Just like Con+ systems, Cap+ systems use LCN, not LSN in the scanner. What you describe are the LSN (slot numbers).
LCN = Highest LSN/2 (i.e. 1, 2, 3 in your above example).
LCN finder will work, but requires enough traffic on the system to "push" the rest channel around. On a slow system, the rest channel can go for hours or longer without ever changing...which can mean it can take a very, very long time to determine all the LCNs.
I spent about 5 hours monitoring the Bass Enterprises system, and it only ever used 2 of the 4 frequencies.
Paul, I've just done another debug run, I'm not getting any voice traffic at all out this 3 frequency Cap+ system while in trunk scan mode, the debug log refers to LCNs from 0001 to 0006 not just 1-3 as programmed, here are some snippets, not in time order, by telling the scanner the 3 frequencies are LCN 1,2,3 does it translate this into these 6 LCNs or is programming incorrect?
I have given up with LCN finder on Cap+ it never got past 1/3
0047199 Data Type: 3 CSBKO: 3E Protect: 0 C-CH: 0002 FID: 10 Call Type: 06 LCN: 0001
0040024 Data Type: 3 CSBKO: 3E Protect: 0 C-CH: 0002 FID: 10 Call Type: 06 LCN: 0002
0088076 Data Type: 3 CSBKO: 3E Protect: 0 C-CH: 0001 FID: 10 Call Type: 06 LCN: 0003
0082916 Data Type: 3 CSBKO: 3E Protect: 0 C-CH: 0002 FID: 10 Call Type: 06 LCN: 0004
0041681 Data Type: 3 CSBKO: 3E Protect: 0 C-CH: 0002 FID: 10 Call Type: 06 LCN: 0005
0040084 Data Type: 3 CSBKO: 3E Protect: 0 C-CH: 0002 FID: 10 Call Type: 06 LCN: 0006