BCD436HP/BCD536HP Serial Commands List

[EricCottrell]

Hello,

I was able to use the modified file provided by WayneH and get serial drivers installed. I was able to find some of the commands the scanners will recognize. I used a baudrate of 115200. This is a quick test so it is only a partial list. I only tried the 396XT commands.

536HP

MDL
MDL,BCD536HP

VER
VER,Version 1.02.03

SQL
SQL,2

VOL
VOL,18

KEY,M,P
KEY,OK

KEY,M,P
KEY,OK

PWR
PWR,96,08523000
PWR
PWR,418,08572875
PWR
PWR,412,01625500

STS
STS,001100,               22:21        ÀÁ¬*    ,,               Jan29                ,,Quick Search                        ,, 162.5500MHz                    ,, RANGE   25.0-1300.0MHz  Auto       ,, ÈÉÊ             <F+SYS to SCAN>œžŸ,,1,0,0,0,,,5,OFF,1
STS
STS,00111, F0:---------- 22:22       ÀÁ¬*    ,, S0:---------- Home                 ,,Commonwealth Of Massachusetts     ,,Metro Boston 700 Overlay            ,,ID Scanning...                      ,,1,1,0,0,,,5,OFF,1
STS
STS,00111, F0:---------- 22:22        ÀÁ¨©    ,, S0:---------- Home                 ,,Massachusetts State Police          ,,State Police Troop E - Mass Tu    ,,East Dispatch - Mass Pike / Tu    ,,1,0,0,0,,,5,OFF,1

GLG
GLG,,,,,,,,,,,,
GLG
GLG,0461.2000,FM,0,0,Essex,Essex County Agencies - Ambulance Services,Action Ambulance North Operations,0,1,,,NONE
GLG
GLG,1109,NFM,0,0,Cambridge,Cambridge Police,Cambridge Police Patrol 1,1,0,,,NONE
GLG
GLG,3075,NFM,0,0,Metro Boston 700 Overlay,Boston Fire,Boston Fire Ch1 Patch,1,0,,,NONE

JPM,CC_MODE
JPM,OK
JPM,SCN_MODE
JPM,OK

WIN
WIN,85,08516250

436HP

MDL
MDL,BCD436HP

VER
VER,Version 1.02.07

SQL
SQL,2

VOL
VOL,7

KEY,M,P
KEY,OK
KEY,M,P
KEY,OK

PWR
PWR,145,04605000

STS
STS,00110110110000, F0:---------- 22:55    ,, S0:---------- Jan29    ,________________________,Suffolk                 ,,                        ,,Full Database           ,________________________,City of Boston - Boston ,,Police                  ,,                        ,________________________,Patrol District E-5/E-  ,,13/E-18 (Jamaica Plain,,  460.4000MHzDCS346 ,,Law Dispatch            ,________________________,                        ,,Tag:--.--.---           ,,1,0,0,0,,,0,OFF,0

STS
STS,00110110110000, F0:---------- 22:55    ,, S0:---------- Jan29   ,________________________,Civil Air Patrol        ,,                        ,,Full Database           ,________________________,Civil Air Patrol        ,,                        ,,                        ,________________________,Scanning...             ,,                        ,,                        ,,                        ,________________________,                        ,,                        ,,0,1,0,0,,,0,OFF,0
STS
STS,00110110110000, F0:---------- 22:56    ,, S0:---------- Jan29    ,________________________,Businesses              ,,                        ,,Full Database           ,________________________,Media & Fire Buff       ,,                        ,,                        ,________________________,Metro radio system      ,,                        ,,  463.8500MHz C151.4 ,,Media                   ,________________________,                        ,,Tag:--.--.---           ,,1,0,0,0,,,0,OFF,0
STS
STS,00110110110000, F0:---------- 22:57    ,, S0:---------- Jan29    ,________________________,Businesses              ,,                        ,,Full Database           ,________________________,Media & Fire Buff       ,,                        ,,                        ,________________________,Metro radio system      ,,                        ,,  463.8500MHz C151.4 ,,Media                   ,________________________,                        ,,Tag:--.--.---           ,,1,1,0,0,,,0,OFF,0
STS
STS,00110110110000, F0:---------- 22:57    ,, S0:---------- Jan29    ,________________________,Massachusetts State     ,,Police                  ,,Full Database           ,________________________,State Police Troop A -  ,,North Greater Boston    ,,Metro Boston S        ,________________________,North Dispatch - A, A1, ,,A2, A3, A6              ,,                        ,, TGID:33168             ,________________________,                        ,,Tag:--.--.---       ,,1,1,0,0,,,0,OFF,0

JPM,CC_MODE
JPM,OK
JPM,SCN_MODE
JPM,OK

GLG
GLG,,,,,,,,,,,,
GLG
GLG,0453.3500,NFM,0,212,Suffolk,City of Boston - Boston Police,Housing Police,1,0,,,NONE

WIN
WIN,87,08526875

73 Eric

 

[n3617400]

check this:
cdb,M,0
cdb,2
rdb

 

[EricCottrell]

Hello,

Commands are a mixture of DMA scanner commands as I posted earlier and Home Patrol 1 commands. This is interesting as the DMA scanner commands do not require a checksum, but the RMT ones do. RMT STATUS does not work, likely because it is similar to the GLG command.
RMT MODEL returns the model. There is a problem with RMT VERSION as it returns the last data sent by the unit (possible buffer problem?).

I am going to test to see if I can use this as a voice radio with Unitrunker.

73 Eric

 

[n3617400]

cdb,M,0 - disable CRC check in HP1

 

[EricCottrell]

check this:
cdb,M,0
cdb,2
rdb

Hello,

Debugging commands? What does the cdb,2 and rdb do?

73 Eric

 

[n3617400]

not documented commands.
cdb,2 - set extended mode 2
rdb - exit from extended mode (return to mode 0)

 

[n3617400]

sorry, "RDB" - upper case

 

[EricCottrell]

Hello,

I was able to use the 536 as a voice channel radio with Unitrunker. It can decode both analog and P25 Phase 1. I do not know about TDMA voice channels.

I configured the scanner as a BCD996XT.

73 Eric

 

[mciupa]

Thank you Eric, for testing this.

I was wondering about playing with Unitrunker until we can utilize our Discovery Mode.

 

[EricCottrell]

Hello,

The 536 beeps every time Unitrunker changes the frequency, so I turned off key beeps. I remember having to do this for a previous scanner as well. I have not tested the 436 yet.

Since the Analyze functions are not present in the current firmware, you can not use the 436/536 for receiving the control channel.

The only RMT commands so far are RMT MODEL and RMT VERSION.

The AUF commands returned values so I tried the HomePatrol Audio Feeding Sample Program. It works!

73 Eric

 

[AZScanner]

I'm curious about the checksum value listed in the protocol - has anyone figured out how to calculate that and can it be explained in English instead of "Engrish"? I honestly can't wrap my head around how that checksum value is supposed to be calculated.

Thanks,
-AZ

 

[n3617400]

pdf

For audio feeding command and remote command, [SUM] (2 byte) will be added as the last parameter. [SUM]
means checksum, and checksum method as next.

*Checksum Method
For example: AUF[¥t]STS[¥t][SUM][¥r]
Checksum target: “AUF[¥t]STS[¥t]”,
Calculate Process: SUM = 0;
SUM += “A”;
SUM += “U”
…….
SUM += “S”;
SUM += “[¥t]”

 

[Dafe1er]

can it be explained in English instead of "Engrish"?

Agreed. What are you guys talking about here? Is there a link to somewhere to explain and start me in the direction of understanding you?

 

[EricCottrell]

I'm curious about the checksum value listed in the protocol - has anyone figured out how to calculate that and can it be explained in English instead of "Engrish"? I honestly can't wrap my head around how that checksum value is supposed to be calculated.

Thanks,
-AZ

Hello,

The checksum method is on page 4 of the Homepatrol Remote Control Speciification, but it is not completely clear. Tabs separate the fields in the frame. The numerical value of the ASCII characters are added together up to and including the Tab character before the SUM. The SUM is this numerical value represented by a string of ASCII digits. The document says SUM is two bytes, which means it is modulo 65536 rather than it being two bytes in the message.

73 Eric

 

[AZScanner]

Hello,

The checksum method is on page 4 of the Homepatrol Remote Control Speciification, but it is not completely clear. Tabs separate the fields in the frame. The numerical value of the ASCII characters are added together up to and including the Tab character before the SUM. The SUM is this numerical value represented by a string of ASCII digits. The document says SUM is two bytes, which means it is modulo 65536 rather than it being two bytes in the message.

73 Eric

Thanks Eric. I thought they were probably adding together the ASCII values to create the checksum, but as you said the document doesn't make it clear. I'll have to give that a try when I get the new scanner and see what I can make it do.

-AZ

 

[frazpo]

Agreed. What are you guys talking about here? Is there a link to somewhere to explain and start me in the direction of understanding you?

http://www.netfiles.ru/share/linked/f1/BCD396T_Protocol.pdf

 

[n3617400]

boring documented official protocol
unofficial protocol is more diverse

 

[frazpo]

Yep. but I simply responded to a simple request.


Sent from my iPhone using Tapatalk. There will misspellings!

 

[UPMan]

boring documented official protocol
unofficial protocol is more diverse

But not complete. Once we complete the WiFi App and associated functions, we'll release the non-proprietary command set.

 

[EricCottrell]

I appreciate Uniden providing the serial command documentation for their scanners. It was a lot easier to add new Uniden scanners to Trunker compared to Icom PCR or GRE radios. The unpublished stuff tends to be things that are more useful for engineering debugging and factory testing anyway. I am a Senior Embedded Software Engineer for Testing Equipment, so I am familiar with factory commands.

One capability I would like is to command the radio to listen to either Slot 0 or Slot 1 of a TDMA transmission. This would allow an external Trunker-like program to specify the slot to decode when both slots are active.

I am looking forward to the new firmware release this week.

73 Eric