP frames of re-transmitted data received

Log Record Formats

rx_new_data_bytes 8 Number of bytes of new data received
rx_new_data_frames 8 Number of RLP frames of new data received
rx_total_bytes 8 Total number of bytes received
rx_total_frames 8 Total number of RLP frames received
rx_first_data_unit 8 Number of RLP frames received with First Data Unit

flag on
rx_last_data_unit 8 Number of RLP frames received with last Data Unit flag
on
aborts 4 Called NAK timeouts
resets 4 Called reset count; total resets initiated by either the AN

or AT
T
at_reset_request_count 4 Number or resets requested by the AT
n PS
an_reset_ack_count 4 Number of reset Acks received from the AN
34
an_reset_request_count 4 Number or resets requested by the AN
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.415 1xEV-DO EnhMRLPRevStats (LOG_CODE 0x128D)

This packet contains Reverse Enhanced Multiflow Packet Application (EMPA) RLP statistics
information. The logging and sampling periods are every second. The count is reset at RLP
initialization.
Length
Field Description
(bytes)
link_flow 1 Link flow ID
route 1 Route number
flow_protocol 1 Flow protocol
route_protocol 1 Route protocol
T
n PS
packet_stream 1 Indicates whether the link flow is packet-based
segment_sequencing 2 Indicates whether the link flow is performing
34
segment-based sequencing
om 8:
reset_time 8 Timestamp of the last statistic reset
l.c :4
. c
te 13
re_xmits_not_found 4 Number of retransmits not found
an_nak_bytes_requested 8 Number of bytes requested by the AN NAKs

.7 bk t
41 -b 1 a
3
an_nak_windows_requested 8 Number of NAK windows that the AN sent out
15
ei .0
tx_rexmit_bytes 8 Number of bytes of retransmitted by the AT

0.
w 01
12
ou 3.
tx_rexmit_frames 8 Number of RLP frames of retransmitted by the AT

2.
zh 201
tx_new_data_bytes 8 Number of bytes of new data transmitted by the AT
tx_new_data_frames 8 Number of RLP frames of new data transmitted by the AT
tx_total_bytes 8 Total number of bytes transmitted
tx_total_frames 8 Total number of RLP frames transmitted
tx_first_data_unit 8 Number of RLP frames transmitted with First Data Unit flag
on
tx_last_data_unit 8 Number of RLP frames transmitted with last Data Unit flag
on
resets 4 Called reset count; total resets initiated by either the AN or

AT
at_reset_request_count 4 Number or resets requested by the AT
an_reset_ack_count 4 Number of reset Acks received from the AN
an_reset_request_count 4 Number or resets requested by the AN

Log Record Formats
5.3.416 1xEV-DO EnhMRLPRxPkts (LOG_CODE 0x128E)

This packet contains Rx Enhanced Multiflow Packet Application (EMPA) RLP packet logging
information. Sampling is performed upon every RLP packet received. The sampling and logging
periods are asynchronous. A log packet is sent when the log buffer is full.
link_flow_id [4:0] 2  Bit 4:0 – Link flow ID

rsvd [10:5]  Bit 10:5 – Reserved bits, internal tagging
seq_len [12:11]  Bit 12:11 – Sequence length
 0x0 – Sequence number is 6
route[13]
racket_stream [14]  0x2 – Sequence number is 22
segment_sequencing[15]  0x3 – Reserved
 Bit 13 – Route
T
 0x0 – Route A
n PS
 0x1 – Route B
 Bit 14 – Whether link flow is packet-based
34
 0x0 – Octet-based stream
 0x1 – Packet-based stream
om 8:
Bit 15 – Indicates whether the sequencing is based on
l.c :4

. c
segment or octet
te 13
 0x0 – Octet-based sequencing

 0x1 – Segment-based sequencing
.7 bk t
41 -b 1 a
3
15
ei .0
partial_frame_length 1 Length of the partial RLP frame, 0 is the full length

0.
w 01
12
num_frames 1 Number of partial RLP frames logged in this log record

ou 3.
2.
zh 201
NumFrames occurrences of the following fields
frame_len 2 Entire RLP frame length
time_ref 1 Timestamp
frame_payload variable Actual RLP payload byte; if partial_frame_length is 0, the

length in bytes is equal to frame_len; otherwise it is
partial_frame_length bytes

Log Record Formats
5.3.417 1xEV-DO EnhMRLPTxPkts (LOG_CODE 0x128F)

This packet contains Tx Enhanced Multiflow Packet Application (EMPA) RLP packet logging
information. Sampling is performed upon every RLP packet that is transmitted. The sampling
and logging periods are asynchronous. A log packet is sent when the log buffer is full.
Field Size Description
link_flow_id [4:0] 2  Bit 4:0 – Link flow ID

rsvd [10:5]  Bit 10:5 – Reserved bits, internal tagging
seq_len [12:11]  Bit 12:11 – Sequence length
route[13]
racket_stream [14]  0x2 – Sequence number is 22
segment_sequencing[15]  0x3 – Reserved
 Bit 13– Route
T
 0x0 – Route A
n PS
 0x1 – Route B
 Bit 14 – Indicates whether link flow is packet-based or
34
octet-based
om 8:
l.c :4
. c
 Bit 15 – Indicates whether the sequencing is based on
te 13
segment or octet
.7 bk t
41 -b 1 a

3
15
ei .0
0.
w 01

12
ou 3.

2.
zh 201
frame_len 2 Entire RLP Frame Length
time_ref 1 Time Stamp
frame_payload Actual RLP payload bytes; if partial_frame_length is 0, it is

frame_len (bytes); else partial_frame_length (bytes)
5.3.419 1xEV-DO Platinum Multicast Timing Synchronization

Algorithm (LOG_CODE 0x1291)
Parameters must be logged from the timing synchronization algorithm for every slot.
Log Interlace 1 Interlace at which the logging starts (value 0 to 3)
Number of Slots 1 Number of slots logged in the log packet; could be from
1 to 16

Log Record Formats

Number of slot instances of the following record (which includes all remaining fields including NonZeroTap)
ToneFormat 1 Slot configuration used; this could be one of the following:

 0 – 320-tone format
Hstr 2 Half slot time reference corresponding to first slot of the

frame
RTCOffset 4 RTC offset (in chip x8) corresponding to earliest locked

finger
128 instances of the following field
NonZeroTap 1 bit Nonzero tap (either 0 or 1)
T
n PS
This log packet is generated every frame (26.6 ms). The worst case packet size for this log packet
34
is 383 bytes (including 12-byte log header).
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.420 1xEV-DO EnhancedAccessAttempt (LOG_CODE 0x1292)

This packet contains enhanced access attempt information. It is a superset of the 1xEV-DO
AccessAttempt packet defined in Section 5.3.95. This log packet is sampled and logged
asynchronously, after the entire probe sequence completes. Resetting the AccessAttempts packet
counters through the diagnostic tools interface (Section 5.3.95) will also reset the statistics in this
log packet. This packet is only supported on MSM6800 6.X targets and later.
Version 1 Log packet revision number (current = 0)
MaxPNDelay 1 Maximum PN Randomization delay
EnhAccessParamsInc 1 Enhanced Access Parameters included or not
ProbePowerAdjust 2 Probe Power Adjust
PreambleLengthSlots 1 Preamble Length in slots
T
n PS
AccessOffset 1 Access Offset from start of access cycle duration
SectorAccessMaxRate 1 Max Sector access rate
34
om 8:
PayloadSize 1 Size of payload transmitted in the access probe
l.c :4
c
TransactionId 1 Represents the transaction ID of the Connection Request
.
te 13
sent by the AT
.7 bk t
ProbeNumStep 1 Number of probes per probe sequence

41 -b 1 a
3
15
MaxProbeSequence 1 Maximum number of probe sequences
ei .0
0.
w 01
ProbeSequenceCount 1 Number of probe sequences sent for this access attempt

12
ou 3.
Result 1 Result of probe sequence:

2.
zh 201
 0 – ACAck not received

 1 – ACAck received
 2 – TCA message received
 3 – Probe interrupted
 Other values are reserved
Duration 2 Time, in slots, to complete the attempt
SuccessCount 4 Counter for total number of successful attempts
FailureCount 4 Counter for total number of failed attempts per session
AttemptsCount 4 Counter for total number of attempts in this session
PN 2 PN of the sector that sends the ACAck or the TCA

message; if Result field = 0 or 3, then field is reserved
SectorIdLSW 2 Lower 16 bits of the Sector ID on which the Access Probe

was sent
SectorIdUSW 1 Upper 8 bits of the Sector ID on which the Access Probe

was sent
ColorCode 1 Color code on which the access probe was sent
ProbeSequenceCount instances of the following fields (max = 16)
ProbeCount 1 Number of probes sent in the probe sequence

Log Record Formats
5.3.421 1xEV-DO AccessProbe (LOG_CODE 0x1293)

This packet contains access probe sequence information. The sampling period is asynchronous;
after each access probe completes. The logging period is the same as the sampling period. This
packet is only supported on MSM6800 6.X targets and later.
Version 1 Log packet revision number (current = 0)
ProbeSequenceNum 1 Current probe sequence number
Probe Num 1 Probe number within a sequence
PreamblePwr 4 Preamble Power in dBm
FrameCount 1 Number of frames in an access probe
T
ProbeDelayed 1 If the probe was delayed or not due to tune away
n PS
FrameCount instances of the following records. (max = 9)
34
PilotPower 4 Pilot Power in dBm
TotalPower 4
om 8:
Total Power in dBm
l.c :4
. c
te 13
PAHeadroom 1 PA headroom
.7 bk t
FrameDataSize 1 Data size transmitted in frame

41 -b 1 a
3
15
FrameRate 2 Rate at which frame was transmitted
ei .0
0.
w 01
12
ou 3.
2.
zh 201
5.3.422 1xEV-DO MCFLPktHeaderInfo (LOG_CODE 0x1294)

This packet logs the multicarrier Forward Link physical layer packet headers. These headers
contain physical layer-related information about each multicarrier Forward Link packet decoded.
The sampling period is every decoder interrupt. The logging period is 26.67 ms.
NumCarriers 1 Number of carriers in the log packet
NumCarriers (maximum of 3) instances of the following
CarrierID 3 Bit mask identifying the carrier
RecordCount 1 Number of packet headers from this channel ID in the log packet
RecordCount (maximum of 16) instances of the following
SlotTimeReference 2 Slot time reference generated by the MDSP corresponding to the

start of the packet
DataLength 1 Physical layer packet size in units of 4 bytes
DRCValue 1 DRC value of the packet
SequenceNumber 1 Sequence number for reordering packets

Log Record Formats
LinkID 1 Link ID of the serving sector
SlotsToDecode 2  SlotsToDecode [Bits 5:0] – Number of slots the decoder used

[Bits 5:0] to decode the packet
CRCStatus [Bits 7:6]  CRCStatus [Bits 7:6] – Indicates whether the packet has
passed or failed CRC:
CRCIs24Bits [Bit 8]
 0x00 CRC failed
PacketType  0x01 CRC passed
[Bits 13:9]
 0x02 CRC false pass
ReservedBits  CRCIs24Bits [Bit 8] – Indicates CRC Length:
[Bits 15:14]  0x00 CRC Length is 16 bits
 0x01 CRC Length is 24 bits
 PacketType [Bits 13:9] – The packet type is defined as:
 0x00 Single User Traffic Channel packet
 0x08 Multiuser Traffic Channel packet decoded at MAC
index MUP_PREAMBLE_BASE
T
 0x09 Multiuser Traffic Channel packet decoded at MAC
n PS
index MUP_PREAMBLE_BASE+1
 0x0A Multiuser Traffic Channel packet decoded at MAC
34
om 8:
 0x0B Multiuser Traffic Channel packet decoded at MAC
l.c :4
. c
 0x0C Multiuser Traffic Channel packet decoded at MAC
te 13
 0x10 Release 0 (std) control channel packet
.7 bk t
41 -b 1 a
 0x11 Release A (short) control channel packet

3
15
 0x12 Release A control channel packet received at user
ei .0
defined short packet MAC index

0.
w 01
 0x18 Broadcast
12
ou 3.
 0x19 Enhanced Broadcast

2.
zh 201
 0x1A Platinum Broadcast

 ReservedBits [Bits15:14] – Reserved
5.3.424 1xEV-DO MCAirLinkSummary (LOG_CODE 0x1296)

This log packet summarizes the multicarrier air link performance. The log record contains a set
of records to be updated at the PN roll. The data collected over one PN rolls is transmitted to the
diagnostic tool.
NumCarriers 1 Number of carriers logged in this log packet
Str 1 Slot time reference of first slot in the log buffer
RefSubAsetLockedMode 1 Reference sub-ASET in Locked mode
NumCarriers instances of the following record
Carrier ID 3 Bit mask identifying the carrier; see Section 5.3.424.1

Log Record Formats

PerSlot[16] 3 bytes x 16 Array of 16 words (3 bytes) each to hold fields of each
slot in a frame; see Section 5.3.424.2 for definition
PerASP[6] 7 bytes x 6 Array of 6 words (7 bytes) each to hold fields of each

ASP in a frame; see Section 5.3.424.3 for definition
BASPInfo 1 This is a bit mask; see Section 5.3.424.4
NumBadPkts 2 Number of bad packets out of the last 16 packets

received; it is used to compute instantaneous packet
error rate
5.3.424.1 Carrier ID
Length
T
Field Description
(bytes)
n PS
Channel Id 4 [Bits 3:0] – Channel ID of the carrier
34
Reserved Bits 4 [Bits 7:4] – Reserved bits
om 8:
l.c :4
c
Channel Number 11 [Bits 10:0] – Channel number of the carrier
.
te 13
Band Class 5 [Bits 15:11] – Band class of the carrier
.7 bk t
41 -b 1 a
3
5.3.424.2 Per slot
15
ei .0
0.
w 01
PredDRC 1 DRC indices predicted by the predictor for the 16 slots of

12
ou 3.
the previous frames; each DRC index is 4 bits; two DRC

indices are combined into 1 byte
2.
zh 201
 Bit[3:0] of 0 byte represents the DRC index for slot 0

 Bit[7:4] of 7th byte represents the DRC index for slot 15
A value of 0xF indicates that the DRC channel is off.
BASPSinr 4 SINR of best ASP for each slot. This field should be
converted to dB units using the following formula:
10log(BestASPSINR[n]) / 512)
5.3.424.3 Per ASP
ASPFiltSinr 2 Filtered SINR for the six ASPs [1,6]
PilotPnASP 2 Pilot PN for the six ASPs [1,6]
RPC 2 (signed) Filtered RPC values read from the DSP for six possible
ASPs [1,6]; RPC decision is scaled to [-32768,32767] and
filtered over 64 slots; RPC should be in the range of [-1,1],
i.e., (RPC[n]/32767)
RPCCellIdx 1 RPC cell map for each ASP index

Log Record Formats
5.3.424.4 BASP information
BASPPred 4 Bits 3:0 – Current best ASP index value predicted by the
predictor
LastBASPChangedSlot 4 Bits 7:4 – Indicates last best changed slot
The mapping of DRC index to DRC rate in bits per second (bps) is given in Table 5-10.
0 0
1 38400
2 76800
T
3 153600
n PS
4 307200 (S)
34
5 307200 (L)
om 8:
6 l.c :4 614400 (S)
. c
te 13
7 614400 (L)
8 921600
.7 bk t
41 -b 1 a
3
9 1228800 (S)
15
ei .0
10 1228800 (L)
0.
w 01
12
ou 3.
11 1843200
2.
zh 201
12 2457600
13 1536000
14 3072000
15 DRC channel is Off
Use the following table to convert the raw values of SINR fields of this log packet to dB.
Field name of the log Conversion formula Format of the variable after
packet conversion (linear or dB)
ASPFilteredSINR 10 Log10 (ASPFilteredSINR / 512) dB
BestASPSINR 10 Log10 (BestASPSINR / 256) dB

Log Record Formats
5.3.425 1xEV-DO MCSearcherData (LOG_CODE 0x1297)

This log packet reports the multicarrier searcher results for the most recently searched pilots. In
the acquisition state, this packet provides the result of predetect and detect searches. In the steady
state it is recommended that only active set pilots are reported so as to keep the packet size small.
For each active set pilot in the most recently search list, the six largest peaks and their respective
positions are reported. This packet also reports the results from the center of mass computation
for HDR equalizer. The sampling period is asynchronous, every time the pilot active set is
searched (30 ms). The logging period is the same as the sampling period.
SlotCount 2 Slot count of the log packet
TimeToSearch 1 Time to complete search (in units of slow clock)
T
SearchState 1 Searcher state
n PS
 0 – Start
34
 2 – Sync
om 8:
l.c :4  3 – Idle
c
 4 – Connected
.
te 13
.7 bk t
SearchSubstate 1 Searcher substate; value depends on state

41 -b 1 a
3
SearchWindow 2 Search window size in chips
15
ei .0
0.
w 01
MSTRx8 [Bits17:0] 4  MSTRx8 [Bits17:0] – MSTR of chip x8 units

12
Reserved Bits [Bits31:18]  Reserved Bits [Bits31:18] – Reserved

ou 3.
2.
zh 201
EQEnabled [Bit0] 1  EQEnabled [Bit0] – Flag to indicate if equalizer is ON

ReservedBits [Bits7:1]  Reserved Bits [Bits7:1] – Reserved
NumCarriers instances of the following (max of 3)
BestASPIndex 1 Best active set pilot index
NumPilots 1 Number of pilots per frame

Log Record Formats

NumPilots instances of the following (maximum of 28)
PN [Bits8:0] 2  PN [Bits8:0] – PN offset

ReservedBit [Bit9]  ReservedBit [Bit9] – Reserved
AntennaSelect [Bits11:10]  AntennaSelect [Bits11:10] – Contains the antenna
diversity mode used for searching the pilot:
PilotSetType [Bits14:12]  00 – Antenna 0
Reserved Bit1 [Bit15]  01 – Antenna 1
 10 – Antenna 0 + Antenna 1
 11 – Reserved
 PilotSetType [Bits14:12] – Denotes the set to which the
pilot PN belongs; valid values are:
 000 – Does not belong to any set
 001 – Remaining Set
 010 – Neighbor Set
 011 – Candidate Set
T
 100 – Active Set
n PS
 101,110,111 – Reserved
 Reserved Bit1 [Bit15] – Reserved
34
WinCenterx2 2
om 8: Position of window center in chip x2 units
l.c :4
. c
te 13
EarliestPositionx2 2 Position of earliest peak in chip x2 units
.7 bk t
PeakPosition[6] 2 bytes x 6 An array of 6 words of 2 bytes each to represent MSTR

41 -b 1 a
3
compensated position of peaks in chip x2 units
15
ei .0
PeakEnergy[6] 2 bytes x 6 Energy of peaks as an array of 6 words of 2 bytes each

0.
w 01
12
COMPeaksUsed 1 Peaks used for center of mass computation

ou 3.
2.
zh 201
COMPeakEnergyThresh 1 Energy threshold for peaks considered for center of mass

computation
COMPosx2 2 Center of mass RTC offset in chip x2 units
5.3.426 1xEV-DO MCDRCARQDSCBuffer (LOG_CODE 0x1298)

This packet logs the DRC cover, DRC value, and the ACK/NACK status for single-user packet
that is transmitted on the Reverse Link in every slot for each carrier. In addition, this also logs the
slot count, DRC lock, and the best ASP that is transmitted on both the Forward and Reverse Link
in every slot. This buffer is sampled every subframe and is logged every PN roll in Connected
state only.
Field Length (bytes) Field
NumCarriers 1 Number of carriers logged per log packet
SlotCount 1 Slot count of the first slot in the log buffer

Log Record Formats

PN 2 PN value of each carrier
PerSlotChannelInfo 4 bytes x 16 One frame worth of PerSlotChannelInfo record as defined in

Per Slot Channel Information below
DRCLock [Bit 11…0] 2  [Bit 0] – DRC lock for ASP 0

 [Bit 1] – DRC lock valid bit for ASP 0
 [Bit 2] – DRC lock for ASP 1
 ...
 [Bit 10] – DRC lock for ASP 5
DRCLockUpdate 1 Last slot in which DRC lock was updated
T
Per Slot Channel Information
n PS
34
om 8:
DRCCover [Bits 2:0] 2 
l.c :4 DRC cover [Bits 2:0] – Cover used to transmit DRC;
c
Reserved1 [Bit 3] DRC cover is that of the best ASP; a value of 7 indicates
.
te 13
that the DRC channel is disabled
DSCValue [Bits 6:4]
 Reserved1 [Bit 3] – Reserved
.7 bk t
MUPAck/Nack [Bit 7]
41 -b 1 a
3  DSCValue [Bits 6:4] – Represents the DSC value

Reserved2 [Bits 9:8] transmitted by the AT
15
ei .0
DSCBoost [Bit 10]  MUPAck/Nack [Bit 7] – Represents whether the ACK

0.
w 01
DRCBoost [Bit 11] that was transmitted on the reverse link was for
12
multiuser packets:
ou 3.
ACK/NACK [Bit 12]  1 – MUPAck was transmitted

2.
zh 201
ACKEna [Bit 13]  0 – MUPAck was not transmitted

ForcedACK [Bit 14]  Reserved2 [Bits 9:8] – Reserved
Reserved3 [Bit 15]  DSCBoost [Bit 10] – Gain boost applied to the DSC
channel on the reverse link:
 1 – Gain boost applied to DSC channel in slot(n)
 0 – Gain boost not applied to DSC channel in slot(n)
 DRCBoost [Bit 11] – Gain boost applied to the DRC
channel on the reverse link:
 1 – Gain boost applied to DRC channel in slot(n)
 0 – Gain boost not applied to DRC channel in slot(n)
 ACK/NACK [Bit 12] – Represents the ACK or NACK that
was transmitted on the reverse link:
 ACKEna [Bit 13] – Denotes if the ACK channel is
enabled or disabled:
 1 – ACK enabled; Bit 12 is valid
 0 – ACK disabled; Bit 12 is not valid
 ForcedACK [Bit 14] – Represents if the ACK/NACK was
redundant:
 0 – ACK/NAK was not forced
 1 – ACK/NAK was forced
 Reserved3 [Bit 15] – Reserved

Log Record Formats

TransmittedDRC 1 Transmitted DRC value
NextASP [Bits 2:0] 1  Next [Bit2:0] – ASP on which AT is requesting service

Reserved1 [Bit3]  Reserved1 [Bit3] – Reserved
DemodASP [Bits 6:4]  Demod [Bit6:4] – ASP used for demodulation
 Reserved2 [Bit7] – Reserved
Reserved2 [Bit7]
T
n PS
34
om 8:
l.c :4
. c
5.3.430 1xEV-DO Multicarrier Power (LOG_CODE 0x129C)
te 13
.7 bk t
This packet logs the power values polled at the modem.

41 -b 1 a
3
15
ei .0

0.
w 01

12
ou 3.
LNAState 1 LNA gain state of the log packet

2.
zh 201
TxEnabled 1 State of the power amplifier:

 0 – PA Off
 1 – PA On
Hstr 2 Current half-slot reference count

TotalTxPower 2 (signed) Total Tx power over all the carriers
CarrierId 3 Bit mask identifying the carrier; see Section 5.3.430.1
PowerInfo 1 Bit mask to hold fields of per carrier power information in a

packet; see Section 5.3.430.2
TxOpenLoopPower 2 (signed) Tx powers determined by the open loop adjust

mechanism
TxClosedLoopAdjust 2 (signed) Tx powers determined by the closed loop adjust

mechanism
TxPilotPower 2 (signed) Pilot power that is transmitted over the pilot channel
TxTotalPower 2 (signed) Total Tx power as determined by the entire Tx AGC

mechanism

Log Record Formats
RxAGC0 2 (signed) Total Rx power as seen by Antenna0
RxAGC1 2 (signed) Total Rx power as seen by the Antenna1
Carrier Id 4 Bits 3:0 – Channel ID of the carrier
Reserved Bits 4 Bits 7:4 – Reserved bits
Channel Number 11 Bits 10:0 – Channel number of the carrier
Band Class 5 Bits 15:11 – Band class of the carrier
T
5.3.430.2 Power information
n PS
34
RatchetMode [Bit0] 1 Bit 0 – Register shows the state of the Tx power
om 8:
l.c :4limiting:
. c
 0 – Tx power not limited
te 13
 1 – Tx power is limited
.7 bk t
41 -b 1 a
3
CarrierEnabled [Bit1] 1 Bit 1 – State of the power amplifier:
15
ei .0
 0 – PA Off
0.
w 01
 1 – PA On
12
ou 3.
2.
zh 201
ReservedBits[Bit7:Bit2] 6 Bits 7:2 – Reserved bits
All the power fields are in the range of -128 to 127 dBm unless otherwise noted. Conversion to
full dB(m) scale is val/256.
This log packet is generated every PN roll, i.e., 26.67 ms. The worst case packet size for this log
packet is 68 bytes (including 12-byte log header).

Log Record Formats
5.3.432 1xEV-DO MCRLARQStatus (LOG_CODE 0x129E)

This packet logs Reverse Link ARQ information for each subframe and for each carrier in an
active connection. It also logs information on the subpacket being transmitted each subframe.
The sampling period is every subframe when RTC MAC Subtype 4 is active (6.6 ms). The
logging period is every 8 subframes (53.3 ms).
SubframeCount 1 Number of subframes per carrier logged in this log packet
NumCarriers instances of the following record (maximum is 3)
CarrierID 3 Bit mask identifying the carrier being logged
SubframeCount instances of the following record (maximum is 8)
T
n PS
34
om 8:
PacketID = 0xFF indicates that no packet is in transmission
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
H-ARQ [Bit 7:Bit 6] 1  H-ARQ [Bit 7:Bit 6] – Indicates H-ARQ received; values are:
P-ARQ [Bit 5]  00 – No H-ARQ (Idle)
 01 – H-ARQ NAK received (NAK)
PacketStatus [Bit
4:Bit 0]  10 – H-ARQ ACK received (ACK)
 11 – Reserved
 P-ARQ [Bit 5] – Indicates P-ARQ received:
 0 – P-ARQ ACK implied (Idle)
 1 – P-ARQ NAK received (NAK)
 Packet Status [Bit 4:Bit 0] – Indicates status of the packet
loaded into the encoder in the previous subframe; values are:
 0 – Idle (no packet transmitted)
 1 – Cancel (loaded packet cancelled due to continuing
previous packet)
 2 – Accepted (loaded packet transmitted)
 20 – FW Error
 24 – SW Error
T
n PS
 Other values reserved
34
Reserved 2  Reserved [Bit 15:Bit 10] – Reserved
om 8:
[Bit 15:Bit 10]  AuxPilotEnabled [Bit 9] – Indicates whether the Auxiliary Pilot
l.c :4
c
AuxPilotEnabled is enabled in this subframe
.
te 13
[Bit 9]  Transmission Mode [Bit 8] – Indicates the transmission mode
TransmissionMode of the data packet being transmitted in this subframe; only
.7 bk t
valid if PacketSize is nonzero; values are:

41 -b 1 a
[Bit 8]
3
 0 – HiCap
15
Interlace [Bit 7:Bit 6]
ei .0
 1 – LoLat
SPn [Bit 5:Bit 4]
0.
w 01
 Interlace [Bit 7:Bit 6] – Current interlace

12
PacketSize  SPn [Bit 5:Bit 4] – Indicates the subpacket number being

ou 3.
[Bit 3:Bit 0] transmitted for the data packet transmitted in this subframe;
2.
zh 201
only valid if PacketSize is nonzero

 PacketSize [Bit 3:Bit 0] – Indicates the physical layer packet
size transmitted in this subframe:
 0 – Null rate; no packet being transmitted
 1 – 128 bits
 2 – 256 bits
 3 – 512 bits
 4 – 768 bits
 5 – 1024 bits
 6 – 1536 bits
 7 – 2048 bits
 8 – 3072 bits
 9 – 4096 bits
 10 – 6144 bits
 11 – 8192 bits
 12 – 12288 bits

Log Record Formats
5.3.433 1xEV-DO MCRLMetrics (LOG_CODE 0x129F)

This packet logs the number of Reverse Link traffic packets transmitted and the early termination
statistics for each packet size, transmission mode, and carrier. The sampling period is every
subframe. The logging period is every 1 sec.
Length
Field Description
(bytes)
LogSeqNum 4 Sequence number of the log packet
CarrierCount 1 Number of carriers in open state when this packet is logged
Three (3) instances of the following, one for each interlace on the reverse link
HiCapPS1Subpacket0Acks 4 Number of ACKs received for the first subpacket of all PS1
T
(128 bit) packets sent in this interlace
n PS
HiCapPS1Subpacket1Acks 4 Number of ACKs received for the second subpacket of all
34
om 8:
HiCapPS1Subpacket2Acks 4 l.c :4 Number of ACKs received for the third subpacket of all PS1
c
.
te 13
HiCapPS1Subpacket3Acks 4 Number of P-ARQ ACKs received after 4 subpackets for

.7 bk t

41 -b 1 a
3
HiCapPS1pArqNaks 4 Number of P-ARQ NACKs received after 4 subpackets for
15
ei .0

0.
w 01
HiCapPS1TotalPackets 4 Total number of PS1 (128 bit) packets sent in this interlace
12
ou 3.
2.
zh 201

HiCapPS2Subpacket2Acks 4 Number of ACKs received for the third subpacket of all PS2





Log Record Formats
Length
Field Description
(bytes)


T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01

12

ou 3.
2.
zh 201






Log Record Formats
Length
Field Description
(bytes)

PS7 (2048 bit) packets sent in this interlace.

T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a

3
15
ei .0
0.
w 01
12

ou 3.
2.
zh 201


HiCapPS10Subpacket0Acks 4 Number of ACKs received for the first subpacket of all


HiCapPS10Subpacket2Acks 4 Number of ACKs received for the third subpacket of all




interlace


Log Record Formats
Length
Field Description
(bytes)




interlace

T
n PS
34
om 8:
l.c :4
c
.
te 13
.7 bk t

41 -b 1 a
3
15
ei .0

0.
w 01
interlace
12
ou 3.
LoLatPS1Subpacket0Acks 4 Number of ACKs received for the first subpacket of all PS1
2.
zh 201
LoLatPS1Subpacket1Acks 4 Number of ACKs received for the second subpacket of all

LoLatPS1Subpacket2Acks 4 Number of ACKs received for the third subpacket of all PS1
LoLatPS1Subpacket3Acks 4 Number of P-ARQ ACKs received after 4 subpackets for

LoLatPS1pArqNaks 4 Number of P-ARQ NACKs received after 4 subpackets for

LoLatPS1TotalPackets 4 Total number of PS1 (128 bit) packets sent in this interlace



Log Record Formats
Length
Field Description
(bytes)



T
n PS
34
om 8:
l.c :4
. c
te 13
LoLatPS4Subpacket2Acks 4 Number of ACKs received for the third subpacket of all
PS4(768 bit) packets sent in this interlace
.7 bk t
41 -b 1 a

3
15
ei .0
0.
w 01

12

ou 3.
2.
zh 201






Log Record Formats
Length
Field Description
(bytes)


T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01

12

ou 3.
2.
zh 201




LoLatPS10Subpacket0Acks 4 Number of ACKs received for the first subpacket of all




Log Record Formats
Length
Field Description
(bytes)


interlace



T
n PS
34
om 8:
l.c :4
c
.
te 13
interlace
.7 bk t

41 -b 1 a
3
15
ei .0

0.
w 01

12
ou 3.

2.
zh 201



interlace
UnexpectedPARQnaks 4 Number of P-ARQ NACKs received after an H-ARQ ACK

was already received for same packet

Log Record Formats
5.3.433.1 Formulas for computing reverse link statistics

These statistics are calculated over all transmission modes and all packet sizes.
 “Average RL PER (%) per carrier” (for both HiCap and LoLat modes over all packet sizes)
 PARQNaks (t , ps , tm )
∀ ps∈PS ,∀ tm∈TM
RLPER (t ) =
 TotalPktsS ent (t , ps , tm )
∀ ps∈PS ,∀ tm∈TM
 “Instantaneous RL PER (%) per carrier”
 PARQNaks(t , ps, tm) −

∀ps∈PS ,∀tm∈TM
 PARQNaks(t − 1, ps, tm)
RLPER _ Inst (t ) =
 TotalPktsSent (t , ps, tm) −  TotalPktsSent (t − 1, ps, tm)
T
n PS
∀ps∈PS ,∀tm∈TM ∀ps∈PS ,∀tm∈TM
“Average RL TransmittedThroughput (kbps) per carrier” for both HiCap and LoLat modes
34

over all packet sizes. Average throughput calculated over the actual RL packet transmission
om 8:
time: l.c :4
. c
te 13
 ps × GoodPkts(t , ps, tm)

.7 bk t
41 -b 1 a
3
TxTP(t ) =
 PktsTxTime(t , ps, tm)
15
ei .0
0.
w 01
12
ou 3.
where,
2.
zh 201
PktsTxTime(t , ps, tm) = (4 × PARQNaks(t , ps, tm) +  (sp + 1) × PktsSent(t , ps, tm, sp)) × 6.667ms
∀sp∈SP
and
GoodPkts(t , ps, tm) =  PktsSent(t , ps, tm, sp)

∀sp∈SP
 “Average RL Overall Throughput (kbps) per carrier” for both HiCap and LoLat modes over
all packet sizes
 ps × GoodPkts(t , ps, tm)

TotalTP(t ) =
Seq _ Num(t )
where,

∀sp∈SP

Log Record Formats
 “Instantaneous RL Throughput (kbps) per carrier” for both HiCap and LoLat modes over all
packet sizes
 ps × GoodPkts(t , ps, tm) −

 ps × GoodPkts(t − 1, ps, tm)
TotalTP _ Inst (t ) =
Seq _ Num(t ) − Seq _ Num(t − 1)
where,

∀sp∈SP
Legend
T
TM The set of transmission modes – {HiCap=HC, LoLat=LL}
n PS
PS The set of all packet sizes – {128, 256,…12288}
34
SP The set of all packet (termination-1) in subframes – {0, 1, 2, 3}. For
om 8:
example 0 means the packet terminates in 1 subframe
l.c :4
. c
PARQ_Naks(t,ps,tm) Current accumulative total number of P-ARQ NAKs for packet size ps,
te 13
transmission mode tm
.7 bk t
41 -b 1 a
TotalPktsSent(t,ps,tm) Current accumulative total number of packets sent for packet size ps,
3
transmission mode tm
15
ei .0
0.
w 01
PktsSent(t,ps,tm,sp) Current, accumulative number of packets sent for packet size ps,
transmission mode tm that are successfully terminated in sp+1 subframes
12
ou 3.
2.
zh 201
LogSeqNum(t) Log sequence number for the current (t) log packet as given in the
“Seq Num” field of the log packet
5.3.434 1xEV-DO MCRABUpdateInfo (LOG_CODE 0x12A0)

This packet logs the FRAB, SlotFRAB, QRAB, QRABps, SlotQRAB, Pilot Strength, DRCLock,
and Serving sector in every subframe for each carrier. The sampling period is 6.66 ms (every
subframe when RTC MAC Subtype 4 is active). A log packet is generated every 8 subframes
(53.3 ms).
SubframeCount 1 Number of subframes per carrier logged in this log packet
SubframeCount instances of the following record (maximum is 8)

Log Record Formats
ServingASP 1 Serving ASP
PilotStrength 2 bytes x 6 Pilot strength per ASP
FRAB 2 FRAB soft decision max
SlotFRABPerASP 2 bytes x 6 SlotFRAB per ASP
Reserved [Bits 15] 2 Sampled for each subframe

ReferenceSubASET  Reserved [Bits 15:14] – Reserved
[Bit 14]  SlotQRABPerASP [Bits 13:8] – Represents SlotQRAB for
SlotQRABPerASP each ASP:
[Bits 13:8]  0 – Unloaded
 1 – Loaded
DRCLockPerASP
[Bits 7:2]  DRCLockPerASP [Bits 7:2] – Denotes DRCLock bit received
from each ASP:
T
QRABps [Bit 1]
 1 – In lock
n PS
QRAB [Bit 0]  0 – Out of lock
34
 QRABps [Bit 1] – Represents QRAB value based on pilot
strength:
om 8:
 0 – Unloaded
l.c :4
c
 1 – Loaded
.
te 13
 QRAB [Bit 0] – Represents QRAB hard decision:
 0 – Unloaded
.7 bk t
41 -b 1 a
 1 – Loaded
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201
5.3.435 1xEV-DO Multicarrier Pilot Sets (LOG_CODE 0x12A1)

HDR multiple carrier pilot sets log packet logs pilot information of the active set, the candidate
set, neighbor set and remaining set.

Version 1 Version
PNInc 1 PN offset incremental
SearchState 1 Current search state
AsetCount 1 Number of ASET sectors
AsetWindow 1 Search window size of ASET sectors
SlotCount 2 Current slot count
CsetCount 1 Number of CSET sectors
CsetWindow 1 Search window size of CSET sectors
NsetCount 1 Number of NSET sectors
RSET Window 1 Search window size of the RSET sector
Rset Channel 2 Current RSET channel

Log Record Formats

Repeat per Aset pilot
PilotPN 2 PN offset
Total Energy 2 Total energy
OFSCondEnergy 2 Filtered energy for OFS condition
Pilot Group ID 1 Pilot group ID
Channel info 2 Channel information

chan_no [Bits 10:0]  chan_no [Bits 10:0] – Channel number
band_class [Bits 15:11]  band_class [Bits 15:11] – Band class
Index Info 4 Field Length (bits) Description
Link_id 8 Link ID
T
n PS
demod_idx 2 Demod carrier index
Reportable 1 Reportable
34
SubActiveSet index 2 Subactive SET index
om 8:
l.c :4
c
Scheduler Tag 3 Scheduler TAG
.
te 13
ASPIndex 4 ASP index

.7 bk t
41 -b 1 a
RPCIndex 4 RPC index

3
15
ei .0
DRCCover 3 DRC cover

0.
w 01
DropTimerExpried 1 Drop timer expiration

12
ou 3.
flag
2.
zh 201
DropTimerActive 1 Drop timer active flag
reserved 3 Reserved field
Mac info 4 Field Length (bits) Description
FL MAC Index 10 Forward link MAC index
DSCValue 3 DSC value

AuxDRCCover 3 Auxiliary DRC cover
RAB MAC Index 7 RAB MAC index
RL MAC Index 9 Reverse link MAC index
WinCenterx2 2 Search window center
Repeat per Cset Pilot
PilotPN 2 PN offset
PilotEnergy 2 Total energy
Pilot group ID 1 Pilot group ID

Log Record Formats

chan_no [Bits 10:0]  chan_no [Bits 10:0] – Channel number
band_class [Bits 15:11]  band_class [Bits 15:11] – Band class
Cset info 1 Field Length (bits) Description
DropTimerExpried 1 Drop timer expiration

flag
DropTimerActive 1 Drop timer active flag
reserved 6 Reserved field
RAB MAC Index 7 RAB MAC index
RL MAC Index 9 Reverse link MAC index
T
WinCenterx2 2 Search window center
n PS
Repeat per Nset Pilot
34
PilotPN 2 PN offset
om 8:
PilotEnergy 2 Total energy
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
 chan_no [Bits 10:0] – Channel number

3
chan_no [Bits 10:0]
15
 band_class [Bits 15:11] – Band class
ei .0
band_class [Bits 15:11]

0.
w 01
12
ou 3.
Win info 2 Field Length (bits) Description

2.
zh 201
Search window 16 Search window size

size
Search offset 3 Search window offset
Reserved 5 Reserved field
Age 2 Age of the sector
This log is generated every 53.33 ms. The worst-case/largest packet size is 946 bytes.

Log Record Formats
5.3.436 1xEV-DO MCSUFwdStats (LOG_CODE 0x12A2)

This packet logs the CRC and Early Decode statistics for multicarrier forward traffic channel
single user packets and control channel packets. The CRC statistics contain the CRC pass counts
for each transmission format and the CRC failure count for each DRC. The early decode
statistics include the number of packets terminated early at each slot position. The sampling
period is every second. The logging period is the same as the sampling period.
LogSequenceNumber 4 Log packet sequence number
CarrierCount 1 Number of carriers containing the traffic channel statistics

However, the forward statistics for each carrier is logged in
a separate log packet; this field is only for informational
purposes.
T
n PS
34
with good CRC
om 8:
l.c :4
c
with good CRC
.
te 13
.7 bk t
with good CRC

41 -b 1 a
3
15
ei .0
with good CRC

0.
w 01
12
TC0_Bad 4 Counter for DRC 0 traffic channel packets with bad CRC.
ou 3.
2.
zh 201
with good CRC
with good CRC
with good CRC
with good CRC
good CRC
good CRC
good CRC

with good CRC
good CRC

Log Record Formats

good CRC
good CRC

with good CRC
good CRC
good CRC
good CRC
T
n PS
with good CRC
34
om 8:
l.c :4
c
.
te 13
good CRC

.7 bk t
41 -b 1 a
with good CRC

3
15
ei .0

0.
w 01
with good CRC

12
ou 3.
2.
zh 201
good CRC
good CRC
good CRC
good CRC
good CRC
good CRC
good CRC
good CRC

Log Record Formats

good CRC
good CRC
good CRC
good CRC

with good CRC
T
n PS
34
with good CRC
om 8:
l.c :4
c
with good CRC
.
te 13
.7 bk t
41 -b 1 a

3
with good CRC
15
ei .0
0.
w 01
12
ou 3.

2.
zh 201
with good CRC

with good CRC
TC0_128bits[0-15] 4 bytes x 16 Counter for DRC 0 [128, 16, 1024] traffic channel packets
decoded in 1..16 slots

Log Record Formats

T
n PS
34
om 8:
l.c :4
c
.
te 13
.7 bk t

41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.

2.
zh 201
TC6_128bits[0] 4 bytes x 1 Counter for DRC 6 [128, 1, 64] traffic channel packets
decoded in 1 slot
decoded in 1 slot
decoded in 1 slot
decoded in 1 slot

Log Record Formats

decoded in 1 slot
decoded in 1 slot
decoded in 1 slot
T
n PS
34
decoded in 1 slot
om 8:
TC11_3072bits[0] 4 bytes x 1
l.c :4 Counter for DRC 11 [3072, 1, 64] traffic channel packets
c
decoded in 1 slot
.
te 13
.7 bk t
decoded in 1 slot
41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.
decoded in 1 slot
2.
zh 201
CCStatsIncluded 1 Checks whether the log packet includes control channel

statistics or not.
Rest of the log packet is inlcuded only if CCStatsIncluded is 1
CCSht_128bits_Good 4 Counter for short control channel packet [128, 4, 1024] with
good CRC
good CRC
good CRC
CCSht_Bad 4 Counter for short control channel packets with bad CRC
CCSht_128bits[0-3] 4 bytes x 4 Counter for short control channel packet [128, 4, 1024]
decoded in 1..4 slots.

Log Record Formats

CCRate38400 [0-15] 4 bytes x 16 Counter for 38.4 k rate control channel packets decoded in
1..16 slots
CCRate76800 [0-7] 4 bytes x 8 Counter for 76.8 k control channel packets decoded in 1..8
slots
The display provides a packet to reset these counts in the AT databases. Upon reception of the
reset packet, the DMSS resets all the counters to zero.
5.3.436.1 Traffic channel formulas
Per carrier Packet Error Rate (PER)
T
n PS
The per carrier packet error rate is computed using the following formula:
34
 bad _ cnt _ y
∀y∈DRC
om 8:
l.c :4
c
 bad _ cnt _ y +  good _ cnt _ x
.
te 13
∀y∈DRC ∀x∈SUP _ TF
.7 bk t
41 -b 1 a
3
15
Per carrier throughput when served
ei .0
0.
w 01
This is the AT throughput during the time it is served by the AN. The throughput when served for
12
ou 3.
single-user packet is computed using the following formula:

2.
zh 201
 (good _ cnt _ x * pkt _ len _ bits _ x )

∀x∈SUP _ TF
  xmit _ slots _ x  
1.67 *     j * early _ dec _ x[ j ]  +  (bad _ cnt _ y * xmit _ slots _ y )
∀x∈SUP _ TF  j =1  ∀y∈DRC 
The xmit_slots_y in the denominator is the nominal transmit duration in slots, which is same for
all transmission formats of a particular DRC.
Per carrier instantaneous throughputs

total _ good _ data _ served

Inst _ real _ thpu _ sup =
log_ seq _ num
Where,
total _ good _ data _ served =  (good _ cnt _ x * pkt _ len _ bits _ x )

∀x∈SUP _ TF

Log Record Formats
total _ good _ data _ served − total _ good _ data _ served _ prev

Inst _ thput _ sup(1sec) =
log_ seq _ num − log_ seq _ num _ prev
5.3.436.2 Control channel short packet formulas
Throughput when served

The throughput when served for control channel short packets is computed using the following
formula:
 (good _ cnt _ x * pkt _ len _ bits _ x )

∀x∈SHT _ CC _ TF
  xmit _ slots _ x  
1.67 *     j * early _ dec _ x[ j ]  + bad _ cnt _ sht _ cc * trans _ slots _ sht _ cc 
T
 
∀x∈SHT _ CC _ TF   
n PS
j =1
34
The CRC failed statistic for short control channel packet is recorded only as a collective sum
given by bad_cnt_sht_cc in the denominator. The trans_slots_sht_cc is the nominal transmit
om 8:
duration which is equal to four slots for all short control channel transmission formats.
l.c :4
. c
te 13
Instantaneous throughput
.7 bk t
41 -b 1 a
3
15
ei .0
total _ good _ data _ served

Inst _ real _ thpu _ short _ cc =
0.
w 01
log_ seq _ num

12
ou 3.
2.
zh 201
Where,
total _ good _ data _ served =  (good _ cnt _ x * pkt _ len _ bits _ x )

∀x∈SHT _ CC _ TF
total _ good _ data _ served − total _ good _ data _ served _ prev

Inst _ thput _ short _ cc(1sec) =
log_ seq _ num − log_ seq _ num _ prev
Legend
SHT_CC_TF The set of all transmission formats for control channel short packets given
by {[128, 4, 1024], [256, 4, 1024], [512, 4, 1024]}
SUP_TF The set of all transmission formats for single-user packets. Refer to the
traffic channel statistics in the packet definition. This set does not include
the control channel packet statistics.
DRC The set of all DRCs from 0 through 14
good_cnt_x The total number of good packets received for the transmission format x
bad_cnt_y The total number of bad packets received for DRC y

Log Record Formats
pkt_len_bits_x The packet size ‘a’ in bits of a transmission format x [a, b, c]
xmit_slots_y The nominal transmit duration ‘b’ in slots for a transmission format [a, b, c]
of DRC y
early_dec_x[j] The total number of good packets of transmission format x that were
decoded in slot j
total_good_data_served The total number of CRC passed bits received by AT so far
total_good_data_served_prev The total number of CRC passed bits received by AT as reported by

previous log packet
log_seq_num Log packet sequence number
log_seq_num_prev Log sequence number of previous log packet received
bad_cnt_sht_cc Total number of bad short control channel packets
trans_slots_sht_cc Nominal transmit duration of short control channel packets
T
n PS
34
5.3.437 1xEV-DO Multicarrier Multi-User Packet Forward Statistics
(LOG_CODE 0x12A3) om 8:
l.c :4
. c
te 13
This log packet logs the MUP forward statistics of multicarrier multi-user packets. The forward
.7 bk t
statistics include the CRC and early decode statistics for each MUP transmission format.
41 -b 1 a
3
15
ei .0

0.
w 01

12
ou 3.
2.
zh 201
Log Sequence Number 4 Sequence number of the log packet
NumCarriers 1 Number of carriers
Carrier ID 3 Carrier ID that includes the band class and channel

number on which the MUP packet was received; see
Section 5.3.437.1 for definition
Good CRC DRC 3 [128, 4 Number of good CRC MU packets of transmission format
4, 256] [128, 4, 256]
4, 256] [256, 4, 256]
4, 256] [512, 4, 256]
4, 256] [1024, 4, 256]
Bad CRC DRC 3 4 Number of bad DRC 3 MU packets
4, 128] [2048, 4, 128]
2, 64] [3072, 2, 64]

Log Record Formats

Good CRC DRC 10 4 Number of good CRC MU packets of transmission format

[4096, 2, 64] [4096, 2, 64]
Good CRC DRC 13 4 Number of good CRC MU packets of transmission format

[5120, 2, 64] [5120, 2, 64]
Early Decode Counts 4 bytes x 4 Number of [128, 4, 256] MUPs early terminated at each
[128, 4, 256] slot
[256, 4, 256] slot
T
[512, 4, 256] slot
n PS
34
[1024, 4, 256] slot
om 8:
l.c :4
c
[2048, 4, 128] slot
.
te 13
[3072, 2, 64] slot
.7 bk t
41 -b 1 a
3
15
ei .0
[4096, 2, 64] slot

0.
w 01
12
ou 3.
[5120, 2, 64] slot

2.
zh 201
Length
Field Description
(bytes)
Channel Id 4 Bits 3:0 – Channel ID of the carrier
Reserved Bits 4 Bits 7:4 – Reserved bits
Channel Number 11 Bits 10:0 – Channel number of the carrier
Band Class 5 Bits 15:11 – Band class of the carrier
This log is generated every second. The worst case packet size for this log is 489 bytes.

Log Record Formats
5.3.438 1xEV-DO EnhSleepInfo (LOG_CODE 0x12A4)

This packet contains HDR sleep and awake statistics in Slotted mode for every sleep cycle. This
packet supports the Enhanced Idle State Protocol. The sampling period is asynchronous,
triggered at every sleep cycle. It is sampled after any of the following state changes:
 SRCH state 3 → HDR access
The logging period is the same as the sampling period but may be logged on demand.
T
n PS
SleepCycleCount 4 Incremental count from reset; incremented by 1 every time the
34
packet is logged; value saturates at 0xFFFFFFFF
om 8:
AwakeTime 2 Duration, in millieconds, from warm-up ISR until any of the
l.c :4
c
following HDR searcher state changes:
.
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
 SRCH state 3 → HDR access

0.
w 01
12
ou 3.
CcStart2CcDec 2 Time from start of the last CC packet decoded to the time
when decoder ISR recognizes the first CC packet; in half-slot
2.
zh 201
units
CcDec2Sleep 2 Time from when the decoder receives the last CC packet
before going to sleep, to when the HDR searcher enters Sleep
state; in half-slot units; this field is invalid and set to 0xFFFF if
the SRCH state transition was not 3 → 3e
DeadTime 2 (signed) Time from finger assignment to the start of SCC, in half-slot
units
SlotCount 1 Number of slots taken to decode the last CC packet prior to

logging the packet
CcRate 1 Control channel rate
CcStatus 1 Control channel status:

 0 – Good CRC
 1 – Missed CC preamble
 2 – Bad CRC
 3 – False CRC pass
 All other values are reserved

Log Record Formats

NextSrchState 1 Indicates the next searcher state at the time of logging; may
be one of the following:
 SRCH state 0x3E
 SRCH state 0x04
 SRCH state 0x00
 HDR Access state; logged as SRCH state 0x03 since it is a
substate of the Searcher Idle state
PilotPN 2 ASET pilot at the time of logging
PilotEnergy 2 ASET pilot energy at the time of logging
HandoffCount 1 Number of idle handoffs during the current wake-up period;

the value saturates at 0xFF
OfsStatus 1 Off-frequency search status:

 0 – No off-frequency search
T
 1 – Off-frequency search but no off-frequency handoff
n PS
 2 – Off-frequency handoff
 All other values are reserved
34
om 8:
The following three fields are invalid if OfsStatus is equal to 0
l.c :4
. c
te 13
OfsChannel 2 Channel number and band class
 [Bit10: Bit0] – Channel number
.7 bk t
41 -b 1 a
 [Bit15: Bit11] – Band class

3
15
ei .0
0.
w 01
OfsPN 2 Strongest off-frequency PN searched

12
ou 3.
OfsPNEnergy 2 Raw energy of the strongest searched off-frequency pilot

2.
zh 201
SCI 1 Sleep Cycle Index; see the translation formula that follows this
table; this is based on when the next CC packet wil be
decoded and not the negotiated SCI, e.g., 6 when sleeping for
overhead collection and 3 if doing intra SCC sleep with a CC
rate of 2
CcMerCount 4 Cumulative CC MER count from reset; value saturates at

0xFFFFFFFF; this assumes one LSB for every synchronous
control channel capsule decode failure
ReacqLossCount 4 Cumulative reacquisition failure count from reset for the first
wake-up of the CC capsule; this value saturates at
0xFFFFFFFF
CmacExpiryCount 2 Cumulative CMAC timer expiry count from reset; value

saturates at 0xFFFF
IhoCount 4 Cumulative idle handoffs count from reset; value saturates at

0xFFFFFFFF
OfsCount 4 Cumulative count of off-frequency searches from reset; value

saturates at 0xFFFFFFFF
OfsHandoffCount 2 Cumulative off-frequency handoff count from reset; value

saturates at 0xFFFF
ChanHashCount 1 Cumulative idle state channel hashing count from reset; value
saturates at 0xFF

Log Record Formats

CCMerDenom 4 Cumulative CC MER denom from reset; this assumes one
LSB for every synchronous control channel capsule decoded;
this will not be updated every wake-up
CurWarmupTimeUS 4 Current determined warm-up time based on WUTA
ForcePreambleUsed 1 Decode attempt of the first SCC packet due to force preamble
detection
ForcePreambleCount 4 Number of times force preamble detection of the first SCC

packet caused a decode to be attempted with success
ForcePreambleFailed 4 Number of times force preamble detection of the first SCC

Count packet caused a decode to be attempted without success
TotalTimeOutOfService 4 Total time out of service in milliseconds

Ms
EstOutOfServiceCC 4 Estimate of what the CC MER is, including time spent out of
T
n PS
Mer service due to system loss; add this value to cc_mer_count
and the cc_mer_denom to get the adjusted ccmer result
34
IntraSCCForce 4 Number of times force preamble detection caused a decode to
om 8:
PreambleCount be attempted during intra-SCC wakeups
l.c :4
c
IntraSCCForce 4 Number of times force preamble detection caused a decode to
.
te 13
PreambleFailureCount be attempted without success during intra-SCC wakeups
.7 bk t
IntraSCCReacqFailure 4 Cumulative reacquisition failure count from reset for intra-SCC

41 -b 1 a
3
Count wakeups; this value saturates at 0xFFFFFFFF
15
ei .0
CCMACNumber 1 Number of the first packet in the Control Channel Capsule

0.
w 01
decoded in this wake-up; if the wake-up is for the first packet

12
ou 3.
of the SCC it is 1; if the wake-up is for the second packet of the

SCC it is 2; if the wake-up is for the subsync packet, it should
2.
zh 201
always be 1; if the wake-up is for the quick paging capsule it is

a0
CCMACCount 1 Number of CCMAC packets decoded in this wake-up (for

when intra-SCC sleep was not performed)
FirstCCFailureCount 4 Cumulative number of first packets that could not be decoded

successfully
ContCCFromSleep 4 Cumulative number of continuation CC packets in which a
Count decode was attempted upon waking up from intra SCC sleep
ContCCFromAwake 4 Cumulative number of continuation CC packets in which a

Count decode was attempted when the AT was awake from a
previous wake-up (for when intra-SCC sleep was not
performed)
ContCCFromSleep 4 Cumulative number of continuation CCMAC packets that were

FailureCount decoded unsuccessfully upon waking up from sleep
ContCCFromAwake 4 Cumulative number of continuation CCMAC packets that were

FailureCount decoded unsuccessfully when the AT was awake from a
previous wake-up (for when intra-SCC sleep was not
performed)
Reserved 0 or more May expand in the future

Log Record Formats
Time fields may be converted from half-slot units to milliseconds using the following formula:
half-slot = (80 ms)/(3*16*2) = 0.833 ms
slot = half-slot*2 = 1.667 ms
Slot Cycle Index is converted into milliseconds using the following formula:
SCI = 2SCI * 4 slots (for SCI from 0x0 to 0x6)
SCI = 2(SCI-0x7) * 768 slots (for SCI from 0x7 to 0x1c)
OfsPNEnergy and PilotEnergy are converted into dB units using the following formula:
PilotStrength(dB) = 10 x Log10(pilotEnergy/512)
5.3.439 1xEV-DO MultiMRLPFwdStats (LOG_CODE 0x12A5)
T
n PS
This packet contains reverse MRLP statistics information. The sampling period is every 4 sec
and whenever QN instances are created or deleted. The logging period is the same as the
34
sampling period.
om 8:
l.c :4
. c
te 13
Version 1 Version number

.7 bk t
41 -b 1 a
3
link_flow [Bits4:0] 2  link_flow [Bits4:0] – Link flow ID
15
ei .0
route [Bit5]  route [Bit5] – Route number

0.
w 01
flow_protocol [Bits9:6]  flow_protocol [Bits9:6] – Flow protocol

12
 route_protocol [Bits13:10] – Route protocol

ou 3.
route_protocol [Bits13:10]
 packet_stream [Bit14] – Whether link flow is
2.
zh 201
packet_stream [Bit14] packet-based

sequence_type [Bit15]  sequence_type [Bit15] – Whether link flow is doing
segment-based sequencing
sequence_length 1 SAR sequence length
sequence_length_short 1 SAR sequence length short
reset_time 8 Timestamp for last statistics reset
at_quick_nak_ind_cnt 8 Number of indicated Quick NAK records AT sent out
at_quick_nak_cnt 8 Number of Quick NAK records AT sent out
at_delayed_nak_cnt 8 Number of delayed NAK records AT sent out
at_delayed__nak_data_unit_ 8 Number of bytes requested by AT delayed NAKs

cnt
rx_rexmit_bytes 8 Number of bytes of retransmitted data received
rx_rexmit_frames 8 Number of RLP frames of retransmitted data received
rx_new_data_bytes 8 Number of bytes of new data received
rx_new_data_frames 8 Number of RLP frames of new data received
rx_first_data_unit 8 Number of RLP frames received with First Data Unit

flag on

Log Record Formats

rx_last_data_unit 8 Number of RLP frames received with Last Data Unit
flag on
rx_dup_data_bytes 8 Number of duplicate bytes received
rx_dup_data_frames 8 Number of duplicate frames received
aborts 4 Called NAK timeouts
nak_abort_data_units_approx 8 Approximate count of data units aborted
resets 4 Called reset count; total resets, initiated by either the

AN or AT
at_reset_request_count 4 Number of resets requested by AT
an_reset_ack_count 4 Number of reset ACKs received from AN
an_reset_request_count 4 Number of resets requested by AN
T
n PS
last_rlp_reset_time 8 Last time this RLP instance was reset
rx_reseq_q_size 4 Maximum size of resequencing queue in the last
34
logging interval
om 8:
rx_nak_abort_q_size 4 Maximum size of the NAK Abort list in the last logging
l.c :4
c
interval
.
te 13
rx_delayed_nak_q_size 4 Maximum size of the Delayed NAK list in the last

.7 bk t
logging interval
41 -b 1 a
3
15
num_qn_instances 1 Number of QN instances with statistics information
ei .0
included in this log record

0.
w 01
12
num_qn_instances occurrences of the following fields

ou 3.
2.
zh 201
sched_group 1 Scheduler group ID of this QN instance
num_carriers 1 Number of carriers in the QN instance
qn_id 8 Unique QN identifier
qn_create_time 8 Creation time of this QN instance
qn_delete_time 8 Deletion time of this QN instance

This has a value of 0 if the QN instance is still active. A
nonzero value indicates that the QN instance has been
deleted.
rx_new_data_bytes 8 Number of new bytes received on this QN instance
rx_new_data_frames 8 Number of new RLP frames received on this QN

instance
quick_nak_ind_cnt 4 Number of Quick NAK indications generated by this

QN instance

Log Record Formats
5.3.440 1xEV-DO MultilinkMRLPRevStats (LOG_CODE 0x12A6)

This packet contains reverse Multilink Multiflow Packet Application (MMPA) RLP statistics
information. The sampling period is every 1 sec. The logging period is the same as the sampling
period.
version 1 Version number
link_flow [Bits 0:4] 2  link_flow [Bits 0:4] – Link flow ID

route [Bit5]  route [Bit5] – Route number
flow_type [Bit6]  flow_type [Bit6] – Whether link flow is
packet-based
sequence_type [Bit7]  sequence_type [Bit7] – Whether link flow is doing
flow_protocol [Bits8:11] segment-based sequencing
route_protocol [Bits12:15]  flow_protocol [Bits8:11] – Flow protocol
 route_protocol [Bits12:15] – Route protocol
T
n PS
sequence_length 1 Sequence length
tx_new_data_bytes 8 Number of new data bytes sent
34
tx_new_data_units 8 Number of new data units sent
om 8:
l.c :4
c
tx_fdu_frames 8 Number of first data unit frames sent
.
te 13
tx_ldu_frames 8 Number of last data unit frames sent

.7 bk t
41 -b 1 a
num_marq_instances 8 Number of PhysicalLayerNak indications received

3
by RLP
15
ei .0
0.
w 01
num_new_data_units_marqed 8 Number of new data units indicated by

12
PhysicalLayerNak indication
ou 3.
2.
zh 201
num_retx_data_units_marqed 8 Number of retx data units indicated by

PhysicalLayerNak indication
num_ooo_instances 8 Number of occurrences of out-of-order transmission
num_bytes_tx_ooo 8 Number of bytes transmitted out of order
num_spd_instances 8 Number of higher layer packets dropped due to

TransmitAbortTimer
num_spd_bytes 8 Number of bytes dropped due to
TransmitAbortTimer
num_nak_records_rcvd 8 Number of NAK records received
num_nak_data_units_requested 8 Number of NAK data units requested
num_retx_data_units 8 Number of data units retransmitted
num_retx_bytes 8 Number of bytes retransmitted
num_retx_not_found 8 Number of instances that retransmit data units were

not found
last_rlp_reset_time 8 Last time the RLP was reset because of AN or AT
last_stats_reset_time 8 Last time the RLP Stats were reset
at_reset_request_count 4 Number of times AT requested a reset
an_reset_request_count 4 Number of times AN requested a reset

Log Record Formats

max_tx_q_size 2 Maximum transmit queue size within the logging
interval
max_retx_q_size 2 Maximum retransmit queue size within the logging

interval
max_new_data_handles_used 2 Maximum number of new data handles used per slot

within the logging interval
max_retx_data_handles_used 2 Maximum number of retransmit data handles used

per slot within the logging interval
5.3.441 1xEV-DO MultiMRLPRxPkts (LOG_CODE 0x12A7)
T
This packet is a log of the RLP data packet received on the rorward Multilink Multiflow Packet
n PS
Application (MMPA). The sampling period is asynchronous, when every RLP packet is received.
The logging period is asynchronous.
34
om 8:
l.c :4
. c
te 13
link_flow_id [Bits4:0] 1 bytes  link_flow_id [Bits4:0] – Link Flow ID
route [Bit5]  route [Bit5] – Route
.7 bk t
41 -b 1 a
 0x0 – Route A
packet_stream [Bit6]
3
 0x1 – Route B
15
segment_sequencing
ei .0
 packet_stream [Bit6] – Whether link flow is

[Bit7]
0.
w 01
packet-based
12

ou 3.

2.
zh 201
 segment_sequencing [Bit7] – Whether the sequencing

is based on segment
sar_seq_len [Bits4:0] 2 bytes  sar_seq_len [Bits4:0] – SAR sequence length

sar_seq_len_short  sar_seq_len_short [Bits9:5] – SAR sequence length
[Bits9:5] short
buffer_alloc [Bit10]  buffer_alloc [Bit10] – Buffer allocated; internal tagging
 rsvd [Bits15:11] – Reserved; internal tagging
rsvd [Bits15:11]
partial_frame_length 1byte Length of the partial RLP frame; 0 is the full length
num_frames 1 byte Number of partial RLP frames logged in this log record

Log Record Formats

frame_len 2 bytes Entire RLP frame length
time_ref 1 byte Timestamp
frame_payload If partial_frame_ Actual RLP payload bytes

length is 0, it is  Bits 0:4 – Link flow number
frame_len(bytes)  Bit 5 – Route
Else  Bit 6 – Is QN Sequence included
partial_frame_  If Bit 6 is 1, then:
length (bytes)  Bit 7: Bit 7+ QNSequenceLength = QN Sequence
 (Bit 7+ QNSequenceLength +1): (Bit 7+
QNSequenceLength + SARSequenceLengthShort)
= SAR Sequence
 (Bit 7+ QNSequenceLength +
SARSequenceLengthShort+1) = First Data Unit
T
 (Bit 7+ QNSequenceLength +
n PS
SARSequenceLengthShort + 2) = Last Data Unit
 Else if Bit 6 is 0, then:
34
 Bit 7: Bit 7+SARSequenceLength = SAR Sequence
om 8:
l.c :4  (Bit 7+SARSequenceLength +1) = First Data Unit
c
 (Bit 7+SARSequenceLength +2) = Last Data Unit
.
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.442 1xEV-DO MultiMRLPTxPkts (LOG_CODE 0x12A8)

This packet is a log of the RLP data packet transmitted on the reverse Multilink Multiflow Packet
Application (MMPA). The sampling period is asynchronous, when every RLP packet is
transmitted. The logging period is asynchronous.
link_flow_id [Bits4:0] 1  link_flow_id [Bits4:0] – Link flow ID

rsvd [Bits10:5]  rsvd [Bits10:5] – Reserved; internal tagging
seq_len [Bits12:11]  seq_len [Bits12:11] – Sequence length
route [Bit13]
racket_stream [Bit14]  0x2 – Sequence number is 22
segment_sequencing  0x3 – Reserved
[Bit15]  route [Bit13] – Route
 0x0 – Route A
 0x1 – Route B
T
n PS
 racket_stream [Bit14] – Whether link flow is
packet-based
34
om 8:
 segment_sequencing [Bit15] – Whether the
l.c :4
c
sequencing is based on segment
.
te 13
.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01

12
ou 3.
2.
zh 201
frame_len 2 Entire RLP frame length
time_ref 1 Timestamp
frame_payload If partial_frame_ Actual RLP payload bytes

length is 0, it is  Bit 0: Bit seq_len = SAR Sequence Number
frame_len(bytes)  Bit seq_len + 1 = First Data Unit
Else  Bit seqn_len + 2 = Last Data Unit
partial_frame_
length (bytes)

Log Record Formats
5.3.443 1xEV-DO MultiMRLPRxProcessing (LOG_CODE 0x12A9)

This packet contains rorward Multilink MultiFlow Packet Application (MMPA) RLP state
information. The sampling period is event-based. The logging period is the same as the sampling
period.
Version] 1 Version number
event_type [Bits1:0] 1  event_type [Bits1:0] – Event type

link_flow [Bits6:2]  0 – Packet reception on Forward Link
 1 – RLP reset
route [Bit7]
 2 – Abort
 3 – Flush message received
 link_flow [Bits6:2] – Link flow ID
 route [Bit7] – Route number
T
vn_before 4 V(n) before processing the event
n PS
vn_after 4 V(n) after processing the event
34
vr_before 4 V(r) before processing the event
om 8:
vr_after 4 l.c :4 V(r) after processing the event
. c
te 13
Following fields exist only if event_type = 0 (Packet reception on Forward Link)
link_id 1 Link ID on which the packet was received

.7 bk t
41 -b 1 a
3
scheduler_group_id 1  scheduler_group_id [Bits0:5] – Scheduler group id on
15
ei .0
[Bits0:5] which the packet was received

0.
w 01
qn_seq_included [Bit6]  qn_seq_included [Bit6] – Indicates whether QN

12
Sequence number is included in the packet

ou 3.
reserved [Bit7]
 reserved [Bit7] – Reserved
2.
zh 201
num_data_units 4 Total number of data units in packet
sar_seq_num 4 SAR sequence number
Next 2 fields exist only if qn_seq_included = 1
qn_seq_num 2 QN sequence number
sar_seq_short_num 4 SAR Sequence number short
5.3.444 1xEV-DO MCRLPktStatus (LOG_CODE 0x12AA)

This packet logs status information on each packet sent on the Reverse Link for each carrier. The
sampling period is variable, when an RL packet transmission completes. A log packet is
generated containing status on a maximum of 8 RL packets.

Log Record Formats

CarrierID 3 Bit mask identifying the carrier; see Section 5.3.424 for
details
PacketCount 1 Number of RL packets logged in this packet;

maximum = 12
Repeat for PacketCount
DataBytesSent 2 Number of nonpadding bytes sent in RL packet
Reserved [Bit 15:Bit 11] 2  Reserved [Bit 15:Bit 11] – Reserved

PARQNakReceived [Bit 10]  PARQNakReceived [Bit 10] – Indicates whether the
entire packet was NAKed
AuxPilotEnabled [Bit 9]
 AuxPilotEnabled [Bit 9] – Indicates whether the
TransmissionMode [Bit 8] auxiliary pilot is enabled for this packet
Interlace [Bit 7:Bit 6]  Transmission Mode [Bit 8] – Indicates the
T
Subpackets [Bit 5:Bit 4] transmission mode of the data packet being
n PS
transmitted in this subframe:
PacketSize [Bit 3:Bit 0]
 0 – HiCap
34
 1 – LoLat
om 8:

l.c :4 Interlace [Bit 7:Bit 6] – Current interlace
c
 Subpackets [Bit 5:Bit 4] – Indicates the one less than
.
the number of subframes that were required to
te 13
transmit the packet

.7 bk t
 PacketSize [Bit 3:Bit 0] – Indicates the physical layer

41 -b 1 a
packet size:
3
15
 1 – 128 bits
ei .0
 2 – 256 bits
0.
w 01
 3 – 512 bits
12
ou 3.
 4 – 768 bits
2.
zh 201
 5 – 1024 bits
 6 – 1536 bits
 7 – 2048 bits
 8 – 3072 bits
 9 – 4096 bits
 10 – 6144 bits
 11 – 8192 bits
 12 – 12288 bits
SubframeT2P[4] 1 byte x 4 t2p ratio for the data channel for each of the 4 possible
subframes, in dB/4
RRIgain[4] 1 byte x 4 RRI gain for each of the 4 possible subframes, in signed
(signed) dB/4
5.3.445 Reserved (LOG_CODE 0x12AB)

Log Record Formats
5.3.446 Reserved (LOG_CODE 0x12AC)
5.3.447 Reserved (LOG_CODE 0x12AD)
5.3.448 1xEV-DO Platinum Multicast Channel Estimation Algorithm

(0x12AE)
Multipath Intensity Profile (MIP) is an estimate of time-domain impulse response of the channel
that is used for timing synchronization algorithm.
T
LogSlot 1 Slot index [0-15] within a frame for which the channel estimation
n PS
parameters are logged
34
128 instances of the following field
om 8:
MIP 4 Multipath intensity profile.
l.c :4
. c
te 13
This log packet is generated every frame (26.6 ms). The worst case packet size for this log packet
.7 bk t
is 526 bytes (including the 12 byte header).

41 -b 1 a
3
15
ei .0
5.3.449 Reserved (LOG_CODE 0x12AF)

0.
w 01
12
ou 3.
2.
zh 201
5.3.450 1xEV-DO Multicarrier Forward Link Physical Layer Packet

(0x12B0)
This log packet logs one or more forward link physical layer packets along with the carrier ID
and the physical layer revision of the packet.
Log Sequence 2 Log packet sequence number

Number
HSTR 2 9-bit half slot time reference corresponding to preamble

detection
Num Physical layer 1 Number of physical layer packets contained in the log packet
packets
Num Physical layer packets instances of rest of the log packet
Packet Info 4 Length and physical layer revision of the packet; see
Section 5.3.450.2 for the definition

Log Record Formats

Carrier ID 3 Carrier ID containing the channel number and band class on
which the packet was received. This field is valid only if
PacketInfo.PhyRevision is 1. For all other values of
PhyRevision, this field shall be ignored. See Section 5.3.450.1
for the definition.
(Packet info.PktLength(x16) x 16) instances of the following record
Data 1 Hex dump of the packet payload
Length
Field Description
(bytes)
T
n PS
34
om 8:
l.c :4
. c
te 13
5.3.450.2 Packet information
.7 bk t
41 -b 1 a
PktLength(x16) 7 3 Bits 6:0 – Length of the physical layer frame in units of 16

bytes
15
ei .0
PhyRevision 1 Bit 7 – Physical layer revision of the log packet with

0.
w 01
following enumeration:
12
ou 3.
 0 – Physical layer Rev 0

2.
zh 201
 1 – Physical layer Rev A/B
This log is generated as each packet is forwarded to upper layers. The worst case packet size for
this log is 666 bytes.
5.3.451 1xEV-DO Multicarrier Reverse Link Physical Layer Packet

(0x12B1)
This log packet logs every reverse link physical layer packet that has been loaded and accepted
by the encoder along with the carrier ID and the physical layer revision of the packet.
Log Sequence 2 Log packet sequence number

Number
SubFrame No. 1 Mod 75 subframe counter derived from system time
Packet Info 2 Length and physical layer revision of the packet; see
Section 5.3.451.2 for the definition

Log Record Formats

Carrier ID 3 Carrier ID containing the channel number and band class on
which the packet was received. This field is applicable only when
the PacketInfo.PhyRevision is 2. For all other values of
PhyRevision, this field should be ignored. See Section 5.3.451.1
for the definition of carrier ID.
(Packet info.PktLength(x16) x 16) instances of the following record
Data 1 Hex dump of the packet payload
Length
Field Description
(bytes)
T
n PS
34
om 8:
l.c :4
. c
te 13
5.3.451.2 Packet information
.7 bk t
41 -b 1 a
Length
3
Field Description
15
(bytes)
ei .0
0.
w 01
PktLength(x16) 7 Bits 6:0 – Length of the physical layer frame in units of 16

12
bytes
ou 3.
2.
zh 201
Reserved 7 Bits 13-7
PhyRevision 2 Bit 15-14 – Physical layer revision of the log packet with
following enumeration:
 0 – Physical layer Rev 0
 1 – Physical layer Rev A
 2 – Physical layer Rev B
This log is generated as each RL packet is transmitted, so it could be as often as every subframe.
The worst case packet size for this log is 1545 bytes.
5.3.452 Reserved (0x12B2)
5.3.453 1xEV-DO Multicarrier PCP Packet Statistics (0x12B3)

LOG_HDR_REVB_PCP_PKT_STATS_C is used to log PCP packets given to RMAC.

Log Record Formats
log_record_number 1 Record number to keep track of current log packet; incremented

after each logging
sub_frame_count 1 Current subframe count as given by RMAC
prev_chosen_combo 1 Combo_ID sent to RMAC in the previous subframe

_id
num_combos 1 Number of combos
combos Variable Variable number of combo records –

hdrlog_revb_pcp_pkt_stats_combo_data_type
num_combos instances of the following record
combo_id 1 Combo ID
T
n PS
num_carriers 1 Number of carriers in this combo
carriers Variable Variable number of combo records –
34
hdrlog_revb_pcp_pkt_stats_carrier_data_type
om 8:
num_carriers instances of the following record
l.c :4
. c
te 13
carrier_id 1 Carrier ID
prev_sf_canceled 1 Indicates whether previous subframe was cancelled

.7 bk t
41 -b 1 a
3
is_fmt_b 1 Indicates whether PCP packet is of format B
15
ei .0
num_flows 1 Number of flows in this carrier

0.
w 01
12
ou 3.
tx_flows Variable Variable number of flow records –

2.
zh 201
hdrpcp_log_tx_flow_data_type
Num_flows instances of the following record
Mac_flow_id 1 MAC flow with which this RLP flow is associated
Total_size_rexmit 2 Size of the retransmitted RLP packet in this PCP packet
header_bytes_rexmit 4 RLP header of the first rexmit RLP packet (there might be
multiple rexmit RLP packets from the same RLP rexmit queue in
one PCP packet)
 Bit 0:1 – Stream ID
 Bit 2:7 – Substream ID
 Bit 8:(8+SARsequencelength-1) – Sequence number
total_size_new 2 Size of the new RLP packet in this PCP packet
header_bytes_new 4 RLP header of the new packet in the PCP packet

 Bit 0:1 – Stream ID
 Bit 2:7 – Substream ID
 Bit 8:(8+SARsequencelength-1) – Sequence number

Log Record Formats
This log is generated every 6.6 ms for each subframe. The worst case packet size for this log is
5 + HDRPCP_MAX_COMBOS * (2 + HDRPCP_MAX_CARRIERS * (4 +
HDRPCP_MAX_TX_FLOWS * (2 + 4 * HDRPCP_NUM_DATA_PRIORITIES) ) ) = 2461
bytes. The F3 messages indicating the pending new and rexmit queue size for each RLP
substream reported to PCP are required for comparison with the RMAC log packet.
5.3.454 Reserved (0x12B4)

Parameters must be logged from the Pilot Detection Algorithm for every PB slot.
5.3.455 1xEV-DO Overhead Cache Summary (0x12B5)

LOG_HDR_OVHD_CACHE_SUMMARY is used to provide a summary when overhead cache
entries are updated.
T
n PS
version 1 Version of the log packet
34
cur_cache_idx 1 Current cache record index
om 8:
l.c :4
c
num_cache_entry 1 Number of cache entries
.
te 13
num_cache_entry of the following records

.7 bk t
41 -b 1 a
index 1 Index number of the cache entry; this number might not be
3
consecutive
15
ei .0
0.
w 01
config_change 1 Configuration change field from QuickPage message

12
ou 3.
timestamp 4 Time at which the QuickConfig message for this entry was
2.
zh 201
received
band 1 Band class in which the SectorParameter message for this entry
was received
channel 2 Channel in which the SectorParameter message for this entry

was received
pilot_pn 2 Pilot PN of the sector in which the SectorParameter message for

this entry was received
sector_sig 2 Sector parameter signature
sector_id 8 128-bit sector ID
subnet_mask 1 Subnet mask
qc_valid 1 True if cache of QuickConfig message is valid
ap_included 1 True if access_sig is valid
If ap_included, the following records exist
sig 2 Access parameter signature
bc_state 1 BCMCS entry state

 INVALID – 0
 CURRENT – 1
 NOT_PARSED – 2

Log Record Formats
bc_packed_msg 4 Pointer to packed message; set to NULL if bc_state == INVALID
If bc_state == CURRENT, the following records exist
sig 2 BCMCS overhead signature; set to 0x0000 if bc_state !=

CURRENT
This log packet is generated every time overhead cache is updated (around every 5.12 ms in case
the Overhead message is changing). The maximum size of the packet is 3 +
LOG_HDR_OVHD_MAX_CACHE_RECORDS * 40 = 159 bytes.
5.3.456 1xEV-DO Pilot Sets, Version 3 (0x12B6)

This logs pilot information of the active set, the candidate set, neighbor set and remaining set.
T
n PS
Version 1 Version of log packet
34
PNInc 1 PN increment in chip x64 units
om 8:
l.c :4
c
AsetCount 1 Total number of ASET pilots
.
te 13
AsetWindow 1 Aset window size in chip x1

.7 bk t
41 -b 1 a
AsetChannel 2  chan_no [Bits 10:0] – Aset channel number

3
band_class [Bits 15:11] – Band class
15
chan_no [Bits 10:0] 
ei .0

0.
w 01
12
ou 3.
SearchState 1 HDR search state

2.
zh 201
CsetCount 1 Total number of Cset pilots
CsetWindow 1 Cset window size in chipx1
NsetCount 1 Total number of Nset pilots
RsetWindow 2 Rset search window
Repeat per Aset Pilot
Total Energy 2 Total filtered energy
OFSFilterEnergy 2 Filtered energy for OFS condition
Index info 2  ASPIndex [Bits 3:0] – ASP index for the Aset
ASPIndex [Bits 3:0]  RPCIndex [Bits 7:4] – RPC index for the Aset
RPCIndex [Bits 7:4]  DRCCover [Bits 10:8] – DRC cover
 Reserved [Bits 15:11] – Reserved
DRCCover [Bits 10:8]
reserved [Bits 15:11]
Mac Info 2  MacIndex [Bits 7:0] – Mac index
MacIndex [Bits 7:0]  DropTimerExpried [Bit 8] – Drop timer expired
flag
DropTimerExpried [Bit 8]
 DropTimerActive [Bit 9] – Drop timer active
DropTimerActive [Bit 9] flag

Log Record Formats

WinCenterx2 2 Window center in chip x2
Repeat per Cset Pilot
PilotEnergy 2 Total filtered energy
Cset Freq 2  chan_no [Bits 10:0] – Cset channel number

chan_no [Bits 10:0]  band_class [Bits 15:11] – Band class
Cset Info 2  Reserved [Bits 7:0] – Reserved

Reserved [Bits 7:0]  DropTimerExpried [Bit 8] – Drop timer expired
flag
DropTimerExpried [Bit 8]
 DropTimerActive [Bit 9] – Drop timer active
T
DropTimerActive [Bit 9] flag
n PS
winCenterx2 2 Window center in chip x2
34
Repeat per Nset Pilot
om 8:
PilotPN
l.c :4
2 Pilot PN offset
. c
te 13
PilotEnergy 2 Total filtered energy
.7 bk t

41 -b 1 a
3
15
NsetFreq 2 chan_no [Bit 10:0] – Cset channel number
ei .0

chan_no [Bit 10:0]  band_class [Bit 15:11] – Band class
0.
w 01
12
band_class [Bit 15:11]

ou 3.
2.
zh 201
NsetWindow 2 Nset window size in chipx1
Nset Win Info 2  Offset [Bits 2:0] – Neighbor search window

Offset [Bits 2:0] offset
 Reserved [Bits 7:3] – Reserved
Reserved [Bits 7:3]
 Age [Bits 15:8] – Age
Age [Bits 15:8]
This log is generated every 60.5 ms. The worst-case packet size is 12+12+12*6+12*6+12*40 =
648 bytes (including 12 bytes header).
5.3.457 Reserved (LOG_CODE 0x12B7 – 0x12C0)
5.3.458 CM Call Event (LOG_CODE 0x12C1)

This holds information for the CM call event.
Length
Field Description
(bytes)
CALL_EVENT 4 Call event; see Section 5.3.458.1 for values

Log Record Formats
Length
Field Description
(bytes)
CALL_CLIENT_ID 4 Originating/answering client ID
CALL_ID 4 Call ID
CALL_STATE 4 Call state

 0 – Idle
 1 – Origination
 2 – Incoming call
 3 – Conversation
 4 – Originating but waiting for call control to complete
CALL_TYPE 4 Call type

 0 – Voice
 1 – Circuit-switched data
 2 – Packet-switched data
T
n PS
 3 – SMS
 4 – Position determination
34
 5 – Test
 6 – OTAPA
om 8:
 7 – Standard OTASP
l.c :4
. c
 8 – Nonstandard OTASP
te 13
 9 – Emergency
 10 – Supplementary services
.7 bk t
41 -b 1 a
 11 – Videotelephony
3
15
 12 – Videotelephony loopback
ei .0
0.
w 01
12
ou 3.
NUM 98 Number buffer; see Section 5.3.458.3 for format description

2.
zh 201
REDIRECTING_NUMBER 102 Redirecting number; see Section 5.3.458.4 for format

description
ALPHA 65 Tag to be displayed; see Section 5.3.458.5 for format

description
SIGNAL 4 Alert signal information; see Section 5.3.458.6 for format

description
END_STATUS 4 Call end status; see Section 5.3.458.2 for values
NUM_CALL_IDS_ENDED 1 Number of calls ended
END_PARAMS 10 Call end information; see Section 5.3.458.7 for format

description

Log Record Formats
Length
Field Description
(bytes)
SYS_MODE 4 Indicates on which system call is made; values are:
 0 – No service
 1 – AMPS
 2 – CDMA
 3 – GSM
 4 – 1xEV-DO
 5 – WCDMA
 6 – GPS
 7 – GSM and WCDMA
 8 – WLAN
 9 – LTE
 10 – GSM and WCDMA and LTE
CALL_CONNECT_TIME 4 Time call was connected
T
n PS
CALL_END_TIME 4 Time call was ended
34
BYTES_RECEIVED 4 Number of bytes received for PS data call
om 8:
BYTES_TRANSMITTED 4 Number of bytes transmitted for PS data call
l.c :4
. c
LINE 4 Line being used for the call (voice calls only):
te 13
 0 – Line # 1
.7 bk t
 1 – Line # 2
41 -b 1 a
3
15
ei .0
REQUESTING_CLIENT_ 4 Requesting client’s ID

0.
w 01
ID
12
ou 3.
MSM_ID 4 Identifies which MSM generated this event; values are:

2.
zh 201
 0 – MSM ID is 6500
 1 – MSM ID is 6250
 3 – MSM that does not have control of DPRAM
DIRECTION 4 Holds the direction of the current call; values are:

 0 – Undefined direction
 1 – Mobile-originated call
 2 – Mobile-terminated call
ASUBS_ID 1 Active subscription-ID

5.3.458.1 Call event

This section describes the enum values for CALL_EVENT.

Log Record Formats
Enum
Event Comments
value
0 CM_CALL_EVENT_ORIG Phone originated a call
1 CM_CALL_EVENT_ANSWER Incoming call was answered
2 CM_CALL_EVENT_END_REQ Started the end process; GW only
3 CM_CALL_EVENT_END Originated/incoming call was ended
4 CM_CALL_EVENT_SUPS Phone sent Flash/Flash with information to BS
5 CM_CALL_EVENT_INCOM Phone received an incoming call
6 CM_CALL_EVENT_CONNECT Originated/incoming call was connected

7 CM_CALL_EVENT_SRV_OPT Service option changed while in a call; CDMA only
8 CM_CALL_EVENT_PRIVACY Privacy mode changed while in a call; CDMA only
T
9 CM_CALL_EVENT_PRIVACY_PREF Privacy mode preference changed
n PS
10 CM_CALL_EVENT_CALLER_ID Caller ID information was received from BS; CDMA
34
only
om 8:
11 CM_CALL_EVENT_ABRV_ALERT l.c :4 CMDA/AMPS abbreviated alert; CDMA only
. c
12 CM_CALL_EVENT_ABRV_REORDER AMPS abbreviated reorder; CDMA only
te 13
13 CM_CALL_EVENT_ABRV_INTERCEPT AMPS abbreviated intercept; CDMA only

.7 bk t
41 -b 1 a
3
14 CM_CALL_EVENT_SIGNAL Signal information was received from BS
15
ei .0
15 CM_CALL_EVENT_DISPLAY Display information was received from BS; CDMA

0.
w 01
only
12
ou 3.
16 CM_CALL_EVENT_CALLED_PARTY Called party information was received from BS;

2.
zh 201
CDMA only
17 CM_CALL_EVENT_CONNECTED_NUM Connected number information was received from

BS
18 CM_CALL_EVENT_INFO Call information for this event only; sent to the client
that requested this information through
cm_call_cmd_get_call_info
19 CM_CALL_EVENT_EXT_DISP Extended display was received from BS; CDMA

only
20 CM_CALL_EVENT_NDSS_START Start NDSS redirection; CDMA only
21 CM_CALL_EVENT_NDSS_CONNECT Call was reconnected due to NDSS; CDMA only
The following are for FEATURE_JCDMA
22 CM_CALL_EVENT_EXT_BRST_INTL Extended burst type – international
23 CM_CALL_EVENT_NSS_CLIR_REC National supplementary services – CLIR
24 CM_CALL_EVENT_NSS_REL_REC National supplementary services – release
25 CM_CALL_EVENT_NSS_AUD_CTRL National supplementary services – audio control
26 CM_CALL_EVENT_L2ACK_CALL_HOLD Call hold
The following are for WCDMA/GSM
27 CM_CALL_EVENT_SETUP_IND Phone received a setup indicator message from BS

Log Record Formats
Enum
Event Comments
value
28 CM_CALL_EVENT_SETUP_RES Setup response was sent
29 CM_CALL_EVENT_CALL_CONF Call origination has been accepted
The following are for WCDMA/GSM PS Data
30 CM_CALL_EVENT_PDP_ACTIVATE_IND Phone received incoming PDP call
31 CM_CALL_EVENT_PDP_ACTIVATE_ Response to incoming PDP was sent

RES
32 CM_CALL_EVENT_PDP_MODIFY_REQ PDP modify request was sent
33 CM_CALL_EVENT_PDP_MODIFY_IND Phone received PDP modify indication from BS
34 CM_CALL_EVENT_PDP_MODIFY_REJ Phone received PDP modify rejection from BS

35 CM_CALL_EVENT_PDP_MODIFY_ Phone received PDP modify confirmation from BS
T
CONF
n PS
36 CM_CALL_EVENT_RAB_REL_IND Phone received RAB release indication from BS
34
37 CM_CALL_EVENT_RAB_REESTAB_IND Phone received RAB reestablish indication from BS
om 8:
38 CM_CALL_EVENT_RAB_REESTAB_ RAB reestablish request was sent
l.c :4
c
REQ
.
te 13
39 CM_CALL_EVENT_RAB_REESTAB_ Phone received RAB reestablish confirm from BS

.7 bk t
CONF
41 -b 1 a
3
15
40 CM_CALL_EVENT_RAB_REESTAB_REJ Phone received RAB reestablish reject from BS
ei .0
0.
w 01
41 CM_CALL_EVENT_RAB_REESTAB_ RAB reestablishment failed

12
FAIL
ou 3.
2.
zh 201
421 CM_CALL_EVENT_PS_DATA_ PS data available request was sent

AVAILABLE
432 CM_CALL_EVENT_MNG_CALLS_CONF Confirmation for multiparty calls
442 CM_CALL_EVENT_CALL_BARRED Call barred notification
452 CM_CALL_EVENT_CALL_IS_WAITING Call in waiting notification
462 CM_CALL_EVENT_CALL_ON_HOLD Call on hold notification
472 CM_CALL_EVENT_CALL_RETRIEVED Call retrieved notification
482 CM_CALL_EVENT_ORIG_FWD_STATUS Originated call may be forwarded notification to

forwarding subscriber
492 CM_CALL_EVENT_CALL_FORWARDED Call forwarded notification to forwarding subscriber
502 CM_CALL_EVENT_CALL_BEING_ Call being forwarded notification to calling

FORWARDED subscriber
512 CM_CALL_EVENT_INCOM_FWD_CALL Incoming forwarded call notification forwarded to

subscriber
522 CM_CALL_EVENT_CALL_RESTRICTED Call restricted notification
532 CM_CALL_EVENT_CUG_INFO_ Call forward CUG notification

RECEIVED

Log Record Formats
Enum
Event Comments
value
542 CM_CALL_EVENT_CNAP_INFO_ Caller name information notification

RECEIVED
552 CM_CALL_EVENT_EMERGENCY_ Voice call was converted into emergency call

FLASHED
562 CM_CALL_EVENT_PROGRESS_INFO_ Call origination progress indication

IND
572 CM_CALL_EVENT_CALL_DEFLECTION Call deflection notification
582 CM_CALL_EVENT_TRANSFERRED_ Call transfer notification

CALL
592 CM_CALL_EVENT_EXIT_TC Traffic channel has been torn down; CDMA only
602 CM_CALL_EVENT_REDIRECTING_ Redirecting number information record event;
T
NUMBER CDMA only
n PS
612 CM_CALL_EVENT_PDP_PROMOTE_ Obsolete with definition of CM_API_SEC_PDP;
IND clients check CM_API_SEC_PDP for SEC PDP
34
support; secondary context being promoted to
om 8:
l.c :4 primary
. c
622 CM_CALL_EVENT_UMTS_CDMA_ Initiate the UMTS to 1X handoff
te 13
HANDOVER_START
.7 bk t
41 -b 1 a
632 CM_CALL_EVENT_UMTS_CDMA_ 3 UMTS to 1X handoff completed

HANDOVER_END
15
ei .0
642,3 CM_CALL_EVENT_SECONDARY_MSM Event callback even if the event is from secondary

0.
w 01
MSM
12
ou 3.
652,4 CM_CALL_EVENT_ORIG_MOD_TO_SS Origination command was modified to SS due to

2.
zh 201
call control
663,4 CM_CALL_EVENT_USER_DATA_IND Indication of user data from remote side
673,4 CM_CALL_EVENT_USER_DATA_ Indication from lower layers to stop sending user

CONG_IND data
683,4 CM_CALL_EVENT_MODIFY_IND Network-requested modification of VT-to-voice and

vice-versa
693,4 CM_CALL_EVENT_MODIFY_REQ Request sent to do modification of VT-to-voice and

vice-versa
703,4 CM_CALL_EVENT_LINE_CTRL CM_LINE_CTRL_F report event
1 – This value is present only if feature FEATURE_PS_DORMANT_PWR_SAVE is not defined.

2 – If feature FEATURE_PS_DORMANT_PWR_SAVE is defined then decrement the value by 1.
3 – This value is present only if feature FEATURE_UMTS_1X_HANDOVER_1XMSM or
FEATURE_UMTS_1X_HANDOVER_UMTSMSM is defined.
4 – If both FEATURE_UMTS_1X_HANDOVER_1XMSM and FEATURE_UMTS_1X_HANDOVER_
UMTSMSM are not defined, decrement the value by 1.

Log Record Formats
5.3.458.2 Call end

This section describes the enum values for END_STATUS.
Enum
End reason Comments
value
0 CM_CALL_END_OFFLINE Phone is offline
20 CM_CALL_END_CDMA_LOCK Phone is CDMA-locked until power cycle; CDMA

only
21 CM_CALL_END_NO_SRV Phone has no service
22 CM_CALL_END_FADE Call has ended abnormally; CDMA only
23 CM_CALL_END_INTERCEPT Received intercept from BS; origination only; CDMA

only
24 CM_CALL_END_REORDER Received reorder from BS; origination only; CDMA

only
T
n PS
25 CM_CALL_END_REL_NORMAL Received release from BS; no reason given
34
26 CM_CALL_END_REL_SO_REJ Received release from BS; SO reject; CDMA only
om 8:
27 CM_CALL_END_INCOM_CALL l.c :4 Received incoming call from BS
. c
28 CM_CALL_END_ALERT_STOP Received alert stop from BS; incoming only; CDMA
te 13
only
.7 bk t
41 -b 1 a
29 CM_CALL_END_CLIENT_END Client ended call

3
15
ei .0
30 CM_CALL_END_ACTIVATION Received end activation; OTASP call only; CDMA

0.
w 01
only
12
ou 3.
31 CM_CALL_END_MC_ABORT MC aborted origination/conversation; CDMA only

2.
zh 201
32 CM_CALL_END_MAX_ACCESS_ Maximum access probes transmitted; CDMA only

PROBE
33 CM_CALL_END_PSIST_NG Persistence test failure; FEATURE_JCDMA only;

CDMA only
34 CM_CALL_END_UIM_NOT_PRESENT R-UIM not present

35 CM_CALL_END_ACC_IN_PROG Access attempt already in progress
36 CM_CALL_END_ACC_FAIL Access failure for reason other than the above
37 CM_CALL_END_RETRY_ORDER Received retry order; origination only; IS- 2000;

CDMA only
38 CM_CALL_END_CCS_NOT_ Concurrent service not supported by BS

SUPPORTED_BY_BS
39 CM_CALL_END_NO_RESPONSE_ No response received from BS

FROM_BS
40 CM_CALL_END_REJECTED_BY_BS Call rejected by BS; CDMA only
41 CM_CALL_END_INCOMPATIBLE Concurrent services requested not compatible;

CDMA only
42 CM_CALL_END_ACCESS_BLOCK Access is blocked by BS; CDMA only
43 CM_CALL_END_ALREADY_IN_TC Corresponds to CM_CALL_ORIG_ ERR_

ALREADY_IN_TC

Log Record Formats
Enum
End reason Comments
value
44 CM_CALL_END_EMERGENCY_ Call is ending due to emergency call that is flashed
FLASHED over this call; CDMA only
45 CM_CALL_END_USER_CALL_ORIG_ CM is ending GPS call in favor of a user call

DURING_GPS
46 CM_CALL_END_USER_CALL_ORIG_ CM is ending SMS call in favor of a user call

DURING_SMS
47 CM_CALL_END_USER_CALL_ORIG_ CM is ending data call in favor of an emergency call

DURING_DATA
48 CM_CALL_END_REDIR_OR_HANDOFF Call rejected because of redirection or handoff
GSM/WCDMA
100 CM_CALL_END_LL_CAUSE Received reason from lower layer, look in cc_cause
T
101 CM_CALL_END_CONF_FAILED Call origination request failed
n PS
102 CM_CALL_END_INCOM_REJ Client rejected the incoming call
34
103 CM_CALL_END_SETUP_REJ Client rejected the setup_ind
om 8:
104 CM_CALL_END_NETWORK_END
l.c :4 Network ended the call, look in cc_cause;
. c
WCDMA/GSM only
te 13
105 CM_CALL_END_NO_FUNDS GSM/WCDMA/LTE only

.7 bk t
41 -b 1 a
3
106 CM_CALL_END_NO_GW_SRV GWM/WCDMA/LTE only; phone has no service
15
ei .0
107 CM_CALL_END_NO_CDMA_SRV 1X only; phone has no service

0.
w 01
12
108 CM_CALL_END_NO_FULL_SRV Full service unavailable

ou 3.
2.
zh 201
109 CM_CALL_END_MAX_PS_CALLS Resources not available to handle new MO/MT PS

call
1xEV-DO
150 CM_CALL_END_CD_GEN_OR_BUSY Abort connection setup due to reception of

ConnectionDeny message with deny code = general
or network busy
151 CM_CALL_END_CD_BILL_OR_AUTH Abort connection setup due to reception of a

ConnectionDeny message with deny code = billing
or authentication failure
152 CM_CALL_END_CHG_HDR Change 1xEV-DO system due to redirection or PRL

not preferred
153 CM_CALL_END_EXIT_HDR Exit 1xEV-DO due to redirection or PRL not

preferred
154 CM_CALL_END_HDR_NO_SESSION No 1xEV-DO session

155 CM_CALL_END_CM_COLLOC_ACQ_ For internal CM use only; fail to acquire collocated
FAIL 1xEV-DO for origination
156 CM_CALL_END_HDR_ORIG_DURING_ Used if CM is ending an 1xEV-DO call origination in

GPS_FIX favor of GPS fix
157 CM_CALL_END_HDR_CS_TIMEOUT Connection setup timeout

Log Record Formats
Enum
End reason Comments
value
158 CM_CALL_END_HDR_RELEASED_BY_ CM released 1xEV-DO call so that 1X call can
CM continue
159 CM_CALL_END_HOLD_DBM_IN_PROG CM will hold the 1xEV-DO origination to allow 1X

SMS to end
160 CM_CALL_END_NO_HYBR_HDR_SRV Mobile has no hybrid 1xEV-DO service
161 CM_CALL_END_HDR_NO_LOCK_ Call ended because 1xEV-DO did not obtain the RF
GRANTED lock
Videotelephony call
301 CM_CALL_END_VIDEO_CONN_ Modem released the call after the modem had been
connected
302 CM_CALL_END_VIDEO_SETUP_ Call setup failed while trying to set up the modem
FAILURE
T
n PS
303 CM_CALL_END_VIDEO_PROTOCOL_ Video protocol closed after the video protocol setup
CLOSED was done
34
304 CM_CALL_END_VIDEO_PROTOCOL_ Video protocol setup failed
om 8:
SETUP_FAILURE l.c :4
. c
te 13
305 CM_CALL_END_INTERNAL_ERROR CM internal error other than any of the above
.7 bk t
41 -b 1 a
5.3.458.3 NUM
3
15
ei .0
Depending on the call event, this field will have different numbers.
0.
w 01
12
ou 3.
Call event Contents of number buffer

2.
zh 201
CM_CALL_EVENT_ORIG Dialed digit string
CM_CALL_EVENT_FLASH Dialed digit string
CM_CALL_EVENT_INCOM Caller ID string
CM_CALL_EVENT_CALLER_ID Caller ID string
BUF 64 Number buffer
LEN 1 Length of the number stored
DIGIT_MODE 4 Origination digit mode; values are:

 0 – 4-bit DTMF
 1 – 8-bit ASCII

Log Record Formats

NUMBER_TYPE 1 Number type; values are:
 0 – Unknown number type
 1 – International number
 2 – National number
 3 – Network-specific number
 4 – Subscriber number
 6 – Abbreviated number
 7 – Reserved for extension
NUMBER_PLAN 1 Numbering plan; values are:

 0 – Unknown number plan
 1 – ISDN/telephony numbering plan (CCITT E.164 and
CCITT E.163)
 3 – Data numbering plan (CCITT X.121)
 4 – Telex numbering plan (CCITT F.69)
T
n PS
 8 – National numbering plan
 9 – Private numbering plan
34
 11 – Reserved for CTS
 15 – Reserved for extension
om 8:
l.c :4
. c
te 13
PI 1 Presentation indicator
.7 bk t
SI 1 Screening indicator
41 -b 1 a
3
SUBADDR 25 Subaddress; see Section 5.3.458.3.1 for format description
15
ei .0
0.
w 01
12
5.3.458.3.1 SUBADDR
ou 3.
2.
zh 201
EXTENSION_BIT 1 Extension bit
SUBADD_TYPE 1 Type of subaddress; values are:

 0 – NSAP
 1 – USER
ODD_EVEN_IND 1 Indication of even/odd bits; values are:

 0 – Even
 1 – Odd
NUM_CHAR 1 Number of characters in subaddress array
CHARI 21 Array of subaddress digits

Log Record Formats
5.3.458.4 REDIRECTING_NUMBER
NUM 98 Number that is redirecting
REDIRECTING_REASON 4 Redirecting reason; values are:

 0 – Unknown
 1 – Call forwarding busy or called DTE busy
 2 – Call forwarding no reply (circuit-mode only)
 9 – Called DTE out of order (packet-mode only)
 10 – Call forwarding by the called DTE (packet-mode
only)
 15 – Call forwarding unconditional or systematic call
redirection
 16 – Reserved
T
n PS
5.3.458.5 ALPHA
34
om 8:
BUF 64 l.c :4Alpha tag buffer
. c
LEN 1 Tag length
te 13
.7 bk t
41 -b 1 a
5.3.458.6 SIGNAL
3
15
ei .0

0.
w 01
12
ou 3.
IS_SIGNAL_INFO_AVAIL 1 Indicates whether signal information is available

2.
zh 201
SIGNAL_TYPE 1 Signal type

 0 – Tone
 1 – ISDN
 2 – IS-54B
ALERT_PITCH 1 Alert pitch

 0 – Medium
 1 – High
 2 – Low
 3 – Reserved
SIGNAL 1 Indicates which tone signal to use

Log Record Formats
5.3.458.7 END_PARAMS
CALL_ID 1 Call ID to end
INFO_TYPE 4 Mode type; values are:

 0 – CDMA
 1 – GSM/WCDMA circuit-switched
 2 – GSM/WCDMA/LTE packet-switched
END_PARAMS 5 Mode-specific end parameters; see Section 5.3.458.7.1

5.3.458.7.1 Mode-specific END_PARAMS
T
n PS
GW_CS_END 1 GSM/WCDMA circuit-switched end parameters
See GW_CS_END below for format description.
34
om 8:
GW_PS_END 5 GSM/WCDMA/LTE packet-switched end parameters
l.c :4
c
See GW_PS_END below for format description.
.
te 13
CDMA_END 2 CDMA call end parameters

.7 bk t
See CDMA_END below for format description.

41 -b 1 a
3
15
ei .0
5.3.458.7.1.1 GW_CS_END
0.
w 01
12
ou 3.

2.
zh 201
RESERVED 1 Reserved for future use

Log Record Formats
5.3.458.7.1.2 GW_PS_END
NSAPI 2 Network service access point indicator; see

Section 5.3.458.7.1.3 for format description
TEAR_DOWN_IND 2 Teardown indicator; see Section 5.3.458.7.1.4 for format

description
CAUSE 1 Cause for ending the call; values are:
 0x19 – SM_LLC_SNDCP_FAILURE
 0x20 – SM_INSUFFICIENT_RESOURCES
 0x21 – SM_MISSING_OR_UNKNOWN_APN
 0x22 – SM_UNKNOWN_PDP_ADDRESS_OR_TYPE
 0x23 – SM_USER_AUTHENTICATION_FAILED
 0x24 – SM_ACTIVATION_REJECTED_BY_GGSN
 0x25 – SM_ACTIVATION_REJECTED_UNSPECIFIED
T
n PS
 0x26 – SM_SERVICE_OPTION_NOT_SUPPORTED
 0x27 – SM_SERVICE_NOT_SUBSCRIBED
34
 0x28 – SM_SERVICE_OUT_OR_ORDER
om 8:

l.c :4 0x29 – SM_NSAPI_ALREADY_USED
c
 0x2A – SM_REGULAR_DEACTIVATION
.
te 13
 0x2B – SM_QOS_NOT_ACCEPTED
.7 bk t
 0x2C – SM_NETWORK_FAILURE
41 -b 1 a
3
 0x2D – SM_REACTIVATION_REQUIRED
15
ei .0
 0x2E – SM_FEATURE_NOT_SUPPORTED
0.
w 01
 0x2F – SM_SEMANTIC_ERR_IN_TFT
12
ou 3.
 0x30 – SM_SYNTACTIC_ERR_IN_TFT
2.
zh 201
 0x31 – SM_UNKNOWN_PDP_CONTEXT
 0x32 – SM_SEMANTIC_ERR_IN_FILTER
 0x33 – SM_SYNTACTIC_ERR_IN_FILTER
 0x34 – SM_PDP_WITHOUT_TFT_ACTIVE
 0x51 – SM_INVALID_TRANS_ID
 0x5F – SM_SEMANTIC_INCORRECT_MESG
 0x60 – SM_INVALID_MANDATORY_INFO
 0x61 – SM_MESG_TYPE_NON_EXISTENT
 0x62 – SM_MESG_TYPE_NOT_COMPATIBLE
 0x63 – SM_IE_NON_EXISTENT
 0x64 – SM_CONDITIONAL_IE_ERR
 0x65 – SM_MESG_NOT_COMPATIBLE
 0x6F – SM_PROTOCOL_ERR
5.3.458.7.1.3 NSAPI
VALID 1 Valid flag
NSAPI 1 NSAPI

Log Record Formats
5.3.458.7.1.4 TEAR_DOWN_IND
VALID 1 Valid flag
TI_FLAG 1 TI flag
5.3.458.7.1.5 CDMA_END
END_REASON_INCLUDED 1 End reason included or not
END_REASON 1 End reason; values are:

 0 – Normal
 1 – Powerdown indication
 2 – SO rejected
T
n PS
34
5.3.459 Reserved (LOG_CODE 0x12C2 – 0x12E4)
om 8:
l.c :4
. c
5.3.460 Reserved (LOG_CODE 0x12E5)
te 13
.7 bk t
41 -b 1 a
3
5.3.461 GPS Decoded Ephemeris (LOG_CODE 0x12E6)
15
ei .0
0.
w 01
This holds the decoded Ephemeris information for a particular SV. See the ICD-GPS-200
12
specification for a complete description of the fields starting with SV_PRN.

ou 3.
2.
zh 201
GPS_SESSION_COUNT 4 GPS session count
RESERVED 4 Reserved
SV_PRN 1 SV PRN
IODE 1 Issue of data, Ephemeris
CRS 2 Amplitude of the sine harmonic correction term to the orbit

radius
DELTA_N 2 Mean motion difference from computed value
CUC 2 Amplitude of the cosine harmonic correction term to the

argument of latitude
M_ZERO 4 Mean anomaly at reference time
E 4 Eccentricity
SQRT_A 4 Square root of the semi-major axis
OMEGA_ZERO 4 Longitude of ascending node of orbit plane at weekly

epoch
CUS 2 Amplitude of the sine harmonic correction term to the

argument of latitude

Log Record Formats

TOE 2 Reference time Ephemeris
CIC 2 Amplitude of the cosine harmonic correction term to the

angle of inclination
CIS 2 Amplitude of the sine harmonic correction term to the

angle of inclination
I_ZERO 4 Inclination angle at reference time
OMEGA 4 Argument of perigee
OMEGA_DOT 4 Rate of right ascension
CRC 2 Amplitude of the cosine harmonic correction term to the

orbit radius
I_DOT 2 Rate of inclination angle
T
UPDATE_TIME 8 Cumulative GPS time of the update
n PS
CODE_L2 1 Code(s) on L2 channel
34
ACCURACY 1 SV accuracy
om 8:
HEALTH 1 SV health
l.c :4
. c
te 13
TGD 1 Estimated group delay differential
.7 bk t
IODC 2 Issue of data, clock

41 -b 1 a
3
TOC 2 Clock data reference time
15
ei .0
0.
w 01
AF2 1 Polynomial coefficient

12
ou 3.

2.
zh 201
FULL_TOE 8 Cumulative GPS time of the TOE

Log Record Formats
5.3.462 GPS Decoded Almanac (LOG_CODE 0x12E7)

This holds the decoded Almanac information for a particular SV. See the ICD-GPS-200
specification for a complete description of the fields starting with SV_PRN.
GPS_SESSION_COUNT 4 GPS session count
RESERVED 4 Reserved
SV_PRN 1 SV PRN
HEALTH 1 SV health
TOA 1 Time of Almanac
E 2 Eccentricity
DELTA_I 2 Delta inclination
T
n PS
OMEGA_DOT 2 Rate of right ascension
SQRT_A 4 Square root of the semi-major axis
34
OMEGA_ZERO 4 Longitude of ascending node of orbit plane at weekly
om 8:
epoch
l.c :4
. c
te 13
OMEGA 4 Argument of perigee
M_ZERO 4 Mean anomaly at reference time

.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.
WEEK 2 Almanac reference week

2.
zh 201
FULL_TOA 8 Cumulative GPS time of the TOA
UPDATE_TIME 8 Cumulative GPS time of the update
5.3.463 Transceiver Resource Manager (TRM) (LOG_CODE 0x12E8)

This log packet is for the transceiver and receiver manager. The value for one existing field is
incremented by one:
.
Reason 1 HP BROADCAST
(trm_reason_enum_t)
5.3.464 Reserved (LOG_CODE 0x12E9 – 0x132A)

Log Record Formats
5.3.465 Logging Requested QoS (LOG_CODE 0x132B)

QoS requested by an application is logged using this log packet. This log packet is generated
when an application issues the DSS_IFACE_IOCTL_QOS_REQUEST or
DSS_IFACE_IOCTL_QOS_REQUEST_EX ioctls and if the requested QoS passes validation
performed by the mobile.
QOS_ID 4 ID that uniquely identifies a QoS instance
OPCODE 1 Specifies if QoS is requested or configured or existing QoS

is modified. Its value can be one of the following:
 0x0 – QOS_REQUESTED
 0x1 – QOS_CONFIGURED
QOS_MASK 2 Bit mask that indicates whether QoS is requested in Rx and
T
Tx directions.
n PS
 Bit 1 (LSB) is ON – QoS is requested in Rx direction
 Bit 2 is ON – Minimum required QoS is specified in
34
 Rx direction
om 8:
 Bit 3 is ON – Auxiliary flow specs are requested in Rx
l.c :4
c
direction
.
te 13
 Bit 4 is ON – QoS is requested in Tx direction
 Bit 5 is ON – Minimum required QoS is specified in Tx
.7 bk t
direction
41 -b 1 a
3
 Bit 6 is ON – Auxiliary flow specs are requested in Tx
15
ei .0
direction
0.
w 01
All bits could be ON indicating that QoS is requested in

12
both directions and that minimum required and auxiliary

ou 3.
flow specs are also specified in each direction. Also note

2.
zh 201
that if a bit is OFF, corresponding subrecord is not logged in

that log packet.
Unlike bits 1 and 4, bits 2, 3, 5, and 6 do not control the
presence of any other field. They convey extra information
about logged flow specs. See description of
FLOW_SPEC_CNT field in Section 5.3.465.1 for more
details.
IFACE_DESC Variable Null terminated description of an interface on which this

QoS is requested.
RX_QOS_SPEC Variable Present only if bit 1 of QOS_MASK is ON; specifies the

QoS requested in Rx direction; see Section 5.3.465.1 for
format description
TX_QOS_SPEC Variable Present only if bit 4 of QOS_MASK is ON; specifies the

QoS requested in Tx direction; see Section 5.3.465.1 for
format description

Log Record Formats
5.3.465.1 QOS_SPEC subrecord

This subrecord specifies the format of a requested QoS specification. It contains one or more
flow specifications and one or more filters. Both RX_QOS_SPEC and TX_QOS_SPEC fields
adhere to the following format.
FLOW_SPEC_CNT 1 Number of requested flow specs. At most, 7 flow specs can

be logged. Flow specs are listed in the decreasing order of
desirability. First flow spec is the most preferable QoS. If
‘n’, where n > 1, flow specs are logged, last flow spec is
minimum required if QOS_MASK indicates that minimum
required QoS is requested. Otherwise, it is an auxiliary flow
spec. Excluding most preferred and minimum required flow
specs, everything else is an auxiliary flow spec.
FLTR_CNT 1 Number of filters installed by an application; at most, 8

filters are logged
T
n PS
FLOW_SPEC Variable Record describing a flow spec. Each flow spec contains
QoS parameters requested by an application. Number of
34
flow specs present in a log is dependent on
FLOW_SPEC_CNT. See Section 5.3.465.1.1 for format
om 8:
description.
l.c :4
. c
te 13
FLTR Variable Record describing a filter. Number of filters present in a log
is dependent on FLTR_CNT. See Section 5.3.465.1.2 for
.7 bk t
format description.
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.465.1.1 FLOW_SPEC subrecord

This subrecord defines a flow spec, i.e. a set of QoS parameters requested by an application. An
application may specify multiple of such sets.
FIELD_MASK 2 A bit mask indicating which QoS parameters are

requested by an application and are present in the log
 Bit 1 (LSB) is ON – TRAFFIC_CLASS is present
 Bit 2 is ON – DATA_RATE is present
 Bit 3 is ON – LATENCY is present
 Bit 4 is ON – LATENCY_VARIATION is present
 Bit 5 is ON – PKT_ERR_RATE is present
 Bit 6 is ON – MIN_POLICED_PKT_SIZE is present
 Bit 7 is ON – MAX_ALLOWED_PKT_SIZE is present
 Bit 8 is ON – RESIDUAL_BIT_ERR_RATE is present
 Bit 9 is ON – TRAFFIC_HANDLING_PRIORITY is
T
present
n PS
 Bit 10 is ON – PROFILE_ID is present
As these bits are not mutually exclusive, any
34
combination of them could be ON in a log. Also note that
om 8:
l.c :4 if a bit is OFF, corresponding subrecord is not logged in
c
that log packet.
.
te 13
TRAFFIC_CLASS 1 Indicates the traffic pattern of an application’s data. Its

value is one of the following:
.7 bk t
41 -b 1 a
 0x0 – IP_TRF_CLASS_CONVERSATIONAL
3
15
 0x1 – IP_TRF_CLASS_STREAMING
ei .0
 0x2 – IP_TRF_CLASS_INTERACTIVE
0.
w 01
 0x3 – IP_TRF_CLASS_BACKGROUND
12
ou 3.
2.
zh 201
LATENCY 4 Specifies the desired latency in ms
LATENCY_VARIATION 4 Specifies the desired jitter in ms
PKT_ERR_RATE 4 Specifies the error rate which application can tolerate.

See Section 5.3.465.1.1.4 in this section for format
description
MIN_POLICED_PKT_SIZE 4 Specifies the minimum packet size (in bytes) that will be
policed for QoS
MAX_ALLOWED_PKT_SIZE 4 Specifies the maximum packet size (in bytes) allowed

while guaranteeing QoS

Log Record Formats

RESIDUAL_BIT_ERR_RATE 2 Specifies the undetected bit error ratio for each IP flow in
the delivered packets. Its value can be one of the
following:
 0x0 – Error rate is 5 * 10-2
TRAFFIC_HANDLING_ 1 Defines the relative priority between various sub-flows of
T
PRIORITY an IP flow. Its value can be one of the following:
n PS
 0x0 – Priority level is 1
34
om 8:
PROFILE_ID 2
l.c :4 Specifies a profile that predefines a set of QoS
. c
parameters
te 13
DATA_RATE Variable Specifies the desired data rate; see

.7 bk t
41 -b 1 a

3
15
ei .0
0.
w 01
5.3.465.1.1.1 DATA_RATE subrecord

12
ou 3.
This subrecord defines the data rate at which the data is transmitted over the network. Data rate
2.
zh 201
can be specified in one of the two ways – a set of maximum rate and guaranteed rate values or in
the token bucket parameter style.
DATA_RATE_TYPE 1 A mask indicating the specified data rate style. It can be

one of the following:
 0x0 – MIN_MAX_TYPE record is present
 0x1 – TOKEN_BUCKET_TYPE record is present
MIN_MAX_TYPE 8 Specifies data rate in MIN_MAX style; see

TOKEN_BUCKET_TYPE 12 Specifies data rate in TOKEN_BUCKET style; see


Log Record Formats
5.3.465.1.1.2 MIN_MAX_TYPE subrecord

This subrecord defines data rate in MIN_MAX style. Maximum and guaranteed bit rates are
specified.
MAX_DATA_RATE 4 Maximum data rate (in bits/sec) at which an application

would send data
GUARANTEED_DATA_RATE 4 Minimum data rate (in bits/sec) at which an application

would send data
5.3.465.1.1.3 TOKEN_BUCKET_TYPE subrecord

This subrecord defines data rate in token bucket style.
T
n PS
PEAK_DATA_RATE 4 Maximum rate at which the data can be transmitted
when token bucket is full (in bits/sec)
34
TOKEN_RATE 4 Rate at which the tokens will be put in the token bucket
om 8:
l.c :4 (in bits/sec)
. c
te 13
TOKEN_BUCKET_SIZE 4 Maximum tokens that can be accumulated at any
instance (in bytes)
.7 bk t
41 -b 1 a
3
15
5.3.465.1.1.4 PKT_ERR_RATE subrecord
ei .0
0.
w 01
This parameter defines the maximum packet error rate that can be tolerated by an IP flow. The
12
ou 3.
error rate is defined as a ratio of packets received in error to total packets transmitted and is
2.
zh 201
specified by two parameters – a multiplier and a negative base 10 exponent. So the packet error
rate is defined as, E = m * 10-p.
MULTIPLIER 2 Multiplier component of packet error rate
EXPONENT 2 Exponent component of packet error rate
5.3.465.1.2 FLTR subrecord

This subrecord defines a filter, which is used to classify data into IP flows. Data that matches the
specified parameters is classified as an IP flow and granted QoS is applied to that data stream.
IP_VERSION 1 Mask, which indicates if filter’s IP version is IPV4 or IPV6;

can be:
 0x4 – V4_FLTR is present

Log Record Formats

V4_FLTR Variable Specifies an IPV4 filter; see Section 5.3.465.1.2.1 for
format description
V6_FLTR Variable Specifies an IPV6 filter; see Section 5.3.465.1.2.4 for

format description
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.465.1.2.1 V4_FLTR subrecord

This subrecord defines an IPV4 filter. All the requested parameters are specific to IP V4 packets.
V4_FIELD_MASK 1 A bit mask, indicating what parameters are requested in a

filter.
 Bit 1 (LSB) is ON – V4_SRC_ADDR is present
 Bit 2 is ON – V4_DST_ADDR is present
 Bit 3 is ON – V4_NEXT_HDR_PROTOCOL is present
 Bit 4 is ON – V4_TOS is present
As these values are not mutually exclusive, any
combination of bits can be ON in a single log. Also note that
if a bit is OFF, corresponding subrecord is not logged in that
log packet.
V4_SRC_ADDR 8 Specifies source address of a filter; all the packets which

originate from this address are filtered; see
T
n PS
Section 5.3.465.1.2.2 for format description.
V4_DST_ADDR 8 Specifies destination address of a filter; all the packets
34
which are destined to this address are filtered; see
om 8:
l.c :4
c
V4_TOS 2 Specifies type of service field of a filter; all the packets
.
te 13
matching this value are filtered; seeSection 5.3.465.1.2.3
.7 bk t
41 -b 1 a
3
V4_NEXT_HDR_ 1 Indicates that an application wants to filter based on higher
15
PROTOCOL level layer protocol. Its value can be one of the following:
ei .0
 0x06 – TCP_FLTR is present

0.
w 01
 0x11 – UDP_FLTR is present

12
ou 3.
2.
zh 201
TCP_FLTR Variable Specifies TCP parameters in a filter; see

UDP_FLTR Variable Specifies UDP parameters in a filter; see

5.3.465.1.2.2 V4_ADDR subrecord

This subrecord specifies a range of V4 addresses. V4_SRC_ADDR and V4_DST_ADDR adhere
to the following format.
V4_ADDRESS 4 Specifies an IPv4 address in dotted decimal notation
SUBNET_MASK 4 Specifies subnet mask in dotted decimal notation
The combination of V4_ADDRESS and SUBNET_MASK specifies a range of addresses in which an

application is interested

Log Record Formats
5.3.465.1.2.3 V4_TOS subrecord

This subrecord specifies a range of V4 type of service values. V4_TOS adheres to the following.
TOS_VALUE 1 Specifies IP V4 type of service
TOS_MASK 1 Specifies a mask
The combination of TOS_VALUE and TOS_MASK specifies a range of types of service in which an

This subrecord defines an IPv6 filter. All the requested parameters are specific to IPv6 packets.
T
n PS
V6_FIELD_MASK 1 A bit mask indicating what parameters are requested in
an IPV6 filter
34
om 8:
 Bit 3 is ON – V6_NEXT_HDR_PROTOCOL is
l.c :4
c
present
.
te 13
 Bit 4 is ON – V6_TRAFFIC_CLASS is present
 Bit 5 is ON – V6_FLOW_LABEL is present
.7 bk t
41 -b 1 a

3
15
combination of bits can be ON in a single log. Also note
ei .0
that if a bit is OFF, corresponding subrecord is not

0.
w 01
logged in that log packet.

12
ou 3.
V6_SRC_ADDR 17 Specifies source address of a filter; all the packets

2.
zh 201
which originate from this address are filtered; see

V6_DST_ADDR 17 Specifies destination address of a filter; all the packets

which are destined to this address are filtered; see
“V6_ADDR subrecord” below for format description
V6_TRAFFIC_CLASS 2 Specifies IPv6’s traffic class field in a filter; all the

packets matching this value are filtered; see
V6_FLOW_LABEL 4 Specifies IPv6’s flow label field in a filter; all the packets
matching this value are filtered
V6_NEXT_HDR_PROTOCOL 1 Indicates that an application wants to filter based on

higher level layer protocol; its value can be one of the
following:
TCP_FLTR Variable Specifies TCP parameters in a filter; see

UDP_FLTR Variable Specifies UDP parameters in a filter; see


Log Record Formats

to following format.
V6_ADDRESS 16 Specifies an IPv6 address in dotted decimal notation
PREFIX_LEN 1 Specifies IPv6 prefix length
The combination of V6_ADDRESS and PREFIX_LEN specifies a range of IPV6 addresses in which an
application is interested.
5.3.465.1.2.6 V6_TRAFFIC_CLASS subrecord

This subrecord specifies a range of V6 traffic classes. V6_TRAFFIC_CLASS adheres to the
format defined in this section.
T
n PS
34
TCLASS_VALUE 1 Specifies IP V6 traffic class
om 8:
TCLASS_MASK 1 Specifies a mask
l.c :4
. c
The combination of TCLASS_VALUE and TCLASS_MASK specifies a range of traffic classes in which an
te 13
.7 bk t
41 -b 1 a
3
15
5.3.465.1.2.7 TCP_FLTR subrecord
ei .0
0.
w 01
This subrecord specifies TCP parameters in a filter. All TCP packets that match specified fields
12
ou 3.
are filtered.
2.
zh 201
TCP_FIELD_MASK 1 A bit mask indicating which TCP parameters are specified

in an IPV4/IPV6 filter.
 All bits are OFF – None of the parameters are specified,
meaning that application wants to filter all TCP packets
 Bit 1 (LSB) is ON – TCP_SRC_PORT is present,
indicating that an application wants to filter based on
source ports
 Bit 2 is ON – TCP_DST_PORT is present, indicating
that an application wants to filter based on destination
ports
combination of bits can be ON in a single log; if a bit is OFF,
corresponding subrecord is not logged in that log packet
TCP_SRC_PORT 4 Specifies the range of source ports in which an application

is interested; see Section 5.3.465.1.2.8 for format
description
TCP_DST_PORT 4 Specifies the range of source ports in which an application

description

Log Record Formats
5.3.465.1.2.8 PORT subrecord

This subrecord defines a range of ports in which an application is interested. TCP_SRC_PORT,
TCP_DST_PORT, UDP_SRC_PORT, and UDP_DST_PORT adhere to the following format.
STARTING_PORT 2 Specifies a port
PORT_RANGE 2 Specifies a range
The combination of STARTING_PORT and PORT_RANGE specifies a range of ports in which an

5.3.465.1.2.9 UDP_FLTR subrecord

This subrecord specifies UDP parameters in a filter. All UDP packets that match specified fields
are filtered.
T
n PS
34
UDP_FIELD_MASK 1 A bit mask indicating which UDP parameters are specified
in an IPv4/IPv6 filter
om 8:
l.c :4
. c
meaning that application wants to filter all UDP packets
te 13
 Bit 1 (LSB) is ON – UDP_SRC_PORT is present,

indicating that an application wants to filter based on
.7 bk t
41 -b 1 a
source ports
3
15
 Bit 2 is ON – UDP_DST_PORT is present, indicating
ei .0
that an application wants to filter based on destination

0.
w 01
ports
12
ou 3.

2.
zh 201
combination of bits can be ON in a single log; if a bit is OFF,

corresponding subrecord is not logged in that log packet
UDP_SRC_PORT 4 Specifies the range of source ports in which an application

description
UDP_DST_PORT 4 Specifies the range of source ports in which an application

description
5.3.466 Granted QoS Logging (Log Code 0x132C)

QoS granted by the network is logged using this log packet. Each log is uniquely identified by
QOS_ID.
QOS_ID 4 ID that uniquely identifies a set of QoS logs
QOS_GRANTED_MASK 1 Bit mask which indicates what records are logged

 Bit 1 (LSB) is ON – RX_FLOW_SPEC is present
 Bit 2 is ON – TX_FLOW_SPEC is present
Both bits could be ON indicating that both the subrecords
are logged

Log Record Formats

RX_FLOW_SPEC Variable QoS granted in Rx direction; see Section 5.3.465.1.1 for
format description
TX_FLOW_SPEC Variable QoS granted in Tx direction; see Section 5.3.465.1.1 for

format description
5.3.467 QoS State Logging (LOG_CODE 0x132D)

This log packet logs state of a QoS instance. Each log packet contains a unique identifier called
QOS_ID, which can be used to correlate log packets defined in this document. For a given QoS
instance, the same QOS_ID is used in all the three log packets defined in this document.
QOS_ID 4 ID that uniquely identifies a set of QoS logs
T
n PS
QOS_STATE 1 Specifies current state of QoS requested by an application;
can be:
34
 0x0 – QOS_GRANTED, indicating that QoS is granted
in response to mobile initiated operations such as
om 8:
l.c :4 QOS_REQUEST, QOS_MODIFY, or QOS_RESUME, or
c
coming back from dormancy because of up link data
.
te 13
 0x1 – QOS_NW_MODIFIED, indicating that the network
has initiated modify
.7 bk t
41 -b 1 a
 0x2 – QOS_SUSPEND, indicating that QoS is

3
suspended
15
ei .0
 0x3 – QOS_RELEASED, indicating that QoS is no

0.
w 01
longer available
12
 0x4 – QOS_MODIFY_ACCEPTED, indicating that

ou 3.
QOS_MODIFY procedure is accepted by the network

2.
zh 201
 0x5 – QOS_MODIFY_REJECTED, indicating that

QOS_MODIFY procedure is rejected by the network

Log Record Formats
5.3.468 Logging Modified QoS (LOG_CODE 0x132E)

An application can modify the previously requested QoS using the
DSS_IFACE_IOCTL_QOS_MODIFY ioctl. The new QoS specified during QOS_MODIFY
operation is logged using this log packet. This log packet is generated when an application issues
a DSS_IFACE_IOCTL_QOS_MODIFY ioctl and if the requested QoS passes validation
performed by the mobile. Note that the mobile logs the QoS specified using the
DSS_IFACE_IOCTL_QOS_MODIFY ioctl only and not the sum of QoS specified in the
DSS_IFACE_IOCTL_QOS_REQUEST and DSS_IFACE_IOCTL_QOS_MODIFY ioctls.
Length
Field Description
(bytes)
QOS_ID 4 An ID that uniquely identifies a QoS instance
QOS_MODIFY_MASK 2 Bit mask that indicates how QoS is manipulated in Rx and Tx

directions
 Bit 1 (LSB) is ON – QoS (both flow and filter specifications) is
T
n PS
created or deleted, or only flow specification is modified in Rx
direction; QoS is created if bit 1 is OFF in QOS_MASK, i.e.,
34
QoS was not previously requested in Rx direction; QoS is
deleted if field mask of the required flow specification is 0; flow
om 8:
specification is modified otherwise; does not mean that filter
l.c :4
c
specification is also modified; means that the required flow
.
te 13
specification is specified in Rx direction
 Bit 2 is ON – Minimum required flow specification is specified in
.7 bk t
Rx direction
41 -b 1 a
3
 Bit 3 is ON – Auxiliary flow specifications are specified in Rx
15
ei .0
direction
0.
w 01
 Bit 4 is ON – QoS (both flow and filter specifications) is created

or deleted, or only flow specification is modified in Tx direction;
12
ou 3.
QoS is created if bit 4 is OFF in QOS_MASK, i.e., QoS was not

2.
zh 201
previously requested in Tx direction; QoS is deleted if field

mask of the required flow specification is 0; flow specification is
modified otherwise; does not mean that filter specification is
also modified; means that the required flow specification is
specified in Tx direction
 Bit 5 is ON – Minimum required flow specification is specified in
Tx direction
 Bit 6 is ON – Auxiliary flow specifications are specified in Tx
direction
 Bit 7 is ON – Rx filters are modified
 Bit 8 is ON – Tx filters are modified
More than one bit could be ON in a QOS_MODIFY_MASK; if a bit
is OFF, corresponding subrecord is not logged in that log packet,
e.g., to indicate that flow and filters specifications are modified in
Rx direction, both bits 1 and 7 are ON
Unlike bits 1 and 4, bits 2, 3, 5, and 6 do not indicate whether QoS
is manipulated in a particular direction; bits 2, 3, 5, and 6 convey
extra information about logged flow specifications; see description
of FLOW_SPEC_CNT field in Section 5.3.465.1
QOS_MASK 2 See QOS_MASK field in Section 5.3.465 for details.
RX_FLOW_SPEC_CNT 1 Present if bit 1 of QOS_MODIFY_MASK is present; see

description of FLOW_SPEC_CNT field in Section 5.3.465.1
RX_FLOW_SPEC Variable Present if bit 1 of QOS_MODIFY_MASK is present; see


Log Record Formats
Length
Field Description
(bytes)
RX_FLTR_CNT 1 Present either if bit 7 of QOS_MODIFY_MASK is ON or if QoS is
created in Rx direction; see QOS_MODIFY_MASK for more
details; specifies the number of filters installed by an application, at
most 8 filters are logged
RX_FLTR_SPEC Variable Present if RX_FLTR_CNT is present; see Section 5.3.465.1.2 for

format description
TX_FLOW_SPEC_CNT 1 Present if bit 4 of QOS_MODIFY_MASK is present; see

description of FLOW_SPEC_CNT field in Section 5.3.465.1
TX_FLOW_SPEC Variable Present if bit 4 of QOS_MODIFY_MASK is present; see

TX_FLTR_CNT 1 Present either if bit 7 of QOS_MODIFY_MASK is ON or if QoS is

created in Tx direction; see QOS_MODIFY_MASK for more
details; specifies the number of filters installed by an application, at
T
most 8 filters are logged
n PS
TX_FLTR_SPEC Variable Present if TX_FLTR_SPEC is present; see Section 5.3.465.1.2 for
34
format description
om 8:
l.c :4
c
5.3.469 LOG_QDJ_ENQUEUE_C (LOG_CODE 0x132F)
.
te 13
This log record is generated every time a vocoder frame is enqueued into the dejitter buffer. It
.7 bk t
41 -b 1 a
describes the attributes of the frame enqueued as well as the result of the enqueue operation.
3
15
ei .0
Length
0.
w 01
Field Description
(bytes)
12
ou 3.
flow_id 2 Numeric ID to uniquely identify this VoIP flow

2.
zh 201
seq_num 2 Frame sequence number
rtp_tstamp 4 Frame RTP timestamp
rx_tstamp_hi 4 Frame Rx time (CDMA system time, high 32 bits)
rx_tstamp_lo 4 Frame Rx time (CDMA system time, low 32 bits)
frame_size 2 Frame size in bytes
enqueue_result 2 Frame enqueue result:

1. Frame was enqueued
2. Frame was a delayed underflow but enqueued
3. Frame was a delayed underflow and not enqueued
4. Frame was erased by the network and not received
5. In this case, all fields (except flow_id and seq_num) are set to 0
6. Frame was stale and not enqueued
This log is generated on each incoming vocoder frame and depends on the vocoder frame time
plus the network jitter, e.g., this log is generated approximately every 20 ms for EVRC frames.
The worst-case packet size for this log is 20 bytes.

Log Record Formats
5.3.470 LOG_QDJ_DEQUEUE_C (LOG_CODE 0x1330)

This log record is generated every time a vocoder frame is dequeued from the dejitter buffer. It
describes the attributes of the frame dequeued as well as important parameters of dejitter buffer
at the time of the dequeue operation.
Length
Field Description
(bytes)
seq_num 2 Frame sequence number
rx_tstamp_hi 4 Frame Rx time (CDMA system time, high 32 bits)
rx_tstamp_lo 4 Frame Rx time (CDMA system time, low 32 bits)
frame_size 2 Frame size in bytes
delay 2 Delay (in ms) from the time the frame was enqueued to the time the
T
frame was dequeued in QDJ
n PS
q_size 2 Time occupancy (in ms) of dejitter buffer after this dequeue
34
tw_factor 2 Frame timewarping factor calculated by QDJ; tw_factor is expressed
om 8:
as a percentage of a nonwarped frame time.
l.c :4
c
 100 – No timewarping
.
te 13
 50 – Compression
 150 – Expansion
.7 bk t
41 -b 1 a
 200 – Aggressive expansion

3
15
ei .0
0.
w 01
dequeue_delta 2 Time delta (in ms) from the previous dequeue operation
12
ou 3.
dejitter_target 2 Instantaneous value of target dejitter delay

2.
zh 201
dequeue_state 2 State of QDJ dejitter buffer at the time of dequeue

0. Silence, empty
1. Silence, not empty, no talkspurt, dequeue head
2. Silence, not empty, talkspurt not delayed, dequeue nothing
3. Silence, not empty, talkspurt not delayed, dequeue head
4. Silence, not empty, talkspurt delayed
5. Talkspurt, empty
6. Talkspurt, not empty, next_to_play not found
7. Talkspurt, not empty, next_to_play found
This log is generated when the DSP requests a frame to decode. In the absence of timewarping,
this happens every vocoder frame time, e.g., this log is generated every 20 ms for EVRC frames
in the absence of timewarping. If timewarping is occurring, the log generation period is greater
than, equal to, or less than the vocoder frame time depending on the amount by which the last
frame was warped. The worst-case packet size for this log is 26 bytes.

Log Record Formats
5.3.471 LOG_QDJ_UPDATE_C (LOG_CODE 0x1331)

This log record is generated every time the dejitter buffer algorithm updates the dejitter delay
target. The dejitter delay target is used by QDJ as the target value by which subsequent vocoder
frames are delayed in the dejitter buffer. The algorithm updates the dejitter delay target on a
periodic basis. If timewarping is used, the update occurs every algo_cycle_length frames
enqueued. This is a QDJ configurable parameter. In the absence of timewarping, the update
occurs at the end of each talkspurt. The time interval between two updates is called the update
interval.
num_frames_underflow 2 Number of delayed underflow frames in the update interval
num_frames_rcvd 2 Total number of frames received in the update interval
T
underflow_rate 2 Underflow rate for this update interval; value is scaled by a
n PS
factor of 10000
anchor_dejitter_target 2 Dejitter delay target (in ms) calculated by QDJ
34
om 8:
anchor_dejitter_target_ 2 Filtered time occupancy (in ms) of the dejitter buffer
filtered
l.c :4
. c
te 13
next_to_play 2 Sequence number of next frame to play at the time of
update
.7 bk t
41 -b 1 a
3
15
ei .0
This log is generated periodically or at the end of each talkspurt as explained above. The
0.
w 01
worst-case packet size for this log is 14 bytes.

12
ou 3.
2.
zh 201
5.3.472 LOG_QDTX_ENCODER_C (LOG_CODE 0x1332)

This log record is generated every time a vocoder frame is passed to the QDTX (Smart Blanking)
encoder. It describes the Smart Blanking Encode operation for the given frame.
input_frame_size 2 Input frame size in bytes
in_silence 4 Number of frames the encoder has been in silence
output_frame_size 2 Output frame size in bytes
prototype_frame_ 2 Prototype frame is updated

updated  1 – Prototype frame is updated
 0 – Otherwise
num_frames_since_ 2 Number of frames since the last prototype frame was sent
last_proto_sent
This log is generated every vocoder frame time, e.g., this log is generated every 20 ms for EVRC
frames. The worst case packet size for this log is 14 bytes.

Log Record Formats
5.3.473 LOG_QDTX_DECODER_C (LOG_CODE 0x1333)

This log record is generated every time a vocoder frame is passed to the QDTX (Smart Blanking)
decoder. It describes the Smart Blanking Decode operation for the given frame.
input_frame_size 2 Input frame size in bytes
in_silence 4 Number of frames the decoder has been in silence
output_frame_size 2 Output frame size in bytes
prototype_frame_updated 2  1 – Prototype frame was updated

 0 – Otherwise
T
n PS
This log is generated when the DSP requests a frame to decode. In the absence of timewarping,
this happens every vocoder frame time, e.g., this log is generated every 20 ms for EVRC frames
34
in the absence of timewarping. If timewarping is occurring, the log generation period is greater
om 8:
than, equal to, or less than the vocoder frame time depending on the amount by which the last
l.c :4
c
frame was warped. The worst-case packet size for this log is 12 bytes.
.
te 13
.7 bk t
5.3.474 Global IP Stats (LOG_CODE 0x1335)

41 -b 1 a
3
15
This log packet logs global statistics collected at the IPv4 layer. There are no per-instance
ei .0
0.
w 01
statistics at this layer, as IP does not establish any connections with peers.
12
ou 3.
2.
zh 201
VERSION 1 Version of this response’s definition; if DM receives a

response with a version that it does not support,
response will not be parsed
RESERVED 3 Padding to make sure that structure is packed
BAD_HDR_LEN 4 Number of IPv4 packets with bad header length
BAD_LEN 4 Number of IPv4 packets with invalid payload length
BAD_OPTIONS 4 Number of IPv4 packets with erroneous options
BAD_VERSION 4 Number of IPv4 packets with version not as 4
BAD_CHECKSUM 4 Number of IPv4 packets with invalid checksum
TOO_SHORT 4 Number of IPv4 packets whose length is less than IP

header length
NO_ROUTE 4 Number of IPv4 packets which does not have a valid

route
NO_PROTOCOL 4 Number of incoming IPv4 packets with invalid protocol
PACKETS_RECIEVED 4 Number of received IPv4 packets
PACKETS_DROPPED_ 4 Number of IPv4 packets dropped in Rx direction

ON_RX

Log Record Formats

PACKETS_DROPPED_ 4 Number of IPv4 packets dropped in Tx direction
ON_TX
PACKETS_FORWARDED 4 Number of IPv4 packets that are forwarded
PACKETS_TRANSMITTED 4 Number of transmitted IPv4 packets
MCAST_PACKETS_ 4 Number of received multicast IPv4 packets

RECEIVED
MCAST_PACKETS_ 4 Number of transmitted multicast IPv4 packets

TRANSMITTED
FRAGMENTED_OK 4 Number of IPv4 packets that are successfully fragmented
FRAGMENTATION_FAILED 4 Number of IPv4 packets for which fragmentation failed
NUM_FRAGMENTS 4 Number of IP fragments that are generated so far
T
REASM_REQD 4 Number of IPv4 packets for which reassembly is required
n PS
REASM_OK 4 Number of IPv4 packets that are reassembled
34
successfully
om 8:
REASM_FAILED 4 l.c :4 Number of IPv4 packets that could not be reassembled
c
REASM_TIMEDOUT 4 Number of IPv4 packets for which reassembly timer
.
te 13
expired
.7 bk t
41 -b 1 a
3
5.3.475 Global IPv6 Stats (LOG_CODE 0x1336)
15
ei .0
0.
w 01
This log packet logs global statistics collected at the IPv6 layer. There are no per-instance
12
ou 3.
statistics at this layer as IP does not establish any connections with peers. This packet is logged
2.
zh 201
only if the IPv6 feature is turned on. This packet is logged on demand and the worst case size is
80 bytes.

response with a version that it does not support, response
will not be parsed
BAD_LEN 4 Number of IPv6 packets with bad payload lengths
BAD_VERSION 4 Number of IPv6 packets with bad version in IPv6 header
4 Number of IPv6 packets that are shorter than the size of a

TOO_SHORT valid IPv6 header
4 Number of IPV6 packets not transmitted because of

NO_ROUTE absence of route
NO_PROTO 4 Number of incoming IPv6 packets with unknown protocol
PKTS_RX 4 Number of incoming IPv6 packets
PKTS_DROPPED_RX 4 Number of incoming IPv6 packets dropped at the IPv6 layer
PKTS_DROPPED_TX 4 Number of outgoing IPv6 packets dropped at the IPv6 layer

Log Record Formats
PKTS_FWD 4 Number of forwarded IPv6 packets
PKTS_TX 4 Number of outgoing IPv6 packets
MCAST_RX 4 Number of incoming multicast IPv6 packets
MCAST_TX 4 Number of outgoing multicast IPv6 packets
4 Number of IPv6 packets that have been successfully

FRAG_OK fragmented
FRAG_FAILS 4 Number of IPv6 packets that failed fragmentation
FRAG_CREATE 4 Number of created IPv6 fragments
4 Number of incoming IPv6 fragments that needed to be

REASM_REQD reassembled
4 Number of successfully reassembled incoming IPv6 packets
T
REASM_OK
n PS
REASM_FAILS 4 Number of incoming IPv6 packets that failed reassembly
34
4 Number of incoming IPv6 packets that failed reassembly
REASM_TIMEOUT
om 8:
due to timeout
l.c :4
. c
te 13
5.3.476 Global ICMPv4 Stats (LOG_CODE 0x1337)

.7 bk t
41 -b 1 a
This log packets logs global statistics collected at the ICMPv4 layer. There are no per-instance
3
15
statistics at this layer as ICMP does not establish any connections with peers. This packet is
ei .0
logged on demand and the worst case size is 124 bytes.

0.
w 01
12
ou 3.

2.
zh 201

MSGS_RX 4 Number of incoming ICMPv4 messages
MSGS_DROPPED_RX 4 Number of dropped incoming ICMPv4 messages
ADDR_MASK_REPLIES_RX 4 Number of incoming ICMPv4 address mask replies
ADDR_MASKS_RX 4 Number of incoming ICMPv4 address mask

messages
DEST_UNREACH_RX 4 Number of incoming ICMPv4 destination unreachable

messages
ECHO_RX 4 Number of incoming ICMPv4 echo messages
ECHO_REPLY_RX 4 Number of incoming ICMPv4 echo replies
BAD_CHKSUM_RX 4 Number of incoming ICMPv4 messages with bad

checksum
UNSUPPORTED_TYPE_RX 4 Number of incoming ICMPv4 messages with

unsupported type

Log Record Formats

PARM_PROBS_RX 4 Number of incoming ICMPv4 parameter problem
messages
BAD_CODE_RX 4 Number of incoming ICMPv4 messages with bad

code
REDIRECTS_RX 4 Number of incoming ICMPv4 redirects
SRC_QUENCH_RX 4 Number of incoming ICMPv4 source quench

messages
TIME_EXCEEDS_RX 4 Number of incoming ICMPv4 time exceeded

messages
TSTAMP_REPLY_RX 4 Number of incoming ICMPv4 timestamp replies
TSTAMP_RX 4 Number of incoming ICMPv4 timestamp messages
T
MSGS_TX 4 Number of outgoing ICMPv4 messages
n PS
ADDR_MASK_REPLIES_TX 4 Number of outgoing ICMPv4 address mask replies
34
ADDR_MASKS_TX 4 Number of outgoing ICMPv4 address mask
om 8:
l.c :4 messages
c
DEST_UNREACH_TX 4 Number of outgoing ICMPv4 destination unreachable
.
te 13
messages
.7 bk t
ECHO_TX 4 Number of outgoing ICMPv4 echo messages

41 -b 1 a
3
15
ECHO_REPLY_TX 4 Number of outgoing ICMPv4 echo replies
ei .0
0.
w 01
PARM_PROBS_TX 4 Number of outgoing ICMPv4 parameter problem

12
messages
ou 3.
2.
zh 201
REDIRECTS_TX 4 Number of outgoing ICMPv4 redirects
SRC_QUENCH_TX 4 Number of outgoing ICMPv4 source quench

messages
TIME_EXCEEDS_TX 4 Number of outgoing ICMPv4 time exceeded

messages
TSTAMP_REPLY_TX 4 Number of outgoing ICMPv4 timestamp replies
TSTAMP_TX 4 Number of outgoing ICMPv4 timestamp messages
RATE_LIMIT_TX 4 Number of unsent ICMPv4 messages due to rate limit
MSGS_DROPPED_TX 4 Number of dropped outgoing ICMPv4 messages

Log Record Formats
5.3.477 Global ICMPv6 Stats (LOG_CODE 0x1338)

This log packet logs global statistics collected at the ICMPv6 layer. There are no per-instance
statistics at this layer as ICMP does not establish any connections with peers. This packet is
logged only if, the IPv6 feature is turned on. This packet is logged on demand and the worst case
size is 148 bytes.

MSGS_RX 4 Number of incoming ICMPv6 messages
MSGS_DROPPED_RX 4 Number of dropped incoming ICMPv6 messages
T
DEST_UNREACH_RX 4 Number of incoming ICMPv6 destination unreachable
n PS
messages
ECHO_RX 4 Number of incoming ICMPv6 echo messages
34
om 8:
ECHO_REPLY_RX 4l.c :4 Number of incoming ICMPv6 echo replies
c
BAD_CHKSUM_RX 4 Number of incoming ICMPv6 messages with bad
.
te 13
checksum
.7 bk t
UNSUPPORTED_TYPE_RX 4 Number of incoming ICMPv6 messages with

41 -b 1 a
3
unsupported type
15
ei .0
PARM_PROBS_RX 4 Number of incoming ICMPv6 parameter problem

0.
w 01
messages
12
ou 3.
BAD_CODE_RX 4 Number of incoming ICMPv6 messages with bad

2.
zh 201
code
REDIRECTS_RX 4 Number of incoming ICMPv6 redirects
TIME_EXCEEDS_RX 4 Number of incoming ICMPv6 time exceeded

messages
GRP_QUERY_RX 4 Number of incoming ICMPv6 group member queries
GRP_RESP_RX 4 Number of incoming ICMPv6 group member

responses
GRP_REDUCTIONS_RX 4 Number of incoming ICMPv6 group member

reductions
ROUTERSOLICITS_RX 4 Number of incoming ICMPv6 router solicits
NEIGHBORSOLICITS_RX 4 Number of incoming ICMPv6 neighbor solicits
NEIGHBORADVTS_RX 4 Number of incoming ICMPv6 neighbor

advertisements
PKT_TOO_BIG_RX 4 Number of incoming ICMPv6 packet too big

messages
ROUTERADVTS_RX 4 Number of incoming ICMPv6 router advertisements
MSGS_TX 4 Number of outgoing ICMPv6 messages

Log Record Formats

DEST_UNREACH_TX 4 Number of outgoing ICMPv6 destination unreachable
messages
ECHO_TX 4 Number of outgoing ICMPv6 echo messages
ECHO_REPLY_TX 4 Number of outgoing ICMPv6 echo replies
PARM_PROBS_TX 4 Number of outgoing ICMPv6 parameter problem

messages
REDIRECTS_TX 4 Number of outgoing ICMPv6 redirects
TIME_EXCEEDS_TX 4 Number of outgoing ICMPv6 time exceeded

messages
GRP_QUERY_TX 4 Number of outgoing ICMPv6 group member queries
GRP_RESP_TX 4 Number of outgoing ICMPv6 group member

responses
T
n PS
GRP_REDUCTIONS_TX 4 Number of outgoing ICMPv6 group member
reductions
34
ROUTERSOLICITS_TX 4 Number of outgoing ICMPv6 router solicits
om 8:
NEIGHBORSOLICITS_TX 4
l.c :4 Number of outgoing ICMPv6 neighbor solicits
. c
te 13
NEIGHBORADVTS_TX 4 Number of outgoing ICMPv6 neighbor
advertisements
.7 bk t
41 -b 1 a
3
PKT_TOO_BIG_TX 4 Number of outgoing ICMPv6 packet too big
15
ei .0
messages
0.
w 01
ROUTERADVTS_TX 4 Number of outgoing ICMPv6 router advertisements

12
ou 3.
RATE_LIMIT_TX 4 Number of unsent ICMPv6 messages due to rate limit

2.
zh 201
MSGS_DROPPED_TX 4 Number of dropped outgoing ICMPv6 messages
5.3.478 Global TCP Stats (Log Packet 0x1339)

This log packet logs global statistics collected at the TCP layer. By global, it means that the
statistics are not specific to a particular TCP connection but pertain to the TCP layer as a whole.
This packet is logged on demand and the worst case size is 124 bytes.
VERSION 1 Version of this response’s definition; if DM

receives a response with a version that it does
not support, response will not be parsed
CRNT_OPEN_CONNS 4 Number of currently opened TCP connections
BAD_HDR_LEN 4 Number of TCP packets with bad header length
BAD_CHKSUM 4 Number of TCP packets with bad checksum
TOO_SHORT 4 Number of TCP packets that are too short
CONN_ABORTS 4 Number of total aborted TCP connections

Log Record Formats

CONN_TIMEOUT_ABORTS 4 Number of aborted TCP connections because of
max backoffs
CONN_KEEPALIVE_ABORTS 4 Number of aborted TCP connections because

max keep-alive probes have been sent
RST_TX 4 Number of transmitted TCP packets with RST

flag set
RST_RX 4 Number of received TCP packets with RST flag

set
DROPPED_SEGS_NOCONN_RX 4 Number of dropped incoming TCP packets

because it belongs to a nonexistent TCP
connection
DROPPED_SEGS_RX 4 Number of dropped incoming TCP packets
BYTES_TX 8 Number of transmitted bytes
T
n PS
BYTES_RX 8 Number of received bytes
34
SEGS_TX 4 Number of transmitted TCP packets
om 8:
SEGS_RX 4l.c :4 Number of received TCP packets
. c
BYTES_REXMIT 8 Number of bytes that are retransmitted
te 13
SEGS_REXMIT 4 Number of segments that are retransmitted

.7 bk t
41 -b 1 a
3
DUP_BYTES_RX 4 Number of duplicate incoming TCP bytes
15
ei .0
DUP_SEGS_RX 4 Number of duplicate incoming TCP packets

0.
w 01
12
WINDOW_PROBE_TX 4 Number of transmitted window probes

ou 3.
2.
zh 201
OUT_OF_ORDER_SEGS_RX 4 Number of incoming TCP packets that are

received in out of order
OUT_OF_ORDER_BYTES_RX 4 Number of incoming TCP bytes that are received

in out of order
REXMIT_TIMEOUTS 4 Number of retransmission timeouts
PIGGYBACKED_ACKS_TX 4 Number of transmitted TCP ACK packets that are

piggybacked
PIGGYBACKED_ACKS_RX 4 Number of received TCP ACK packets that are

piggybacked
DUP_ACKS_RX 4 Number of duplicate TCP ACK packets that are

received
DUP_ACKS_TX 4 Number of duplicate TCP ACK packets that are

transmitted

Log Record Formats
5.3.479 Global UDP Stats (LOG_CODE 0x133A)

This log packet logs global statistics collected at the UDP layer. By global, it means that the
statistics are not specific to a particular UDP connection but pertain to the UDP layer as a whole.
This packet is logged on demand and the worst case size is 48 bytes.

response with a version that it does not support, response
will not be parsed
BAD_LEN 4 Number of UDP datagrams with bad payload lengths
BAD_CHKSUM 4 Number of UDP datagrams with bad header checksum
DGRAM_RX 4 Number of incoming UDP datagrams
T
n PS
DGRAM_TX 4 Number of outgoing UDP datagrams
BYTES_RX 8 Number of received bytes
34
om 8:
BYTES_TX 8 l.c :4 Number of transmitted bytes
c
NO_PORT 4 Number of incoming UDP datagrams for an unreachable
.
te 13
port
.7 bk t
DGRAM_DROPPED_RX 4 Number of dropped incoming UDP datagrams

41 -b 1 a
3
15
DGRAM_DROPPED_TX 4 Number of dropped outgoing UDP datagrams
ei .0
0.
w 01
12
5.3.480 PS Statistics Describe All TCP, UDP Instances

ou 3.
2.
zh 201
(LOG_CODE 0x133B, 0x1439)

This log contains the instance information for all active connections of a specified type. TCP and
UDP use the same packet structure, but have different log codes to simplify processing. The TCP
log code is 0x133B and the UDP log code is 0x1439. All fields are unsigned.
version 1 Version of this packet
proc_id 1 ID of the processor on which this instance is running
reserved 2 Used to maintain word alignment
inst_count 1 Number of instances in this packet
PS_CONN_TYPE inst_count See Section 5.3.480.1
5.3.480.1 PS_CONN_TYPE
handle 2 Handle to the instance
local_addr 16 Local address of the connection

Log Record Formats

remote_addr 16 Remote address of the connection
local_port 2 Local port of the connection
remote_port 2 Remote port of the connection
state 1 If TCP:
 0 – TCP_CLOSED
 1 – TCP_LISTEN
 2 – TCP_SYN_SENT
 3 – TCP_SYN_RECEIVED
 4 – TCP_ESTABLISHED
 5 – TCP_FINWAIT1
 6 – TCP_FINWAIT2
 7 – TCP_CLOSE_WAIT
 8 – TCP_LAST_ACK
 9 – TCP_CLOSING
T
n PS
 10 – TCP_TIME_WAIT
If UDP:
34
 1 – UDP_OPEN
om 8:
l.c :4
c
.
te 13
.7 bk t
This log is generated on demand. The worst-case size is 1268 bytes. The maximum n is 20 for
41 -b 1 a
3
TCP and 30 for UDP.
15
ei .0
0.
w 01
5.3.481 PS Statistics Describe All Memory Pool Instances (LOG_CODE

12
ou 3.
0x133C)
2.
zh 201
This log contains the instance information for all ps_mem objects. All of the fields are unsigned.
proc_id 1 ID of the processor on which this instance is

running
inst_count 1 Number of instances in the log packet
PS_MEM_TYPE inst_count See Section 5.3.481.1
5.3.481.1 PS_MEM_TYPE
ps_mem_handle 1 Handle to the ps_mem instance

Log Record Formats
ps_mem_name_size 1 Size of the name of the ps_mem instance in bytes
ps_mem_name ps_mem_ Name of the ps_mem instance

name_size
This log is generated on demand. The worst-case size is 952 bytes. The names of all 48 existing
ps_mem pools sum to 847 bytes. This may change if additional memory pools are added.
5.3.482 PS Statistics Describe All IFACE Instances (LOG_CODE

0x133D)
This log contains the instance information for all ps_iface objects. All fields are unsigned.
T
n PS
34
running
reserved
om 8:
2 Used to maintain word alignment
l.c :4
. c
te 13
inst_count 1 Number of interface instances in the packet
.7 bk t

41 -b 1 a
3
15
PS_IFACE_TYPE inst_count See Section 5.3.482.1
ei .0
0.
w 01
12
5.3.482.1 PS_IFACE_TYPE
ou 3.
2.
zh 201
ps_iface_handle 1 Handle to the interface
ps_iface_name_size 1 Size of the interface name in bytes
ps_iface_v6_addr_count_v6 1 Number of v6 addresses bound to the interface
ps_iface_mcast_group_count 1 Number of multicast groups on the interface
ps_iface_addr_v4 4 IPv4 address of the interface
ps_iface_ipv4_netmask_v4 4 Subnet mask of this interface
ps_iface_hw_addr 6 MAC address of the interface
ps_iface_mtu 2 MTU of the interface
ps_iface_state 1  0x00 – IFACE_STATE_INVALID

 0x01 – IFACE_DISABLED
 0x02 – IFACE_DOWN
 0x04 – IFACE_COMING_UP
 0x08 – IFACE_CONFIGURING
 0x10 – IFACE_ROUTEABLE
 0x20 – IFACE_UP
 0x40 – IFACE_GOING_DOWN
 0x80 – IFACE_LINGERING

Log Record Formats

ps_iface_bcast_capable 1 Indicates whether interface is broadcast capable
 0 – Yes
 1 – No
PS_IFACE_V6_ADDR_TYPE ps_iface_v6_ IPv6 addresses assigned to the interface and their

addr_count_v6 status; see Section 5.3.482.2
PS_IFACE_MCAST_GRP_ ps_iface_mcast_ Multicast groups assigned to the interface; see

TYPE group_count Section 5.3.482.3
PS_IFACE_NAME ps_iface_name_ Character string containing the name of the interface

size
5.3.482.2 PS_IFACE_V6_ADDR_TYPE
T
n PS
ps_iface_ipv6_addr 16 IPv6 address
34
ps_iface_ipv6_addr_type 1  0 – IPV6_ADDR_TYPE_INVALID
om 8:
l.c :4  1 – IPV6_ADDR_TYPE_PUBLIC
c
 2 – IPV6_ADDR_TYPE_PRIV_SHARED
.
te 13
 3 – IPV6_ADDR_TYPE_PRIV_UNIQUE
.7 bk t
41 -b 1 a
3
ps_iface_ipv6_addr_state 1  0 – IPV6_ADDR_STATE_INVALID
15
ei .0
 1– IPV6_ADDR_STATE_TENTATIVE
0.
w 01
 2 – IPV6_ADDR_STATE_UNASSIGNED
12
3 – IPV6_ADDR_STATE_VALID
ou 3.

 4 – IPV6_ADDR_STATE_DEPRECATED
2.
zh 201
5.3.482.3 PS_IFACE_MCAST_GRP_TYPE
ps_iface_mcast_group 16 IP address of the multicast group
This log is generated on demand. Worst-case size is 968 bytes. The maximum n for ps_iface is 5,
and the maximum m for any specific interface is also 5. The maximum ps_iface name is 11
bytes. In the worst case, the maximum number of bytes that will be assigned to ps_iface names is
45 bytes. The maximum p for any interface is 5.
5.3.483 PS Statistics Describe All PPP Instances (LOG_CODE 0x133E)

This log contains the instance information for all PPP objects. All fields are unsigned.

Log Record Formats
inst_count 1 Number of PPP instances in the packet
PS_PPP_TYPE inst_count See Section 5.3.483.1
5.3.483.1 PS_PPP_TYPE
ppp_instance_handle 1  0 – PPP_UM_SN_DEV (UM service network)

 1 – PPP_RM_DEV (RM)
 2 – PPP_UM_AN_DEV (UM AN)
T
n PS
ppp_auth_mode 1  1 – NO_AUTH
 2 – DO_PAP
34
 3 – DO_CHAP
om 8:
l.c :4
c
ppp_dev_name 6 Character name of the device (UM SN, RM, etc.)
.
te 13
ppp_local_addr_v4 4 Address of the local PPP endpoint of the IPCP FSM

.7 bk t
41 -b 1 a
ppp_remote_addr_v4 4 Address of the remote PPP endpoint of the IPCP FSM

3
15
ei .0
ppp_local_iid_v6 8 Address of the local PPP endpoint of the IPCPv6 FSM

0.
w 01
ppp_remote_iid_v6 8 Address of the remote PPP endpoint of the IPCPv6 FSM

12
ou 3.
ppp_oui 4 Vendor-specific OUI

2.
zh 201
This log is generated on demand. The worst-case size is 116 bytes. The maximum n is 3.
5.3.484 PS Statistics Describe All ARP Instances (LOG_CODE 0x133F)

This log contains the instance information for all ARP objects. All fields are unsigned.

running
inst_count 1 Number of ARP instances in the packet
PS_ARP_TYPE inst_count See Section 5.3.484.1

Log Record Formats
5.3.484.1 PS_ARP_TYPE
arp_handle 1  0 – RMNET1, OSIF WWAN RM MAC

 1 – WLAN, 802.11 MAC
 2 – RMNET2
 3 – RMNET3
 4 – RMNET4
 5 – RMNET5
arp_iface_handle 1 Handle to the interface to which the first ARP instance is

bound
T
5.3.485 PS Statistics Describe Delta Instances (LOG_CODE 0x1340)
n PS
This packet contains all of the instance update information for an existing instance object. All
34
fields are unsigned.
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
running
0.
w 01

12
ou 3.
type 1 Type of statistic, represented by the following

2.
zh 201
enumeration:
 1 – TCP
 2 – UDP
 3 – PS_IFACE
 4 – PS_FLOW
 5 – PS_MEM
 6 – PS_PHYS_LINK
 7 – PPP
 8 – ARP
 9 – IPHC
 10 – LLC
 11 – ROHC
 12 – RSVP
deleted 1 Is this instance being deleted? TRUE or FALSE

Log Record Formats

data 200 Storage for data used to uniquely identify the

instance; fields are defined based upon type:
 TCP – PS_TCP_TYPE
 UDP – PS_UDP_TYPE
 PS_IFACE – PS_IFACE_TYPE
 PS_FLOW – PS_FLOW_TYPE
 PS_MEM – PS_MEM_TYPE
 PS_PHYSLINK – PS_PHYS_LINK_TYPE
 PPP – PS_PPP_TYPE
 ARP – PS_ARP_TYPE
 LLC – PS_LLC_TYPE
 RSVP – PS_RSVP_TYPE
 ROHC – PS_ROHC_TYPE
 IPHC – PS_IPHC_TYPE
T
n PS
34
This log is generated upon a state change in any active instance. State changes include the
om 8:
creation of a new instance, the modification of an instance, or the deletion of an instance. The
l.c :4
c
worst-case size is 208 bytes.
.
te 13
.7 bk t
5.3.486 PS Statistics Describe Instance TCP Statistics (LOG_CODE

41 -b 1 a
3
0x1341)
15
ei .0
0.
w 01
This log contains all of the statistics for a given TCP connection. All fields in this log are
12
ou 3.
unsigned.
2.
zh 201

handle 4 Handle to the specific instance
bytes_tx 8 Number of bytes transmitted
bytes_rx 8 Number of bytes received
segs_tx 4 Number of segments transmitted
segs_rx 4 Number of segments received
bytes_rexmit 8 Number of bytes retransmitted
segs_rexmit 4 Number of segments retransmitted
dup_bytes_rx 4 Number of duplicate bytes received
dup_segs_rx 4 Number of duplicate segments received
window_probe_tx 4 Number of window probes transmitted
out_of_order_segs_rx 4 Number of out-of-order segments received

Log Record Formats
out_of_order_bytes_rx 4 Number of out-of-order bytes received
rexmit_timeouts 4 Number of retransmit timeouts that have occurred
piggybacked_acks_tx 4 Number of piggybacked ACKs transmitted
piggybacked_acks_rx 4 Number of piggybacked ACKs received
dup_acks_rx 4 Number of duplicate ACK packets received
dup_acks_tx 4 Number of duplicate ACK packets transmitted
This log is generated on demand. The worst-case size is 82 bytes.
5.3.487 PS Statistics Describe Instance UDP Statistics (LOG_CODE

0x1342)
T
n PS
This log contains all of the statistics for a given UDP connection. All fields in this log are
unsigned.
34
om 8:
l.c :4
. c
te 13
.7 bk t

41 -b 1 a
3
15
ei .0
0.
w 01

12
ou 3.
dgram_rx 4 Number of datagrams received

2.
zh 201
dgram_tx 4 Number of datagrams transmitted
dgram_dropped_rx 4 Number of datagrams dropped on receive
5.3.488 PS Statistics Describe Instance PPP Statistics (LOG_CODE

0x1343)
This log contains all of the statistics for a given PPP connection. All of the fields in this log are
unsigned.

Log Record Formats

bad_fcs 4 Number of packets with a bad frame check sequence
bad_proto 4 Number of packets with a bad protocol
unsupported_proto 4 Number of packets with an unsupported protocol
not_enabled_proto 4 Number of packets with a disabled protocol
missing_addr 4 Number of packets missing an address
missing_ctrl 4 Number of packets missing a control statement
pkts_dropped_rx 4 Number of received packets that the PPP instance

dropped
pkts_rx 4 Number of packets received

framed_bytes_rx 8 Number of framed bytes received
unframed_bytes_rx 8 Number of unframed bytes received
T
n PS
pkts_dropped_tx 4 Number of packets dropped during transmission
34
pkts_tx 4 Number of packets transmitted
om 8:
framed_bytes_tx 8 Number of framed bytes transmitted
l.c :4
. c
unframed_bytes_tx 8 Number of unframed bytes transmitted
te 13
ipv4_pkts_rx 4 Number of IPv4 packets received

.7 bk t
41 -b 1 a
3
ipv4_pkts_tx 4 Number of IPv4 packets transmitted
15
ei .0
vjch_pkts_rx 4 Number of VJ compressed packets received

0.
w 01
12
ou 3.
vjch_pkts_tx 4 Number of VJ compressed packets transmitted

2.
zh 201
vjuch_pkts_rx 4 Number of VJ uncompressed packets received
vjuch_pkts_tx 4 Number of VJ uncompressed packets transmitted
pap_pkts_rx 4 Number of PAP packets received
pap_pkts_tx 4 Number of PAP packets transmitted
pap_auth_failures 4 Number of times PAP authentication has failed

chap_pkts_rx 4 Number of CHAP packets received
chap_pkts_tx 4 Number of CHAP packets transmitted
chap_auth_failures 4 Number of times CHAP authentication has failed
lcp_pkts_rx 4 Number of LCP packets received
lcp_pkts_tx 4 Number of LCP packets transmitted
lcp_config_requests_rx 4 Number of LCP configuration request packets received
lcp_config_acks_rx 4 Number of LCP configuration acknowledgment packets

received
lcp_config_naks_rx 4 Number of LCP configuration negative acknowledgement

packets received
lcp_config_rejects_rx 4 Number of LCP configuration reject packets received
lcp_term_requests_rx 4 Number of LCP term request packets received

Log Record Formats

lcp_term_acks_rx 4 Number of LCP term acknowledgement packets received
lcp_code_rejects_rx 4 Number of LCP code reject packets received
lcp_proto_rejects_rx 4 Number of LCP protocol reject packets received
lcp_echo_requests_rx 4 Number of LCP echo request packets received
lcp_echo_replies_rx 4 Number of LCP echo reply packets received
lcp_discard_requests_rx 4 Number of LCP discard request packets were received
lcp_identification_rx 4 Number of LCP identification packets received
lcp_time_remaining_rx 4 Number of LCP time remaining packets received
lcp_config_requests_tx 4 Number of LCP configuration request packets transmitted
lcp_config_acks_tx 4 Number of LCP configuration acknowledgement packets

transmitted
T
n PS
lcp_config_naks_tx 4 Number of LCP configuration negative acknowledgment
packets transmitted
34
lcp_config_rejects_tx 4 Number of LCP configuration reject packets transmitted
om 8:
l.c :4
c
lcp_term_requests_tx 4 Number of LCP term request packets transmitted
.
te 13
lcp_term_acks_tx 4 Number of LCP term acknowledgement packets

.7 bk t
transmitted
41 -b 1 a
3
lcp_code_rejects_tx 4 Number of LCP code reject packets transmitted
15
ei .0
0.
w 01
lcp_proto_rejects_tx 4 Number of LCP protocol reject packets transmitted

12
ou 3.
lcp_echo_requests_tx 4 Number of LCP echo request packets transmitted

2.
zh 201
lcp_echo_replies_tx 4 Number of LCP echo reply packets transmitted
lcp_discard_requests_tx 4 Number of LCP discard request packets were transmitted
ipcp_pkts_rx 4 Number of IPCP packets received
ipcp_pkts_tx 4 Number of IPCP packets transmitted
ipcp_config_requests_rx 4 Number of IPCP configuration request packets received
ipcp_config_acks_rx 4 Number of IPCP configuration acknowledgment packets

received
ipcp_config_naks_rx 4 Number of IPCP configuration negative

acknowledgement packets received
ipcp_config_rejects_rx 4 Number of IPCP configuration reject packets received
ipcp_term_requests_rx 4 Number of IPCP term request packets received
ipcp_term_acks_rx 4 Number of IPCP term acknowledgement packets received
ipcp_code_rejects_rx 4 Number of IPCP code reject packets received
ipcp_config_requests_tx 4 Number of IPCP configuration request packets

transmitted
ipcp_config_acks_tx 4 Number of IPCP configuration acknowledgment packets

transmitted

Log Record Formats

ipcp_config_naks_tx 4 Number of IPCP configuration negative acknowledgment
packets transmitted
ipcp_config_rejects_tx 4 Number of IPCP configuration reject packets transmitted
ipcp_term_requests_tx 4 Number of IPCP term request packets transmitted
ipcp_term_acks_tx 4 Number of IPCP term acknowledgement packets

transmitted
ipcp_code_rejects_tx 4 Number of IPCP code reject packets transmitted
ipv6_pkts_rx 4 Number of IPv6 packets received
ipv6_pkts_tx 4 Number of IPv6 packets transmitted
ipv6cp_pkts_rx 4 Number of IPv6CP packets received
ipv6cp_pkts_tx 4 Number of IPv6CP packets transmitted
T
n PS
ipv6cp_config_requests_rx 4 Number of IPv6CP configuration request packets
received
34
ipv6cp_config_acks_rx 4 Number of IPv6CP configuration acknowledgment
om 8:
packets received
l.c :4
c
ipv6cp_config_naks_rx 4 Number of IPv6CP configuration negative
.
te 13
acknowledgement packets received
.7 bk t
ipv6cp_config_rejects_rx 4 Number of IPv6CP configuration reject packets received

41 -b 1 a
3
15
ipv6cp_term_requests_rx 4 Number of IPv6CP term request packets received
ei .0
0.
w 01
ipv6cp_term_acks_rx 4 Number of IPv6CP term acknowledgement packets

12
received
ou 3.
2.
zh 201
ipv6cp_code_rejects_rx 4 Number of IPv6CP code reject packets received
ipv6cp_config_requests_tx 4 Number of IPv6CP configuration request packets

transmitted
ipv6cp_config_acks_tx 4 Number of IPv6CP configuration acknowledgment

packets transmitted
ipv6cp_config_naks_tx 4 Number of IPv6CP configuration negative

acknowledgment packets transmitted
ipv6cp_config_rejects_tx 4 Number of IPv6CP configuration reject packets

transmitted
ipv6cp_term_requests_tx 4 Number of IPv6CP term request packets transmitted
ipv6cp_term_acks_tx 4 Number of IPv6CP term acknowledgment packets

transmitted
ipv6cp_code_rejects_tx 4 Number of IPv6CP code reject packets transmitted

Log Record Formats
5.3.489 PS Statistics Describe Instance IFACE Statistics (LOG_CODE

0x1344)
This log contains all of the statistics for a given interface. All of the fields in this log are
unsigned.
mcast_pkts_rx 4 Number of multicast packets received
T
pkts_dropped_rx 4 Number of packets dropped during reception
n PS
34
mcast_pkts_tx 4 Number of multicast packets transmitted
om 8:
l.c :4
c
pkts_dropped_tx 4 Number of packets dropped during transmission
.
te 13
.7 bk t

41 -b 1 a
3
15
ei .0
5.3.490 PS Statistics Describe Instance Memory Statistics

0.
w 01
(LOG_CODE 0x1345)
12
ou 3.
2.
zh 201
This log contains all of the statistics for a given ps_mem pool. All of the fields in this log are
unsigned.
alloc_errors 4 Number of memory allocation errors
high_wm_exceeds 4 Number of times the high watermark has been

exceeded
max_alloc_buffers 4 Maximum number of buffers that have been actively

allocated at one time
num_used_buffers 4 Number of buffers currently in use

Log Record Formats
5.3.491 PS Statistics Describe Instance Flow Statistics (LOG_CODE

0x1346)
This log contains all of the statistics for a given flow. All of the fields in this log are unsigned.
is_default 4 Is this flow the default for the interface?
T
n PS
34
om 8:
5.3.492 PS Statistics Describe Instance Physical Link Statistics
l.c :4
. c
(LOG_CODE 0x1347)
te 13
.7 bk t
This log contains all of the statistics for a given phys link. All of the fields in this log are
41 -b 1 a
3
unsigned.
15
ei .0
0.
w 01

12
ou 3.

2.
zh 201

ref_cnt 4 Number of flows on this phys link
is_primary 4 Is this physlink primary for the interface?

Log Record Formats
5.3.493 PS Statistics Describe Instance ARP Statistics (LOG_CODE

0x1348)
This log contains all of the statistics for a given ARP protocol instance. All fields in this log are
unsigned.
ipv4_req_tx 4 Number of IPv4 packets that request transmission
ipv4_drop_new_req_tx 4 Number of IPv4 packets that were dropped from the

ARP cache on arrival of a new IPv4 packet for
T
n PS
transmission
ipv4_drop_ce_flush 4 Number of IPv4 packets that were dropped from the
34
ARP cache while flushing the corresponding cache
om 8:
l.c :4 entry
c
pkts_tx 4 Number of ARP packets transmitted includes ARP
.
te 13
requests and replies
.7 bk t
req_bcast_tx 4 Number of ARP request packet broadcast

41 -b 1 a
3
15
req_bcast_prb_tx 4 Number of ARP broadcast request probes transmitted
ei .0
in response to a DHCP client request

0.
w 01
12
req_ucast_prb_tx 4 Number of ARP unicast request probes transmitted in

ou 3.
response to cache consistency maintenance requests

2.
zh 201
req_bcast_rexmit 4 Number of ARP request packet broadcast as

retransmits
req_bcast_prb_rexmit 4 Number of ARP broadcast request probes

retransmitted in response to a DHCP client request
req_ucast_prb_rexmit 4 Number of ARP unicast request probes retransmitted

in response to cache consistency maintenance
requests
arp_req_fail 4 Number of ARP requests that failed to get a response

even after maximum number of retries and finally had
to be timed out
arp_probe_timeout 4 Number of ARP retries that timed out when in

ARP_STATUS_PROBING mode
resp_tx 4 Number of ARP response packets transmitted, i.e.,

both requests and replies
req_bcast_fail_tx 4 Number of ARP broadcast requests failed to transmit
req_bcast_prb_fail_tx 4 Number of ARP broadcast request probes failed to

transmit
req_ucast_prb_fail_tx 4 Number of ARP unicast request probes failed to

transmit

Log Record Formats

req_bcast_fail_rexmit 4 Number of ARP broadcast requests failed to
retransmit
req_bcast_prb_fail_rexmit 4 Number of ARP broadcast request probes failed to

retransmit
req_ucast_prb_fail_rexmit 4 Number of ARP unicast request probes failed to

retransmit
resp_fail_tx 4 Number of ARP response packets failed to transmit
pkts_rx 4 Number of ARP packets received, i.e., both request

and response
req_rx 4 Number of ARP request packets received
resp_rx 4 Number of ARP response packets received
succ_resp_pending_rx 4 Number of ARP response packets received
T
corresponding to a pending request
n PS
unknown_pkts_rx 4 Number of packets received of type unknown frame
34
not_for_us_rx 4 Number of ARP packets received not destined to US
om 8:
no_req_pending_rx 4
l.c :4Number of ARP packets received for which no
. c
request was pending
te 13
cache_hits 4 Number of successful ARP cache hits

.7 bk t
41 -b 1 a
3
cache_misses 4 Number of ARP cache misses
15
ei .0
arp_req_cache_hits 4 Number of successful ARP cache hits on receiving

0.
w 01
ARP request packet

12
ou 3.
arp_req_cache_misses 4 Number of ARP cache misses on receiving ARP

2.
zh 201
request packet
ce_evict_timeout 4 Number of cache entries evicted due to timeouts
ce_evict_new_req 4 Number of cache entries evicted due to arrival of new

requests
ce_evict_prb_succ 4 Number of cache entries evicted as response was

received for a corresponding broadcast probe
ce_evict_ps_ent_clear 4 Number of cache entries evicted on request from a

PS entity like the DHCP server
ce_update_arp_req 4 Number of cache entries updated on receiving the

ARP request
ce_update_check_succ 4 Number of cache entries updated when a response

frame is received corresponding to a unicast check
request
ce_update_ps_ent_set 4 Number of cache entries updated on request from an

external PS entity like the DHCP server

Log Record Formats
5.3.494 PS Statistics Describe Instance LLC Statistics (LOG_CODE

0x1349)
This packet contains all of the statistics for a given IP header compression instance. All fields in
this log are unsigned.

running
handle 4 Handle to instance these statistics are

associated with
comp_hdr_bytes 4 Number of octets in the uncompressed headers
T
which are compressed by the compresser
n PS
comp_hdr_bytes_comp 4 Number of octets of compressed header
34
generated as a result of compression
om 8:
comp_ipv4_frags 4
l.c :4 Number of IPv4 fragments received for
compression
. c
te 13
comp_ipv4_full_hdr_tos_67 4 Number of IPv4 full header packets transmitted
because the type of service bits 6 and 7
.7 bk t
41 -b 1 a
changed and the packet was a TCP packet

3
15
ei .0
comp_ipv6_full_hdr_tos_67 4 Number of IPv6 full header packets transmitted

because the traffic class type of service bits
0.
w 01
changed and the packet was a TCP packet

12
ou 3.
2.
zh 201
comp_tcp_full_hdr_rexmit 4 Number of full header TCP packets that were

sent as a result of a retransmission
decomp_hdr_bytes 4 Number of octets in the compressed header

received that are to be decompressed
decomp_hdr_bytes_decomp 4 Number of octets of the header that were

retrieved after decompression
decomp_tcp_twice_alg 4 Number of contexts that were successfully

repaired after running the twice algorithm
decomp_ctx_state_pkt_tx 4 Number of Context state packets that were

transmitted as a part of decompression
decomp_ctx_state_bytes_tx 4 Number of octets of Context state packets that

were transmitted
decomp_ctx_state_pkt_rx 4 Number of Context state packets that were

received
decomp_ctx_state_bytes_rx 4 Number of octets of Context state packets that

were received
comp_gen_errors 4 Number of compressions that failed due to

general errors (these errors are captured in the
iphc_compress function in ps_iphc.c and other
auxiliary functions called by this function)

Log Record Formats

comp_dsm_errors 4 Number of compressions that failed due to DSM
errors
comp_full_hdr_fail 4 Number of full header packets that failed to be

sent from the compressor context
comp_ipv4_fail 4 Number of IPv4 packets that failed to be

compressed
comp_ipv4_malformed_pkt 4 Number of IPv4 packets that failed to be

compressed because the packet was malformed
comp_ipv6_fail 4 Number of IPv6 packets that failed to be

compressed
comp_ipv6_malformed_pkt 4 Number of IPv6 packets that failed to be

compressed because the packet was malformed
comp_tcp_fail 4 Number of TCP packets that failed to be
T
n PS
compressed
comp_non_tcp_fail 4 Number of non-TCP packets that failed to be
34
compressed
om 8:
decomp_invalid_ip 4l.c :4 Number of packets received that failed to be
c
decompressed because of invalid IP
.
te 13
decomp_gen_errors 4 Number of decompressions that failed due to

.7 bk t
general errors (these errors captured in the

41 -b 1 a
3
iphc_decompress function in ps_iphc.c and
15
other auxiliary functions called by the above
ei .0
function)
0.
w 01
12
ou 3.
decomp_dsm_errors 4 Number of decompressions that failed due to

DSM errors
2.
zh 201
decomp_full_hdr_fail 4 Number of full header packets received that

failed to be decompressed at the
decompressors context
decomp_ipv4_fail 4 Number of IPv4 packets that failed to be

decompressed
decomp_ipv4_malformed_pkt 4 Number of IPv4 packets that failed

decompression because packet was malformed
decomp_ipv6_fail 4 Number of IPv6 packets that failed to be

decompressed
decomp_ipv6_malformed_pkt 4 Number of IPv6 packets that failed

decompression because packet was malformed
decomp_tcp_fail 4 Number of TCP packets that failed to be

decompressed
decomp_tcp_mis_cksum 4 Number of TCP packets that failed to be

decompressed because of improper checksum
decomp_tcp_nodelta_fail 4 Number of TCP nodelta packets that failed

to be decompressed
decomp_non_tcp_fail 4 Number of non-TCP packets that failed to be

decompressed

Log Record Formats

comp_pkt_ipv4 4 Number of IPv4 packets successfully
compressed
comp_pkt_ipv6 4 Number of IPv6 packets successfully

compressed
comp_pkt_full_header 4 Number of full header packets that were sent

from the compressor context
comp_pkt_compressed_tcp 4 Number of TCP packets successfully

compressed
comp_pkt_compressed_tcp_ 4 Number of TCP nodelta packets successfully

nodelta compressed
comp_pkt_compressed_non_tcp 4 Number of non-TCP packets that were

successfully compressed
decomp_pkt_ipv4 4 Number of IPv4 packets successfully
T
n PS
decompressed
decomp_pkt_ipv6 4 Number of IPv6 packets successfully
34
decompressed
om 8:
decomp_pkt_full_header 4
l.c :4 Number of full header packets that
c
were received at the decompressor context
.
te 13
decomp_pkt_compressed_tcp 4 Number of TCP packets successfully

.7 bk t
decompressed
41 -b 1 a
3
15
decomp_pkt_compressed_tcp_ 4 Number of TCP nodelta packets successfully
ei .0
nodelta decompressed
0.
w 01
12
decomp_pkt_compressed_non_tcp 4 Number of non-TCP packets that were

ou 3.
successfully decompressed
2.
zh 201
5.3.495 PS Statistics Describe Instance LLC Statistics (LOG_CODE

0x134A)
This log contains all of the statistics for a given 802.3 LLC instance. All fields in this log are
unsigned.

running
frms_tx 4 Number of LLC frames transmitted
llc_mode0_tx 4 Number of Mode 0 LLC frames transmitted
llc_mode1_tx 4 Number of Mode 1 LLC frames transmitted

Log Record Formats

frms_fail_tx 4 Number of LLC frames that failed transmission
unknown_proto_drop_tx 4 Number of LLC frames with unknown protocol

that failed transmission
invalid_mode_drop_tx 4 Number of LLC frames with an invalid mode that

failed transmission
frms_rx 4 Number of LLC frames received
llc_mode0_rx 4 Number of Mode 0 LLC frames received
llc_mode1_rx 4 Number of Mode 1 LLC frames received
llc_control_frms_rx 4 Number of LLC control frames recieved
frms_drop_rx 4 Number of LLC frames dropped due to errors
instance_stop_rx 4 Number of LLC frames dropped as LLC instance
T
stops
n PS
instance_start_pending_rx 4 Number of LLC frames received when the LLC
34
instance start is still pending
om 8:
inv_dest_addr_rx 4l.c :4 Number of LLC frames dropped with invalid
destination address
. c
te 13
inv_src_addr_rx 4 Number of LLC frames with invalid source
address dropped
.7 bk t
41 -b 1 a
3
inv_mode_rx 4 Number of LLC frames with Invalid mode
15
ei .0
dropped
0.
w 01
mode0_inv_ethlen_rx 4 Number of Mode 0 LLC frames with invalid

12
ou 3.
etherlen dropped
2.
zh 201
mode1_inv_snaphdr_len_rx 4 Number of LLC frames of type Mode 1 with

invalid snap header length dropped
mode1_inv_snaphdr_rx 4 Number of Mode 1 LLC frames with invalid snap

header dropped
mode1_inv_oui_rx 4 Number of Mode 1 LLC frames with invalid OUI

dropped
mode1_vlan_frms_rx 4 Number of Mode 1 VLAN frames received
mode1_inv_vlan_len_rx 4 Number of Mode 1 LLC frames with invalid VLAN

length dropped
mode1_inv_vlan_frm_rx 4 Number of Mode 1 LLC frames with invalid VLAN

frame dropped
mode1_inv_ethlen_rx 4 Number of Mode 1 LLC frames with invalid

etherlen dropped
llc_802_1x_unsupported 4 Number of LLC frames of 802.1x protocol that

are unsupported received
llc_802_1x_preauth_unsupported 4 Number of LLC frames of 802.1x preauth

protocol that are unsupported received

Log Record Formats
5.3.496 PS Statistics Describe Instance ROHC Statistics (LOG_CODE

0x134B)
This log contains all of the statistics for a given ROHC instance. All of the fields in this log are
unsigned.

running
handle 4 Handle to the instance with which the statistics

are associated
decomp_in_packets 4 Number of packets in to decompressor
T
n PS
decomp_bytes_original 4 Total original HDR number of bytes
decomp_bytes_decomp 4 Total HDR bytes before decompression
34
decomp_ir_received 4 Number of IRs received by decompressor
om 8:
l.c :4
c
decomp_ir_dyn_received 4 Number of IR-DYNs received by decompressor
.
te 13
decomp_t0_received 4 Number of type0 packets received by

.7 bk t
decompressor
41 -b 1 a
3
15
ei .0
decompressor
0.
w 01

12
ou 3.
decompressor
2.
zh 201
decomp_uncompressed 4 Number of packets received uncompressed
decomp_out_acks 4 Number of ACKs generated by decompressor
decomp_out_nacks 4 Number of NACKs generated by decompressor
decomp_out_snacks 4 Number of static nacks generated by

decompressor
decomp_piggybacked_fb 4 Number of piggybacked FBS received by

decompressor
decomp_failed 4 Number of decompression failures
decomp_ir_failed 4 Number of IR packet failures
decomp_ir_dyn_failed 4 Number of IR-DYN packet failures
decomp_t0_failed 4 Number of type0 packet failures
decomp_crc_failures 4 Number of CRC decompression failures
decomp_parse_errors 4 Number of header parsing/illegal packet errors
decomp_illegal_states 4 Number of packets failed in lower context states

Log Record Formats

decomp_invalid_contexts 4 Number of times the Decomp CTX was
invalidated
decomp_unknown_profiles 4 Number of failures due to unsupported profiles
decomp_context_repair_successes 4 Number of successes in context repair
decomp_context_repair_discards 4 Number of packets discarded after successful

CTX repair
comp_out_packets 4 Number of packets generated by compressor
comp_bytes_original 4 Total number of bytes of original headers
comp_bytes_comp 4 Total number of bytes after compression
comp_pkt_bytes_original 4 Total number of bytes of original packets
comp_pkt_bytes_comp 4 Total number of bytes after compression
T
n PS
comp_ir_produced 4 Number of IRs produced by compressor
comp_ir_dyn_produced 4 Number of IR-DYNs produced by compressor
34
comp_t0_produced 4 Number of type0 packets produced by
om 8:
compressor
l.c :4
. c
te 13
compressor
.7 bk t
41 -b 1 a

3
15
compressor
ei .0
0.
w 01
comp_uncompressed 4 Number of packets sent uncompressed

12
ou 3.
comp_in_acks 4 Number of ACKs received by compressor

2.
zh 201
comp_in_nacks 4 Number of NACKs received by compressor
comp_in_snacks 4 Number of s-NACKs received by compressor
comp_failed 4 Number of compression failures
5.3.497 PS Statistics Describe Instance RSVP Statistics (LOG_CODE

0x134C)
This log contains all of the statistics for a given RSVP instance. All fields in this log are
unsigned.
handle 4 Handle to the RSVP instance these stats associate

with

Log Record Formats

resv_tx 4 Number of RSVP reserve messages sent
resv_fail_tx 4 Number of RSVP reserve messages failed to send
resv_invalid_iface_id_tx 4 Number of RSVP reserve messages failed to send

because of invalid interface ID
resv_unrecog_ip_family_tx 4 Number of RSVP reserve messages failed to send

because of unrecognized IP family
resv_unsupp_xport_tx 4 Number of RSVP reserve messages failed to send

because of unsupported xport
rsvp_rx 4 Number of RSVP messages received
resv_err_rx 4 Number of RSVP ERROR messages received
resv_conf_rx 4 Number of RSVP CONF messages recieved
T
dropped_rx 4 Number of RSVP messages received and dropped
n PS
malformed_pkt_rx 4 Number of RSVP malformed packets received
34
invalid_cksum_rx 4 Number of RSVP messages with invalid checksum
om 8:
l.c :4 received
c
invalid_rsvp_ver_rx 4 Number of RSVP messages with invalid version
.
te 13
received
.7 bk t
no_sess_obj_rx 4 Number of RSVP messages with no session object

41 -b 1 a
3
received
15
ei .0
ipv4_proto_len_mismatch_rx 4 Number of RSVP messages with mismatch in IPv4

0.
w 01
protocol lengths received

12
ou 3.
ipv6_proto_len_mismatch_rx 4 Number of RSVP messages with mismatch in IPv6

2.
zh 201
protocol lengths received
sess_obj_unidentified_rx 4 Number of RSVP session objects received that are

unidentified
msg_queue_full_rx 4 Number of RSVP messages dropped because

message queue is full
msg_type_unsupp_rx 4 Number of RSVP messages with unsupported

message type received
unable_to_parse_rx 4 Number of RSVP messages received that are unable

to be parsed
5.3.498 PS Statistics Describe All LLC Instances (LOG_CODE 0x134D)

This log contains the instance information for all LLC objects. All fields are unsigned.

Log Record Formats
inst_count 1 Number of LLC instances in the packet
PS_LLC_TYPE inst_count See Section 5.3.498.1
5.3.498.1 PS_LLC_TYPE
llc_handle 1  0 – LAN_LLE_RMNET1, OSIF WWAN RM MAC

 1 – LAN_LLE_WLAN, 802.11 MAC
 2 – LAN_LLE_RMNET2
T
n PS
34
llc_iface_handle 1 Handle to the interface to which the LLC instance is bound
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
5.3.499 PS Statistics Describe All RSVP Instances (LOG_CODE

3
15
ei .0
0x134E)
0.
w 01
12
This log contains the instance information for all RSVP objects. All fields are unsigned.
ou 3.
2.
zh 201

inst_count 1 Number of RSVP instances in the packet
reserved 3 Remote address of the first RSVP instance
PS_RSVP_TYPE inst_count See Section 5.3.499.1
5.3.499.1 PS_RSVP_TYPE
rsvp_handle 4 Handle to the first RSVP instance
rsvp_remote_addr 16 Remote address of the first RSVP instance
rsvp_remote_port 2 Remote port of the first RSVP instance

Log Record Formats

rsvp_family 1  4 – IPv4
 6 – IPv6
5.3.500 CM Serving System event (LOG_CODE 0x134F)

This section contains information for the CM Serving System event.
T
n PS
SS_EVENT 4 Serving System Event; see Section 5.3.500.1
34
CHANGED_FIELDS1 4 or 8 Bit mask of changed fields; see Section 5.3.500.3
om 8:
SRV_STATUS 4 Serving status of the system; values are:
l.c :4
c
0 – No service
.

te 13
 2 – Service available
.7 bk t
41 -b 1 a
 3 – Limited regional service

3
15
 4 – Power save
ei .0
0.
w 01
12
ou 3.
SRV_DOMAIN 4 Service domain registered on the system; values are:

2.
zh 201
 1 – Circuit-switched capable
 2 – Packet-switched capable
 3 – Circuit- and packet-switched capable
 4 – Found the right system, not yet registered/attached
SRV_CAPABILITY 4 Service domain registered on the system; values are:


Log Record Formats

SYS_MODE 4 System mode; values are:
 1 – AMPS
 2 – CDMA
 3 – GSM
 4 – 1xEV-DO
 5 – WCDMA
 6 – GPS
 8 – WLAN
 9 – LTE
ROAM_STATUS 4 Roam status; values are:

0 – OFF
T

n PS
 1 – ON
 2 – Flashing
34
 3 – Out of Neighborhood
 4 – Out of Building
om 8:
 5 – Preferred system
l.c :4
c
 6 – Available system
.
te 13
 7 – Alliance partner
 8 – Premium partner
.7 bk t
41 -b 1 a
 9 – Full service functionality

3
15
 10 – Partial service functionality
ei .0
 11 – Banner ON
0.
w 01
 12 – Banner OFF
12
ou 3.
2.
zh 201
SYS_ID2 20 or 37 SYS_ID; see Section 5.3.500.4
IS_SYS_FORBIDDEN 1 Indicates whether system is forbidden; values are:

 0 – System is not forbidden
 1 – System is forbidden
IS_COLLOC 1 Indicates whether system is collocated; values are:

 0 – System is not collocated
 1 – System is collocated
RSSI 2 RSSI in positive dBm, i.e., 75 means -75 dBm
ECIO 2 ECIO in negative 0.5 dBm, i.e., 63 means -31.5 dBm
IO 4 IO, valid in 1xEV-DO-only operation
SINR 1 SINR, valid only when sys_mode is 1xEV-DO; SINR range

from 0 to 8; Level 8 represents highest SINR
PS_DATA_SUSPEND 1 Indicates whether the current PS data service has been

suspended; values are:
 0 – PS data service is not suspended
 1 – PS data service is suspended

Log Record Formats

HDR_HYBRID 1 Indicates whether system is hybrid; values are:
 0 – System is not hybrid
 1 – System is hybrid
HDR_SRV_STATUS 4 Serving status of the 1xEV-DO system; values are:

HDR_ROAM_STATUS 4 Roam status of the 1xEV-DO system; values are:

 0 – OFF
 1 – ON
T
 2 – Flashing
n PS
 3 – Out of Neighborhood
34
 4 – Out of Building
om 8:
l.c :4
c
.
te 13
.7 bk t
41 -b 1 a

3
15
ei .0
0.
w 01
12
ou 3.
HDR_RSSI 2 1xEV-DO RSSI in positive dBm, i.e., 75 means -75 dBm

2.
zh 201
HDR_ECIO 2 1xEV-DO ECIO Ec/Io range, from 5 (-31.5 dB) to 512

(0 dB)
HDR_IO 4 1xEV-DO IO, range -106 dBm to -21 dBm
HDR_SINR 1 1xEV-DO SINR, range from 0 to 8; Level 8 represents

highest SINR
PREV_IDLE_DIGITAL_ 4 Previous Idle Digital mode; values are:

MODE  0 – No Service
 1 – AMPS
 2 – CDMA
 3 – GSM
 4 – 1xEV-DO
 5 – WCDMA
 6 – GPS
 8 – WLAN
 9 – LTE

Log Record Formats

CUR_IDLE_DIGITAL_ 3 Current Idle Digital mode; values are:
MODE  0 – No Service
 1 – AMPS
 2 – CDMA
 3 – GSM
 4 – 1xEV-DO
 5 – WCDMA
 6 – GPS
 8 – WLAN
 9 – LTE
MODE_INFO 628 See Section 5.3.500.5
T
HYBR_HDR_BCMCS_ 1 Indicates whether 1xEV-DO system is configured to support
n PS
SRV_SUPPORTED BCMCS service; values are:
 0 – BCMCS is not supported
34
 1 – BCMCS is supported
om 8:
l.c :4
. c
SS_MAIN_BCMCS_ 1 Indicates whether main system is configured to support
te 13
SRV_SUPPORTED BCMCS service; values are:

.7 bk t
 0 – BCMCS is not supported

41 -b 1 a
3
 1 – BCMCS is supported
15
ei .0
0.
w 01
REQUESTING_ 4 Requesting client ID

12
ou 3.
CLIENT_ID
2.
zh 201
MSM_ID3 4 Identifies the MSM that generated this event; values are:
 0 – MSM6500
 1 – MSM6250
 3 – MSM that does not has control of DPRAM
WLAN_RSSI4 2 WLAN RSSI in positive dBm, i.e., 75 means -75 dBm
WLAN_SRV_STATUS4 4 Serving status of the WLAN system; values are:

WLAN_BSS_INFO4 57 WLAN System Information; see Section 5.3.500.6
WLAN_STATS4 12 WLAN stats; see Section 5.3.500.7

Log Record Formats

CIPHER_DOMAIN 4 Ciphering on CS or PS domain or both; values are:
 1 – Circuit switched capable
 2 – Packet switched capable
 3 – Circuit and packet switched capable
MAIN_THR_STATUS 13 DCTM status on the main system; see Section 5.3.500.8
HDR_THR_STATUS 13 DCTM status on the 1xEV-DO system; see

Section 5.3.500.8
HDR_SYS_ID2 37 1xEV-DO SYS_ID; see Section 5.3.500.4
CURR_UPTIME 4 Current uptime in seconds
T
PSIST5 4 1X Psist setting; values are:
n PS
 0 – Low Psist
 1 – High Psist
34
 2 – Unknown
om 8:
l.c :4
. c
ASUBS_ID 1 Active subscription-ID related to the CDMA/GW service info
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
IS_MAIN_ 1 Operational status of the CDMA/GW subscription

0.
w 01
OPERATIONAL
12
ou 3.
HYBR_GW_CHANGED_ 8 Bit mask of changed fields

2.
zh 201
FIELDS
IS_HYBR_GW_ 1 Operational status of the Hybr GW subscription

OPERATIONAL
GW_SUBS_ID 1 Active subscription-ID related to the Hybr GW service info

 1– SYS_MODEM_AS_ID_1

Log Record Formats

GW_ACTIVE_BAND 4 Indicates active band class; values are
 0 – Band Class 0 - US Cellular band (800 MHz)
 1 – Band Class 1 - US
 3 – Band Class 3 - Japanese Cellular band (800 MHz)
 4 – Band Class 4 - Korean PCS band (1800 MHz)
 5 – Band Class 5 (450 MHz)
 6 – Band Class 6 (2 GHz)
 7 – Band Class 7 (Upper 700 MHz)
 10 – Band Class 10 (Second 800 MHz)
 11 – Band Class 11 - European PAMR Band (400 MHz)
 12 – Band Class 12 - PAMR Band (800 MHz)
 14 – Band Class 14 - Band Class 14 (US PCS 1.9 GHz
Band)
 15 – Band Class 15 - Band Class 15 (1700-2100 MHz
T
n PS
-AWS)
 16 – Band Class 16 - Band Class 16 (US 2.5 GHz)
34
 17 – Band Class 17 - Band Class 17 (US 2.5 GHz
Forward Link only band)
om 8:
 18 – Band Class 18 - Band Class 18 (700 MHz Public
l.c :4
c
Safety Broadband)
.
te 13
 19 – Band Class 19 - Band Class 19 (Lower 700 MHz
band)
.7 bk t
41 -b 1 a
 40 – GSM 450 band (450 MHz)

3
 41 – GSM 480 band (480 MHz)
15
ei .0
 42 – GSM 750 band (750 MHz)

0.
w 01
 43 – GSM 850 band (850 MHz)

12
ou 3.
 44 – GSM Extended GSM (E-GSM) 900 band (900 MHz)

2.
zh 201
 45 – GSM Primary GSM ( P-GSM) 900 band (900 MHz)

 46 – GSM Railways GSM ( R-GSM) 900 band (900
MHz)
 47 – GSM DCS band (1800 MHz)
 48 – GSM PCS band (1900 MHz)
 80 – WCDMA Europe, Japan, andChina IMT 2100 band
 81 – WCDMA US PCS 1900 band
 82 – WCDMA Europe and China DCS 1800 band
 83 – WCDMA US 1700 band
 84 – WCDMA US 850 band
 85 – WCDMA Japan 800 band
 86 – WCDMA Europe 2600 band
 87 – WCDMA Europe and China 900 band
 88 – WCDMA Japan 1700 band
 110 – WLAN US 2400 MHz band
 111 – WLAN Japan 2400 MHz band
 112 – WLAN European 2400 MHz band
 113 – WLAN France 2400 MHz band
 114 – WLAN Spain 2400 MHz band
 115 – WLAN US 5000 MHz band
 116 – WLAN Japan 5000 MHz band
 117 – WLAN European 5000 MHz band
 118 – WLAN France 5000 MHz band
 119 – WLAN Spain 5000 MHz band

Log Record Formats
GW_ACTIVE_CHANNEL 2 Indicates active channel of the current serving system on

Hybr GW
GW_SRV_STATUS 4 Serving status of the Hybr GW system
TRUE_GW_SRV_ 4 Serving status of the Hybr GW system; values are:

STATUS  0 – No service
GW_SRV_DOMAIN 4 Service domain registered on the Hybr GW system; values

are:
T
n PS
34
om 8:
l.c :4
c
GW_SRV_CAPABILITY 4 Service domain registered on the Hybr GW system; values
.
te 13
are:
.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01

12
ou 3.
2.
zh 201
GW_SYS_MODE 4 System mode of Hybr GW; values are:

 1 – AMPS
 2 – CDMA
 3 – GSM
 4 – 1xEV-DO
 5 – WCDMA
 6 – GPS
 8 – WLAN
 9 – LTE

Log Record Formats

GW_ROAM_STATUS 4 Roam status of Hybr GW; values are:
 0 – OFF
 1 – ON
 2 – Flashing
 3 – Out of neighborhood
 4 – Out of building
T
n PS
GW_SYS_ID 3 See SYS_ID
GW_IS_SYS_PRL_ 1
34
MATCH
om 8:
GW_IS_SYS_ 1 Indicates whether Hybr GW system is forbidden; values
l.c :4
c
FORBIDDEN are:
.
te 13
 0 – System is not forbidden
 1 – System is forbidden
.7 bk t
41 -b 1 a
3
15
ei .0
GW_RSSI 2 RSSI of Hybr GW

0.
w 01
12
GW_IO 4 IO of Hybr GW
ou 3.
2.
zh 201
GW_SINR 1 SINR of Hybr GW
GW_PATHLOSS 2 Pathloss value of Hybr GW
GW_SIR 2 Sir value of Hybr GW
GW_RSSI2 2 RSSI value in negative dBm (signed value) of Hybr GW
GW_RSCP 2 RSCP value of Hybr GW
GW_ECIO_FOR_ 1 Indicate whether ECIO is for UI display; TRUE if UE is in

DISPLAY data call
 0 – FALSE
 1 – TRUE
GW_CELL_INFO 4 Cell Info of Hybr GW
GW_MODE_INFO 628 See Section 5.3.500.5
GW_CELL_SRV_IND 16 Holds information about Hybr GW services in current cell
GW_PS_DATA_ 1 Indicates whether the current PS data service has been

SUSPEND suspended on Hybr GW
GW_REG_REJECT_ 5 Registration rejects information of Hybr GW

INFO
GW_CIPHER_DOMAIN 4 Ciphering on CS or PS domain or both for Hybr GW

Log Record Formats
1For VERSION 1, 4 bytes, for VERSION 2 and above, 8 bytes

2For AMSS 6500 Release 5.3, 20 bytes, for AMSS 6550 Release 4.3 and above targets, 37 bytes
3This field is present only if FEATURE_UMTS_1X_HANDOVER_1XMSM or
FEATURE_UMTS_1X_HANDOVER_UMTSMSM is defined.
4This field is present only in AMSS 6550 Release 4.3 and above targets.
5This field is present only in VERSION 2 and above.
5.3.500.1 Serving system event
Enum
Event Comments
value
0 CM_SS_EVENT_SRV_CHANGED Serving system information changed
1 CM_SS_EVENT_RSSI RSSI value changed
2 CM_SS_EVENT_INFO Serving system information sent to the requesting

client
T
3 CM_SS_EVENT_REG_SUCCESS Registration success
n PS
4 CM_SS_EVENT_REG_FAILURE Registration failure
34
5 CM_SS_EVENT_HDR_RSSI 1xEV-DO RSSI value changed
om 8:
l.c :4
c
6 CM_SS_EVENT_WLAN_RSSI WLAN RSSI value changed
.
te 13
7 CM_SS_EVENT_SRV_NEW Serving system information changed
.7 bk t
41 -b 1 a
8 CM_SS_EVENT_SECONDARY_MSM 3 Invoke event callback even if the event is from

secondary MSM; used by thin client CM layer to
15
ei .0
call client callbacks for events from secondary

0.
w 01
MSM
12
ou 3.
9 CM_SS_EVENT_PS_DATA_AVAIL PS data available

2.
zh 201
10 CM_SS_EVENT_PS_DATA_FAIL Failed to resume PS data
11 CM_SS_EVENT_PS_DATA_SUCCESS Successful in resuming PS data
12 CM_SS_EVENT_WLAN_STATS Update in WLAN stats
13 CM_SS_EVENT_ORIG_THR_TBL_ Call Origination throttle table updated

UPDATE
5.3.500.2 HYBR_GW_CHANGED_FIELDS
Bit # set Mask Comments
0 CM_SS_GW_SUBS_ID_MASK Hybr GW Subscription ID
1 CM_SS_GW_SRV_STATUS_MASK GW serving status – No, limited, full
2 CM_SS_GW_TRUE_SRV_STATUS_MASK Serving status
3 CM_SS_GW_SRV_IND_MASK Service indication
4 CM_SS_GW_CELL_INFO_MASK Cell information
5 CM_SS_GW_ROAM_STATUS_MASK GW roaming status
6 CM_SS_GW_SRV_DOMAIN_MASK Srv domain on GW changed
7 CM_SS_GW_SRV_CAPABILITY_MASK Srv capability on GW changed

Log Record Formats
8 CM_SS_GW_SYS_MODE_MASK Sys mode on GW changed
9 CM_SS_GW_ACTIVE_BAND_MASK Active GW band information
10 CM_SS_GW_ACTIVE_CHANNEL_MASK Active channel information
11 CM_SS_GW_SYS_ID_MASK GW system ID
12 CM_SS_GW_MOBILITY_MGMT_MASK Mobility management information
13 CM_SS_GW_SIM_STATE_MASK SIM status
14 CM_SS_ GW_RSSI_MASK RSSI changed
15 CM_SS_ GW_RSCP_MASK RSCP changed
16 CM_SS_ GW_ECIO_MASK ECIO changed
17 CM_SS_ GW_IO_MASK IO changed
T
18 CM_SS_ GW_SINR_MASK SINR changed
n PS
19 CM_SS_ GW_SIR_MASK SIR changed
34
20 CM_SS_ GW_PATHLOSS_MASK Pathloss changed
om 8:
l.c :4
c
21 CM_SS_GW_SYS_PRL_MATCH_MASK PRLmatch indication
.
te 13
22 CM_SS_GW_SYS_FORBIDDEN_MASK Forbidden system

.7 bk t
41 -b 1 a
23 CM_SS_SIMULTANEOUS_MODE_MASK
3 Simultaneous mode
15
24 CM_SS_GW_PS_DATA_SUSPEND_MASK PS data suspend state
ei .0
0.
w 01
12
ou 3.
5.3.500.3 Changed fields

2.
zh 201
0 CM_SS_SID_MASK SID changed
1 CM_SS_NID_MASK NID changed
2 CM_SS_REG_ZONE_MASK Registration zone changed

3 CM_SS_PACKET_ZONE_MASK Packet zone changed
4 CM_SS_BS_P_REV_MASK Base station P-Rev changed
5 CM_SS_P_REV_IN_USE_MASK P-Rev in use changed
6 CM_SS_CCS_SUPPORTED_MASK Concurrent services supported value changed
7 CM_SS_SRV_STATUS_MASK Serving status changed
8 CM_SS_SRV_DOMAIN_MASK Service domain changed
9 CM_SS_SRV_CAPABILITY_MASK Systems service capability changed
10 CM_SS_SYS_MODE_MASK System mode changed
11 CM_SS_ROAM_STATUS_MASK Roaming status changed
12 CM_SS_SYS_ID_MASK SYS_ID changed
13 CM_SS_SRV_IND_MASK Service indicator changed

Log Record Formats

14 CM_SS_MOBILITY_MGMT_MASK Mobility management changed
15 CM_SS_IDLE_DIGITAL_MODE_MASK Idle Digital mode changed
16 CM_SS_SIM_STATE_MASK SIM card status changed
17  CM_SS_PLMN_FORBIDDEN_MASK Forbidden PLMN/system

 CM_SS_SYS_FORBIDDEN_MASK
18 CM_SS_PS_DATA_SUSPEND_MASK PS data suspend changed
19 CM_SS_UZ_CHANGED_MASK UZ values changed
20 CM_SS_HDR_SRV_STATUS_MASK 1xEV-DO serving status changed
21 CM_SS_HDR_ROAM_STATUS_MASK 1xEV-DO roaming status changed
22 CM_SS_MAIN_BCMCS_SRV_ BCMCS service supported value changed

SUPPORTED_MASK
T
n PS
23 CM_SS_MAIN_BCMCS_SRV_STATUS_ BCMCS service status on 1X changed
MASK
34
24 CM_SS_HYBR_HDR_BCMCS_SRV_ BCMCS service supported value for 1xEV-DO
om 8:
SUPPORTED_MASK l.c :4changed
. c
25 CM_SS_HYBR_HDR_BCMCS_SRV_ BCMCS service status on 1xEV-DO changed
te 13
STATUS_MASK
.7 bk t
41 -b 1 a
26 CM_SS_BASE_STATION_PARMS_ 3 Base station parameters changed

CHGD_MASK
15
ei .0
27 CM_SS_WLAN_SRV_STATUS_MASK WLAN serving status changed

0.
w 01
12
28 CM_SS_WLAN_BSS_INFO_MASK WLAN BSS information changed

ou 3.
2.
zh 201
29 CM_SS_ORIG_THR_STATUS_MASK Origination throttle status changed
30 CM_SS_HDR_SYS_ID_MASK 1xEV-DO SYS_ID changed
31 CM_SS_MCC_MASK MCC changed
32 CM_SS_IMSI_11_12_MASK IMSI changed
33 CM_SS_PSIST_CHGD_MASK Psist information changed
34 CM_SS_ACTIVE_BAND_MASK Active band information
35 CM_SS_HDR_ACTIVE_PROT_MASK HDR active protocol is changed
36 CM_SS_WLAN_LINK_QUAL_MASK WLAN LINK QUALITY has changed in the

WLAN_STATS ss event
37 CM_SS_WLAN_TX_RX_STATS_MASK WLAN TX RX stats have changed in the WLAN

STATS ss event
38 CM_SS_TRUE_SRV_STATUS_MASK True service status changed
39 CM_SS_CELL_INFO_MASK Cell information changed
40 CM_SS_GAN_STATE_MASK UMA GAN client state changed
41 CM_SS_GAN_CONN_STATUS_MASK UMA GAN connection status changed
42 CM_SS_GAN_SIG_CHAN_STATUS_ UMA GAN signal channel status changed

MASK

Log Record Formats
43 CM_SS_GAN_MODE_DISPLAY_MASK UMA GAN indication whether WLAN or GERAN

becomes the active RAT
44 CM_SS_GAN_ERROR_PROMPT_MASK UMA GAN error category
45 ... ...
46 ... ...
47 ... ...
48 ... ...
49 ... ...
50 ... ...
51 CM_SS_SUBS_ID_MASK CDMA/GW subscription ID
T
n PS
5.3.500.4 SYS_ID
34
om 8:
ID_TYPE 4 SYS_ID type; values are:
l.c :4
c
0 – Undefined
.

te 13
 1 – UMTS
 2 – IS-95
.7 bk t
41 -b 1 a
 3 – IS-856
3
15
 4 – WLAN
ei .0
0.
w 01
12
ou 3.
ID 33 See Section 5.3.500.4.1

2.
zh 201
5.3.500.4.1 ID
IS95 4 See Section 5.3.500.4.1

IS856 16 IS-856 System ID
PLMN 3 See Section 5.3.500.4.1
SSID 33 See Section 5.3.500.4.1
PLMN_LAC 5 See Section 5.3.500.4.1
5.3.500.4.1.1 IS95
SID 2 System ID
NID 2 Network ID

Log Record Formats
5.3.500.4.1.2 PLMN
IDENTITY 3 Identity of the PLMN
5.3.500.4.1.3 SSID
LEN 1 Length of SSID; if LEN = 0 SSID, is broadcast SSID
SSID 32 SSID of the WLAN system
5.3.500.4.1.4 PLMN_LAC
T
n PS
PLMN 3 PLMN, see Section 5.3.500.4.1
34
LAC 2 Get comments
om 8:
l.c :4
c
5.3.500.5 MODE_INFO
.
te 13

.7 bk t
41 -b 1 a
3
GW_INFO 563 GSM/WCDMA/LTE mode information; see Section 5.3.500.5.1
15
ei .0
CDMA_INFO 65 CDMA mode information; see Section 5.3.500.5.1

0.
w 01
12
ou 3.
5.3.500.5.1 GW_INFO
2.
zh 201
BIT_ERR_RATE 1 Bit error rate/Rx quality in GSM
SIM_STATE 4 Current state of the SIM; values are:

 0 – Not available
 1 – Available
 2 – Invalid for CS services
 3 – Invalid for PS services
 4 – Invalid for CS and PS services
PLMN_FORBIDDEN 1 Indicates whether the PLMN is forbidden; values

are:
 0 – PLMN is not forbidden
 1 – PLMN is forbidden
MM_INFORMATION 557 Mobility management information; see

Section 5.3.500.5.1

Log Record Formats
5.3.500.5.1.1 MM_INFORMATION
PLMN_AVAIL 1 Indicates whether PLMN is available
FULL_NAME_AVAIL 1 Indicates whether full name is available
SHORT_NAME_AVAIL 1 Indicates whether short name is available
UNIV_TIME_AND_TIME_ZONE_ 1 Indicates whether universal time and time zone

AVAIL information is available
TIME_ZONE_AVAIL 1 Indicates whether time zone information is available
LSA_IDENTITY_AVAIL 1 Indicates whether LSA identity is available
DAYLIGHT_SAVING_ADJ_AVAIL 1 Indicates whether daylight saving adjustment

information is available
PLMN 3 PLMN information; see Section 5.3.500.4.1
T
n PS
FULL_NAME 261 Full name; see Section 5.3.500.5.1.2
SHORT_NAME 261 Short name; see Section 5.3.500.5.1.3
34
om 8:
UNIV_TIME_AND_TIME_ZONE 10 Universal time and time zone; see
Section 5.3.500.5.1.4
l.c :4
. c
te 13
TIME_ZONE int 4 Time zone
.7 bk t
LSA_IDENTITY 7 LSA identity; see Section 5.3.500.5.1.5

41 -b 1 a
3
DAYLIGHT_SAVING_ADJ 4 Daylight saving adjustment; values are:
15
ei .0
 0 – No adjustment
0.
w 01
 1 – Plus 1 hr
12
ou 3.
 2 – Plus 2 hr
2.
zh 201
5.3.500.5.1.2 FULL_NAME
LENGTH 1 Number of characters in the full name
CODING_SCHEME 4 Coding scheme used to encode the full name of the

network; values are:
 0 – Cell Broadcast data coding, default alphabet,
language unspecified
 1 – UCS2 coding scheme
 2 – Reserved
ADD_COUNTRY_INITIALS 1 Indicates whether MS should add the country

initials to the full name of the network; values are:
 0 – Do not add country initials
 1 – Add country initials
NAME 255 Full name of the network

Log Record Formats
5.3.500.5.1.3 SHORT_NAME
LENGTH 1 Number of characters in the full name
CODING_SCHEME 4 Coding scheme used to encode the full name of the

network; values are:
 0 – Cell Broadcast data coding, default alphabet,
language unspecified
 1 – UCS2 coding scheme
 2 – Reserved
ADD_COUNTRY_INITIALS 1 Indicates whether MS should add the country initials

to the full name of the network; values are:
 0 – Do not add country initials
 1 – Add country initials
T
n PS
NAME 255 Full name of the network
34
om 8:
5.3.500.5.1.4 UNIV_TIME_AND_TIME_ZONE l.c :4
. c
Each field is received as Binary Coded Digits as specified in [S16] and [S25].
te 13
.7 bk t

41 -b 1 a
3
15
YEAR 1 Year
ei .0
0.
w 01
MONTH 1 Month
12
ou 3.
DAY 1 Day
2.
zh 201
HOUR 1 Hour
MINUTE 1 Minute
SECOND 1 Second
TIME_ZONE 4 Time Zone
5.3.500.5.1.5 LSA_IDENTITY
TYPE 4 Localized Service Area identity type; values are:

 0 – PLMN
 1 – Universal
IDENTITY 3 Identity of the LSA

Log Record Formats
5.3.500.5.1.6 CDMA_INFO
BAND_CLASS 4 Band class; values are:

 0 – US Cellular (800 MHz)
 1 – US
 3 – Japanese Cellular (800 MHz)
 4 – Korean PCS (1800 MHz)
 5 – 450 MHz
 6 – 2 GHz
 7 – 700 MHz
 8 – 1800 MHz
 9 – 900 GHz
 10 – Second 800 MHz
 11 – European PAMR (400 MHz)
 12 – PAMR (800 MHz)
 14 – US PCS 1.9GHz Band
T
 15 – 39 Reserved
n PS
 40 – GSM 450 (450 MHz)
34
 41 – GSM 480 (480 MHz)
 42 – GSM 750 (750 MHz)
om 8:
 43 – GSM 850 (850 MHz)
l.c :4
c
 44 – GSM Extended GSM (E-GSM) 900 (900 MHz)
.
te 13
 45 – GSM Primary GSM (P-GSM) 900 (900 MHz)
 46 – GSM Railways GSM (R-GSM) 900 (900 MHz)
.7 bk t
41 -b 1 a
 47 – GSM DCS (1800 MHz)

3
 48 – GSM PCS (1900 MHz)
15
ei .0
0.
w 01
 80 – WCDMA IMT 2000 (2000 MHz)

12
ou 3.
 81 – WCDMA PCS (1900 MHz)

2.
zh 201
 82 – WCDMA 1700 (1700 MHz)

 83 – WCDMA 1700 (1700 MHz)
 84 – WCDMA 850 (850 MHz)
 85 – WCDMA 800 (800 MHz)
 110 – WLAN US 2400 MHz
 111 – WLAN JAPAN 2400 MHz
 112 – WLAN EUROPEAN 2400 MHz
 113 – WLAN FRANCE 2400 MHz
 114 – WLAN SPAIN 2400 MHz
 115 – WLAN US 5000 MHz
 116 – WLAN JAPAN 5000 MHz
 117 – WLAN EUROPEAN 5000 MHz
 118 – WLAN FRANCE 5000 MHz
 119 – WLAN SPAIN 5000 MHz

Log Record Formats
BLOCK_OR_ 4 Block or system; values are:

SYSTEM  0 – PCS block A
 1 – PCS block B
 2 – PCS block C
 3 – PCS block D
 4 – PCS block E
 5 – PCS block F
 6 – Cellular system A
 7 – Cellular system B
 8 – PCS block G
 9 – PCS block H
 10 – PCS block I
 11 – PCS block J
 12 – PCS block K
T
n PS
REG_ZONE 2 12-bit registration zone
PACKET_ZONE 2 8-bit packet zone
34
BS_P_REV 1 8-bit base station p_rev
om 8:
l.c :4
c
P_REV_IN_USE 1 8-bit p_rev in use the lesser of BS p_rev and mobile p_rev
.
te 13
IS_REGISTERED 1 Whether the mobile is registered on the current system;

values are:
.7 bk t
41 -b 1 a
3
 0 – Not registered
15
 1 – Registered
ei .0
0.
w 01
12
ou 3.
CCS_SUPPORTED 1 Whether concurrent services is supported; values are:

2.
zh 201
 0 – Not supported
 1 – Supported
UZ_ID 4 User zone Identification of the selected user zone
UZ_NAME 34 User zone name of the selected user zone. See

Section 5.3.500.5.1
SRCH_WIN_N 1 Neighbor set window search size
BASE_LAT 4 Base station latitude [0.25 sec and already sign extended]
BASE_LONG 4 Base station longitude [0.25 sec and already sign extended]
BASE_ID 2 Base station identification number
5.3.500.5.1.7 UZ_NAME
UZ_NAME_ENCODING 1 Encoding scheme
UZ_NAME_N_OCTETS 1 Number of octets
UZ_NAME 32 UZ name

Log Record Formats
5.3.500.6 WLAN_BSS_INFO
CHAN 2 Channel on which this BSS provides service
BAND 4 Band in which this BSS provides service
BSS_TYPE 4 Type of BSS; values are:

 0 – Ad-hoc type BSS
 1 – Infrastructure mode BSS
 2 – Any BSS mode type
BSSID 8 BSS ID
SSID 33 SS ID see Section 5.3.500.4.1
RSSI 2 Measured RSSI of the BSS
T
TECH 4 WLAN technology in use; values are:
n PS
 0 – WLAN 802.11a technology
 1 – WLAN 802.11b technology
34
 2 – WLAN 802.11g technology
om 8:
l.c :4
. c
te 13
5.3.500.7 WLAN_BSS_STATS
.7 bk t
41 -b 1 a
3
15
ei .0
CURRENT_XMIT_ 4 Xmit rate of the last packet successfully transmitted; values

0.
w 01
RATE are:
12
ou 3.
 0 – 1 Mbps
2.
zh 201
 1 – 2 Mbps
 2 – 5.5 Mbps
 3 – 11 Mbps
TOTAL_TX_BYTES 4 Number of bytes transmitted over the WLAN interface
TOTAL_RX_BYTES 4 Number of bytes received over the WLAN interface

Log Record Formats
5.3.500.8 MAIN_THR_STATUS/HDR_THR_STATUS
SS_THR_STATUS 1 Throttle status of the current SS
THR_UPTIME 4 Throttling time period
IDX 4 Index in the throttle_time table; used internally by CM to keep

track of the next throttle time increment
CALL_STATUS 4 Call status; values are:

 0 – MIP success
 1 – PDSN, PPP setup failure
 2 – MIP solicitation timeout
 3 – MIP RRQ timeout
 4 – MIP FA failure
 5 – MIP HA failure
 6 – MIP fail due to any other network reason
T
 7 – PPP success
n PS
 8 – PPP authorization failure
 9 – PPP LCP timeout
34
 10 – PPP IPCP timeout
om 8:
 11 – PPP fail due to any other network reason
l.c :4
c
 12 – Received intercept from BS
.
te 13
 13 – SO reject
 14 – Connection deny with deny code busy or general
.7 bk t
 15 – Billing or auth failure

41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.501 Multiple Carrier AFC Log Version 6 (LOG_CODE 0x1350)

This log contains AFC parameters and VCO and rotator accumulator values for all active
carriers.
Version 1 Version
logging client ID 1 Logging client ID
ctrl client ID 1 Control client ID
carrier mask 1 Carrier mask
time stamp 8 System time
AFC mode 1 AFC mode
AGC gain 1 AFT Gain mode
T
n PS
SRL indicator 1 Slew rate limiting indicator
cross mode 1 Finger Cross mode
34
vco slope 2 VCO slope
om 8:
l.c :4
c
temp
.
te 13
xo 4 XO
.7 bk t
41 -b 1 a
pmic 4 PMIC
3
15
ei .0
pa 4 PA
0.
w 01
Num freq entry 4 Number of frequency entries

12
ou 3.
Repeat per carrier (need to calculate number of carriers based on carrier rmask)
2.
zh 201
band 1 Band class
reserved 1 Reserved
chan 2 Channel number
carrier freq 4 Carrier frequency
Repeat per Num freq entry
vco acc 2 VCO accumulator
delta time 2 Time difference
signal strength 2 Signal strength
Repeat per carrier
rot acc 2 Rotator accumulator
This log is generated every 26 ms. The worst-case packet size is 12 + 34 + 8*3 + 8*(6+2*3) =
166 bytes.

Log Record Formats
5.3.504 LOG_MDSP_LOG_CHUNKS_C (LOG_CODE 0x1353)

This packet contains an array of mDSP log chunks. These chunks are generated by the mDSP
and sent to diag for postprocessing by the firmware team. Each chunk is a 64-word mDSP log
packet that can be postprocessed by internal mDSP team scripts.
The generation rate of this log varies with how it is used by software. In general, it will be
generated rarely and only when an mDSP error is detected. During certain debugging modes,
however, it may be generated as often as every 10 ms.
T
n PS
num_chunks 2 Number of chunks to follow
34
chunks[10] num_chunks x 128 Array of mDSP log chunks
om 8:
l.c :4
. c
te 13
5.3.505 LOG_WLAN_RSSI_UPDATE_C (LOG_CODE 0x1354)

.7 bk t
41 -b 1 a
This packet contains the current rssi value that is sent to Diag. It is generated every 2 sec and the
3
15
worst-case packet size is 1 bytes.
ei .0
0.
w 01
12

ou 3.
2.
zh 201
rssi 1 1 byte field to store the current RSSI value
5.3.506 LOG_WLAN_LL_STAT_C (LOG_CODE 0x1355)

This is for logging the Link Layer statistics on Diag. The log is generated every 2 sec and the
worst-case packet size is 88 bytes. The structure is scalable, and 100 bytes is the structure size for
Version 1.
Length
Field Description
(bytes)
version 1 Current version of the link layer statistics; currently, value is 0
reserved 3 Bytes used as padding for 4-byte alignment

Log Record Formats
Length
Field Description
(bytes)
rate_mask 4 Bit mask representing the rate for the statistics; can have one
of the following values:
 Rate 1 Mbps = 0x0001
 Rate 5.5 Mbps = 0x0004
 Rate 11 Mbps = 0x0020
 Rate 12 Mbps = 0x0040
 Rate 18 Mbps = 0x0080
 Rate 24 Mbps = 0x0100
 Rate 36 Mbps = 0x0200
 Rate 48 Mbps = 0x0400
 Rate 54 Mbps = 0x0800
 All rates = 0x0FFF
T
n PS
34
retry_cnt 4 Total number of packets that were successfully transmitted
with retries
om 8:
tx_frm_cnt 4
l.c :4
Total number of packets that were successfully transmitted
. c
(with and without retries, including multicast, broadcast)
te 13
mcbc_tx_frm_cnt 4 Total number of packets that were successfully transmitted

.7 bk t
41 -b 1 a
(with and without retries, only multicast, broadcast)

3
15
ei .0
rx_frm_cnt 4 Total number of packets that were successfully received (after

appropriate filter rules including multicast, broadcast)
0.
w 01
12
ou 3.
mcbc_rx_frm_cnt 4 Total number of multicast, and broadcast packets that were

2.
zh 201
successfully received (after appropriate filter rules)
uc_rx_bytes_cnt 4 Total number of unicast bytes that were received successfully

(after appropriate filter rules)
uc_tx_bytes_cnt 4 Total number of unicast bytes that were transmitted

successfully
mcbc_rx_bytes_cnt 4 Total number of multicast and broadcast bytes that were

received successfully (after appropriate filter rules)
mcbc_tx_bytes_cnt 4 Total number of bytes that were transmitted successfully using

multicast and broadcast packets
num_rx_frm_crc_ok 4 Total number of successfully received frames without CRC

Error (after appropriate filter rules)
num_rx_bytes_crc_ok 4 Total number of bytes received successfully for frames without

CRC error (after appropriate filter rules)
num_cor_bit_err_crc_ok 4 Total number of corrected bit errors for all received frames with
no CRC error (after appropriate filter rules)
frm_dup_cnt 4 Total number of duplicate frames received successfully (after

appropriate filter rules)
num_rx_frm_crc_err 4 Total number of received frames with CRC error (before filter
rules)

Log Record Formats
Length
Field Description
(bytes)
rts_fail_cnt 4 Total number of RTS/CTS sequence failures for transmission
of a packet
ack_fail_cnt 4 Total number packets that failed to transmit because of no

ACK from the remote entity
rts_succ_cnt 4 Total number of RTS/CTS sequence success for transmission

of a packet
fail_cnt 4 Total number packets failed to Tx
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.507 QoS state logging (LOG_CODE 0x1356)

This log packet logs the state of a QoS instance along with a code which may provide additional
information about why QoS instance is in that state. Each QoS instance is uniquely identified by
QOS_ID.
Length
Field Description
(bytes)
VERSION 1 Version of this log packet; currently 2
QOS_STATE 1 Specifies the current state of a QoS instance; can be one of the following:
 0x0 – QOS_GRANTED; indicates that QoS is granted in response to
mobile initiated operations such as QOS_REQUEST, QOS_MODIFY,
QOS_RESUME, or coming back from dormancy because of up link data
 0x1 – QOS_NW_MODIFIED; indicates that the network has modified an
already granted QoS
 0x2 – QOS_SUSPEND; indicates that QoS is suspended
T
 0x3 – QOS_RELEASED; indicates that QoS is released and this QoS
n PS
instance is no longer available
 0x4 – QOS_MODIFY_ACCEPTED; indicates that mobile initiated
34
QOS_MODIFY procedure is accepted by the network
om 8:
 0x5 – QOS_MODIFY_REJECTED; indicates that mobile initiated
QOS_MODIFY procedure is rejected by the network
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
Length
Field Description
(bytes)
INFO CODE 1 An enum which provides further information about QoS state; can be one of
the following:
 0x00 – DSS_IFACE_IOCTL_EIC_NOT_SPECIFIED; indicates that extra
information is not available
 0x01 - DSS_IFACE_IOCTL_EIC_QOS_NOT_SUPPORTED; indicates
that QoS is not supported in this system
 0x02 - DSS_IFACE_IOCTL_EIC_QOS_NOT_AVAILABLE; indicates that
network is unable to grant QoS
 0x03 – DSS_IFACE_IOCTL_EIC_QOS_INTERNAL_INVALID_
PARAMS; indicates that QoS parameters are invalidated locally by the
mobile
 0x04 – DSS_EIC_QOS_INTERNAL_CALL_ENDED; indicates that the
call is terminated locally by the mobile
 0x05 – DSS_IFACE_IOCTL_EIC_QOS_INTERNAL_ERROR; indicates
that the mobile encountered an internal error during QoS processing
T
 0x06 – DSS_IFACE_IOCTL_EIC_QOS_INSUFFICIENT_LOCAL_
n PS
RESOURCES; indicates that QoS request is failed because of
insufficient resources on the mobile
34
 0x07 – DSS_IFACE_IOCTL_EIC_QOS_TIMED_OUT_OPERATION;
indicates that QoS operation is timed out
om 8:
 0x08 – DSS_IFACE_IOCTL_EIC_QOS_INTERNAL_UNKNOWN_
l.c :4
. c
CAUSE_CODE; indicates that an internal error occurred but the cause is
te 13
unknown
 0x81 – DSS_IFACE_IOCTL_EIC_QOS_NOT_SUPPORTED; indicates
.7 bk t
41 -b 1 a
that QoS is not supported in this system

3
15
 0x82 – DSS_IFACE_IOCTL_EIC_QOS_NOT_AVAILABLE; indicates
ei .0
that the network is unable to grant QoS

0.
w 01
 0x83 – DSS_IFACE_IOCTL_EIC_QOS_NOT_GUARANTEED; indicates

12
ou 3.
that QoS is not guaranteed

2.
zh 201
 0x84 – DSS_IFACE_IOCTL_EIC_QOS_INSUFFICIENT_NET_
RESOURCES; indicates that QoS request is failed because of
insufficient network resources
 0x85 – DSS_IFACE_IOCTL_EIC_QOS_AWARE_SYSTEM; indicates
that the mobile has handed off to a QoS aware system
 0x86 – DSS_IFACE_IOCTL_EIC_QOS_UNAWARE_SYSTEM; indicates
that the mobile has handed off to a QoS unaware system
 0x87 – DSS_IFACE_IOCTL_EIC_QOS_REJECTED_OPERATION;
indicates that QoS operation is rejected by the network
 0x88 – DSS_IFACE_IOCTL_EIC_QOS_WILL_GRANT_WHEN_QOS_
RESUMED; indicates that the network will grant QoS only when QoS is
resumed by the application
 0x89 – DSS_IFACE_IOCTL_EIC_QOS_NETWORK_CALL_ENDED;
indicates that the call is terminated by the network
 0x8A – DSS_IFACE_IOCTL_EIC_QOS_NETWORK_SVC_NOT_
AVAILABLE; indicates that the mobile is not camped on any network.
 0x8B – DSS_IFACE_IOCTL_EIC_QOS_NETWORK_L2_LINK_
RELEASED; indicates that layer 2 link is torn down by the network
 0x8C – DSS_IFACE_IOCTL_EIC_QOS_NETWORK_L2_LINK_
REESTAB_REJ; indicates that the network rejected the mobile's attempt
to re-establish a layer 2 link
 0x8D – DSS_IFACE_IOCTL_EIC_QOS_NETWORK_L2_LINK_
REESTAB_IND, indicates that the mobile's attempt to re-establish a
layer 2 link is successful
 0x8E – DSS_IFACE_IOCTL_EIC_QOS_NETWORK_UNKNOWN_
CAUSE_CODE; indicates that a network error occurred but the cause is
unknown

Log Record Formats
Length
Field Description
(bytes)
RESERVED 1 A reserved byte; defined in order to make the log packet word aligned
QOS_ID 4 An ID which uniquely identifies a QoS instance
5.3.508 Reserved (LOG_CODE 0x1357 – 0x1358))
5.3.510 Logging Requested QoS (Log Code 0x135A)

QoS requested by an application is logged using this log packet. This log packet is generated
T
n PS
when an application issues DSS_IFACE_IOCTL_QOS_REQUEST, or
DSS_IFACE_IOCTL_QOS_REQUEST_EX ioctls and if the requested QoS passes validation
34
om 8:
l.c :4
c
.
te 13
VERSION 1 Version of this log packet; current version is 3

.7 bk t
41 -b 1 a
QOS_ID 4 ID which uniquely identifies a QoS instance

3
15
ei .0
OPCODE 1 Specifies whether QoS is requested or configured; value can be

0.
w 01
12
 0x0 – QOS_REQUESTED
ou 3.
 0x1 – QOS_CONFIGURED
2.
zh 201
QOS_MASK 2 Bit mask which indicates whether QoS is requested in Rx and Tx

directions:
 Bit 1 (LSB) is ON – QoS is requested in Rx direction; also
means that the required flow specification is specified in Rx
direction
 Bit 2 is ON – Minimum required flow specification is specified
in Rx direction
 Bit 3 is ON – Auxiliary flow specifications are specified in Rx
direction
 Bit 4 is ON – QoS is requested in Tx direction; also means
that the required flow specification is specified in Tx direction
 Bit 5 is ON – Minimum required flow specification is specified
in Tx direction
 Bit 6 is ON – Auxiliary flow specifications are specified in Tx
direction
All bits could be ON indicating that QoS is requested in both
directions and that the minimum required and auxiliary flow
specifications are also specified in each direction; if a bit is OFF,
the corresponding subrecord is not logged in that log packet;
unlike bits 1 and 4, bits 2, 3, 5, and 6 do not indicate whether
QoS is requested in a particular direction; bits 2, 3, 5, and 6
convey extra information about logged flow specifications; see
Section 5.3.510.1

Log Record Formats

NETWORK_ Variable Null terminated description of an interface on which QoS is
INTERFACE requested
RX_QOS_SPEC Variable Present only if bit 1 of QOS_MASK is ON.

Specifies the QoS requested in Rx direction; see
Section 5.3.510.1
TX_QOS_SPEC Variable Present only if bit 4 of QOS_MASK is ON.

Specifies the QoS requested in Tx direction; see
Section 5.3.510.1
5.3.510.1 QOS_SPEC subrecord

This sub record specifies the format of a requested QoS specification. It contains one or more
flow specifications and one filter specification containing one or more filters. Both
RX_QOS_SPEC and TX_QOS_SPEC fields adhere to the format defined in this section.
T
n PS
34
FLOW_SPEC_CNT 1 Number of requested flow specifications; a maximum of 7
om 8:
flow specifications can be logged; flow specifications are
l.c :4
c
logged in decreasing order of desirability; the first logged
.
te 13
flow specification is the most preferable one; if n flow
specifications are logged, where n > 1, the last flow
.7 bk t
specification is always the minimum required one if the

41 -b 1 a
3
QOS_MASK indicates that the minimum required flow
15
specification is requested; otherwise it is an auxiliary flow
ei .0
specification; excluding the most preferred and the

0.
w 01
minimum required flow specifications, everything else is an

12
ou 3.
auxiliary flow specification

2.
zh 201
FLTR_CNT 1 Number of filters in the filter specification installed by an

application; at most 8 filters are logged
FLOW_SPEC Variable Record describing a flow specification; each flow

specification contains the QoS parameters requested by an
application; number of flow specifications present in the log
is specified by FLOW_SPEC_CNT; see Section 5.3.510.1.1
FLTR Variable Record describing a filter. Number of filters present in the

log is specified by FLTR_CNT; see Section 5.3.510.1.2

Log Record Formats
5.3.510.1.1 FLOW_SPEC subrecord

This sub record defines a flow specification, i.e. a set of QoS parameters requested by an
application.
FIELD_MASK 2 or 4 A bit mask which indicates the QoS parameters, requested by an

application and are present in the log; values are:
 Bit 1 (LSB) is ON – TRAFFIC_CLASS is present
 Bit 2 is ON – DATA_RATE is present
 Bit 3 is ON – LATENCY is present
 Bit 4 is ON – LATENCY_VARIATION is present
 Bit 5 is ON – PKT_ERR_RATE is present
 Bit 6 is ON – MIN_POLICED_PKT_SIZE is present
 Bit 7 is ON – MAX_ALLOWED_PKT_SIZE is present
 Bit 8 is ON – RESIDUAL_BIT_ERR_RATE is present
 Bit 9 is ON – TRAFFIC_HANDLING_PRIORITY is present
T
 Bit 10 is ON – PROFILE_ID is present
n PS
 Bit 11 is ON – USER_PRIORITY is present
 Bit 12 is ON – MIN_SERVICE_INTERVAL is present
34
 Bit 13 is ON – MIAX_SERVICE_INTERVAL is present
om 8:
 Bit 14 is ON – INACTIVITY_INTERVAL is present
l.c :4
c
 Bit 15 is ON – NOMINAL_SDU_SIZE is present
.
te 13
 Bit 16 is ON – FLOW_PRIORITY is present
As these bits are not mutually exclusive, any combination of these
.7 bk t
41 -b 1 a
could be ON in a log. Also note that if a bit is OFF, the

3
corresponding subrecord is not logged in that log packet.
15
ei .0
If VERSION is 3, the size of FIELD_MASK is 4 bytes.

0.
w 01
12
TRAFFIC_CLASS 1 Indicates the traffic pattern of an application’s data; value is one

ou 3.
of:
2.
zh 201
 0x0 – IP_TRF_CLASS_CONVERSATIONAL
 0x1 – IP_TRF_CLASS_STREAMING
 0x2 – IP_TRF_CLASS_INTERACTIVE
 0x3 – IP_TRF_CLASS_BACKGROUND
LATENCY 4 Specifies the desired latency in ms
LATENCY_ 4 Specifies the desired jitter in ms

VARIATION
PKT_ERR_RATE 4 Specifies the error rate which application can tolerate; see
Section 5.3.510.1.1.4
MIN_POLICED_ 4 Specifies the minimum packet size (in bytes) that will be policed
PKT_SIZE for QoS
MAX_ALLOWED_ 4 Specifies the maximum packet size, in bytes, allowed while

PKT_SIZE guaranteeing QoS

Log Record Formats

RESIDUAL_BIT_ 2 Specifies the undetected bit error ratio for each IP flow in the
ERR_RATE delivered packets; value can be one of the following:
TRAFFIC_ 1 Defines the relative priority between various subflows of an IP
T
n PS
HANDLING_ flow; value can be one of the following:
PRIORITY  0x0 – Priority level is 1
34
om 8:
l.c :4
. c
te 13
PROFILE_ID 2 Specifies a profile which predefines a set of QoS parameters
.7 bk t
USER_PRIORITY 1 Specifies user priority requested by the application; value can be

41 -b 1 a
3
15
ei .0
 0x0 – USER_PRI_BEST_EFFORT
0.
w 01
 0x1 – USER_PRI_BACKGROUND
12
 0x2 – USER_PRI_RESERVED
ou 3.
 0x3 – USER_PRI_EXCELLENT_EFFORT
2.
zh 201
 0x4 – USER_PRI_CONTROLLED_LOAD
 0x5 – USER_PRI_VIDEO
 0x6 – USER_PRI_VOICE
 0x7 – USER_PRI_NETWORK_CONTROL
MIN_SERVICE_ 4 Specifies the minimum interval in microseconds between two

INTERVAL service periods
MAX_SERVICE_ 4 Specifies the maximum interval in microseconds between two

INTERVAL service periods
INACTIVITY_ 4 Specifies the minimum time of inactivity (no data transfer) in

INTERVAL microseconds on a QoS stream before the stream is torn down
NOMINAL_SDU_ 5 Specifies the nominal packet size in which an application is

SIZE planning to use; see Section 5.3.510.1.1.5 for format description
FLOW_PRIORITY 1 Specifies the priority of this QoS instance relative to other

a instances.
DATA_RATE Variable Specifies the desired data rate; see Section 5.3.510.1.1.1 for
format description
a Only present if VERSION is 3 or above.

Log Record Formats
5.3.510.1.1.1 DATA_RATE subrecord

This subrecord defines the data rate at which the data is transferred over the network. Data rate
can be specified in one of the two ways - a set of maximum rate and guaranteed rate values or in
the token bucket parameter style.
DATA_RATE_ 1 Mask which indicates the specified data rate style; values are:
TYPE  0x0 – MIN_MAX_TYPE record is present
 0x1 – TOKEN_BUCKET_TYPE record is present
MIN_MAX_TYPE 8 Specifies the data rate in MIN_MAX style; see

TOKEN_ 12 Specifies the data rate in TOKEN_BUCKET style; see

BUCKET_TYPE Section 5.3.510.1.1.3 for format description
T
n PS
5.3.510.1.1.2 MIN_MAX_TYPE subrecord
34
This subrecord defines the data rate in MIN_MAX style. Maximum and guaranteed bit rates are
om 8:
specified. l.c :4
. c
te 13
.7 bk t
41 -b 1 a
MAX_DATA_ 4 Maximum data rate, in bits/sec, at which an application would send

3
RATE data
15
ei .0
GUARANTEED_ 4 Minimum data rate, in bits/sec, at which an application would send

0.
w 01
DATA_RATE data
12
ou 3.
2.
zh 201
5.3.510.1.1.3 TOKEN_BUCKET_TYPE subrecord

This sub record defines the data rate in token bucket style.
PEAK_DATA_ 4 Maximum rate, in bits/sec, at which the data can be transmitted

RATE when token bucket is full
TOKEN_RATE 4 Rate, in bits/sec, at which the tokens are put in the token bucket
TOKEN_BUCKET_ 4 Maximum number of tokens, in bytes, that can be accumulated at

SIZE any instance
5.3.510.1.1.4 PKT_ERR_RATE subrecord

This parameter defines the maximum packet error rate that can be tolerated by an IP flow. The
error rate is defined as a ratio of packets dropped or corrupted due to errors to total packets
transmitted and is specified by two parameters – a multiplier m and a negative of base 10
exponent p. So the packet error rate is defined as, E = m * 10-p.

Log Record Formats
MULTIPLIER 2 Multiplier component of packet error rate
EXPONENT 2 Exponent component of packet error rate
5.3.510.1.1.5 NOMINAL_SDU_SIZE subrecord

This parameter defines the nominal packet size which an application is planning to use.
IS_FIXED 1 Specifies whether an application always sends fixed size packets,

i.e., all the packets sent by this application have same size
SIZE 4 Nominal size of each packet in bytes
T
5.3.510.1.2 FLTR subrecord
n PS
This subrecord defines a filter which is used to classify data in to IP flows. Data stream, which
34
matches the specified parameters, is classified as an IP flow and the corresponding flow
om 8:
specification is applied to that IP flow.
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
IP_VERSION 1 Mask which indicates whether the filter’s IP version is IPV4 or

3
IPV6; can be one of the following:
15
ei .0

0.
w 01

12
ou 3.
2.
zh 201
V4_FLTR Variable Specifies an IPV4 filter; see Section 5.3.510.1.2.1 for format
description
V6_FLTR Variable Specifies an IPV6 filter; see Section 5.3.510.1.2.4 for format
description

This subrecord defines an IPV4 filter. All the requested parameters are specific to the IP V4
packets.
V4_FIELD_MASK 1 A bit mask which indicates the parameters requested in a filter.

 Bit 4 is ON – V4_TOS is present
As these values are not mutually exclusive, any combination of
these can be ON in a single log. Note: If a bit is OFF, the
V4_SRC_ADDR 8 Specifies the source address of a filter; all the packets which
originate from this address are filtered; see Section 5.3.510.1.2.2

Log Record Formats

V4_DST_ADDR 8 Specifies the destination address of a filter; all the packets which
are destined for this address are filtered; see
V4_TOS 2 Specifies the type of service field of a filter; all the packets
matching this value are filtered; see Section 5.3.510.1.2.3 for
format description
V4_NEXT_HDR_P 1 Indicates that an application wants to filter based on higher level

ROTOCOL layer protocol; value can be one of the following:
TCP_FLTR Variable Specifies TCP parameters in a filter; see Section 5.3.510.1.2.7 for
format description
UDP_FLTR Variable Specifies UDP parameters in a filter; see Section 5.3.510.1.2.9 for
T
n PS
format description
34
om 8:
l.c :4
c
.
te 13
to the format defined in this section.
.7 bk t
41 -b 1 a

3
15
ei .0
V4_ADDRESS 4 Specifies an IPV4 address in dotted decimal notation

0.
w 01
SUBNET_MASK 4 Specifies subnet mask in dotted decimal notation; (V4_ADDRESS

12
ou 3.
& SUBNET_MASK) specifies a range of addresses in which an

2.
zh 201
5.3.510.1.2.3 V4_TOS Sub record

This subrecord specifies a range of V4 type of service values. V4_TOS adheres to the format
defined in this section.
TOS_VALUE 1 Specifies IP V4 type of service
TOS_MASK 1 Specifies a mask; (TOS_VALUE & TOS_MASK) specifies a range

of types of services that an application is interested in

Log Record Formats

This subrecord defines an IPV6 filter. All the requested parameters are specific to the IP V6
packets.
V6_FIELD_MASK 1 A bit mask which indicates the parameters requested in an IPV6

filter:
 Bit 4 is ON – V6_TRAFFIC_CLASS is present
 Bit 5 is ON – V6_FLOW_LABEL is present
T
V6_SRC_ADDR 17 Specifies the source address of a filter; all the packets which
n PS
originate from this address are filtered; see Section 5.3.510.1.2.5
34
V6_DST_ADDR 17 Specifies the destination address of a filter; all the packets which
om 8:
are destined to this address are filtered; see Section 5.3.510.1.2.5
l.c :4
c
.
te 13
V6_TRAFFIC_ 2 Specifies the traffic class field in a filter; all the packets matching
CLASS this value are filtered; see Section 5.3.510.1.2.6 for format
.7 bk t
41 -b 1 a
description
3
15
ei .0
V6_FLOW_LABEL 4 Specifies the IPV6 flow label field in a filter; all the packets
0.
w 01
matching this value are filtered

12
ou 3.
V6_NEXT_HDR_ 1 Indicates that an application wants to filter based on higher level

2.
zh 201
PROTOCOL layer protocol; value can be one of the following:

TCP_FLTR Variable Specifies TCP parameters in a filter; see Section 5.3.510.1.2.7 for
format description
UDP_FLTR Variable Specifies UDP parameters in a filter; see Section 5.3.510.1.2.9 for
format description

to the format defined in this section.
V6_ADDRESS 16 Specifies an IPV6 address in dotted decimal notation
PREFIX_LEN 1 Specifies IPV6 prefix length; combination of V6_ADDRESS and

PREFIX_LEN specifies a range of IPV6 addresses that an
application is interested in

Log Record Formats
5.3.510.1.2.6 V6_TRAFFIC_CLASS subrecord

This subrecord specifies a range of V6 traffic classes. V6_TRAFFIC_CLASS adheres to the
format defined in this section.
TCLASS_VALUE 1 Specifies IP V6 traffic class
TCLASS_MASK 1 Specifies a mask; (TCLASS_VALUE & TCLASS_MASK) specifies a

range of traffic classes that an application is interested in
5.3.510.1.2.7 TCP_FLTR subrecord

This subrecord specifies TCP parameters in a filter. All TCP packets which match specified
fields are filtered.
T
n PS
TCP_FIELD_ 1 Bit mask which indicates the TCP parameters specified in an
MASK IPV4/IPV6 filter; values are:
34
 All bits are OFF – None of the parameters are specified
om 8:
meaning that the application wants to filter all TCP packets
l.c :4
c
 Bit 1 (LSB) is ON – TCP_SRC_PORT is present indicating that
.
te 13
an application wants to filter based on source ports
 Bit 2 is ON – TCP_DST_PORT is present indicating that an
.7 bk t
application wants to filter based on destination ports

41 -b 1 a
3
15
ei .0

0.
w 01

12
ou 3.
TCP_SRC_PORT 4 Specifies the range of source ports that an application is interested

2.
zh 201
in; see Section 5.3.510.1.2.8 for format description
TCP_DST_PORT 4 Specifies the range of destination ports, an application is interested

5.3.510.1.2.8 PORT subrecord

This subrecord defines a range of ports that an application is interested in. TCP_SRC_PORT,
TCP_DST_PORT, UDP_SRC_PORT, and UDP_DST_PORT adhere to the format defined in this
section.
STARTING_ 2 Specifies a port that an application is interested in

PORT
PORT_RANGE 2 Specifies a range; (STARTING_PORT + PORT_RANGE) specifies

a range of ports that an application is interested in

Log Record Formats
5.3.510.1.2.9 UDP_FLTR subrecord

This subrecord specifies UDP parameters in a filter. All UDP packets which match specified
fields are filtered.
UDP_FIELD_ 1 Bit mask indicating which of UDP parameters are specified in an

MASK IPV4/IPV6 filter; values are:
meaning that application wants to filter all UDP packets
 Bit 1 (LSB) is ON – UDP_SRC_PORT is present indicating that
an application wants to filter based on source ports
 Bit 2 is ON – UDP_DST_PORT is present indicating that an
application wants to filter based on destination ports
T
n PS
UDP_SRC_PORT 4 Specifies the range of source ports that an application is interested
34
UDP_DST_PORT 4 Specifies the range of destination ports that an application is
om 8:
interested in; see Section 5.3.510.1.2.8 for format description
l.c :4
. c
te 13
5.3.511 Granted QoS Logging (Log Code 0x135B)

.7 bk t
41 -b 1 a
QoS granted by the network for a QoS instance is logged using this log packet. Each QoS
3
15
instance is uniquely identified by QOS_ID.
ei .0
0.
w 01
12

ou 3.
2.
zh 201
QOS_GRANTED_ 1 Bit mask which indicates the records that are logged:
MASK  Bit 1 (LSB) is ON – RX_FLOW_SPEC is present
 Bit 2 is ON – TX_FLOW_SPEC is present
Both bits could be ON indicating that both the subrecords are
logged
RX_FLOW_SPEC Variable QoS granted in Rx direction; see Section 5.3.510.1.1 for format
description
TX_FLOW_SPEC Variable QoS granted in Tx direction; see Section 5.3.510.1.1 for format
description

Log Record Formats
5.3.512 Logging Modified QoS (Log Code 0x135C)

An application can modify the previously requested QoS using
DSS_IFACE_IOCTL_QOS_MODIFY IOCTL. The new QoS specified during QOS_MODIFY
operation is logged using this log packet. This log packet is generated when an application issues
DSS_IFACE_IOCTL_QOS_MODIFY IOCTL and if the requested QoS passes validation
NOTE The mobile logs the QoS specified using the DSS_IFACE_IOCTL_QOS_MODIFY IOCTL
only and not the sum of QoS specified in DSS_IFACE_IOCTL_QOS_REQUEST and
DSS_IFACE_IOCTL_QOS_MODIFY IOCTLs.
T
n PS
QOS_MODIFY_ 2 Bit mask which indicates how QoS is manipulated in Rx and
34
MASK Tx directions:
om 8:
 Bit 1 (LSB) is ON – QoS (both flow and filter specifications)
is created or deleted, or only flow specification is modified
l.c :4
. c
in Rx direction; QoS is created if bit 1 is OFF in
te 13
QOS_MASK (i.e., QoS was not previously requested in Rx

direction; QoS is deleted if field mask of the required flow
.7 bk t
41 -b 1 a
specification is 0; flow specification is modified otherwise

3
(Note: Filter specification is not modified); the required flow
15
ei .0
specification is specified in Rx direction

0.
w 01
 Bit 2 is ON – Minimum required flow specification is

12
ou 3.
specified in Rx direction
 Bit 3 is ON – Auxiliary flow specifications are specified in
2.
zh 201
Rx direction
 Bit 4 is ON – QoS (both flow and filter specifications) is
created or deleted, or only flow specification is modified in
Tx direction; QoS is created if bit 4 is OFF in QOS_MASK
(i.e., QoS was not previously requested in Tx direction);
QoS is deleted if field mask of the required flow
specification is 0; flow specification is modified otherwise
(Note: Filter specification is not modified); the required flow
specification is specified in Tx direction
 Bit 5 is ON – Minimum required flow specification is
specified in Tx direction
 Bit 6 is ON – Auxiliary flow specifications are specified in
Tx direction
 Bit 7 is ON – Rx filters are modified
 Bit 8 is ON – Tx filters are modified
More than one bit could be ON in a QOS_MODIFY_MASK.
Note: If a bit is OFF the corresponding subrecord is not logged
in that log packet; e.g., to indicate that flow and filters
specifications are modified in Rx direction, both bits 1 and 7
are ON.
Unlike bits 1 and 4, bits 2, 3, 5, and 6 do not indicate whether
QoS is manipulated in a particular direction. Bits 2, 3, 5, and 6
convey extra information about logged flow specifications. See
description of FLOW_SPEC_CNT in Section 5.3.510.1 for
more details.

Log Record Formats

QOS_MASK 2 See QOS_MASK field in Section 5.3.510 for more details
RX_FLOW_SPEC_ 1 Present if bit 1 of QOS_MODIFY_MASK is present; see

CNT description of FLOW_SPEC_CNT field in Section 5.3.510.1
for more details
RX_FLOW_SPEC Variable RX FLOW SPEC. Present if bit 1 of QOS_MODIFY_MASK is

present; see Section 5.3.510.1.1 for format description
RX_FLTR_CNT 1 RX FLTR CNT. Present either if bit 7 of QOS_MODIFY_MASK

is ON or if QoS is created in Rx direction (see
QOS_MODIFY_MASK for more details); specifies the number
of filters installed by an application; at most 8 filters are logged
RX_FLTR_SPEC Variable RX FLTR SPEC. Present if RX_FLTR_CNT is present; see

TX_FLOW_SPEC_ 1 TX FLOW SPEC CNT. Present if bit 4 of
T
CNT QOS_MODIFY_MASK is present; see description of
n PS
FLOW_SPEC_CNT field in Section 5.3.510.1 for more details
TX_FLOW_SPEC Variable TX FLOW SPEC. Present if bit 4 of QOS_MODIFY_MASK is
34
present; see Section 5.3.510.1.1 for format description
TX_FLTR_CNT 1
om 8:
TX FLTR CNT. Present either if bit 7 of QOS_MODIFY_MASK
l.c :4
. c
is ON or if QoS is created in Tx direction (see
te 13
QOS_MODIFY_MASK for more details); specifies the number

of filters installed by an application; at most 8 filters are logged
.7 bk t
41 -b 1 a
3
TX_FLTR_SPEC Variable Present if TX_FLTR_SPEC is present; see
15
ei .0

0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.513 Bus Monitor Profiling Information (LOG_CODE 0x135D)

The bus monitor profiling information log packet contains the settings and gathered bus data for
a particular bus monitor. This log is generated at the frequency of the trigger event, indicated by
Trigger ID. The worst case packet size for this log is 148.
Length
Field Description
(bytes)
ID 1 Packet ID; to be used if the log packet is ever used as a

subpacket for another log packet; value should be 0xB0
Version 1 Version number of the log packet; supported values are:

 Version 0x01
 Version 0x02
Size 2 Size of the entire log packet; does not include the log
T
header or DIAG header
n PS
Bus 1 Indicator of the type of bus; possible values are:
34
 0x0 – EBI1
 0x1 – SMI
om 8:
l.c :4
. c
te 13
Monitor 1 Indicator of the monitor number; possible values are:
 0x0 – Monitor 0
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
Reserved 2 Reserved – Used as padding to ensure proper alignment

2.
zh 201
Trigger ID 4 Indicator of the trigger event that was monitored; values

are 0x0 to 0xFFFFFFFF
Cycle Count 4 Maximum number of bus cycles for which the monitor was
configured
Packet Count 4 Version 2 only

Current count of packets sent; used to determine any
out-of-order or missing packets
Total Arbiter Latency 4 Total arbiter latency
Total Arbiter Burst Count 4 Total arbiter burst count
Minimum Arbiter Latency 4 Minimum arbiter latency
Maximum Arbiter Latency 4 Maximum arbiter latency y
Total Bus Latency 4 Total bus latency
Total Bus Burst Count 4 Total bus burst count
Minimum Bus Latency 4 Minimum bus latency
Maximum Bus Latency 4 Maximum bus latency

Total Bus Beat Count 4 Total bus beat count
Total Pending 4 Total pending

Log Record Formats
Length
Field Description
(bytes)
Maximum Pending 4 Maximum pending
Idle Count 4 Idle count
Total Bus Cycles 4 Total bus cycles
Bus State 4 Version 2 only

Current state of the bus
Monitor 0 – WSTRB10 4 Version 2 only

Monitor 0 WSTRB bits for the first two beats
Note: Only valid if the Monitor field indicates Monitor 0
(value of 0x0), otherwise the fields will be zeroed out but
included in the packet.
Monitor 0 – WSTRB32 4 Version 2 only
T
Monitor 0 WSTRB bits for the last two beats
n PS
(value of 0x0); otherwise, the fields will be zeroed out but
34
om 8:
Monitor 0 – Data 0 – 0 4 Version 2 only
l.c :4
. c
Monitor 0 first 16 bits of read/write data from the first beat
te 13
of the first AXI transaction

.7 bk t

41 -b 1 a

3
15
ei .0
0.
w 01

12
ou 3.
Monitor 0 second 16 bits of read/write data from the first

2.
zh 201
beat of the first AXI transaction


Monitor 0 third 16 bits of read/write data from the first beat

Monitor 0 fourth 16 bits of read/write data from the first

Monitor 0 first 16 bits of Read/Write data from the second

Log Record Formats
Length
Field Description
(bytes)

Monitor 0 first 16 bits of read/write data from the third beat

Monitor 0 first 16 bits of read/write data from the fourth
Setting Indicator 4 Indicator of the type of setting; possible values are:
T
 0x0 – Simple
n PS
 0x1 – Advanced
If the value is simple then the simple settings will be valid
34
and the advanced settings will be zeroed out.
om 8:
If the value is advanced then the advanced settings will
l.c :4
c
be valid and the simple settings will be zeroed out.
.
te 13
Simple Settings: Read / Write 1 Type of read/write bus command the bus monitor is
monitoring; possible values are:
.7 bk t
41 -b 1 a
 0x0 – Monitor reads only

3
15
 0x1 – Monitor writes only
ei .0
 0x2 – Monitor reads and writes

0.
w 01
12
ou 3.
2.
zh 201
Simple Settings: Lock type 1 Type of locking bus commands the bus monitor is
monitoring; possible values are:
 0x0 – Monitor unlocked only
 0x1 – Monitor locked only
 0x2 – Monitor locked and unlocked
Simple Settings: Burst Size 1 Burst sizes the bus monitor is monitoring; possible values
are:
 0x0 – Burst size of 1
 0x4 – All burst sizes
Simple Settings: Slave type 1 Slave types the bus monitor is monitoring; possible values
are:
 0x0 – High-priority queue only
 0x1 – Low-priority queue only
 0x2 – IMEM only
 0x3 – All slave types

Log Record Formats
Length
Field Description
(bytes)
Simple Settings: AID 1 What master ID the bus monitor is monitoring; possible
values are:
 0x0 – Graphics 0
 0x4 – Video motion estimation/compensation read
engine
 0x5 – Video deblocker write engine
 0x6 – Unused
 0x7 – Unused
 0x8 – ARM11 instruction
 0x9 – ARM11 data
 0xA – Unused
 0xB – ARM11 DMA
T
n PS
 0xC – ARM9 instruction
 0xD – ARM9 data
34
 0xE – Unused
 0xF – Modem data mover/crypto engine
om 8:
 0x10 – Application data mover 0
l.c :4
c
 0x11 – Application data mover 1
.
te 13
 0x12 – Application DSP
 0x13 – MDP
.7 bk t
41 -b 1 a
 0x14 – USB and MDDI

3
15
 0x15 – Unused
ei .0
 0x16 – Unused
0.
w 01
 0x17 – Unused
12
ou 3.
 0x18 – Video front end 0

2.
zh 201
 0x19 – Video front end 1

 0x1A – Video front end 2
 0x1B – Video front end 3
 0x1C – Video front end 4
 0x1D – Video front end 5
 0x1E – Video front end 6
 0x1F – All masters
 0x20 to 0x27 – Unused
 0x28 – All graphics masters
 0x29 – All VDC masters
 0x2A – All ARM11 masters
 0x2B – All ARM9 masters
 0x2C – All apps data mover masters
 0x2D – All video front end masters

Log Record Formats
Length
Field Description
(bytes)
Simple Settings: CID 1 DMOV channel ID the bus monitor is monitoring; values
are:
 0x00 – All DMOV channels
 0x01 – DMOV Channel 0
 0x0A – DMOV Channel 9
 0x0B – DMOV Channel 10
 0x0C – DMOV Channel 11
T
n PS
 0x0D – DMOV Channel 12
 0x0E – DMOV Channel 13
34
 0x0F – DMOV Channel 14
om 8:
l.c :4
. c
te 13
Simple Settings: Reserved 2 Reserved; used as padding to ensure proper alignment
.7 bk t
Simple Settings: Address 4 Address the bus monitor is monitoring; values are
41 -b 1 a
3
0x00000000 to 0xFFFFFFFF
15
ei .0
Simple Settings: Address Mask 4 Address mask the bus monitor is monitoring; a bit must be
0.
w 01
set in the address mask for the corresponding bit in the

12
ou 3.
address to be used; allows monitoring address ranges;

values are 0x00000000 to 0xFFFFFFFF
2.
zh 201
Advanced Settings: CMD1 Match 2 Value of the CMD1_MATCH register for this monitor
Advanced Settings: CMD1 Mask 2 Value of the CMD1_MSK register for this monitor
Advanced Settings: CMD2 Match 2 Value of the CMD2_MATCH register for this monitor
Advanced Settings: CMD2 Mask 2 Value of the CMD2_MSK register for this monitor
Advanced Settings: Address 4 Address the bus monitor is monitoring; values are
0x00000000 to 0xFFFFFFFF
Advanced Settings: Address Mask 4 Address mask the bus monitor is monitoring; a bit must be
set in the address mask for the corresponding bit in the
address to be used; allows monitoring address ranges;
values are 0x00000000 to 0xFFFFFFFF
5.3.514 LOG_SRCH_PPM_RES_VER_2 (LOG_CODE 0x135E)

These are pilot phase measurement search results. This log packet is an expanded version of the
earlier log packet used for PPM results. This log is generated whenever search results are
available, worst case is 3 results every cycle, which is every 100 ms at the fastest rate. The worst
case packet size for this log is 1809 bytes.

Log Record Formats
VERSION 1 Packet version
SEQUENCE 1 Sequence number of the packet to detect dropped packets
PPM CYCLES 2 Number of PPM cycles before this log is shipped
PPM WIN CENTER 4 Window center of PPM searches in chipx8
NUM_RESULTS 1 Number of PPM results in this log packet
The log packet shall include NUM_RESULTS (0-40) occurrences of the following record:
PILOT_PN 2 PN index of the pilot searched
SUBSTATE/ 1 Bitmask; includes the following:
T
n PS
ANTENNA/  Bits 0-2 – Substate
ENERGY GROUP  SRCH_PPM_SS0_INITIAL = 0
34
 SRCH_PPM_SS1_DEEP = 1
 SRCH_PPM_SS2_REPEAT_DEEP = 2
om 8:
 Bit 3 – Antenna (0 or 1)
l.c :4
. c
 Bits 4-7 – Energy group
te 13
 PPM_H_GROUP = 0 /* High energy peaks group */

.7 bk t
 PPM_M_GROUP = 1 /* Medium energy peaks group */

41 -b 1 a
 PPM_D_GROUP = 2 /* Low energy peaks group */

3
15
 PPM_REPEAT_D_GROUP = 3 /* Very low energy peaks
ei .0
group */
0.
w 01
 PPM_SKIP_D_GROUP = 4 /* D group peaks skipped in

12
ou 3.
this search */
2.
zh 201
 PPM_NO_SRCH_GROUP = 5 /* Peaks not used for

further searching */
WIN SIZE 1 Window size; true Window size = 2* (WIN SIZ) + 2; this was
done to accommodate window size of up to 512 chips in a byte.
WIN_OFFSET 2 Window offset in chips

(signed)
TOA 2 Pilot’s time of arrival in chipx16

(signed)
RMSE 1 Measurement RMSE
PEAK ENERGY 12 6 uint16s – 6 Peaks reported by searches
PEAK POS 24 6 unit32s – Position of above 6 peaks

Log Record Formats
5.3.515 LOG_SRCH_PPM_DB_VER_2 (LOG_CODE 0x135F)

This is a pilot phase measurement database. This log packet was modified to accommodate the
changes in the PPM database management. In MSM6550 and MSM6800 4.x builds, the database
stores only five entries for each pilot. Phase II improvements require the database to be 32
measurements per pilot. Therefore, it becomes impossible to log the whole database every time.
This log packet can log incremental as well as the whole database. This log is generated
whenever AFLT cycle is complete.
VER_ID 1 Packet version
SEQ_NUM 1 A rolling sequence number indicating if we have skipped

samples
CDMA_BAND_ 1 CDMA band class

CLASS
T
n PS
CDMA_FREQ 2 CDMA frequency channel
PPM CYCLES 2 PPM cycles
34
PPM_WIN_CENTER 4 PPM window center
om 8:
l.c :4
c
DB_ENTRIES_CNT 1 Number of PPM DB entries reported in the packet
.
te 13
PPM_DB_BUF 2000 (max) Void pointer – Data portion of the log packet
.7 bk t
41 -b 1 a
3
15
Within the PPM_DB_BUF field, the log packet shall include DB_ENTRIES_CNT occurrences
ei .0
of the following record:

0.
w 01
12
ou 3.

2.
zh 201
PILOT_PN 2 PN index of the pilot
RMSE MAXED 1 Sample number up to which the RMSE have been maxed out
SAMPLE for any reason (aging):
 0xFF – Not applicable, no sample with maxed RMSE
SAMPLE DELETED 1 Index of the sample which has been deleted from the database
to make space for new entry:
 0xFF – Not applicable, no sample deleted
 0xFE – All samples deleted
NUM_NEW_ 1 Number of new measurements; if the log has been just turned
SAMPLES on, it is set to the number of samples in the DB; a >1 value
implies that older samples for the PN be deleted
REPR_ECIO 1 Representative Ec/Io of the pilot in -0.5 dB units
REPR_RMSE 1 Representative RMSE
REPR_TOA 2 (signed) Representative Time-of-Arrival (TOA) in chipx16
Each record shall include NUM_NEW_SAMPLES occurrences of the following sub-record:
ENG 4 Energy of the sample
TOA 2 (signed) Time of arrival in chipx16
RMSE 1 RMSE of the sample

Log Record Formats
TOM 2 Time of measurement (0.25 sec)
ANT 1 Antenna on which measurement was done (0 or 1)
This log is generated up to once every 100 ms. The implemented maximum packet size for this
log is 708 bytes, although layout suggests a possible higher maximum.
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.516 LOG_PPM_SM (LOG_CODE 0x1360)

This is the pilot phase measurement state machine. This log packet is designed so that the PPM
state machine transitions can be analyzed offline. The log is generated whenever an event is
added to or deleted from PPM events queue. The worst case packet size for this log is 354 bytes.
Typically we do not expect the payload to be > 10 bytes making the log size as 20 bytes. The log
packet description is as follows:
VERSION 1 Packet version
SEQUENCE # 1 Sequence number of the packet to detect dropped packets
EVENT_ID 1 ID of the event:

 1X_SERVICE_AVAILABLE = 0
 1X_SERVICE_NOT_AVAILABLE
 THROTTLE_TIMER_EXPIRED
T
 INTERFACE_WATCHDOG_TIMER_EXPIRED
n PS
 SRCH4_AVAILABLE
 SRCH4_NOT_AVAILABLE
34
 SEARCH_RESULTS_READY
om 8:
 SEARCH_ABORT_DONE
l.c :4
c
 LOST_SEARCH_TIMER_EXPIRED
.
te 13
 TCXOMGR_TRK_SRL_GRANTED
 TCXOMGR_TRK_SRL_NOT_GRANTED
.7 bk t
41 -b 1 a
 PDSM_START_PPM = 0x80
3
 PDSM_GET_PPM_RESULTS = 0x81
15
ei .0
 PDSM_END_PPM = 0x82
0.
w 01
 PDSM_GET_A_C_SET = 0x83
12
ou 3.
2.
zh 201
CURRENT_STATE 1 PPM’s current state:

 DISABLED = 0
 SEARCHING_NOT_ALLOWED
 INITIAL_ACQ
 WAIT_INITIAL_ACQ_SEARCH_ABORT_END
 INITIAL_ACQ_PAUSED
 ADDITIONAL_ACQ
 WAIT_ADDITIONAL_ACQ_SEARCH_ABORT_END
 ADDITIONAL_ACQ_PAUSED
 WAIT_ACQ_SEARCH_ABORT_END_BEFORE_
SESSION_END

Log Record Formats

18-RESOURCE_ 4 Bit mask of PPM resources
MASK  0 – Not used
 1 – PC neighbor list valid
 2 – GPS search done
 3 – End ppm after report
 4 – Good GPS fix
 5 – Vetoed sleep
 6 – CDMA service active
 7 – srch4 active
 8 – Throttle timer active
 9 – Searching in progress
 10 – Session start request after session end
 11 – PPM report request after session start –
 12 – Session end request after session start and report
 13 – CDMA service available
T
 14 – srch4 available
n PS
 15 – CDMA service lost
 16 – tcxomgr trk srl granted
34
 17 – Schedule to clear DB
 18-31 – Not used
om 8:
l.c :4
. c
te 13
EVENT_ACTION 1 Boolean value
 0 – Event added to PPM events queue
.7 bk t
41 -b 1 a
 1 – Event deleted from queue and processed

3
15
ei .0
0.
w 01
PREV_STATE 0 or 1 Included if EVENT_ACTION = 1; PPM’s state before

12
ou 3.
processing the event

2.
zh 201
If EVENT_ACTION is 0, the log packet shall include the following record:
PAYLOAD_LEN 1 Length of the payload; currently always = 0, hence no payload,

but included for future expansion
PAYLOAD PAYLOAD_LEN Payload

Log Record Formats
5.3.517 RoHC compressor (LOG_CODE 0x1361)

This log is generated each time the RoHC compressor instance compresses a packet.
received_timestamp 4 AMSS time when packet received by RoHC
rohc_instance 4 RoHC instance
cid 4 Context ID of flow
profile 4 Profile in use
mode 4 Mode of operation, U/O/R-Mode
state 4 State of the compressor, IR/FO/SO
error 4 Denotes a decompression failure
packet_type 32 RoHC packet type (see RFC 3095)
T
n PS
compressed_header_size 4 Compressed header size, in octets
34
original_header_size 4 Original header size, in octets
om 8:
rtp_sn 4 l.c :4 RTP sequence number
. c
rtp_sn_window_size 4 Current number of SNs in the reference window for
te 13
W-LSB encoding
.7 bk t
41 -b 1 a
rtp_sn_min_ref 4 3 Min SN value in this window

15
rtp_sn_max_ref 4 Max SN value in this window
ei .0
0.
w 01
rtp_ts 4 RTP timestamp

12
ou 3.
rtp_ts_scaled 4 Scaled RTP timestamp

2.
zh 201
rtp_ts_window_size 4 Current number of scaled TSs in the reference

window for W-LSB encoding
rtp_ts_min_ref 4 Min scaled TS value in this window
rtp_ts_max_ref 4 Max scaled TS value in this window
This log is generated approximately every 20 ms for an audio flow. The worst case packet size
for this log is the total of all fields, 80 bytes.

Log Record Formats
5.3.518 RoHC decompressor (LOG_CODE 0x1362)

This log is generated every time the RoHC decompressor instance receives and decompresses a
packet.
state 4 State of the decompressor, NC/SC/FC
error 4 Denotes a decompression failure
T
n PS
packet_type 32 RoHC packet type (see RFC 3095)
compressed_header_size 4 Compressed header size, in octets
34
original_header_size 4 Original header size, in octets
om 8:
l.c :4
c
rtp_sn 4 RTP sequence number
.
te 13
rtp_sn_window_size 4 Current number of SNs in the reference window

for W-LSB encoding
.7 bk t
41 -b 1 a
3
rtp_sn_min_ref 4 Min SN value in this window
15
ei .0
rtp_sn_max_ref 4 Max SN value in this window

0.
w 01
12
ou 3.

2.
zh 201
rtp_ts_scaled 4 Scaled RTP timestamp
rtp_ts_window_size 4 Current number of scaled TSs in the reference

window for W-LSB encoding
rtp_ts_min_ref 4 Min scaled TS value in this window
rtp_ts_max_ref 4 Max scaled TS value in this window
This log is generated approximately every 20 ms for an audio flow. The worst case packet size
for this log is the total of all fields, 80 bytes.

Log Record Formats
5.3.519 RoHC feedback compressor (LOG_CODE 0x1363)

This log is generated every time the RoHC compressor instance receives a feedback packet from
a peer decompressor.
error 4 Error field (codes used by Effnet)
fb_type 32 Feedback packet type, RFC 3095 5.7.6
T
n PS
fb_size 4 Size of feedback, in octets
rtp_sn 4 Last good RTP sequence decompressed
34
om 8:
l.c :4
c
received_options 4 Feedback options, RFC 3095 5.7.6
.
te 13
.7 bk t
This log is not generated periodically. In conditions where decompression failures are not
41 -b 1 a
3
common, i.e., low PER, this log will be rare. In worst case scenarios where there is a
15
ei .0
decompression failure for each packet received (very unlikely), this log will be fired every
0.
w 01
20 ms. The worst case packet size for this log is the total of all fields, 48 bytes.
12
ou 3.
2.
zh 201

Log Record Formats
5.3.520 RoHC feedback decompressor (LOG_CODE 0x1364)

This log is generated every time the RoHC decompressor instance generated a RoHC feedback
packet for the peer compressor.
error 4 Error field (codes used by Effnet)
fb_type 32 Feedback packet type, RFC 3095 5.7.6
T
n PS
fb_size 4 Size of feedback, in octets
rtp_sn 4 Last good RTP sequence decompressed
34
rtp_ts 4 RTP timestampt
om 8:
l.c :4
c
received_options 4 Feedback options, RFC 3095 5.7.6
.
te 13
.7 bk t
This log is not generated periodically. In conditions where decompression failures are not
41 -b 1 a
3
common, i.e., low PER, this log will be rare. In worst case scenarios where there is a
15
ei .0
decompression failure for each packet received (very unlikely), this log will be fired every
0.
w 01
20 ms. The worst case packet size for this log is the total of all fields, 48 bytes.
12
ou 3.
2.
zh 201

Log Record Formats
5.3.521 LOG_BT_HCI_CMD_C (LOG_CODE 0x1365)

This packet holds information about Bluetooth HCI commands sent from the Bluetooth host to
the controller.
OpcodeT 2 Opcode that provides the HCI command type; values are:
 Bit 0:9 – OpCode Command Field (OCF)
 Bit 10:15 – OpCode Group Field (OGF)
OGF OCF Command name
0x00 0x0000 NOP
0x01 0x0001 HCI_Inquiry
0x01 0x0002 HCI_Inquiry_Cancel
T
n PS
0x01 0x0005 HCI_Create_Connection
0x01 0x0006 HCI_Disconnect
34
0x01 0x0008 HCI_Create_Connection_Cancel
om 8:
l.c :4
c
0x01 0x0009 HCI_Accept_Connection_Request
.
te 13
0x01 0x000A HCI_Reject_Connection_Request

.7 bk t
41 -b 1 a
0x01 0x000B HCI_Link_Key_Request_Reply

3
15
ei .0
0x01 0x000C HCI_Link_Key_Request_Negative_Reply

0.
w 01
0x01 0x000D HCI_PIN_Code_Request_Reply

12
ou 3.
0x01 0x000E HCI_PIN_Code_Request_Negative_

2.
zh 201
Reply
0x01 0x000F HCI_Change_Connection_Packet_Type
0x01 0x0013 HCI_Set_Connection_Encryption
0x01 0x0019 HCI_Remote_Name_Request
0x01 0x001A HCI_Remote_Name_Request_Cancel

0x01 0x0028 HCI_Setup_Synchronous_Connection
0x01 0x0029 HCI_Accept_Synchronous_Connection_

Request
0x01 0x002A HCI_Reject_Synchronous_Connection_

Request
0x02 0x0003 HCI_Sniff_Mode
0x02 0x0004 HCI_Exit_Sniff_Mode
0x02 0x000B HCI_Switch_Role
0x02 0x000D HCI_Write_Link_Policy_Settings
0x02 0x000F HCI_Write_Default_Link_Policy_Settings
0x03 0x0003 HCI_Reset

Log Record Formats

0x03 0x0026 HCI_Write_Voice_Setting
0x03 0x0033 HCI_Host_Buffer_Size
0x03 0x0045 HCI_Write_Inquiry_Mode
0x03 0x0047 HCI_Write_Page_Scan_Type
0x03 0x0008 HCI_Flush
0x03 0x001A HCI_Write_Scan_Enable
0x03 0x001E HCI_Write_Inquiry_Scan_Activity
0x03 0x001C HCI_Write_Page_Scan_Activity
0x03 0x0020 HCI_Write_Authentication_Enable
0x03 0x0035 HCI_Host_Number_of_Completed_

Packets
T
n PS
0x03 0x003F HCI_Set_AFH_Host_Channel_
Classification
34
0x03 0x0049 Write_AFH_Channel_Assessment_Mode
om 8:
l.c :4
c
0x04 0x0005 HCI_Read_Buffer_Size
.
te 13
0x04 0x0009 HCI_Read_BD_ADDR

.7 bk t
41 -b 1 a
0x06 0x0003 HCI_Enable_Device_Under_Test_Mode

3
15
ei .0
Parameter Total 1 Length of all parameters that follow in the command

0.
w 01
length (N)
12
ou 3.
Parameters N Parameters in the command

2.
zh 201

Log Record Formats
5.3.522 LOG_BT_HCI_EV_C (LOG_CODE 0x1366)

This packet holds information about Bluetooth HCI events received by the Bluetooth host from
the controller.
Event Code 2 Event code that provides the HCI event type; range is 0x00-0xFF
Event code Event name
0x00 NOP
0x01 Inquiry Complete
0x02 Inquiry Result
0x03 Connection Complete
0x04 Connection Request
T
n PS
0x05 Disconnection Complete
0x06 Authentication Complete
34
0x07 Remote Name Request Complete
om 8:
l.c :4
c
0x08 Encryption Change
.
te 13
0x09 Change Connection Link Key Complete

.7 bk t
41 -b 1 a
0x0A Master Link Key Complete

3
15
ei .0
0x0B Read Remote Supported Features Complete

0.
w 01
0x0E Command Complete

12
ou 3.
0x0F Command Status

2.
zh 201
0x10 Hardware Error
0x11 Flush Occurred
0x12 Role Change
0x13 Number Of Completed Packets
0x14 Mode Change
0x16 PIN Code Request
0x17 Link Key Request
0x18 Link Key Notification
0x19 Loopback Command
0x1A Data Buffer Overflow
0x1B Max Slots Change
0x1D Connection Packet Type Changed
0x20 Page Scan Repetition Mode Change
0x22 Inquiry Result with RSSI
0x2C Synchronous Connection Complete

Log Record Formats
0x2D Synchronous Connection Changed
Parameter Total 1 Length of all parameters that follow in the event

length (N)
Parameters N Parameters in the event
5.3.523 LOG_BT_HCI_TX_ACL_C (LOG_CODE 0x1367)

This packet holds information about Bluetooth HCI ACL data packets sent from the Bluetooth
host to the controller.
Connection info 2 Information about the connection for which this ACL data
packet is sent; range is 0x0000 to 0x0EFF; 0x0F00 to 0x0FFF
T
are reserved
n PS
 Bit 0:11 – Connection Handle
 Bit 12:13 – Packet Boundary Flag
34
 00 – Reserved
om 8:
 01 – Continuing fragment packet
l.c :4
c
 10 – First packet
.
te 13
 11 – Reserved
 Bit 14:15 – Broadcast Flag; range is 0x0000 to 0x0EFF;
.7 bk t
41 -b 1 a
0x0F00 to 0x0FFF are reserved for future use

3
 00 – Point-to-point
15
ei .0
 01 – Active Slave Broadcast

0.
w 01
 10 – Parked Slave Broadcast

12
ou 3.
 11 – Reserved
2.
zh 201
Data Total Length (N) 1 Length of data that follows in the ACL packet
Data N Data in the packet

Log Record Formats
5.3.524 LOG_BT_HCI_RX_ACL_C (LOG_CODE 0x1368)

This packet holds information about Bluetooth HCI ACL data packets sent to the Bluetooth host
from the controller.
Connection info 2 Information about the connection for which this ACL data
packet is sent; range is 0x0000 to 0x0EFF; 0x0F00 to 0x0FFF
are reserved; see the Connection info field in Section 5.3.523
for supported values
Data Total Length (N) 2 Length of data that follows in the ACL packet
Data N Data in the packet
T
n PS
34
5.3.526 Obsolete (LOG_CODE 0x136A)
om 8:
l.c :4
c
This log code has been replaced by log codes 0x1388 and 0x1389 described in Section 5.3.556
.
te 13
and Section 5.3.557.

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12

ou 3.
2.
zh 201

Log Record Formats
5.3.531 LOG_CONVERGED_GPS_CLOCK_REPORT_C
(LOG_CODE 0x136F)
This log contains details related to GPS clock. When float or double is used, the format is IEEE
unless otherwise specified.
VERSION 1 Version number of the packet
VALID_FLAG 2 Validity flags:

 0x0000 – No info
 0x0001 – Fcount
 0x0002 – GPS ms
 0x0004 – GPS week
 0x0008 – RTC time
T
FCOUNT 4 Receiver’s millisecond count value
n PS
GPS_WEEK 2 GPS week number
34
GPS_MSEC 4 GPS millisecond into the week
om 8:
l.c :4
c
TIME_BIAS 4 (User time - GPS time) in milliseconds; float data
.
type
te 13
TIME_UNC 4 Clock time uncertainty in nanoseconds; float data

.7 bk t
41 -b 1 a
type
3
15
ei .0
FREQ_BIAS 4 Clock frequency bias in m/s; float data type

0.
w 01
FREQ_UNC 4 Clock frequency uncertainty in m/s; float data type

12
ou 3.
SYS_RTC_MS 4 RTC time in milliseconds

2.
zh 201
CLK_RESETS_CNT 4 Count of clock resets

(unsigned)
RESERVED 1 4 Reserved for future use
This log is generated every 250 ms. Worst case packet size for this log is 41 bytes.

Log Record Formats
5.3.532 LOG_CONVERGED_GPS_POSITION_REPORT_C
(LOG_CODE 0x1370)
This log contains position-related details generated by the position engine. When float or double
is used, the format is IEEE unless otherwise specified.
Field Length (bytes Description
POS_SOURCE 1 Values are:

 0 – None
 1 – WLS (Weighted Least Squares)
 2 – KF (Kalman Filter)
 3 – Externally injected
 4 – Internal database
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats

POS_VEL_FLAG 2 Position flag when POS_SOURCE is:
POS_SOURCE
Bit WLS KF
Bit[0] Altitude Aided Altitude Aided
Bit[1] Solve for time fix Solve for time fix
Bit[2] Over-determined Reserved
Bit[3]  1 – Response to a  1 – Response to a

position request position request
 0 – Periodic Position  0 – Periodic Position
report report
Bit[4] Differential correction Differential correction
T
Bit[5] Clock bias hold fix Reserved
n PS
Bit[6] Position fix propagated Reserved
34
Bit[7] Velocity fix valid Velocity fix valid
om 8:
l.c :4
Bit[8] Indicates whether this is Indicates whether this is
. c
the final fix; values are: the final fix; values are:
te 13
 1 – Yes, this is the final  1 – Yes, this is the final

.7 bk t
fix sent from the LM fix sent from the LM

41 -b 1 a
3
 0 – Unknown, sent  0 – Unknown, sent
15
from the NF from the NF
ei .0
0.
w 01
Bit[9] 1 – Position fix from 1 – Position fix from

12
ou 3.
almanac corrections almanac corrections

2.
zh 201

ephemeris and almanac ephemeris and almanac
corrections corrections
Bit[11] Reserved, fill with zero 1 – Position fix from

inertial and GPS
measurements

inertial measurements
only
Bit[13] 1 – Position report is a 1– Position report is a

background fix (aka background fix (aka
on-demand) on-demand)
Bit[14]  0 – LM generated fix  0 – LM generated fix

report report
 1 – PE generated fix  1 – PE generated fix
report report
Bit[15] 1 – ME generated fix 1 – ME generated fix

report report
POS_SOURCE
Bit External Internal
Bit[0]: Reserved Reserved

Bit[6]

Log Record Formats
FAILURE_CODE 1 POS_SOURCE
Code WLS KF
0 Not applicable Not applicable
1 Matrix inversion failure Matrix inversion failure
2 High PDOP (>100.0) High PDOP (>100.0)
3 Too few SVs Too few SVs
4 Need more ephemerides Need more ephemerides
5 FDIC error FDIC error
6 Clock only correction HEPE too large
7 Convergence failure Fix too old
T
8 ITAR velocity violation ITAR velocity violation
n PS
9 ITAR position violation ITAR position violation
34
10 Time error Time error
om 8:
l.c :4 (Gps Week = Unknown) (Gps Week = Unknown)
. c
11 Reserved KF state outlier
te 13
12:255 Reserved Reserved

.7 bk t
41 -b 1 a
3
POS_SOURCE
15
ei .0
Code External Internal

0.
w 01
12
ou 3.
0-255 Reserved Reserved

2.
zh 201
FIX_EVENTS 2 Events found at this position fix are:

 Bit[0] – RAIM
 Bit[1] – Millisecond error detected
 Bit[2] – Clock reset
 Bit[3]:Bit[15] – Reserved
FIX_TIME_MS 4 Milliseconds into week for fix; range is 0 to (604800000-1) ms
FINAL_POS_LL 8*2 Final position described by:

 Latitude in WGS84 (radians)
 Longitude in WGS84 (radians)
Data type is double for both values
FINAL_POS_ALT 4 Final altitude (m) in WGS84; data type is float
VEL_ENU 4*3 East, North, and Up velocity (milliseconds):

 Veast
 Vnorth
 Vup
Data type is float; this field is invalid if POS_SOURCE is either
Externally Injected or Internal Database

Log Record Formats

POS_SIGMA_ 4 Vertical position uncertainty (m); float data type; field is invalid if
VERTICAL POS_SOURCE is either Externally Injected or Internal Database
VEL_SIGMA 4*3 Velocity uncertainty (m/s):

 East
 North
 Up
Data type is float; field is invalid if POS_SOURCE is either
Externally Injected or Internal Database
CLOCK_BIAS 4 Receiver clock bias = (User time - GPS time) in meters; float
data type; field is invalid if POS_SOURCE is either Externally
Injected or Internal Database
CLOCK_DRIFT 4 Receiver clock drift = (User clock drift – GPS Clock drift) in
milliseconds; float data type; field is invalid if POS_SOURCE is
either Externally Injected or Internal Database
T
n PS
FILTERED_ALT 4 Filtered altitude (m); float data type
UNFILT_ALT 4 Unfiltered altitude (m); float data type
34
om 8:
FILT_ALT_SIGMA 4 Filtered altitude uncertainty (m); float data type
l.c :4
c
UNFILT_ALT_SIGMA 4 Unfiltered altitude uncertainty (m); float data type
.
te 13
PDOP 4 Position dilution of precision; float data type; field is invalid if

.7 bk t
POS_ SOURCE is either Externally Injected or Internal

41 -b 1 a
3
Database
15
ei .0
HDOP 4 Horizontal DOP; float data type; field is invalid if POS_SOURCE

0.
w 01
is either Externally Injected or Internal Database

12
ou 3.
VDOP 4 Vertical DOP; float data type; field is invalid if POS_ SOURCE is
2.
zh 201
ELLIPSE_ 1 Statistical measure of the confidence associated with the

CONFIDENCE uncertainty ellipse values; for a given confidence X, this means
that the true position’s 2D horizontal component is contained
within the specified ellipse X percent of the time; a value of 0
indicates that the ELLIPSE_ANGLE and ELLIPSE_AXIS_UNC
values are invalid and should be ignored; unsigned value in
percent; range is from 0 to 100%
ELLIPSE_ANGLE 4 Angle of Along Axis with respect to true North, with increasing
angles moving clockwise from North; metric is relative to
WGS84 ellipsoid; float data type; range is from 0 to 90 degrees
ELLIPSE_ALONG_ 4 Uncertainty of position in an axis along the angle specified with

AXIS_UNC respect to true North; metric is relative to WGS84 ellipsoid; float
data type; range is from 0 to 200,000 m; values larger than the
maximum are clipped to the maximum value
ELLIPSE_PERP_ 4 Uncertainty of position in an axis perpendicular to the angle

AXIS_UNC specified with respect to true North; metric is relative to WGS84
ellipsoid; float data type; range is from 0 to 200,000 m; values
larger than the maximum are clipped to the maximum value

Log Record Formats

NUMBER_OF_SVS_ 1 Number of SVs used in the fix; field is invalid if POS_SOURCE is
USED either Externally Injected or Internal Database
TOTAL_SVS 1 Total number of SVs detected by searcher, including ones not

used in position calculation; field is invalid if POS_SOURCE is
For each of the TOTAL_SVS, the following block is generated.
SV_USED_SV_ID 1 MSB 0/1 – Satellite not-used/used for fix; SV not used implies
IODE, MEAS_RESIDUAL, SV_WEIGHT, and VEL_RESIDUAL
are invalid; least significant 5 bits = Satellite ID
IODE 1 IODE
T
n PS
RANGE_RESIDUAL 4 Measurement residual (m); float data type
VEL_RESIDUAL 4 Velocity residual (m/s); float data type
34
SV_WEIGHT 4 Weight of this SV used in the position fix; float data type
om 8:
l.c :4
. c
te 13
This log is generated every 1 sec from NF, and as often as every 1 sec from LM. The worst-case
packet size for this log is 349.
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.533 LOG_CONVERGED_GPS_MEASUREMENT_REPORT_C
(LOG_CODE 0x1371)
This log provides measurement details on an SV basis. Where float or double is used, the format
is IEEE unless otherwise specified.
VERSION 1 Version number of packet
TIME_BIAS 4 (User time - GPS time) in milliseconds; float data type
TIME_UNC 4 Clock time uncertainty in nanoseconds; float data type
T
FREQ_BIAS 4 Clock frequency bias in m/s; float data type
n PS
FREQ_UNC 4 Clock frequency uncertainty in m/s; float data type
34
NUMBER_SVS 1 Number of SV information blocks to follow; range – 0 to 16
om 8:
l.c :4
. c
te 13
The following block is generated for each NUMBER_SVS SVs.
.7 bk t
41 -b 1 a

3
15
ei .0
SV_ID 1 Satellite ID; if value = 0, measurement data for this SV should

0.
w 01
be ignored; this should never happen since only valid

12
measurement data is output in this packet

ou 3.
2.
zh 201
OBS_STATE 1 SV observation state

 0 – Idle
 1 – Search
 2 – Search Verify
 3 – Bit Edge
 4 – Track_Verify
 5 – Track
 6 – Restart
 7-255 – Reserved
OBS_CNT 1 Count of all observations, both success and failure
GOOD_OBS_CNT 1 Count of good observations
FILTER_N 1 Carrier-to-code filtering; number of filter stages
CNO 2 Carrier-to-noise in a 1 Hz bandwidth; 0.01 dB-Hz per bit; range

is 0 to 655.35 dB-Hz
LATENCY 2 Current Fcount minus Fcount at which measurement was

effective; signed value
PRE_INT 1 Pre-det interval in milliseconds
POST_INT 2 Number of post-dets

Log Record Formats

UNFILT_MS 4 Unfiltered measurement millisecond in user time; unsigned
value in milliseconds; range is 0 to (604800000 -1) ms
UNFILT_SM 4 Unfiltered measurement fractional milliseconds in user time;

float data type in ms; range is 0 to 0.99999 ms
UNFILT_TIME_UNC 4 Unfiltered SV time uncertainty in nanoseconds; float data type;

range is unsigned float
UNFILT_SPEED 4 Unfiltered SV speed in m/s; float data type
UNFILT_SPEED_ 4 Unfiltered SV speed uncertainty in m/s; float data type

UNC
MEAS_STATUS 4 Measurement status flags; description applies when bit is set

to 1
Bit Description
T
0 Submillisecond is valid
n PS
1 Subbit time is known
34
2 Satellite time is known
om 8:
l.c :4 3 Bit edge confirmed from signal
. c
te 13
4 Measured velocity
.7 bk t
5 Fine/coarse velocity
41 -b 1 a
3
15
6 Lock point valid
ei .0
0.
w 01
7 Lock point is positive

12
ou 3.
8 Good parity
2.
zh 201
9 Last update from difference, not

measurement
10 Last update from velocity difference and

not velocity measurement
11 Strong indication of cross correlation

12 Tentative measurement
13 Do not use the measurement
14 SIR check is needed
15-31 Reserved
MISC_STATUS 1 Status flags to indicate validity of data; description applies

when bit is set to 1
Bit Description
0 Multipath estimate is valid
1 Dir (Azi, Elev) is valid
2-7 Reserved
MULTIPATH_EST 4 Multipath estimate in meters; 0:2^32-1 meters

Log Record Formats

AZI_RAD 4 Azimuth of SV; data type is float; range is 0.0*pi/180 to
360.0*pi/180 radians
ELEV_RAD 4 Elevation of SV; data type is float; range is -90.0*pi/180 to

+90.0*pi/180 radians
CARRIER_PHASE_ 4 Signed value; measurement in L1_cycles; special case –

CYCLES Cycle slip is indicated by 0x80000000
CARRIER_PHASE_ 2 Fractional part of L1_cycles; unit is L1_cycles/65536; to

FRACT reconstruct complete carrier phase, combine fractional and
integer parts (except when there’s a cycle slip)
The following is the format if VERSION equals 1
RESERVED1 4 Reserved for future use
The following is the format if VERSION equals 2
T
Cycle Slip Count 1 Cycle slip count
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.534 LOG_CONVERGED_GPS_RF_STATUS_REPORT_C
(LOG_CODE 0x1372)
PLL_CHAN_AND_ 1 LS bit provides PLL lock status; Boolean Value

LOCK_STATUS  Bit[0] – 0, Not locked
 Bit[0] – 1, Locked
Remaining bits represent PLL channel on which lock is
obtained; unsigned value; range is 0 to 31
BP_MEAN_I 2 Mean estimate (DC) of I component in MGP Baseband

Processor; signed value
BP_MEAN_Q 2 Mean estimate (DC) of Q component in MGP Baseband
T
Processor; signed value
n PS
BP_AMPL_I 2 Amplitude estimate of I component in MGP Baseband
34
Processor; unsigned; larger numbers represent larger
amplitude
om 8:
l.c :4
c
BP_AMPL_Q 2 Amplitude estimate of Q component in MGP Baseband
.
te 13
Processor; unsigned; larger numbers represent larger
amplitude
.7 bk t
41 -b 1 a
BP_ROTATOR_ 4 Frequency by which Cordic translates frequency; applicable to

3
15
FREQ I and Q samples; signed value
ei .0
0.
w 01
BP_ROTATOR_ 2 To handle frequency drifts automatically, this delta frequency

12
DELTA_FREQ value is added to BP frequency rotator value every 1 ms;

ou 3.
signed value
2.
zh 201
RXF_GPF_CTL 1 GPF field validity flag; description applies when bit is set to 1
Bit Name Description
0 Notch_en Notch filter enabled
1 Notch2_en Second notch filter

enabled
2 Micro_dc_ DC offset value in

override RXF_GPF_MICRO_DC_
OFFSET_GAIN used
3 Gain_en Gain value in

RXF_GPF_MICRO_DC_
OFFSET_GAIN valid
4 to 7 – Reserved

Log Record Formats

RXF_GPF_MICRO_ 4 Value used to cancel out DC offset:
DC_OFFSET_GAIN  Bit[12]:Bit[0] – I branch
 Bit[25]:Bit[13] – Q branch; valid only if Bit[2] of
RXF_GPF_CTL is set
 Bit[26]:Bit[28] – Gain of amplitude-adjusting IIR; valid only if
Bit[3] of RXF_GPF_CTL is set
Bit[28]:Bit[26] Number of bit shifts
000 No left shift or right shift
001 Left shift by 1 bit
010 Left shift by 2 bits
011 Left shift by 3 bits
T
100 Reserved
n PS
101 Right shift by 1 bit
34
110 Right shift by 2 bits
om 8:111 Right shift by 3 bits

l.c :4
. c
te 13
RXF_GPF_COEFF_ 4 GPF Notch Filter coefficient setting; each of four bytes is an
NOTCH independent setting
.7 bk t
41 -b 1 a
3
Description (Signed
Bits Name
15
ei .0
coefficients)
0.
w 01
31:24 Rot_i_h Imaginary, upper half

12
ou 3.
23:16 Rot_i_l Imaginary, lower half

2.
zh 201
15:8 Rot_r_h Real, upper half
7:0 Rot_r_l Real, lower half
Valid only if Bit[0] of RXF_GPF_CTL is set
RXF_GPF_COEF_ 4 GPF Notch2 Filter coefficient setting; each of four bytes is an

NOTCH2 independent setting
Description (Signed
Bits Name
coefficients)
31:24 Rot_i_h Imaginary, upper half
23:16 Rot_i_l Imaginary, lower half
15:8 Rot_r_h Real, upper half
7:0 Rot_r_l Real, lower half
Valid only if Bit[1] of RXF_GPF_CTL is set
MND_CNTR_M 4 Defines M value for M/N:D counter

(unsigned)
MND_CNTR_N 4 Defines N value for M/N:D counter

(unsigned)
MND_CNTR_D 4 Defines D value for M/N:D counter

(unsigned)

Log Record Formats

VALID_FLAG 1 Measurement status flags; description applies when bit is set to
1
Bit Description
0 DC Offset valid (I and Q)
1 Loop settle time valid
2 Gain value valid
3 to 7 Reserved
RF_DC_OFFSET_I 1 Value of register in GPS RF IC used to control I component of

DC offset in baseband signal; provides coarse tune; unsigned
value; valid only if bit[0] in VALID_FLAG is set
RF_DC_OFFSET_Q 1 Value of register in GPS RF IC used to control Q component of

DC offset in baseband signal; provides coarse tune; unsigned
T
value; valid only if bit[0] in VALID_FLAG is set
n PS
RF_DC_LOOP_SET 1 Time (in milliseconds) taken by DC adjusting loop to settle;
34
TLE_TIME unsigned value; valid only if bit[1] in VALID_FLAG is set
om 8:
ADC_GAIN 2 ADC gain setting; unsigned value with larger values
l.c :4
c
representing larger gain; valid only if bit[2] in VALID_FLAG is
.
te 13
set
RFIC_ID 1 RFIC ID has the following values:

.7 bk t
41 -b 1 a
0 – Unknown
3

15
 1 – RFR6500 (Igloo)
ei .0
 2 – RTR6285
0.
w 01
12
ou 3.
2.
zh 201
5.3.535 LOG_VOIP_TO_CDMA_HANDOVER_MSG_C
This log code has been replaced by log codes 0x138B, 0x138C, and 0x138D described in
Section 5.3.559, Section 5.3.560, and Section 5.3.561.

Log Record Formats
5.3.536 LOG_GPS_PRESCRIBED_DWELL_RESULT_C
(LOG_CODE 0x1374)
This log contains a single prescribed dwell result.
Length
Field Description
(bytes)
SEQ_NUM 4 Reserved
RxD_FLAG 1 Applicable to LBW SRCH_MODEs ONLY; valid values

are:
 0 – No RxD
 1 – Primary + RxD linked
 2–
T
n PS
34
STATUS_FLAG 2  Bit 0
om 8:
l.c :4  0 – No peak (Cno, Dopp_Hz, Code Phase are
invalid)
. c
 1 – Peak is valid
te 13
 Bit 1
.7 bk t
 0 – As prescribed; all parameters specified in this

41 -b 1 a
3
command are applied unchanged
15
ei .0
 1 – Automatic code phase and Doppler

centering; code phase and Doppler parameters
0.
w 01
from the DM command are ignored; the GNSS

12
ou 3.
software propagates the values from prior

2.
zh 201
measurements stored in software

 Bit 2 – Applicable to auto dwells only
 0 – No truncation of code phase center when
prescribed dwell was submitted
 1 – Truncation of code phase center when
prescribed dwell was submitted so that the peak
is randomly sampled within the chip
 Bit 3 – Applicable to auto dwells only
 0 – No randomization of Doppler
 1 – Randomization of Doppler
SV 1 (signed) SV id for GPS and SBAS dwell; R1 frequency in terms

of frequency K for GLO dwell:
 1 ~ 32 for GPS
 33 ~ 64 for SBAS
 -7 ~ 6 for GLO
All remaining values between -128 and 127 are
reserved
DOPP_HZ 4 Doppler in Hertz; range: -1 MHz ~ 1 MHz
DOPP_UNC_HZ 4 Doppler uncertainty in Hertz; range: -1 MHz ~ 1 MHz
DOPP_WIN_USED_HZ 4 (signed) GPS/GLO Doppler window used; driven by the

prescribed dwell diagnostic command

Log Record Formats
Length
Field Description
(bytes)
CNO_DBHZ 4 SNR in 1 Hz bandwidth (in dB-Hz)
CODE_PHASE_CHIPS 4 Code phase offset of peak (in Chips);

range: 0 ~ 1022.9999 for GPS, 0 ~ 511.9999 for GLO
CODE_PHASE_UNC_CHIPS 4 Code phase uncertainty (in Chips);

range: 0 ~ 1022.9999 for GPS, 0 ~ 511.9999 for GLO
CODE_WIN_USED_CHIPS 2 GPS/GLO code window used
SRCH_MODE 1  0-2 – Reserved

 3 – GPS LBW Chipx2 20 ms PDI
 4 – GPS LBW Chipx2 160 ms PDI
 10 – GPS HBW Chipx20 20 ms PDI
18 – GLO Chipx2 20 ms PDI
T

n PS
NUM_POST_DET 2 Number of post detections; range: 1 ~ 65535
34
(unsigned)
GLO_HW_CHAN 1
om 8:Glo hardware channel number used; not applicable to
l.c :4
. c
(unsigned) GPS dwell results; range: 1 ~ 12 (0 and 13 ~ 255 are
te 13
reserved)
.7 bk t
41 -b 1 a
PFA 1
3 Probability of False Alarm; internally represented as a
(unsigned) power of 10; defines the exponent without the negative
15
ei .0
sign, e.g., If PFA 10-4 was used, then this field equals 4;
0.
w 01
range: 0 ~ 255
12
ou 3.
DWELL_CNT 2 Serial count of the dwell being sent to phone; useful

2.
zh 201
(unsigned) when running a test involving several dwells; provides a

running count of the dwells
TOTAL_NUM_DWELLS 2 Total number of dwells that the sequence intends to go

(unsigned) up to
PASS_DWELL_CNT 2 Useful in scenarios where a sequence of dwells are

(unsigned) issued and the command issuing entity is keeping a
count of dwells that pass
RESERVED 4 Reserved
This log is generated every 12 sec. The worst case packet size for this log is 54 bytes.

Log Record Formats
5.3.540 Reserved (LOG CODE 0x1378)
5.3.542 Reserved (LOG CODE 0x137A)
T
5.3.543 Reserved (LOG CODE 0x137B)
n PS
34
om 8:
5.3.544 CGPS_PDSM_POSITION_REPORT_CALLBACK l.c :4
c
(LOG CODE 0x137C)
.
te 13
This log is sent to report a position in response to a pdsm_get_position request.

.7 bk t
41 -b 1 a
3
15
ei .0
Length
Field Description
0.
w 01
(bytes)
12
ou 3.
CLIENT_ID 4 PDAPI client ID that requested the position

2.
zh 201
unsigned
LATITUDE 4 Latitude of the fix; 180/225 degrees per bit, range of -90 degrees
to +90x(1-2-24) degrees referenced to WGS-84 ellipsoid, counting
positive angles north of the equator and negative angles south of
the equator (signed integer)
LONGITUDE 4 Longitude of the fix; 360/226 degrees per bit, in the range from
-180 degrees to +180×(1-2-25) degrees, referenced to the
WGS-84 reference ellipsoid, counting positive angles east of the
Greenwich meridian and negative angles west of the Greenwich
meridian (signed integer)
TIME_STAMP 4 Timestamp, in seconds, since January 6, 1980, 12:00 am

(unsigned int)
LOC_UNCERTAINTY_ 1 Location uncertainty angle; angle of axis with respect to True
ANG North for position uncertainty; the mobile station shall set this field
to the angle of axis for position uncertainty in units of 5.625
degrees, in the range from 0 to 84.375 degrees, where 0 degrees
is True North and the angle increases toward the East
LOC_UNCERTAINTY_A 1 Standard deviation of axis along angle specified for position

uncertainty encoded as specified in Section 5.3.544.1
LOC_UNCERTAINTY_P 1 Standard deviation of axis perpendicular to angle specified for

position uncertainty encoded as specified in Section 5.3.544.1

Log Record Formats
Length
Field Description
(bytes)
OPT_FIELD_MASK 1 Flag to indicate whether optional fields are valid (unsigned):
 BIT[0] = PDSM_PD_ALTITUDE_VALID, altitude value is valid if
this field is set
 BIT[1] = PDSM_PD_VELOCITY_VALID, heading value is valid
if this field is set
 BIT[2] = PDSM_PD_UTCOFFSET_VALID, if the UTC Offset
field is set
 BIT[3] = PDSM_PD_UNCERTAINTY_VALID, position
uncertainty information is valid if this bit is set
 BIT[4] = PDSM_PD_EXT_LOC_VALID, flag indicating if
extended location information is present
ALTITUDE 2 Altitude in meters; WGS-84 ellipsoid (signed)
HEADING 2 Heading in units of 360/210 degrees per bit, in the range from 0 to
T
n PS
360×(1-2-10) degrees; 0 degree is True North and the angle
increases toward the East (unsigned)
34
VELOCITY_HOR 2 Horizontal velocity 0.25 meters/sec (unsigned)
FIX_TYPE 1
om 8:
Fix type (1 if 3D fix, 0 otherwise) (unsigned)
l.c :4
. c
te 13
VELOCITY_VER 1 Vertical velocity 0.5 meters/sec (signed)
.7 bk t
LOC_UNCERTAINTY_V 1 Standard deviation of vertical error for position uncertainty

41 -b 1 a
3
encoded as specified in Section 5.3.544.1
15
ei .0
GPS_POSITIONING_ 1 Positioning method (unsigned)

0.
w 01
METHOD  MS BASED = 0
12
ou 3.
 MS ASSISTED = 1
2.
zh 201
 STANDALONE = 2
 UNKNOWN = 3
POSITION_SOURCE 1 Source of the position; bit map used to indicate the source of the
position:
 BIT[0] = GPS – Indicates a GPS position if set to 1
 BIT[1] = CELL_ID – Indicates a CELL_ID position if set to 1
 BIT[2] = SFT – The GPS position was computed using Solve
for time; BIT [0] should be set if this bit is set
 BIT[3] = 0 for OLD, 1 for NEW
 BIT[4] = DEFAULT – If a default position was returned
 BIT[5] = UNKNOWN – If the source of the position is
UNKNOWN
 BIT[6] = WLS/KF, if 0 it is a WLS fix, 1 if KF; only valid if BIT[0]
is set
 Remaining bits are unused and set to 0
END_SESSION_ 1 Not needed

REASON
UNC_ELLIPSE_ 1 Confidence value for the uncertainty ellipse; 0 to 100%

CONFIDENCE
UTC_OFFSET 1 UTC offset; only valid if the UTC offset valid flag is set to 1

Log Record Formats
Length
Field Description
(bytes)
PACKET VERSION 1 Version number of the packet; set to 2
RESERVED 4 Reserved bytes
EXT_LOC_LAT 4 Latitude in WGS84; gives more resolution than the latitude value
above; signed value with π/232 radians per bit; range is from -π/2
to +π/2 in radians
EXT_LOC_LONG 4 Longitude in WGS84; gives more resolution than the longitude

value above; signed value with 2π/232 radians per bit; West is -ve;
range is from -π to +π in radians
EXT_LOC_ 2 Extended value of uncertainty in meters

UNCERTAINITY_A

UNCERTAINITY_P
T
n PS
VELHORIZ 4 Horizontal velocity in cm/s
VELVERT 4 Vertical velocity in cm/s
34
om 8:
TIME_STAMP_TOW_MS 4 Timestamp in GPS TOW milliseconds
l.c :4
c
TIME_STAMP_GPS_ 2 Timestamp GPS week number
.
te 13
WEEK
.7 bk t
POS_REPORTED_TO_ 1 True if this position was reported to the network

41 -b 1 a
3
NETWORK
15
ei .0
VELUNCHORIZ 4 Horizontal velocity unc

0.
w 01
12
VELUNCVERT 4 Vertical velocity unc

ou 3.
2.
zh 201
5.3.544.1 Position Uncertainty table
Standard deviation for position uncertainty

LOC_UNCRTNTY
(meters)
00000 0.5
00001 0.75
00010 1
00011 1.5
00100 2
00101 3
00110 4
00111 6
01000 8
01001 12
01010 16

Log Record Formats
Standard deviation for position uncertainty

LOC_UNCRTNTY
(meters)
01011 24
01100 32
01101 48
01110 64
01111 96
10000 128
10001 192
10010 256
10011 384
10100 512
T
n PS
10101 768
34
10110 1,024
om 8:
10111 l.c :4 1,536
. c
11000 2,048
te 13
11001 3,072
.7 bk t
41 -b 1 a
3
11010 4,096
15
ei .0
11011 6,144
0.
w 01
12
ou 3.
11100 8,192
2.
zh 201
11101 12,288
11110 >12,288
11111 Not computable

Log Record Formats
5.3.545 Reserved (LOG CODE 0x137D)
5.3.546 Reserved (LOG CODE 0x137E)
T
n PS
34
5.3.552 LOG_CGPS_PDSM_EXT_STATUS_NMEA_REPORT
(LOG_CODE 0x1384) om 8:
l.c :4
. c
te 13
This log is generated whenever a NMEA string is output. Note that NMEA_PQXFI and
.7 bk t
NMEA_PSTIS are Qualcomm proprietary sentences.

41 -b 1 a
3
15
ei .0
Length
Field Description
0.
w 01
(bytes)
12
ou 3.
VERSION 1 Version
2.
zh 201
CLIENT_ID 4 Client ID
NMEA_SENTENCE_TYPE 2 2-byte bitmap

 0x0001 – NMEA_GGA
 0x0002 – NMEA_RMC
 0x0004 – NMEA_GSV
 0x0008 – NMEA_GSA
 0x0010 – NMEA_VTG
 0x0020 – NMEA_PQXFI = 0x0020
 0x0040 – NMEA_GLGSV
 0x0080 – NMEA_GNGSA
 0x0100 – NMEA_GNGNS
 0x0200 – NMEA_PSTIS
NMEA_SENTENCE_LENGTH 1 Length of the NMEA sentence
NMEA_SENTENCE_DATA 200 NMEA sentence data
This log is generated up to every second. The worst case packet size for this log is 208 bytes.

Log Record Formats
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.555 LOG_CGPS_REP_SVR_RX_LOG_PACKET_C (LOG_CODE

0x1387)
This log records the entire message for each message that LM either sends (Tx) or receives (Rx)
from the location server. The purpose of this log is to help during development, bug fix, and
assessment, since all communication with external servers are logged verbatim.
As in Gen 7, any message that is larger than the maximum length of one log message (512 bytes
for the DATA field) is broken into multiple segments. If a segment of a multi-segment message is
missed, the entire message may be dropped (tool dependent).
LINK_TYPE 1 Link type:

 0 – SIO (Serial I/O)
 1 – GCS (GSM circuit switch)
T
n PS
PROTOCOL_TYPE 1 Protocol type:
 0 – Unknown
34
 1 – POSLOC
om 8:
l.c :4  2 – RRLP
 3 – Supplementary services
. c
 4 – Decoded RRC
te 13
 5 – PRE SUPL
.7 bk t
 6 – SUPL 1.0
41 -b 1 a
3
 7 – RRLP V5
15
ei .0
 8 – IS-801
0.
w 01
 9 – V1/V2
12
 10 – KDDI
ou 3.
 11 – IS801-B
2.
zh 201
 12 – RRLP-V8
 13 – SUPL2.0
 251 – Rx error: Bad or misplaced sync character
 252 – Rx error: Bad checksum
 253 – Rx error: Message too short, less than
minimum
 254 – Rx error: Received extra bytes between end of
message and beginning of next message, none
expected
 255 – Rx error: Received buffer overrun
SEQ_NUM 1 Sequence number; increments for each log message

attempted; increments for each segment of a
multi-segment message; used to detect missing
packets; the sequence number is different for Tx and Rx
FLAGS 1 Used for segment indication

 Bit[0]
 0 – Not first segment
 1 – First segment
 Bit[1]
 0 – No more segments
 1 – More segments

Log Record Formats

COUNT 2 Has dual use depending on whether the packet is the
first segment or other than the first segment:
 If FLAGS Bit[0] = 0 (not first segment), COUNT =
offset into the message where this segment begins;
this is helpful for the tool to place this segment within
the message
 If FLAGS Bit[0] =1 (first segment), COUNT = total
length of the message, irrespective of whether or not
it will be a multi-segment message
DATA Variable 1-512 bytes Message data bytes
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.3.556 LOG_UMTS_TO_CDMA_HANDOVER_PCH_MSG_C
(LOG_CODE 0x1388)
The packet is used to log CDMA messages tunneled from UMTS for handover to CDMA
system.
Length
Field Description
(bytes)
P_REV 1 P_REV used to parse the message.
MSG_LEN 2 Message length in unit of byte.
MESSAGE 255 Paging Channel Message (see IS-2000, Section 3.7.2).
This log is generated every time there is a request for handover from the UMTS to CDMA
system. The worst-case packet size for this log is 258 bytes. In addition to the length and the
T
external format of the CDMA message, the payload of the log packet also contains the P_REV
n PS
that QCAT needed for CDMA message parsing. The log should be placed under category LOG
PACKETS (OTA):CDMA.
34
5.3.557 LOG_UMTS_TO_CDMA_HANDOVER_TCH_MSG_C om 8:
l.c :4
. c
te 13
(LOG_CODE 0x1389)
.7 bk t
41 -b 1 a
The packet is used to log CDMA messages tunneled from the UMTS for handover to the CDMA
3
system.
15
ei .0
0.
w 01
Length
12
Field Description
ou 3.
(bytes)
2.
zh 201
P_REV 1 P_REV used to parse the message
MSG_LEN 2 Message length in unit of byte
MESSAGE 512 Forward Link Traffic Channel Message as tunneled from

UMTS (see IS-2000 Section 3.7.3)
This log is generated every time there is a request for handover from the UMTS to the CDMA
system. The worst-case packet size for this log is 515 bytes. In addition to the length and the
external format of CDMA message, the payload of the log packet also contains the P_REV that
QCAT needed for CDMA message parsing. The log should be placed under category LOG
PACKETS (OTA):CDMA.

Log Record Formats
5.3.558 LOG_CONVERGED_GPS_IQ_REPORT_C (LOG_CODE

0x138A)
The IQ test requires millions of samples to be transmitted from the phone to PC. Within a test,
there are five possible sub-packets, identified by the RESPONSE_TYPE field, to denote the
stages of a test.
An IQ test starts with the transmission of the Test Configuration packet. This test config
information, e.g., COLLECT_MODE, should be “remembered” by the parser for deciphering
subsequent IQ samples or FFT samples instances of this same DM log. Such a subsequent series
of samples is considered to be an integration.
After the last sample of an integration has been transmitted, an instance of this DM log is sent
with RESPONSE_TYPE set to 4 (Test Integration Ended) to indicate the end of an integration.
The test ends with a Test End instance of the DM log.
As an example of a typical IQ test, consider a scenario in which the test requires a collect with
T
COLLECT_MODE of 1, NUM_1K_SAMPLES of 256, and TOTAL_INTEG_CNT of 10, as
n PS
populated into the Test Configuration sub-packet.
34
The log sequence is as follows:
1. Test Configuration sub-packet
om 8:
l.c :4
. c
te 13
2. 512 packets IQ Samples sub-packet with 512 IQ samples (each sample is 1 byte)
.7 bk t
41 -b 1 a
3. Test Integration End sub-packet 3

15
4. Test Configuration sub-packet; this is same as 1 except that CURR_INTEG_NUM is
ei .0
0.
w 01
incremented by 1
12
ou 3.
5. If CURR_INTEG_NUM is less than or equal to TOTAL_INTEG_CNT, go to 2

2.
zh 201
6. Test Ended sub-packet
RESPONSE_TYPE 1 Response type; this field defines what data is populated in

subsequent fields
Value Type
0 Not used
1 IQ samples
2 FFT samples
3 Test configuration
4 Test integration ended
5 Test ended
6-255 Reserved

Log Record Formats

TOTAL_PACKETS 4 Total number of packets for this RESPONSE_TYPE; this
number resets when the RESPONSE_TYPE changes
CURR_PACKET_NUM 4 Current packet number for this RESPONSE_TYPE; this

number resets when the RESPONSE_TYPE changes;
CURR_PACKET_NUM in conjunction with TOTAL_PACKETS
can help detect lost packet number
If the RESPONSE_TYPE equals IQ Samples, and COLLECT_MODE equals 0 through 4, the

sample packets that follow should be interpreted as:
IQ_SAMPLE 1 Signed value; range is upper 4-bit nibble for I, lower 4-bit
nibble for Q
T
n PS
If the RESPONSE_TYPE equals IQ Samples, and COLLECT_MODE equals 5 through 11, the
34
om 8:
l.c :4
. c
te 13
I_SAMPLE 1 Signed value; range is -128 to +127
.7 bk t
Q_SAMPLE 1 Signed value; range is -128 to +127

41 -b 1 a
3
15
ei .0
If the RESPONSE_TYPE equals IQ Samples, and COLLECT_MODE equals 12 or 13, the

0.
w 01

12
ou 3.
2.
zh 201
IQ_SAMPLE 4 Each I/Q sample is 3-bit; signed value; range is -7 to +8 [i0,

q0, i1, q1, i2, q2, i3, q3, i4, q4, i5, q5]
If the RESPONSE_TYPE equals IQ Samples, and COLLECT_MODE equals 14, the sample
packets that follow should be interpreted as:
IQ_SAMPLE 4 Each I/Q sample is 2-bit; signed value; range is -4 to +3

 ADC1[i0, q0] ADC2[i0, q0] ADC1[i1, q1] ADC2[i1, q1]
 ADC1[i2, q2] ADC2[i2, q2] ADC1[i3, q3] ADC2[i3, q3]
If RESPONSE_TYPE equals FFT, the following block is sent for each 4096/8196/16384/32768
power bins:

Log Record Formats
POWER 2 FFT power value in decibels

 The power array may span multiple DM packets
 The first POWER value in the first FFT log is for negative
Fspan/2 and the last sample in the last log is for positive
Fspan/2
 Fspan is the sampling frequency from COLLECT_MODE
field below
 Unsigned value: 0.002 dB per bit
 Range: 0 to 131.072 dB
When RESPONSE_TYPE equals Test Configuration, the following block is sent:
STATUS_FLAG 1 Bit no. Description
T
n PS
0 Hanning window enabled for onboard FFT
34
1 NBIQ Continuous mode
om 8:
l.c :4 2  0 – IQ data to follow
c
 1 – FFT data to follow
.
te 13
3-8 Reserved
.7 bk t
41 -b 1 a
FFT_PEAK_POWER 4 Power of FFT peak in decibels; unsigned value: 0.002 dB/bit;

3
range is 0 to 131.072 dB
15
ei .0
0.
w 01
FFT_CENTER_FREQ 4 Center frequency from FFT powers; signed value; 1 Hz/bit;

12
range:
ou 3.
 -1 MHz ~ +1 MHz for BP1 and BP2

2.
zh 201
 -500 kHz ~ +500 kHz for BP3

 -10 MHz ~ +10 MHz for BP4

Log Record Formats
COLLECT_MODE 1 This enumeration defines the Collect mode:
Value Type
0 WBIQ BP1 and BP2 simultaneous

(2.046 MHz sample rate)
1 WBIQ BP1 (2.046 MHz sample rate)
4 FBIQ BP4 (20.46 MHz sample rate)
5 NBIQ BP1 autocenter (1 kHz sample rate)

T
n PS
8 NBIQ BP1 manual (1 kHz sample rate)
34
om 8:
l.c :4 10 NBIQ BP3 manual (1 kHz sample rate)
. c
te 13
12 (84 div by 5) MHz (Sample Logging ADC1);

.7 bk t
41 -b 1 a
each 32-bit word has 3-bit I and 3-bit Q from

3
ADC1; LSB is the most recently captured
15
ei .0
sample
0.
w 01
13 (84 div by 5) MHz (Sample Logging ADC2);

12
ou 3.
each 32-bit word has 3-bit I and 3-bit Q from

2.
zh 201
ADC1; LSB is the most recently captured

sample
14 (84 div by 4) MHz (Sample Logging ADC1 +

ADC2); each 32-bit word has 2-bit I and 2-bit
Q from ADC1 and 2-bit I and 2-bit Q from
ADC2; format: ADC1:ADC2 (I:Q); LSB is the
most recently captured sample
15-255 Reserved
GLO_R1_FREQ 1 This enumeration defines the 14 possible GLO R1 frequencies;

signed number:
 -7 ~ +6 – 14 possible Glonass R1 frequencies starting from
1598.0625 and increasing in steps of 562.5 kHz.
 7 ~ 127 and -128 ~ -8 – Reserved
GLO_HW_CHAN 1 This enumeration defines one of 12 BP3 hardware channels

used in the collect:
 0 ~ 11 – 12 possible GLO physical channels
 12 - 255 – Reserved
NUM_1K_SAMPLES 2 Number of samples (in units of KSamples) collected per

integration
 1 ~ 1024 – Valid
 > 1024 – Invalid

Log Record Formats
TOTAL_INTEG_CNT 1 Total number of incoherent integrations requested

 > 0 – Allowed
CURR_INTEG_NUM 1 Current incoherent integration number

 > 0 – Allowed
NBIQ_CENTER_ 4 Center frequency used in searcher for NB IQ test; signed

FREQ_HZ value; 1 Hz/bit; range:
 -1 MHz ~ +1 MHz for BP1 and BP2
 -500 kHz ~ +500 kHz for BP3
 -10 MHz ~ +10 MHz for BP4
BP_OFFSET_FREQ_ 4 Net frequency offset applied to the BP chosen; if BP ID chosen

HZ is enum 0, (BP1 + BP2), this number is applicable to BP1 only;
signed value; 1 Hz resolution; range is -42 Hz to 42 Hz
TOTAL_RELATIVE_ 4 TBD
T
GAIN
n PS
RF_MODE 1 Primary RF path can be in three possible RF modes:
34
 0 – RFCOM_GNSS_MODE_WB
 1 – RFCOM_GNSS_MODE_NB
om 8:
 2 – RFCOM_GNSS_MODE_GLONASS_TEST (this is the
l.c :4
c
same as RFCOM_GNSS_MODE_WB, except that the CMF
.
te 13
is bypassed in BP4)
 3 - 255 – Reserved
.7 bk t
41 -b 1 a
3
RESERVED 4 Reserved
15
ei .0
0.
w 01
This log is generated at the maximum supported rate. Worst case packet size for this log is 522
12
ou 3.
bytes.
2.
zh 201

Log Record Formats
5.3.559 LOG_VOIP_TO_CDMA_PCH_HANDOVER_MSG_C
(LOG_CODE 0x138B)
The packet is used to log paging channel CDMA messages tunneled from VoIP to the CDMA
system as part of the VOIP-to-1X handoff process.
MESSAGE 512 Paging Channel message (see IS-2000, Section 3.7.2), as

tunneled from VoIP to CDMA
This log is generated every time a Paging Channel message is tunneled from VoIP to CDMA as
part of the VOIP-1X handoff procedure. The worst case packet size for this log is 514 bytes. In
addition to the CDMA message, the payload of the log packet also contains the P_REV that
QCAT needs for CDMA message parsing. The log should be placed under the category LOG
T
n PS
PACKETS (OTA):CDMA.
34
5.3.560 LOG_VOIP_TO_CDMA_ACH_HANDOVER_MSG_C
(LOG_CODE 0x138C) om 8:
l.c :4
. c
te 13
The packet is used to log Access Channel CDMA messages tunneled from CDMA to VoIP, as
.7 bk t
part of the VOIP-to-1X handoff process.

41 -b 1 a
3
15
ei .0

0.
w 01

12
ou 3.
2.
zh 201
MESSAGE 512 Access Channel message (see IS-2000 Section 2.7.1), as

tunneled from CDMA to VOIP
This log is generated every time an Access Channel message is tunneled from CDMA to VoIP as
part of the VOIP-1X handoff procedure. The worst case packet size for this log is 514 bytes. In
addition to the CDMA message, the payload of the log packet also contains the P_REV that
QCAT needs for CDMA message parsing. The log should be placed under the category LOG
PACKETS (OTA):CDMA.

Log Record Formats
5.3.561 LOG_VOIP_TO_CDMA_FTC_HANDOVER_MSG_C
(LOG_CODE 0x138D)
The packet is used to log Forward Traffic Channel CDMA messages tunneled from VoIP to the
CDMA system as part of the VoIP-to-1X handoff process.
MESSAGE 512 Forward Link Traffic Channel message (see IS-2000,

Section 3.7.3) as tunneled from VoIP to CDMA
This log is generated every time a Forward Traffic Channel message is tunneled from VoIP to
CDMA as part of the VoIP-1X handoff procedure. The worst case packet size for this log is 514
bytes. In addition to the CDMA message, the payload of the log packet also contains the P_REV
that QCAT needs for CDMA message parsing. The log should be placed under the category LOG
T
n PS
PACKETS (OTA):CDMA.
34
5.3.562 QMI Link 1 RX (LOG_CODE 0x138E)
om 8:
l.c :4
c
This packet is used to log QMI Link Rm Network Interface Instance 1 for the Rx direction. This
.
te 13
log is generated every time a QMI message is sent in the Rx direction.
.7 bk t
41 -b 1 a

3
15
ei .0
QMUX PDU var For description of the format, see [Q8] and [Q9].
0.
w 01
12
ou 3.
5.3.563 QMI Link 1 TX (LOG_CODE 0x138F)

2.
zh 201
This packet is used to log QMI Link Rm Network Interface Instance 1 in the Tx direction. This
log is generated every time a QMI message is sent in the Tx direction.
QMUX PDU var For description of the format, see [Q8] and [Q9].
5.3.564 Reserved (LOG_CODE 0x138G – 0x13AE)

Log Record Formats
5.3.565 QoS Info Code Update Logging (LOG_CODE 0x13AF)

This log packet logs any additional information that is available for a QoS instance. Each QoS
instance is uniquely identified by QOS_ID.
VERSION 1 Version of this log packet; currently it is 1
INFO CODE 1 An enum which provides updated information
RESERVED 2 Reserved field; defined in order to make the log packet word
aligned
T
n PS
34
5.3.568 LOG_DEC_CRC_FRAME_C (LOG_CODE 0x13B2)
om 8:
l.c :4
. c
Rather than log the entire YUV, an integrated CRC calculator will generate a CRC for the frame
te 13
which is compared to the reference CRC to check for errors. The CRC comparator tool created is
.7 bk t
tracked by ECR 107337.

41 -b 1 a
3
15
ei .0

0.
w 01
12
FrameNumber 2 Frame number in decoding order

ou 3.
2.
zh 201
LogCrcValue 2 CRC value calculated on the YUV frame
TimeStamp 4 Display timestamp
This log is generated every video frame decode. The worst case packet size for this log is 8 bytes.
5.3.569 LOG_FLUTE_SESSION_INFO_C (LOG_CODE 0x13B3)

This log packet logs FLUTE session information (payload is in little endian format).
pkt_len 2 Packet length (total size of the following fields, not

including pkt_len)
version 1 Version
handle 4 Specifies the session handle
source_ip 16 Specifies the source IP (IPv6 address)
tsi 6 TSI
start_time 4 Specifies the start time (NTP time in seconds)
end_time 4 Specifies the end time (NTP time in seconds)

Log Record Formats
sdp_uri_len 1 Specifies the SDP URI length
num_channels 1 Specifies the number of channels
sdp_uri 1 * sdp_uri_len Specifies the SDP URI; non-NULL terminated character

array in big endian format
The following fields are num_channels times:
dest_ip 16 Specifies the IPv6 address
dest_port 2 Specifies the destination port
The frequency of this log is application- and network-dependent. The worst-case packet size for
T
5.3.570 LOG_FLUTE_ADP_FILE_INFO_C (LOG_CODE 0x13B4)
n PS
This log packet logs FLUTE ADP file information (payload is in little endian format).
34
om 8:
l.c :4 Description
. c
te 13
including pkt_len)
.7 bk t
41 -b 1 a
version 1 Version
3
15
ei .0
adp_file_id 4 Unique ID identifying the file to which this log packet

0.
w 01
belongs
12
ou 3.

2.
zh 201
tsi 6 TSI
service_id 4 Specifies the service ID

adp_uri_len 1 Specifies the ADP URI length
adp_file_len 4 Specifies the ADP file length
adp_uri adp_uri_len Specifies the ADP URI; non-NULL terminated character

5.3.571 LOG_FLUTE_FILE_REQ_INFO_C (LOG_CODE 0x13B5)

This log packet logs FLUTE file request information (payload is in little endian format).

including pkt_len)
version 1 Version

Log Record Formats

req_id 4 Specifies the request ID
update_flag 1 Update flag
attr_name_len 1 Specifies the attribute name length
attr_value_len 1 Specifies the attribute value length
attr_name attr_name_len Specifies the attribute name; non-NULL terminated

character array in big endian format
attr_value attr_value_len Specifies the attribute value; non-NULL terminated

character array in big endian format
T
n PS
5.3.572 LOG_FLUTE_FDT_INST_C (LOG_CODE 0x13B6)
34
This log packet logs FLUTE FDT instance information (payload is in little endian format).
om 8:
l.c :4
c
.
te 13

.7 bk t
including pkt_len)
41 -b 1 a
3
version 1 Version
15
ei .0
0.
w 01
fdt_inst_file_id 4 Unique ID identifying the file to which this log packet

belongs
12
ou 3.
2.
zh 201
tsi 6 TSI
fdt_instance_id 3 Specifies the FDT instance ID

fdt_file_len 4 Specifies the FDT file length
5.3.573 LOG_FLUTE_FDT_INFO_C (LOG_CODE 0x13B7)

This log packet logs FLUTE FDT information (payload is in little endian format).

including pkt_len)
version 1 Version
fdt_info_id 4 Unique ID identifying the file to which this log packet

belongs

Log Record Formats
tsi 6 TSI
num_entries 2 Specifies the number of URI-TOI entries
5.3.574 LOG_FLUTE_FILE_INFO_C (LOG_CODE 0x13B8)

This log packet logs FLUTE file log packet information (payload is in little endian format).

including pkt_len)
T
n PS
version 1 Version
34
file_id 4 Unique ID identifying the file to which this log packet
belongs
om 8:
l.c :4
c
.
te 13
content_len 4 Specifies the actual content length of the file

.7 bk t
41 -b 1 a
toi_len 1 Specifies the length of TOI field

3
15
ei .0
uri_len 1 Specifies the URI length

0.
w 01
toi 1 * toi_len TOI

12
ou 3.
uri 1 * uri_len URI; non-NULL terminated character array in big endian

2.
zh 201
format
5.3.575 LOG_VOIP_TO_CDMA_3G1X_PARAMETERS_C
(LOG_CODE 0x13B9)
The packet is used to log the overhead information that comes in the 3G1X parameters message
as part of the VoIP-to-1X handoff process. This log is generated every time a VoIP-to-1X handoff
is performed. The packet size for this log is 61 bytes.
Length
Field Description
(bytes)
SID 2 System ID
NID 2 Network ID
REG_ZONE 2 Registration zone
TOTAL_ZONES 1 Number of registration zones to be retained
ZONE_TIMER 1 Zone timer length

Log Record Formats
Length
Field Description
(bytes)
PACKET_ZONE_ID 1 Packet data services zone ID
PZ_HYST_ENABLED 1 Indicates that packet zone hysteresis is enabled
PZ_HYST_INFO_INCL 1 Indicates that packet zone hysteresis information is

included
PZ_HYST_LIST_LEN 1 Indicates the packet zone hysteresis list length
PZ_HYST_ACT_TIMER 1 Packet zone hysteresis activation timer
PZ_HYST_TIMER_MUL 1 Packet zone hysteresis timer multiplier
PZ_HYST_TIMER_EXP 1 Packet zone hysteresis timer exponent
P_REV 1 Protocol revision level

NEG_SLOT_CYCLE_INDEX_SUP 1 Indicates that the negative slot cycle index is
T
supported
n PS
ENC_SUPPORTED 1 Indicates that encryption fields are included
34
SIG_ENCRYPT_SUP 1 Indicates that signaling encryption is supported
om 8:
MSG_INTEGRITY_SUP 1 Indicates that message integrity is supported
l.c :4
. c
te 13
SIG_INTEGRITY_SUP_INCL 1 Indicates that signaling message integrity information
is included
.7 bk t
41 -b 1 a
SIG_INTEGRITY_SUP 1 Indicates that the signaling integrity algorithm is

3
15
supported by the base station
ei .0
0.
w 01
AUTH 1 Authentication mode

12
ou 3.
MAX_NUM_ALT_SO 1 Maximum number of alternative service options

2.
zh 201
USE_SYNC_ID 1 Indicates that Sync ID is supported
MS_INIT_POS_LOC_SUP_IND 1 Indicates that mobile station initiated position location

determination is supported
MOB_QOS 1 Indicator granting permission to the mobile station to

request QoS parameter settings in the Origination
Message, Origination Continuation Message, or
Enhanced Origination Message
BAND_CLASS_INFO_REQ 1 Band class information request indicator
ALT_BAND_CLASS 1 Alternate band class
MAX_ADD_SERV_INSTANCE 1 Specifies the maximum number of additional service

reference identifiers allowed in the origination
message
HOME_REG 1 Home registration indicator
FOR_SID_REG 1 SID roamer registration indicator
FOR_NID_REG 1 NID roamer registration indicator
POWER_UP_REG 1 Power-up registration indicator
POWER_DOWN_REG 1 Power-down registration indicator
PARAMETER_REG 1 Parameter-change registration indicator

Log Record Formats
Length
Field Description
(bytes)
REG_PRD 1 Registration period
REG_DIST 2 Registration distance
PREF_MSID_TYPE 1 Specifies the Preferred Access Channel Mobile

Station identifier type
EXT_PREF_MSID_TYPE 1 Specifies the Extended Preferred Access Channel

Mobile Station identifier type
MEID_REQD 1 Indicates that the MEID is required
MCC 2 Specifies the Mobile country code
IMSI_11_12 1 11th and 12th digits of the IMSI

IMSI_T_SUPPORTED 1 Indicates that IMSI_T is supported
T
RECONNECT_MSG_IND 1 Indicates that Reconnect Message is supported
n PS
RER_MODE_SUPPORTED 1 Indicates that radio environment reporting mode is
34
supported
om 8:
TKZ_MODE_SUPPORTED 1 Indicates that tracking zone mode is supported
l.c :4
. c
TKZ_ID 2 Specifies the tracking zone identifier
te 13
PILOT_REPORT 1 Pilot reporting indicator

.7 bk t
41 -b 1 a
3
SDB_SUPPORTED 1 Indicates that Short Data Burst is supported
15
ei .0
AUTO_FCSO_ALLOWED 1 Indicates that Autonomous Fast Call Setup Order is

0.
w 01
allowed
12
ou 3.
SDB_IN_RCNM_IND 1 Indicates that Short Data Burst is allowed in the

2.
zh 201
Reconnect Message
T_ADD 1 Pilot detection threshold
PILOT_INC 1 Pilot PN sequence offset index increment
5.3.576 Reserved (LOG_CODE 0x13BA)
5.3.577 Reserved (LOG_CODE 0x13BB)
5.3.578 Reserved (LOG_CODE 0x13BC)
5.3.579 Reserved (LOG_CODE 0x13BD)

Log Record Formats
5.3.580 LOG_FLUTE_ADP_FILE_C (LOG_CODE 0x13BE)

This log packet logs FLUTE ADP file content log packet information (payload is in little endian
format).

including pkt_len)
version 1 Version
adp_file_id 4 Unique ID identifying the file to which this log packet

belongs
adp_content_offset 4 Specifies the content offset
adp_content_chunk_len 2 Specifies the content chunk length
If adp_content_offset
T
n PS
adp_content_len 4 Specifies the content length (total file content length)
34
om 8:
tsi 6 TSI
l.c :4
. c
service_id 4 Service ID
te 13
adp_uri_len 1 Specifies the ADP URI length

.7 bk t
41 -b 1 a
3
adp_uri adp_uri_len Specifies the ADP URI; non-NULL terminated character
15
ei .0
0.
w 01
Endif
12
ou 3.
adp_content_chunk adp_content_ Specifies the content chunk; non-NULL terminated

2.
zh 201
chunk_len character array in big endian format
Since the size of the adp_content_chunk field can be very large, the adp_content_chunk field is
split into multiple log packets. The first log packet of this type will have certain additional fields
that will not be repeated in subsequent packets of the same type. The first packet of this type can
be identified by looking at the adp_content_offset field, which is set to 0 for the first packet. In
the subsequent log packets, this field contains the nonzero file offset.
Log packets containing fragments of the same file can be identified by looking at the adp_file_id
field, which will be the same in all fragments of the same file.

Log Record Formats
5.3.581 LOG_FLUTE_FDT_INST_FILE_C (LOG_CODE 0x13BF)

This log packet logs FLUTE FDT instance file content information (payload is in little endian
format).

including pkt_len)
version 1 Version
fdt_inst_file_id 4 Unique ID identifying the file to which this log packet

belongs
fdt_content_offset 4 Specifies the content offset
fdt_content_chunk_len 2 Specifies the content chunk length
If content_offset
T
n PS
fdt_content_len 4 Specifies the FDT content length (total file content length)
34
om 8:
tsi 6 l.c :4 TSI
. c
fdt_instance_id 3 Specifies the FDT instance ID
te 13
Endif
.7 bk t
41 -b 1 a
3
fdt_content_chunk fdt_content_ Content chunk; non-NULL terminated character array in
15
chunk_len big endian format
ei .0
0.
w 01
12
ou 3.
Since the size of the fdt_content_chunk field can be very large, the fdt_content_chunk field is
2.
zh 201
split into multiple log packets. The first log packet of this type will have certain additional fields
that will not be repeated in subsequent packets of the same type. The first packet of this type can
be identified by looking at the fdt_content_offset field, which is set to 0 for the first packet. In the
subsequent log packets, this field contains the nonzero file offset.
Log packets containing fragments of the same file can be identified by looking at the
fdt_inst_file_id field, which will be the same in all fragments of the same file.

Log Record Formats
5.3.582 LOG_FLUTE_FDT_ENTRIES_INFO_C (LOG_CODE 0x13C0)

This log packet logs FLUTE FDT entry information (payload is in little endian format).

including pkt_len)
version 1 Version
fdt_info_id 4 Unique ID identifying the file to which this log packet

belongs
entry_offset 2 Specifies the entry offset
num_entries 2 Specifies the number of entries in this log packet
If entry_offset
T
n PS
tsi 6 TSI
34
entries 2 Specifies the total number of entries
om 8:
Endif
l.c :4
. c
te 13
toi_len 1 Specifies the length of the TOI field (between 1 and 14)
.7 bk t

41 -b 1 a
3
toi 1 * toi_len TOI (maximum 14 bytes, typically 4 bytes)
15
ei .0
0.
w 01
uri 1 * uri_len URI; non-NULL-terminated string

12
ou 3.
2.
zh 201
The fields toi_len, uri_len, toi, and uri together form a single entry. num_entries indicates how
many such entries occur at the end of that particular log packet.
Since the total number of such entries (given by “entries”) can be very large, they are split into
multiple log packets. The first log packet of this type will have certain additional fields that will
not be repeated in subsequent packets of the same type. The first packet of this type can be
identified by looking at the entry_offset field, which is set to 0 for the first packet. In the
subsequent log packets, this field contains the nonzero entry offset. Log packets containing
fragments of the same log packet can be identified by looking at the fdt_info_id field, which will
be the same across all fragments.

Log Record Formats
5.3.583 LOG_FLUTE_FILE_C (LOG_CODE 0x13C1)

This log packet logs FLUTE file content information (payload is in little endian format).
pkt_len 2 Specifies the packet length (total size of the following

fields, not including pkt_len
version 1 Version
file_id 4 Unique ID identifying the file to which this log packet

belongs to
content_offset 4 Specifies the content offset
content_chunk_len 2 Specifies the content chunk length
If content_offset == 0
T
content_len 4 Specifies the content length (total file content length)
n PS
partial_len 4 Specifies the partial length (actual length of file contained
in this log packet, since content_len can be very large)
34
om 8:
l.c :4
c
toi_len 1 Specifies the TOI length
.
te 13

.7 bk t
41 -b 1 a
toi toi_len TOI

3
15
ei .0
uri uri_len Specifies the URI; non-NULL terminated character array

0.
w 01
in big endian format

12
ou 3.
Endif
2.
zh 201
content_chunk content_chunk_ Content chunk; non-NULL terminated character array in

len big endian format
Since the size of the content_chunk field can be very large, the content_chunk field is split into
multiple log packets. The first log packet of this type will have certain additional fields that will
not be repeated in subsequent packets of the same type. The first packet of this type can be
identified by looking at the ‘content_offset’ field, which is set to 0 for the first packet. In the
subsequent log packets, this field contains the non-zero file offset.
Log packets containing fragments of the same file can be identified by looking at the file_id
field, which will be the same in all fragments of the same file.

Log Record Formats
5.3.590 Reserved (LOG_CODE 0x13CB)
5.3.591 LOG_DEC_XSCALE_YUV_FRAME_C (LOG_CODE 0x13CC)
T
n PS
This log packet is for the XScaler module. It logs the entire YUV for the xScaled frame.
34
FrameNumber 2
om 8:Frame number within the current video; indicates
l.c :4
. c
the decoding order
te 13
ChunkNumber 2 Data block within the current frame

.7 bk t
41 -b 1 a
3
DataSize 2 Number of valid bits in the YUV buffer
15
ei .0
YUV 512 Dump of YUV data from the frame

0.
w 01
12
ou 3.
This log is generated for every video frame decode if this is a scaled frame. The worst case
2.
zh 201
packet size for this log is 518 bytes.
5.3.592 LOG_DEC_XSCALE_CRC_FRAME_C (LOG_CODE 0x13CD)

This log packet is for the XScaler module. Rather than log the entire YUV, an integrated CRC
calculator will generate a CRC for the frame which will be compared to the reference CRC to
check for errors. The CRC comparator tool created is tracked by ECR 107337.
Along with the CRC this log packet also logs the ScaledWidth and ScaleHeight for the decoded
frame. This log is generated whenever the scaling ratio changes and at the very first frame. The
worst case packet size for this log is 12 bytes.
FrameNumber 2 Frame number within the current video; indicates

the decoding order
LogCrcValue 2 CRC value for the xscaled YUV buffer
ScaledWidth 4 xScaled width
ScaledHeight 4 xScaled height

Log Record Formats
5.3.593 Reserved (LOG_CODE 0x13CE)
5.3.594 LOG_GPS_DCME_SRCH_JOB_COMPLETED_C (LOG_CODE

0x13CF)
This log packet is generated at the end of each search cycle only when the GPS is running DCME
srch sessions. The numbers reported for the following fields will be reported only if the
NEW_PEAK_FOUND is set to 1:
 MEAS_TS_MS
 CODE_PHASE_CX1024
 DOPPLER_P05HZ
 RMSE
 C_N0
T
n PS
34
SV_PRN_NUM 1/uint8 Specifies the sv_prn_num for the SV whose Job was
completed
om 8:
JOB_SRCH_MODE
l.c :4
1/uint8 Specifies the Srch mode for this job
. c
te 13
NEW_PEAK_FOUND 1/uint8 Specifies whether the srch on this job resulted in a peak
found
.7 bk t
41 -b 1 a
3
MEAS_TS_MS 8/qword Specifies the meas timestamp (ms) of the peak found
15
ei .0
CODE_PHASE_CX1024 4/uint32 Specifies the absolute code phase in Cx1024 for the
0.
w 01
peak found
12
ou 3.
DOPPLER_P05HZ 4/int32 Specifies the absolute doppler frequency in 0.05 Hz for

2.
zh 201
the peak found

RMSE 2/uint16 Specifies the RMSE for the peak found
C_N0 2/uint16 Estimated C/N0 in 1/100th of dB for the peak found
Frequency depends on the GPS signal conditions. The maximum frequency (very strong GPS
signal conditions) can be bursts of 13-14 logs every 240 ms.

Log Record Formats
5.3.598 Reserved (LOG_CODE 0x13D3 – 0x13DA)
5.3.599 Reserved (LOG_CODE 0x13DB)
5.3.600 Reserved (LOG_CODE 0x13DD – 0x13DE)
5.3.601 LOG_ROHC_COMPRESSOR_STATS_C (LOG_CODE 0x13DF)

This log packet is generated whenever the RoHC instance is cleared. This log is not generated
periodically. The maximum packet size for this log is 60 bytes, which is the total of all the fields.
T
n PS
out_packets 4 Number of packets generated by the compressor
bytes_original 4 Total number of bytes of the original headers
34
om 8:
bytes_comp 4 l.c :4 Total number of bytes after compression
c
pkt_bytes_original 4 Total number of bytes of the original packets
.
te 13
pkt_bytes_comp 4 Total number of bytes after compression

.7 bk t
41 -b 1 a
ir_produced 4 Number of IRs produced by the compressor

3
15
ei .0
ir_dyn_produced 4 Number of IR-DYNs produced by the compressor

0.
w 01
t0_produced 4 Number of type0 packets produced by the compressor

12
ou 3.
2.
zh 201
uncompressed 4 Number of packets sent uncompressed
in_acks 4 Number of acks received by the compressor
in_nacks 4 Number of nacks received by the compressor
in_snacks 4 Number of snacks received by the compressor
comp_failed 4 Number of compression failures

Log Record Formats
5.3.602 LOG_ROHC_DECOMPRESSOR_STATS_C (LOG_CODE

0x13E0)
This log packet is generated whenever an RoHC instance is cleared. This log is not generated
periodically. The maximum packet size for this log is 104 bytes, which is the total of all the
fields.
in_packets 4 Number of packets in to decompressor
bytes_original 4 Total original HDR number of bytes
bytes_decomp 4 Total HDR bytes before decompression
ir_received 4 Number of IRs received by the decompressor
ir_dyn_received 4 Number of IR-DYNs received by the decompressor
T
t0_received 4 Number of type0 packets received by the decompressor
n PS
34
om 8:
uncompressed 4 Number of packets received uncompressed
l.c :4
. c
te 13
out_acks 4 Number of ACKS generated by the decompressor
.7 bk t
out_nacks 4 Number of NACKs generated by the decompressor

41 -b 1 a
3
out_snacks 4 Number of static NACKs generated by the
15
ei .0
decompressor
0.
w 01
piggybacked_fb 4 Number of piggybacked feedbacks received by the

12
ou 3.
decompressor
2.
zh 201
decomp_failed 4 Number of decompression failures
ir_failed 4 Number of IR packet failures
ir_dyn_failed 4 Number of IR-DYN packet failures
t0_failed 4 Number of type0 packet failures
crc_failures 4 Number of CRC decompression failures
parse_errors 4 Number of header parsing/illegal packet errors
illegal_states 4 Number of packets failed in lower context states
invalid_contexts 4 Number of times the Decomp ctx was invalidated
unknown_profiles 4 Number of failures due to unsupported profiles
context_repair_successes 4 Number of successes in context repair
context_repair_discards 4 Number of packets discarded after successful ctx repair

Log Record Formats
5.3.603 LOG_SENSOR_KF_INFO_C (LOG_CODE 0x13E1)

This log code contains position-related Kalman Filter (KF) information generated by the Position
Engine. Where float or double-data type is used, the format is IEEE unless specified otherwise.
Float is 4 bytes, double is 8 bytes. The low-order byte appears first in the message.
VERSION 1 Specifies the version number of the packet
FCOUNT 4 Receiver’s millisecond count value; data type is unsigned

int32
FIX_TIME_MS 4 Specifies the milliseconds into the week for the fix; data type
is unsigned int32; range is 0 to (604800000-1)
FIX_TIME_WK 2 Specifies the week number of the fix; data type is unsigned
int16
T
SENSOR_MEAS_MS 4 Specifies the milliseconds into the week for the last sensor
n PS
measurement; data type is unsigned int32; range is 0 to
(604800000-1)
34
SENSOR_MEAS_WK 2 Specifies the week number for the last sensor measurement;
om 8:
data type is unsigned int16
l.c :4
. c
te 13
Filter Operation Mode 1 Specifies the Filter Operation Mode
 0 – Not producing fixes
.7 bk t
41 -b 1 a
 1 – GPS only mode

3
 2 – INS only mode
15
ei .0
 3 – GPS + INS mode

0.
w 01
12
RESERVED 7 Reserved; zero-fill

ou 3.
2.
zh 201
KF_POS 8*3 Kalman state (Sensor mode) position described by:

 Latitude in WGS84, radians
 Longitude in WGS84, radians
 Altitude in WGS84, meters
Data type is double
KF_VEL 2*3 Kalman state (Sensor mode) velocity described by:

 East velocity
 North velocity
 Up velocity
Units in 0.01 m/s; data type is signed int16; range is ±327.67
m/s
KF_CLOCK_BIAS 4 Kalman state (Sensor mode) clock bias, in meters; float data
type
KF_CLOCK_RATE 4 Kalman state (Sensor mode) clock bias rate, in m/s; float
data type
KF_UNC 4*8 Kalman state (Sensor mode) state uncertainties:

 East/North/Up position (m) (0,1,2)
 Velocity (m/s) (3,4,5)
 Clock bias (m) (6)
 Clock bias rate (m/s) (7)
Float data type

Log Record Formats
ATTITUDE_VALIDITY_ 1  0 – Roll/pitch/yaw invalid

FLAG  Bit[0] – Roll valid
 Bit[1] – Pitch valid
 Bit[2] – Yaw valid
ATTITUDE 4*3 Specifies the attitude of the body with respect to the SAE
reference coordinate frame:
 Roll
 Pitch
 Yaw
Units in radians; float data type
TILT_ANGLE_BIAS 4*3 Specifies the tilt angle bias

 Roll
 Pitch
 Yaw
T
n PS
ATTITUDE_UNC 4*3 Specifies the attitude uncertainty
34
 Roll
om 8:
 Pitch
l.c :4
 Yaw
. c
te 13
ACCEL_VALIDITY_ 1 Specifies whether the acceleration is valid; values are:

.7 bk t
41 -b 1 a
FLAG  0 – Acceleration not valid

3
15
 1 – Valid; calibrated acceleration, acceleration bias, and
ei .0
acceleration bias uncertainty are available

0.
w 01
12
ou 3.
ACCEL 4*3 Specifies the acceleration of the body with respect to the
SAE reference coordinate frame, in m/s2
2.
zh 201
 Forward
 Right
 Down
Float data type
ACCEL_BIAS 4*3 Specifies the acceleration bias in 3D body frame, in m/s2

 Forward
 Right
 Down
Float data type
ACCEL_BIAS_UNC 4*3 Specifies the acceleration bias uncertainty in 3D body frame,

in m/s2
 Forward
 Right
 Down
Float data type
TURN_RATE_ 1 Specifies whether the turn rate is valid; values are:

VALIDITY_FLAG  0 – Turn rate is not valid
 1 – Turn rate is valid; calibrated gyro, gyro bias, and gyro
bias uncertainty are available

Log Record Formats

TURN_RATE 4*3 Specifies the turn rate in 3D body frame, in radians/sec
 Roll
 Pitch
 Yaw
Float data type
TURN_RATE _BIAS 4*3 Specifies the turn rate bias in the 3D body frame, in
radians/sec
 Roll
 Pitch
 Yaw
Float data type
TURN_RATE_BIAS_ 4*3 Specifies the turn rate bias uncertainty in the 3D body frame,
UNC in radians/sec
 Roll
T
 Pitch
n PS
 Yaw
34
Float data type
om 8:
SESSION_COUNT 4 Count of the number of GPS solutions attempted; data type
l.c :4
is unsigned int32
. c
te 13
COURSE_OVER_ 4 Course over ground in degrees relative to true north,
GROUND 0..359.99 degrees, 90 degrees = traveling east; float data
.7 bk t
41 -b 1 a
type
3
15
ei .0
COURSE_OVER_ 4 Uncertainty of course over ground in degrees, 0..359.99

GROUND_UNC degrees; float data type
0.
w 01
12
ou 3.
COURSE_OVER_ 1 Specifies whether course over ground is valid; values are:

2.
zh 201
GROUND_VALIDITY  0 – Invalid
 1 – Valid
DGPS_ 1 Specifies the Differential GPS (DGPS) measurement; values

MEASUREMENT_ are:
FLAG  0 – DGPS measurements were not used
 1 – DGPS measurements were used
GPS_MEAS_ 1 Specifies the number of GPS measurements reported in this

REPORTED log packet; range is 0 to 32
GPS_MEAS_USED 1 Specifies the number of GPS measurements used in the KF

solution; range is 0 to 16
GPS measurement GPS_MEAS_ May be appended to the log; the number of reports is the
reports REPORTED x 38 value of GPS_MEAS_REPORTED; see Section 5.3.603.1
5.3.603.1 GPS_MEAS_REPORTED
The following block of data appears for each GPS measurement reported.

Log Record Formats
SV 1 Specifies the identifying number of the Space Vehicle (SV) from

which this measurement was made, range is 1 to 32; zero
means the data is from altitude aiding
IODE 1 Issue of Data Ephemeris (IODE) used to create this

measurement; data type is unsigned int8
PR_VALID_FLAG 1 Specifies whether the Pseudorange (PR) is valid; values are:

 0 – PR is not valid
 1 – PR is valid
PR_USED_FLAG 1 Specifies whether the PR is used; values are:

 0 – PR rejected
 1 – PR used
PR_RESIDUAL 4 Specifies the PR residual from a-posteriori KF position, in
T
meters; float data type
n PS
PR_UNC 4 Specifies the PR uncertainty on the measurement provided to
the KF, in meters; float data type
34
PR_UNC_USED 4 Specifies the PR uncertainty on the measurement used by the
om 8:
KF, in meters; float data type
l.c :4
. c
te 13
PR_PFA 4 Probability of a False Alarm (PFA) on the PR measurement;
unitless; float data type
.7 bk t
41 -b 1 a
PRR_VALID_FLAG 1 Specifies whether the Pseudorange Rate (PRR) is valid; values

3
15
are:
ei .0
 0 – PRR is not valid

0.
w 01
 1 – PRR is valid
12
ou 3.
2.
zh 201
PRR_USED_FLAG 1 Specifies whether the PRR is used; values are:

 0 – PRR rejected
 1 – PRR used
PRR_RESIDUAL 4 Specifies the PRR residual from a-posteriori KF velocity, in

meters/sec; float data type
PRR_UNC 4 Specifies the PRR uncertainty on the measurement provided to

the KF, in meters/sec; float data type
PRR_UNC_USED 4 Specifies the PRR uncertainty on the measurement used by the

KF, in meters/sec; float data type
PRR_PFA 4 Specifies the PFA on the PRR measurement; unitless; float data
type
5.3.604 LOG_SENSOR_INT_MEAS_C (LOG_CODE 0x13E2)

This packet contains the integrated sensor information sent to the KF. The packet shall be logged
every 1000 msec.
FCOUNT_INT_ 4 Specifies the timestamp at the start of integration, in msec; data

START type is unsigned int32

Log Record Formats
FCOUNT_UPDATE 4 Specifies the timestamp when data is accepted for KF

processing, in msec; data type is unsigned int32
INTEGRATION_ 2 Specifies the Integration interval, in msec; data type is unsigned

INTERVAL int16
GPS_MS_INT_ 4 Specifies the GPS time, in msec, into the week at the start of
START integration; data type is unsigned int32; range is 0 to
(604800000-1)
GPS_WK_INT_ 2 Specifies the GPS time; week number at start of integration; data
START type is unsigned int16
VALIDITY_BIT_ 4 Values are:

MASK  0 – All sensor data is invalid
 Bit[0] – Acceleration X axis is valid
 Bit[1] – Acceleration Y axis is valid
 Bit[2] – Acceleration Z axis is valid
T
n PS
 Bit[3] – Turn rate X axis is valid
 Bit[4] – Turn rate Y axis is valid
34
 Bit[5] – Turn rate Z axis is valid
 Bit[6] – Barometric data (pressure) is valid
om 8:
 Bit[7] – Sensor board temperature is valid
l.c :4
c
 Bit[8] – Acceleration X axis temperature is valid
.
te 13
 Bit[9] – Acceleration Y axis temperature is valid

 Bit[10] – Acceleration Z axis temperature is valid
.7 bk t
41 -b 1 a
 Bit[11] – Turn rate X axis temperature is valid

3
15
 Bit[12] – Turn rate Y axis temperature is valid
ei .0
 Bit[13] – Turn rate Z axis temperature is valid

0.
w 01
 Bit[14] – Compass X axis is valid

12
ou 3.
 Bit[15] – Compass Y axis is valid

2.
zh 201
 Bit[16] – Compass Z axis is valid

 Bit[17] – Barometric temperature (pressure) is valid
 Bit[18] – Temperature for compass X is valid
 Bit[19] – Temperature for compass Y is valid
 Bit[20] – Temperature for compass Z is valid
ACCELERATION_ 1 Reserved
SOURCE
TURN_RATE_ 1 Reserved
SOURCE
TEMPERATURE_ 1 Reserved
SOURCE
BIAS_COUNT 1 Specifies the number of times that the bias has been corrected;
data type is unsigned int8
ACCELERATION 4*3 Acceleration with respect to SAE reference coordinate frame

averaged over the integration interval, in m/s2
 X (Forward)
 Y (Right)
 Z (Down)
Float data type

Log Record Formats

ACCEL_BIAS_ 4*3 Specifies the currently used acceleration bias correction in the
CORRECTION preprocessor, in m/s2
 X (Forward)
 Y (Right)
 Z (Down)
Float data type
TURN_RATE_BIAS_ 4*3 Specifies the currently used turn rate bias correction in the
CORRECTION preprocessor, in radians/sec
 X (Roll)
 Y (Pitch)
 Z (Yaw)
Float data type
PRESSURE 4 Specifies the pressure in hPA; float data type
T
PRESSURE_UNC 4 Specifies the pressure uncertainty in hPA; float data type
n PS
TEMP_PRESSURE 2 Specifies the pressure sensor temperature; units in 0.01 degree
C; data type is signed int16; range is ±327.67 degree C
34
om 8:
TEMP_UNC_ 2 Specifies the pressure sensor temperature uncertainty; units in
PRESSURE 0.01 degree C; data type is signed int16; range is 0.01 to 327.67
l.c :4
. c
degree C
te 13
TURN_RATE 4*3 Specifies the turn rate with respect to the SAE reference
.7 bk t
41 -b 1 a
coordinate frame, averaged over the integration interval, in

3
radians/sec
15
ei .0
 X (Roll)
0.
w 01
 Y (Pitch)
12
ou 3.
 Z (Yaw)
2.
zh 201
Float data type
QUATERNION 4*4 Quaternion equivalent of vector expressing rotation; unitless;

float data type
TEMP_SENSOR_ 2 Sensor board temperature, in units of 0.01 m/s; data type is

BOARD signed int16; range is ±327.67 m/s
TEMP_ACCEL 2*3 Accelerometer temperatures for axes:

 X (Forward)
 Y (Right)
 Z (Down)
Units in 0.01 degree C; data type is signed int16; range is
±327.67 degree C
TEMP_GYRO 2*3 Gyroscope temperatures (related to turn rate) for axes:

 X (Roll)
 Y (Pitch)
 Z (Yaw)
Units in 0.01 degree C; data type is signed int16; range is
±327.67 degree C

Log Record Formats

ACCEL_UNC 4*3 Acceleration uncertainty with respect to the SAE reference
coordinate frame, in m/s2
 X (Forward)
 Y (Right)
 Z (Down)
Float data type
TURN_RATE_UNC 4*3 Turn rate uncertainty with respect to the SAE reference
coordinate frame, in radians/sec
 X (Roll)
 Y (Pitch)
 Z (Yaw)
Float data type
TEMP_UNC_ 2 Sensor board temperature uncertainty, units in 0.01 degree C;

SENSOR_BOARD data type is signed int16; range is 0.01 to 327.67 degree C
T
n PS
TEMP_UNC_ACCEL 2*3 Accelerometer temperature uncertainty for axes:
 X (Forward)
34
 Y (Right)
om 8:
 Z (Down)
l.c :4
c
Units in 0.01 degree C; data type is signed int16; range is 0.01 to
.
327.67 degree C
te 13
TEMP_UNC_GYRO 2*3 Gyroscope temperature uncertainty for axes:

.7 bk t
41 -b 1 a
 X (Roll)
3
15
 Y (Pitch)
ei .0
 Z (Yaw)
0.
w 01
Units in 0.01 degree C; data type is signed int16; range is 0.01 to

12
ou 3.
327.67 degree C
2.
zh 201
SESSION_COUNT 4 Count of the number of GPS solutions attempted; data type is

unsigned int32
PRESSURE_ 1 Reserved
SOURCE
5.3.605 LOG_SENSOR_BIAS_CALIBRATION_C (LOG_CODE 0x13E3)

This log packet contains the bias calibration values sent to the sensor data preprocessor by the
KF. This data is not generated at a fixed time interval. It is expected to be logged at a very low
frequency.
FCOUNT 4 Externally provided timestamp, in msec; data type is unsigned

int32
GPS_MS_BIAS 4 Specifies the GPS time as msec into week when the biases were
set; data type is unsigned int32; range is 0 to (604800000-1)
GPS_WK_BIAS 2 Specifies the GPS time as the week when biases were set; data
type is unsigned int16

Log Record Formats
ACCEL_BIAS 4*3 Specifies the acceleration bias with respect to the SAE reference
coordinate frame, in m/s2
 X (Forward)
 Y (Right)
 Z (Down)
Float data type
TURN_RATE_BIAS 4*3 Specifies the turn rate bias with respect to the SAE reference
coordinate frame, in radians/sec
 X (Roll)
 Y (Pitch)
 Z (Yaw)
Float data type
BIAS_COUNT 1 Specifies the number of times that the bias has been corrected;
data type unsigned int8
T
n PS
INTEGRATION_ 1 Specifies the Integration mode; values are:
MODE  0 – Bias generated from static integration
34
 1 – Bias generated from dynamic integration
om 8:
SESSION_COUNT 4 Count of the number of GPS solutions attempted; data type is
l.c :4
c
unsigned int32
.
te 13
.7 bk t
5.3.606 LOG_DTV_ISDB_TS_PACKETS (LOG_CODE 0x13E4)

41 -b 1 a
3
15
ei .0
This log provides MPEG2 TS packet statistics.

0.
w 01
12
ou 3.

2.
zh 201
Version 1 Version
TS packets 4 Total number of TS packets that were received

so far
Error Bit Set 4 Number of TS packets with

transport_error_indicator = 1
Errors In Packets 4 Number of TS packets that could not be parsed
This log is generated every 250 TS packets. The worst-case packet size for this log is 13 bytes.
5.3.607 LOG_DTV_ISDB_PES_PACKETS (LOG_CODE 0x13E5)

This log provides MPEG-2 TS packet statistics.
Version 1 Version
PES packets 4 Total number of PES packets that were received

so far
Good PES Packets 4 Number of PES packets that were successfully

assembled

Log Record Formats

Bad PES Packets 4 Number of PES packets that could not be
assembled
Discarded video PES 4 Number of video PES packets that were

(PTS reasons) discarded when calculating PTS
Discarded audio PES 4 Number of audio PES packets that were

Discarded subtitles PES 4 Number of subtitles PES packets that were

NOTE A PES packet can be discarded when calculating PTS, if it is at the beginning of playback (or
the beginning of a new loop), and we are waiting for an audio packet to arrive.
This log is generated every 50 PES packets. The worst-case packet size for this log is 25 bytes.
T
n PS
5.3.608 LOG_DTV_ISDB_SECTIONS (LOG_CODE 0x13E6)
34
om 8:
This log provides MPEG2 section statistics.
l.c :4
c
.
te 13
Version 1 Version
.7 bk t
41 -b 1 a
Sections 4 Total number of sections that were received so far

3
15
ei .0
Assembled Sections 4 Number of sections that were successfully assembled

0.
w 01
Discarded Sections 4 Sections that were discarded

12
ou 3.
2.
zh 201
Bad Sections 4 Number of sections that could not be assembled
CRC Errors 4 Number of CRC errors in sections
This log is generated every 50 sections. The worst-case packet size for this log is 21 bytes.
5.3.609 LOG_DTV_ISDB_BUFFERING (LOG_CODE 0x13E7)

This log provides PES buffer statistics.
Version 1 Version
Video Overflows 4 Number of video overflow periods
Audio Overflows 4 Number of audio overflow periods
Subtitles Overflows 4 Number of subtitles overflow periods
Video Discarded PES on 4 Number of video PES packets that were discarded on
Overflow overflow
Audio Discarded PES on 4 Number of audio PES packets that were discarded on
Overflow overflow
Subtitles Discarded PES 4 Number of subtitles PES packets that were discarded on
on Overflow overflow

Log Record Formats
Video Underflows 4 Number of video underflow periods
Audio Underflows 4 Number of audio underflow periods
Subtitles Underflows 4 Number of subtitles underflow periods
Video buffer size 4 Current occupancy of the video buffer
Video buffer duration 4 Current occupancy of the video buffer
Audio buffer size 4 Current occupancy of the audio buffer
Audio buffer duration 4 Current occupancy of the audio buffer
Subtitles buffer size 4 Current occupancy of the subtitles buffer
Subtitles buffer duration 4 Current occupancy of the subtitles buffer
T
This log is generated every 50 PES packets. The worst case packet size for this log is 61 bytes.
n PS
5.3.610 LOG_WLAN_SYS_ACQ_HO_C (LOG_CODE 0x13E8)
34
om 8:
This log packet contains the following handoff information to be logged on Diag:
l.c :4
. c
te 13
 Current AP + RSSI (if already associated)
.7 bk t
 Candidate AP + RSSI (before association and when the list is updated)

41 -b 1 a
3
RSSI, QoS, and security compatibility information is provided for each BSSID in the
15

ei .0
candidate list
0.
w 01
12
This log packet is generated after every successful scan which can vary from every 300 ms to
ou 3.
2.
zh 201
240 sec.
The worst-case size of the packet in bytes is 66 * number of APs logged (maximum of 21) =
1386 bytes excluding the Diag header and APs logged.
num_aps 4 Specifies the number of APs (info) logged

current_ap_info 66 Contains the following information in the order listed: SSID,
BSSID, channel, QoS score, security score, RSSI score,
overall score, transmission PER, and receive PER
candidate_ap_info 66 Contains the following information is the order listed: SSID,

BSSID, channel, QoS score, security score, RSSI score,
overall score, transmission PER, and receive PER; this
information is per candidate AP; maximum of 20 APs
The current_ap_info/candidate_ap_info structure is defined as follows:
ssid 33 Name of the AP; see Section 5.3.610.1
bssid 8 Specifies the BSSID of the AP (IEEE MAC address for the
WLAN)

Log Record Formats

channel_id 1 Specifies the channel on which the AP is dwelling
qos_score 4 Specifies the QoS capability of the AP converted to a

numerical value as per an internal algorithm
sec_score 4 Specifies the security capability of the AP converted to a

numerical value as per an internal algorithm
rssi_score 4 Specifies the RSSI value of the AP as seen by the station
overall_score 4 Total of all the 3 scores
tx_per 4 Specifies the transmission PER
rx_per 4 Specifies the receive PER
5.3.610.1 SSID structure
T
The ssid structure is as follows:
n PS
34
om 8:
len 1 Specifies the length of the ssid
l.c :4
. c
ssid 32 A character array to hold the name of the AP
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
5.3.611 LOG_WLAN_GEN_CONFIG_PARAMS_C (LOG_CODE 0x13E9)

0.
w 01
12
ou 3.
This log packet contains the following WLAN general configuration parameters to be logged on
2.
zh 201
Diag:
 WLAN configuration-related parameters read from EFS
 WLAN acquisition-related parameters that come from SD
 WLAN miscellaneous parameters
This log packet is generated when the WLAN is activated. It is updated every time the WLAN is
acquired. The worst-case size of packet in bytes is 88 bytes, including the Diag header.

Log Record Formats
cfg_params 20 Structure that describes the WLAN configuration related

parameters that will be used using during activation; fields within
this structure are described in detail below
Length
Field Description
(bytes)
listen_interval 2 Specifies the number of beacon

intervals
preamble_type 2 Enumeration of the preamble

types that may be selected by
user; values are:
 0 – Auto
 1 – Short
 2 – Long
T
rts_threshold 2 “Request to Send” packet
n PS
threshold; default value is 2312
34
scan_timing 2 Maximum scan timing on one
channel, in msec
om 8:
l.c :4
c
frag_threshold 2 Fragmentation threshold; default
.
value is 2312
te 13
max_tx_power 2 Maximum transmit power that the

.7 bk t
41 -b 1 a
station can use

3
15
ei .0
rssi_threshold 2 RSSI threshed value in dBm used

0.
w 01
for handoffs; default value is 70

dBm
12
ou 3.
2.
zh 201
vcc_rssi_threshold 2 RSSI threshold value for VCC

triggers
vcc_ul_mac_loss_ 4 Uplink MAC loss in % for VCC

threshold triggers

Log Record Formats
acq_params 44 This structure describes WLAN configuration related parameters

used using during WLAN acquisition; fields within this structure are
described in detail below:
Length
Field Description
(bytes)
SSID 33 SSID of the Access Point that is

being acquiring; it has two fields:
 len – Length of SSID which is
one byte; uint8
 ssid(32) – Actual SSID value;
char
BSSID 8 MAC address of the AP that is

being acquired
Scan_type 1 Enumeration of the scan type;
T
values are:
n PS
 0 – Passive
34
 1 – Active
om 8:
auth_type
l.c :4 1 Enumeration of the authentication
type; values are:
. c
te 13
 0 – NO_AUTH
 1 – WEP
.7 bk t
 2 – 8021X_PASSWD
41 -b 1 a
3
 3 – 8021X_TLS_RADIUS
15
ei .0
 4 – 8021X_MD5_RADIUS
0.
w 01
 5 – 8021X_TLS_RADIUS_
12
WKEY
ou 3.
 6 – 8021X_TLS_CERT
2.
zh 201
 7 – PAP
 8 – CHAP
 9 – MsCHAPv2
 10 – PEAP
 11 – TTLS
 12 – SIM
 13 – AKA
encryption_type 1 Enumeration of the encryption

type; values are:
 0 – NO_ENCRY
 1 – WEP_40
 2 – WEP_104
 3 – TKIP
 4 – AES

Log Record Formats
misc_params 8 Structure that describes the WLAN miscellaneous configuration

related parameters that are not specific to activation and
acquisition; fields within this structure are described in detail below
Length
Field Description
(bytes)
oem_module_ 1 Enumeration of the WLAN

in_use module in use; values are:
 0 – NXP
 1 – Atheros
 2 – Airgo
power_save_mode 1 Current status of Power Save

(PS) mode; values are:
 0 – PS_OFF
 1 – PS_ON
T
n PS
qos_mode 1 Current status of Quality of
Service (QoS) mode; values are:
34
 0 – AUTO; automatic
 1 – QBSS_ONLY; QoS BSS
om 8:
only
l.c :4
c
 2 – NO_QOS; QoS not
.
te 13
required
.7 bk t
dhcp_enabled 1 Indicates whether the DHCP is

41 -b 1 a
3
enabled; values are:
15
ei .0
 0 – Not enabled
0.
w 01
 1 – Enabled
12
ou 3.
static_ip_addr 4 Value of the static IP address of

2.
zh 201
the station
5.3.612 Reserved (LOG_CODE 0x13EA – 0x1414)
5.3.613 Reserved (LOG_CODEs 0x1415 – 0x1418)

Log Record Formats
5.3.614 Reserved (LOG_CODEs 0x1419 – 0x141C)
5.3.615 Reserved (LOG_CODE 0x141D – 0x1425)
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12

ou 3.
2.
zh 201
5.3.627 ARM11 Performance Counters (LOG_CODE 0x1436)

id 1 ID
ver 1 Version
size 2 Packet size
pmn0_cnt 4 PMN0 CNT
pmn1_cnt 4 PMN1 CNT
ccnt 4 Counter
pmn0_event 4 PMN0 event
pmn1_event 4 PMN1 event

Log Record Formats
cnt_state 4 Count state
l2emc0_cnt 4 L2EMC0 count
l2emc0_event 4 L2EMC0 event
period 4 Time period
T
duration 4 Total duration
n PS
msg_count 4 Number of messages
34
set_clock_divider_64 4 Clock speed divider
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
5.3.628 PS Statistics Describe All Flow Instances (LOG_CODE 0x1437)

3
15
ei .0
This log contains the instance information for all ps_flow objects. All fields in this log are
0.
w 01
unsigned.
12
ou 3.
2.
zh 201
inst_count 1 Number of flows in the packet
PS_FLOW_TYPE inst_count See Section 5.3.628.1
5.3.628.1 PS_FLOW_TYPE
ps_flow_handle 2 Upper byte is the handle to the interface with which this
flow is associated; lower byte is the flow handle
ps_flow_physlink 1 Handle to the physlink to which the first flow is associated

Log Record Formats
ps_flow_capability 1 Capability of the first flow:

 0x0 – PS_FLOW_CAPABILITY_MIN
 0x0 – PS_FLOW_CAPABILITY_DEFAULT
 0x1 –PS_FLOW_CAPABILITY_
DELAY_SENSITIVE
 PS_FLOW_CAPABILITY_MAX
ps_flow_qos_handle 4 Handle to the QoS spec on this flow
5.3.629 PS Statistics Describe All Physical Link Instances

(LOG_CODE 0x1438)
T
This log contains the instance information for all ps_physlink objects. All fields in this log are
n PS
unsigned.
34
om 8:
version 1
l.c :4 Version of this packet
. c
te 13
proc_id 1 ID of the processor thison which this instance is
running
.7 bk t
41 -b 1 a
3
15
ei .0
inst_count 1 Number of phys_links in the packet

0.
w 01
12

ou 3.
2.
zh 201
PS_PHYS_LINK_TYPE inst_count See Section 5.3.629.1
5.3.629.1 PS_PHYS_LINK_TYPE
ps_phys_link_handle 2 Upper byte is the handle to the interface with which this
phys_link is associated; lower byte is the phys_link handle
ps_phys_link_hdr_ 1  0 – PS_PHYS_LINK_HDR_COMP_
comp_type PROTOCOL_NONE
 1 – PS_PHYS_LINK_HDR_COMP_
PROTOCOL_ROHC
 2 – PS_PHYS_LINK_HDR_COMP_
PROTOCOL_IPHC
 3 – PS_PHYS_LINK_HDR_COMP_ PROTOCOL_VJ
ps_phys_link_hdr_ 1 Handle to the header compression instance associated

comp_handle with this phys_link

Log Record Formats
5.3.630 Searcher 4 Multicarrier HDR (LOG_CODE 0x143A)

This log contains searcher task parameters and search results.
Version 1 Version
Reserved 1 Reserved byte
Num Peaks [3:0] 1  [3:0] – Number of peaks

QPCH Cntl [4]  [4] – QPCH control
Tech [7:5]  [7:5] – Technology
Priority [3:0] 1  3:0 – Priority

Queue [7:4]  7:4 – Queue
Num Tasks (Max 28) 1 Number of tasks
T
Freq Offset 1 Frequency offset
n PS
RX0 AGC 1 RX AGC0
34
RX1 AGC 1 RX AGC1
om 8:
Repeat per Task l.c :4
. c
te 13
MSB of Walsh Index [0] 2  [0] – Walsh index of MSB
QOF [2:1]  [2:1] – QOF index
.7 bk t
[4:3] – HDR burst length

41 -b 1 a

Burst Len [4:3]
3
 [6:5] – Diversity antenna
15
Antenna [6:5]
ei .0
 [15:7] – Pilot PN
Pilot Index [15:7]
0.
w 01
12
ou 3.
Non Coh Len [7:0] 2  [7:0] – Noncoherent length

2.
zh 201
LSB of Walsh Index [15:8]  [15:8] – Walsh index of LSB
Coh Len [12:0] 2  [12:0] – Coherent length

Coh Trunc [15:13]  [15:13] – Coherent truncation control
PN Pos 2 PN position
Window Size 2 Window size
Carrier 2 Carrier
Search results (There are 6 results; repeat per result)
Reserved 1 Reserved
MSB of Peak Pos 1 Peak position of MSB
LSB of Peak Pos 2 Peak position of LSB
Peak Eng 2 Peak energy
This log is generated every 30 ms. The worst-case packet size is 12 + 8 + 28 * ( 12 + 6 * 6 ) =

1364 bytes.

Log Record Formats
5.3.631 PS Statistics Describe All IPHC Instances (LOG_CODE

0x143B)
This log contains the instance information for all RSVP objects. All fields in this log are
unsigned.
inst_count 1 Number of IPHC instances in the packet
PS_IPHC_TYPE inst_count See Section 5.3.631.1
T
n PS
5.3.631.1 PS_IPHC_TYPE
34
om 8:
l.c :4
c
iphc_handle 1 Handle to the first IPHC instance
.
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
5.3.632 PS Statistics Describe All ROHC Instances (LOG_CODE

2.
zh 201
0x143C)
This log contains the instance information for all RSVP objects. All fields in this log are
unsigned.
inst_count 1 Number of RoHC instances in the packet
PS_ROHC_TYPE inst_count See Section 5.3.632.1
5.3.632.1 PS_ROHC_TYPE
rohc_handle 1 Handle to the first RoHC instance

Log Record Formats
5.3.636 LOG_CGPS_ME_DPO_STATUS_C (LOG_CODE 0x1440)

A DPO status log is generated at the following events:
 A check is made to determine whether to enter DPO or not and MC decides not to enter
DPO. A DPO log in this case indicates why MC is not entering DPO.
T
n PS
 MC stops/completes a DPO search after a DPO wakeup because the DPO wakeup resulted in
an early exit or it finished the 700 ms search. The DPO status log contains information from
34
the DPO wakeup that just finished (early exited or completed 700 ms search). The DPO
om 8:
status log in this case indicates why MC entered DPO, the DPO engage rate, and the reason
l.c :4
c
for early exit.
.
te 13
 MC stops a DPO search because it received a Rcvr IDLE/OFF command from SM. The DPO
.7 bk t
status log contains the information from the DPO search that was just stopped.
41 -b 1 a
3
15
ei .0

0.
w 01

12
ou 3.
2.
zh 201
DPO_STATUS 1 Bit mask indicating DPO status

 Bit 0 – Set when DPO is active
 Bit 1 – Set if DPO is enabled
 Bit 2 – Set if DPO is forced
 Bit 3 – Set if DPO dynamic duty cycle is enabled
 Bit 4 – Set if DPO charger check is enabled
OPERATION_MODE 1 GPS Operation mode

 0 – Invalid
 1 – MS_BASED
 2 – MS_ASSISTED
 3 – 1x_MS_ASSISTED
 4 – FTM
 5 – STANDALONE_RF_VERIFICATION
 6 – STANDALONE
 7 – SBAS_TEST_MODE
DPO_ON_DURATION 2 DPO on duration (milliseconds)
KNOWN_VISIBLE_SV_MASK 8 Bit mask showing all the known visible GPS SVs
MS_VALID_SV_MASK 8 Bit mask showing all SVs with valid time
ALL_KNOWN_DPO_THRESH_ 8 Bit mask showing all SVs that are above the DPO
SV_MASK threshold when there are no unknown SVs
(22 dB-Hz)

Log Record Formats

ALL_NOT_KNOWN_DPO_ 8 Bit mask showing all SVs that are above the DPO
THRESH_SV_MASK threshold when there are unknown SVs (37 dB-Hz)
DPO_THRESH_SV_MASK 8 Bit mask showing all SVs that are above the DPO
threshold (26 dB-Hz)
DPO_THRESH_USABLE_SV_ 8 Bit mask showing all usable SVs that are above the
MASK DPO threshold (26 dB-Hz)
GPS_RTC_MS 4 32-bit millisecond count at which DPO state change

occurs
EPH_NEED_LIST_SV_MASK 8 Bit mask showing ephemeris needed by PE
ALM_NEED_LIST_SV_MASK 8 Bit mask showing Almanac needed by PE

(>52 weeks old)
STATUS_FLAGS 1 Bit mask with each bit indicating a TRUE/FALSE

type DPO entry condition
T
n PS
 Bit 0 – TRUE/FALSE: Is W less than S for
known visible SVs
34
 Bit 1 – TRUE/FALSE: Is slow clock calibrated
 Bit 2 – TRUE/FALSE indicating the validity of fix
om 8:
l.c :4 in PE
c
 Bit 3 – TRUE/FALSE indicating if the last fix
.
te 13
attempt in PE failed
.7 bk t
KF_FILTER_STATUS 1 Status of KF filter updated by PE

41 -b 1 a
3
 0 – Uninitialized
15
ei .0
 1 – Dynamic
0.
w 01
 2 – Static pre-lockdown
12
 3 – Static post-lockdown
ou 3.
 4 – Sensor dynamic
2.
zh 201
 5 – Sensor static
CHARGER_STATUS 1 Status of phone charger

 0 – Unknown state
 1 – Charger not connected
 2 – Charger connected but phone not fully
charged
 3 – Charger connected and phone fully charged
ALM_CORR_AGE_SEC 2 Age of Almanac Corrections data in seconds
POS_SIGMA 2 Position standard deviation estimate (meters) from

PE (POS_SIGMA is zero when position solution is
bad)
QOS_ACCURACY_THRESH 2 QoS accuracy threshold for the session (meters)
USABLE_SV_MASK 8 Bit mask showing all SVs that are usable (SVs
have known time and have EPH/ALM CORR)
TBF 1 Time between fixes for the application tracking

session
FIX_AGE 2 Age of the last PE fix in seconds
PDOP 2 Position DOP
DPO_ENGAGE_RATE 1 Percentage of time DPO was engaged since the

last receiver ON

Log Record Formats

DPO_ENTRY_CHECK_STATUS 1 Result of a DPO entry check
 1 – DPO check passed
 2 – DPO not enabled
 3 – Session type is MSA
 4 – Pos sigma check failed
 5 – Fix age check failed
 6 – All SV above 26 dB-Hz are not usable
 7 – Slow clock not calibrated
 8 – KF Filter mode check failed
 9 – Time to decode HEALTH/UTC
 10 – Almanac page decode time
 11 – W less than S check failed
 12 – Number of usable SV check failed for all
SVs known case
 13 – Number of usable SV check failed for all
SVs not known case
T
n PS
 14 – Number of SV with Almanac check failed
 15 – Number of known visible SV check failed
34
 16 – Fix validity check failed
 17 – Fix attempt failed
om 8:
 18 – SV millisecond time not set
l.c :4
c
 19 – Phone connected to charger
.
te 13
DPO_EXIT_STATUS 1 Status related to DPO exit

.7 bk t
41 -b 1 a
 0 – Exit status not applicable (when DPO status

3
log is sent at start of search strategy selection)
15
ei .0
 1 – 700 ms integration completed

0.
w 01
 2 – 80 ms AllSvs known early exit check passed

12
 3 – 80 ms AllSvs not known early exit check

ou 3.
passed
2.
zh 201
 4 – 200 ms AllSvs known early exit check

passed
passed
 6 – 400 ms AllSvs known early exit check
passed
passed
This log is generated every 1000 ms when system is not doing DPO. The log frequency can be
higher if the system is doing DPO depending on the early exit status. The worst-case packet size
is 102 bytes.

.

.

.

Log Record Formats

.
5.3.641 CGPS DIAG Successful Fix Count (LOG_CODE 0x1455)

This log contains the number of successful fixes that the diag task has received.
SUCCESSFUL_FIX_COUNT 4 Number of successful fixes
CLIENT_TYPE 2 PDSM client type:

 0 – Browser
 1 – UI
T
 2 – PDA
n PS
 3 – DM
 4 – NI
34
 5 – BREW
om 8:
 6 – JAVA
 7 – TEST1
l.c :4
. c
 8 – TEST2
te 13
 9 – OEM
.7 bk t
 10 – TEST3
41 -b 1 a
3
 11 – XTRA
15
ei .0
 12 – ATCOP
0.
w 01
12
ou 3.
This message is sent for every successful fix and thus depends on the fix rate. The worst-case
2.
zh 201
packet size is 7 bytes.
5.3.642 CGPS MC Track Dynamic Power Optimization Status

(LOG_CODE 0x1456)
This log contains the SV tracking status.
TRACKING_STATE 1  0 – SV(s) being acquired

 1 – All SVs are known; some are being
tracked, none are being acquired
TRACKING_STATE_CHANGE_COUNT 4 Number of times the tracking state has

transitioned
DPO_STATE 1  0 – DPO is not active

 1 – DPO is active
DPO_STATE_CHANGE_COUNT 4 Number of times the DPO state has

transitioned

Log Record Formats
This message is sent when GPS is in progress at a 1 Hz rate. The worst-case packet size is 11
bytes.
5.3.647 Reserved (LOG _CODE 0x145E)
T
n PS
5.3.648 Reserved (LOG _CODE 0x145F)
34
om 8:
l.c :4
. c
5.3.649 Reserved (LOG _CODE 0x1460)
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201
5.3.652 LOG_GNSS_POSITION_REPORT (LOG_CODE 0x1476)

For the inertial sensor-assisted GNSS feature, this GNSS position report log will be changed as
follows to accommodate ISAGNAV-related needs.
FCOUNT 4 Receiver's millisecond count value
POS_SOURCE 1  0 – None
 1 – Weighted Least Squares (WLS)
 2 – Kalman Filter (KF)
 3 – Externally injected
 4 – Internal database
 5 – WiFi

Log Record Formats

POS_VEL_FLAG 2 Position flag when POS_SOURCE is as below
POS_SOURCE
WLS KF
Bit[0] Altitude aided Altitude aided
Bit[1] Solve for time fix Solve for time fix
Bit[2] Over-determined Over-determined

 0 – Periodic position  0 – Periodic position
report report
Bit[4] Differential correction Differential correction
T
Bit[5] Clock bias hold fix Reserved
n PS
Bit[6] Position fix propagated Reserved
34
Bit[7] Velocity fix valid Velocity fix valid
om 8:
Bit[8] Final fix? Final fix?
l.c :4
. c
1 – Yes, sent from LM 1 – Yes, sent from LM
te 13
 
 0 – Unknown, sent  0 – Unknown, sent
.7 bk t
from NF from NF
41 -b 1 a
3
Bit[9] 1 – Position fix from GPS 1 – Position fix from GPS
15
ei .0

0.
w 01
Bit[10] 1 – Position fix from GPS 1 – Position fix from GPS

12
ou 3.
ephemeris and almanac ephemeris and almanac

2.
zh 201

inertial and GPS
measurements

inertial measurements
only
Bit[13] 1 – Position report is a 1 – Position report is a

background fix, i.e., background fix, i.e.,
on-demand on-demand
Bit[14] 0 – LM-generated fix 0 – LM-generated fix

report report
1 – PE-generated fix 1 – PE-generated fix
report report
Bit[15] 1 – ME-generated fix 1 – ME-generated fix

report report

Log Record Formats

POS_VEL_FLAG 2 POS_SOURCE
(cont.)
External Internal
Bit[0]: Reserved Reserved

Bit[6]

 0 – Periodic position  0 – Periodic position
report report
Bit[8]: Reserved, fill with zero Reserved, fill with zero

Bit[15]
POS_VEL_FLAG_2 4 Position flag when POS_SOURCE is as below
POS_SOURCE
T
WLS KF
n PS
Bit[0] New session New session
34
Bit[1]:  0 – GPS only  0 – GPS only
om 8:
Bit[2]
l.c :4  1 – Glonass only  1 – Glonass only
c
 2 – Mixed meas  2 – Mixed meas
.
te 13
Bit[3] Wideband meas in fix Wideband meas in fix

.7 bk t
41 -b 1 a
Bit[4] Rx diversity meas in fix Rx diversity meas in fix

3
15
ei .0

0.
w 01
Glonass almanac Glonass almanac

12
ou 3.
2.
zh 201

Glonass ephemeris and Glonass ephemeris and
Bit[7] GGTB constrained in fix Reserved, fill with zero
Bit[8] EPI is a constraint in fix EPI is a constraint in fix
Bit[9] Fixed is PV-filtered Fixed is PV-filtered

Bit[31]
POS_SOURCE
External Internal
Bit[0] New session New session

Bit[31]
POS_SOURCE of 0
Bit[0] New session
Bit[1]: Reserved, fill with zero

Bit[31]

Log Record Formats
FAILURE_CODE 1 POS_SOURCE
Code WLS KF
0 Not applicable Not applicable
1 Matrix inversion failure Matrix inversion failure
2 High PDOP ( > 100.0 ) High PDOP ( > 100.0 )
3 Too few SVs Too few SVs
4 Need more ephemerides Need more ephemerides
5 FDIC error FDIC error
6 Clock only correction HEPE too large
7 Convergence failure Fix too old
T
8 ITAR velocity violation ITAR velocity violation
n PS
9 ITAR position violation ITAR position violation
34
10 Time error Time error
om 8:
(GPS week = unknown) (GPS week = unknown)
l.c :4
. c
te 13
11 Reserved KF state outlier
.7 bk t

41 -b 1 a
3
POS_SOURCE
15
ei .0
0.
w 01
Code External Internal

12
ou 3.

2.
zh 201
FIX_EVENTS 2 Events found at this position fix

 Bit[0] – RAIM
 Bit[1] – Millisecond error detected
 Bit[2] – Clock reset
 Bit[3] : Bit[15] – Reserved
GPS_WEEK_ 2 GPS week number of fix

NUMBER
GPS_FIX_TIME_MS 4 Milliseconds into GPS week for fix; range is 0 to

(604800000-1) ms
GLO_NUM_4_ 1 Glonass 4-year Glonass cycle number

YEARS
GLO_NUM_DAYS_ 2 Glonass calendar day in the 4-year cycle

IN_4_YEAR
GLO_FIX_TIME_MS 4 Milliseconds into Glonass day for fix; range is 0 to

(86400000-1) ms
FINAL_POS_LL 8*2 Final position described by the folllowing:

 Latitude in WGS84 (radians)
 Longitude in WGS84 (radians)
Data type is double for all of the above.

Log Record Formats

FINAL_POS_ALT 4 Final altitude in meters in WGS84; float data type
HEADING 4 Heading angle in radians (-pi,pi]; float data type

If sensors were used to aid or filter heading (as indicated by
SENSOR_AIDING_MASK field containing bit 0 of value 1), this
field contains the sensor-aided and filtered heading, else this
field reports the same value as GNSS_ONLY_HEADING
HEADING_UNC 4 Heading uncertainty in radians; float data type

If sensors were used to aid or filter heading (as indicated by
SENSOR_AIDING_MASK field containing bit 0 of value 1), this
field contains the sensor-aided and filtered heading uncertainty,
else this field reports the same value as
GNSS_ONLY_HEADING_UNC
VEL_ENU 4*3 East, north, and up velocity (meters per second):

 Veast
T
 Vnorth
n PS
 Vup
Float data type for all of the above; this field is invalid if
34
POS_SOURCE is either externally injected or internal database
VEL_SIGMA 4*3
om 8:
Velocity uncertainty (meters per second):
l.c :4
. c
East
te 13

 North
.7 bk t
 Up
41 -b 1 a
3
Float data type for all of the above; this field is invalid if
15
ei .0

0.
w 01
CLOCK_BIAS 4 POS_VEL_FLAG_2 bits[1:2] while POS_SOURCE = 1 or 2

12
ou 3.
Value Description
2.
zh 201
0, 2 Receiver clock bias = (user time - GPS time) in meters
1 Receiver clock bias = (user time - Glonass time) in

meters
Float data type; this field is invalid if POS_SOURCE is either

externally injected or internal database
CLOCK_BIAS_ 4 Clock bias uncertainty in meters; float data type; this field is
SIGMA invalid if POS_SOURCE is either externally injected or internal
database
GGTB 4 GPS to Glonass time bias in meters; valid only if

POS_VEL_FLAG_2 bits[1:2] = 2 while POS_SOURCE is 1 or 2;
float data type
GGTB_SIGMA 4 GPS to Glonass time bias uncertainty in meters; valid only if

float data type
FILT_GGTB 4 Filtered GPS to Glonass time bias in meters; valid only if

float data type
FILT_GGTB_SIGMA 4 Filtered GPS to Glonass time bias uncertainty in meters; valid

only if POS_VEL_FLAG_2 bits[1:2] = 2 while POS_SOURCE is 1
or 2; float data type

Log Record Formats
SFT OFFSET 4 SFT offset solution in seconds; valid only if POS_VEL_FLAG

indicates solve for time; float data type
SFT_OFFSET_ 4 Uncertainty SFT offset solution in seconds; valid only if

SIGMA POS_VEL_FLAG indicates solve for time; float data type
CLOCK_DRIFT 4 Receiver clock drift = (user clock drift - GPS clock drift) in meters
per second; float data type; this field is invalid if POS_SOURCE
is either externally injected or internal database
CLOCK_DRIFT_ 4 Uncertainty of receiver clock drift; float data type; this field is
SIGMA invalid if POS_SOURCE is either externally injected or internal
database
FILTERED_ALT 4 Filtered WLS altitude in meters; float data type
FILT_ALT_SIGMA 4 Filtered WLS altitude uncertainty in meters; float data type
RAW_ALT 4 Raw WLS altitude in meters; float data type
T
n PS
RAW_ALT_SIGMA 4 Raw WLS altitude uncertainty in meters; float data type
34
PDOP 4 Position dilution of precision; float data type; this field is invalid if
POS_ SOURCE is either externally injected or internal database
om 8:
l.c :4
c
HDOP 4 Horizontal DOP; float data type; this field is invalid if
.
te 13
VDOP 4 Vertical DOP; float data type; this field is invalid if POS_
.7 bk t
41 -b 1 a
SOURCE is either externally injected or internal database

3
15
ei .0
ELLIPSE_ 1 Statistical measure of the confidence associated with the

0.
w 01
CONFIDENCE uncertainty ellipse values; for a given confidence X, this means

12
that the true position's 2D horizontal component is contained

ou 3.
within the specified ellipse X percent of the time; a value of 0

2.
zh 201
indicates that the ELLIPSE_ANGLE and ELLIPSE_AXIS_UNC

values are invalid and should be ignored; unsigned value in
percent; range is 0 to 100%
ELLIPSE_ANGLE 4 Angle along axis with respect to true north, with increasing
angles moving clockwise from north; metric is relative to WGS84
ellipsoid; float data type; range is 0 to 180 degrees
ELLIPSE_ 4 Uncertainty of position in an axis along the angle specified with

SEMIMAJOR_ respect to true north; metric is relative to WGS84 ellipsoid; float
AXIS_UNC data type; range is 0 to 200,000 meters; values larger than the
maximum are clipped to the maximum value
ELLIPSE_ 4 Uncertainty of position in an axis perpendicular to the angle

SEMIMINOR_ specified with respect to true north; metric is relative to WGS84
AXIS_UNC ellipsoid; float data type; range is 0 to 200,000 meters; values
larger than the maximum are clipped to the maximum value
POS_SIGMA_ 4 Vertical position uncertainty in meters; float data type; this field is
VERTICAL invalid if POS_SOURCE is either externally injected or internal
database
POS_HORIZONTAL 1  0 – Not set

_RELIABILITY  1 – Very low
 2 – Low
 3 – Medium
 4 – High

Log Record Formats

POS_VERTICAL_ 1  0 – Not set
RELIABILITY  1 – Very low
 2 – Low
 3 – Medium
 4 – High
GNSS_ONLY_ 4 Heading angle in radians (0, 2*pi]; float data type; if sensors were
HEADING used to aid or filter heading, this field contains the unfiltered
GNSS heading prior to any sensor integration
GNSS_ONLY_ 4 Heading angle uncertainty in radians; float data type

HEADING_UNC If sensors were used to aid or filter heading, this field contains
the unfiltered GNSS heading uncertainty prior to any sensor
integration
T
SENSOR_DATA_ 4 Denotes which additional sensor data were used to compute this
n PS
USAGE_MASK position fix
 BIT[0] 0x00000001 – Accelerometer
34
 BIT[1] 0x00000002 – Gyro
 0x0000FFFC – Reserved
om 8:
l.c :4
A bit set to 1 indicates that certain fields as defined by the
. c
SENSOR_AIDING_MASK were aided with sensor data
te 13
SENSOR_AIDING_ 4 Denotes which component of the position report was assisted

.7 bk t
41 -b 1 a
MASK with additional sensors defined in

3
SENSOR_DATA_USAGE_MASK
15
ei .0
 BIT[0] 0x00000001 – Heading aided with sensor data

0.
w 01
 BIT[1] 0x00000002 – Speed aided with sensor data

12
ou 3.
 BIT[2] 0x00000004 – Position aided with sensor data

2.
zh 201
 BIT[3] 0x00000008 – Velocity aided with sensor data

 BIT[4] 0x00000010 – Unmounted State Detected (MSD) using
sensor data
 BIT[5] 0x00000020 – 3D-Cradle Rotation Detected (CRD)
using sensor data
 BIT[6] 0x00000040 – Stationary state detected
 BIT[7] 0x00000080
 0 – Bridge-Forward-Filter
 1 – Primary Filter
 0xFFFFFF00 – Reserved
NUMBER_OF_ 1 Number of GPS SVs used in the fix; this field is invalid if
GPS_SVS_USED POS_SOURCE is either externally injected or internal database
TOTAL_GPS_SVS 1 Total number of GPS SVs detected by searcher, including ones

not used in position calculation; this field is invalid if
NUMBER_OF_ 1 Number of Glonass SVs used in the fix; this field is invalid if
GLO_SVS_USED POS_SOURCE is either externally injected or internal database
TOTAL_GLO_SVS 1 Total number of Glonass SVs detected by searcher, including

ones not used in position calculation; this field is invalid if

Log Record Formats
For each TOTAL_GPS_SVS and TOTAL_GLO_SVS, the following block is generated:
SV_TYPE 1  Bit[0]
 0 – SV is not used in fix
 1 – SV is used in fix; SV not used implies IODE,
MEAS_RESIDUAL and RANGE_UNC,
VEL_RESIDUAL are invalid
 Bit[1]
 0 – SV is GPS
 1 – SV is Glonass
 Bit[2] – Bit[3]
 0 – meas is narrowband
 1 – meas is wideband
 2 – meas is Rx diversity
 3 – meas is SBAS
T
SV_ID 1  If SV_TYPE is GPS – PRN
n PS
 If SV_TYPE is Glonass – Slot ID
34
FREQ_NUM 1 Glonass frequency number -7 to +6; valid only if
SV_TYPE is Glonass
om 8:
IODE 1
l.c :4 If SV_TYPE is GPS: IODE; if SV_TYPE is Glonass: Tb
. c
te 13
PR_RESIDUAL 4 Pseudorange measurement residual in meters; float
data type
.7 bk t
41 -b 1 a
3
PRR_RESIDUAL 4 Pseudorange rate residual in meters per second; float
15
ei .0
data type
0.
w 01
PR_UNC 4 Uncertainty, in meters, of the pseudorange

12
ou 3.
measurement for this SV used in the position fix; float

2.
zh 201
data type
PRR_UNC 4 Uncertainty, in meters per second, of the pseudorange

rate measurement for this SV used in the position fix;
float data type
This log is generated every 1 sec from NF thread and as often as every 1 sec from LM, for a
possible total of 2 per second. Worst case packet size for this log is 197 + (30 * 20) = 797 bytes.
5.3.653 LOG_GNSS_GPS_MEASUREMENT_REPORT_C (LOG_CODE

0x1477)
This provides measurement details on an SV basis. Where float or double is used, format is IEEE
unless specified otherwise.

Log Record Formats
FREQ_BIAS 4 Clock frequency bias in meters per second; float data type
FREQ_UNC 4 Clock frequency uncertainty in meters per second; float data type
NUMBER_SVS 1 Number of SV information blocks to follow; range: 0 to 16
The following block is generated for each of NUMBER_SVS SVs.
SV_ID 1 Satellite ID; if value = 0, measurement data for this SV should be
T
ignored; this should never happen, since only valid measurement
n PS
data is output in this packet
34
om 8:
Code
l.c :4 Description
c
0 Idle
.
te 13
1 Search
.7 bk t
41 -b 1 a
2 Search verify
3
15
ei .0
3 Bit edge
0.
w 01
4 Track_Verify
12
ou 3.
5 Track
2.
zh 201
6 Restart
7 DPO
8-255 Reserved
PARITY_ERROR_ 2 Parity error subframe

CNT
CNO 2 Carrier-to-noise in a 1 Hz bandwidth; 0.01 dB-Hz per bit; range is

0 to 655.35 dB-Hz

UNFILT_MS 4 Unfiltered measurement millisecond in user time; unsigned value

in milliseconds; range is 0 to (604800000 -1) ms

Log Record Formats

UNFILT_SM 4 Unfiltered measurement fractional milliseconds in user time; float
data type in milliseconds; range is 0 to 0.99999 ms

UNFILT_SPEED 4 Unfiltered SV speed in meters per second; float data type
UNFILT_SPEED_ 4 Unfiltered SV speed uncertainty in meters per second; float data

UNC type
MEAS_STATUS 4 Measurement status flags; description applies when bit is set to 1
Bit Description
0 Sub-millisecond is valid
1 Sub-bit time is known
T
n PS
3 Bit edge confirmed from signal
34
4 Measured velocity
om 8:
5 Fine velocity available
l.c :4
. c
te 13
6 Lock point valid
.7 bk t

41 -b 1 a
3
8 Good parity
15
ei .0
0.
w 01
9 Last update from difference, not measurement

12
ou 3.
10 Last update from velocity difference and not velocity

2.
zh 201
measurement
15 Probation mode (acqusition or sanity check)
16-17 Reserved
18 Round robin Rx diversity measurement
19 Rx diversity measurement
20 LBW and RxD combined measurement
21 HBW GPS Nu4 measurement
22 HBW GPS NU8 measurement
23 HBW GPS uniform measurement
24 GNSS multipath indicator

25-31 Reserved

Log Record Formats

MISC_STATUS 1 Status flags to indicate validity of data;; description applies when
bit is set to 1
Bit Description
2-7 Reserved
MULTIPATH_EST 4 Multipath estimate in meters; 0:232-1 m

AZI_RAD 4 Azimuth of SV; data type is float; range is 0.0*π/180 to
360.0*π/180 radians
ELEV_RAD 4 Elevation of SV; data type is float; range is -90.0*π/180 to

+90.0*π/180 radians
T
CARRIER_PHASE_ 4 Signed value; measurement in L1_cycles; special case: cycle
n PS
CYCLES slip is indicated by 0x80000000
34
om 8:
integer parts (except when there is a cycle slip)
l.c :4
. c
FINE_SPEED 4 Carrier phase derived; fine SV speed in meters per second; float
te 13
type
.7 bk t
41 -b 1 a
FINE_SPEED_UNC 4 Carrier phase derived; fine SV speed uncertainty in meters per

3
second; float type
15
ei .0
0.
w 01

12
ou 3.

2.
zh 201
This log is generated every 1 sec. Worst case packet size for this log is 28 + (16 * 70) = 1148
bytes.
5.3.654 LOG_GNSS_CLOCK_REPORT_C (LOG_CODE 0x1478)

This log contains details related to GPS clock. Where float or double is used, format is IEEE
unless specified otherwise.
VALID_FLAG 2 Validity flags:

 0x0000 – No information
 0x0001 – Fcount
 0x0002 – GPS millisecond
 0x0004 – GPS week
 0x0008 – RTC time
 0x0010 – GLO millisecond
 0x0020 – GLO day
 0x0040 – GLO year

Log Record Formats
GPS_TIME_BIAS 4 (User time - GPS time) in milliseconds; float data type
GPS_TIME_UNC 4 Clock time uncertainty in nanoseconds; float data type
GPS_CLK_SRC 1 Integer value indicates source of the clock
GLO_YEAR 1 GLO week number
GLO_DAY 2 GLO day of the week
GLO_MSEC 4 GLO millisecond into the week
GLO_TIME_BIAS 4 (User time - GLO time) in milliseconds; float data type
GLO_TIME_UNC 4 Clock time uncertainty in nanoseconds; float data type
T
n PS
GLO_CLK_SRC 1 Integer value indicates source of the clock
34
om 8:
FREQ_UNC 4 Clock frequency uncertainty in meters per second; float data
type
l.c :4
. c
te 13
FREQ_SRC 1 Source of frequency estimation; integer value
.7 bk t
GPS_LEAP_SEC 1 GPS leap seconds; positive integer

41 -b 1 a
3
GPS_LEAP_SEC_UNC 1 GPS leap seconds uncertainty; positive integer
15
ei .0
0.
w 01
GGTB_MS 4 GPS to GLO time bias; float type

12
ou 3.
GGTB_MS_UNC 4 GPS to GLO time bias uncertainty; float type

2.
zh 201
SYS_RTC_MS 4 RTC time in milliseconds
FCOUNT_OFFSET 4 Fcount offset between software Fcount and hardware Fcount;

positive integer in milliseconds
LPM_RTC_COUNT 4 Low-power RTC count value in milliseconds
CLK_RESETS_CNT 4 Unsigned; count of clock resets

RESERVED 1 4 Reserved for future use; default to 0
This log is generated every 1 sec. Worst case packet size for this log is 85 bytes.
5.3.656 Reserved (LOG _CODE 0x147A)

Log Record Formats
5.3.657 LOG_GNSS_CD_DB_REPORT_C (LOG_CODE 0x147B)

This log provides details of data in CD database every second. Where float or double is used,
format is IEEE unless specified otherwise.
GPS_WEEK 2 GPS week number since January 6, 1980
GPS_MSEC 4 GPS millisecond in a week
T
n PS
34
LEAP_SEC 2 Leap seconds
om 8:
POS_VEL_FLAG 4  Bit 0
l.c :4
c
 0 – Solution is not valid
.
te 13
 1 – Solution is valid
 Bit 1
.7 bk t
 0 – Solution is not WLS

41 -b 1 a
3
 1 – Solution is WLS
15
ei .0
 Bit 2
0.
w 01
 0 – Solution is not KF
12
 1 – Solution is KF
ou 3.
 Bit 3
2.
zh 201
 0 – Solution is not GPS only

 1 – Solution is GPS only
 Bit 4
 0 – Solution is not Glonass only
 1 – Solution is Glonass only
 Bit 5
 0 – Solution is not mixed meas
 1 – Solution is mixed meas
 Bit 6
 0 – Solution is not SFT
 1 – Solution is SFT
 Bit 7
 0 – Solution is not 3D
 1 – Solution is 3D
 Bit 8
 0 – Solution is not alt constrained
 1 – Solution is alt constrained
 Bit 9
 0 – Solution is not GGTB constrained
 1 – Solution is GGTB constrained
POS_LAT 8 Latitude in radians; double data type
POS_LON 8 Longitude in radians; double data type
POS_ALT 8 Ellipsoidal (WGS84) height in meters; double data type

Log Record Formats
POS_3D_UNC_ 4 3D position uncertainty in meters; float data type

METERS
GPS_NAV_DATA_ 2  Bit 0 (LSB) – Flag to show if the SF4 update time is invalid
FLAG  0 – Valid
 1 – Invalid
 Bit 1 – Flag to show if the SF5 update time is invalid
 0 – Valid
 1 – Invalid
 Bit 2 – Flag to show if the Klobuchar iono model is available in
CD database
 0 – Not available
 1 – Available
 Bit 3 – Flag to show if the GPS UTC parameters are available in
CD database
T
 1 – Available
n PS
 Bit 4 – Flag to show if GPS XTRA is available; do not parse any
GPS XTRA data if this bit is set to not available
34
om 8:
 1 – Available
l.c :4
. c
GPS_EPH_MASK 4 Bit mask shows which GPS satellite has an eph in database
te 13
 Bit 0 (LSB) – sv 1
.7 bk t
…
41 -b 1 a
3
 Bit 31 (MSB) – sv 32
15
ei .0
GPS_ALM_MASK 4 Bit mask shows which GPS satellite has an almanac in database
0.
w 01
Bit 0 (LSB) – sv 1
12

ou 3.
…
2.
zh 201
 Bit 31 (MSB) – sv 32
GPS_VIS_LIST 4 Bit mask shows which GPS satellite is visible

…
 Bit 31 (MSB) – sv 32
GPS_HEALTH_ 4 Bit mask shows which GPS satellites are in bad health, source:
PAGE_BAD_LIST health page
…
 Bit 31 (MSB) – sv 32
GPS_HEALTH_ 4 Bit mask shows which GPS satellites are in good health, source:
PAGE_GOOD_ health page
LIST  Bit 0 (LSB) – sv 1
…
 Bit 31 (MSB) – sv 32
GPS_HEALTH_ 4 Bit mask shows which GPS satellites are nonexistent, source:
PAGE_NON_ health page
EXIST _LIST  Bit 0 (LSB) – sv 1
…
 Bit 31 (MSB) – sv 32

Log Record Formats
GPS_HEALTH_ 4 Bit mask shows which GPS satellites have unknown health status,
PAGE_ source: health page
UNKNOWN_LIST  Bit 0 (LSB) – sv 1
…
 Bit 31 (MSB) – sv 32
GPS_ALM_ 4 Bit mask shows which GPS satellites are in bad health, source:
HEALTH_BAD_ alm
…
 Bit 31 (MSB) – sv 32
GPS_ 4 Bit mask shows which GPS satellites are in good health, source:
ALM_HEALTH_ alm
GOOD_LIST  Bit 0 (LSB) – sv 1
T
…
n PS
 Bit 31 (MSB) – sv 32
34
GPS_ ALM_ 4 Bit mask shows which GPS satellites have unknown health,
HEALTH_ source: alm
om 8:
l.c :4
. c
…
te 13
 Bit 31 (MSB) – sv 32
.7 bk t
41 -b 1 a
GPS_EPH_ 4 Bit mask shows which GPS satellites are in bad health, source:
3
HEALTH_BAD_ eph
15
ei .0

0.
w 01
…
12
ou 3.
 Bit 31 (MSB) – sv 32
2.
zh 201
GPS_EPH_ 4 Bit mask shows which GPS satellites are in good health, source:
HEALTH_GOOD_ eph
…
 Bit 31 (MSB) – sv 32
GPS_EPH_ 4 Bit mask shows which GPS satellites have unknown health,
HEALTH_ source: eph
…
 Bit 31 (MSB) – sv 32
GPS_IONO_ 4 Alpha[0]-[3] of Klobuchar model; each element is 1 byte; do not

MODEL_ALPHA parse these data if the GPS_NAV_DATA_FLAG shows the iono
model is not available
GPS_IONO_ 4 Beta[0]-[3] of Klobuchar model; each element is 1 byte; do not

MODEL_BETA parse these data if the GPS_NAV_DATA_FLAG shows the iono
model is not available
GPS_XTRA_WM_ 4 Warn Manager version number

VERSION_
NUMBER
GPS_XTRA_ 4 32-bit CRC of the XTRA bin file

FILE_CRC

Log Record Formats
GPS_XTRA_ 4 Bit mask shows which GPS satellite has at least one valid XTRA
VALID_SV_MASK correction polynomial
…
 Bit 31 (MSB) – sv 32
GPS_XTRA_FIT_ 1 Fit length of each XTRA correction polynomial in units of hour

LEN
GPS_XTRA_ 1 Number of GPS XTRA corrections per sv

NUM_FIT
GPS_XTRA_APP_ 2 Time of XTRA applicability, GPS week number

WEEK
GPS_XTRA_APP_ 4 Time of XTRA applicability, GPS milliseconds in a week

MSWEEK
T
n PS
GPS_XTRA_INJ_ 2 Time of XTRA injection, GPS week number
WEEK
34
GPS_XTRA_INJ_ 4 Time of XTRA injection, GPS milliseconds in a week
om 8:
MSWEEK l.c :4
. c
GLO_NAV_DATA_ 2  Bit 0 – GLONASS; if not supported, do not parse any data
te 13
FLAG hereafter
 0 – Not supported
.7 bk t
41 -b 1 a
 1 – Supported
3
15
Bit 1 – KP notice
ei .0

0.
w 01
 1 – Available
12
ou 3.
 Bit 2 – TaoGps
2.
zh 201
 1 – Available
 Bit 3 – GLO XTRA; if not available, do not parse any GLO
XTRA data
 1 – Available
GLO_N4 1 Number of four-year cycles since January 1, 1996

 1 to 254
 255 – Invalid N4 value
GLO_NT 2 Number of days in a four-year cycle

 1 to 1461
 0xFFFF – Invalid
GLO_MSEC 4 Millisecond in a day – 0 to 86399999
GLO_KP_NOTICE 1 KP value
GLO_TAOGPS 4 TaoGps in microseconds; float number
GLO_TIME_UNC 4 Clock time uncertainty in nanoseconds; float data type
GLO_EPH_MASK 4 Bit mask shows which GLO satellite has an eph in database
 Bit 0 (LSB) – Slot 1 (sv 65)
…
 Bit 23 (MSB) – Slot 24 (sv 88)

Log Record Formats
GLO_ALM_MASK 4 Bit mask shows which GLO satellite has an alm in database
…
 Bit 23 (MSB) – Slot 24 (sv 88)
GLO_HEALTH_ 4 Bit mask shows which GLO satellite has good health in database
GOOD_LIST  Bit 0 (LSB) – Slot 1 (sv 65)
…
 Bit 23 (MSB) – Slot 24 (sv 88)
GLO_HEALTH_ 4 Bit mask shows which GLO satellite has bad health in database
BAD_LIST  Bit 0 (LSB) – Slot 1 (sv 65)
…
 Bit 23 (MSB) – Slot 24 (sv 88)
T
GLO_VIS_ 4 Bit mask shows which GLO satellite is visible
n PS
SLOTID_LIST  Bit 0 (LSB) – Slot 1 (sv 65)
…
34
 Bit 23 (MSB) – Slot 24 (sv 88)
om 8:
GLO_VIS_FREQ_ 2 Bit mask shows which GLO frequency is in view
l.c :4
c
LIST
.
 Bit 0 (LSB) – (-7)
te 13
…
.7 bk t
 Bit 13 (MSB) – +6
41 -b 1 a
3
15
GLO_NONEXT_ 4 Bit mask shows which GLO satellite is non-existent
ei .0
SLOTID_LIST  Bit 0 (LSB) – Slot 1 (sv 65)

0.
w 01
12
…
ou 3.
 Bit 23 (MSB) – Slot 24 (sv 88)

2.
zh 201
GLO_NONEXT_ 2 Bit mask shows which GLO frequency is not in use

FREQ_LIST  Bit 0 (LSB) – (-7)
…
 Bit 13 (MSB) – +6
GLO_XTRA_ 4 Bit mask shows which GLO satellite has at least one valid XTRA
VALID_SV_MASK correction polynomial
…
 Bit 23 (MSB) – Slot 24 (sv 88)
GLO_XTRA_FIT_ 1 Fit length of each XTRA correction polynomial in units of hour

LEN
GLO_XTRA_ 1 Number of GLO XTRA corrections per sv

NUM_FIT
GLO_XTRA_APP_ 1 Time of XTRA applicability, number of cycles since January 1,

N4 1996
GLO_XTRA_APP_ 2 Time of XTRA applicability, number of days in a cycle

NT
GLO_XTRA_APP_ 4 Time of XTRA applicability, number of milliseconds in a day

MSEC

Log Record Formats
GLO_XTRA_INJ_ 1 Time of XTRA injection, number of cycles since January 1, 1996

N4
GLO_XTRA_INJ_ 2 Time of XTRA injection, number of days in a cycle

NT
GLO_XTRA_INJ_ 4 Time of XTRA injection, number of milliseconds in a day

MSEC
This log is generated every 1 sec. Worst case packet size for this log is 215 bytes.
5.3.658 Reserved (LOG _CODE 0x147C)
5.3.659 Reserved (LOG _CODE 0x147D)
T
n PS
5.3.660 LOG_GNSS_PRX_RF_HW_STATUS_REPORT_C (LOG _CODE
34
0x147E)
om 8:
l.c :4
c
The transition from Version 0 to Version 1 of this diagnostic message is extensive; as such, the
.
te 13
parsers of this message may consider implementing its parser from scratch.
.7 bk t
41 -b 1 a
3
Length
Field Description
15
ei .0
(bytes)
0.
w 01

12
ou 3.
GNSS_HW_VER 1 Callisto Hardware Engine 1.0

2.
zh 201
RFIC_ID_PRX 12 RF card ID represented as a NULL-terminated

string (i.e., RTR8600 or RGR8600)
RFIC_MODE 1  0 – Narrowband
 1 – Wideband
 2 – RxD
 3 – Glonass test
RFIC_LIN_STATE 1  Bit 0 – Low linearity/high linearity

 Bit 1 – Forced/auto
RF_VCO_TUNE_CODE 2 VCO tuning code (0 to 128); unsigned integer, 8 bit
RF_DC_DAC_I 2 Value of register in GPS RF IC used to control I

component of DC offset in baseband signal;
provides coarse and fine DC offset correction;
unsigned uint8[2]
RF_DC_DAC_Q 2 Value of register in GPS RF IC used to control Q

unsigned uint8[2]
PGA_GAIN 4 PGA gain setting represented as a

NULL-terminated string; signed integer

Log Record Formats
Length
Field Description
(bytes)
ADC_SAMPLE_RATE_FREQ 4 Actual ADC sample rate in Hz; unsigned integer
ADC_PRE_MEAN_I 4 Preliminary mean estimate (DC) of I component in

MGP ADC processor for primary chain Rx in mV;
signed integer
ADC_PRE_MEAN_Q 4 Preliminary mean estimate (DC) of Q component in

signed integer
BP1_LBW_SAMPLE_RATE 1  0 – OFF (disable)

 1 – FULL (main clk rate)
 2 – HALF (half of main clk rate)
 3 – Quarter (quarter of main clk rate)
BP1_LBW_MEAN_I 2 Mean estimate (DC) of I component in MGP

Baseband Processor 1 (LBW) in mV; signed integer
T
n PS
BP1_LBW_MEAN_Q 2 Mean estimate (DC) of Q component in MGP
Baseband Processor 1 (LBW) in mV; signed integer
34
BP1_LBW_PRE_AMPL_I 4 Preamplitude estimate of I component in MGP
om 8:
Baseband Processor 1 (LBW); this comes from BP
l.c :4
c
preamplitude estimation block; unsigned integer
.
te 13
BP1_LBW_PRE_AMPL_Q 4 Preamplitude estimate of Q component in MGP

.7 bk t

41 -b 1 a

3
15
ei .0
BP1_LBW_AMPL_I 4 Amplitude estimate of I component in MGP

0.
w 01

12
final quantizer estimation block; unsigned integer

ou 3.
2.
zh 201
BP1_LBW_AMPL_Q 4 Amplitude Estimate of Q component in MGP

BP1_LBW_FINE_FREQ 4 To handle frequency drifts automatically, this delta

frequency value is added to BP frequency rotator
value; signed float value (%.5f)
BP1_LBW_NOTCH_ACTIVE 1 Number of active notch filters for BP1 LBW (0 to 6)
BP1_LBW_GROUP_DELAY 2 Group delay compensation in nanoseconds;

unsigned integer
BP3_GLO _SAMPLE_RATE 1  0 – OFF (disable)

BP3_GLO_MEAN_I 2 Mean estimate (DC) of I component in MGP

Baseband Processor 3 (Glonass); signed integer
BP3_GLO_MEAN_Q 2 Mean estimate (DC) of Q component in MGP

Baseband Processor 3 (Glonass); signed integer
BP3_GLO_AMPL_I 4 Amplitude estimate of I component in MGP
Baseband Processor 3 (Glonass); this comes from
BP final quantizer estimation block; from Channel 1
only; unsigned integer

Log Record Formats
Length
Field Description
(bytes)
BP3_GLO_AMPL_Q 4 Amplitude estimate of Q component in MGP
Baseband Processor 3 (Glonass); this comes from
BP final quantizer estimation block; from Channel 1
only; unsigned integer
BP3_GLO_FINE_FREQ 4 To handle frequency drifts automatically, this delta

value; from Channel 1 only; signed float value
(%.5f)
BP3_GLO _NOTCH_ACTIVE 1 Number of active notch filters for BP3 GLO (0 to 6)
BP3_GLO_GROUP_DELAY 2 Group delay compensation in nanoseconds
BP4_HBW _SAMPLE_RATE 1  0 – OFF (disable)

T
3 – Quarter (quarter of main clk rate)
n PS

BP4_HBW_MEAN_I 2 Mean estimate (DC) of I component in MGP
34
Baseband Processor 4 (HBW); signed integer
om 8:
BP4_HBW_MEAN_Q 2
l.c :4 Mean estimate (DC) of Q component in MGP
c
Baseband Processor 4 (HBW); signed integer
.
te 13
BP4_HBW_AMPL_I 4 Amplitude estimate of I component in MGP

.7 bk t
Baseband Processor 4 (HBW); unsigned integer

41 -b 1 a
3
BP4_HBW_AMPL_Q 4 Amplitude estimate of Q component in MGP
15
ei .0
Baseband Processor 4 (HBW); unsigned integer

0.
w 01
BP4_HBW _FINE_FREQ 4 To handle frequency drifts automatically, this delta

12
ou 3.

2.
zh 201
BP4_HBW _NOTCH_ACTIVE 1 Number of active notch filters for BP4 HBW (0 to 6)
BP4_HBW _GROUP_DELAY 2 Group delay compensation in nanoseconds
MND_CNTR_M 4 Defines M value for M/N:D counter; unsigned
MND_CNTR_N 4 Defines N value for M/N:D counter; unsigned
MND_CNTR_D 4 Defines D value for M/N:D counter; unsigned
This log is generated every second. Worst case packet size for this log is 129 bytes.
5.3.661 LOG_GNSS_DRX_RF_HW_STATUS_REPORT_C (LOG _CODE

0x147F)
The transition from Version 0 to Version 1 of this diagnostic message is extensive; as such, the
parsers of this message may consider implementing its parser from scratch.

Log Record Formats
Length
Field Description
(bytes)
GNSS_HW_VER 1 Callisto Hardware Engine 1.0
RFIC_ID_PRX 12 RF card ID represented as a NULL-terminated

string (i.e., RTR8600 or RGR8600)
RFIC_MODE 1  0 – Narrowband
 1 – Wideband
 2 – RxD
 3 – Glonass test
RFIC_LIN_STATE 1  Bit 0 – Low linearity/high linearity

 Bit 1 – Forced/auto
T
RF_VCO_TUNE_CODE 2 VCO tuning code (0 to 128); unsigned integer, 8 bit
n PS
RF_DC_DAC_I 2 Value of register in GPS RF IC used to control I
34
om 8:
unsigned uint8[2]
l.c :4
. c
te 13
RF_DC_DAC_Q 2 Value of register in GPS RF IC used to control Q
.7 bk t
41 -b 1 a
3 provides coarse and fine DC offset correction;

unsigned uint8[2]
15
ei .0
PGA_GAIN 4 PGA gain setting represented as a

0.
w 01
NULL-terminated string; signed integer

12
ou 3.
ADC_SAMPLE_RATE_FREQ 4 ADC sample rate in Hz; unsigned integer

2.
zh 201
ADC_PRE_MEAN_I 4 Preliminary mean estimate (DC) of I component in

signed integer
ADC_PRE_MEAN_Q 4 Preliminary mean estimate (DC) of Q component in

signed integer
BP2_LBW _SAMPLE_RATE 1  0 – OFF (disable)

BP2_LBW_MEAN_I 2 Mean estimate (DC) of I component in MGP

Baseband Processor 1 (LBW) in mV; signed
integer
BP2_LBW _MEAN_Q 2 Mean estimate (DC) of Q component in MGP

Baseband Processor 1 (LBW) in mV; signed
integer
BP1_LBW_PRE_AMPL_I 4 Preamplitude estimate of I component in MGP


Log Record Formats
Length
Field Description
(bytes)
BP1_LBW_PRE_AMPL_Q 4 Preamplitude estimate of Q component in MGP
BP2_LBW _AMPL_I 4 Amplitude estimate of I component in MGP

BP2_LBW _AMPL_Q 4 Amplitude estimate of Q component in MGP

BP2_LBW _FINE_FREQ 4 To handle frequency drifts automatically, this delta

BP2_LBW _NOTCH_ACTIVE 1 Number of active notch filters for BP2 LBW (0 to 6)
T
n PS
BP2_LBW _GROUP_DELAY 2 Group delay compensation in nanoseconds;
unsigned integer
34
om 8:
l.c :4
. c
This log is generated every second if diversity RF chain is enabled. Worst case packet size for
te 13

.7 bk t
41 -b 1 a
3
15
5.3.662 LOG_GNSS_GLONASS_MEASUREMENT_REPORT_C
ei .0
0.
w 01
(LOG _CODE 0x1480)

12
ou 3.
This log contains measurement details on per Glonass SV basis. Where float or double is used,
2.
zh 201
format is IEEE unless specified otherwise.
GLO_FOUR_YEAR 1 GLO 4-year number
GLO_CAL_DAYS 2 GLO day number in 4 years
GLO_MSEC 4 GLO millisecond into the day
TIME_BIAS 4 (User time - GLO time) in milliseconds; float data type
NUMBER_SVS 1 Number of SV information blocks to follow; range, 0 to 14

Log Record Formats

data is output in this packet; unknown Sv ID will be set to 255
SV_FREQ_INDEX 1 GLO FREQUENCY INDEX (-7,+6)
Code Description
0 Idle
1 Search
2 Search verify
3 Bit edge
4 Track_Verify
T
n PS
5 Track
34
6 Restart
om 8:
7
l.c :4 DPO
. c
8 GLO 10 msec bit edge
te 13
9 GLO 10 msec AFC track

.7 bk t
41 -b 1 a
3
10-255 Reserved
15
ei .0

0.
w 01
12

ou 3.
2.
zh 201
HEMMING_ERR_ 1 Total number of hemming error checks (parity)

CNT

0 to 655.35 dB-Hz




UNC type

Log Record Formats

Bit Description
4 Measured velocity
6 Lock point valid
T
8 Good parity
n PS
34
om 8:
l.c :4 measurement
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.

2.
zh 201
16 Glonass meander bit edge known
17-31 Reserved
MISC_STATUS 1 Status flags to indicate validity of data; description applies when

bit is set to 1
Bit Description
2-7 Reserved





Log Record Formats

FINE_SPEED 4 Carrier phase derived speed in meters per second; float data
type
FINE_SPEED_UNC 4 Carrier phase derived speed uncertainty in meters per second;

float type
This log is generated every second. Worst case packet size for this log is 29 + (14 * 70) = 1009
bytes.
5.3.663 LOG_GNSS_GPS_HBW_RXD_MEASUREMENT_C
(LOG _CODE 0x1481)
T
n PS
This log contains high bandwidth GPS and Rx diversity GPS measurement details on an SV
basis. Where float or double is used, format is IEEE unless specified otherwise.
34
om 8:
Field Length (bytes) l.c :4 Description
. c
te 13
FCOUNT 4 Receiver's millisecond count value

.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.

2.
zh 201
S_MEAS_TYPE 1 GPS measurement type
GPS meas type Description
0 LBW GPS measurement
1 HBW GPS measurement
2 Receive diversity (RxD) measurement
NUMBER_SVS 1 Number of SV information blocks to follow; range: 0 to 16

data is output in this packet

Log Record Formats

Code Description
0 Idle
1 Search
2 Search verify
3 Bit edge
4 Track_Verify
5 Track
6 Restart
7 DPO
T
8-255 Reserved
n PS
34
om 8:
l.c :4
c
PARITY_ERROR_ 2 Parity error subframe
.
CNT
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
0 to 655.35 dB-Hz
0.
w 01

12
ou 3.

2.
zh 201


OFFSET_UNFILT_ 4 Unfiltered measurement fraction millisecond offset from LBW

SM GPS; float data type in milliseconds; range Is 0 to 0.99999 ms

OFFSET_UNFILT_ 4 Unfiltered SV speed offset from LBW GPS; float data type
SPEED

UNC type

Log Record Formats
Bit Description
4 Measured velocity
6 Lock point valid
T
8 Good parity
n PS
34
om 8:
l.c :4 measurement
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.

2.
zh 201
16-17 Reserved
18 Round robin Rx diversity measurement
19 Rx diversity measurement
20 LBW and RxD combined measurement

23 HBW GPS uniform measurement
24 GNSS multipath indicator
25-31 Reserved
MISC_STATUS 1 Status flags to indicate validity of data; description applies when

bit is set to 1
Bit Description
2-7 Reserved

Log Record Formats




FINE_SPEED 4 Carrier phase derived fine SV speed in meters per second; float
data type
FINE_SPEED_UNC 4 Carrier phase derived fine SV speed uncertainty in meters per

second; float type
T
n PS
34
om 8:
This log is generated every second. Worst case packet size for this log is 29 + (16 * 78) = 1277
l.c :4
. c
bytes.
te 13
.7 bk t
41 -b 1 a
5.3.664 LOG_GNSS_PDSM_POSITION_REPORT_CALLBACK_C
3
15
(LOG _CODE 0x1482)

ei .0
0.
w 01
This log contains position-related details generated by position engine. Where float or double is
12
ou 3.
used, format is IEEE unless specified otherwise. This log is a replacement for the legacy
2.
zh 201
Generation 7 LOG_CGPS_PDSM_POSITION_REPORT_CALLBACK_C (0x137c) diagnostic

message.
VERSION_ID 1 Version number of log packet

CLIENT_ID 4 PDAPI client ID that requested the position (unsigned)
LATITUDE 4 Latitude of the fix; 180/225 degrees per bit; range of -90
degrees to +90x(1-2-24) degrees referenced to WGS-84
ellipsoid, counting positive angles north of the equator and
negative angles south of the equator (signed integer)
LONGITUDE 4 Longitude of the fix 360/226 degrees per bit; range of -180
degrees to +180x(1-2-25) degrees; referenced to the WGS-84
reference ellipsoid, counting positive angles east of the
Greenwich meridian and negative angles west of the
Greenwich meridian (signed integer)
TIME_STAMP 4 Timestamp in seconds since January 6, 1980, 12:00 am

(unsigned integer)

Log Record Formats
LOC_UNCERTAINTY_ 1 Location uncertainty angle; angle of axis with respect to true

ANG north for position uncertainty; the mobile station shall set this
field to the angle of axis for position uncertainty, in units of
5.625 degrees, in the range from 0 to 84.375 degrees, where 0
degrees is true north and the angle increases toward the east
LOC_UNCERTAINTY_A 1 Standard deviation of axis along angle specified for position

uncertainty encoded
LOC_UNCERTAINTY_P 1 Standard deviation of axis perpendicular to angle specified for

position uncertainty encoded
OPT_FIELD_MASK 1 Flag to indicate if optional fields are valid (unsigned):

 BIT[0] = PDSM_PD_ALTITUDE_VALID, altitude value is
valid if this field is set
 BIT[1] = PDSM_PD_VELOCITY_VALID, heading value is
valid if this field is set
T
 BIT[2] = PDSM_PD_UTCOFFSET_VALID, UTC offset field
n PS
is valid if this field is set
 BIT[3] = PDSM_PD_UNCERTAINTY_VALID, position
34
uncertainty information is valid if this bit is set
 BIT[4] = PDSM_PD_EXT_LOC_VALID, extended location
om 8:
information is present if this bit is set
l.c :4
. c
te 13
ALTITUDE 2 Altitude meters, WGS84 ellipsoid (signed)
HEADING 2 Heading, in units of 360/210 degrees per bit, in the range from
.7 bk t
41 -b 1 a
0 to 360x(1-2-10) degrees; 0 degrees is true north and the

3
15
angle increases toward the east (unsigned)
ei .0
0.
w 01
VELOCITY_HOR 2 Horizontal velocity 0.25 m/s (unsigned)

12
ou 3.
FIX_TYPE 1 Fix type (1 if 3D fix, 0 otherwise) (unsigned)

2.
zh 201
VELOCITY_VER 1 Vertical velocity 0.5 m/s (signed)
LOC_UNCERTAINTY_V 1 Standard deviation of vertical error for position uncertainty

encoded as specified in the position uncertainty table below
GPS_POSITIONING_ 1 Positioning method:

METHOD  0 – MS BASED
 1 – MS ASSISTED
 2 – STANDALONE
 3 – UNKNOWN
(unsigned)

Log Record Formats

POSITION_SOURCE 1 Source of the position; this is a bitmap used to indicate the
source of the position:
 BIT[0] = GPS – If set, indicates GPS SVs were used in
obtaining the position fix
 BIT[1] = CELL_ID – If set, indicates a CELL_ID position
 BIT[2] = SFT – GPS position was computed using solve for
time; BIT [0] should be set if this bit is set
 BIT[3] = 0 for OLD, 1 for NEW
 BIT[4] = DEFAULT – If set, indicates a default position was
returned
 BIT[5] = UNKNOWN – If set, indicates the source of the
position is UNKNOWN
 BIT[6] = WLS/KF – If 0, it is a WLS fix; if 1, it is KF; valid
only if BIT[0] is set
 BIT[7] = Glonass – If set to 1, indicates Glonass SVs were
used in obtaining the position fix
T
Remaining bits are unused and set to 0
n PS
END_SESSION_ 1 Not needed
34
CAUSE
om 8:
UNC_ELLIPSE_ 1 Confidence value for the uncertainty ellipse; 0 to 100%
l.c :4
c
CONFIDENCE
.
te 13
UTC_OFFSET 1 UTC offset; valid only if the UTC offset valid flag is set
.7 bk t
41 -b 1 a
EXT_LOC_LAT 4 Latitude in WGS84; gives more resolution than the lat value
3
above; signed value with π/232 radians per bit; range is from
15
ei .0
-π/2 to + π/2 in radians

0.
w 01
12
EXT_LOC_LONG 4 Longitude in WGS84; Gives more resolution than the lon value
ou 3.
above; signed value with 2π/232 radians per bit. West is -ve;
2.
zh 201
range is from -π to +π in radians

UNCERTAINITY_A

UNCERTAINITY_P
VELHORIZ 4 Horizontal velocity in centimeters per second
VELVERT 4 Vertical velocity in centimeters per second
TIME_STAMP_TOW_ 4 Timestamp in GPS TOW milliseconds

MS
TIME_STAMP_GPS_ 2 Timestamp GPS week number
WEEK
POS_REPORTED_TO_ 1 True if this position was reported to the network

NETWORK
VELUNCHORIZ 4 Horizontal velocity uncertainty
VELUNCVERT 4 Vertical velocity uncertainty
HDOP 4 This field is scaled by a factor of 10; to get the correct value,
convert to float and divide by 10.0; range is 1.0 (highest
accuracy) to 50.0 (lowest accuracy)

Log Record Formats

PDOP 4 This field is scaled by a factor of 10; to get the correct value,
VDOP 4 This field is scaled by a factor of 10; to get the correct value,
UTC_HOUR 1 Range [0..23] hours
UTC_MIN 1 Range [0..59] minutes
UTC_10_MSEC 2 Count in units of 10 msec; range [0..5999]
UTC_DATE 4 UTC date ddmmyyyy

 dd – Range [1..31]
 mm – Range [1..12]
 yyyy – Range [0..9999]
T
n PS
LOC_UNC_ 4 HEPE value in meters
HORIZONTAL
34
TIME_MASK 1  BIT[0] = GPS – If set to 1, indicates GPS SVs were used in
om 8:
l.c :4 obtaining the timestamp
c
 BIT[1] = GLO – If set to 1, indicates GLO SVs were used in
.
te 13
obtaining the timestamp
 BIT[2] = GLO offset valid – If set to 1, indicates that the
.7 bk t
Glonass-GPS time offset field is valid

41 -b 1 a
3
15
GLO_OFFSET 4 Milliseconds offset between GPS and Glonass time; range 0 to
ei .0
max(uint32)
0.
w 01
12

ou 3.
2.
zh 201
This log is generated every second. Worst case packet size for this log is 107 bytes.

Log Record Formats
5.3.667 LOG_CGPS_WB_FFT_STATS_C (LOG _CODE 0x1487)

This log contains the CNo and Frequency of a WBIQ test.
Version 1 Version number of log packet
CNo 4 CNo reported in tenths of dBHz
Frequency 4 Frequency reported in Hz
T
This log is generated every time a wideband IQ test is performed with the BIT3 enabled in the
n PS
script (very infrequently). The worst case packet size for this log is 9 bytes.
34
om 8:
5.3.668 LOG_CGPS_SLOW_CLOCK_CALIB_REPORT_C (LOG _CODE
l.c :4
c
0x1488)
.
te 13
The GPS slow clock module maintains an estimate of time. In order to have time estimate with
.7 bk t
41 -b 1 a
less time uncertainity, slow clock is calibrated. This log is sent out at the following instances:
3
15
ei .0
 When a latched slow clock is associated with GpsTime after a position fix (for 1 Hz tracking
0.
w 01
every second).
12
ou 3.
 When the receiver wakes up after Dynamic Power Optimization (DPO) sleep.
2.
zh 201
VERSION 1 Version number of log packet
LATCH_STATUS 2 Indicates the status and type of latch; bitmap:

 0x01 – Latch1 after position fix is valid
 0x02 – Latch2 after position fix is valid
 0x04 – Latch1 failed sanity check
 0x08 – Latch2 failed sanity check
 0x10 – Wakeup latch
SLOW_CLOCK_ 4 Slow clock count at the time of latch

COUNT
GPS_RTC_MS 4 GPS RTC in milliseconds at the time of latch
GPS_CX_32 4 GPS Cx32 value at the time of latch
GPS_MS 4 GPS milliseconds
TIME_BIAS_MS 4 Time bias in milliseconds
TIME_UNC_MS 4 Time uncertainty in milliseconds
FREQ_BIAS 4 Clock frequency bias in meters per second
FREQ_UNC 4 Frequency uncertainity in meters per second

Log Record Formats

SLOW_CLOCK_FREQ_ 8 Estimated slow clock bias relative to 32768 Hz nominal
BIAS frequency in ppm
SLOW_CLOCK_FREQ_ 8 Estimated slow clock bias UNC relative to 32768 Hz nominal

BIAS_UNC frequency
This log is generated twice in 1 sec (once for after position fix latch and once for wakeup latch).
T
n PS
34
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
5.3.674 LOG_GNSS_PDSM_SET_PARAMETERS_C (LOG _CODE
15
ei .0
0x148F)
0.
w 01
12
This log is generated when a pdsm_set_parameters command is invoked by the application. This
ou 3.
log is generated after LM receives the request from PDAPI. All values are unsigned unless
2.
zh 201
otherwise specified.
PACKET_VERSION 1 Packet version
CLIENT_ID 4 Test client ID

Log Record Formats

PARAMETER TYPE 1  1 – PDSM_PA_APP_INFO
 2 – PDSM_PA_GPS_LOCK
 3 – PDSM_PA_KEEP_WARM
 4 – PDSM_PA_DELETE_PARAMS
 5 – PDSM_PA_POSITION_MODE
 6 – PDSM_PA_MT_LR_SUPPORT
 7 – PDSM_PA_MO_METHOD
 8 – PDSM_PA_NMEA_SENTENCE_TYPE
 9 – PDSM_PA_NETWORK_ADRS
 10 – PDSM_PA_1X_MPC_NETWORK_ADRS
 11 – PDSM_PA_UMTS_PDE_NETWORK_ADRS
 12 – PDSM_PA_SSD_DATA
 13 – PDSM_PA_SEC_UPDATE_RATE
 14 – PDSM_PA_PDAPI_ENABLE
 15 – PDSM_PA_NMEA_CONFIG_INFO
16 – PDSM_PA_EFS_DATA(currently unused)
T

n PS
 17 – PDSM_PA_SBAS_USER_PREFERENCE
 18 – PDSM_PA_SBAS_STATUS
34
 19 – PDSM_PA_DPO_CONTROL
20 – PDSM_PA_ON_DEMAND_LOW_POWER_MODE
om 8:

 21 – PDSM_PA_ON_DEMAND_READY_MODE
l.c :4
. c
 22 – PDSM_PA_CALL_FLOW_SELECT
te 13
 23 – PDSM_PA_DELETE_PARAMS_EX
24 – PDSM_PA_EXTERNAL_SPI
.7 bk t

41 -b 1 a
25 – PDSM_PA_MAX (unused)
3 
15
ei .0
PARAMETER LENGTH 1 Length of the data

0.
w 01
PARAMETER VALUE 0-255 These are interpretations of parameter value vary based on
12
ou 3.
the Parameter Type field. They are elaborated below. If not

2.
zh 201
shown, then the Parameter Type does not take a parameter

value. The exception to the sizing limitation is when
Parameter Type is 16 (EFS_DATA), where the special
length rules apply.
PARAMETER_VALUE 132 For App_Info, the data contains

(OPTION 1)  URL (128 bytes)
 datum
 0 – WGS
 1 – Tokyo (1 byte)
 unit
 0 – dms
 1 – degree (1 byte)
 accuracy – Request accuracy 0,1,2,3 (1 byte)
 num – Number of pos times 0 = def (1 byte)
PARAMETER_VALUE 1 For GPS lock, allowed values are

(OPTION 2)  0 – PDSM_GPS_LOCK_NONE
 1 – PDSM_GPS_LOCK_MI
 2 – PDSM_GPS_LOCK_MT
 3 – PDSM_GPS_LOCK_ALL
PARAMETER_VALUE 1  For KEEP_WARM, allowed values are

(OPTION 3)  FALSE – KEEP_WARM_OFF
 TRUE – KEEP_WARM_ON

Log Record Formats

PARAMETER_VALUE 56 For DELETE_PARAMS, an array of two 32-bit masks
(OPTION 4) (Mask[0..1]) followed by
 4 bytes time uncertainty
 4 bytes position uncertainty
 4 bytes time offset
 4 bytes position offset
 4 bytes Ephemeris SV mask
 4 bytes Almanac SV mask
 4 bytes Glo Ephemeris SV mask
 4 bytes Glo Almanac SV mask
 4 bytes SBAS Ephemeris SV mask
 4 bytes SBAS Almanac SV mask
 4 bytes DeleteCellDB mask
 4 bytes DeleteClockInfo mask
Total parameter length is 14*4 = 56 bytes
T
 Bit set (=1) – delete
n PS
 0 – LSB
Mask[0]
34
 BIT[0] – DELETE_EPH (0x0001), GPS ONLY
om 8:
 BIT[1] – DELETE_ALM (0x0002), GPS ONLY
l.c :4
c
 BIT[2] – DELETE_POS (0x0004)
.
te 13
 BIT[3] – DELETE_TIME (0x0008), ALL GNSS
 BIT[4] – DELETE_IONO (0x0010), GPS ONLY
.7 bk t
41 -b 1 a
 BIT[5] – DELETE_UTC (0x0020), GPS ONLY

3
 BIT[6] – DELETE_HEALTH (0x0040), GPS ONLY
15
ei .0
 BIT[7] – DELETE_SVDIR (0x0080), GPS ONLY

0.
w 01
 BIT[8] – DELETE_SVSTEER (0x0100), GPS ONLY

12
ou 3.
 BIT[9] – DELETE_SADATA (0x0200), GPS ONLY

 BIT[10] – DELETE_RTI (0x0400), GPS ONLY
2.
zh 201
 BIT[11] – TIME_UNC (0x0800)

 BIT[12] – POS_UNC (0x1000)
 BIT[13] – TIME_OFFSET (0x2000)
 BIT[14] – POS_OFFSET (0x4000)
 BIT[15] – DELETE_CELLDB_INFO (0x8000); see also
DELETE_CELLDB_MASK_xxx detailed below
 BIT[16] – DELETE_ALM_CORR (0x10000)
 BIT[17] – DELETE_FREQ_BIAS_EST (0x20000)
(additional constellation flags may be defined)

Log Record Formats
PARAMETER_VALUE 56 Mask[1]
(OPTION 4) (cont.)  BIT[0] – DELETE_EPH_GLO
 BIT[1] – DELETE_EPH_SBAS
 BIT[2] – DELETE_ALM_GLO
 BIT[3] – DELETE_ALM_SBAS
 BIT[4] – DELETE_SVDIR_GLO
 BIT[5] – DELETE_SVDIR_SBAS
 BIT[6] – DELETE_SVSTEER_GLO
 BIT[7] – DELETE_SVSTEER_SBAS
 BIT[8] – DELETE_ALM_CORR_GLO
 BIT[9] – DELETE_CLOCK_INFO; for
DELETE_CLOCK_INFO, see also
DELETE_CLOCK_INFO_XXX masks detailed below,
which allow for finer control of clock information to be
deleted
For DELETE_CELLDB_INFO, the following flags are
T
n PS
applicable
 BIT[0] – DELETE_CELLDB_MASK_POS_INFO
34
 BIT[1] –
DELETE_CELLDB_MASK_LATEST_GPS_POS_INFO
om 8:
 BIT[2] – DELETE_CELLDB_MASK_OTA_POS_INFO
l.c :4
c
 BIT[3] –
.
te 13
DELETE_CELLDB_MASK_EXT_REF_POS_INFO
 BIT[4] – DELETE_CELLDB_MASK_TIMETAG_INFO
.7 bk t
41 -b 1 a
 BIT[5] – DELETE_CELLDB_MASK_CELLID_INFO
3
 BIT[6] –
15
ei .0
DELETE_CELLDB_MASK_CACHED_CELLID_INFO
0.
w 01
 BIT[7] –
12
ou 3.
DELETE_CELLDB_MASK_LAST_SRV_CELL_INFO
2.
zh 201
 BIT[8] –
DELETE_CELLDB_MASK_CUR_SRV_CELL_INFO
 BIT[9] –
DELETE_CELLDB_MASK_NEIGHBOR_INFO_INFO
For DELETE_CLOCK_INFO, the following flags are
applicable
 BIT[0] – C_DELETE_INFO_CLOCK_TIME_EST
(deletes all GNSS time estimate, same as
DELETE_TIME)
 BIT[1] – C_DELETE_INFO_CLOCK_FREQ_EST
 BIT[2] – C_DELETE_INFO_CLOCK_WEEK_NUMBER
 BIT[3] – C_DELETE_INFO_CLOCK_RTC_TIME
 BIT[4] – C_DELETE_INFO_CLOCK_TIME_TRANSFER
 BIT[5] – C_DELETE_INFO_CLOCK_GPSTIME_EST
 BIT[6] – C_DELETE_INFO_CLOCK_GLOTIME_EST
 BIT[7] –
C_DELETE_INFO_CLOCK_GLODAY_NUMBER
 BIT[8] –
C_DELETE_INFO_CLOCK_GLO4YEAR_NUMBER
 BIT[9] –
C_DELETE_INFO_CLOCK_GLO_RF_GRP_DELAY
 BIT[10] – C_DELETE_INFO_CLOCK_DISABLE_TT

Log Record Formats

PARAMETER_VALUE 4 For POSITION_MODE (a bit map of 4 bytes)
(OPTION 5)  0x0008 – POS_MODE_2G_CP_MS_BASED
 0x0010 – POS_MODE_2G_CP_MS_ASSISTED
 0x0020 – POS_MODE_3G_CP_UE_BASED
 0x0040 – POS_MODE_3G_CP_UE_ASSISTED
PARAMETER_VALUE 1 For MT_LR_SUPPORT

(OPTION 6)  0 – Disabled
 1 – Enabled
PARAMETER_VALUE 1 For MO_METHOD

(OPTION 7)  0 – CP
 1 – UP
PARAMETER_VALUE 2 For NMEA_SENTENCE_TYPE 2 bytes bit map

(OPTION 8)  0x0001 – NMEA_GGA
T
 0x0002 – NMEA_RMC
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
PARAMETER_VALUE 4-255 For 1X_PDE, 1X_MPC, or UMTS_PDE NETWORK_ADRS

3
(OPTION 9/10/11) First byte – Server address type (1 byte)
15

ei .0
 0 – PDSM_SERVER_TYPE_IPV4_ADDRESS
0.
w 01
 1 – PDSM_SERVER_TYPE_URL_ADDRESS
12
ou 3.
 2 – PDSM_SERVER_TYPE_IPV6_ADDRESS
2.
zh 201
 If IPv4 – Next 4 bytes are IP_V4 server IP address,

followed by 4 bytes server IP port
 If URL – Next byte is URL length, followed by 1 to128
variable bytes URL data
 If IPv6 – Next 16 bytes are IP_V6 server IP address,
followed by 4 bytes server IP port
PARAMETER_VALUE 8 For NMEA_CONFIG_INFO

(OPTION 15)  4 bytes – NMEA port type
 0 – PDSM_PA_NMEA_PORT_TYPE_UART1
 2 – PDSM_PA_NMEA_PORT_TYPE_USB
 3–
PDSM_PA_NMEA_PORT_TYPE_SHARED_MEM
 4 – PDSM_PA_NMEA_PORT_TYPE_NONE
(disables NMEA port)
 4 bytes – NMEA reporting type
 0–
PDSM_PA_NMEA_REPORT_AT_1HZ_INTERVAL
 1–
PDSM_PA_NMEA_REPORT_AT_FINAL_POSITION

Log Record Formats
PARAMETER_VALUE 140 For EFS_DATA

(OPTION 16)  1 byte – Full path and file name length
 128 bytes – Full path and name, e.g.,
/SUPL/SuplRootCert
 1 byte – File Operation
 4 bytes – Reserved
 4 bytes – File length
 1 byte – Part number of the file
 1 byte – Number of parts
PARAMETER_VALUE 1 SBAS user preference

(OPTION 17)  0 – SBAS disabled
 1 – SBAS enabled (but only if
NV_CGPS_SBAS_ENABLED_I NV item is set to 1;
otherwise, SBAS stays disabled)
T
PARAMETER_VALUE 1 Dynamic Power Optimization (DPO) control
n PS
(OPTION 19)  0 – DPO disabled
 1 – DPO enabled
34
PARAMETER_VALUE 1 For ON_DEMAND_LOW_POWER_MODE
om 8:
(OPTION 20)  0 – Disable ON DEMAND Low Power mode
l.c :4
c
 1 – Enable ON DEMAND Low Power mode
.
te 13
PARAMETER_VALUE 1 For ON_DEMAND_READY_MODE

.7 bk t
(OPTION 21)
41 -b 1 a
3  0 – Disable ON DEMAND Ready mode

 1 – Enable ON DEMAND Ready mode
15
ei .0
PARAMETER_VALUE 1 For CALL_FLOW_SELECT

0.
w 01
(OPTION 22)  MO-LR or AD call flow selection for UMTS CP for 2G

12
ou 3.
and 3G
2.
zh 201
 Bit 0 – 2G call flow select

 0 – AD
 1 – MO-LR
 Bit 1 – 3G call flow select
 0 – AD
 1 – MO-LR
PARAMETER_VALUE 4 For PDSM PA EXTERNAL SPI

(OPTION 24) 0 – Disabled mode
1 – Enabled mode
RESERVED 3 Reserved
This log is triggered by the client. The worst case packet size for this log is 265 bytes.

Log Record Formats
5.3.675 LOG_GNSS_PDSM_PD_EVENT_CALLBACK_C (LOG _CODE

0x1490)
Any other position determination event callbacks not related to position report to the PDSM
client are logged using this message. All the values are unsigned unless otherwise specified.
PACKET_VERSION 1 Version number of log packet
EVENT_TYPE 1  0 – PDSM_PD_EVENT_END (End of session)

 1 – PDSM_PD_EVENT_BEGIN (Start of session)
 2 – PDSM_PD_WARM PROC BEGIN (Start of keep warm*)
 3 – PDSM_PD_WARM (Receiver warm*)
 4 – PDSM_PD_NOT WARM (Receiver not warm*)
 5 – PDSM_PD_WARM PROC DONE (End of keep warm*)
 7 – PDSM_PD_EVENT_DONE (PD session done)
8 – PDSM_PD_GPS BEGIN (GPS receiver on)
T

n PS
 9 – PDSM_PD_GPS END (GPS receiver off)
 10 – PDSM_PD_COMMS BEGIN (Attempting to communicate
34
with the network)
 11 – PDSM_PD_COMMS (Connected to the network)
om 8:
 12 – PDSM_PD_COMMS FAILURE (Failed to connect to the
l.c :4
c
network)
.
te 13
 13 – PDSM_PD_COMMS DONE (Done with the
communication to the network)
.7 bk t
41 -b 1 a
 14 – PDSM_PD_EVVENT_UPDATE_FAILURE
3
15 – PDSM_PD_DLOAD_START
15

ei .0
 16 – PDMS_PD_DLOAD
0.
w 01
 17 – PDSM_PD_DLOAD_DONE
12
ou 3.
 18 – PDSM_PD_DLOAD_END
2.
zh 201
 19 – PDSM_PD_DLOAD_INVALID

Log Record Formats
EVENT_DATA 1  PD_EVENT_END (Reason is returned)

 PD_EVENT_BEGIN (No data is returned)
 PDSM_PD_WARM PROC BEGIN (No data is returned)
 PDSM_PD_WARM (No data is returned)
 PDSM_PD_NOT WARM (No data is returned)
 PDSM_PD_WARM PROC DONE (No data is returned)
 PDSM_PD_EVENT_DONE (No data is returned)
 PDSM_PD_GPS_BEGIN (No data is returned)
 PDSM_PD_GPS_END (No data is returned)
 PDSM_PD_COMMS BEGIN (Type of communication protocol
data is returned):
 0 – PDSM_PD_COMM_PROTOCOL_UMTS_UP_SUPL
 1 – PDSM_PD_COMM_PROTOCOL_1X
 2 – PDSM_PD_COMM_PROTOCOL_UMTS_CP_WCDMA
 3 – PDSM_PD_COMM_PROTOCOL_UMTS_CP_GSM
 4 – PDSM_PD_COMM_PROTOCOL_V1V2
T
n PS
 5 – PDSM_PD_COMM_PROTOCOL_KDDI
 6 – PDSM_PD_COMM_PROTOCOL_IS801_B
34
 7 – PDSM_PD_COMM_PROTOCOL_RRLP_V8
 8 – PDSM_PD_COMM_PROTOCOL_SUPL_2_0
om 8:
 PDSM_PD_COMMS (No data is returned)
l.c :4
c
PDSM_PD_COMMS FAILURE (End status is returned; values
.

te 13
usually increase monotonically by 1, starting from -1;
exceptions are noted in Section 5.3.675.1)
.7 bk t
41 -b 1 a
 PDSM_PD_COMMS DONE (No data is returned)

3
PDSM_PD_EVENT_UPDATE_FAILURE (No data is returned)
15

ei .0
 PDSM_PD_DLOAD_START (No data is returned)

0.
w 01
 PDMS_PD_DLOAD (No data is returned)

12
ou 3.
 PDSM_PD_DLOAD_DONE (No data is returned)

2.
zh 201
 PDSM_PD_DLOAD_END (No data is returned)

 PDSM_PD_DLOAD_INVALID (No data is returned)
RESERVED 7 Reserved
*Not used in Gen8.
This log is generated whenever a PDAPI event is generated for an application. The worst case
5.3.675.1 PDSM_PD_COMMS FAILURE exceptions

 PDSM_PD_END_SESS_NONE = -1 – For internal use of PDSM
 PDSM_PD_END_OFFLINE – Phone offline
 PDSM_PD_END_NO_SRV – No service
 PDSM_PD_END_NO_CON – No connection with PDE
 PDSM_PD_END_NO_DATA – No data available
 PDSM_PD_END_SESS_BUSY – Session manager busy
 PDSM_PD_END_CDMA_LOCK – Phone is CDMA locked
 PDSM_PD_END_GPS_LOCK – Phone is GPS locked

Log Record Formats
 PDSM_PD_END_CON_FAIL – Connect failure with PDE

 PDSM_PD_END_ERR_STATE – PDSM ended session because of error condition
 PDSM_PD_END_CLIENT_END – User ended the session
 PDSM_PD_END_UI_END – End key pressed from UI
 PDSM_PD_END_NT_END – Network session was ended
 PDSM_PD_END_TIMEOUT – Timeout (e.g., for GPS search)
 PDSM_PD_END_PRIVACY_LEVEL – Conflicting requests for session and level of
privacy
 PDSM_PD_END_NET_ACCESS_ERR – Could not connect to the network
 PDSM_PD_END_FIX_ERROR – Error in fix
 PDSM_PD_END_PDE_REJECT – Reject from PDE
T
PDSM_PD_END_TC_EXIT – Ending session due to TC exit
n PS

 PDSM_PD_END_E911 – Ending session due to E911 call
34
PDSM_PD_END_SERVER_ERROR – Added protocol specific error type
om 8:

l.c :4
c
 PDSM_PD_END_STALE_BS_INFO – Ending because BS information is stale
.
te 13
 PDSM_PD_END_VX_AUTH_FAIL – VX LCS agent auth fail

.7 bk t
41 -b 1 a
PDSM_PD_END_UNKNWN_SYS_ERROR – Unknown system error


3
15
ei .0
 PDSM_PD_END_UNSUPPORTED_SERVICE – Unsupported service

0.
w 01
PDSM_PD_END_SUBSRIPTION_VIOLATION – Subscription violation

12

ou 3.
2.
zh 201
 PDSM_PD_END_FIX_METHOD_FAILURE – The desired fix method failed

 PDSM_PD_END_ANTENNA_SWITCH – Antenna switch
 PDSM_PD_END_NO_FIX_NO_TX_CONFIRM – No fix reported due to no Tx
confirmation received
 PDSM_PD_END_NORMAL_ENDING – Network indicated a normal ending of the session
 PDSM_PD_END_NONSPECIFIED_ERROR – No error specified by the network
 PDSM_PD_END_RESOURCE_SHORTAGE – No resources left on the network
 PDSM_PD_END_POS_SERVER_NOT_AVAILABLE – Position server not available
 PDSM_PD_END_UNSUPPORTED_VERSION – Network reported an unsupported version
of protocol
 PDSM_PD_END_SS_MOLR_ERRORS_SYSTEM_FAILURE – Mapped to corresponding
SS-molr-error error code
 PDSM_PD_END_SS_MOLR_ERRORS_UNEXPECTED_DATA_VALUE
 PDSM_PD_END_SS_MOLR_ERRORS_DATA_MISSING
 PDSM_PD_END_SS_MOLR_ERRORS_FACILITY_NOT_SUPPORTED
 PDSM_PD_END_SS_MOLR_ERRORS_SS_SUBSCRIPTION_VIOLATION

Log Record Formats
 PDSM_PD_END_SS_MOLR_ERRORS_POSITION_METHOD_FAILURE
 PDSM_PD_END_SS_MOLR_ERRORS_UNDEFINED
 PDSM_PD_END_CP_CF_DISRUPT_SMLC_TO – Control plane's SMLC timeout may or
may not end PD
 PDSM_PD_END_MT_GUARD_TIMER_EXPIRY – Control plane's MT guard time
expires
 PDSM_PD_END_WAIT_ADDITION_ASSIST_EXPIRY – End waiting for additional
assistance
KDDI-specific error codes

 PDSM_PD_END_JGPS_POSRESP_NG_LIS – Position response Non Good (NG)
reception (LIS side system anomaly)
 PDSM_PD_END_JGPS_POSRESP_NG_LSU – Position response NG reception (beyond
T
the LSU maximum session count)
n PS
 PDSM_PD_END_JGPS_POSRESP_NG_MSI – Position response NG reception (MS side
34
setting information failure?)
om 8:
PDSM_PD_END_JGPS_STOPPOS_NG_LIS – Session interruption NG reception
l.c :4
c

.
te 13
 PDSM_PD_END_JGPS_STOPPOS_NG_MSI – Session interruption NG reception (MS
side setting information failure?)
.7 bk t
41 -b 1 a
3
PDSM_PD_END_JGPS_POSCOMP_NG – Abnormal response reception
15

ei .0
0.
w 01
 PDSM_PD_END_JGPS_TIMEOUT_T04 – T04 timed out

12
ou 3.
 PDSM_PD_END_JGPS_TIMEOUT_STOPPOS – T03 timed out

2.
zh 201

 PDSM_PD_END_JGPS_TIMEOUT_IS801 – IS801 timed out
 PDSM_PD_END_JGPS_IS801_LRREJ – LR reject reception
 PDSM_PD_END_JGPS_IS801_AAREJ – AA reject reception
 PDSM_PD_END_JGPS_IS801_EPHREJ – EPH reject reception
 PDSM_PD_END_JGPS_IS801_ALMREJ – ALM reject reception
 PDSM_PD_END_JGPS_IS801_SEEDREJ – SEED reject reception
 PDSM_PD_END_JGPS_IS801_AA_FAIL – IS801 sequence error
 PDSM_PD_END_JGPS_PPP – PPP establish trial failure
 PDSM_PD_END_JGPS_TCP_MS – Network link disconnection after PPP established (MS
initiated)
 PDSM_PD_END_JGPS_TCP_SERV – Network link disconnection after PPP established
(server initiated)
 PDSM_PD_END_JGPS_ACQRESP_NG_LIS – GPS data requestresponse NG reception
(LIS side system anomaly)

Log Record Formats
 PDSM_PD_END_JGPS_ACQRESP_NG_LSU – GPS data request response NG reception

(beyond LSU maximum session count)
 PDSM_PD_END_JGPS_ACQRESP_NG_MSI – GPS data request response NG reception
(MS side setting information NG?)
 PDSM_PD_END_JGPS_STOPACQ_NG_LIS – GPS data request interruption NG reception
(LIS side system anomaly?)
 PDSM_PD_END_JGPS_STOPACQ_NG_MSI – GPS data request interruption NG
reception (MS side setting information NG?)
 PDSM_PD_END_JGPS_TIMEOUT_STOPACQ – T21 timed out
 PDSM_PD_END_MO_LR_NOT_DELIVERED – When MO LR COMPLETED message is
received
T
 PDSM_PD_END_JGPS_DMSB_ERROR = 901 – MSB: No fixwith download the data
n PS
 PDSM_PD_END_JGPS_DPOSCOMP_NG = 911 – MSA (MSB auto): No fixwith
34
download the data
om 8:
 PDSM_PD_END_MAX – Maximum for PDSM internal use
l.c :4
. c
PDSM_PD_END_E_SIZE = 0x10000000 – To fix enum Size as int
te 13

.7 bk t
41 -b 1 a
5.3.676 LOG_GNSS_PDSM_PA_EVENT_CALLBACK_C (LOG _CODE

3
15
ei .0
0x1491)
0.
w 01
Any parameter event callback to the PDSM client is logged using the message. All the values are
12
ou 3.
unsigned unless otherwise specified.

2.
zh 201
Length
Field Description
(bytes)
PACKET_VERSION 1 Version number of log packet

Log Record Formats
Length
Field Description
(bytes)
EVENT_TYPE 1  1 – PDSM_PA_NETWORK_ADRSs
 2 – PDSM_PA_GPS_LOCK
 3 – PDSM_PA_KEEP_WARM
 4 – PDSM_PA_DELETE_PARAMS
 5 – PDSM_PA_POSITION_MODE
 6 – PDSM_PA_MT_LR_SUPPORT
 7 – PDSM_PA_MO_METHOD
 8 – PDSM_PA_NMEA_SENTENCE_TYPE
 PDSM_PA_1X_PDE_NETWORK_ADRS
 PDSM_PA_1X_MPC_NETWORK_ADRS
 PDSM_PA_UMTS_PDE_NETWORK_ADRS
 PDSM_PA_SSD_DATA
 PDSM_PA_SEC_UPDATE_RATE
 PDSM_PA_PDAPI_ENABLE
PDSM_PA_NMEA_CONFIG_INFO
T

n PS
 PDSM_PA_EFS_DATA (currently unused)
 PDSM_PA_SBAS_USER_PREFERENCE
34
 PDSM_PA_SBAS_STATUS
 PDSM_PA_DPO_CONTROL
om 8:
 PDSM_PA_ON_DEMAND_LOW_POWER_MODE
l.c :4
c
PDSM_PA_ON_DEMAND_READY_MODE
.

te 13
 PDSM_PA_CALL_FLOW_SELEC
.7 bk t
41 -b 1 a
EVENT_LENGTH 1 Length of the event data

3
15
RESERVED 1 For future use
ei .0
0.
w 01
PARAMETER_ 0-255 Interpretations of parameter value vary based on the Parameter Type
12
ou 3.
VALUE field. They are elaborated below. If not shown, then the Parameter
Type does not take a parameter value. The exception to the sizing
2.
zh 201
limitation is when Parameter Type is 16 (EFS_DATA), where the

special length rules apply.
PARAMETER_ 132 For App_Info, the data contains:

VALUE  URL (128 bytes)
(Option 1 of 21)  datum – 0 = WGS, 1 = Tokyo (1 byte)
 unit – 0 = dms, 1 = degree (1 byte)
 accuracy – Request accuracy 0,1,2,3 (1 byte)
 num – Number of pos times 0 = def (1 byte)
PARAMETER_ 1 For GPS_LOCK (1 byte)

VALUE  0 – PDSM_GPS_LOCK_NONE
(Option 2 of 21)  1 – PDSM_GPS_LOCK_MI
 2 – PDSM_GPS_LOCK_MT
 3 – PDSM_GPS_PA_LOCK_ALL
PARAMETER_ 1 For KEEP_WARM (Boolean)

VALUE  FALSE – KEEP_WARM_OFF
(Option 3 of 21)  TRUE – KEEP_WARM_ON

Log Record Formats
Length
Field Description
(bytes)
PARAMETER_ 1 For DELETE_PARAMS an array of two 32-bit masks (Mask[0..1]),
VALUE followed by:
(Option 4 of 21)  4 bytes Time Uncertainty
 4 bytes Position Uncertainty
 4 bytes Time Offset
 4 bytes Position Offset
 4 bytes Ephemeris SV Mask
 4 bytes Almanac SV Mask
 4 bytes Glo Ephemeris SV Mask
 4 bytes Glo Almanac SV Mask
 4 bytes SBAS Eph SV mask
 4 bytes SBAS Alm SV mask
 4 bytes DeleteCellDB Mask
 4 bytes DeleteClockInfo Mask
T
n PS
 Parameter Length = 14*4 = 56 bytes
 Bit set (=1) = delete
34
 LSB = Bit 0
om 8:
Mask[0]l.c :4
c
 BIT[0] – DELETE_EPH (0x0001), GPS ONLY
.
te 13
 BIT[1] – DELETE_ALM (0x0002), GPS ONLY
 BIT[2] – DELETE_POS (0x0004)
.7 bk t
41 -b 1 a
 BIT[3] – DELETE_TIME (0x0008), ALL GNSS

3
 BIT[4] – DELETE_IONO (0x0010), GPS ONLY
15
ei .0
 BIT[5] – DELETE_UTC (0x0020), GPS ONLY

0.
w 01
 BIT[6] – DELETE_HEALTH (0x0040), GPS ONLY

12
 BIT[7] – DELETE_SVDIR (0x0080), GPS ONLY

ou 3.
 BIT[8] – DELETE_SVSTEER (0x0100), GPS ONLY

2.
zh 201
 BIT[9] – DELETE_SADATA (0x0200), GPS ONLY

 BIT[10] – DELETE_RTI (0x0400), GPS ONLY
 BIT[11] – TIME_UNC (0x0800)
 BIT[12] – POS_UNC (0x1000)
 BIT[13] – TIME_OFFSET (0x2000)
 BIT[14] – POS_OFFSET (0x4000)
 BIT[15] – DELETE_CELLDB_INFO (0x8000); see also
DELETE_CELLDB_MASK_xxx detailed below)
 BIT[16] – DELETE_ALM_CORR (0x10000)
 BIT[17] – DELETE_FREQ_BIAS_EST (0x20000) (additional
constellation flags may be defined)

Log Record Formats
Length
Field Description
(bytes)
PARAMETER_ 1 (cont.) Mask[1]

VALUE  BIT[0] – DELETE_EPH_GLO
(Option 4 of 21)  BIT[1] – DELETE_EPH_SBAS
(cont.)  BIT[2] – DELETE_ALM_GLO
 BIT[3] – DELETE_ALM_SBAS
 BIT[4] – DELETE_SVDIR_GLO
 BIT[5] – DELETE_SVDIR_SBAS
 BIT[6] – DELETE_SVSTEER_GLO
 BIT[7] – DELETE_SVSTEER_SBAS
 BIT[8] – DELETE_ALM_CORR_GLO
 BIT[9] – DELETE_CLOCK_INFO; see also
DELETE_CLOCK_INFO_XXX masks detailed below, which allow
for finer control of clock information to be deleted
For DELETE_CELLDB_INFO, the following flags are applicable:
T
 BIT[0] – DELETE_CELLDB_MASK_POS_INFO
n PS
 BIT[1] – DELETE_CELLDB_MASK_LATEST_GPS_POS_INFO
 BIT[2] – DELETE_CELLDB_MASK_OTA_POS_INFO
34
 BIT[3] – DELETE_CELLDB_MASK_EXT_REF_POS_INFO
 BIT[4] – DELETE_CELLDB_MASK_TIMETAG_INFO
om 8:
 BIT[5] – DELETE_CELLDB_MASK_CELLID_INFO
l.c :4
. c
 BIT[6] – DELETE_CELLDB_MASK_CACHED_CELLID_INFO
te 13
 BIT[7] – DELETE_CELLDB_MASK_LAST_SRV_CELL_INFO
.7 bk t
 BIT[8] – DELETE_CELLDB_MASK_CUR_SRV_CELL_INFO
41 -b 1 a
3
 BIT[9] – DELETE_CELLDB_MASK_NEIGHBOR_INFO_INFO
15
ei .0
For DELETE_CLOCK_INFO, the following flags are applicable:

0.
w 01
 BIT[0] – C_DELETE_INFO_CLOCK_TIME_EST (deletes all GNSS

12
time estimate, same as DELETE_TIME)

ou 3.
 BIT[1] – C_DELETE_INFO_CLOCK_FREQ_EST
2.
zh 201
 BIT[2] – C_DELETE_INFO_CLOCK_WEEK_NUMBER
 BIT[3] – C_DELETE_INFO_CLOCK_RTC_TIME
 BIT[4] – C_DELETE_INFO_CLOCK_TIME_TRANSFER
 BIT[5] – C_DELETE_INFO_CLOCK_GPSTIME_EST
 BIT[6] – C_DELETE_INFO_CLOCK_GLOTIME_EST
 BIT[7] – C_DELETE_INFO_CLOCK_GLODAY_NUMBER
 BIT[8] – C_DELETE_INFO_CLOCK_GLO4YEAR_NUMBER
 BIT[9] – C_DELETE_INFO_CLOCK_GLO_RF_GRP_DELAY
 BIT[10] – C_DELETE_INFO_CLOCK_DISABLE_TT
PARAMETER_ 4 For POSITION_MODE (a bit map of 4 bytes):

VALUE  0x0008 – POS_MODE_2G_CP_MS_BASED
(Option 5 of 21)  0x0010 – POS_MODE_2G_CP_MS_ASSISTED
 0x0020 – POS_MODE_3G_CP_UE_BASED
 0x0040 – POS_MODE_3G_CP_UE_ASSISTED
PARAMETER_ 1 For MT_LR_SUPPORT (1 byte):

VALUE  0 – Disabled
(Option 6 of 21)  1 – Enabled
PARAMETER_ 1 For MO_METHOD (1 byte):

VALUE  0 – CP
(Option 7 of 21)  1 – UP

Log Record Formats
Length
Field Description
(bytes)
PARAMETER_ 2 For NMEA_SENTENCE_TYPE (a bit map of 2 bytes):
VALUE  0x0001 – NMEA_GGA
(Option 8 of 21)  0x0002 – NMEA_RMC
PARAMETER_ 4-256 For 1X_PDE, 1X_MPC, or UMTS_PDE NETWORK_ADRS, first byte =

VALUE Server address type (1 byte):
(Options 9, 10, and  0 – PDSM_SERVER_TYPE_IPV4_ADDRESS (If IPv4, next 4 bytes
11 of 21) are IP_V4 server IP address, followed by 4 bytes server IP port)
T
 1 – PDSM_SERVER_TYPE_URL_ADDRESS (If URL, next byte is
n PS
URL length, followed by 1 to 128 variable bytes URL data )
 2 – PDSM_SERVER_TYPE_IPV6_ADDRESS (If IPv6, next 16
34
bytes are IP_V6 server IP address, followed by 4 bytes server IP
om 8:
port)
l.c :4
c
PARAMETER_ 8 For NMEA_CONFIG_INFO:
.
te 13
VALUE  4 bytes – NMEA port type
(Option 15 of 21)  0 – PDSM_PA _NMEA_PORT_TYPE_UART1
.7 bk t
41 -b 1 a
3
15
 2 – PDSM_PA_NMEA_PORT_TYPE_USB
ei .0
 3 – PDSM_PA _NMEA_PORT_TYPE_SHARED_MEM
0.
w 01
 4 – PDSM_PA_NMEA_PORT_TYPE_NONE (Disables NMEA

12
ou 3.
port)
2.
zh 201
 4 bytes – NMEA reporting type

 0 – PDSM_PA _NMEA_REPORT_AT_1HZ_INTERVAL
 1 – PDSM_PA_NMEA_REPORT_AT_FINAL_POSITION
PARAMETER_ 140 For EFS_DATA:

VALUE  For EFS_DATA:
(Option 16 of 21)  1 byte – Full path and file name length
 128 bytes – Full path and name, e.g. /SUPL/SuplRootCert
 1 byte – File operation
 4 bytes – Reserved
 4 bytes – File length
 1 byte – Part number of the file
 1 byte – Number of parts
PARAMETER_ 1 SBAS user preference:

VALUE  0 – SBAS disabled
(Option 17 of 21)  1 – SBAS enabled (but only if NV_CGPS_SBAS_ENABLED_I NV
item is set to 1; otherwise, SBAS stays disabled)
PARAMETER_ 1 Dynamic Power Optimization (DPO) control:

VALUE  0 – DPO disabled
(Option 18 of 21)  1 – DPO enabled
PARAMETER_ 1 For ON_DEMAND_LOW_POWER_MODE:

VALUE  0 – Disable ON DEMAND Low Power mode
(Option 19 of 21)  1 – Enable ON DEMAND Low Power mode

Log Record Formats
Length
Field Description
(bytes)
PARAMETER_ 1 For ON_DEMAND_READY_MODE:
VALUE  0 – Disable ON DEMAND Ready mode
(Option 20 of 21)  1 – Enable ON DEMAND Ready mode
PARAMETER_ 1 For MO-LR AD call flow select

VALUE
(Option 21 of 21)
This log is generated whenever a PDAPI event is generated for an application. The worst case
T
n PS
34
5.3.679 LOG_GNSS_PDSM_EXT_STATUS_MEAS_REPORT_C
(LOG _CODE 0x1494) om 8:
l.c :4
. c
te 13
This log reports measurements received for each SV.
.7 bk t
41 -b 1 a
3
VERSION 1 Version number of log packet
15
ei .0
CLIENT_ID 4 Client ID
0.
w 01
12
ou 3.
NUM_SVS 1 Number of SVs included in this report

2.
zh 201
EPH_SV_MASK 4 SV mask for ephemeris
ALM_SV_MASK 4 SV mask for almanac
IONO_VALID 4 IONO is valid
HEALTH_SV_MASK 4 SV mask for health; if bit is set, health is good
VISIBLE_SV_MASK 4 If bit is set, SV is visible
TIME_UNC 4 Time uncertainty in milliseconds; floor is at 20 ms
Reserved 16 Reserved
SV DATA 512 Array of 32 elements, where each element is of SV_DATA type;

see Section 5.3.679.1 for description
5.3.679.1 SV data
For each SV, the following data is reported. A maximum of 32 SVs are reported.
SV_ID 1 SV ID of the SV; SV_ID follow the NMEA numbering, i.e., GPS 1 to
32, GLO 65 to 89, etc., so that SV_ID is unique to each GNSS SV
C_NO 2 C/No of the SV; units of 0.1 db

Log Record Formats
Latency_ms 4 Age of the measurement in milliseconds (+ve means meas

precedes ref time)
Azimuth 4 Azimuth in radians (?)
Elevation 4 Elevation in radians (?)
Status 1  0 – C_GPS_SV_STATE_IDLE
 1 – C_GPS_SV_STATE_SEARCH
 2 – C_GPS_SV_STATE_SEARCH_VERIFY
 3 – C_GPS_SV_STATE_BIT_EDGE
 4 – C_GPS_SV_STATE_TRACK
This log is generated at a 1 Hz rate. The worst case packet size for this log is 558 bytes.
5.3.680 LOG_GNSS_SM_ERROR_C (LOG _CODE 0x1495)
T
n PS
This is a generic SM error log, generated to indicate some error within SM. The payload is
34
typically a string describing the error. It may also contain file name and line number of error.
om 8:
l.c :4
c
.
te 13
Version 1 Version number of log packet
.7 bk t
41 -b 1 a
Severity 1 3 Distinguishes severity of error; 0 = no error

15
Reserved 8 Reserved
ei .0
0.
w 01
Length 1 Message payload length

12
ou 3.
Message 255 Message payload; length of payload is specified by Length field

2.
zh 201
(count includes terminating null)
This log is generated rarely. The worst case packet size for this log is 266 bytes.

Log Record Formats
5.3.686 Reserved (LOG _CODE 0x149B)
T
5.3.691 Reserved (LOG _CODE 0x14A0)
n PS
34
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.
2.
zh 201
5.3.698 Reserved (LOG _CODE 0x14AA)
5.3.699 Reserved (LOG _CODE 0x14AB)

Log Record Formats
5.3.700 Reserved (LOG _CODE 0x14AC)
5.3.701 Reserved (LOG _CODE 0x14AD)
5.3.702 Reserved (LOG _CODE 0x14B0)
T
n PS
34
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01

12
ou 3.
2.
zh 201
5.3.712 Reserved (LOG _CODE 0x14BB)
5.3.713 Reserved (LOG _CODE 0x14BC)

Log Record Formats
5.3.714 Reserved (LOG _CODE 0x14BD)
5.3.715 Reserved (LOG _CODE 0x14BE)
5.3.716 Reserved (LOG _CODE 0x14BF)
5.3.717 Reserved (LOG _CODE 0x14C0)
T
n PS
34
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.
2.
zh 201
5.3.726 LOG_BLAST_TASKPROFILE_C (LOG _CODE 0x14CA)

This log packet carries profiling information about a particular task specified by the ID in the
packet. If special_task is 1, the log packet represents a special task, in which case task_id is
ignored.
This log packet is derived from the log packet format of LOG_TASKPROFILE_C (LOG_CODE
0x1157).
CPU utilization can be computed using the following equation for the duration core clock;
frequency does not change:

Log Record Formats
ALL WAIT duration = total_sclk_samples * (core clock freq/sleep clock freq) - total_samples
5
total PCYCLES =   runtime_PCYCLES_i/6

Threads i = 0
One summation computes the run time of a software task in PCYCLES and the other summation
computes the run time of all software tasks including the IDLE thread. Dividing by 6 converts
PCYCLES to TCYCLES (thread cycles).
NOTE If the core clock frequency changes during the profiling, the QXDM client software should be
able to make the correction because the weight of each sample will be different.
NOTE ALL WAIT duration is the duration Q6 core clock is shut down. Q6 core clock is shut down if
Q6 has nothing to run
T
n PS
34
om 8:
Ver 1 Version number to account for future changes in
l.c :4
c
the format
.
te 13
App 1 Application type using the Q6; this field

.7 bk t
distinguishes if multiple Q6 are present:

41 -b 1 a
3
 0 – Modem software
15
ei .0
 1 – Modem firmware
0.
w 01
 2 – Multimedia
12
ou 3.
Special_task 1 Indicates the special Task ID; if special_task is 1,

2.
zh 201
task_id represents a nontraditional task; these

special task_ids are required to compute total
CPU utilization
flags 1 Same as flags type in LOG_TASKPROFILE_C

 Bit 0 – Same as Interrupt State in
LOG_TASKPROFILE_C
 Bit 1 – Same as Suspend State in
LOG_TASKPROFILE_C
 Bit 2 – Same as Slice Type
inLOG_TASKPROFILE_C
 Bit 3-7 – Not in use of the bits is same as
LOG_TASKPROFLIE_C
Task_id 4 Same as LOG_TASKPROFILE_C
Sp 4 Same as LOG_TASKPROFILE_C
Sigs 4 Same as LOG_TASKPROFILE_C
Wait 4 Same as LOG_TASKPROFILE_C
Pri 4 Same as LOG_TASKPROFILE_C
Total_samples 8 Total PCYCLE count since the Task profiling

started

Log Record Formats

Time_samples 8x6 PCYCLE count of the TASK run time on each
hardware thread since task profiling started; run
time in each hardware thread is captured in 8
bytes and there are a maximum of 6 hardware
threads on Hexagon processor
Core_clk_freq 4 Core clock frequency
Total_sclk_samples 4 Total sleep clocks elapsed since profiling started
This log is generated with prorgrammed periodicity. The worst case packet size for this log is 88
bytes.
5.3.727 LOG_BLAST_TASKPROFILE_C (LOG _CODE 0x14CB)
T
This log packet format is identical to LOG_SYSPROFILE_C (LOG_CODE 0x1156).
n PS
34
Ver 1 Version number to account for future changes in
om 8:
the format
l.c :4
. c
te 13
Rsvd 3 Reserved to expand in future; currently serves
as alignment
.7 bk t
41 -b 1 a
Total_num_tasks 4 Same as LOG_SYSPROFILE_C

3
15
ei .0
Task_id 4 Same as LOG_SYSPROFILE_C

0.
w 01
Stack_size 4 Same as LOG_SYSPROFILE_C

12
ou 3.
2.
zh 201
Stack_limit 4 Same as LOG_SYSPROFILE_C
Max_intlock_time 4 Same as LOG_SYSPROFILE_C
Max_intlock_lr 4 Same as link register in LOG_SYSPROFILE_C
Task_name 16 Same as LOG_SYSPROFILE_C
This log is generated with prorgrammed periodicity. The worst case packet size for this log is 24
bytes.
5.3.728 Reserved (LOG _CODE 0x14CE)

Log Record Formats
5.3.729 LOG_DATA_MUX_RX_RAW_PACKET (LOG _CODE 0x14D3)

This log packet contains raw data coming into the data MUX.
Data Variable Raw data (format is defined in [S24])
This log is generated whenever new data is received. The packet size for this log is variable.
5.3.730 LOG_DATA_MUX_TX_RAW_PACKET (LOG _CODE 0x14D4)

This log packet contains raw data coming into the data MUX.
T
n PS
34
om 8:
Data Variable
l.c :4 Raw data (format is defined in [S24])
. c
te 13
This log is generated whenever new data is received. The packet size for this log is variable.
.7 bk t
41 -b 1 a
3
5.3.731 LOG_DATA_MUX_RX_FRAME_PACKET (LOG _CODE 0x14D5)
15
ei .0
0.
w 01
This log packet contains messages coming into the data MUX.
12
ou 3.
2.
zh 201
Start_flag 1 Indicates start of the frame
Dlci id 1 Dlci ID
Control field 1  Bit 0:3,5:7 – Frame type
 0xEF – UIH
 0x03 – UI
 Bit[4:4]
 0x0 – Final
 0x1 – Poll
Poll/final 1  1 – Poll/final is set

 0 – Poll/final is not set
Length 1 or 2 Length of the information field
data Variable Information field
This log is generated whenever message is parsed by MUX. The packet size for this log is
variable.

Log Record Formats
5.3.732 LOG_DATA_MUX_TX_FRAME_PACKET (LOG _CODE 0x14D6)

This log packet contains messages coming into the data MUX.
Start_flag 1 Indicates start of the frame
Dlci id 1 Dlci ID
Control field 1  Bit 0:3,5:7 – Frame type

 0xEF – UIH
 0x03 – UI
 Bit[4:4]
 0x0 – Final
 0x1 – Poll
T
Poll/final 1 1 – Poll/final is set
n PS

 0 – Poll/final is not set
34
Length 1 or 2 Length of the information field
om 8:
data Variable Information field
l.c :4
. c
te 13
This log is generated whenever message is parsed by MUX. The packet size for this log is
.7 bk t
41 -b 1 a
variable.
3
15
ei .0
0.
w 01
5.3.733 Reserved (LOG _CODE 0x14D7)

12
ou 3.
2.
zh 201

Log Record Formats
5.3.734 Temperature monitoring parameters (LOG _CODE 0x14D8)

This log describes the format of a log packet containing log data from temperature sensors that
are available on the MSM. All data fields should be treated as unsigned integer values.
NUM_SAMPLES 4 Indicates the number of sample readings

contained within the log packet.
VERSION 4 Version number for log packet
SAMPLE_DATA NUM_SAMPLES * 12 Data structure describing the temperature sample
Every sample of temperature data is formatted as follows.
T
n PS
SS_ID 4 Indicates the subsystem where temperature
34
sensor is located
om 8:
SENSOR_ID 4
l.c :4 Indicates the identity of the specific sensor that
c
provided the temperature information
.
te 13
TEMPERATURE_READING NUM_SAMPLES * 12 Data structure describing the temperature sample

.7 bk t
41 -b 1 a
3
15
This log is generated every 30 sec. The worst case packet size for this log is 104 bytes. This
ei .0
estimate is based on the assumption that a maximum 8 sensors will be logged at one time.
0.
w 01
12
ou 3.
2.
zh 201
5.3.735 Reserved (LOG _CODE 0x14D9)
5.3.736 Reserved (LOG _CODE 0x14DA)
5.3.737 Reserved (LOG _CODE 0x14DB)
5.3.738 Reserved (LOG _CODE 0x14DC)
5.3.739 Reserved (LOG _CODE 0x14DD)

Log Record Formats
5.3.740 LOG_GNSS_OEMDRE_MEASUREMENT_REPORT_C (LOG

_CODE 0x14DE)
This log is generated with the measurement report sent to licensee from the session manager; it
encapsulates the measurement blocks information exchanged via interprocess communication
between subsystems. The layout is based on the sm_GpsMeasRptStructType data structure.
u_PacketVersion 1 Version number for this definition
e_MeasRptReason 1 Reason for posting this measurement report.;

valid reasons are:
 0 – Periodic report
 1 – Measurement done
u_NumSvs 1 Num SV for which measurements are valid
T
u_SeqNum 1 Sequence number
n PS
u_MaxMessageNum 1 Maximum number of message
34
w_RFLoss 2 RF loss with reference to Antenna; units of
om 8:
l.c :4 0.1dB
c
u_SystemRtcValid 1 Unsigned Boolean type
.
te 13
q_RefFCount 4 Clock FCount value at reference tick

.7 bk t
41 -b 1 a
q_NumClockResets 4 Cumulative number of clock resets

3
15
ei .0
t_SystemRtcMs 8 System RTC value at clock validity

0.
w 01
u_DeltaLeapSec 1 GPS time leap second delta to UTC time

12
ou 3.
2.
zh 201
u_DeltaLeapSecUnc 1 Uncertainty for GPS leap second
f_GGTBMs 4 GPS to GLONASS time bias
f_GGTBUncMs 4 Uncertainty for GPS to GLONASS time bias
w_GpsWeek 2 GPS week number at reference tick (weeks)
q_GpsMsec 4 GPS msec at reference tick (msecs)

f_ClkTimeBiasGPS 4 GPS clock bias (milliseconds); constrain to >
-0.5 and <0.5
f_ClkTimeUncMsGPS 4 GPS 1-sided max time bias uncertainty

(milliseconds)
e_SourceOfTimeGPS 1 Source of the time (GPS)

 0 – C_TIME_SRC_INVALID
 C_TIME_SRC_GPS_OTA
 C_TIME_SRC_GLO_OTA
 C_TIME_SRC_PE_CLK_REPORT
 C_TIME_SRC_TIME_TRANSFORM
 C_TIME_SRC_TIME_TRANSFER
 C_TIME_SRC_WCDMA_TIMETAG
 C_TIME_SRC_GSM_TIMETAG
 C_TIME_SRC_WCDMA_SLEEP_TIMETAG
 C_TIME_SRC_PUT_GSM_SLEEP_TIMETAG
 C_TIME_SRC_UNKNOWN

Log Record Formats

e_SourceOfTimeGLO 1 Source of the time (GLO)
 0 – C_TIME_SRC_INVALID
 C_TIME_SRC_GPS_OTA
 C_TIME_SRC_GLO_OTA
 C_TIME_SRC_PE_CLK_REPORT
 C_TIME_SRC_TIME_TRANSFORM
 C_TIME_SRC_TIME_TRANSFER
 C_TIME_SRC_WCDMA_TIMETAG
 C_TIME_SRC_GSM_TIMETAG
 C_TIME_SRC_WCDMA_SLEEP_TIMETAG
 C_TIME_SRC_PUT_GSM_SLEEP_TIMETAG
 C_TIME_SRC_UNKNOWN
u_FourYear 1 GLO 4-year number from 1996 at the reference

tick
T
w_Days 2 GLO day number in 4years at the reference tick
n PS
q_GloMsec 4 GLO msec in the day at reference tick
(milliseconds)
34
om 8:
f_ClkTimeBiasGLO 4
l.c :4 GLO clock bias (milliseconds)
c
f_ClkTimeUncMsGLO 4 GLO 1-sided max time bias uncertainty
.
te 13
(milliseconds)
.7 bk t
f_ClkFreqBias 4 Clock frequency bias (meters per second)

41 -b 1 a
3
15
f_ClkFreqUnc 4 1-sided max frequency bias uncertainty (meters
ei .0
per second)
0.
w 01
12
e_SourceOfFreq 1 Source of frequency

ou 3.
2.
zh 201
q_CdmaRtcSync80CCx8 4 CDMA RTC value latched at the last Sync80 tick
q_GpsRtcSubMsSync80GCx32 4 GPS RTC value at Sync80
q_CdmaRtcLatchedCCx32 4 CDMA RTC value latched at the same time as

GPS RTC
q_GpsRtcLatchedGCx32 4 PS RTC value latched at the same time as

CDMA RTC
q_FCount 4 CDMA clock FCount
e_MeasBlkSrc 1 Source of the measurements in the GNSS

measurement block
 GNSS_MEAS_BLK_SRC_GPS
 GNSS_MEAS_BLK_SRC_GLO
 GNSS_MEAS_BLK_SRC_HBW_GPS
 GNSS_MEAS_BLK_SRC_RXD_GPS
n_Meas Variable Depending on the value of the e_MeasBlkSrc

field, one of two possible array blocks will follow,
as described below.
The payload of this packet prior to the variable measurement array (n_Meas) is 95 bytes.
If the e_MeasBlkSrc field indicates the source to be GPS, then an array of 16 GPS measurement
blocks shall follow, where each GPS measurement block consists of the following.

Log Record Formats
u_Sv 1 SV PRN
e_SvState 1 SV observation state

 C_GNSS_SV_STATE_IDLE
 C_GNSS_SV_STATE_SEARCH
 C_GNSS_SV_STATE_SEARCH_VERIFY
 C_GNSS_SV_STATE_BIT_EDGE
 C_GNSS_SV_STATE_VERIFY_TRACK
 C_GNSS_SV_STATE_TRACK
 C_GNSS_SV_STATE_RESTART
 C_GNSS_SV_STATE_DPO_TRACK
 C_GNSS_SV_STATE_GLO_10MSEC_BIT_EDGE
u_Observe 1 Count of all observation (both success and failure)
u_GoodObs 1 Count of good observations
T
n PS
u_FilterN 1 Carrier to code filtering N count
u_PreInt 1 Pre-detection (coherent) interval (milliseconds)
34
u_CSlipCount 1 Increments when a CSlip is detected
om 8:
l.c :4
c
w_PostInt 2 Num post-detections (uints of PreInts)
.
te 13
q_MeasStatus 4 Bit mask indicating measurement status

.7 bk t
41 -b 1 a
q_MeasStatus2 4 Second bit mask indicating measurement status

3
15
ei .0
w_Cno 2 CNo. units of 0.1 dB

0.
w 01
x_LatencyMS 2 Age of the measurement in milliseconds (+ve meas

12
ou 3.
Meas precedes ref time)

2.
zh 201
f_SubMs_Filtered 4 SubMs of SV timestamp; range of 0 thru 0.99999

(milliseconds)
q_Ms_Filtered 4  GPS – Range of 0 through (WEEK_MSECS-1)

(milliseconds)
 GLO – Range of 0 through (DAY_MSECS-1)
(milliseconds)
f_SvTimeUncMs_Filtered 4 Time uncertainty (milliseconds)
f_SvSpeed_Filtered 4 Speed estimate (meters per second)
f_SvSpeedUnc_Filtered 4 Speed uncertainty estimate (meters per second)
f_SubMs_Unfiltered 4 SubMs of SV timestamp; range of 0 thru 0.99999

(milliseconds)
q_Ms_Unfiltered 4  GPS – Range of 0 thru (WEEK_MSECS-1)

(milliseconds)
 GLO – Range of 0 thru (DAY_MSECS-1)
(milliseconds)
f_SvTimeUncMs_Unfiltered 4 Time uncertainty (milliseconds)
f_SvSpeed_Unfiltered 4 Speed estimate (meters per second)
f_SvSpeedUnc_Unfiltered 4 Speed uncertainty estimate (meters per second)
u_MultipathEstValid 1 TRUE is multipath estimate is valid

Log Record Formats

f_MultipathEst 4 Multipath estimate (meters)
u_SvDirValid 1 SV direction validity flag
f_Azimuth 4 Azimuth (radians)
f_Elevation 4 Azimuth (radians)
f_DopplerAccel 4 Acceleration in Hz per second
f_FineSpeed 4 Carrier phase derived speed
f_FineSpeedUnc 4 Carrier phase derived speed UNC
d_CarrierPhase 8 Carrier phase measurement (L1 cycles)
q_FCount 4 GPS FCount
T
Each instance of this structure is 99 bytes.
n PS
If the e_MeasBlkSrc field indicates the source to be GLONASS, then an array of 14 GLO
34
measurement blocks shall follow, where each GLO measurement block consists of the following.
om 8:
Field
l.c :4
. c
te 13
u_Sv 1 GLONASS SV Slot ID
.7 bk t
b_FreqNum 1 GLONASS frequency number + 7 (1 - 14)

41 -b 1 a
3
15
e_SvState 1 SV observation state
ei .0
 C_GNSS_SV_STATE_IDLE
0.
w 01
 C_GNSS_SV_STATE_SEARCH
12
ou 3.
 C_GNSS_SV_STATE_SEARCH_VERIFY
2.
zh 201
 C_GNSS_SV_STATE_BIT_EDGE
 C_GNSS_SV_STATE_VERIFY_TRACK
 C_GNSS_SV_STATE_TRACK
 C_GNSS_SV_STATE_RESTART
 C_GNSS_SV_STATE_DPO_TRACK
 C_GNSS_SV_STATE_GLO_10MSEC_BIT_EDGE
u_Observe 1 Count of all observation (both success and failure)
u_GoodObs 1 Count of good observations
u_FilterN 1 Carrier to code filtering N count
u_PreInt 1 Pre-detection (coherent) Interval (milliseconds)
u_CSlipCount 1 Increments when a CSlip is detected
w_PostInt 2 Num post-detections (uints of PreInts)
w_Cno 2 CNo. units of 0.1 dB
w_RfLoss 2 GLO RF loss reference to antenna, units of 0.1 dB
x_LatencyMS 2 Age of the measurement in milliseconds (+ve meas

Meas precedes ref time)
q_MeasStatus 4 Bit mask indicating measurement status
f_SubMs_Filtered 4 SubMs of SV timestamp; range of 0 thru 0.99999

(milliseconds)

Log Record Formats
q_Ms_Filtered 4  GPS – Range of 0 through (WEEK_MSECS-1)

(milliseconds)
(milliseconds)
f_SvTimeUncMs_Filtered 4 Time uncertainty (milliseconds)
f_SvSpeed_Filtered 4 Speed estimate (meters per second)
f_SvSpeedUnc_Filtered 4 Speed uncertainty estimate (meters per second)
f_SubMs_Unfiltered 4 SubMs of SV timestamp; range of 0 thru 0.99999

(milliseconds)
q_Ms_Unfiltered 4  GPS – Range of 0 through (WEEK_MSECS-1)

(milliseconds)
(milliseconds)
T
n PS
f_SvTimeUncMs_Unfiltered 4 Time uncertainty (milliseconds)
f_SvSpeed_Unfiltered 4 Speed estimate (meters per second)
34
f_SvSpeedUnc_Unfiltered 4 Speed uncertainty estimate (meters per second)
om 8:
l.c :4
c
u_MultipathEstValid; 1 TRUE is multipath estimate is valid
.
te 13
f_MultipathEst; 4 Multipath estimate (meters)

.7 bk t
41 -b 1 a
u_SvDirValid; 1 SV direction validity flag

3
15
ei .0
f_Azimuth; 4 Azimuth (radians)

0.
w 01
f_Elevation; 4 Azimuth (radians)

12
ou 3.
f_DopplerAccel; 4 Acceleration in Hz per second

2.
zh 201
f_FineSpeed; 4 Carrier phase derived speed
f_FineSpeedUnc; 4 Carrier phase derived speed UNC
d_CarrierPhase; 8 Carrier phase measurement (L1 cycles)
q_FCount; 4 Glonass FCount
Each instance of this structure is 98 bytes. This log is generated once per second. The worst case
packet size for this log is 95 + (99*16) = 1679 bytes.
5.3.741 LOG_GNSS_OEMDRE_POSITION_REPORT_C (LOG _CODE

0x14E0)
This log is generated with the measurement report sent to licensee from the session manager; it
encapsulates the position report information exchanged via interprocess communication between
subsystems. The layout is based on the sm_GpsFixRptStructType and
sm_GpsNoFixRptStructType data structures.

Log Record Formats
b_nofix 1 Flag to indicate fix report or no fix report
w_PositionFlags 2 Position flags indicating the type of fix attempted
q_FailureCode 4 Failure code for no fix
u_GpsTimeIsValid 1 GPS time information is valid
w_FixWn 2 Week number of fix
q_FixTime 4 Milliseconds into week for fix
q_UtcFixTime 4 Time adjusted for leap seconds
q_RefFCount 4 Receivers ms counter value
w_PositionFlagsEx 4 Additional position flags to accommodate newer
T
consetallations
n PS
w_Reserved 4 Reserved for future use
34
z_NavSolution 659 Structure described in Section 5.3.741.1
om 8:
z_NavSolutionExtra
l.c :4
68 Structure described in Section 5.3.741.2
. c
te 13
The payload of this packet, including the embedded navigation solution blocks detailed in
.7 bk t
41 -b 1 a
Section 5.3.741.1 and Section 5.3.741.2, is 758 bytes.

3
15
ei .0
0.
w 01
5.3.741.1 z_NavSolution structure

12
ou 3.
2.
zh 201
w_PositionFlags 2 Flags as defined above
w_FixWn 2 Week number of fix
q_FixTime 4 Milliseconds into week for fix
q_UtcFixTime 4 Time adjusted for leap seconds
q_RefFCount 4 Receiver's ms counter value
q_PosCounter 4 Position structure counter
d_PosEcef[3] 24 Earth centered earth fixed position fix (meters)
d_PosLla[3] 24 Lat long alt
d_VelEcef[3] 24 ECEF velocity fix (meters per second)
f_VelEnu[3] 12 East North Up velocity (meters per second)
f_PosSigma 4 Position standard deviation estimate (meters)
f_PosUnc2D[2] 8 Lat Long uncertainty (meters)
f_PosUncVertical 4 Vertial uncertainty (meters)
f_VelUnc 4 Velocity uncertainty (meters per second)
f_VuncEastNorthMps[2] 8 East North uncertianty (meters per second)

Log Record Formats

f_ClockBias 4 Receiver's clock bias (meters)
f_ClockBiasUncMs 4 Receiver's clock uncertainty (meters)
f_ClockDriftRate 4 Receiver's clock drift (meters per second)
f_ClockDriftRateUncMps 4 Receiver's clock frequency bias uncertainty (meters

per second)
f_GGTBMeters 4 GPS to Glonass bias (meters)
f_GGTBUncMeters 4 GPS to Glonass bias uncertainty (meters)
f_FilteredAlt 4 Filtered altitude (meters)
f_FilteredAltUnc 4 Filtered altitude uncertainty one-sided (meters)

f_MagDeviation 4 Magnetic deviation from true north (degrees)
f_PDOP 4 Position dilution of precision; this field is invalid if
T
n PS
POS_ SOURCE is either externally injected or internal
database
34
f_HDOP 4 Horizontal DOP; this field is invalid if POS_SOURCE
om 8:
l.c :4is either externally injected or internal database
c
f_VDOP 4 Vertical DOP; this field is invalid if POS_ SOURCE is
.
te 13
either externally Injected or internal database
.7 bk t
u_FirstFix 1 Set TRUE when first fix occurs

41 -b 1 a
3
15
u_DriftEstimated 1 Set TRUE when the clock drift rate is estimated from a
ei .0
difference of two clock biases

0.
w 01
12
u_MagDevGood 1 TRUE if magnetic devation is good

ou 3.
2.
zh 201
u_IonoCorrected 1 FALSE indicates that not all SV measurements were

iono corrected
u_TropoCorrected 1 FALSE indicates that not all SV measurements were

tropo corrected
u_nSVs 1 Number of SVs used in the position fix
u_SVs[32] 32 Satellites used in position fix

u_IODE[32] 32 IODEs used in fix
f_SvWeights[32] 128 Weights used in fix
f_Residuals[32] 128 Measurement residuals
u_NumGloSvs 1 Number of GLONASS SVs used in the position fix
u_GloSvs[14] 14 Slot IDs of the GLONASS SVs used in the position fix
(65 - 88)
u_Tb[14] 14 Tbs of the GLONASS SVs used in the position fix
f_GloSvWeights[14] 56 Pseudo-range weights of the GLONASS SVs used in

the position fix
f_GloResiduals[14] 56 Pseudo-range measurement residuals of the

GLONASS SVs used in the position fix

Log Record Formats
This structure is 647 bytes.
5.3.741.2 z_NavSolutionExtra structure
q_RefFCount 4 Receiver's ms counter value
f_ErrorEllipse[3] 12  loc_uncrtnty_ang (degrees)

 loc_uncrtnty_a (meters)
 loc_uncrtnty_p (m)
f_FilteredAlt 4 Filtered altitude (meters)
f_FilteredAltUnc 4 Filtered altitude uncertainty one-sided (meters)
f_UnfilteredAlt 4 Unfiltered altitude (meters)
f_UnfilteredAltUnc 4 Unfiltered altitude uncertainty one-sided (meters)
T
n PS
u_nSVsDetected 1 Total number of SVs detected by searcher
q_GpsFlagsExtra 4 Extension of PositionFlags; see above
34
GPS_FLAGS_EXTRA_...
u_GpsMeasSv[16] 16
om 8:
Array of PRN for GPS measurements received by
l.c :4
. c
NF; use u_nSVsDetected as a limit to this struct
te 13
u_nGloSVsDetected 1 Total number of GLONASS SVs detected by searcher

.7 bk t
41 -b 1 a
3
u_GloMeasSv[14] 14 GLO SV IDs for GLO measurements received by NF
15
ei .0
0.
w 01
This structure is 68 bytes. This log is generated once per second. The worst case packet size for
12
ou 3.
this log is 31 + 647 + 68 = 746 bytes.

2.
zh 201
5.3.742 LOG_GNSS_OEMDRE_SVPOLY_REPORT_C (LOG _CODE

0x14E1)
This log is generated with the measurement report sent to licensee from the session manager. The
layout is based on the gnss_SvPoly data structure.
u_Sv 1  0 – Invalid
 1-32 – GPS
 65-96 – GLO
 All others are reserved
b_FreqNum 1 Freq index: -7~+6; valid only when u_SV is a valid

GLO slot ID

Log Record Formats

u_SvPolyFlags 1  0 – No component is valid
 Bit 0 – SV position in orbit coefficients are filled
 Bit 1 – Iono and its rate are good
 Bit 2 – Tropo estimate is good
 Bit 3 – Elevation and its rate are good
 Bit 4 – Polynomials based on XTRA
 Bit 5 – SBAS Iono and its rate are good
u_Iode 1 Ephemeris reference time

 GPS – Issue of data, ephemeris used (unitless)
 GLO – Tb 7-bit
d_T0 8 Reference time for polynominal calculations

 GPS – Seconds in week
 GLO – Full seconds since Jan 1, 1996
pd_xyz0[3] 24 Zeroth order of 3D SV position in meters
T
n PS
pd_xyzN[9] 72  [0-2] – First- to third-order SV position coefficient
on X-axis
34
 [3-5] – First- to third-order SV position coefficient
om 8:
l.c :4 on Y-axis
[6-8] – First- to third-order SV position coefficient
c

.
on Z-axis
te 13
pf_other[4] 16 First to third coefficients for satellite clock

.7 bk t
41 -b 1 a
corrections
3
15
ei .0
f_PosUnc 4 SV position uncertainty in meters

0.
w 01
f_IonoDelay 4 Ionospheric delay at d_T0 in meters

12
ou 3.
f_IonoDot 4 Iono delay rate in meters per second

2.
zh 201
f_sbasIonoDelay 4 SBAS Ionospheric delay at d_T0 in meters
f_sbasIonoDot 4 SBAS Ionospheric delay rate at d_T0 in meters per

second
f_TropoDelay 4 Tropospheric delay in meters
f_Elevation 4 Satellite elevation in radians at d_T0
f_ElevDot 4 Satellite elevation rate in radians/sec at d_T0
f_ElevUnc 4 Sallite elevation unc in radians
d_VelCoef[12] 96 Used only for GLONASS sv velocity computation:

 [0-3] – First- to third-order SV vel coefficient on
X-axis
Y-axis
Z-axis
This log is generated once every 100 sec. The worst case packet size for this log is 257 bytes.

Log Record Formats
5.3.743 Reserved (LOG _CODE 0x14E3)
T
n PS
34
5.3.750 Reserved (LOG _CODE 0x14EA) om 8:
l.c :4
. c
te 13
.7 bk t
5.3.751 Reserved (LOG _CODE 0x14EB)

41 -b 1 a
3
15
ei .0
5.3.752 LOG_1X_ADV_FET_STATS_C (LOG _CODE 0x14EC)

0.
w 01
12
ou 3.
This log contains 1 sec worth of 1x Advanced Frame Early Termination (FET) specific
2.
zh 201
information (50 frames).
Version 1 Current log version
RESERVED 1 Reserved
FL_ACK_MASK 2 Bit mask indicating when ACK commands are

expected on the forward link
RL_ACK_MASK 2 Bit mask indicating when ACK commands are

allowed to be sent on the reverse link
FL_ACK_STATS 50 Each byte contains 1 frame's worth of data:

 7:4 – PCG FL Ack was received on
 3:1 – Received frame rate
 0 – DTX frame indication
RL_ACK_STATS 50 Each byte contains 1 frame's worth of data:

 7:4 – PCG FL Ack was transmitted on
 3:1 – Transmitted frame rate
 0 – Guaranteed frame indication
This log is generated once every 1000 ms. The worst case packet size for this log is 108 bytes.

Log Record Formats
5.3.753 LOG_1X_ADV_FET_STATS_C (LOG _CODE 0x14ED)

This log contains general 1x advanced related data from both firmware and software with some
data represented in half-PCG granularity.
Version 1 Current log version
band_class 1 CDMA band class
channel 2 CDMA channel
frame_number 2 Current frame number
rev_gain_adj_acs1 1 Channel adjust gain for Rev AckCh for number of

cells = 1
rev_gain_adj_acs2plus 1 Channel adjust gain for Rev AckCh for number of

cells > 1
T
n PS
smart_blanking 1  [7:6] – Reserved
 [5:4] – FL duty cycle
34
 0 – Disabled
 1 – 1 of 4
om 8:  2 – 1 of 8
l.c :4
. c
 [3:2] – RL duty cycle
te 13
 0 – Disabled
.7 bk t
 1 – 1 of 4
41 -b 1 a
3
 2 – 1 of 8
15
[1] – Guaranteed frame flag
ei .0

 0 – Not guaranteed
0.
w 01
 1 – Guaranteed
12
ou 3.
 [0] – DTX frame flag

2.
zh 201
 0 – Not DTX
 1 – DTX
power_control 1  [7] – RCPM PC mode

 0 – 400 Hz
 1 – 200 Hz
 [6:4] – RCPM PC step size
 0 – 1 dB
 1 – .5 dB
 2 – .25 dB
 3 – 1.5 dB
 4 – 2 dB
 [3] – Current PC mode
 0 – 400 Hz
 1 – 200 Hz
 [2:0] – Current PC step size
 0 – 1 dB
 1 – .5 dB
 2 – .25 dB
 3 – 1.5 dB
 4 – 2 dB

Log Record Formats

frame_data 2  [15] – Tx enabled
 0 – False
 1 – True
 [14] – R-SCH
 0 – Disabled
 1 – Enabled
 [13] – F-SCH
 0 – Disabled
 1 – Enabled
 [12:11] – N2m value for forward link RC11
 0 – 2 frames
 1 – 4 frames
 2 – 6 frames
 3 – 8 frames
 [10:7] – Early decode PCG; range = 0-15
[6:4] – FL frame rate
T

n PS
 0 – Blank
 1 – 1/8
34
 2 – 1/4
 3 – 1/2
om 8:
 4 – Full
l.c :4
. c
 [3:1] – RL frame rate
te 13
 0 – Blank
 1 – 1/8
.7 bk t
41 -b 1 a
 2 – 1/4
3
15
 3 – 1/2
ei .0
 4 – Full
0.
w 01
[0] – FFPC setpoint freeze flag

12

ou 3.
 0 – Not frozen
2.
zh 201
 1 – Frozen

Log Record Formats

ack_masks 12  [95:80] – Fwd FCH ACK mask for no RL blanking
 [79:64] – Fwd FCH ACK mask for no RL blanking
 [63:48] – Rev FCH ACK mask
 [47:32] – Fwd SCH ACK mask for RL blanking
 [31:16] – Fwd SCH ACK mask for no RL blanking
 [15:0] – Rev SCH ACK mask
mdsp_buff 768 Consists of 32 groups of six uint32 entries. One

group represents 1 half PCG. The breakdown of the
six uint32 entries is as follows:
 Uint32 Index 0
 [8:0] – 4 chip count
 [12:9] – PCG count
 [15:13] – Reserved
 [31:16] – Tx total power (-1/640 dB units)
 Uint32 Index 1
T
 [15:0] – R-ACKCH0 digital gain
n PS
 [31:16] – R-PICH digital gain
 Uint32 Index 2
34
 [15:0] – R-SCH digital gain
om 8:
l.c :4  [31:16] – R-FCH digital gain
c
 Uint32 Index 3
.
te 13
 [15:0] – Tx BetaP gain (-1/640 dB units)
 [31:16] – Tx open loop adjust (-1/640 dB units)
.7 bk t
41 -b 1 a
 Uint32 Index 4
3
 [15:0] – Tx rate adjust (-1/640 dB units)
15
ei .0
 [31:16] – Tx gain adjust (-1/512 dB units)

0.
w 01
 Uint32 Index 5
12
 [15:0] – Reserved
ou 3.
 [20-16] – RC11 rate

2.
zh 201
 [31-21] – Reserved
(Repeat for next group of six uint32 entries)
Note: R-ACKCH0 digital gain, R-PICH digital gain,
R-SCH digital gain, and R-FCH digital gain values
are unitless and are best displayed in ratios to pilot
digital gain in dB.
Example conversion
R-FCH/R-PICH in dB = 20 * log10(R-FCH digital
gain/R-PICH digital gain)
This log is generated once every 20 ms. The worst case packet size for this log is 792 bytes.

Log Record Formats
5.3.754 Reserved (LOG _CODE 0x14EF)
5.3.755 LOG_SNS_SENSOR1_REQUEST_C (LOG _CODE 0x14F0)

The log packet captures the request that is received by the sensor1 API. The log packet is filled
and committed by the Application Client Manager (ACM) module. The QMI request messages
are encoded in the log packet.
LOGGING_PROCESSOR 1 Specifies which processor is logging

 1 – Modem
 2 – Apps
 3 – DSPS
This field helps in converting the timestamp field to
T
GPS time
n PS
TIMESTAMP 8 Local processor timestamp (in microseconds) when
34
application client manager received the request
from the client
om 8:
l.c :4
c
SENSOR1_FN 1 The sensor1 function that has been invoked
.
te 13
 1 – Sensor1_Open
 2 – Sensor1_Write
.7 bk t
41 -b 1 a
 3 – Sensor1_Close
3
15
ei .0
SENSOR1_RET_VALUE 4 Return value from sensor1 API call

0.
w 01
CB_DATA 4 Callback data value provided by the client

12
ou 3.
CONTEXT_HANDLE 4 Unique handle identifying the external client; this

2.
zh 201
field is assigned when the Sensor1_Open function

is called and is used to match up the client in
subsequent sensor1 API calls
SRVC_NUM 1 QMI service number of sensor module; field valid

when the Sensor1_Fn field is Sensor1_Write
MSG_ID 2 Message identifier within the QMI Service; field

valid when the Sensor1_Fn field is Sensor1_Write
MSG_TYPE 1 Message type; field valid when the Sensor1_Fn

field is Sensor1_Write
 0 – Request
 1 – Response
 2 – Indication
 3 – Error response
TXN_ID 1 Transaction ID chosen by the external client; field

valid when the Sensor1_Fn field is Sensor1_Write

Log Record Formats
REQUEST_SIZE 2 Size of request; field valid when the Sensor1_Fn

field is Sensor1_Write
REQUEST Variable Variable length array containing QMI encoded

request message
 Size of array identified by request_size field
 Field valid when the Sensor1_Fn field is
Sensor1_Write
 Max size is 1024 bytes
This log is not periodic and is generated when a request for a sensors service is received through
the sensor1 API from an external client. The worst case packet size for this log is 1054 bytes.
5.3.756 LOG_SNS_SENSOR1_RESPONSE_C (LOG _CODE 0x14F1)
T
The log packet captures the QMI response messages to a request at the sensor1 API level. The
n PS
log packet is filled and committed by the Application Client Manager (ACM). The QMI
34
Response messages are encoded in the log packet.
om 8:
l.c :4
c
.
te 13

.7 bk t
41 -b 1 a
LOGGING_PROCESSOR 1
3 Specifies which processor is logging
 1 – Modem
15
ei .0
 2 – Apps
0.
w 01
 3 – DSPS
12
ou 3.

2.
zh 201
GPS time

application client manager sent the response from
the client

is called and is used to match up the client when
the other sensor1 API functions are called
SRVC_NUM 1 QMI service number of sensor module
MSG_ID 2 Message identifier within the QMI service
MSG_TYPE 1 Message type

 0 – Request
 1 – Response
TXN_ID 1 Transaction ID chosen by the external client

Log Record Formats

RESPONSE_SIZE 2 Size of response message
RESPONSE Variable Variable length array containing QMI encoded

response message
 Size of array identified by response_size field
This log is not periodic and is generated in response to a request for a sensors service through the
sensor1 API from an external client. The worst case packet size for this log is 1049 bytes.
5.3.757 LOG_SNS_SENSOR1_INDICATION_C (LOG _CODE 0x14F2)

The log packet captures the QMI indication messages at the sensor1 API level. The log packet is
filled and committed by the Application Client Manager (ACM). The QMI Indication messages
T
are encoded in the log packet.
n PS
34
om 8:
l.c :4
c
LOGGING_PROCESSOR 1 Specifies which processor is logging
.
te 13
 1 – Modem
 2 – Apps
.7 bk t
41 -b 1 a
 3 – DSPS
3
15
ei .0
GPS time
0.
w 01
12

ou 3.
application client manager sent the indication to the

2.
zh 201
client

is called and is used to match up the client when
the other sensor1 API functions are called
SRVC_NUM 1 QMI service number of sensor module
MSG_ID 2 Message identifier within the QMI service
MSG_TYPE 1 Message type

 0 – Request
 1 – Response
TXN_ID 1 Transaction ID chosen by the external client
INDICATION_SIZE 2 Size of indication message
INDICATION Variable Variable length array containing QMI encoded

indication message
 Size of array identified by indication_size field

Log Record Formats
This log is not periodic and is generated in response to a request for a sensors service through the
sensor1 API from an external client. The worst case packet size for this log is 1049 bytes.
5.3.758 Reserved (LOG _CODE 0x14F3)
5.3.761 Reserved (LOG _CODE 0x14FC)
T
n PS
5.3.762 Reserved (LOG _CODE 0x14FD)
34
om 8:
5.3.763 Reserved (LOG _CODE 0x14FE) l.c :4
. c
te 13
5.3.764 Reserved (LOG _CODE 0x14FF)

.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
12
ou 3.

2.
zh 201

Log Record Formats
5.3.776 Reserved (LOG _CODE 0x150B)
T
5.3.778 LOG_GNSS_SENSOR_STREAMING_READY_STATUS
n PS
(LOG_CODE 0x150D)
34
This is logged when an indication is sent to the sensor processor. The payload indicates whether
om 8:
the GNSS subsystem is ready or not ready to accept sensor data injections.
l.c :4
. c
te 13

.7 bk t
41 -b 1 a

3
15
ei .0
dw_ValidMask 4 Mask determining validity of accel/gyro values

0.
w 01
 Bit [0:1) – Accelerometer ready status is valid

12
 Bit[1:2) – Gyro ready status is valid

ou 3.
 Bit[2-8) – Reserved
2.
zh 201
u_AccelStreamingReadyStatus 1 Accelerometer ready status
u_GyroStreamingReadyStatus 1 Gyro ready status
This packet is logged whenever the sensor module is ready to accept sensor data. This is
typically only once in an ideal scenario. If things go wrong, then it can be sent out multiple times.
5.3.779 LOG_GNSS_TIME_SYNC_REQ (LOG_CODE 0x150E)

This is logged when the GNSS subsystem requests time sync information from the sensor
processor.
dw_RefCounter 4 Opaque 32-bit number for client to echo back
This packet is logged once every 5 minutes. The worst case packet size for this log is 5 bytes.

Log Record Formats
5.3.780 LOG_GNSS_INJECT_TIME_SYNC_DATA (LOG_CODE 0x150F)

This is logged when the sensor processor injects time sync information.
dw_RefCounter 4 Opaque 32-bit number for client to echo back
dw_SensorProcRxTime 4 Sensor Rx time injection; this value must be the

sensor time at the time that the control point
received the QMI PDS EVENT REPORT IND (time
sync request TLV)
Must be monotonically increasing, jitter ≤ 1 ms,
never stopped until the processor is rebooted (units
of millliseconds)
dw_SensorProcTxTime 4 Sensor Tx time injection; this value must be the
T
sensor time at the time that the control point sends
n PS
this message to the GPS service
Must be monotonically increasing, jitter ≤ 1 ms,
34
never stopped until the processor is rebooted (units
of millliseconds)
om 8:
l.c :4
. c
te 13
This packet is logged once every 5 minutes. The worst case packet size for this log is 13 bytes.
.7 bk t
41 -b 1 a
3
5.3.781 LOG_GNSS_INJECT_SENSOR_DATA (LOG_CODE 0x1510)
15
ei .0
0.
w 01
This is logged when the sensor processor injects sensor measurements/samples.

12
ou 3.
2.
zh 201
u_SensorLogged 1  0x01 – Accelerometer

 0x02 – Gyro
w_TimeGpsWeekOfFirst 2 Week of the GPS timestamp

Sample
dw_TimeGpsMsecOfFirst 4 Time tag of the first (oldest) sample in this
Sample message, GPS milliseconds
dw_SensorTimeOfFirstSample 4 Time tag of the first (oldest) sample in this

message, milliseconds

Log Record Formats
u_Flags 1 Flags
 Bit0 – Sign reversal to accommodate if the
clients are reporting accelerations with the sign
reversed
 0 – Do not reverse
 1 – Reverse
 Bit1 – Sign reversal to accommodate if the
clients are reporting rotation rates with the sign
reversed
 0 – Do not reverse
 1 – Reverse
 Bit[2:7] – Reserved
u_NumSamples 1 Number of samples being logged in this packet
Based on the number of samples specified (up to a maximum 50 samples), a set of samples
T
n PS
structures will follow, in the layout shown below:
34
om 8:
w_SampleTimeOffset 2 Offset in milliseconds, relative to the
l.c :4
c
sensor_time_of_the first_sample timestamp
.
te 13
f_xAxisSample 4 Sensor x-axis sample, in m/sec2 (acceleration) and

.7 bk t
41 -b 1 a
3 radians/sec (rotation rate)

15
f_yAxisSample 4 Sensor y-axis sample, in m/sec2 (acceleration) and
ei .0
radians/sec (rotation rate)

0.
w 01
12
ou 3.
f_zAxisSample 4 Sensor z-axis sample, in m/sec2 (acceleration) and

2.
zh 201
radians/sec (rotation rate)
This packet is logged once every sensor injection and depends on clients input. The worst case
packet size for this log is 14 + (50 * 14) = 714 bytes.
5.3.782 LOG_GNSS_GET_SENSOR_CONFIG_RESPONSE
(LOG_CODE 0x1511)
This is logged when the GNSS subsystem responds to a query for sensor-specific configuration
parameters.
dw_ValidMask; 4 Identifies which of cradle mount/power states are

 Bit[0:1) – Cradle mount state specified
 Bit[1:2) – External mount state specified
u_CradleMountState; 1 Indicates if the device is mounted on a cradle or not

 0x00 – Not mounted
 0x01 – Mounted
 0x02 – Unknown

Log Record Formats
u_Confidence; 1 Confidence of the cradle mount state; valid range

[0..100] – Represents the percentage of confidence
u_ExternalPowerState; 1 Indicates if the device is connected to an external

power supply or not
 0x00 – Not connected
 0x01 – Connected
This packet is logged once every sensor injection from the client, ideally only once. The worst
5.3.783 LOG_GNSS_SET_SENSOR_CONFIG (LOG_CODE 0x1512)

This is logged when the sensor processor sets sensor-specific configuration parameters.
T
n PS
34
om 8:
l.c :4
c
dw_ValidMask; 4 Identifies which of cradle mount/power states are
.
te 13
 Bit[0:1) – Cradle mount state specified
 Bit[1:2) – External power state specified
.7 bk t
41 -b 1 a
u_CradleMountState; 1 Indicates if the device is mounted on a cradle or not

3
15
 0x00 – Not mounted
ei .0
 0x01 – Mounted
0.
w 01
12
ou 3.
2.
zh 201
u_Confidence; 1 Confidence of the cradle mount state; valid range

[0..100] – Represents the percentage of confidence
u_ExternalPowerState; 1 Indicates if the device is connected to an external

power supply or not
 0x00 – Not connected
 0x01 – Connected
This packet is logged once every sensor injection from the client, ideally only once. The worst

Log Record Formats
5.3.789 LOG_SNS_DSPS_PWR_C (LOG_CODE 0x151B)

This logs the power state of the DSPS and is generated when the DSPS power state changes.
Version 1 Log packet version
Timestamp 8 Timestamp
PowerState 4  Version1 – Enum describing the current power

state
 0 – DSPS power off
T
 1 – DSPS power on
n PS
 Version2 – Enum describing the power state
 0 – SNS_PM_ST_HIBERNATION
34
 1 – SNS_PM_ST_DORMANT
om 8:
l.c :4  2 – SNS_PM_ST_ACTIVE_LOW
c
 3 – SNS_PM_ST_ACTIVE_HIGH
.
te 13
 > 3 – SNS_PM_ST_UNKNOWN
.7 bk t
41 -b 1 a
3
This log is not periodic. The worst case packet size for this log is 13 bytes.
15
ei .0
0.
w 01
5.3.790 LOG_SNS_RAW_I2C_DATA_C (LOG_CODE 0x151C)

12
ou 3.
2.
zh 201
This log packet captures the read/write payloads of I2C bus transactions.
TIMESTAMP 8 Timestamp in DSPS clock ticks
I2C_OPERATION 1 Specifies I2C operation associated with the data below

 1 – Read
 2 – Write
 3 – Combined write/read
STATUS 1 Return value from I2C driver API

 0 – Success
 All other values – Failed(<value>), where <value> is
the value in the log packet for this field
SLAVE_ADDRESS 1 Identifies the I2C slave device for the I2C operation above
 0x1C – AKM MAGNETOMETER AK897x
 0x38 – BOSCH ACCEL BMA150
 0x44 – INTERSIL LIGHT/PROXIMITY ISL20911
 0x68 – INVENSENSE GYRO MPU3050
 0x77 – BOSCH PRESSURE SMD500/BMP085
 All other values – Unspecified I2C slave
REGISTER_ADDRESS 1 Register to which read/write operation was initiated

Log Record Formats

DATA_LENGTH 1 Length of data buffer below
DATA_BUFFER Variable Variable length byte array containing the data for the
complete read/write operation; max size for this field
would be 57 bytes
This log is not periodic and is generated whenever I2C transaction is initiated from sensors
driver. The worst case packet size for this log is 63 bytes.
T
n PS
34
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
5.3.795 MCS QCSI Packet (LOG_CODE 0x1544)

0.
w 01
12
ou 3.
2.
zh 201
u_Version 1 Version of the log packet
u_MsgType 1 Type of message

 0 – Request
 1 – Respose
 2- Indication
w_Counter 2 Indicates the sequence number of a message

that is generated; this number is qualified by the
message type
q_SvcId 4 Identifies the QMI service ID
q_SvcMajRev 4 Identifies the major revision of the service
q_SvcMinRev 4 Identifies the minor revision of the service
q_ConHandle 4 Unique identifier for a client

q_MsgId 4 Message ID within the service identified by the
Service ID

Log Record Formats
q_MsgLen 4 Length of the message; identifies how many

bytes will be present in the payload
pu_Payload Var Encoded QMI-Message; see service definition

of ServiceID for details on how to decode the
payload
Max Length –1024
This log is generated every time a QMI-Message is generated. The worst case packet size for this
log is 1052 bytes.
T
n PS
34
5.3.798 LOG_GNSS_FAST_TCAL_C (LOG _CODE 0x1567)
om 8:
l.c :4
c
.
te 13
Version 1 Version
.7 bk t
41 -b 1 a
ErrorCode 3 1 Error code (0 = no error)

15
TCalAverValueNsec 4 Avg TCAL value in nanoseconds
ei .0
0.
w 01
TCalUncertaintyNsec 4 TCAL uncertainty

12
ou 3.
TCalMaxValueNsec 4 Max TCAL value in nanoseconds

2.
zh 201
TCalMinValueNsec 4 Min TCAL value in nanoseconds
PpmAverToaCCx16 4 Average time of arrival in 1x chipX16
PpmSrchWinCenterCCx16 4 Search window center in 1x chipX16
PpmNumToaSamplesAccumulated 4 No of TOA samples
PpmMaxToaCCx16 2 Max value of TOA in chipX16
PpmMinToaCCx16 2 Min value of TOA in chipX16
PpmAverEcIodB 4 Avg signal strength in decibels
PpmMaxEcIodB 4 Max signal strength in decibels
PpmMinEcIodB 4 Min signal strength in decibels
TtGnssRtcS80SubMsecGCx80 4 GNSS RTC chipX80
TtRefCdmaRtcS80SubPnRollCCx16 4 CDMA RTC SubPN
TtRefCdmaRtcS80AdjustSubPnRollCCx16 4 CDMA RTC Adjust SubPN
TtRefGnssRtcs80FCount 4 GNSS RTC Fcount
TtNumTTSamplesAccumulated 4 Time transfer samples
TtMaxGnssRtcS80SubMsecGCx80 4 Max GNSS RTC in chipX80
TtMinGnssRtcS80SubMsecGCx80 4 Min GNSS RTC in chipX80

Log Record Formats
GpsSv 1 GPS SV ID
GpsPeakCodePhSubMsec 4 Code phase subms
GpsPeakCodePhMsec 4 Code phase ms
GpsPeakFCount 4 Peak Fcount
GpsPeakCNodBHz 4 Peak signal strength
GpsPeakLatency 4 Measurement latency in milliseconds
GpsSpeedMperSec 4 Doppler in meters per second
GpsParams 4 GPS parameters
This log is generated up to 2 times per second during fast calibration session; otherwise it is not
generated. The worst case packet size for this log is 103 bytes.
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t

41 -b 1 a
3
15
ei .0
0.
w 01

12
ou 3.
2.
zh 201
5.3.803 LOG_LOC_LTE_OTDOA_PRS_RSTD_MEAS_C (LOG _CODE

0x1599)
This log packet is used for logging PRS RSTD measurements for LTE OTDOA. Its payload is
essentially a dump of all the measurement data sent to the location server.
Log Version 1 Log version number
System Time 8 Common time pick up for the report
Num of Neighbors 1 Number of neighbors measured
Reference Cell 38 RSTD info for reference cell; of type RSTD Info
Measurements described in Section 5.3.803.1

Log Record Formats
Neighbor Cell 24*38 = 912 RSTD info for neighbor cells; array of 24 structures of
Measurements type RSTD Info described in Section 5.3.803.1
Error Info 1 Enumeration of all possible error conditions:

 NO_ERROR = 0
 ERROR_UNDEFINED
 ERROR_ASSIST_DATA_MISSING
 ERROR_NO_REF_CELL
 ERROR_NO_NGBR_CELLS
 ERROR_PARTIAL_NGBR_CELLS
5.3.803.1 RSTD Info (length: 38 bytes)
T
Validity 4 Bit-mapped validity field
n PS
SFN 2 System frame number; range ~ 0 to 1023
34
Physical Cell ID 2 Physical cell ID of the measured cell
om 8:
l.c :4
c
Global Cell ID 12 Specifies ECGI, the globally unique identity of a cell in
.
te 13
E-UTRA, of the measured cell; of type Global Cell ID
described in Section 5.3.803.3
.7 bk t
41 -b 1 a
EARFCN 2 Specifies the E-UTRA carrier frequency of the RSTD

3
measured cell
15
ei .0
0.
w 01
RSTD 2 Received time difference value for neighbor cells, in Ts

12
ou 3.
DL Timestamp 8 Downlink timestamp of the cell (of earliest arriving path)

2.
zh 201
SNR 2 Measured signal-to-noise ratio
Meas. Quality 4 Signal measurement quality (uncertainty); of type Meas.

Quality described in Section 5.3.803.2
5.3.803.2 Meas. Quality (length: 4 bytes)
Validity 1 Validity of meas. quality
Error Resolution 1 Specifies resolution R used in Error Value field;

range ~ 0 to 3
Error Value 1 Specifies the target device’s best estimate of the

uncertainty of the OTDOA (or TOA) measurement;
range ~ 0 to 31
Num. of Samples 1 Number of samples used for estimation; range ~ 0 to 7

Log Record Formats
5.3.803.3 Global Cell ID (length: 12 bytes)
MCC 3 Mobile country code
MNC 3 Mobile network code
Cell identity 4 Specifies the globally unique identity of a cell in E-UTRA
Num. of MNC digits 1 Number of valid MNC digits; either 2 or 3
Num. of Cell Identity Bits 1 Num of valid bits in cell identity
This log is generated up to once every 2.5 sec. The worst case packet size for this log is 961
bytes.
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
5.4 Logging mask bits

Table 5-11 is the conversion table from log item codes to the following:
 MASK field in Logging Mask
 MASK field in Extended Logging Mask
The conversion is a simple one-to-one conversion but is included here for convenience. For bit
masks larger than 32 bits, the conversion will always be to the MASK field in the Extended
Logging Mask.
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

Log Record Formats
Table 5-11 Conversion table for log item codes

Logging Mask Extended Logging Mask
Field LOG_CODE
MASK field MASK field
Temporal analyzer (obsolete) 0x1000 0x0000 0001 0x8000
AGC power control (obsolete) 0x1001 0x0000 0002 0x4000
Forward link frame types (obsolete) 0x1002 0x0000 0004 0x2000
Reverse link frame types 0x1003 0x0000 0008 0x1000
Access channel message 0x1004 0x0000 0010 0x0800
Reverse channel traffic message 0x1005 0x0000 0020 0x0400
Sync channel message 0x1006 0x0000 0040 0x0200
Paging channel message 0x1007 0x0000 0080 0x0100
T
Forward channel traffic message 0x1008 0x0000 0100 0x0080
n PS
Forward link vocoder packet 0x1009 0x0000 0200 0x0040
34
Reverse link vocoder packet 0x100A 0x0000 0400 0x0020
om 8:
l.c :4
c
Finger info (obsolete) 0x100B 0x0000 0800 0x0010
.
te 13
Searcher info (obsolete) 0x100C 0x0000 1000 0x0008
.7 bk t
41 -b 1 a
Reserved 0x100D
3 0x0000 2000 0x0004
15
Markov statistics 0x100E 0x0000 4000 0x0002
ei .0
0.
w 01
Searcher info 2 (obsolete) 0x100F 0x0000 8000 0x0001

12
ou 3.
Handset status (obsolete) 0x1010 0x0001 0000 0x0000 8000

2.
zh 201
Vocoder error mask 0x1011 0x0002 0000 0x0000 4000
Analog voice channel 0x1012 0x0004 0000 0x0000 2000
Access probe info 0x1013 0x0008 0000 0x0000 1000
Reserved 0x1014 0x0010 0000 0x0000 0800
Test mobile command (obsolete) 0x1015 0x0020 0000 0x0000 0400
Sparse AGC power control 0x1016 0x0040 0000 0x0000 0200
Band change 0x1017 0x0080 0000 0x0000 0100
Reserved 0x1018 0x0100 0000 0x0000 0080
General TA info 0x1019 0x0200 0000 0x0000 0040
General TA w/sup channel info 0x101A 0x0400 0000 0x0000 0020
Reserved 0x101B 0x0800 0000 0x0000 0010
Reserved 0x101C 0x1000 0000 0x0000 0008
Reserved 0x101D 0x2000 0000 0x0000 0004
Reserved 0x101E 0x4000 0000 0x0000 0002

Log Record Formats
Table 5-11 Conversion table for log item codes (cont.)

Logging Mask Extended Logging Mask
Field LOG_CODE
MASK field MASK field
Reserved 0x101F 0x8000 0000 0x0000 0001
All LOG_CODEs after 0x101F have only the Extended Logging Mask MASK field. The MASK field
conversion continues in the same numbering pattern that increases with leading zero bits.
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

6 Nonvolatile Memory Items
This chapter contains the definition of each item in the DMSS Nonvolatile memory. For more
information about the form in which these items are used refer to the sections:
 Nonvolatile Item Read Request/Response (Section 3.4.35)
 Nonvolatile Item Write Request/Response (Section 3.4.36)
Each item has an item code and a structure for the data associated with each code. This chapter
T
describes the ITEM_DATA field in the above messages.
n PS
For additional information, also see [Q3].
34
6.1 Nonvolatile memory item codes om 8:
l.c :4
. c
te 13
Section 6.2 lists the Nonvolatile Memory Items used by MDM. Items with references are directly
.7 bk t
related to IS-95-A, IS-95-B, or J-STD-008 (see Appendix F in those standards). All others are
41 -b 1 a
3
subject to change as Qualcomm's phones continue to evolve.
15
ei .0
Many items are indexed by a NAM field. These are items that exist in the phone once per NAM.
0.
w 01
12
The number of NAMs may differ per phone as shown in Table 6-1.
ou 3.
2.
zh 201
Table 6-1 Number of NAMs per phone

Phone MAX_NAMS
If feature query:
NV_ONE_NAM_RL_LARGE is set 1
is not set (or no feature query) 2

Nonvolatile Memory Items
6.2 Nonvolatile memory items (ITEM_DATA)
6.2.1 Item ID 0 ESN

Electronic Serial Number (ESN). The ESN and its checksum are write-once protected, and the
NV task will not write an ESN or its checksum to NV if the stored ESN or its checksum are
non-zero. IS-95-A 2.3.2 or J-STD-008 2.3.2.
Field Length (bytes)) Description
ESN 4 Electronic serial number
6.2.2 Item ID 1 ESN_CHKSUM

ESN checksum. A VALID_ESN_CHKSUM value returned indicates valid ESN checksum.
When the checksum flag returns, as defined below, it indicates whether or not the ESN checksum
T
n PS
is valid.
34
om 8:
Defined value: VALID_ESN_CHKSUM 0xFFFFFFFF
l.c :4
. c
te 13
CHKSUM 4 Checksum
Flag indicating whether the true ESN checksum is valid or
.7 bk t
41 -b 1 a
not
3
15
ei .0
0.
w 01
6.2.3 Item ID 2 VERNO_MAJ

12
ou 3.
Current major version number.

2.
zh 201
VERNO_MAJ 1 Nonvolatile memory major version number

This item is read-only. Changing the major version number
forces an NV rebuild.
6.2.4 Item ID 3 VERNO_MIN

Current minor version number.
VERNO_MIN 1 Nonvolatile memory minor version number.

This item is read-only.

6.2.5 Item ID 4 SCM

Station class mark. Value is 8 bits, per IS-95-A 2.3.3 and 6.7.4.7 or J-STD-008 2.3.3 and 2.7.4.7.
SCM 1 Station class mark

6.2.6 Item ID 5 SLOT_CYCLE_INDEX

Preferred slot cycle index. Value is 3 bits, per IS-95-A 6.3.11 and 6.7.4.7 or J-STD-008 2.3.11
and 2.7.4.7. The actual working SCI will be the smaller of this value and the base station’s value.
SLOT_CYCLE_INDEX 1 Slot cycle index
T
n PS
6.2.7 Item ID 6 MOB_CAI_REV
34
om 8:
Mobile protocol revision number (MOB_P_REV). Value is 8 bits, per IS-95-A 6.3.14, 6.6.1.3,
l.c :4
c
and 6.7.4.7 or J-STD-008 2.3.14, 2.6.1.3, and 2.7.4.7.
.
te 13

.7 bk t
41 -b 1 a
3
MOB_CAI_REV 1 Mobile protocol revision number
15
ei .0
This item is read-only. It is the same as MOB_P_REV.

0.
w 01
12
ou 3.
6.2.8 Item ID 7 MOB_FIRM_REV

2.
zh 201
Mobile firmware revision number. Value is 16 bits, per IS-95-A 6.3.14 and 6.7.4.7 or J-STD-008
2.3.14 and 2.7.4.7.
MOB_FIRM_REV 2 Mobile firmware revision number


6.2.9 Item ID 8 MOB_MODEL

Mobile model number. Value is 8 bits, per IS-95-A 6.3.14 and 6.7.4.7 or J-STD-008 2.3.14 and
2.7.4.7.
MOB_MODEL 1 Mobile model number

This item is read-only, and defines the model of phone,
defined per manufacturer.
6.2.10 Item ID 9 CONFIG_CHKSUM

Checksum of physical configuration parameters. The checksum is a simple 0xFFFF marker
which indicates that configuration parameters have been programmed and are valid.
T
n PS
CHKSUM 2 Checksum of physical configuration parameters
34
om 8:
6.2.11 Item ID 10 PREF_MODE l.c :4
. c
te 13
Analog/digital preferred mode for the given NAM, per IS-95-A 2.3.10.2. This item is not used in
phones with preferred roaming capability (see Section 3.4.70, Preferred Roaming List Read
.7 bk t
41 -b 1 a
message and Section 3.4.69, Preferred Roaming List Write message).

3
15
ei .0

0.
w 01
12
ou 3.
NAM 1 NAM ID is 0 – (MAX_NAMS-1). Set this field before a

Nonvolatile Item Read Request.
2.
zh 201
MODE 2 Preferred mode values

 0 – CDMA then Analog
 1 – CDMA only
 2 – Analog then CDMA
 3 – Analog only
 4 – Determine mode automatically
 5 – Emergency mode
 6 – Restrict to home only
 9 – CDMA_ONLY; service is limited to CDMA only
 10 – HDR_ONLY; service is limited to 1xEV-DO only
 11 – CDMA_AMPS_ONLY; service is limited to CDMA
and AMPS only
 12 – GPS_ONLY; service is limited to GPS only
 13 – GSM_ONLY; service is limited to GSM only
 14 – WCDMA_ONLY; service is limited to WCMDA
only
 22 – CDMA+1xEV-DO; service is limited to
CDMA+1xEV-DO only (dual slot)

6.2.12 Item ID 11 CDMA_PREF_SERV

CDMA preferred serving system (A/B) for the given NAM, per IS-95-A 2.3.10.1. This item is
not used in phones with preferred roaming capability (see Section 3.4.70, Preferred Roaming
List Read message and Section 3.4.69, Preferred Roaming List Write message).

SYS 2 Preferred system values

 0 – A only
 1 – A then B
 2 – B only
 3 – B then A
 4 – Home SID only
 5 – Home SID preferred
T
n PS
6.2.13 Item ID 12 ANALOG_PREF_SERV
34
om 8:
Analog preferred serving system (A/B) for the given NAM, per IS-95-A 2.3.10.1. This item is
l.c :4
c
not used in phones with preferred roaming capability (see Section 3.4.70, Preferred Roaming
.
te 13
List Read message and Section 3.4.69, Preferred Roaming List Write message).
.7 bk t
41 -b 1 a

3
15
ei .0

0.
w 01

12
ou 3.

2.
zh 201
 0 – A only
 1 – A then B
 2 – B only
 3 – B then A
 4 – Home SID only
5 – Home SID preferred

6.2.14 Item ID 13 CDMA_SID_LOCK

CDMA SID(s) to lockout for the given NAM. The phone will reject acquisition if any of these
SID(s) is acquired. SID is according to IS-95-A 2.3.8 or J-STD-008 2.3.8. This item is not used
in phones with preferred roaming capability (see Section 3.4.70, Preferred Roaming List Read
message and Section 3.4.69, Preferred Roaming List Write message).
Defined value: NV_MAX_SID_LOCK 6

SID 2 * [NV_MAX_SID_LOCK] Lockout SIDs

Array of NV_MAX_SID_LOCK SIDs, (15-bit values). A SID
value of 0 indicates the end of the list if fewer entries are
desired. Values after the 0 will be ignored.
T
n PS
6.2.15 Item ID 14 CDMA_SID_ACQ
34
CDMA SID(s) to acquire for the given NAM. The phone will allow acquisition only on these
om 8:
SID(s). SID is according to IS-95-A 2.3.8 or J-STD-008 2.3.8. This item is not used in phones
l.c :4
. c
with preferred roaming capability (see Section 3.4.70, Preferred Roaming List Read message and
te 13
Section 3.4.69, Preferred Roaming List Write message).

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
Defined value: NV_MAX_SID_ACQ 6

12
ou 3.

2.
zh 201
SID 2 * [NV_MAX_SID_ACQ] Acquire SIDs

Array of NV_MAX_SID_ACQ SIDs, (15-bit values). A SID

6.2.16 Item ID 15 ANALOG_SID_LOCK

Analog SID(s) to lockout for the given NAM. The phone will reject acquisition if any of these
SID(s) is acquired. This should always be set the same as CDMA_SID_LOCK. SID is according
to IS-95-A 2.3.8 or J-STD-008 2.3.8. This item is not used in phones with preferred roaming
capability (see Section 3.4.70, Preferred Roaming List Read message and Section 3.4.69,
Preferred Roaming List Write message).
Description Length (bytes) Description
Defined value: NV_MAX_SID_LOCK 6

SID 2 * [NV_MAX_SID_LOCK] Lockout SIDs

Array of NV_MAX_SID_LOCK SIDs, (15-bit values). A SID
T
n PS
34
6.2.17 Item ID 16 ANALOG_SID_ACQ
om 8:
Analog SID(s) to acquire for the given NAM. The phone will allow acquisition only on these
l.c :4
. c
SID(s). This should always be set the same as CDMA_SID_ACQ. SID is according to IS-95-A
te 13
2.3.8 or J-STD-008 2.3.8. This item is not used in phones with preferred roaming capability (see
.7 bk t
Section 3.4.70, Preferred Roaming List Read message and Section 3.4.69, Preferred Roaming
41 -b 1 a
3
List Write message).
15
ei .0
0.
w 01

12
ou 3.
Defined value: NV_MAX_SID_ACQ 6

2.
zh 201

SID 2 * [NV_MAX_SID_ACQ] Acquire SIDs

Array of NV_MAX_SID_ACQ SIDs, (15-bit values). A SID
6.2.18 Item ID 17 ANALOG_FIRSTCHP

Analog first paging channel for the given NAM. Value is 11 bits, per IS-95-A 2.3.7.

CHANNEL 2 First paging channel. Values of 333 (System A) or 334

(System B) are the standard-compliant defaults.

6.2.19 Item ID 18 ANALOG_HOME_SID

Analog home SID for the given NAM. The SID is 15 bits, per IS-95-A 2.3.8.

SID 2 System identification
6.2.20 Item ID 19 ANALOG_REG

Analog registration setting for the given NAM.
T
n PS
KIND 2 Registration values
34
 0 – Autonomous registration disabled
om 8:
 1 – Autonomous registration enabled, tell location
l.c :4
c
 2 – Autonomous registration enabled, hide location
.
te 13
.7 bk t
6.2.21 Item ID 20 PCDMACH

41 -b 1 a
3
15
Primary CDMA channel for the given NAM. Value is 11 bits for primary and secondary
ei .0
0.
w 01
channels, per IS-95-A 6.1.1. This item is only valid for 800 MHz non-SSPR phones.
12
ou 3.
2.
zh 201

CHANNEL_A 2 A carrier primary channel number. 283 is the

standard-compliant default value.
CHANNEL_B 2 B carrier primary channel number. 384 is the

6.2.22 Item ID 21 SCDMACH

Secondary CDMA channel for the given NAM. Value is 11 bits for primary and secondary
channels, per IS-95-A 6.1.1. This item is only valid for 800 MHz non-SSPR phones.

CHANNEL_A 2 A carrier secondary channel number. 691 is the

CHANNEL_B 2 B carrier secondary channel number. 777 is the


6.2.23 Item ID 22 PPCNCH (obsolete)

This item is obsolete.
6.2.24 Item ID 23 SPCNCH (obsolete)

6.2.25 Item ID 24 NAM_CHKSUM

NAM data checksum for the given NAM. The checksum is a simple 0xFFFF marker which
indicates that NAM parameters have been programmed. If the NAM_CHKSUM is not set, the
phone will assume the following items are invalid and will set them to default values:
ANALOG_FIRSTCHP, ANALOG_HOME_SID, ANALOG_PREF_SERV,
ANALOG_REG, ANALOG_SID_LOCK, AUTO_NAM, CDMA_PREF_SERV,
T
CDMA_SID_LOCK, COUNT, CURR_NAM, HOME_SID_NID, IMSI_11_12,
n PS
IMSI_MCC, NAM_CHKSUM, NAME_NAM, PREF_MODE, SID_NID_LOCK
34
om 8:
l.c :4
c
.
te 13
CHKSUM 2 Checksum
.7 bk t
41 -b 1 a
3
15
ei .0
6.2.26 Item ID 25 A_KEY (not supported)

0.
w 01
12
This item is not supported.

ou 3.
2.
zh 201
6.2.27 Item ID 26 A_KEY_CHKSUM (obsolete)

6.2.28 Item ID 27 SSD_A

Shared Secret Data A for the given NAM. Each SSD is 64 bits, per IS-95-A 2.3.12.1.1 and
6.3.12.1.1 or J-STD-008 2.3.12.
NAM 1 NAM ID is 0 – (MAX_NAMS-1)
SSD 8 Shared secret data, least significant byte first

This item is write-only.
6.2.29 Item ID 28 SSD_A_CHKSUM (obsolete)


6.2.30 Item ID 29 SSD_B

Shared Secret Data B for the given NAM. Each SSD is 64 bits, per IS-95-A 2.3.12.1.1 and
6.3.12.1.1 or J-STD-008 2.3.12.
NAM 1 NAM ID is 0 – (MAX_NAMS-1)
SSD 8 Shared secret data, least significant byte first

This item is write-only.
6.2.31 Item ID 30 SSD_B_CHKSUM (obsolete)

6.2.32 Item ID 31 COUNT (not supported)
T
n PS
34
om 8:
6.2.33 Item ID 32 MIN1 l.c :4
. c
te 13
Seven-digit phone number (MIN1) for 2 MINs for the given NAM. The number is 24 bits, per
IS-95-A 2.3.1. This is an encoded value, per the standard, not a string of digits or plain numbers.
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01

12

ou 3.
2.
zh 201
ANALOG_MIN1 4 MIN1 for analog service. Only valid for analog capability
phones.
CDMA_MIN1 4 MIN1 for CDMA service

see IS-95-A Sec 2.3.1, or J-STD-008 Sec 6.3.1. (MIN1 is
equivalent to IMSI_S1.)
6.2.34 Item ID 33 MIN2

Three-digit area code (MIN2) for 2 MINs for the given NAM. The number is 10 bits, per
IS-95-A 2.3.1. This is an encoded value, per the standard, not a string of digits or plain numbers.

phones.
CDMA_MIN2 2 MIN2 for CDMA service

see IS-95-A Sec 2.3.1, or J-STD-008 Sec 6.3.1. (MIN2 is
equivalent to IMSI_S2.)

6.2.35 Item ID 34 MOB_TERM_HOME

CDMA mobile-terminated home SID registration flag for the given NAM. IS-95-A 6.3.8 or
J-STD-008 2.3.8.
Field Field Description

RESERVED 1 For internal use
ENABLED 1 Mobile-terminated home SID registration enabled value

 0 – False
 1 – True
6.2.36 Item ID 35 MOB_TERM_FOR_SID
T
CDMA mobile-terminated foreign SID registration flag for the given NAM. IS-95-A 6.3.8 or
n PS
J-STD-008 2.3.8.
34
om 8:
l.c :4 Description
c
.
te 13
.7 bk t

41 -b 1 a
3
15
ENABLED 1 Mobile-terminated foreign SID registration enabled value
ei .0
 0 – False
0.
w 01
 1 – True
12
ou 3.
2.
zh 201
6.2.37 Item ID 36 MOB_TERM_FOR_NID

CDMA mobile-terminated foreign NID registration flag for the given NAM. IS-95-A 6.3.8 or
J-STD-008 2.3.8.

ENABLED 1 Mobile-terminated foreign NID registration enabled value

 0 – False
 1 – True

6.2.38 Item ID 37 ACCOLC

Access overload class for the given NAM. Value is 4 bits, per IS-95-A 2.3.5 or J-STD-008 2.3.5.

ANALOG_CLASS 1 Access overload class for analog service. This should

default to the last digit of the analog MIN1 (decoded).
CDMA_CLASS 1 Access overload class for CDMA service. This should

default to the last digit of the CDMA MIN1 (decoded).
6.2.39 Item ID 38 SID_NID

SID+NID pairs for CDMA acquisition for the given NAM. The SID is 15 bits, and the NID is 16
T
bits, per IS-95-A 2.3.8 and 6.3.8 or J-STD-008 2.3.8. This item is not valid when feature query
n PS
SSPR_ENHANCEMENTS is set.
34
om 8:
l.c :4
c
Defined value: NV_MAX_SID_NID
.
te 13
=1 for SSPR capability phones
=4 for non-SSPR phones
.7 bk t
41 -b 1 a
3
NAM 1 NAM ID is 0 – (MAX_NAMS-1). Set this field before
15
a Nonvolatile Item Read Request.
ei .0
0.
w 01
RESERVED 4 * [NV_MAX_SID_NID] For internal use

12
ou 3.
PAIR MAX_SID_NID of the Up to MAX_SID_NID SID+NID pairs, where a pair

2.
zh 201
below is defined in the fields below
SID 2 System identification. A value of 0 is interpreted as

an end-of-list marker, and any values after will be
ignored.
NID 2 Network identification. 65535 is the any-NID

indicator.
6.2.40 Item ID 39 MIN_CHKSUM

MIN data checksum for the given NAM. The checksum is a simple 0xFFFF marker which
indicates that MIN parameters have been programmed. If both of these values are not set, the
phone will assume the following items are invalid and will set them to default values:
ACCOLC, MIN_CHKSUM, MIN1, MIN2, MOB_TERM_FOR_NID,
MOB_TERM_FOR_SID, MOB_TERM_HOME, SID_NID

ANALOG_CHKSUM 2 Checksum marker
CDMA_CHKSUM 2 Checksum marker

6.2.41 Item ID 40 CURR_NAM

The ID of the NAM the phone is currently using and can be used as an index into any parameter
which is NAM specific.
CURR_NAM 1 Current NAM
6.2.42 Item ID 41 ORIG_MIN (obsolete)

6.2.43 Item ID 42 AUTO_NAM

Select NAM automatically on roaming. If AUTO_NAM is set then the phone will automatically
T
switch to the new NAM if it is defined as one of the other NAMs and if the phone has matched
n PS
the SID of this new NAM as it roamed into a new SID.
34
om 8:
l.c :4
c
AUTO_NAM 1 AUTO_NAM switching enabled
.
te 13
 0 – False
 1 – True
.7 bk t
41 -b 1 a
3
15
6.2.44 Item ID 43 NAME_NAM

ei .0
0.
w 01
A user selectable name for each NAM for the given NAM ID.
12
ou 3.
2.
zh 201
Defined value: NV_MAX_LTRS 12

NAME NV_MAX_LTRS NAM name string (NV_MAX_LTRS length)

ASCII characters. Fill unused characters with spaces.
6.2.45 Item ID 44 NXTREG

Analog registration count, per IS-95-A 2.3.4.1.
NXTREG 4 Analog registration count

6.2.46 Item ID 45 LSTSID

Analog last SID registered, per IS-95-A 2.3.4.1.
LSTSID 2 Analog last SID registered
6.2.47 Item ID 46 LOCAID

Analog location area ID, per IS-95-A 2.3.4.2.
LOCAID 2 Analog location area ID
T
6.2.48 Item ID 47 PUREG
n PS
Analog powerup autonomous registration enable setting, per IS-95-A 2.3.4.2.
34
om 8:
l.c :4 Description
. c
PUREG 1 Analog powerup registration enabled
te 13
 0 – False
.7 bk t
 1 – True
41 -b 1 a
3
15
ei .0
6.2.49 Item ID 48 ZONE_LIST

0.
w 01
12
ou 3.
CDMA registration zone list, per IS-95-A 6.3.4 or J-STD-008 2.3.4.

2.
zh 201
REG_ZONE 2 Registration zone identifier
NID 2 Network identification

BLOCK_OR_SYS 2 Block or system values
 0 – PCS Block A
 1 – PCS Block B
 2 – PCS Block C
 3 – PCS Block D
 4 – PCS Block E
 5 – PCS Block F
 6 – Cellular B system
 7 – Cellular A system
BAND_CLASS 1 Band class

See Appendix C for a description.

6.2.50 Item ID 49 SID_NID_LIST

SID+NID list, per IS-95-A 6.3.4 or J-STD-008 2.3.4.
NID 2 Network identification
BLOCK_OR_SYS 2 Block or system values

 0 – PCS Block A
 1 – PCS Block B
 2 – PCS Block C
 3 – PCS Block D
 4 – PCS Block E
 5 – PCS Block F
 6 – Cellular B system
 7 – Cellular A system
T
n PS
34
om 8:
l.c :4
c
6.2.51 Item ID 50 DIST_REG
.
te 13
Distance based registration parameters, per IS-95-A 6.3.4 or J-STD-008 2.3.4.

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
BASE_LAT_REG 4 Latitude of base station where mobile last registered

12
ou 3.
BASE_LONG_REG 4 Longitude of base station where mobile last registered

2.
zh 201
REG_DIST_REG 2 Registration distance received from base station where

mobile last registered
6.2.52 Item ID 51 LAST_CDMACH (obsolete)

6.2.53 Item ID 52 CALL_TIMER (obsolete)

6.2.54 Item ID 53 AIR_TIMER

Resettable cumulative call timer for the given NAM. Each NAM has its own timer, with units in
seconds. The range of the timer is more than 100 years.

TIME 4 Time in seconds

6.2.55 Item ID 54 ROAM_TIMER

Resettable cumulative roam calls timer for the given NAM. Each NAM has its own timer, with
units in seconds. The range of the timer is more than 100 years.

6.2.56 Item ID 55 LIFE_TIMER (obsolete)

6.2.57 Item ID 56 RUN_TIMER
T
n PS
Run time (time hardware has been running), with units in minutes. The range is more than 8,000
34
years.
Description Length (bytes)

om 8: Description
l.c :4
. c
te 13
TIME 4 Time in minutes
.7 bk t
41 -b 1 a
3
6.2.58 Item ID 57 DIAL
15
ei .0
0.
w 01
Speed dial number (phone book entries). The field NUM_DIGITS indicates the actual number of
12
digits, or zero if none.

ou 3.
2.
zh 201
Special numbers (for example, emergency numbers) are also accessed using this same structure.
The index (ADDRESS) begins after the last regular phone book entry.
Defined value: NV_MAX_DIAL_DIGITS 32

NV_MAX_LTRS 12
ADDRESS 1 Storage address. Set this value before a Nonvolatile Item

Read Request.
The range for speed dial numbers for QCP-2760 is 0-198
and for all other phones is 0-98.
STATUS 1 Phone book entry secret status or special number type

Phone book status values
 0 – Not secret
 1 – Secret
Special number type values
 2 – Priority
 3 – Emergency
 4 – OTASP
 6 – OTASP-2 (customer-specific)
NUM_DIGITS 1 Number of valid digits in the DIGITS field. 0 indicates an

empty phone book entry.


DIGITS NV_MAX_DIAL_ Phone number digits. ASCII characters: 0-9, *, #, -, P
DIGITS (pause), T (timed pause).
Array of NV_MAX_DIAL_DIGITS
LETTERS NV_MAX_LTRS Name associated with number, ASCII

Array of NV_MAX_LTRS. Fill unused characters with
spaces.
6.2.59 Item ID 58 STACK

Call stack number. The field NUM_DIGITS indicates the actual number of digits, or zero if
none.
T
n PS
NV_MAX_LTRS 12 (for up to 12-letter names)
34
ADDRESS 1 Storage address. Set this value before a Nonvolatile Item
om 8:
l.c :4Read Request.
c
The range for QCP-2760 is 0-29 and for all other phones
.
is 0-9.
te 13
STATUS 1 Phone book entry secret status

.7 bk t
41 -b 1 a
3
15
 1 – Secret
ei .0
0.
w 01
TIME_STAMP 4 Local time in seconds

12
ou 3.

2.
zh 201
empty call stack location.
DIGITS NV_MAX_DIAL_ Phone number digits. ASCII characters: 0-9, *, #, -, P

DIGITS (pause), T (timed pause).
LETTERS NV_MAX_LTRS Name associated with number. ASCII characters.

spaces.
DURATION 4 Duration of call in seconds

6.2.60 Item ID 59 STACK_IDX

Call stack last number index. The array of bytes allows sorting the call stack by order of dialing
and resorting as it is being used. The secret field indicates if a secret number is in that stack
location. This array is used internally by the UI.
Defined value: NV_MAX_STACK_DIALS 30
INDEX NV_MAX_STACK_ Index into call stack

DIALS Array of NV_MAX_STACK_DIALS
SECRET NV_MAX_STACK_ Secret number values

DIALS  0 – Not secret
 1 – Secret
Array of NV_MAX_STACK_DIALS
T
n PS
6.2.61 Item ID 60 PAGE_SET (obsolete)
34
om 8:
l.c :4
c
6.2.62 Item ID 61 PAGE_MSG (obsolete)
.
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
6.2.63 Item ID 62 EAR_LVL

0.
w 01
12
Handset earpiece volume level.

ou 3.
2.
zh 201
EAR_LEVEL 1 Volume levels, low to high

 1, 2, 3, 4, 5, 6, 7 – Increasing volume
6.2.64 Item ID 63 SPEAKER_LVL

Hands-free kit speaker volume level.
SPEAKER_LEVEL 1 Volume level at hands-free kit speaker

 1, 2, 3, 4, 5, 6, 7 – Increasing volume

6.2.65 Item ID 64 RINGER_LVL

Ringer volume level.
RINGER_LEVEL 1 Volume level

 0 – Off
 1, 2, 3, 4 – Increasing volume
 0x8F – Escalate
6.2.66 Item ID 65 BEEP_LEVEL

Key beep volume level.
T
BEEP_LEVEL 1 Volume level
n PS
 0 – Off
34
om 8:
l.c :4
6.2.67 Item ID 66 CALL_BEEP
. c
te 13
One minute call alert setting. When set the user is beeped during a call once a minute on the
.7 bk t
50-sec mark.
41 -b 1 a
3
15
ei .0

0.
w 01
12
CALL_BEEP 1 One minute call alert enabled

ou 3.
 0 – Off
2.
zh 201
 1 – On (before minute)
 2 – Each minute
 3 – Every 5 min
6.2.68 Item ID 67 CONT_KEY_DTMF

Key beep length. When set to Normal or Standard, each keypress is echoed locally as a
fixed-length tone resembling the corresponding DTMF and transmitted to the base station (in
CDMA mode) in a Send Burst DTMF message. When set to Long, the phone tries to preserve the
duration and timing of keypresses, as much as practical, by sending a Continuous DTMF Tone
Order to start the tone and another Continuous DTMF Tone Order to stop the tone. The tone is
echoed locally for as long as the key is held down. In analog mode, the transmitted in-band tone
has the same timing as the local echo.
CONT_KEY_DTMF 1 Key beep length

 1 – Long
 2 – Normal

6.2.69 Item ID 68 CONT_STR_DTMF (obsolete)

6.2.70 Item ID 69 SVC_AREA_ALERT

Service area enter/exit alert setting. When set this means the phone beeps whenever it enters a
service area and whenever it leaves a service area.
SVC_AREA_ALERT 1 Service area alert enabled

 0 – False
 1 – True
6.2.71 Item ID 70 CALL_FADE_ALERT
T
n PS
Call fade alert setting. When set this means the phone beeps whenever a call fades.
34
CALL_FADE_ALERT 1
om 8:
Call fade alert enabled
l.c :4
. c
 0 – False
te 13
 1 – True
.7 bk t
41 -b 1 a
3
15
6.2.72 Item ID 71 BANNER

ei .0
0.
w 01
Banner to display when the phone is idle.

12
ou 3.
2.
zh 201
LETTERS 12 Banner
Array of NV_MAX_LTRS of ASCII characters. Fill unused
characters with spaces.
6.2.73 Item ID 72 LCD

LCD calibration setting.
LCD 1 Handset brightness

 1 (min) to 255 (max)
 0 means blank (lights out)
6.2.74 Item ID 73 AUTO_POWER (obsolete)


6.2.75 Item ID 74 AUTO_ANSWER

Automatic answer setting to specify auto answer rings and enable/disable.
ENABLE 1 Auto answer enabled

 0 – False
 1 – True
RINGS 1 Number of rings after which to answer an incoming call

 2 – 2 rings
6.2.76 Item ID 75 AUTO_REDIAL

Automatic redial setting to specify auto redial rings and enable/disable.
T
n PS
ENABLE 1 Auto redial values
34
 0 – False
om 8:
 1 – True if auto redial enabled
l.c :4
c
RINGS 1 Number of 10-sec system busy before redial
.
te 13
 1 – 10 sec
 2 – 30 sec
.7 bk t
41 -b 1 a
 6 – 60 sec
3
15
ei .0
0.
w 01
6.2.77 Item ID 76 AUTO_HYPHEN

12
ou 3.
Automatic hyphen setting. When set the phone inserts hyphens automatically after 4, 7, 10, and
2.
zh 201
11 digits (for example, 1-858-587-1121).
AUTO_HYPHEN 1 Auto hyphen enabled

 0 – False
 1 – True
6.2.78 Item ID 77 BACK_LIGHT

Backlight setting. Specifies how many seconds should pass before the backlighting is turned off,
starting from the last moment when any key was touched.
BACK_LIGHT 1 Backlight settings

 0 – Off
 0x0A – 10 sec
 0x6E – 10 + call
 0x1E – 30 sec
 0x82 – 30 + call
 0x64 – Always on

6.2.79 Item ID 78 AUTO_MUTE (obsolete)

6.2.80 Item ID 79 MAINTRSN

Base station maintenance order and reason code. Maintenance reason is per IS-95-A section
7.7.4.
MAINT_ORDER 1 Maintenance order values (set when maintenance order

received)
 0 – No maintenance order
 1 – Maintenance order received
MAINT_REASON 1 Maintenance reason received in the order
T
n PS
6.2.81 Item ID 80 LCKRSN_P
34
Base station lock order and reason code, until power cycled. Lock reason is per IS-95-A section
om 8:
7.7.4. l.c :4
. c
te 13

.7 bk t
41 -b 1 a
LOCK_ORDER 1 Lock order values (set when lock order received and until
3
unlocked)
15
ei .0
 0 – No lock order
0.
w 01
 1 – Lock order received

12
ou 3.
LOCK_REASON 1 Lock reason received in the order

2.
zh 201
6.2.82 Item ID 81 LOCK

Indicator of whether user locked the phone. When locked, outgoing calls other than emergency
numbers are not allowed unless the lock code (LOCK_CODE) is entered on the keypad.
LOCK 1 Lock indicator

 0 – Unlocked
 1 – Locked
6.2.83 Item ID 82 LOCK_CODE

User lock code. The lock code is fixed length and is stored as ASCII string.
DIGITS 4 Lock code

Array of 4 ASCII digits, 0 to 9 (default is set to last 4 digits
of the phone number)

6.2.84 Item ID 83 AUTO_LOCK

Automatic lock setting. When set this means that every time the phone is powered up it is
electronically locked (outgoing calls other than emergency numbers are not allowed) and must
be unlocked via the lock code.
AUTO_LOCK 1 Auto lock values

 0 – No lock
 1 – Lock on powerup
6.2.85 Item ID 84 CALL_RSTRC

Call restrictions. If the value is cleared (all zeros) then no call restrictions are in place.
T
n PS
CALL_RSTRC 2 Call restrictions
34
 0 – No restrictions
 1 – Restrict outgoing calls to phone book only
om 8:
l.c :4
. c
te 13
6.2.86 Item ID 85 SEC_CODE
.7 bk t
41 -b 1 a
Security code (Subsidy Lock Code, Service Programming Code). The security code is fixed
3
length and is stored as ASCII string. This is the code that protects access to service programming
15
ei .0
menus on the UI and service programming items through the serial interface.
0.
w 01
12
ou 3.

2.
zh 201
DIGITS 6 Security code

6 ASCII digits, 0 to 9
6.2.87 Item ID 86 HORN_ALERT (obsolete)

6.2.88 Item ID 87 ERR_LOG

Error log. Up to MAX_ERR_LOG error codes are stored, each with number of times detected,
filename, and line number.
Defined value: MAX_ERR_LOG 20

ERR_FILE_NAM_LEN 8
ADDRESS 1 Storage address 0 to (MAX_ERR_LOG-1)
ERR_COUNT 1 Number of occurrences (0=empty, FF=full)
FILE_NAME 8 Filename string, first ERR_FILE_NAM_LEN ASCII

characters of the filename. Long filenames are truncated.

LINE_NUM 2 Line number in file
FATAL 1 Fatal error indicator

 0 – Nonfatal error
 1 – Fatal error
6.2.89 Item ID 88 UNIT_ID (obsolete)

6.2.90 Item ID 89 FREQ_ADJ (obsolete)

T
6.2.91 Item ID 90 VBATT
n PS
V battery regulator array for minimum/maximum.
34
om 8:
l.c :4
. c
te 13
MIN 1 Minimum
.7 bk t
MAX 1 Maximum
41 -b 1 a
3
15
ei .0
6.2.92 Item ID 91 FM_TX_PWR

0.
w 01
12
ou 3.
Analog (FM) Tx power levels.

2.
zh 201
LEVEL_0 1 Power level 0 (max)
LEVEL_1 1 Power level 1


6.2.93 Item ID 92 FR_TEMP_OFFSET

Frequency/temperature offset.
Defined value: NV_FR_TEMP_OFFSET_TABLE_SIZ 64
ITEM NV_FR_TEMP_OFFSET_ Table entries

TABLE_SIZ Array of NV_FR_TEMP_OFFSET_TABLE_SIZ values.
6.2.94 Item ID 93 DM_IO_MODE (obsolete)

6.2.95 Item ID 94 CDMA_TX_LIMIT
T
n PS
Limits TX_GAIN_ADJ when output is exceeded.
34
om 8:
CDMA_TX_LIMIT 1 TX_GAIN_ADJ limit
l.c :4
. c
te 13
6.2.96 Item ID 95 FM_RSSI

.7 bk t
41 -b 1 a
3
Analog RSSI adjustment.
15
ei .0
0.
w 01

12
ou 3.
MIN 1 Minimum
2.
zh 201
MAX 1 Maximum
6.2.97 Item ID 96 CDMA_RIPPLE

CDMA UHF ripple compensation.
Defined value: NV_RIPPLE_COMP_TABLE_SIZ 32
CDMA_RIPPLE NV_RIPPLE_COMP_ CDMA UHF ripple compensation table entries

TABLE_SIZ Array of NV_RIPPLE_COMP_TABLE_SIZ values.
6.2.98 Item ID 97 CDMA_RX_OFFSET

CDMA Rx offset compensation.
Defined value: NV_RX_OFFSET_TABLE_SIZ 32
CDMA_RX_OFFS NV_RX_OFFSET_ CDMA Rx offset compensation table entries

TABLE_SIZ Array of NV_RX_OFFSET_TABLE_SIZ values.

6.2.99 Item ID 98 CDMA_RX_POWER

CDMA true Rx power.
Defined value: NV_RX_POWER_TABLE_SIZ 128
CDMA_RX_PWR NV_RX_POWER_ CDMA true Rx power table entries

TABLE_SIZ Array of NV_RX_POWER_TABLE_SIZ values.
6.2.100 Item ID 99 CDMA_RX_ERROR

CDMA Rx linear and nonlinear error.
T
Defined value: NV_RX_ERROR_TABLE_SIZ 128
n PS
CDMA_RX_ERR NV_RX_ERROR_TAB CDMA Rx linear and nonlinear error table entries
LE_SIZ
34
Array of NV_RX_ERROR_TABLE_SIZ values.
om 8:
l.c :4
c
6.2.101 Item ID 100 CDMA_TX_SLOPE_1
.
te 13
CDMA Tx gain comp slope compensation.

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
Defined value: NV_TX_SLOPE_1_TABLE_SIZ 128

12
ou 3.
CDMA_TX_SLP1 NV_TX_SLOPE_1_ CDMA Tx gain comp slope compensation table entries

2.
zh 201
TABLE_SIZ Array of NV_TX_SLOPE_1_TABLE_SIZ values.
6.2.102 Item ID 101 CDMA_TX_SLOPE_2

CDMA Tx gain adjust slope compensation.
Defined value: NV_TX_SLOPE_2_TABLE_SIZ 128
CDMA_TX_SLP2 NV_TX_SLOPE_2_ CDMA Tx gain adjust slope compensation table entries

TABLE_SIZ Array of NV_TX_SLOPE_2_TABLE_SIZ values.
6.2.103 Item ID 102 CDMA_TX_ERROR

CDMA Tx nonlinear error compensation.
Defined value: NV_TX_NON_LIN_ERR_TABLE_SIZ 128
CDMA_TX_ERR NV_TX_NON_LIN_ CDMA Tx nonlinear error compensation table entries

ERR_TABLE_SIZ Array of NV_TX_NON_LIN_ERR_TABLE_SIZ values.

6.2.104 Item ID 103 PA_CURRENT_CTL (obsolete)

6.2.105 Item ID 104 SONY_ATTEN_1 (obsolete)


6.2.107 Item ID 106 VOC_GAIN

Audio vocoder gain adjustment.
T
n PS
VOC_GAIN 2 Audio adjustment
34
om 8:
l.c :4
6.2.108 Item ID 107 SPARE_1
. c
te 13
Spare item #1.

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
SPARE_1 2 Spare item #1

12
ou 3.
2.
zh 201
6.2.109 Item ID 108 SPARE_2

Spare item #2.
SPARE_2 2 Spare item #2
6.2.110 Item ID 109 DATA_SRVC_STATE (obsolete)

6.2.111 Item ID 110 DATA_IO_MODE (obsolete)

6.2.112 Item ID 111 IDLE_DATA_TIMEOUT (obsolete)

6.2.113 Item ID 112 MAX_TX_ADJ (obsolete)


6.2.114 Item ID 113 INI_MUTE

Initial muting mode.
INIT_MUTE 1 Initial muting mode
6.2.115 Item ID 114 FACTORY_INFO (obsolete)


T
n PS
34
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
15
6.2.119 Item ID 118 DM_ADDR (obsolete)
ei .0
0.
w 01

12
ou 3.
2.
zh 201
6.2.120 Item ID 119 CDMA_PN_MASK

CDMA PN mask.
CDMA_PN_MASK 1 CDMA PN mask
6.2.121 Item ID 120 SEND_TIMEOUT (not supported)

6.2.122 Item ID 121 FM_AGC_SET_VS_PWR

FM mode transmit gain adjust initial setting versus power.
Defined value: NV_PWR_TABLE_SIZ 16
FM_AGC_SET_VS_PWR NV_PWR_TABLE_ FM transmit gain adjust setting versus power table

SIZ entries
Array of NV_PWR_TABLE_SIZ values.

6.2.123 Item ID 122 FM_AGC_SET_VS_FREQ

FM mode transmit gain adjust initial setting versus frequency.
Defined value: NV_FREQ_TABLE_SIZ 16
FM_AGC_SET_VS_FREQ NV_FREQ_TABLE_ FM transmit gain adjust setting versus frequency table

SIZ entries
Array of NV_FREQ_TABLE_SIZ values.
6.2.124 Item ID 123 FM_AGC_SET_VS_TEMP

FM mode transmit gain adjust initial setting versus temperature.
T
n PS
Defined value: NV_TEMP_TABLE_SIZ 8
FM_AGC_SET_VS_TEMP NV_TEMP_TABLE_ FM transmit gain adjust setting versus temperature
34
SIZ table entries
om 8:
Array of NV_TEMP_TABLE_SIZ values.
l.c :4
. c
te 13
6.2.125 Item ID 124 FM_EXP_HDET_VS_PWR

.7 bk t
41 -b 1 a
3
FM mode expected HDET reading versus power.
15
ei .0
0.
w 01

12
ou 3.

2.
zh 201
FM_EXP_HDET_VS_PWR NV_PWR_TABLE_ FM expected HDET reading versus power table

SIZ entries
Array of NV_PWR_TABLE_SIZ values.
6.2.126 Item ID 125 FM_ERR_SLP_VS_PWR

FM mode HDET error slope versus power.
FM_ERR_SLP_VS_PWR NV_PWR_TABLE_ FM HDET error slope versus power table entries

SIZ Array of NV_PWR_TABLE_SIZ values.
6.2.127 Item ID 126 FM_FREQ_SENSE_GAIN

FM frequency sense gain.
FM_FREQ_SENSE_GAIN 1 FM frequency sense gain

6.2.128 Item ID 127 CDMA_RX_LIN_OFF_0

CDMA mode Rx linearizer offset.
CDMA_RX_LIN_OFF_0 1 CDMA Rx linearizer offset
6.2.129 Item ID 128 CDMA_RX_LIN_SLP

CDMA mode Rx linearizer slope.
Defined value: NV_CDMA_RX_LIN_SIZ 16
CDMA_RX_LIN_SLP NV_CDMA_RX_ CDMA Rx linearizer slope table entries

LIN_SIZ
T
Array of NV_CDMA_RX_LIN_SIZ values.
n PS
34
6.2.130 Item ID 129 CDMA_RX_COMP_VS_FREQ
om 8:
CDMA mode Rx gain compensation versus frequency.
l.c :4
. c
te 13

.7 bk t
41 -b 1 a

3
15
ei .0
CDMA_RX_COMP_VS_FREQ NV_FREQ_TABLE_ CDMA Rx gain compensation versus frequency

0.
w 01
SIZ table entries

12

ou 3.
2.
zh 201
6.2.131 Item ID 130 CDMA_TX_COMP_VS_FREQ

CDMA mode Tx gain compensation versus frequency.

CDMA_TX_COMP_VS_FREQ NV_FREQ_TABLE_ CDMA transmit gain compensation versus

SIZ frequency table entries
6.2.132 Item ID 131 CDMA_TX_COMP_VS_VOLT (obsolete)


6.2.133 Item ID 132 CDMA_TX_LIN_MASTER_OFF_0

CDMA mode Tx linearizer master offset.
CDMA_TX_LIN_MASTER_ 2 CDMA Tx linearizer master offset

OFF_0
6.2.134 Item ID 133 CDMA_TX_LIN_MASTER_SLP

CDMA mode Tx linearizer master slope.
Defined value: NV_CDMA_TX_LIN_MASTER_SIZ 36
CDMA_TX_LIN_MASTER_ NV_CDMA_TX_ CDMA Tx linearizer master slope
T
SLP LIN_MASTER_SIZ
n PS
Array of NV_CDMA_TX_LIN_MASTER_SIZ values.
34
6.2.135 Item ID 134 CDMA_TX_LIN_VS_TEMP
om 8:
l.c :4
c
CDMA mode Tx linearizer trim versus temperature.
.
te 13
.7 bk t

41 -b 1 a
3
15
ei .0
0.
w 01
CDMA_TX_LIN_VS_TEMP NV_TEMP_TABLE_ CDMA Tx linearizer trim versus temperature table

SIZ entries
12
ou 3.

2.
zh 201
6.2.136 Item ID 135 CDMA_TX_LIN_VS_VOLT

CDMA mode Tx linearizer trim versus voltage.

Defined value: NV_VOLT_TABLE_SIZ 8
CDMA_TX_LIN_VS_VOLT NV_VOLT_TABLE_ CDMA Tx linearizer trim versus voltage table entries

SIZ Array of NV_VOLT_TABLE_SIZ values.
6.2.137 Item ID 136 CDMA_TX_LIM_VS_TEMP

CDMA mode Tx power limit versus temperature.
CDMA_TX_LIM_VS_TEMP NV_TEMP_TABLE_ CDMA Tx power limit versus temperature table

SIZ entries

6.2.138 Item ID 137 CDMA_TX_LIM_VS_VOLT

CDMA mode Tx power limit versus voltage.
Defined value: NV_VOLT_TABLE_SIZ 8
CDMA_TX_LIM_VS_VOLT NV_VOLT_TABLE_ CDMA Tx power limit versus voltage table entries

SIZ Array of NV_VOLT_TABLE_SIZ values.
6.2.139 Item ID 138 CDMA_TX_LIM_VS_FREQ

CDMA mode Tx power limit versus frequency.
T
n PS
CDMA_TX_LIM_VS_FREQ NV_FREQ_TABLE_ CDMA Tx power limit versus frequency table entries
SIZ
34
om 8:
l.c :4
c
6.2.140 Item ID 139 CDMA_EXP_HDET_VS_AGC
.
te 13
CDMA mode expected HDET reading versus AGC PDM.

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
Defined value: NV_CDMA_EXP_HDET_VS_AGC_SIZ 16

12
ou 3.
CDMA_EXP_HDET_VS_ NV_CDMA_EXP_HDET_ CDMA expected HDET reading versus AGC PDM

2.
zh 201
AGC VS_AGC_SIZ table entries

Array of NV_CDMA_EXP_HDET_VS_AGC_SIZ
values.
6.2.141 Item ID 140 CDMA_ERR_SLP_VS_HDET

CDMA mode HDET error slope versus HDET reading.
Defined value: NV_CDMA_ERR_SLP_VS_HDET_SIZ 8
CDMA_ERR_SLP_VS_ NV_CDMA_ERR_SLP_VS_ CDMA HDET error slope versus HDET reading

HDET HDET_SIZ table entries
Array of NV_CDMA_ERR_SLP_VS_HDET_SIZ
values.

6.2.142 Item ID 141 THERM

RF and LCD compensation based on temperature.
MIN 1 Minimum
MAX 1 Maximum
6.2.143 Item ID 142 VBATT_PA

RF compensation based on voltage.
MIN 1 Minimum
T
MAX 1 Maximum
n PS
34
6.2.144 Item ID 143 HDET_OFF
ADC HDET reading offset.
om 8:
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
3
HDET_OFF 1 ADC HDET reading offset
15
ei .0
0.
w 01
6.2.145 Item ID 144 HDET_SPN

12
ou 3.
2.
zh 201
ADC HDET reading span.
HDET_SPN 1 ADC HDET reading span
6.2.146 Item ID 145 ONETOUCH_DIAL

UI one-touch dialing enabled/disabled.
ONETOUCH_DIAL 1 UI one-touch dialing enabled

 0 – False
 1 – True

6.2.147 Item ID 146 FM_AGC_ADJ_VS_FREQ

FM mode AGC adjustment versus frequency.
Defined value: NV_ADJ_VS_FREQ_SIZ 16
FM_AGC_ADJ_VS_FREQ NV_ADJ_VS_FREQ_ FM AGC adjustment versus frequency table entries

SIZ Array of NV_ADJ_VS_FREQ_SIZ values.
6.2.148 Item ID 147 FM_AGC_ADJ_VS_TEMP (obsolete)

6.2.149 Item ID 148 RF_CONFIG
T
n PS
RF configuration.
34
om 8:
RF_CONFIG 1 l.c :4 RF configuration
. c
te 13
6.2.150 Item ID 149 R1_RISE

.7 bk t
41 -b 1 a
3
R1 rise.
15
ei .0
0.
w 01

12
ou 3.
R1_RISE 1 R1 rise
2.
zh 201
6.2.151 Item ID 150 R1_FALL

R1 fall.
R1_FALL 1 R1 fall

R2 rise.
R2_RISE 1 R2 rise


R2 fall.
R2_FALL 1 R2 fall

R3 rise.
R3_RISE 1 R3 rise
T
n PS
R3 fall.
34
om 8:
l.c :4 Description
. c
R3_FALL 1 R3 fall
te 13
.7 bk t
41 -b 1 a
6.2.156 Item ID 155 PA_RANGE_STEP_CAL

3
15
ei .0
PA range step calibration.

0.
w 01
12
ou 3.

2.
zh 201
PA_RANGE_STEP_CAL 1 PA range step calibration
6.2.157 Item ID 156 LNA_RANGE_POL

LNA range polarity.
LNA_RANGE_POL 1 LNA range polarity
6.2.158 Item ID 157 LNA_RANGE_RISE

LNA range rise.
LNA_RANGE_RISE 1 LNA range rise

6.2.159 Item ID 158 LNA_RANGE_FALL

LNA range fall.
LNA_RANGE_FALL 1 LNA range fall
6.2.160 Item ID 159 LNA_RANGE_OFFSET

LNA range offset.
LNA_RANGE_OFFSET 2 LNA range offset
T
6.2.161 Item ID 160 POWER_CYCLES (obsolete)
n PS
34
6.2.162 Item ID 161 ALERTS_LVL
om 8:
l.c :4
. c
te 13
Message alert volume level.
.7 bk t
41 -b 1 a

3
15
ei .0
ALERTS_LVL 1 Alert volume level

0.
w 01
 0 – Off
12
ou 3.
2.
zh 201
6.2.163 Item ID 162 ALERTS_LVL_SHADOW

Message alert volume level when in the hands-free kit.
ALERTS_LVL_SHADOW 1 Alert level shadow

 0 – Off
6.2.164 Item ID 163 RINGER_LVL_SHADOW (not supported)


6.2.165 Item ID 164 BEEP_LVL_SHADOW

Key beep volume level for external headset.
BEEP_LVL_SHADOW 1 Beep level for external headset

 0 – Off
6.2.166 Item ID 165 EAR_LVL_SHADOW

External headset earpiece volume level.
EAR_LVL_SHADOW 1 Earpiece volume level for external headset
T
1, 2, 3, 4, 5, 6, 7 – Increasing volume
n PS
34
6.2.167 Item ID 166 TIME_SHOW
om 8:
l.c :4
c
Time display setting. Enable or disable time display.
.
te 13

.7 bk t
41 -b 1 a
3
TIME_SHOW 1 Time display enable
15
ei .0
 0 – No time display
0.
w 01
 1 – Display time if available

12
ou 3.
2.
zh 201
6.2.168 Item ID 167 MESSAGE_ALERT (not supported)

6.2.169 Item ID 168 AIR_CNT

Resettable cumulative call counter for the given NAM.

CNT 4 All calls count, in seconds. Range is over 100 years.
6.2.170 Item ID 169 ROAM_CNT

Resettable cumulative roam calls count for the given NAM.

CNT 4 Roam calls count, in seconds. Range is over 100 years.

6.2.171 Item ID 170 LIFE_CNT

Non-resettable cumulative call count of all calls
LIFE_CNT 4 Life call counter
6.2.172 Item ID 171 SEND_PIN

Send PIN option, analog capability phones only.
SEND_PIN 1 Send PIN settings

 0 – Disabled
 1 – Prompt for PIN
T
n PS
6.2.173 Item ID 172 AUTO_ANSWER_SHADOW (obsolete)
34
om 8:
This item is obsolete. l.c :4
. c
te 13
6.2.174 Item ID 173 AUTO_REDIAL_SHADOW (obsolete)

.7 bk t
41 -b 1 a

3
15
ei .0
0.
w 01
6.2.175 Item ID 174 SMS

12
ou 3.
SMS structure in NV. This item cannot be accessed with Nonvolatile Read/Write Request
2.
zh 201
commands. Use the SMS Read/Write Request commands instead.
6.2.176 Item ID 175 SMS_DM (obsolete)

6.2.177 Item ID 176 IMSI_MCC

Mobile country code portion of international mobile station ID (IMSI) for the given NAM. The
number is 24 bits, per IS-95-A 6.3.1.3 or J-STD-008 2.3.1.3. This is an encoded value, per the
standard, not a string of digits or plain numbers.

IMSI_MCC 2 IMSI mobile country code

6.2.178 Item ID 177 IMSI_11_12

Mobile network code portion of IMSI (for 4 MINs) for the given NAM. The number is 8 bits, per
IS-95-A 6.3.1.2 or J-STD-008 2.3.1.2. This is an encoded value, per the standard, not a string of
digits or plain numbers.

IMSI_11_12 1 IMSI mobile network code
6.2.179 Item ID 178 DIR_NUMBER

Directory number for the given NAM.
T
n PS
Defined value: NV_DIR_NUMB_SIZ 10
34
om 8:
l.c :4 Nonvolatile Item Read Request.
. c
DIR_NUMBER NV_DIR_NUMB_ Directory number
te 13
SIZ Array of NV_DIR_NUMB_SIZ, ASCII characters, 0-9.

.7 bk t
41 -b 1 a
3
15
6.2.180 Item ID 179 VOICE_PRIV (not supported)

ei .0
0.
w 01

12
ou 3.
2.
zh 201
6.2.181 Item ID 180 SPARE_B1

Spare B1.
SPARE_B1 1 Spare B1
6.2.182 Item ID 181 SPARE_B2

Spare B2.
SPARE_B2 1 Spare B2
6.2.183 Item ID 182 SPARE_W1

Spare W1.
SPARE_W1 1 Spare W1

6.2.184 Item ID 183 SPARE_W2

Spare W2.
SPARE_W2 1 Spare W2
6.2.185 Item ID 184 FSC

Field service code. The field service code is fixed length and is stored as ASCII string. This code
protects access to the phone UI field service menus.
Defined value: NV_FSC_SIZ 6
T
FSC NV_FSC_SIZ Field service code
n PS
Array of NV_FSC_SIZ, ASCII digits, 0-9
34
6.2.186 Item ID 185 ALARMS (not supported)
om 8:
l.c :4
c
.
te 13
.7 bk t
41 -b 1 a
6.2.187 Item ID 186 STANDING_ALARM (not supported)

3
15
ei .0

0.
w 01
12
ou 3.
6.2.188 Item ID 187 ISD_STD_PASSWD (not supported)

2.
zh 201
6.2.189 Item ID 188 ISD_STD_RESTRICT (not supported)

6.2.190 Item ID 189 DIALING_PLAN (not supported)

6.2.191 Item ID 190 FM_LNA_CTL

FM mode LNA control.
MIN 1 Minimum
MAX 1 Maximum

6.2.192 Item ID 191 LIFE_TIMER_G

Nonresettable cumulative call timer, with units in seconds. The range is over 8,000 years.
6.2.193 Item ID 192 CALL_TIMER_G

Resettable last call timer, with units in seconds. The range is over 100 years.
T
6.2.194 Item ID 193 PWR_DWN_CNT (obsolete)
n PS
This item is not obsolete.
34
6.2.195 Item ID 194 FM_AGC
om 8:
l.c :4
. c
te 13
FM mode AGC.
.7 bk t
41 -b 1 a

3
15
ei .0
MIN 1 Minimum
0.
w 01
MAX 1 Maximum
12
ou 3.
2.
zh 201
6.2.196 Item ID 195 FSC2 (obsolete)

6.2.197 Item ID 196 FSC2_CHKSUM (obsolete)

6.2.198 Item ID 197 WDC

Warranty date code.
Defined value: NV_WDC_LTRS 5
WDC NV_WDC_LTRS Warranty date code

Array of NV_WDC_LTRS, 2 letters then 3 numeric.
EXTRA 3 In case the WDC definition changes

6.2.199 Item ID 198 HW_CONFIG

Hardware configuration.
HW_CONFIG 4 Hardware configuration
6.2.200 Item ID 199 CDMA_RX_LIN_VS_TEMP

CDMA mode Rx linearizer versus temperature.
CDMA_RX_LIN_VS_TEMP NV_TEMP_TABLE_ CDMA Rx linearizer versus temperature table entries

SIZ
T
n PS
34
6.2.201 Item ID 200 CDMA_ADJ_FACTOR
om 8:
CDMA mode adjustment factor. l.c :4
. c
te 13

.7 bk t
41 -b 1 a
CDMA_ADJ_FACTOR 1 CDMA adjustment factor

3
15
ei .0
0.
w 01
6.2.202 Item ID 201 CDMA_TX_LIM_BOOSTER_OFF (obsolete)

12
ou 3.

2.
zh 201
6.2.203 Item ID 202 CDMA_RX_SLP_VS_TEMP

CDMA mode Rx slope versus temperature.
CDMA_RX_SLP_VS_TEMP NV_TEMP_TABLE_ CDMA Rx slope versus temperature table entries

SIZ Array of NV_TEMP_TABLE_SIZ values.
6.2.204 Item ID 203 CDMA_TX_SLP_VS_TEMP

CDMA mode Tx slope versus temperature.
CDMA_TX_SLP_VS_TEMP NV_TEMP_TABLE_ CDMA Tx slope versus temperature table entries


6.2.205 Item ID 204 PA_RANGE_VS_TEMP

Power amplifier range versus temperature.
PA_RANGE_VS_TEMP NV_TEMP_TABLE_ PA range versus temperature table entries

6.2.206 Item ID 205 LNA_SWITCH_VS_TEMP (obsolete)

6.2.207 Item ID 206 FM_EXP_HDET_VS_TEMP
T
n PS
FM mode expected HDET reading versus temperature.
34
om 8:
Defined value: NV_TEMP_TABLE_SIZ 8 l.c :4
. c
FM_EXP_HDET_VS_TEMP NV_TEMP_TABLE_ FM expected HDET reading versus temperature
te 13
SIZ table entries

.7 bk t

41 -b 1 a
3
15
ei .0
6.2.208 Item ID 207 N1M (obsolete)

0.
w 01
12
ou 3.

2.
zh 201
6.2.209 Item ID 208 IMSI (obsolete)

6.2.210 Item ID 209 IMSI_ADDR_NUM

International mobile station ID length for the given NAM. The number is 3 bits, per J-STD-008
2.3.1.

NUM 1 Length of the IMSI for this NAM

6.2.211 Item ID 210 ASSIGNING_TMSI_ZONE_LEN

TMSI zone length for the given NAM. The number is 4 bits, per J-STD-008 2.3.15.

LENGTH 1 TMSI zone length
6.2.212 Item ID 211 ASSIGNING_TMSI_ZONE

TMSI zone for the given NAM. The number is 64 bits, per J-STD-008 2.3.15.
T
n PS
ZONE 8 TMSI zone
34
6.2.213 Item ID 212 TMSI_CODE om 8:
l.c :4
. c
te 13
TMSI code for the given NAM. The number is 32 bits, per J-STD-008 2.3.15.
.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01

12
ou 3.
CODE 4 TMSI code

2.
zh 201
6.2.214 Item ID 213 TMSI_EXP

TMSI expiration timer for the given NAM. The number is 24 bits, per J-STD-008 2.3.15.

TIME 4 TMSI expiration timer
6.2.215 Item ID 214 HOME_PCS_FREQ_BLOCK (obsolete)


6.2.216 Item ID 215 DIR_NUMBER_PCS

Directory number PCS format for the given NAM.
Defined value: NV_DIR_NUMB_PCS_SIZ 15

N_DIGITS 1 Number of valid digits in the DIGITN field
DIGITN NV_DIR_NUMB_ Digits

PCS_SIZ Array of NV_DIR_NUMB_PCS_SIZ.
6.2.217 Item ID 216 ROAMING_LIST
T
This item cannot be accessed with Nonvolatile Read/Write Request interface. See the Preferred
n PS
Roaming List Read/Write Request messages.
34
6.2.218 Item ID 217 MRU_TABLE (obsolete)
om 8:
l.c :4
c
.
te 13
.7 bk t
41 -b 1 a
6.2.219 Item ID 218 REDIAL

3
15
ei .0
Last number redial. The field NUM_DIGITS indicates the actual number of digits, or zero if
0.
w 01
none.
12
ou 3.
2.
zh 201

NV_MAX_LTRS 12
ADDRESS 1 Storage address (not used for this item)
STATUS 1 Phone book entry secret status or special number type

Phone book status values
 1 – Secret
Special number type values
 2 – Priority
 3 – Emergency
 4 – OTASP
 6 – OTASP-2 (customer-specific)

empty phone book entry.
DIGITS NV_MAX_DIAL_ Phone number digits; ASCII characters 0 to 9, *, #, -, P

DIGITS (pause), T (timed pause)
LETTERS NV_MAX_LTRS Name associated with number, ASCII

spaces.

6.2.220 Item ID 219 OTKSL (not supported)

6.2.221 Item ID 220 TIMED_PREF_MODE

This item selects whether the PREF_MODE setting is temporary or not.
TIMED_PREF_MODE 1 Timed preferred mode enabled

 0 – False
 1 – True
6.2.222 Item ID 221 RINGER_TYPE
T
Ringer type setting.
n PS
34
RINGER_TYPE 1 Ringer type setting
om 8:
l.c :4
. c
te 13
6.2.223 Item ID 222 ANY_KEY_ANSWER

.7 bk t
41 -b 1 a
Answer call with any key.

3
15
ei .0

0.
w 01
12
ou 3.
ANY_KEY_ANSWER 1 Any key answer setting

2.
zh 201
 0 – Answer with SEND only

 1 – Any key answer
6.2.224 Item ID 223 BACK_LIGHT_HFK (not supported)

6.2.225 Item ID 224 RESTRICT_GLOBAL (obsolete)

6.2.226 Item ID 225 KEY_SOUND

Specifies which type of keypress sound should be emitted.
KEY_SOUND 2 Key sound values to emit when keys are pressed

 0 – Clicks
 1 – Tones

6.2.227 Item ID 226 DIALS_SORTING_METHOD

Specifies which phone book sorting method to use (numeric, alphabetic).
SORTING_METHOD 2 Sorting method values

 0 – Sort entries alphabetically
 1 – Sort entries by location number
6.2.228 Item ID 227 LANGUAGE_SELECTION (not supported)

6.2.229 Item ID 228 MENU_FORMAT
T
Specifies the user interface menu format.
n PS
34
MENU_FORMAT 2 Menu format values
om 8:  0 – Display full menus

l.c :4
. c
 1 – Display short menus
te 13
.7 bk t
41 -b 1 a
6.2.230 Item ID 229 RINGER_SPKR_LVL

3
15
ei .0
External speaker (hands-free kit) ringer volume.

0.
w 01
12
ou 3.

2.
zh 201
RINGER_SPKR_LVL 1 External speaker ringer volume

 0 – Off
 0x8F – Escalate
6.2.231 Item ID 230 BEEP_SPKR_LVL

External speaker (hands-free kit) key beep volume.
BEEP_SPKR_LVL 1 External speaker key beep volume

 0 – Off

6.2.232 Item ID 231 MRU2_TABLE

Most recently used channels for the given NAM.
Defined value: NV_MRU2_TABLE_SIZE 12
NAM 1 NAM ID is 0 – (MAX_NAMS-1). Set this field

before a Nonvolatile Item Read Request.
ENTRY NV_MRU2_TABLE_SIZE Table item

NV_MRU2_TABLE_SIZE entries made up of
the fields below.
MODE 1 Mode is AMPS or CDMA

 0 – Inactive (set to this value to “clear” the
table)
 1 – Analog mode
T
 2 – CDMA mode
n PS
34
om 8:
CDMA_CHANNEL l.c :4 2 CDMA channel to acquire
. c
te 13
CELLULAR_ 2 Cellular system is A or B
SYSTEM  0 – System A
.7 bk t
 1 – System B
41 -b 1 a
3
15
ei .0
6.2.233 Item ID 232 VIBRATOR (not supported)

0.
w 01
12
ou 3.

2.
zh 201
6.2.234 Item ID 233 FLIP_ANSWERS (not supported)

6.2.235 Item ID 234 DIAL_RESTRICT_LVLS (not supported)

6.2.236 Item ID 235 DIAL_STATE_TABLE_LEN (not supported)

6.2.237 Item ID 236 DIAL_STATE_TABLE (not supported)

6.2.238 Item ID 237 VOICE_PRIV_ALERT (not supported)


6.2.239 Item ID 238 IP_ADDRESS (obsolete)

6.2.240 Item ID 239 CURR_GATEWAY (obsolete)

6.2.241 Item ID 240 DATA_QNC_ENABLED

Quick-Net Connect enabled flag.
DATA_QNC_ENABLED 1 QNC enabled

 0 – False
T
 1 – True
n PS
6.2.242 Item ID 241 DATA_SO_SET
34
om 8:
Specifies which data service option is in effect.
l.c :4
. c
te 13

.7 bk t
41 -b 1 a
DATA_SO_SET 1 Service option setting

3
0 – Pre-IS-707
15

ei .0
 1 – Qualcomm proprietary
0.
w 01
 2 – IS-707
12
ou 3.
2.
zh 201
6.2.243 Item ID 242 UP_LINK_INFO (not supported)

6.2.244 Item ID 243 UP_PARMS (not supported)

6.2.245 Item ID 244 UP_CACHE (not supported)

6.2.246 Item ID 245 ELAPSED_TIME

Timer for internal test use.
ELAPSED_TIME 2 Timer for internal test use

6.2.247 Item ID 246 PDM2

PDM2 for RF calibration use.
PDM2 1 PDM2
6.2.248 Item ID 247 RX_AGC_MINMAX

Receiver AGC minimum/maximum.
MIN 1 Minimum
MAX 1 Maximum
T
n PS
6.2.249 Item ID 248 VBATT_AUX
34
Auxiliary V battery minimum/maximum.
om 8:
l.c :4
. c
te 13
MIN 1 Minimum
.7 bk t
41 -b 1 a
3
MAX 1 Maximum
15
ei .0
0.
w 01
6.2.250 Item ID 249 DTACO_CONTROL (not supported)

12
ou 3.
2.
zh 201
6.2.251 Item ID 250 DTACO_INTERDIGIT_TIMEOUT (not supported)

6.2.252 Item ID 251 PDM1

PDM1 for RF calibration use.
PDM1 1 PDM1
6.2.253 Item ID 252 BELL_MODEM (not supported)


6.2.254 Item ID 253 PDM1_VS_TEMP

PDM1 versus temperature for RF calibration use.
PDM1_VS_TEMP NV_TEMP_TABLE_ PDM1 versus temperature table item entries

6.2.255 Item ID 254 PDM2_VS_TEMP

PDM2 versus temperature for RF calibration use.
T
n PS
PDM2_VS_TEMP NV_TEMP_TABLE_ PDM2 versus temperature table item entries
SIZ
34
om 8:
l.c :4
c
6.2.256 Item ID 255 SID_NID_LOCK
.
te 13
SID+NID pairs to be locked out from CDMA acquisition for the given NAM. IS-95-A 2.3.8 and
.7 bk t
41 -b 1 a
6.3.8 or J-STD-008 2.3.8.

3
15
ei .0

0.
w 01
12
ou 3.
Defined value: NV_MAX_SID_NID_LOCK 10

2.
zh 201

PAIR NV_MAX_SID_NID_LOCK SID+NID pairs

Array of NV_MAX_SID_NID_LOCK SID+NID pairs,
as below.
SID 2 System identifier
NID 2 Network identifier
6.2.257 Item ID 256 PRL_ENABLED

Preferred roaming list enabled/disabled for the given NAM. 800 MHz SSPR phones only.

ENABLED 1 Preferred roaming list enable

 0 – False (no roaming list)
 1 – True (use roaming list)

6.2.258 Item ID 257 ROAMING_LIST_683

IS-683-A format roaming list. This item cannot be accessed through the Nonvolatile Read/Write
Request interface. See Preferred Roaming List Read/Write Request messages.
6.2.259 Item ID 258 SYSTEM_PREF

System preference for the given NAM. For 800 MHz SSPR phones, this item replaces Item ID
11 (CDMA_PREF_SERV) and Item ID 12 (ANALOG_PREF_SERV).

Nonvolatile Item Read Request

 0 – A only
T
 1 – B only
n PS
 2 – Home only
 3 – Home preferred (standard)
34
6.2.260 Item ID 259 HOME_SID_NID
om 8:
l.c :4
. c
te 13
Home SID+NID pairs for CDMA acquisition for the given NAM. For 800 MHz SSPR phones,
this item replaces Item ID 38 (SID_NID).
.7 bk t
41 -b 1 a
3
15
ei .0

0.
w 01
Defined value: NV_MAX_HOME_SID_NID 20

12
ou 3.

2.
zh 201
PAIR NV_MAX_HOME_ SID+NID pairs

SID_NID Array of NV_MAX_HOME_SID_NID SID+NID
pairs, as below.
SID 2 System identifier
NID 2 Network identifier
6.2.261 Item ID 260 OTAPA_ENABLED (not supported)


6.2.262 Item ID 261 NAM_LOCK

SPASM protection for the active NAM.

NAM_LOCK 1 NAM lock enabled

 0 – False
 1 – True
6.2.263 Item ID 262 IMSI_T_S1

True IMSI MIN1 for the given NAM. The number is 24 bits, per IS-95-B 6.3.1. This is an
encoded value, per the standard, not a string of digits or plain numbers.
T
n PS
34
om 8:
l.c :4
c
.
te 13
phones.
CDMA_MIN1 4 MIN1 for CDMA service.

.7 bk t
41 -b 1 a
3
For IS-95-B compliance, these are set to the same
15
value; see IS-95-B Sec 6.3.1. (MIN1 is equivalent to
ei .0
IMSI_T_S1.)
0.
w 01
12
ou 3.
2.
zh 201
6.2.264 Item ID 263 IMSI_T_S2

True IMSI MIN2 for the given NAM. The number is 10 bits, per IS-95-B 6.3.1. This is an
encoded value, per the standard, not a string of digits or plain numbers.

phones.
CDMA_MIN2 2 MIN2 for CDMA service.

For IS-95-B compliance, these are set to the same
value; see IS-95-B Sec 6.3.1. (MIN2 is equivalent to
IMSI_T_S2.)

6.2.265 Item ID 264 IMSI_T_MCC

Mobile country code portion of true IMSI for the given NAM. The number is 24 bits, per
IS-95-B 6.3.1. This is an encoded value, per the standard, not a string of digits or plain numbers.

IMSI_MCC 2 IMSI mobile country code
6.2.266 Item ID 265 IMSI_T_11_12

Mobile network code portion of true IMSI (for 4 MINs) for the given NAM. The number is 8
bits, per IS-95-B 6.3.1. This is an encoded value, per the standard, not a string of digits or plain
numbers.
T
n PS
34
om 8:
l.c :4 Nonvolatile Item Read Request.
c
IMSI_11_12 1 IMSI mobile network code
.
te 13
.7 bk t
6.2.267 Item ID 266 IMSI_T_ADDR_NUM

41 -b 1 a
3
15
ei .0
True international mobile station ID length for the given NAM. The number is 3 bits, per
0.
w 01
IS-95-B 6.3.1.
12
ou 3.
2.
zh 201

NUM 1 Length of the true IMSI for this NAM
6.2.268 Item ID 267 UP_ALERTS (not supported)

6.2.269 Item ID 268 UP_IDLE_TIMER (not supported)

6.2.270 Item ID 269 SMS_UTC

Specifies format of SMS time display.
SMS_UTC 1 Format of SMS time display

 0 – Adjusted
 1 – As received

6.2.271 Item ID 270 ROAM_RINGER

Specifies roam ringer (a unique ringer while roaming) on or off.
ROAM_RINGER 1 Roam ringer values enabled

 0 – False
 1 – True
6.2.272 Item ID 271 RENTAL_TIMER (not supported)

6.2.273 Item ID 272 RENTAL_TIMER_INC (not supported)
T
n PS
6.2.274 Item ID 273 RENTAL_CNT (not supported)
34
om 8:
This item is not supported. l.c :4
. c
te 13
6.2.275 Item ID 274 RENTAL_TIMER_ENABLED (not supported)

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
6.2.276 Item ID 275 FULL_SYSTEM_PREF

12
ou 3.
2.
zh 201
Controls system preference display options.
FULL_SYSTEM_PREF 1 Full system preference setting

 0 – Only “standard” and “home only” options will
show in the system preference UI menu
 1 – All system preference settings will show on the
UI menus
6.2.277 Item ID 276 BORSCHT_RINGER_FREQ (not supported)

6.2.278 Item ID 277 PAYPHONE_ENABLE (not supported)

6.2.279 Item ID 278 DSP_ANSWER_DET_ENABLE (not supported)


6.2.280 Item ID 279 EVRC_PRI (obsolete)

6.2.281 Item ID 280 AFAX_CLASS_20 (obsolete)

6.2.282 Item ID 281 V52_CONTROL (not supported)

6.2.283 Item ID 282 CARRIER_INFO (not supported)

T
n PS
6.2.284 Item ID 283 AFAX (not supported)
34
om 8:
l.c :4
c
6.2.285 Item ID 284 SIO_PWRDWN (obsolete)
.
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
6.2.286 Item ID 285 PREF_VOICE_SO

0.
w 01
12
EVRC preferred voice service options for the given NAM.

ou 3.
2.
zh 201

EVRC_CAPABILITY_ 1 EVRC capability enabled

ENABLED  0 – False
 1 – True
HOME_PAGE_VOICE_SO 2 Home page voice service option

 0 – Wild (any service option)
 1 – IS-96A
 3 – EVRC
 0x8000 – 13K
 0x8001 – IS-96
HOME_ORIG_VOICE_SO 2 Home origination voice service option
ROAM_ORIG_VOICE_SO 2 Roam origination voice service option

 1 – IS-96A
 3 – EVRC
 0x8000 – 13K
 0x8001 – IS-96

6.2.287 Item ID 286 VRHFK_ENABLED (not supported)

6.2.288 Item 287 VRHFK_VOICE_ANSWER (not supported)

6.2.289 Item ID 288 PDM1_VS_FREQ

PDM1 versus frequency for RF calibration use.
PDM1_VS_FREQ NV_FREQ_TABLE_ PDM1 versus frequency table item entries
T
SIZ Array of NV_FREQ_TABLE_SIZ values
n PS
34
6.2.290 Item ID 289 PDM2_VS_FREQ
om 8:
l.c :4
c
PDM2 versus frequency for RF calibration use.
.
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
PDM2_VS_FREQ NV_FREQ_TABLE_ PDM2 versus frequency table item

0.
w 01
SIZ Array of NV_FREQ_TABLE_SIZ.

12
ou 3.
2.
zh 201
6.2.291 Item ID 290 SMS_AUTO_DELETE

SMS autodeletion enabled status.
SMS_AUTO_DELETE 1 SMS autodeletion enabled

 0 – False
 1 – True
6.2.292 Item ID 291 SRDA_ENABLED

Silent redial to AMPS enabled status.
SRDA_ENABLED 1 Silent redial enabled

 0 – False
 1 – True

6.2.293 Item ID 292 OUTPUT_UI_KEYS

Sending UI keystroke messages enabled/disabled. (Internal feature)
OUTPUT_UI_KEYS 1 Sending UI keystroke messages enabled

 0 – False
 1 – True
6.2.294 Item ID 293 POL_REV_TIMEOUT (not supported)

6.2.295 Item ID 294 SI_TEST_DATA_1
T
First stack-checker diagnostic buffer.
n PS
34
Defined value: NV_SI_TEST_DATA_SIZE 100
om 8:
l.c :4
c
SI_TEST_DATA_1 NV_SI_TEST_DATA_ Table item for first stack-checker
.
te 13
SIZE Array of NV_SI_TEST_DATA_SIZE values.
.7 bk t
41 -b 1 a
3
6.2.296 Item ID 295 SI_TEST_DATA_2
15
ei .0
0.
w 01
Second stack-checker diagnostic buffer.

12
ou 3.
2.
zh 201
Defined value: NV_SI_TEST_DATA_SIZE 100
SI_TEST_DATA_2 NV_SI_TEST_DATA_ Table item for second stack-checker

SIZE Array of NV_SI_TEST_DATA_SIZE values.
6.2.297 Item ID 296 SPC_CHANGE_ENABLED

OTASP SPC change enabled/disabled.
SPC_CHANGE_ENABLED 1 OTASP SPC change enabled

 0 – False
 1 – True

6.2.298 Item ID 297 DATA_MDR_MODE

Select the medium data rate (MDR) mode. MDR is also known as high-speed packet data
(HSPD).
DATA_MDR_MODE 1 Data MDR mode

 0 – MDR only
 1 – MDR if available
 2 – No MDR
6.2.299 Item ID 298 DATA_PKT_ORIG_STR

Dial string used for originating packet data calls.
T
n PS
Defined value: NV_MAX_PKT_ORIG_DIGITS 16
34
NUM_DIGITS 1 Number of digits
om 8:
DIGITS NV_MAX_PKT_
l.c :4 Digits
c
ORIG_DIGITS Array of NV_MAX_PKT_ORIG_DIGITS; ASCII
.
te 13
characters, 0 to 9, *, #
.7 bk t
41 -b 1 a
3
6.2.300 Item ID 299 UP_KEY (not supported)
15
ei .0
0.
w 01

12
ou 3.
2.
zh 201
6.2.301 Item ID 300 DATA_AUTO_PACKET_DETECTION

Packet data (PPP) automatic detection mode enable.
DATA_AUTO_PACKET_ 1 PPP autodetect enabled

DETECTION  0 – Disabled
 1 – Enabled
6.2.302 Item ID 301 AUTO_VOLUME_ENABLED (not supported)

6.2.303 Item ID 302 WILDCARD_SID (not supported)

6.2.304 Item ID 303 ROAM_MSG (not supported)


6.2.305 Item ID 304 OTKSL_FLAG (not supported)

6.2.306 Item ID 305 BROWSER_TYPE (not supported)

6.2.307 Item ID 306 SMS_REMINDER_TONE (not supported)

6.2.308 Item ID 307 UBROWSER (not supported)

T
n PS
6.2.309 Item ID 308 BTF_ADJUST (not supported)
34
om 8:
l.c :4
c
6.2.310 Item ID 309 FULL_PREF_MODE (not supported)
.
te 13

.7 bk t
41 -b 1 a
3
15
ei .0
6.2.311 Item ID 310 UP_BROWSER_WARN (not supported)

0.
w 01
12

ou 3.
2.
zh 201
6.2.312 Item ID 311 FM_HDET_ADC_RANGE (not supported)

6.2.313 Item ID 312 CDMA_HDET_ADC_RANGE (not supported)

6.2.314 Item ID 313 PN_ID (not supported)

6.2.315 Item ID 314 USER_ZONE_ENABLED (not supported)

6.2.316 Item ID 315 USER_ZONE (not supported)


6.2.317 Item ID 316 PAP_DATA (obsolete)

6.2.318 Item ID 317 DATA_DEFAULT_PROFILE (not supported)

6.2.319 Item ID 318 PAP_USER_ID

User ID for password authentication protocol.
Defined value: NV_MAX_PAP_USER_ID_LENGTH 64 (Maximum of 64 characters in user ID)
USER_ID_LEN 1 Length of user ID
T
n PS
USER_ID NV_MAX_PAP_USER_ID_ User ID
LENGTH Array of NV_MAX_PAP_USER_ID_LENGTH.
34
6.2.320 Item ID 319 PAP_PASSWORD om 8:
l.c :4
. c
te 13
Actual password for password authentication protocol.

.7 bk t
41 -b 1 a
3
15
ei .0
Defined value: NV_MAX_PAP_PASSWORD_LENGTH 14 (Maximum of 14 characters in password)

0.
w 01
12
PASSWORD_LEN 1 Length of password

ou 3.
2.
zh 201
PASSWORD NV_MAX_PAP_PASSWORD_ Password

LENGTH Array of NV_MAX_PAP_PASSWORD_LENGTH.
6.2.321 Item ID 320 STA_TBYE (not supported)

6.2.322 Item ID 321 STA_MIN_THR (not supported)

6.2.323 Item ID 322 STA_MIN_RX (not supported)

6.2.324 Item ID 323 STA_MIN_ECIO (not supported)

6.2.325 Item ID 324 STA_PRI (not supported)


6.2.326 Item ID 325 PCS_RX_LIN_OFF_0

PCS mode Rx linearizer offset.
PCS_RX_LIN_OFF_0 1 PCS Rx linearizer offset
6.2.327 Item ID 326 PCS_RX_LIN_SLP

PCS mode Rx linearizer slope.
Defined value: NV_PCS_RX_LIN_SIZ 16
PCS_RX_LIN_SLP NV_PCS_RX_LIN_ PCS Rx linearizer slope table entries

SIZ
T
Array of NV_PCS_RX_LIN_SIZ values.
n PS
34
6.2.328 Item ID 327 PCS_RX_COMP_VS_FREQ
om 8:
PCS mode Rx gain compensation versus frequency.
l.c :4
. c
te 13

.7 bk t
41 -b 1 a

3
15
ei .0
PCS_RX_COMP_VS_FREQ NV_FREQ_TABLE_ PCS Rx gain compensation versus frequency table

0.
w 01
SIZ entries
12

ou 3.
2.
zh 201
6.2.329 Item ID 328 PCS_TX_COMP_VS_FREQ

PCS mode Tx gain compensation versus frequency.

PCS_TX_COMP_VS_FREQ NV_FREQ_TABLE_ PCS Tx gain compensation versus frequency table

SIZ entries
6.2.330 Item ID 329 PCS_TX_LIN_MASTER_OFF_0

PCS mode Tx linearizer master offset.
PCS_TX_LIN_MASTER_ 2 PCS Tx linearizer master offset

OFF_0

6.2.331 Item ID 330 PCS_TX_LIN_MASTER_SLP

PCS mode Tx linearizer master slope.
Defined value: NV_PCS_TX_LIN_MASTER_SIZ 36
PCS_TX_LIN_MASTER_ NV_PCS_TX_LIN_ PCS Tx linearizer master slope

SLP MASTER_SIZ Array of NV_PCS_TX_LIN_MASTER_SIZ values.
6.2.332 Item ID 331 PCS_TX_LIN_VS_TEMP

PCS mode Tx linearizer trim versus temperature.
T
n PS
PCS_TX_LIN_VS_TEMP NV_TEMP_TABLE PCS Tx linearizer trim versus temperature table entries
_SIZ
34
om 8:
l.c :4
c
6.2.333 Item ID 332 PCS_TX_LIM_VS_TEMP
.
te 13
PCS mode Tx power limit versus temperature.

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01

12
ou 3.
PCS_TX_LIM_VS_TEMP NV_TEMP_TABLE_ PCS Tx power limit versus temperature table entries

2.
zh 201
6.2.334 Item ID 333 PCS_TX_LIM_VS_FREQ

PCS mode Tx power limit versus frequency.
PCS_TX_LIM_VS_FREQ NV_FREQ_TABLE_ PCS Tx power limit versus frequency table entries

SIZ Array of NV_FREQ_TABLE_SIZ values.

6.2.335 Item ID 334 PCS_EXP_HDET_VS_AGC

PCS mode expected HDET reading versus AGC PDM.
Defined value: NV_PCS_EXP_HDET_VS_AGC_SIZ 16
PCS_EXP_HDET_VS_AGC NV_PCS_EXP_HDET_ PCS expected HDET reading versus AGC PDM

VS_AGC_SIZ table entries
Array of NV_PCS_EXP_HDET_VS_AGC_SIZ
values.
6.2.336 Item ID 335 PCS_HDET_OFF

PCS ADC HDET reading offset.
T
n PS
PCS_HDET_OFF 1 PCS ADC HDET reading offset
34
om 8:
6.2.337 Item ID 336 PCS_HDET_SPN l.c :4
. c
te 13
PCS ADC HDET reading span.
.7 bk t
41 -b 1 a

3
15
ei .0
PCS_HDET_SPN 1 PCS ADC HDET reading span

0.
w 01
12
ou 3.
6.2.338 Item ID 337 PCS_R1_RISE

2.
zh 201
R1 transmit output power level at which PA is stepped up.
PCS_R1_RISE 1 PCS R1 rise
6.2.339 Item ID 338 PCS_R1_FALL

R1 transmit output power level at which PA is stepped down.
PCS_R1_FALL 1 PCS R1 fall




T
n PS
34
om 8:
l.c :4 Description
. c
te 13
.7 bk t
41 -b 1 a
6.2.344 Item ID 343 PCS_PA_RANGE_STEP_CAL

3
15
ei .0
Calibrate PCS PA range gain step.

0.
w 01
12
ou 3.

2.
zh 201
PCS_PA_RANGE_STEP_ 1 PCS PA range step calibration

CAL
6.2.345 Item ID 344 PCS_PDM1_VS_FREQ

PCS PDM1 versus frequency for RF calibration use.
PCS_PDM1_VS_FREQ NV_FREQ_TABLE_ PCS PDM1 versus frequency table item entries

6.2.346 Item ID 345 PCS_PDM2_VS_FREQ

PCS PDM2 versus frequency for RF calibration use.
PCS_PDM2_VS_FREQ NV_FREQ_TABLE_ PCS PDM2 versus frequency table item entries


6.2.347 Item ID 346 PCS_LNA_RANGE_POL

Polarity of PCS LNA range control signal.
PCS_LNA_RANGE_POL 1 PCS LNA range polarity
6.2.348 Item ID 347 PCS_LNA_RANGE_RISE

The receive power level at which PCS LNA should be bypassed.
PCS_LNA_RANGE_RISE 1 PCS LNA range rise
T
6.2.349 Item ID 348 PCS_LNA_RANGE_FALL
n PS
The receive power level at which PCS LNA should be turned on.
34
om 8:
l.c :4 Description
. c
PCS_LNA_RANGE_FALL 1 PCS LNA range fall
te 13
.7 bk t
41 -b 1 a
6.2.350 Item ID 349 PCS_LNA_RANGE_OFFSET

3
15
ei .0
The value added to the receive power reading when PCS LNA is bypassed.
0.
w 01
12
ou 3.

2.
zh 201
PCS_LNA_RANGE_OFFSET 2 PCS LNA range offset
6.2.351 Item ID 350 PCS_RX_LIN_VS_TEMP

PCS mode Rx linearizer versus temperature.
PCS_RX_LIN_VS_TEMP NV_TEMP_TABLE_ PCS Rx linearizer versus temperature table entries

6.2.352 Item ID 351 PCS_ADJ_FACTOR

PCS mode adjustment factor.
PCS_ADJ_FACTOR 1 PCS adjustment factor

6.2.353 Item ID 352 PCS_PA_RANGE_VS_TEMP

Changes in PA_RANGE_STEP over temperature.
PCS_PA_RANGE_VS_TEMP NV_TEMP_TABLE_ PCS PA range versus temperature table entries

6.2.354 Item ID 353 PCS_PDM1_VS_TEMP

Compensation in transmit temperature using PCS PDM1.
T
n PS
PCS_PDM1_VS_TEMP NV_TEMP_TABLE_ PCS PDM1 versus temperature table item entries
SIZ
34
om 8:
l.c :4
c
6.2.355 Item ID 354 PCS_PDM2_VS_TEMP
.
te 13
Compensation in transmit temperature using PCS PDM2.

.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01

12
ou 3.
PCS_PDM2_VS_TEMP NV_TEMP_TABLE_ PCS PDM2 versus temperature table item entries

2.
zh 201
6.2.356 Item ID 355 PCS_RX_SLP_VS_TEMP

PCS mode Rx slope versus temperature.
PCS_RX_SLP_VS_TEMP NV_TEMP_TABLE_ PCS Rx slope versus temperature table entries

6.2.357 Item ID 356 PCS_TX_SLP_VS_TEMP

PCS mode Tx slope versus temperature.
PCS_TX_SLP_VS_TEMP NV_TEMP_TABLE_ PCS Tx slope versus temperature table entries


6.2.358 Item ID 357 PCS_RX_AGC_MINMAX

PCS receiver AGC minimum/maximum.
MIN 1 Minimum
MAX 1 Maximum
6.2.359 Item ID 358 PA_OFFSETS

Power amplifier offsets.
Defined value: NV_NUM_PA_RANGES 4
T
NV_TEMP_TABLE_SIZ 8
n PS
NV_FREQ_TABLE_SIZ 16
34
PA_OFFSETS NV_NUM_PA_RANGES Table item
NV_NUM_PA_RANGES entries made up of
om 8:
the fields below.
l.c :4
. c
te 13
OFFSET 2 Offset
.7 bk t
TEMP_ADJ NV_TEMP_TABLE_SIZ Temperature adjustment

41 -b 1 a
3
15
ei .0
FREQ_ADJ NV_FREQ_TABLE_SIZ Frequency adjustment

0.
w 01

12
ou 3.
2.
zh 201
6.2.360 Item ID 359 CDMA_TX_LIN_MASTER (obsolete)

6.2.361 Item ID 360 VEXT (not supported)

6.2.362 Item ID 361 VLCD_ADC_CNT (not supported)

6.2.363 Item ID 362 VLCD_DRVR_CNT (not supported)

6.2.364 Item ID 363 VREF_ADJ_PDM_CNT (not supported)


6.2.365 Item ID 364 IBAT_PER_LSB (not supported)

6.2.366 Item ID 365 IEXT (not supported)

6.2.367 Item ID 366 IEXT_THR (not supported)

6.2.368 Item ID 367 CDMA_TX_LIN_MASTER0

CDMA mode Tx linearizer master #0.
T
n PS
34
om 8:
OFFSET 2l.c :4 Offset
c
SLOPE NV_CDMA_TX_LIN_ Slope
.
te 13
MASTER_SIZ Array of NV_CDMA_TX_LIN_MASTER_SIZ values.
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01

12
ou 3.
2.
zh 201
OFFSET 2 Offset


OFFSET 2 Offset



OFFSET 2 Offset

6.2.372 Item ID 371 TIME_FMT_SELECTION (not supported)

T
6.2.373 Item ID 372 SMS_BC_SERVICE_TABLE_SIZE
n PS
Broadcast SMS service table size.
34
om 8:
l.c :4 Description
. c
SMS_BC_SERVICE_ 2 Broadcast SMS service table size
te 13
TABLE_SIZE
.7 bk t
41 -b 1 a
3
15
6.2.374 Item ID 373 SMS_BC_SERVICE_TABLE
ei .0
0.
w 01
Broadcast SMS service table to contain service and language details.

12
ou 3.
2.
zh 201
Defined value: NV_SMS_MAX_SERVICES 32

NV_SMS_MAX_LANGUAGES 4
NV_SMS_BC_TABLE_SIZE (NV_SMS_MAX_SERVICES * NV_SMS_MAX_LANGUAGES)
NV_SMS_BC_SRV_LABEL_SIZE 10
INDEX 1 Index. Set this value before a Nonvolatile Item Read

Request.
Range is 0 – (NV_SMS_BC_TABLE_SIZE-1).
ACTIVE_SERVICE 1 Active service for delete operation

 0 – False
 1 – True
SERVICE 2 Service
LANGUAGE 1 Language
SELECTED 1 Selected
 0 – False
 1 – True
PRIORITY 1 Priority
LABEL [NV_SMS_BC_SRV_ UI text label for each service and language pair
LABEL_SIZE] Array of NV_SMS_BC_SRV_LABEL_SIZE values.

6.2.375 Item ID 374 SMS_BC_CONFIG

Broadcast SMS configuration identifies services, carrier disabled or enabled.
SMS_BC_CONFIG 1 Broadcast SMS configuration identifies services, carrier

disabled or enabled
6.2.376 Item ID 375 SMS_BC_USER_PREF

Broadcast SMS user preferences, deactivated or activated.
SMS_BC_USER_PREF 1 Broadcast SMS user preferences, deactivated or

activated
T
n PS
6.2.377 Item ID 376 LNA_RANGE_2_RISE
34
Receive power level to bypass the second LNA.
om 8:
l.c :4
. c
te 13
LNA_RANGE_2_RISE 1 Receive power level to bypass the second LNA

.7 bk t
41 -b 1 a
3
15
ei .0
6.2.378 Item ID 377 LNA_RANGE_2_FALL

0.
w 01
12
Receive power level to turn on the second LNA.

ou 3.
2.
zh 201
LNA_RANGE_2_FALL 1 Receive power level to turn on the second LNA
6.2.379 Item ID 378 LNA_RANGE_12_OFFSET

Offset added to Receive power when the first and second LNAs are bypassed.
LNA_RANGE_12_OFFSET 2 Offset added to Receive power when the first and

second LNAs are bypassed
6.2.380 Item ID 379 NONBYPASS_TIMER

Duration of nonbypass state in multiples of 52 µs (3-bits).
NONBYPASS_TIMER 1 Duration of nonbypass state in multiples of 52 µs (3-bits)

6.2.381 Item ID 380 BYPASS_TIMER

Duration of bypass state in multiples of 6.6 µs (5-bits).
BYPASS_TIMER 1 Duration of bypass state in multiples of 6.6 µs (5-bits)
6.2.382 Item ID 381 IM_LEVEL1

LNA1 InterMod antijamming threshold power level.
IM_LEVEL1 1 LNA1 InterMod antijamming threshold power level
T
6.2.383 Item ID 382 IM_LEVEL2
n PS
LNA2 InterMod antijamming threshold power level.
34
om 8:
l.c :4 Description
. c
IM_LEVEL2 1 LNA2 InterMod antijamming threshold power level
te 13
.7 bk t
41 -b 1 a
6.2.384 Item ID 383 CDMA_LNA_OFFSET_VS_FREQ

3
15
ei .0
NV_LNA_RANGE_OFFSET frequency compensation table, units of AGC value.

0.
w 01
12
ou 3.

2.
zh 201
CDMA_LNA_OFFSET_VS_ NV_FREQ_TABLE_ CDMA_LNA_OFFSET versus frequency table item

FREQ SIZ entries
6.2.385 Item ID 384 CDMA_LNA_12_OFFSET_VS_FREQ

NV_LNA_12_RANGE_OFFSET frequency compensation table, units of AGC value.
CDMA_LNA_12_OFFSET_ NV_FREQ_TABLE_ CDMA_LNA_12_OFFSET versus frequency table

VS_FREQ SIZ item entries

6.2.386 Item ID 385 AGC_PHASE_OFFSET

Phase rotation setting for LNA_DECISION 01 and 11.
AGC_PHASE_OFFSET 1 Phase rotation setting for LNA_DECISION 01 and 11
6.2.387 Item ID 386 RX_AGC_MIN_11

Used to limit Rx AGC value when second LNA is bypassed.
MIN 1 Minimum
MAX 1 Maximum
T
n PS
6.2.388 Item ID 387 PCS_LNA_RANGE_2_RISE
34
PCS mode, receive power level to bypass the second LNA.
om 8:
l.c :4
. c
te 13
PCS_LNA_RANGE_2_RISE 1 Receive power level to bypass the second LNA

.7 bk t
41 -b 1 a
3
15
ei .0
6.2.389 Item ID 388 PCS_LNA_RANGE_2_FALL

0.
w 01
12
PCS mode, receive power level to turn on the second LNA.

ou 3.
2.
zh 201
PCS_LNA_RANGE_2_FALL 1 Receive power level to turn on the second LNA
6.2.390 Item ID 389 PCS_LNA_RANGE_12_OFFSET

PCS mode, offset added to Receive power when the first and second LNAs are bypassed.
PCS_LNA_RANGE_12_ 2 Offset added to Receive power when the first and

OFFSET second LNAs are bypassed
6.2.391 Item ID 390 PCS_NONBYPASS_TIMER

PCS mode, duration of nonbypass state in multiples of 52 µs (3-bits).
PCS_NONBYPASS_TIMER 1 Duration of nonbypass state in multiples of 52 µs

(3-bits)

6.2.392 Item ID 391 PCS_BYPASS_TIMER

PCS mode, duration of bypass state in multiples of 6.6 µs (5-bits).
PCS_BYPASS_TIMER 1 Duration of bypass state in multiples of 6.6 µs (5-bits)
6.2.393 Item ID 392 PCS_IM_LEVEL1

PCS mode, LNA1 InterMod antijamming threshold power level.
PCS_IM_LEVEL1 1 LNA1 InterMod antijamming threshold power level
T
6.2.394 Item ID 393 PCS_IM_LEVEL2
n PS
PCS mode, LNA2 InterMod antijamming threshold power level.
34
om 8:
l.c :4 Description
. c
PCS_IM_LEVEL2 1 LNA2 InterMod antijamming threshold power level
te 13
.7 bk t
41 -b 1 a
6.2.395 Item ID 394 PCS_CDMA_LNA_OFFSET_VS_FREQ

3
15
ei .0
PCS mode, NV_LNA_RANGE_OFFSET frequency compensation table, units of AGC value.

0.
w 01
12
ou 3.

2.
zh 201
PCS_CDMA_LNA_OFFSET_ NV_FREQ_TABLE_ CDMA_LNA_OFFSET versus frequency table item

VS_FREQ SIZ entries
6.2.396 Item ID 395 PCS_CDMA_LNA_12_OFFSET_VS_FREQ

PCS mode, NV_LNA_12_RANGE_OFFSET frequency compensation table, units of AGC
value.
PCS_CDMA_LNA_12_ NV_FREQ_TABLE_ CDMA_LNA_12_OFFSET versus frequency table

OFFSET_VS_FREQ SIZ item entries

6.2.397 Item ID 396 PCS_AGC_PHASE_OFFSET

PCS mode, phase rotation setting for LNA_DECISION 01 and 11.
PCS_AGC_PHASE_OFFSET 1 Phase rotation setting for LNA_DECISION 01 and 11
6.2.398 Item ID 397 PCS_RX_AGC_MIN_11

PCS mode, used to limit Rx AGC value when second LNA is bypassed.
MIN 1 Minimum
MAX 1 Maximum
T
n PS
6.2.399 Item ID 398 – 466
34
See [Q3].
om 8:
l.c :4
. c
6.2.400 Item ID 467 HDR_CON_SUSPEND (obsolete)
te 13
.7 bk t

41 -b 1 a
3
15
ei .0
6.2.401 Item ID 468 HDR_PRE_CC_CYC_ENABLED

0.
w 01
12
ou 3.
Preferred control channel cycle enabled.

2.
zh 201
hdr_pre_cc_cyc_enabled 1 If set to TRUE, then use the value from the

hdr_pref_cc_cyc for the preferred control channel cycle
6.2.402 Item ID 469 HDR_PRE_CC_CYC

Preferred control channel cycle.
hdr_pre_cc_cyc 2 Control channel cycle in which the access terminal

transitions out of sleep
6.2.403 Item ID 470 HDR_SRCH_PARAMS (obsolete)

This item is obsolete and has been replaced by item ID 827; see Section 6.2.444.
6.2.404 Item ID 471 HDRSMP_KEEP_ALIVE_START (obsolete)


6.2.405 Item ID 472 HDRSMP_KEEP_ALIVE_SENT (obsolete)

6.2.406 Item ID 473 HDRSMP_KEEP_ALIVE_REQ_INT

Keep alive interval.
hdrsmp_keep_alive_req_int 2 Time (in minutes) negotiated in the Configuration

Request/Response messages
6.2.407 Item ID 474 HDRAMP_ADDRESS_DATA

All data related to addresses.
T
n PS
34
session_seed 4 The session seed is generated upon entering INACTIVE
state. It is used as the RATI, and as a seed to the hash
om 8:
l.c :4 algorithm.
. c
transmit_ati 4 When data is transmitted, the 32-bit transmit ati address
te 13
is used by the MAC layers to identify from which AT the

.7 bk t
data originated.
41 -b 1 a
3
receive_mati 4 Used as a flag to indicate whether the session seed
15
ei .0
should be:
0.
w 01
 Randomly generated (0x00000000)

12
ou 3.
 Read from NV (0xFFFFFFFF)

2.
zh 201
receive_rati 4 Random ATI
receive_current_uati 4 Only store the most recent UATI received.
receive_new_uati 4 Not used (obsolete)
new_uati_valid 1 Not used (obsolete)
uati 1 * 16 Globally unique identifier assigned to the AT. The full

128-bit value is stored here (based on IPv6 addressing).
uati_color_code 1 The color code is a condensed representation of a

subnet. Its boundary exactly matches the boundary of a
subnet. The uati_color_code is used along with the
uati_subnet_mask to identify when a subnet changes.
uati_subnet_mask 1 Used to identify the subnet in which a sector belongs:

subnet_mask + subnet_size = subnet

6.2.408 Item ID 475 HDRSCP_SESSION_STATUS

Status of the session.
hdrscp_session_status 2 Status of the session

 0 – Inactive
 1 – Default (no values negotiated yet)
 2 – Active
6.2.409 Item ID 476 HDRSCP_TOKEN

Session token for the current session (generated by AN).
T
hdrscp_token 2 SessionConfigurationToken given in the
n PS
ConfigurationComplete message
34
6.2.410 Item ID 477 HDRSCP_PROTOCOL_SUBTYPE
om 8:
l.c :4
. c
List of all protocol subtypes configured for the current session.
te 13
.7 bk t

41 -b 1 a
3
15
hdrscp_protocol_subtype 2 * 24 Protocol subtype negotiated for each 1xEV-DO protocol
ei .0
(an array indexed by ProtocolID)

0.
w 01
12
ou 3.
2.
zh 201
6.2.411 Item ID 478 HDRAMP_DUAL_EXPIRE_TIME (obsolete)

6.2.412 Item ID 479 HDRSTREAM_CURR_STREAM_CFG

Stores the current stream configuration, that is, to which Application Subtype each stream is
currently configured. Each array element has a value for a specific stream. This value
corresponds to the Application Subtype to which the particular Stream is configured.
hdrstream_current_stream_cfg 2 *4 The Application Subtype to which each stream is

configured:
 Array element 0 corresponds to the configuration
of Stream0Application
 Array element 1 corresponds to
Stream1Application
 etc.

6.2.413 Item ID 480 HDR_SET_MNGMT_SAME_CHAN

1xEV-DO route update set management same channel parameters. See Section 6.6.7.2 of [S1] for
more details.
pilot_add 1 Used to trigger a RouteUpdate in the Connected State
pilot_drop 1 Used to start a pilot drop timer for a pilot in the Active or
Candidate Set
pilot_compare 1 Active Set versus Candidate Set comparison threshold,

expressed as a twos complement number
pilot_drop_timer 1 PilotDropTimer
dynamic_thresholds 1 Set to 1 if the next three fields (soft_slope, add_intercept.

and drop_intercept) are valid; 0 otherwise
T
n PS
soft_slope 1 Unsigned binary used in the inequality criterion for adding
or dropping a pilot from the Active Set
34
add_intercept 1 AddIntercept. Twos complement signed binary number in
om 8:
l.c :4 units of dB
. c
drop_intercept 1 DropIntercept. Twos complement signed binary number in
te 13
units of dB
.7 bk t
41 -b 1 a
nset_max_age 1 3 Maximum age value after which the access terminal will
drop members from the Neighbor Set
15
ei .0
0.
w 01
6.2.414 Item ID 481 HDR_SET_MNGMT_DIFF_CHAN

12
ou 3.
2.
zh 201
1xEV-DO route update set management different channel parameters. See Sections 6.6.7.2 and
6.6.7.3 of [S1]. The fields and field descriptions are identical to Item ID 480
HDR_SET_MNGMT_SAME_CHAN.
6.2.415 Item ID 482 HDRLUP_UNSOLICITED_ENABLED

If the current session is configured to autonomously send the LocationNotification message
when moving the data session from 1X to 1xEV-DO
hdrlup_unsolicited_enabled 1 Whether the AT is configured to send a

LocationNotification message when moving the data
session from 1X to 1xEV-DO

6.2.416 Item ID 483 HDRAMAC_INITIAL_CONFIG

1xEV-DO access MAC Initial configuration attribute. This item contains configuration attribute
values specified during 1xEV-DO session negotiation. For more details, see the IS-856 standard
[S1].
capsule_length_max 1 Not used
power_step 1 Not used
probe_sequence_max 1 Maximum number of access probe sequences per

access attempt
probe_backoff 1 Access Channel MAC interprobe backoff value
probe_sequence_backoff 1 Access Channel MAC interprobe sequence backoff

value
T
n PS
6.2.417 Item ID 484 HDRAMAC_POWER_PARAMS
34
1xEV-DO access MAC power parameters attribute. This item contains configuration attribute
om 8:
l.c :4
. c
[S1].
te 13
.7 bk t

41 -b 1 a
3
15
data_offset_nom 1 Nominal offset of Access MAC data channel power to
ei .0
pilot channel power

0.
w 01
12
data_offset_9k6 1 Ratio of Access MAC data channel power at 9.6 kbps to

ou 3.
nominal Access MAC data channel power

2.
zh 201
6.2.418 Item ID 485 HDRFMAC_DRC_GATING

Forward traffic MAC DRC gating attributes. This item contains a configuration attribute value
specified during 1xEV-DO session negotiation. For more details, see the IS-856 standard [S1].
hdrfmac_drc_gating 1 Gating attribute

 0 – Continuous DRC transmission
 1 – Discontinuous DRC transmission (that is, DRC
gating on)
6.2.419 Item ID 486 HDRFMAC_HANDOFF_DELAYS

Forward traffic MAC handoff delays attribute. This item contains configuration attribute values
specified during 1xEV-DO session negotiation. For more details, see the IS-856 standard [S1].
softer_handoff_delay 1 Delay seen by AT during softer handoff
soft_handoff_delay 1 Delay seen by AT during soft handoff

6.2.420 Item ID 487 HDRRMAC_POWER_PARAMS

Reverse traffic MAC power parameters attribute. This item contains configuration attribute
[S1].
data_offset_nom 1 Nominal offset of RTC MAC data channel power to pilot

channel power
data_offset_9k6 1 Ratio of RTC MAC data channel power at 9.6 kbps to

nominal RTC MAC data channel power


T
n PS
34
om 8:
l.c :4nominal RTC MAC data channel power
c
rpc_step 1 Reverse power control step size
.
te 13
.7 bk t
41 -b 1 a
6.2.421 Item ID 488 HDRRMAC_RATE_PARAMS

3
15
ei .0
Reverse traffic MAC rate parameters attribute. This item contains configuration attribute values
0.
w 01
specified during an 1xEV-DO session negotiation. For more details, see the IS-856 standard [S1].
12
ou 3.
2.
zh 201
transition_009k6_019k2 1 Probability the AT uses to determine whether it can

increase its reverse link transmission rate from 9.6 kbps
to 19.2 kbps

increase its reverse link transmission rate from
19.2 kbps to 38.4 kbps


transition_019k2_009k6 1 Probability the AT uses to determine whether it should

decrease its reverse link transmission rate from




6.2.422 Item ID 489 HDRSLP_RESET_SEQNO

SLP reset message sequence number.
hdrslp_reset_seqno 1 Next expected SLP reset message sequence number;

set to 0 at SessionBoot
T
n PS
6.2.423 Item ID 490 – 553
34
om 8:
See [Q3]. l.c :4
. c
te 13
6.2.424 Item ID 554 HDRFMAC_DRC_LOCK

.7 bk t
41 -b 1 a
Configurable parameters for DRC lock in 1xEV-DO. This item contains configuration attribute
3
15
ei .0
0.
w 01
[S1].
12
ou 3.
2.
zh 201
drc_lock_length 1 Specifies the number of times a DRCLock bit is

repeated
drc_lock_period 1 Specifies the time interval between DRCLock bit

transmissions
6.2.425 Item ID 555 – 561

See [Q3].
6.2.426 Item ID 562 HYBRID_PREFERENCE

Preferred mode in hybrid operations.
Hybrid_pref 1 System Selection hybrid preferences

 0 – Hybrid operation is not allowed
 1 – Hybrid operation is allowed
 2 – Do not change the hybrid preference

6.2.427 Item ID 563 – 578

See [Q3].
6.2.428 Item ID 579 HDR_AN_AUTH_NAI

Stores the NAI for 1xEV-DO access network CHAP authentication. The value stored in this NV
item is used as the username while doing CHAP authentication on the Stream bound to the
Access Network.
nai_len 1 Length of the NAI in bytes; maximum value can be 64
Nai 1 * 64 NAI (network access identifier)
6.2.429 Item ID 580 HDR_AN_AUTH_PASSWORD
T
n PS
Stores the password for 1xEV-DO access network CHAP authentication. The value stored in this
34
NV item is used as the password while doing CHAP authentication on the Stream bound to the
om 8:
Access Network. l.c :4
. c
te 13
.7 bk t
password_len 1 Length in bytes of the Password; maximum value can

41 -b 1 a
be 14
3
15
ei .0
password 1 * 14 Password
0.
w 01
12
ou 3.
6.2.430 Item ID 581 – 582

2.
zh 201
See [Q3].
6.2.431 Item ID 583 HDRKEP_CONFIG

Configuration values for 1xEV-DO key exchange protocol for the current session.
key_len 2 Negotiated value for Session Key Length

 0 – 768 bit
 1 – 1024 bit
keys_are_valid 1 Whether the rpc_auth_key has been successfully

negotiated
rpc_auth_key 1 * 20 Value of the authentication key to be used on the

Reverse Public Channel (also known as Access
Channel)

6.2.432 Item ID 584 HDRAUTH_CONFIG

Session configuration for HDR AUTH.
ac_auth_key_len 2 Negotiated value for the Access Channel Authentication

key length, in bits
6.2.433 Item ID 585 – 707

See [Q3].
6.2.434 Item ID 708 COLLOC_DISALLOWED_TIME (obsolete)

T
n PS
6.2.435 Item ID 709 HOLD_HDR_TIME (obsolete)
34
om 8:
l.c :4
. c
6.2.436 Item ID 710 – 711
te 13
.7 bk t
See [Q3].
41 -b 1 a
3
15
ei .0
6.2.437 Item ID 712 HDRSCP_AN_AUTH_STATUS (obsolete)

0.
w 01
12
ou 3.

2.
zh 201
6.2.438 Item ID 713 – 718

See [Q3].
6.2.439 Item ID 719 HDRSMPKA_START_TIME

1xEV-DO keep alive timer start time.
hdrsmpka_start_time 8 System time at which Keep Alive was last started; this
item is written upon powerdown or no more frequently
than once every 30 min
6.2.440 Item ID 720 HDRSMPKA_SENT_TIME

1xEV-DO keep alive message sent time.
hdrsmpka_sent_time 8 System time at which the Keep Alive Request message

was last sent

6.2.441 Item ID 721 – 817

See [Q3].
6.2.442 Item ID 818 HDRRX_DIVERSITY_CTRL

1xEV-DO diversity control.
div_ctrl 1 Sets the user diversity preference

 0 – Disabled
 1 – Enabled
6.2.443 Item ID 819 – 826
T
See [Q3].
n PS
6.2.444 Item ID 827 HDRRUP_SRCH_PARAMS
34
om 8:
1xEV-DO search parameters. This contains the fields in the route update protocol search
l.c :4
c
parameters configuration attribute. See Sections 6.6.7.1 and 6.6.7.2 of [S1].
.
te 13
.7 bk t

41 -b 1 a
3
15
pilot_inc 2 Pilot PN sequence increment to use for searching the
ei .0
remaining set; in units of 64 PN chips

0.
w 01
12
aset_win_size 1 Search window size for the active and candidate sets
ou 3.
2.
zh 201
nset_win_size 1 Search window size for the neighbor set
rset_win_size 1 Search window size for the remaining set
6.2.445 Item ID 828 – 831

See [Q3].
6.2.446 Item ID 832 HDRDO_NOT_DISTURB

1xEV-DO do not disturb.
hdr_do_not_disturb 1 Stop monitoring 1X page while in 1xEV-DO data call

 0 – Disabled
 1 – Enabled
6.2.447 Item ID 833 – 896

See [Q3].

6.2.448 Item ID 897 HDRRUP_OVERRIDE_ALLOWED

Allow override of Set Management parameters while connected.
hdrrup_override_allowed 1 Allow override of Set Management parameters while

connected
 0 – Disabled
 1 – Enabled
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

A Alphabetical NV Item List
Table A-1 lists the NV items alphabetically.

Table A-1 Alphabetical NV item list
Code Item Description
25 A_KEY Not supported
T
26 A_KEY_CHKSUM Obsolete
n PS
37 ACCOLC Access overload class
34
283 AFAX Not supported
om 8:
280 AFAX_CLASS_20 l.c :4 Obsolete
. c
385 AGC_PHASE_OFFSET Phase rotation setting for LNA_DECISION 01 and 11
te 13
168 AIR_CNT Resettable cumulative call counter

.7 bk t
41 -b 1 a
3
53 AIR_TIMER Resettable cumulative call timer
15
ei .0
185 ALARMS Not supported

0.
w 01
12
ou 3.
161 ALERTS_LVL Message alert volume level

2.
zh 201
162 ALERTS_LVL_SHADOW Message alert volume level when in the hands-free

carkit
17 ANALOG_FIRSTCHP Analog first paging channel
18 ANALOG_HOME_SID Analog home SID
12 ANALOG_PREF_SERV Analog preferred serving system (A/B)

19 ANALOG_REG Analog registration setting
16 ANALOG_SID_ACQ Analog SID(s) to acquire
15 ANALOG_SID_LOCK Analog SID(s) to lock out
222 ANY_KEY_ANSWER Answer call with any key
211 ASSIGNING_TMSI_ZONE TMSI zone
210 ASSIGNING_TMSI_ZONE_LEN TMSI zone length
74 AUTO_ANSWER Auto answer setting
172 AUTO_ANSWER_SHADOW Obsolete
76 AUTO_HYPHEN Autohyphen setting
83 AUTO_LOCK Autolock setting
78 AUTO_MUTE Obsolete

Alphabetical NV Item List
Table A-1 Alphabetical NV item list (Continued)

42 AUTO_NAM Select NAM automatically on roaming
73 AUTO_POWER Obsolete
75 AUTO_REDIAL Auto redial setting
173 AUTO_REDIAL_SHADOW Obsolete
301 AUTO_VOLUME_ENABLED Not supported
77 BACK_LIGHT Backlight setting
223 BACK_LIGHT_HFK Not supported
71 BANNER Banner to display when phone is idle
65 BEEP_LVL Key beep volume level
T
164 BEEP_LVL_SHADOW Key beep volume level for external headset
n PS
230 BEEP_SPKR_LVL External speaker (hands-free carkit) key beep
34
volume
om 8:
252 BELL_MODEM l.c :4Not supported
c
276 BORSCHT_RINGER_FREQ Not supported
.
te 13
305 BROWSER_TYPE Not supported

.7 bk t
41 -b 1 a
308 BTF_ADJUST Not supported

3
15
ei .0
380 BYPASS_TIMER Duration of bypass state in multiples of 6.6 µs (5 bits)

0.
w 01
12
66 CALL_BEEP One minute call alert setting

ou 3.
2.
zh 201
70 CALL_FADE_ALERT Call fade alert setting
84 CALL_RSTRC Call restrictions
52 CALL_TIMER Obsolete
192 CALL_TIMER_G Resettable last call timer
282 CARRIER_INFO Not supported

200 CDMA_ADJ_FACTOR CDMA adjustment factor
140 CDMA_ERR_SLP_VS_HDET CDMA HDET error slope vs. HDET reading
139 CDMA_EXP_HDET_VS_AGC CDMA expected HDET reading vs. AGC PDM
312 CDMA_HDET_ADC_RANGE Not supported
384 CDMA_LNA_12_OFFSET_VS_FREQ NV_LNA_12_RANGE_OFFSET frequency

compensation table
383 CDMA_LNA_OFFSET_VS_FREQ NV_LNA_RANGE_OFFSET frequency

compensation table
119 CDMA_PN_MASK CDMA PN mask
11 CDMA_PREF_SERV CDMA preferred serving system (A/B)
96 CDMA_RIPPLE CDMA UHF ripple compensation
129 CDMA_RX_COMP_VS_FREQ CDMA Rx gain compensation vs. frequency


99 CDMA_RX_ERROR CDMA Rx linear and nonlinear error
127 CDMA_RX_LIN_OFF_0 CDMA Rx linearizer offset
128 CDMA_RX_LIN_SLP CDMA Rx linearizer slope
199 CDMA_RX_LIN_VS_TEMP CDMA Rx linearizer vs. temperature
97 CDMA_RX_OFFSET CDMA Rx offset compensation
98 CDMA_RX_POWER CDMA true Rx power
202 CDMA_RX_SLP_VS_TEMP CDMA Rx slope vs. temperature
14 CDMA_SID_ACQ CDMA SID(s) to acquire
13 CDMA_SID_LOCK CDMA SID(s) to lockout
T
130 CDMA_TX_COMP_VS_FREQ CDMA Tx gain compensation vs. frequency
n PS
131 CDMA_TX_COMP_VS_VOLT Obsolete
34
102 CDMA_TX_ERROR CDMA Tx nonlinear error compensation
om 8:
201 CDMA_TX_LIM_BOOSTER_OFF Obsolete
l.c :4
. c
te 13
138 CDMA_TX_LIM_VS_FREQ CDMA Tx power limit vs. frequency
.7 bk t
136 CDMA_TX_LIM_VS_TEMP CDMA Tx power limit vs. temperature

41 -b 1 a
3
137 CDMA_TX_LIM_VS_VOLT CDMA Tx power limit vs. voltage
15
ei .0
0.
w 01
94 CDMA_TX_LIMIT Limit TX_GAIN_ADJ when output exceeded

12
ou 3.
359 CDMA_TX_LIN_MASTER Obsolete

2.
zh 201
132 CDMA_TX_LIN_MASTER_OFF_0 CDMA Tx linearizer master offset
133 CDMA_TX_LIN_MASTER_SLP CDMA Tx linearizer master slope
367 CDMA_TX_LIN_MASTER0 CDMA Tx linearizer master #0
134 CDMA_TX_LIN_VS_TEMP CDMA Tx linearizer trim vs. temperature
135 CDMA_TX_LIN_VS_VOLT CDMA Tx linearizer trim vs. voltage
100 CDMA_TX_SLOPE_1 CDMA Tx gain compensation slope compensation
101 CDMA_TX_SLOPE_2 CDMA Tx gain adjust slope compensation
203 CDMA_TX_SLP_VS_TEMP CDMA Tx slope vs. temperature
9 CONFIG_CHKSUM Checksum of physical configuration parameters
67 CONT_KEY_DTMF Key beep length
68 CONT_STR_DTMF Obsolete
31 COUNT Not supported
239 CURR_GATEWAY Obsolete


40 CURR_NAM Current NAM
300 DATA_AUTO_PACKET_DETECTION Packet data configuration
317 DATA_DEFAULT_PROFILE Not supported
110 DATA_IO_MODE Obsolete
297 DATA_MDR_MODE Select MDR mode
298 DATA_PKT_ORIG_STR Dial string for originating packet data calls
240 DATA_QNC_ENABLED QNC enabled flag
241 DATA_SO_SET Specify which data service option setting is in effect
109 DATA_SRVC_STATE Obsolete
T
57 DIAL Speed dial number (phone book entries)
n PS
234 DIAL_RESTRICT_LVLS Not supported
34
236 DIAL_STATE_TABLE Not supported
om 8:
235 DIAL_STATE_TABLE_LEN Not supported
l.c :4
. c
te 13
189 DIALING_PLAN Not supported
.7 bk t
226 DIALS_SORTING_METHOD Phone book sorting method (numeric, alphabetic)

41 -b 1 a
3
178 DIR_NUMBER Directory number
15
ei .0
0.
w 01
215 DIR_NUMBER_PCS Directory number, PCS format

12
ou 3.
50 DIST_REG Distance registration variables

2.
zh 201
118 DM_ADDR Obsolete
93 DM_IO_MODE Obsolete
278 DSP_ANSWER_DET_ENABLE Not supported
249 DTACO_CONTROL Not supported
250 DTACO_INTERDIGIT_TIMEOUT Not supported
62 EAR_LVL Handset earpiece volume level
165 EAR_LVL_SHADOW External headset earpiece volume level
245 ELAPSED_TIME Timer for internal use
87 ERR_LOG Error log
0 ESN Electronic serial number
1 ESN_CHKSUM Electronic serial number checksum
279 EVRC_PRI Obsolete
114 FACTORY_INFO Obsolete
233 FLIP_ANSWERS Not supported
194 FM_AGC FM AGC
146 FM_AGC_ADJ_VS_FREQ FM AGC adjustment vs. frequency


147 FM_AGC_ADJ_VS_TEMP Obsolete
122 FM_AGC_SET_VS_FREQ FM TX_AGC_ADJ setting vs. frequency
121 FM_AGC_SET_VS_PWR FM TX_AGC_ADJ setting vs. power
123 FM_AGC_SET_VS_TEMP FM TX_AGC_ADJ setting vs. temperature
125 FM_ERR_SLP_VS_PWR FM HDET error slope vs. power
124 FM_EXP_HDET_VS_PWR FM expected HDET reading vs. power
206 FM_EXP_HDET_VS_TEMP FM expected HDET reading vs. temperature
126 FM_FREQ_SENSE_GAIN FM frequency sense gain
311 FM_HDET_ADC_RANGE Not supported
T
190 FM_LNA_CTL FM LNA control
n PS
95 FM_RSSI Analog RSSI adjustment
34
91 FM_TX_PWR Analog (FM) Tx power levels
om 8:
92 FR_TEMP_OFFSET Frequency/temperature offset
l.c :4
. c
te 13
89 FREQ_ADJ Obsolete
.7 bk t
184 FSC Field service lock code

41 -b 1 a
3
195 FSC2 Obsolete
15
ei .0
0.
w 01
196 FSC2_CHKSUM Obsolete

12
ou 3.
309 FULL_PREF_MODE Not supported

2.
zh 201
275 FULL_SYSTEM_PREF Control system preference display options
143 HDET_OFF ADC HDET reading offset
144 HDET_SPN ADC HDET reading span
579 HDR_AN_AUTH_NAI NAI for 1xEV-DO access network CHAP

authentication
580 HDR_AN_AUTH_PASSWORD password for 1xEV-DO access network CHAP
authentication
708 HDR_COLLOC_DISALLOWED_TIME Obsolete
467 HDR_CON_SUSPEND Obsolete
469 HDR_PRE_CC_CYC 1xEV-DO preferred control channel cycle
468 HDR_PRE_CC_CYC_ENABLED 1xEV-DO preferred control channel cycle enabled

status
481 HDR_SET_MNGMT_DIFF_CHAN 1xEV-DO route update set management different

channel parameters
480 HDR_SET_MNGMT_SAME_CHAN 1xEV-DO route update set management same

channel parameters
470 HDR_SRCH_PARAMS Obsolete
483 HDRAMAC_INITIAL_CONFIG 1xEV-DO access MAC initial configuration attribute


484 HDRAMAC_POWER_PARAMS 1xEV-DO access MAC power parameters attribute
474 HDRAMP_ADDRESS_DATA All 1xEV-DO AMP data related to addresses
478 HDRAMP_DUAL_EXPIRE_TIME Obsolete
584 HDRAUTH_CONFIG Session configuration for 1xEV-DO AUTH
832 HDRDO_NOT_DISTURB Stop monitoring 1X page while in 1xEV-DO data call
485 HDRFMAC_DRC_GATING 1xEV-DO Forward traffic MAC DRC gating attribute
554 HDRFMAC_DRC_LOCK Configurable parameters for DRC lock in 1xEV-DO
486 HDRFMAC_HANDOFF_DELAYS 1xEV-DO Forward traffic MAC handoff delays

attribute
583 HDRKEP_CONFIG Session configuration for 1xEV-DO key exchange
T
protocol
n PS
482 HDRLUP_UNSOLICITED_ENABLED Flag indicates if mobile is set up to send unsolicited
34
location update
om 8:
487 HDRRMAC_POWER_PARAMS l.c :4 1xEV-DO reverse traffic MAC power parameters
c
attribute
.
te 13
488 HDRRMAC_RATE_PARAMS 1xEV-DO reverse traffic MAC rate parameters

attribute
.7 bk t
41 -b 1 a
3
897 HDRRUP_OVERRIDE_ALLOWED Allow override of set management parameters while
15
ei .0
connected
0.
w 01
827 HDRRUP_SRCH_PARAMS 1xEV-DO search parameters

12
ou 3.
2.
zh 201
818 HDRRX_DIVERSITY_CTRL 1xEV-DO Rx diversity control parameters
712 HDRSCP_AN_AUTH_STATUS Obsolete
477 HDRSCP_PROTOCOL_SUBTYPE 1xEV-DO list of all protocol subtypes configured
475 HDRSCP_SESSION_STATUS 1xEV-DO SCP session status
476 HDRSCP_TOKEN 1xEV-DO SCP session token (generated by the AN)
489 HDRSLP_RESET_SEQNO Next expected 1xEV-DO SLP reset message

sequence number
473 HDRSMP_KEEP_ALIVE_REQ_INT 1xEV-DO SMP keep alive request interval
472 HDRSMP_KEEP_ALIVE_SENT Obsolete
471 HDRSMP_KEEP_ALIVE_START Obsolete
720 HDRSMPKA_SENT_TIME 1xEV-DO keep alive message sent time
719 HDRSMPKA_START_TIME 1xEV-DO keep alive start time
479 HDRSTREAM_CURR_STREAM_CFG 1xEV-DO configuration of current stream
709 HOLD_HDR_TIME Obsolete
214 HOME_PCS_FREQ_BLOCK Obsolete
259 HOME_SID_NID Home SID/NID pairs list
86 HORN_ALERT Obsolete


198 HW_CONFIG Hardware configuration
562 HYBRID_PREFERENCE Preferred mode in 1xEV-DO hybrid operations
364 IBAT_PER_LSB Not supported
111 IDLE_DATA_TIMEOUT Obsolete
365 IEXT Not supported
366 IEXT_THR Not supported
381 IM_LEVEL1 LNA1 InterMod antijamming threshold power level
382 IM_LEVEL2 LNA2 InterMod antijamming threshold power level
208 IMSI Obsolete
T
177 IMSI_11_12 Mobile network code portion of IMSI
n PS
209 IMSI_ADDR_NUM Length of IMSI
34
176 IMSI_MCC Mobile country code portion of IMSI
om 8:
265 IMSI_T_11_12 True IMSI mobile network code
l.c :4
. c
te 13
266 IMSI_T_ADDR_NUM True IMSI length
.7 bk t
264 IMSI_T_MCC True IMSI mobile country code

41 -b 1 a
3
262 IMSI_T_S1 True IMSI MIN1
15
ei .0
0.
w 01
263 IMSI_T_S2 True IMSI MIN2

12
ou 3.
113 INI_MUTE Initial muting mode

2.
zh 201
238 IP_ADDRESS Obsolete
187 ISD_STD_PASSWD Not supported
188 ISD_STD_RESTRICT Not supported
225 KEY_SOUND Type of keypress sound emitted
227 LANGUAGE_SELECTION Not supported
51 LAST_CDMACH Obsolete
72 LCD LCD calibration setting
80 LCKRSN_P Base station lock reason, until power cycled
170 LIFE_CNT Nonresettable cumulative call count
55 LIFE_TIMER Obsolete
191 LIFE_TIMER_G Nonresettable cumulative call timer
378 LNA_RANGE_12_OFFSET Offset added to Receive power when the first and
second LNAs are bypassed
377 LNA_RANGE_2_FALL Receive power level to turn on the second LNA
376 LNA_RANGE_2_RISE Receive power level to bypass the second LNA
158 LNA_RANGE_FALL LNA range fall


159 LNA_RANGE_OFFSET LNA range offset
156 LNA_RANGE_POL LNA range polarity
157 LNA_RANGE_RISE LNA range rise
205 LNA_SWITCH_VS_TEMP Obsolete
46 LOCAID Analog location area ID
81 LOCK Indicator of whether user locked the phone
82 LOCK_CODE User lock code
45 LSTSID Analog last SID registered
79 MAINTRSN Base station maintenance reason
T
112 MAX_TX_ADJ Obsolete
n PS
228 MENU_FORMAT Type of user interface menu format
34
167 MESSAGE_ALERT Not supported
om 8:
39 MIN_CHKSUM MIN checksum
l.c :4
. c
te 13
32 MIN1 7-digit phone number (MIN1)
.7 bk t
33 MIN2 3-digit area code (MIN2)

41 -b 1 a
3
6 MOB_CAI_REV Mobile protocol revision number (MOB_P_REV)
15
ei .0
(read-only)
0.
w 01
12
7 MOB_FIRM_REV Mobile firmware revision number (read-only)

ou 3.
2.
zh 201
8 MOB_MODEL Mobile model number (read-only)
36 MOB_TERM_FOR_NID CDMA mobile-terminated foreign NID registration

flag
35 MOB_TERM_FOR_SID CDMA mobile-terminated foreign SID registration

flag
34 MOB_TERM_HOME CDMA mobile-terminated home SID registration flag
217 MRU_TABLE Obsolete
231 MRU2_TABLE Most recently used channels
207 N1M Obsolete
24 NAM_CHKSUM NAM checksum
261 NAM_LOCK SPASM protection for the active NAM
43 NAME_NAM User selectable name for each NAM
379 NONBYPASS_TIMER Duration of nonbypass state in multiples of 52 µs

(3 bits)
44 NXTREG Analog registration count
145 ONETOUCH_DIAL UI one touch dialing enabled/disabled

41 ORIG_MIN Obsolete


260 OTAPA_ENABLED Not supported
219 OTKSL Not supported
304 OTKSL_FLAG Not supported
292 OUTPUT_UI_KEYS Sending UI keystroke messages enabled/disabled
103 PA_CURRENT_CTL Obsolete
358 PA_OFFSETS PA offsets
155 PA_RANGE_STEP_CAL PA range step calibration
204 PA_RANGE_VS_TEMP PA range vs. temperature
61 PAGE_MSG Obsolete
T
60 PAGE_SET Obsolete
n PS
316 PAP_DATA Obsolete
34
319 PAP_PASSWORD Actual password for password authentication
om 8:
l.c :4protocol
c
318 PAP_USER_ID User ID for password authentication protocol
.
te 13
277 PAYPHONE_ENABLE Not supported

.7 bk t
41 -b 1 a
20 PCDMACH Primary CDMA channel

3
15
ei .0
351 PCS_ADJ_FACTOR PCS adjustment factor

0.
w 01
12
396 PCS_AGC_PHASE_OFFSET PCS phase rotation setting for LNA_DECISION 01

ou 3.
and 11
2.
zh 201
391 PCS_BYPASS_TIMER PCS duration of bypass state in multiples of 6.6 µs

(5 bits)
395 PCS_CDMA_LNA_12_OFFSET_VS PCS NV_LNA_12_RANGE_OFFSET frequency

_FREQ compensation table
394 PCS_CDMA_LNA_OFFSET_VS PCS NV_LNA_RANGE_OFFSET frequency

_FREQ compensation table
334 PCS_EXP_HDET_VS_AGC PCS expected HDET reading vs. AGC PDM
335 PCS_HDET_OFF PCS ADC HDET reading offset
336 PCS_HDET_SPN PCS ADC HDET reading span
392 PCS_IM_LEVEL1 PCS LNA1 InterMod antijamming threshold power

level
393 PCS_IM_LEVEL2 PCS LNA2 InterMod antijamming threshold power

level
389 PCS_LNA_RANGE_12_OFFSET PCS offset added to Receive power when the first
and second LNAs are bypassed
388 PCS_LNA_RANGE_2_FALL PCS receive power level to turn on the second LNA
387 PCS_LNA_RANGE_2_RISE PCS receive power level to bypass the second LNA
348 PCS_LNA_RANGE_FALL PCS LNA range fall


349 PCS_LNA_RANGE_OFFSET PCS LNA range offset
346 PCS_LNA_RANGE_POL Polarity of PCS LNA range control signal
347 PCS_LNA_RANGE_RISE PCS LNA range rise
390 PCS_NONBYPASS_TIMER PCS duration of nonbypass state in multiples of 52

µs (3 bits)
343 PCS_PA_RANGE_STEP_CAL Calibrate PCS PA range gain step
352 PCS_PA_RANGE_VS_TEMP PCS PA range vs. temperature
344 PCS_PDM1_VS_FREQ PCS PDM1 vs. frequency for RF calibration use
353 PCS_PDM1_VS_TEMP PCS PDM1 vs. temperature

345 PCS_PDM2_VS_FREQ PCS PDM2 vs. frequency for RF calibration use
T
n PS
354 PCS_PDM2_VS_TEMP PCS PDM2 vs. temperature
34
338 PCS_R1_FALL PCS R1 fall
om 8:
337 PCS_R1_RISE l.c :4 PCS R1 rise
c
.
te 13
339 PCS_R2_RISE PCS R2 rise

.7 bk t
41 -b 1 a

3
15
ei .0
341 PCS_R3_RISE PCS R3 rise

0.
w 01
12
397 PCS_RX_AGC_MIN_11 PCS used to limit Rx AGC value when second LNA
ou 3.
is bypassed
2.
zh 201
357 PCS_RX_AGC_MINMAX PCS receiver AGC mini/max
327 PCS_RX_COMP_VS_FREQ PCS Rx gain compensation vs. frequency
325 PCS_RX_LIN_OFF_0 PCS Rx linearizer offset
326 PCS_RX_LIN_SLP PCS Rx linearizer slope
350 PCS_RX_LIN_VS_TEMP PCS Rx linearizer vs. temperature
355 PCS_RX_SLP_VS_TEMP PCS Rx slope vs. temperature
328 PCS_TX_COMP_VS_FREQ PCS Tx gain compensation vs. frequency
333 PCS_TX_LIM_VS_FREQ PCS Tx power limit vs. frequency
332 PCS_TX_LIM_VS_TEMP PCS Tx power limit vs. temperature
329 PCS_TX_LIN_MASTER_OFF_0 PCS Tx linearizer master offset
330 PCS_TX_LIN_MASTER_SLP PCS Tx linearizer master slope
331 PCS_TX_LIN_VS_TEMP PCS Tx linearizer trim vs. temperature
356 PCS_TX_SLP_VS_TEMP PCS Tx slope vs. temperature
251 PDM1 PDM1 for RF calibration use
288 PDM1_VS_FREQ PDM1 vs. frequency for RF calibration use
253 PDM1_VS_TEMP PDM1 vs. temperature for RF calibration use


246 PDM2 PDM2 for RF calibration use
289 PDM2_VS_FREQ PDM2 vs. frequency for RF calibration use
254 PDM2_VS_TEMP PDM2 vs. temperature for RF calibration use
313 PN_ID Not supported
293 POL_REV_TIMEOUT Not supported
160 POWER_CYCLES Obsolete
22 PPCNCH Obsolete
10 PREF_MODE Digital/Analog mode preference
285 PREF_VOICE_SO EVRC preferred voice service options
T
256 PRL_ENABLED Preferred roaming list enabled/disabled
n PS
47 PUREG Analog powerup registration enabled/disabled
34
193 PWR_DWN_CNT Obsolete
om 8:
150 R1_FALL R1 fall
l.c :4
. c
te 13
149 R1_RISE R1 rise
.7 bk t
152 R2_FALL R2 fall

41 -b 1 a
3
151 R2_RISE R2 rise
15
ei .0
0.
w 01
154 R3_FALL R3 fall

12
ou 3.
153 R3_RISE R3 rise

2.
zh 201
218 REDIAL Last number redial
273 RENTAL_CNT Not supported
271 RENTAL_TIMER Not supported
274 RENTAL_TIMER_ENABLED Not supported
272 RENTAL_TIMER_INC Not supported
224 RESTRICT_GLOBAL Obsolete
148 RF_CONFIG RF configuration
64 RINGER_LVL Ringer volume level
163 RINGER_LVL_SHADOW Not supported
229 RINGER_SPKR_LVL External speaker (hands-free carkit) ringer volume
221 RINGER_TYPE Ringer type setting
169 ROAM_CNT Resettable cumulative roam calls count
303 ROAM_MSG Not supported
270 ROAM_RINGER Specify roam ringer on or off
54 ROAM_TIMER Resettable cumulative roam calls timer
216 ROAMING_LIST Roaming list (Qualcomm non-standard format)


257 ROAMING_LIST_683 IS-683-A format roaming list
56 RUN_TIMER Run time (time hardware has been running)
386 RX_AGC_MIN_11 Used to limit Rx AGC value when second LNA is

bypassed
247 RX_AGC_MINMAX Receiver AGC min/max
21 SCDMACH Secondary CDMA channel
4 SCM Station class mark
85 SEC_CODE Security code (subsidy lock, service programming)
171 SEND_PIN Send PIN option

120 SEND_TIMEOUT Not supported
T
n PS
294 SI_TEST_DATA_1 First stack-checker diagnostic buffer
34
295 SI_TEST_DATA_2 Second stack-checker diagnostic buffer
om 8:
38 SID_NID l.c :4CDMA SID/NID pairs
c
49 SID_NID_LIST SID/NID list
.
te 13
255 SID_NID_LOCK CDMA SID/NID pairs to lockout

.7 bk t
41 -b 1 a
284 SIO_PWRDWN Obsolete

3
15
ei .0
5 SLOT_CYCLE_INDEX Preferred slot cycle index

0.
w 01
12
174 SMS SMS messages (cannot be accessed through

ou 3.
NV_READ/ NV_WRITE interface)

2.
zh 201
290 SMS_AUTO_DELETE SMS auto-deletion enabled status
374 SMS_BC_CONFIG Broadcast SMS configuration identifies services and

carrier
373 SMS_BC_SERVICE_TABLE Broadcast SMS service table to contain service and

language details
372 SMS_BC_SERVICE_TABLE_SIZE Broadcast SMS service table size
375 SMS_BC_USER_PREF Broadcast SMS user preferences
175 SMS_DM Obsolete
306 SMS_REMINDER_TONE Not supported
269 SMS_UTC Specify format of SMS time display
104 SONY_ATTEN_1 Obsolete

107 SPARE_1 Spare item #1


108 SPARE_2 Spare item #2
180 SPARE_B1 Spare B1
181 SPARE_B2 Spare B2
182 SPARE_W1 Spare W1
183 SPARE_W2 Spare W2
296 SPC_CHANGE_ENABLED OTASP SPC change enabled/disabled
23 SPCNCH Obsolete
63 SPEAKER_LVL Hands-free carkit speaker volume level
291 SRDA_ENABLED Silent redial on analog enabled status
T
27 SSD_A Shared secret data A (write-only)
n PS
28 SSD_A_CHKSUM Obsolete
34
29 SSD_B Shared secret data B (write-only)
om 8:
30 SSD_B_CHKSUM Obsolete
l.c :4
. c
te 13
323 STA_MIN_ECIO Not supported
.7 bk t
322 STA_MIN_RX Not supported

41 -b 1 a
3
321 STA_MIN_THR Not supported
15
ei .0
0.
w 01
324 STA_PRI Not supported

12
ou 3.
320 STA_TBYE Not supported

2.
zh 201
58 STACK Call stack number
59 STACK_IDX Call stack last number index
186 STANDING_ALARM Not supported
69 SVC_AREA_ALERT Service area enter/exit alert setting
258 SYSTEM_PREF System preference
141 THERM RF and LCD compensation based on temperature
371 TIME_FMT_SELECTION Not supported
166 TIME_SHOW Time display setting
220 TIMED_PREF_MODE Allow analog-only operation
212 TMSI_CODE TMSI code
213 TMSI_EXP TMSI expiration timer
307 UBROWSER Not supported
88 UNIT_ID Obsolete
267 UP_ALERTS Not supported
310 UP_BROWSER_WARN Not supported
244 UP_CACHE Not supported


268 UP_IDLE_TIMER Not supported
299 UP_KEY Not supported
242 UP_LINK_INFO Not supported
243 UP_PARMS Not supported
315 USER_ZONE Not supported
314 USER_ZONE_ENABLED Not supported
281 V52_CONTROL Not supported
90 VBATT V battery regulator array for min/max
248 VBATT_AUX Auxiliary V battery min/max
T
142 VBATT_PA RF compensation based on voltage
n PS
2 VERNO_MAJ Major version number (read-only)
34
3 VERNO_MIN Minor version number (read-only)
om 8:
360 VEXT Not supported
l.c :4
. c
te 13
232 VIBRATOR Not supported
.7 bk t
361 VLCD_ADC_CNT Not supported

41 -b 1 a
3
362 VLCD_DRVR_CNT Not supported
15
ei .0
0.
w 01
106 VOC_GAIN Audio adjustment

12
ou 3.
179 VOICE_PRIV Not supported

2.
zh 201
237 VOICE_PRIV_ALERT Not supported
363 VREF_ADJ_PDM_CNT Not supported
286 VRHFK_ENABLED Not supported
287 VRHFK_VOICE_ANSWER Not supported
197 WDC Warranty date code
302 WILDCARD_SID Not supported
48 ZONE_LIST CDMA registration zone list

B Feature Query Bit Masks
Table B-1 lists the feature query bit masks. In the bit mask, if the bit value is 1, the feature is
enabled. The feature is disabled if the bit value is 0. Bits that are not described here are for
internal use only.
Table B-1 Feature query bit masks
T
Bit# Bit mask Description
n PS
0 ACP Analog service.
34
1 CDMA_800 800 MHz CDMA service.
8 OTASP
om 8: Over-the-air service provisioning.
l.c :4
. c
te 13
55 CDMA_1900 1900 MHz CDMA service.
.7 bk t
58 NV_ONE_NAM_RL_LARGE This phone has one NAM (and a roaming list).

41 -b 1 a
3
15
126 UI_RENTAL_TIMER Rental timer feature. (RENTAL_TIMER items are
ei .0
available.)
0.
w 01
12
167 E911 Emergency calling feature. This also means there are
ou 3.
10 instead of 3 emergency/special numbers.

2.
zh 201
168 NV_TWO_NAMS_RL_MEDIUM This phone has 2 NAMs (and roaming lists).
170 SSPR_ENHANCEMENTS SSPR using IS-683-A standard. In particular, affects

service programming settings (HOME_SID_NID
versus SID_NID).
171 IS683A_PRL The PRL in use by this phone is IS-683-A format, not
Qualcomm non-standard. If this bit is not set, it may
also mean this phone has no roaming list support at
all.
188 UI_SEVEN_LEVEL_SND The phone UI uses 7 earpiece volume levels (1-7)

instead of 4 levels.
200 NV_TWO_NAMS_RL_SMALL This phone has 2 NAMs (and roaming lists).
237 EXTRA_ALERTS Additional alerts settings are available for the

CALL_BEEPS item.
279 NV_TWO_NAMS_RL_LARGE This phone has 2 NAMs (and roaming lists).
285 MINIBROWSER_ITEM The BROWSER_WARN setting is available.
286 MC_SILENT_REDIAL_AMPS Silent redial to AMPS feature is available.
330 AUDIO_AGC Audio automatic adjust feature. Indicates that the

auto-volume feature is available.

Feature Query Bit Masks
Table B-1 Feature query bit masks (Continued)

Bit# Bit mask Description
343 UI_NEW_OTKSL OTKSL with number of uses is available

(OTKSL_FLAG).
350 UI_SPECIAL_OTASP2 Special numbers status option OTASP-2 is available.
353 UI_DL_ROAM_MSG Downloadable roaming messages item (ROAM_MSG)

is available.
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

C Common Fields
Table C-1 describes the common fields in Chapter 3, Chapter 5, and Chapter 6.
Table C-1 Common fields
Field Values Description
AGC_VALS, Formula to convert to dBm:  If value = -128, the dbm_value can be

CDMA_RX_AGC, (value / 3) - 63.248, where value is less than or equal to the calculated
T
RF_AGC, RX_AGC, signed twos complement value.
n PS
RX_AGC_VALS,  If value = 127, the dbm_value can be
RX0_AGC, RX1_AGC greater than or equal to -21 dBm.
34
BAND_CLASS, Supported values are: Specifies the band class; see [S22.]
om 8:
CDMA Band Class,  0 – 800 MHz cellular band
l.c :4
c
RF Band Class,  1 – 1.8 to 2.0 GHz PCS band
.
te 13
RF Band Class  2 – 872 to 960 MHz TACS band
& Channel,
 3 – 832 to 925 MHz JTACS band
.7 bk t
RX0 Band Class,

41 -b 1 a
 4 – 1.75 to 1.87 GHz Korean PCS

3
RX1 Band Class
band
15
ei .0
 5 – 450 MHz band

0.
w 01
 6 – 2 GHz band
12
ou 3.
 7 – 700 MHz band

2.
zh 201
 8 – 1800 MHz band

 9 – 900 MHz band
 10 – Secondary 800 MHz band
 11 – 400 MHz European PAMR
band
 12 – 800 MHz European PAMR
band
FCH_FRAME_TYPE Supported values are: Frame signaling type for FCH channels.
 0 – Payload only
 1 – Dim and burst frame
 2 – Blank and burst frame
FOR_DCCH_RC 1 to 9 See [S23], Table 3.1.3.1-1.
FOR_FCH_RC 1 to 9 See [S23], Table 3.1.3.1-1.
FOR_SCH0_RC 1 to 9 See [S23], Table 3.1.3.1-1.
FOR_SCH1_RC 1 to 9 See [S23], Table 3.1.3.1-1.
FSCH_RATE, RATE,  0 – 1X An enumeration specifying forward and

RSCH_RATE  1 – 2X reverse supplemental channel rates.
 2 – 4X
 3 – 8X
 4 – 16X
 5 – 32X

Common Fields
Table C-1 Common fields (Continued)

Interrupt_type Supported values are: Identifies which interrupt type has

 0 – UNDEFINED_PARAMS occurred (in context of MediaFLO).
 1 – TDM2_PARAMS
 2 – WOIS_PARAMS
 3 – LOIS_PARAMS
 4 – FRAME_1_PARAMS
 8 – SUPERFRAME_PARAMS
 9 – ACQ_PARAMS
 10 – FLOW_ACT_PARAMS
 11 – FLOW_ACT_MC_RECV_
CMD_PARAMS
T
 12 – FLOW_ACT_PT_RECV_
n PS
CMD_PARAMS
 13 – FLOW_ACT_WRITE_HW_
34
PARAMS
 14 – FLOW_ACT_GET_DATA_
om 8:
PARAMS
l.c :4
. c
 15 – FLOW_ACT_EXIT_STACK_
te 13
PARAMS
 16 – ON_DEMAND_PARAMS
.7 bk t
41 -b 1 a
 17 – ON_IFT_CHN_EST
3
15
 18 – ON_IM2_CAL
ei .0
 19 – WATERMARK_PARAMS
0.
w 01
 20 – SLEEP_START
12
ou 3.
 21 – FTAP_PARAMS
2.
zh 201
 22 – DMTT_FRAME1_PARAMS
 26 – STREAM_PARAMS
 27 – PROFILE_DATA
 28 – POWER_MEAS_TEST_
MODE
 29 – MAXIMUM_NUM_PARAMS
 31 – DSP TDM2 DONE
 32 – FFT WIC DONE
 33 – FFT LIC DONE
 34 – MAX NUMBER OF
PARAMETERS
REV_DCCH_RC 1 to 6 See [S23], Table 2.1.3.1-1.
REV_FCH_RC 1 to 6 See [S23], Table 2.1.3.1-1.
REV_SCH0_RC 1 to 6 See [S23], Table 2.1.3.1-1.
REV_SCH1_RC 1 to 6 See [S23], Table 2.1.3.1-1.

Common Fields
Table C-1 Common fields (Continued)

SCH_FRAME_RATE SCH and SCCH frame rate values: An enumeration specifying the frame rate
 0 – Full rate frame for any SCH or SCCH.
 1 – Blank (DTX) frame
 2 – Erasure
 3 – SCCH not active (SCCH only)
Searcher State Supported values are: Searcher state

 0 – Raw initialization state
 1 – Deep sleep in start state
 2 – Initial state for CDMA
operation
 3 – Acquisition of the pilot
channel
 4 – Reception of the sync channel
 5 – Transition from sync to paging
T
channel (slew)
n PS
 6 – Operation on the paging
channel
34
 7 – Slotted mode sleep state
om 8:
 8 – Operation on the traffic
l.c :4
c
channel
.
te 13
 9 – Return from paging or traffic
to sync channel (unslew)
.7 bk t
41 -b 1 a
 10 – Operation in PCG state

3
 11 – Powerup state
15
ei .0
TX_AGC, Formula to calculate total transmit If TX_value = 0, this equation is no longer

0.
w 01
TX_PWR_VALS power in dBm: valid.

12
ou 3.
 For BAND_CLASS = 0,2,3,5,7,9

2.
zh 201
–
tx_value_dbm = -52.25 +
TX_value/3
 For BAND_CLASS = 1,4,6,8 –
tx_value_dbm = -55.25 +
TX_value/3
TX_PWR_LIMIT Formula to convert TX_PWR_LIMIT Values of TX_PWR_LIMIT of 0 and 255
to dBm: represent saturated values such that the
tx_pwr_limit_dbm = -52.33 + actual value of tx_pwr_limit_dbm could
TX_PWR_LIMIT/3 be respectively lower (for
TX_PWR_LIMIT=0) or higher (for
TX_PWR_LIMIT=255) than the given
equation due to saturation.

D Additional References
This appendix lists related interface control documents that describe the other technologies and
subsystems.
Table D-1 QXDM interface control documents
Title Description DCN
Serial Interface Control Describes the serial data interfaces of the Qualcomm 80-V2708-1
T
Document for WCDMA Extensible Diagnostic Monitor (QXDM) for Wideband
n PS
CDMA (WCDMA)
34
Document for UMTS eXtensible Diagnostic Monitor (QXDM) for UMTS
om 8:
devices, such as those capable of WCDMA and/or
l.c :4
c
GSM
.
te 13
.7 bk t
Document for Extensible Diagnostic Monitor (QXDM) that are

41 -b 1 a
3
GSM\GPRS\EGPRS specifically applicable for Global System for Mobile
15
Communications (GSM) and General Packet Radio
ei .0
Service (GPRS) modes

0.
w 01
12
ou 3.
Document for WCDMA Extensible Diagnostic Monitor (QXDM) for wideband

2.
zh 201
Operator Guide CDMA (WCDMA)
MediaFLO Diagnostic Serial Describes the payloads of packets for various 80-T1017-1
Interface Control Document subsystems
Subsystem Payloads
PC Tools DLF Format Defines the format of the legacy Diagnostic Log File 80-V1595-1
Specification (DLF) and includes historical information on the MDM
log file format
Table D-2 Subsystem interface control documents

QCT HDR Diagnostic Commands 1xEV Commands 80-V1294-2
Global Positioning Subsystem Describes the payloads of packets for the Global 80-V1294-5
Interface Control Document Positioning System (GPS) subsystem
WMSDIAG Subsystem Interface Describes the payloads of packets for the 80-V1294-6
Control Document Wireless Messaging Service (WMS) subsystem.
Handset Subsystem Interface Control Describes the payloads of packets for the 80-V1294-8
Document handset subsystem
Audio Settings Subsystems Interface Describes the payloads of packets for the Audio 80-V1294-9
Control Document Settings subsystem

Additional References
Table D-2 Subsystem interface control documents (Continued)

File System Subsystem Interface Describes the payloads of packets for the File 80-V1294-11
Control Document System subsystem
MobiMon Subsystem Interface Describes the payloads of packets for the 80-V1294-15
Control Document MobiMon™ subsystem
Searcher Subsystem Interface Control Describes the payloads of packets for the 80-V1294-17
Document Searcher subsystem
Call Processing 1X Subsystem Describes the payloads of DIAG packets specific 80-V1294-20
Interface Control Document to the Call Processing (CP) 1X subsystem
MUX 1X Subsystem Interface Control Describes the payloads of packets for the MUX 80-V1294-23
Document 1x subsystem
Data Protocol Logging Subsystem Describes the payloads of DIAG subsystem 80-V1294-27
Interface Control Document request and response packets for the Data
T
Protocol Logging (DPL) subsystem
n PS
Device Management Subsystem Describes the payloads of packets for the Device 80-V1294-29
34
Diagnostic Interface Control Management (DM) subsystem
Document
om 8:
l.c :4
c
UBM L1 DIAG Subsystem Interface Describes the DVB-H L1 DIAG interface 80-VG026-1
.
te 13
Control Document
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201

E Diag Optimization Using Qshrink
E.1 Introduction
This module scans a full target build, extracts all debug message strings, creates a hash table of
these strings and finally modifies the build to use the new hash values instead of the strings, to
pass to QXDM or other tools. The hash is computed on the debug string and the file name. New
macros for the optimized debug messages have been added.
T
n PS
E.2 Changes in code
34
Given below is an example of changes made by Qshrink in the code:
om 8:
l.c :4
c
 Original – MSG_HIGH("FC NV flag = %d", fc_nv_flag, 0, 0 );
.
te 13
 Qshrink – QSR_MSG_HIGH( 4008620930ll, "FC NV flag = %d", fc_nv_flag, 0,

.7 bk t
0 );//auto-gen, to change remove 'QSR_' and first param

41 -b 1 a
3
15
The original string is retained in the source code for readability but is eventually stripped out by
ei .0
the preprocessor during macro expansion.

0.
w 01
12
ou 3.
MSG_* macros have equivalent QSR_MSG (Qshrink message) macros. The QSR_MSG_*
2.
zh 201
macros are similar to MSG_* macros with one additional parameter, the hash value. The hash
value is computed as an MD5 hash on the debug string and the file name. The MD5 algorithm
returns a 128-bit value; the least significant 32 bits are used as the hash value.
The msg send functions, e.g., msg_send_*, will have corresponding qsr_msg_send* functions.
These qsr_msg_send* functions will have one additional parameter in the end, which will be the
hash value. So, these functions will always have one parameter more than the corresponding
msg_send* functions.
On the PC tools side, the last argument received will be the hash value. The tool will trap this
message and use the hash file to decode and replace the hash value with the string.
The tool supports Mixed mode. The build can have both MSG* macros and QSR_MSG* macros.
If the preprocessor tool is not run before the build is compiled, the original F3 messages are
retained. If the preprocessor tool is run and then a new F3 message is added, the new F3 message
will be shipped out as a normal F3 message.
This hash database will be distributed by the modem architecture team as a versioned unit.
E.3 Phase 2
In Phase 2, the hash file, compressed using a standard algorithm, will be stored as part of the
build on the phone. At power-up, the PC tools will download this hash file and use it for
decoding the hash values.

Diag Optimization Using Qshrink
E.4 The Hash File

The structure of the hash file is as follows:
##################################################################
# QSHRINK Hash File
##################################################################
#
# GENERAL DESCRIPTION
#
# Copyright (c) 2008 - 2009 by QUALCOMM INCORPORATED. All Rights Reserved.
#
# Export of this technology or software is regulated by the U.S.
Government.
T
# Diversion contrary to U.S. law prohibited.
n PS
#
34
# $Author: rohins $
om 8:
# $Header: l.c :4
c
//source/qcom/qct/modem/arch/tools/QShrink/build/main/latest/hash.txt#5 $
.
te 13
#
.7 bk t
#
41 -b 1 a
3
<version>1</version>
15
ei .0
<Date>Wed Sep 30 13:38:59 2009</Date>

0.
w 01
<CRC>7799</CRC>
12
ou 3.
3367617134:mcctcho.c:F-SCH 1 not supported

2.
zh 201
1048622467:qvp_rtcp.c:Invalid bitrate sent, assume default bitrate

3038802131:srchcr.c:Reset Tresel gsm cells:2*Squal=%d SsrchRAT=%d
983866009:mn_sms_processing.c:Retrans Flag for SMR-%d set to TRUE
…
It consists of:
 Comments section – This includes user comments, Qualcomm Copyright information, and
Perforce information.
 Version – This version specifies whether it is a regular format Master Hash File (ver 1) or the
new format hash file (ver 2).
 Date – This provides the date and time when this hash file was generated.
 CRC – This is the 16-bit CRC that has been run on the hash content, i.e., all the lines below
the <CRC> xxx</CRC> until the EOF. This is used to ensure that the hash file was not hand
modified.
 Hash data – Everything below the <CRC>xxx</CRC> is the hash data. This is in the format
<Hash Key>:<Filename>:<Debug Message String>
Once the hash key is obtained from the Qshrink message sent from diagnostic services, the string
corresponding to it can be looked up from this hash file.

Diag Optimization Using Qshrink
E.5 Expected memory savings

Using this approach, the memory required to store the strings in the debug messages is saved. In
addition, memory is saved by not eliminating the need to store a pointer to the string and a
pointer to the filename. The filename can simply be retrieved with the string from the hash file.
After running Qshrink on various builds, savings of 2-3 MB were noted depending on the
number of debug messages.
T
n PS
34
om 8:
l.c :4
. c
te 13
.7 bk t
41 -b 1 a
3
15
ei .0
0.
w 01
12
ou 3.
2.
zh 201


80-V1294-1 Yp Dmss Serial Data Icd

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

80-V1294-1 Yp Dmss Serial Data Icd

Uploaded by

Copyright:

Available Formats

CDMA Dual-Mode Subscriber Station

Qualcomm Confidential and Proprietary

2 Protocol Description ........................................................................................ 49

2.1 Asynchronous .......................................................................................................................49

2.1.2 Asynchronous Data Protocol .................................................................................50

2.2 IS-707A–compliant Modem mode .......................................................................................51

3 Packet Definitions ............................................................................................ 52

80-V1294-1 YP 2 Qualcomm Confidential and Proprietary

3.4.12 Logging Mask (15 / 0x0F).....................................................................................66

3.4.32 Obsolete (35 / 0x23) ..............................................................................................84

3.4.33 Parameter Set (36 / 0x24) ......................................................................................85

3.4.34 Obsolete (37 / 0x25) ..............................................................................................85

3.4.35 Nonvolatile Item Read (38 / 0x26) ........................................................................86

3.4.36 Nonvolatile Item Write (39 / 0x27) .......................................................................87

80-V1294-1 YP 3 Qualcomm Confidential and Proprietary

3.4.55 Switch to Downloader (58 / 0x3A)......................................................................100

3.4.75 Obsolete (78 / 0x4E)............................................................................................ 115

3.4.76 Obsolete (79 / 0x4F) ............................................................................................ 115

3.4.77 Obsolete (80 / 0x50) ............................................................................................ 115

3.4.78 Feature Query (81 / 0x51).................................................................................... 115

3.4.79 Obsolete (82 / 0x52) ............................................................................................ 115

80-V1294-1 YP 4 Qualcomm Confidential and Proprietary

3.4.98 Reserved (100 / 0x64)..........................................................................................134

3.4.118 Log On Demand (120 / 0x78)..............................................................................145

3.4.119 Extended Message (121 / 0x79) ..........................................................................145

3.4.120 Reserved (122 / 0x7A).........................................................................................147

3.4.121 Diagnostic Protocol Loopback (123 / 0x7B) .......................................................147

3.4.122 Extended Build ID (124 / 0x7C)..........................................................................147

4 Diagnostic Packet Summary ......................................................................... 161

5 Log Record Formats ...................................................................................... 165

80-V1294-1 YP 5 Qualcomm Confidential and Proprietary

5.2.2 Channel radio configurations...............................................................................167

5.3.18 Vocoder Error Mask (LOG_CODE 0x1011) .......................................................174

5.3.19 Analog Voice Channel (LOG_CODE 0x1012) ...................................................174

5.3.20 Access Channel Probe (LOG_CODE 0x1013)....................................................175

5.3.21 Reserved (LOG_CODE 0x1014).........................................................................175

5.3.22 Test Mobile Command (LOG_CODE 0x1015) (obsolete)..................................175

80-V1294-1 YP 6 Qualcomm Confidential and Proprietary

5.3.40 Fast Forward Power Control (LOG_CODE 0x102B) (obsolete) ........................182

5.3.60 Bluetooth Service Discovery (LOG_CODE 0x1043) .........................................199

5.3.61 Bluetooth RFCOMM Session-specific (LOG_CODE 0x1044) ..........................200

5.3.62 Bluetooth RFCOMM DLCI Connection-Specific (LOG_CODE 0x1045) .........200

5.3.63 Bluetooth Audio Gateway (LOG_CODE 0x1046)..............................................202

5.3.64 Reserved (LOG_CODE 0x1047).........................................................................202

80-V1294-1 YP 7 Qualcomm Confidential and Proprietary

5.3.83 1xEV-DO Reverse Link Packet Summary (LOG_CODE 0x1060).....................209

5.3.100 1xEV-DO Connection Release (LOG_CODE 0x1071).......................................221

5.3.101 1xEV-DO Reverse Activity Bits (LOG_CODE 0x1072) ....................................221

5.3.103 1xEV-DO Reverse Link Packet Snapshot (LOG_CODE 0x1074)......................222

5.3.104 Reserved (LOG_CODE 0x1075).........................................................................222

5.3.105 1xEV-DO Signaling Access Channel (LOG_CODE 0x1076) ............................223

80-V1294-1 YP 8 Qualcomm Confidential and Proprietary

5.3.123 1xEV-DO Session Attempt, Ver 2 (LOG_CODE 0x1088)..................................234

5.3.141 Reserved (LOG_CODE 0x109B) ........................................................................251

5.3.142 Point-to-point Protocol Tx Frames (LOG_CODE 0x109C)................................251

5.3.144 Security PKX MM Statistics (LOG_CODE 0x109E) .........................................251

5.3.145 Security PKX MM Operation (LOG_CODE 0x109F)........................................252

5.3.146 Security Encoding Statistics (LOG_CODE 0x10A0)..........................................252

80-V1294-1 YP 9 Qualcomm Confidential and Proprietary

5.3.160 Security Secure Sockets Layer Received Statistics

5.3.170 Security Secure Sockets Layer Handshake Protocol Server Finished

5.3.172 Security Secure Sockets Layer Alert Protocol Alert

(LOG_CODE 0x10BA) .......................................................................................260

5.3.173 Reserved (LOG_CODE 0x10BB) .......................................................................260