iDEN

Status
Not open for further replies.

shell6

Member
Joined
Dec 13, 2007
Messages
43
Reaction score
0
Location
NYC (UWS)
Is there any way to scan or listen in on iDEN?
I know that JFK airport uses it and I'd imagine that there must be some kind of decoder out there.
 

n1das

Member
Joined
Feb 17, 2003
Messages
1,601
Reaction score
395
Location
Nashua, NH
There is nothing that will decode IDEN.

FALSE.

iDEN phones decode iDEN in order to function. NEXTEL phones uses iDEN on an iDEN network.

I've seen older iDEN mobiles made by Motorola, dating back to the early NEXTEL days. Equipment for monitoring iDEN DOES exist as test equipment for testing, servicing and maintaining iDEN radios and the iDEN netwok.

Are you sure it was iDEN you saw in use? The older NEXTEL phones were bricks compared to what they are now, a lot of them may still be in use.

Regarding an off the shelf scanner as a consumer product capable of monitoring iDEN, none exists that I'm aware of.
 
Last edited:

shell6

Member
Joined
Dec 13, 2007
Messages
43
Reaction score
0
Location
NYC (UWS)
Couldn't the output from a scanner be fed to a software package which would then decode it? Or is that too far fetched?
 

n1das

Member
Joined
Feb 17, 2003
Messages
1,601
Reaction score
395
Location
Nashua, NH
Couldn't the output from a scanner be fed to a software package which would then decode it? Or is that too far fetched?

May be possible. You'd need to tap the discriminator circuit to get the raw data waveform.

One thing about an iDEN signal is that it occupies more bandwidth than a normal scanner IF system is designed to handle. You may not be able to capture the entire signal in normal "narrow" FM mode. You may need a scanner with "wide" FM (WFM) capability, like for listening to FM broadcast and NTSC TV audio.

Good luck.
 

shell6

Member
Joined
Dec 13, 2007
Messages
43
Reaction score
0
Location
NYC (UWS)
Just out of curiosity, do you know how they get radios that work on iDEN channels? Do they just take nextel-style phones and program them to handle different frequencies or do they actually buy iDEN-spec 2-ways?
 

n1das

Member
Joined
Feb 17, 2003
Messages
1,601
Reaction score
395
Location
Nashua, NH
Just out of curiosity, do you know how they get radios that work on iDEN channels? Do they just take nextel-style phones and program them to handle different frequencies or do they actually buy iDEN-spec 2-ways?

NEXTEL phones ARE iDEN-spec 2-ways. (not aware of any others) They aren't phones specifically in the traditional sense that a cell phone is. It's sort of "...and oh BTW, you can also make phone calls with it if you want to." NEXTEL evolved from 800MHz SMRS and has been a push to talk (PTT) service from day one. The ability to use it as a phone was and still is secondary to the PTT capability. IIRC, NEXTEL phones operate under Part 90 while cell phones operate under Part 22 of FCC rules & regs.

I dunno but I suspect it's the same hardware but on their own iDEN network instead of NEXTEL. OTOH, they might just simply be using NEXTEL phones on the local NEXTEL network instead.
 

shaft

Member
Joined
Jan 26, 2004
Messages
418
Reaction score
0
Location
Wentzville, Mo
Do a search, this was discussed before. There is a company that provides iDEN radio services to airports and such.
 

mancow

Member
Database Admin
Joined
Feb 19, 2003
Messages
6,936
Reaction score
1,096
Location
N.E. Kansas
Yep, even with the Astro radios there is no "discriminator". They use what is called an Abacus chip to digitize the IF. From there it's sent on to be decoded via lines that use current loops to carry the digital logic instead of regular gates due to the high speeds that would cause noise. That's why you can't "tap" an Astro radio in the conventional sense. There's nothing to electrically grab on to.


It's not as simple as tapping a chip and decoding.

I don't think a descriminator is going to give youy a usable outbut from MIRS/iDEN M16QAM


https://idenonline.motorola.com/ideveloper/pdf/techover.pdf
 
N

N_Jay

Guest
Yep, even with the Astro radios there is no "discriminator". They use what is called an Abacus chip to digitize the IF. From there it's sent on to be decoded via lines that use current loops to carry the digital logic instead of regular gates due to the high speeds that would cause noise. That's why you can't "tap" an Astro radio in the conventional sense. There's nothing to electrically grab on to.


It's not as simple as tapping a chip and decoding.

I think the "Abacus" chip and "Zero IF" goes back to the analog Sabers.
 

mancow

Member
Database Admin
Joined
Feb 19, 2003
Messages
6,936
Reaction score
1,096
Location
N.E. Kansas
It may but I was thinking that they still used a conventional discriminator type circuit. I recently look at a way to make a crude P25 repeater and I about pulled my hair out trying to find a way to go from the digital receiver to the digital transmitter without double vocoding the audio. The only spot I could find in the Astros that looked promising were the lines leading to and from the encryption module but that didn't pan out. Even with the module installed and the lines tapped around it and swapped from a receiver to transmitter it failed. It made a horrible noise too when the data line was lifted from the module.

I just simply wanted some way to get a P25 packet off the air and turn around and retransmit it using the error correction afforded by the radio's processing. I guess it's too simple of a concept for just a modification and would require modded firmware.

I ended up doing the flat audio out on a maxtrac to flat audio in setup which works surprisingly well and even passes D-Star of course.

... I'm done with my tangent.
 

SAR923

Active Member
Joined
Dec 19, 2002
Messages
1,514
Reaction score
2
In response to what I believe the OP was asking, there is no scanner or consumer grade equipment you can buy that would allow you listen to iDEN transmissions. I won't even get into the usual legal issues.
 
Joined
Jan 27, 2008
Messages
86
Reaction score
18
Location
Scottsbluff, NE 69361
I don't know if this is possible but what about putting an IDEN mobile or handset into TEST MODE like we used to do on the old AMPS phones? or getting an old IDEN two way and hooking it into some for of a computer program and using the mobile only as a receiver/decoder and let a pc control the trunking functions?
 
N

N_Jay

Guest
I don't know if this is possible but what about putting an IDEN mobile or handset into TEST MODE like we used to do on the old AMPS phones? or getting an old IDEN two way and hooking it into some for of a computer program and using the mobile only as a receiver/decoder and let a pc control the trunking functions?

It would be very difficult. Phone conversations (i believe) are encrypted by part of the A-Key.

Group calls may be possible if you really understood enough about the internals to trick the unit into believing it is part of the group, AND that group has members in the cell and sector you are in.

Old or new is irrelevant except that some earlier units had more access to the internal circuitry.
 
Joined
Jan 27, 2008
Messages
86
Reaction score
18
Location
Scottsbluff, NE 69361
well me personally the phone stuff doesn't interest me. it would be just the PTT/Direct Connect and Group Call stuff.

guess this is what the original poster was looking for also. the way i figure, if they can hack Conditional Access Modules and VCII stuff then for these same people direct connect and group calls should be a piece of cake.
 
N

N_Jay

Guest
well me personally the phone stuff doesn't interest me. it would be just the PTT/Direct Connect and Group Call stuff.

guess this is what the original poster was looking for also. the way i figure, if they can hack Conditional Access Modules and VCII stuff then for these same people direct connect and group calls should be a piece of cake.

I believe it is more difficult.
CAM and VCII hacking usually exploits well known vulnerabilities.
I have not heard of any known ones with iDEN.

If the unit is not registered you don't get signal at that cell and sector.
If you copy a registration the system will detect it,and you can't take the A-Key.

If you get it to just monitor you still need a registered unit in your cell and sector.
 
Joined
Jan 27, 2008
Messages
86
Reaction score
18
Location
Scottsbluff, NE 69361
well thats expected. that is the way it was with the AMPS Test Mode Hack. once they switched cells you lost them. i'd assume it's also more pronounced with the low power digital nature of iden. definately not a project for the novice or casual listener.
 
Status
Not open for further replies.
Top