Log P25 Control Channel data

[Ozzychaser]

Hello,

I would like to log the complete raw data from a P25 system. I have tried some software such as Unitrunker etc but the formatted logs it produces do not appear to contain the full data sent.

I would also like to do this to voice calls but I suspect Control Channel data would be easier to start with.

I don't mind software for windows or Linux.

I am still waiting for a RTL dongle to arrive, however I do have a HackRF One.

From looking around some of the USRP's have a network port that the data may be able to be dumped into Wireshark etc but it looks like GNURadio and RFtap combo may achieve the same result.

Has anyone had any experience dumping the raw data?

Thanks in advance,
James.

 

[maus92]

OP25 may work for you as it has differing levels of log verbosity depending on settings. Perhaps the @boatbod or @wgbecks will chime in.

 

[dave3825]

I would like to log the complete raw data from a P25 system. I have tried some software such as Unitrunker etc but the formatted logs it produces do not appear to contain the full data sent.

I would also like to do this to voice calls but I suspect Control Channel data would be easier to start with.

Exactly what data are you looking to log?

 

[Ozzychaser]

Thanks for the info @maus92 I will look into it.

@dave3825 I am interested in the general workings of the system. I have heard they can all be set up differently and looking through the Unitrunker logs there is quite a bit of unknown and ignored packets (Granted I am using a older version) . I have the TIA documents and have tried to manually go through the logs but some data seems to be missing.

I get a lot of data such as below:

E 52 FA 79 6A 79 6A 9A 9A 79 99 78 E8 discarded
E 6A 29 6A 9A E8 A8 60 AB EB 28 A8 A5 discarded
E-BC 2A F9 6A 29 69 6A 1A 28 AB 6B EB !?
E-DA FA 2A 89 6A D9 7B E8 C9 C9 E9 2A discarded
E-BA 18 1A 19 D9 09 09 09 14 AA 25 A8 !?
E-DA 48 BA 08 AA EA 1A 08 1A A8 D9 E8 discarded
E 79 6A 79 6A 1A EB 08 78 EA F4 A5 A9 discarded
E 2A EA 18 A8 AB A0 D3 09 02 E9 EB A8 !?
E-EE F2 FC 2A 19 6A 29 6A 9A 8B 69 5F discarded2023-05-09 00:00:00 0 of 39 (0%)

E 2A FA DA 79 6A EA 1A EB A8 A0 A8 AB !?
E 6A 2A EA 3A 9A 1B B8 39 EA F4 A9 25 discarded
E 29 68 2A 2A 2A 2A EA 98 C8 48 08 DB !?
E 6A 29 6A 7A DA EA E8 2A F5 A9 25 A9 discarded
E-DA 3A EA 08 C9 A8 1B A8 CB C9 25 A9 discarded
E 12 06 12 1A 7A 7A E8 BA EA 1B CB 53 !?
E 22 4A 4A 2A 2A 7A 2A 4F 19 39 79 EB !?
E 6A 2A 2A 1A 9A AA A0 AB A8 2B 14 A9 discarded
E 2A FA 1A 1A 79 6A 9A 9A 99 C8 89 EB !?
E 1A 79 6A 1A 9A 4F 0B 9B AA F0 89 4A !?
E 6A 99 6A 8A E0 88 A8 AB A8 49 A9 E9 discarded
E-C0 22 F2 DA 2A 2A 4A DB DA D8 69 2C discarded
E 29 6A 7A 79 6A EA FA 4A 89 AC 2A 8A !?
E 78 6A EA 99 5F AA 8B 6A A8 A8 A8 AB discarded
E-F2 E9 79 69 69 69 6A 1B 78 D0 A9 BB discarded2023-05-09 00:00:01 0 of 39 (0%)

E 6A E9 6A 1A 4F 52 FB F5 49 39 25 A5 discarded
E-99 6A CB A8 A9 E9 E9 25 A8 A5 A2 E8 !?
E-EA C2 6A 1A 4A 2A 2A EA 0B A9 99 EA discarded
E 6A FA 28 BA 9A D8 C8 CB 0B DA F8 C9 discarded
E 2A 9A 1A 4F 0B 98 39 2B 38 6B AB A8 !?
E 1A 32 DA DA 29 69 6A 9A 1A DB A8 A0 !?
E 2A 7A FA 79 6A 9A 1A EA C8 AA EA AA !?
E 6A F9 6A EA AA 48 6A AA A0 A8 A5 A9 discarded
E 34 BE 3B 6E 6A 7A 9A 7A 9B D9 F9 99 !?
E 12 4A 2A E9 6A EA 1B C9 C8 AB 6B 0B !?
E 2A 2A EA 2B 9B 89 AA 08 49 38 69 2B !?
E 2A 3A 3A 1A DA 2A DA 9A 9A 9B 4B 6B !?
E 1A DA B9 69 6A 7A 4F 50 A5 6A A8 EB !?2023-05-09 00:00:02 0 of 39 (0%)

E-EA 7A 28 BA 9A 14 A9 89 F4 AA E8 AA discarded
E-CE C2 62 E2 6A 8A 8A 2A 4F 2A 19 F4 discarded
E 4E EA 62 B9 68 BA EA 38 39 2B C8 39 discarded
E-D9 6A 7A 2A EA 0F 1B 2A 18 3A C9 A9 discarded
E-D2 72 0E DE 6A 1A 7A 2A EA 1A 4A 4A discarded
E-B9 6A AA D9 6A 99 6A EA 8B E8 2A A8 !?
E 32 7A 4A 2A 1A FF 14 A8 28 A8 28 A8 !?
E 7A DA FA F2 1A 2A 2A EA 1A 1A 28 AB discarded
E-DA AA A9 6A D9 6A 4A 88 AA AB 6A AB discarded
E-F9 6A 2A EA 1A DB B9 28 18 0A C9 E5 discarded
E 2A 3A BC 2A 0A 7A 29 6A EA C8 AA E0 !?2023-05-09 00:00:03 0 of 39 (0%)

E 2A AA AA 29 6A 1A EA 8A A8 AC 2A E0 !?
E-DA 1A EA 99 6A A8 68 AB E8 AB E9 E5 discarded
E 2A D3 D4 28 34 2A FA 7A 78 B8 BA 9A !?
E-BE B2 2E DA 2A 28 BA 7A 99 D8 00 D3 !?
E 6A 7A 7A 1A 2A 1A 4F 53 09 95 8B CA discarded
E 38 29 54 2A 1A F9 69 69 5B DB D9 25 !?
E 79 6A 2A EA 8A EA EA 1B 8B 9B 1B 1B discarded
E 49 6A 7A EA 9A 4F 1B 3B 7B A9 E8 A8 discarded
E-AA 2A 3A F2 F2 6A 1A 79 6A EA 1A D9 !?
E 28 22 18 2A 2A EA 7A 2A EA 98 CB 0F !?
E-9A 2A EA 9A 1A B8 A8 A9 89 8B 4B EB !?
E 7A 4A 4A FA 79 6A 2A 2A 9A 1A 00 A8 discarded2023-05-09 00:00:04 0 of 39 (0%)

E 7A 2A 7A 7A 99 6A EA 19 A9 B9 29 99 discarded
E 6A EA 8A 9A 1A 99 C8 09 08 19 29 E9 discarded
E-BA FA BA EA BA FA DA 7A 99 6A 9A 4F !?
E-AA BA 3A BA A9 6A 2A 9A 1A 9A AA A0 !?
E-DA 2A 29 6A 79 6A BA 4A EA A0 B8 49 discarded
E-BE BD 5E 0A 3A 3A DA 7A 3A 9A EA C9 !?2023-05-09 00:00:05 0 of 39 (0%)

E 3C 2A 1A 2A 79 6A EA 1A 4F 09 0F 09 !?
E 7A 29 6A 7A EA 1A 18 F9 19 0B 89 8B discarded
E 32 FA 2A AA 79 69 6A EA 9B D9 A8 A8 !?2023-05-09 00:00:06 0 of 39 (0%)

E 6A 2A 29 6A 29 6A 9A CA 00 AA F4 A0 discarded
E 6A 29 6A 2A 9A FB 8B 8B CA AA EB 69 discarded
E 4E 1E 3A 19 6A 79 68 BA DB D8 4B 55 discarded
E 69 6A 4A 2A 99 6A EA 89 8B 08 F9 A9 discarded
E 6A 29 6A 1A 09 C8 89 9A A0 A8 65 A5 discarded
E 7A 4A EA 0A 1A 18 0A 39 0F 18 1A C9 discarded
E 6A D8 AA 9B AB CB FF A9 CB E5 A9 E9 discarded
E 18 B9 AB EB CB EB CB 69 CA E2 E8 EA !?
E 12 6A 2A 9A 7A EA EB 09 08 38 19 CB !?
E-9A DA 2A 1A D2 F4 AA FB F8 F4 A8 AA !?
E-BA 9B DB 88 68 EA F4 AB A8 A5 AB A8 !?
E 2A 3A 1A 1A 7A 79 6A 99 54 AB EB EB !?
E 28 2A 4A 2A EA 1A CB 88 E8 19 2B E0 !?2023-05-09 00:00:07 0 of 39 (0%)

E 4A 29 58 DA CB CA 88 28 A9 28 A8 6A discarded
E-EE EE 0A 18 2A 29 69 6A 9A EA 99 F9 discarded
E 2A 2A AA 79 69 6A 1A 1A A9 C9 25 AC !?
E 2A 8A 1A 9A EA 09 89 89 E5 53 05 AC !?
E-BA BA BA 4E EA DA 1A EA 9A EA BA 40 !?
E 46 22 56 6A 4B EA 2A 9A 9B 99 39 19 discarded
E 72 6E 4A 7A EA 28 19 2B 09 99 39 19 discarded
E 4E C2 46 1A 7A 7A 4A 9A 4F 2B 9B 18 discarded2023-05-09 00:00:08 0 of 39 (0%)


From what I have read the first 2 bits at least seem to be missing, I am however just starting to take a look at the information.

Logging the voice channels as raw data is just more of a give it a go

I use the affiliation logs more than anything else at the moment as the SA-GRN has a lot of content that cannot be listened to.


Thanks,
James.

 

[Ozzychaser]

I know the Fire / Ambulance / Police use Tablets with a 4G connection so no private data is sent over the P25 system but I have just started looking at SDRTrunk and noticed what appear to be Network Addresses pop up so I have no idea what that is.

Just pulled this line from a Unitrunker log:

E 02 00 51 55 42 94 11 B3 4E 2F 00 50 Group Voice Grant Update G 4294 on channel 5-155(853.13750) G 4E2F on channel 1-1B3(853.72500)

Ignore the frequency as we use a 400Mhz system. I assume when I run a later version of Unitrunker etc it will show the data correctly.

Group Voice Channel Grant Update (GRP_V_CH_GRANT_UPDT)

This packet may be used to present current group voice call activity channel grant
updates on the outbound control channel. This format can present up to two(2) unique
group voice channel assignments in the single packet. This packet is to be used on ly
for updating members to the activity of the identified group upon the specified channel,
but will not indicate any special characteristics of the group voice call (i.e. transmitting
unit identity, call options, etc.) This information, if necessary in the update, requires the
previous Group Voice Channel Grant packet format, or may be presented to the group
members upon the specified working channel of the call. The message informs "late
entry" units, i.e. , those just entering the coverage area, or SUs just powering up, of the
Group Calls in progress.

---------------------------
Octet 0 LB | P | Opcode
--------------------------
Octet 1 Manufacturer's ID
--------------------------
Octet 2
Octet 3 Channel
--------------------------
Octet 4
Octet 5 Group Address
--------------------------
Octet 6
Octet 7 Channel
--------------------------
Octet 8
Octet 9 Group Address
--------------------------
Octet 10 TSBK
Octet 11 CRC
--------------------------
Bit 7 6 5 4 3 2 1 0

In My reading, Group Voice Channel Grant Update | GRP_V_GRANT_UPDT Uses a Opcode of %000010 (Binary)

= the 02 in Hex at the start of the line Having missed the LB (Last Block flag) and P (Protected Block flag)
= the 00 indicating a standard P25 message

etc (Please excuse the bad ASCII representation above).

Admittedly a lot of this is probably driven by my "need to know how it works" due in part to my Autism but it we all have our "quirks".

Thanks again
James.

 

[Ozzychaser]

I have got OP25 Up and running with Verbosity set to 11 and have been reading the logs. Although the logs are not raw data they have been interesting to read and I will continue to run it generating logs. I noticed that there is a option to output to Wireshark and I will play with that shortly. I had a quick play with the RAW logging file but there didnt appear to be much information, can someone please let me know if that is for voice packets only?. I have not used OP25 to actually track Talkgroups etc yet so haven't had the chance to check.

I did see a video were a radio was keyed up and raw packets shown on the computer screen, this was at a conference by the looks and I think GNURadio.

Cheers,
James.

 

[AB5ID]

I think there is a program within OP25 that will take the raw data and make it a lot more presentable with statistics and talk groups sorted.

 

[wgbecks]

I am not exactly clear on the extent of data it is that you want to log but perhaps your needs might be served if you were to explore
installing and using Osmocom op25. This repo includes SQL logging referred to as "OPLOG" that collects and extensive list of system data.

Posted below are a sample of screen captures to view. I would entertain answering any questions if this look like it has the type of data
collection that you’re looking for. BTW, log data collected in OPLOG can be exported as CSV files for offline processing and use.

OP25 Application GUI





OPLOG







CALL DETAIL



GROUP JOINS



Bill

 

[Ozzychaser]

Thank you to everyone that has had input so far. @wgbecks that looks like great and I will run that for sure. The logging I was looking to do was the complete raw packets - no formatting or rejection of packets etc. This has also got me interested in doing the same on all the channels (voice packets etc).

Since the closest site to me only uses 6MHz of bandwidth, wouldn't it be possible to log control data and voice channels with a single receiver (as long as the data does not exceed USB Bandwidth)

I am still waiting for the RTL dongle to arrive, I have the HackRF One and a different RTL Dongle That I usually use with my phone for ADS-B and Airband audio but it is not compatible with all SDR software (TrunkSDR and Unitrunker) .

I have also purchased a couple of Intel NUC's ready to install Linux and probably Windows 10 (on different NUC's) , I am enjoying exploring the data I can get so far and hopefully complete logging will be available soon.

I have seen some traditional scanners that can dump data, The system I am looking at is P25 Phase 1 C4FM and have thought something like a PRO-96 and Pro96com would work on this system? Though the packet dump screen seems to log the same as Unitrunker etc.

 

[Ozzychaser]

I have taken this pic from a Youtube video that some research was being done on P25 and it appears to be using OP25 but logging more information than maximum verbose output (verbose level 11) shows in its log file. I know the log file is displaying formatted and annotated data so maybe there is not too much different.

Also in relation to the logging of voice packets, I wanted to look into how compressing the data file would go, compared to recording to mid / high quality MP3. Unitrunker's log files shrink by a huge amount and if the voice data files can be parsed to a codec to playback it may be better audio at the same or smaller file size?.

 

[wgbecks]

Although Osmocom op25 is packaged with installers to build the applications on Linux systems installing GNU Radio Versions 3.7, 3.8, 3.9,
and 3.10, the SQL (OPLOG) logging no longer runs on later Ubuntu releases above 18.04.6 due to changes (upgrades) in the packages that would then make it necessary to perform updates to maintain operational compatibility.

The data collection process handed off to OPLOG works independently of user defined logging verbose configurations. OP25 will run using
a single SDR if so desired with the caveat being that you would experience gaps in control channel logging if op25 is also configured to
follow the voice service (trunks) channels.

Of course, there are also provisions to configure two or more SDR’s that can be dedicated to control channel (CC) and Voice Channel (VC) functions. Another work around if the focus is strictly on logging would be to simply configure a whitelist to prevent the following of voice
traffic to keep a single SDR parked on the control channel.

OP25 does not archive decoded audio but this can be achieved easily using a companion application called Liquidsoap to process the audio whereby you can stream, provide local speaker audio, yet still have to ability to create audio archives for later review and is a feature that
I regularly make use of for my installations.

The screen captures below depicts access to the audio archives as they are seen in a web browser.

Listing of audio archives by date.



Listing of audio archives by hour within a day

 

[Ozzychaser]

@wgbecks Thanks for the heads up on Ubuntu and the screenshots. I will purchase more RTL dongles once I confirm the seller has real or at least working dongles (according to the "how to spot fakes" they "should" be genuine).

I have had a bit of a learning curve, the system I am looking at was upgraded years ago and my old (dos) Tunker no longer worked..

 

[wgbecks]

I would definitely recommend using the NUC and Ubuntu 18.04.6 Desktop if you decide to build the project as you'll need the CPU and
memory resources to achieve good performance. There is a bit of a learning curve to building either of the two popular op25 repos, so be
sure to peruse the README's and don't hesitate to post questions or PM if you need any help along the way.

Good luck!

 

[CanesFan95]

I was able to get logging working on Osmocom on Ubuntu 20.04 per this write-up: OP25 Windows 10 Basic Setup Guide.

 

[RaleighGuy]

If you have a scanner with IF output (the WS1080, WS1098, TRX scanners are what I use) then Pro96Com works to log/display the info.

Pro96Com - Control channel decoder for P25 Trunked Radio Systems

 

[boatbod]

OP25 boatbod is capable of capturing and saving demodulated dibit symbols to a file, so if you are looking for a raw, unframed, undecoded data stream that should amply fit your needs. It probably would be too hard to extend the code so that your could capture the data in frames, but I guess it really depends what you want to do.

 

[Ozzychaser]

Thank you everyone for your help and responses so far, @boatbod that sounds perfect. I will give it a try as soon as I can. What type of file are they saved to?.

I have received the dongle ordered and it was a counterfeit but it still works for some software I have tested it with but not others. I know the HackRF One doesn't have the best RX performance but the counterfeit RTL dongle is still has better performance!.

I will order from the RTL-SDR Blog Ebay store (I didn't know they had one until today) when I have time.

I am single at the moment so as long as the bank stays happy I can keep ordering toys lol..

Thanks again everyone,
James.

 

[boatbod]

Thank you everyone for your help and responses so far, @boatbod that sounds perfect. I will give it a try as soon as I can. What type of file are they saved to?.

I have received the dongle ordered and it was a counterfeit but it still works for some software I have tested it with but not others. I know the HackRF One doesn't have the best RX performance but the counterfeit RTL dongle is still has better performance!.

I will order from the RTL-SDR Blog Ebay store (I didn't know they had one until today) when I have time.

I am single at the moment so as long as the bank stays happy I can keep ordering toys lol..

Thanks again everyone,
James.

Any generic TCXO RTL device should work just fine for what you're trying to do.

Setup in multi_rx.py is probably the easiest to manipulate since it's a text based cfg.json file rather than a bazillion command line options. The parameter you'll need is "raw_output" which will need to be added to the "channels" section. Output is raw binary, no header, one byte per dibit. My op25 distro also has a utility called "scan4sync" which will read these raw files and report any of the well-known sync sequences it encounters along the way.

PM me if you need any assistance once you get around to setting it up.

 

[Unitrunker2]

I get a lot of data such as below:

E 52 FA 79 6A 79 6A 9A 9A 79 99 78 E8 discarded
E 6A 29 6A 9A E8 A8 60 AB EB 28 A8 A5 discarded
E-BC 2A F9 6A 29 69 6A 1A 28 AB 6B EB !?
E-DA FA 2A 89 6A D9 7B E8 C9 C9 E9 2A discarded
E-BA 18 1A 19 D9 09 09 09 14 AA 25 A8 !?
E-DA 48 BA 08 AA EA 1A 08 1A A8 D9 E8 discarded
E 79 6A 79 6A 1A EB 08 78 EA F4 A5 A9 discarded
E 2A EA 18 A8 AB A0 D3 09 02 E9 EB A8 !?
E-EE F2 FC 2A 19 6A 29 6A 9A 8B 69 5F discarded2023-05-09 00:00:00 0 of 39 (0%)

Hi James;

That output tells me you are ...

1. likely not tuned to the control channel (may need SDR calibrated)
2. using a very old version of the software.
3. likely using discriminator audio as opposed to a direct SDR interface.

Version 2.1 will interface directly with a HackRF. Once calibrated - it should give readable output.

 

[Unitrunker2]

Here's a snippet from a local system:

00:00:00.002 133 7   09 90 0F 00 00 00 00 00 00 00 EF 7F Scan Marker 60 microslots
00:00:00.033 133 7  -B4 00 35 05 A0 14 01 CA 11 A0 12 FE Identifier Update 3 Base 150100000 Spacing 2500 Tx Offset -900000
00:00:00.136 133 7   34 00 45 05 A0 14 01 E9 4F AC 75 6C Identifier Update 4 Base 160337500 Spacing 2500 Tx Offset -900000
00:00:00.174 133 7   30 00 00 04 2A 2E 21 2F 7E 32 31 FE Synchronization Broadcast 2023-01-01 05:59 (maybe) MMU0 MC0 Slot 7730
00:00:00.178 133 7  -8B 90 00 00 00 00 00 00 04 59 0B 1B BSI Morse ID channel 0-459(857.96250)         
00:00:00.209 133 7   02 00 03 8D 12 63 03 1D 12 A6 E4 EA Group Voice Grant Update G 1263 on channel 0-38D(856.68750) G 12A6 on channel 0-31D(855.98750)
00:00:00.236 133 7   3A 00 00 31 3E 01 14 04 59 70 E5 11 RFSS Status Broadcast LRA 00 Sys 13E Sub 01 Site 14 channel 0-459(857.96250) (data,voice,registration) Connected Transmission
00:00:00.275 133 7  -BB 00 00 BE E0 91 3E 04 59 70 12 08 Network Status Broadcast LRA 00 WACN BEE09 Sys 13E channel 0-459(857.96250) (data,voice,registration)
00:00:00.302 133 7   3C 00 00 31 3E 01 2B 00 67 70 94 F3 Adjacent Status Broadcast LRA 00 Sys 13E Sub 01 Site 2B cfVA channel 0-067(851.65000)(data,voice,registration)
00:00:00.302 133 7   00 00 44 02 F1 10 E8 A3 4D 08 A9 9A Group Voice Grant channel 0-2F1(855.71250) I A34D08 -> G 10E8 Enc (4 priority, packet protected)
00:00:00.329 133 7  -85 90 40 80 C0 00 00 00 08 00 5F 47 Channel Access Information Broadcast AM N TDMA Y FRA 2 RRA 3 Zone 0 CA 0 PDR 0
00:00:00.375 133 7   39 00 01 14 04 F9 04 05 5D 04 4E E9 Secondary Control Channel Broadcast Sub 01 Site 14 channel 0-4F9(858.96250)(backup control channel only) channel 0-55D(859.58750)(backup control channel only)
00:00:00.379 133 7   00 00 44 02 F1 10 E8 A3 4D 08 A9 9A Group Voice Grant channel 0-2F1(855.71250) I A34D08 -> G 10E8 Enc (4 priority, packet protected)
00:00:00.412 133 7  -82 00 03 8D 12 63 03 1D 12 A6 00 DE Group Voice Grant Update G 1263 on channel 0-38D(856.68750) G 12A6 on channel 0-31D(855.98750)
00:00:00.445 133 7   16 00 00 40 FF FF FF FF 00 01 5F CB SNDCP Data Channel Announcement Explicit Opt 00 AA=0 RA=1 DAC (data group) 0001
00:00:00.476 133 7   02 00 02 F1 10 E8 02 F1 10 E8 5C D0 Group Voice Grant Update G 10E8 on channel 0-2F1(855.71250) G 10E8 on channel 0-2F1(855.71250)
00:00:00.476 133 7  -B3 00 53 A5 80 64 09 15 75 62 1C 70 Identifier Update 5 Base 762006250 Spacing 12500 Tx Offset 30000000 Slots 2
00:00:00.518 133 7   09 90 15 40 00 00 00 00 00 00 9E 5B Scan Marker 85 microslots
00:00:00.542 133 7   3D 00 03 22 D0 32 0A 25 10 A2 63 A0 Identifier Update 0 Base 851006250 Spacing 6250 Tx Offset -45000000
00:00:00.581 133 7  -BD 00 13 25 E0 32 09 15 75 62 FF 02 Identifier Update 1 Base 762006250 Spacing 6250 Tx Offset 30000000
00:00:00.626 133 7   30 00 00 04 2A 2E 21 2F 7E 6E AA 87 Synchronization Broadcast 2023-01-01 05:59 (maybe) MMU0 MC0 Slot 7790
00:00:00.628 133 7   02 00 03 8D 12 63 03 1D 12 A6 E4 EA Group Voice Grant Update G 1263 on channel 0-38D(856.68750) G 12A6 on channel 0-31D(855.98750)
00:00:00.672 133 7  -BA 00 00 31 3E 01 14 04 59 70 01 25 RFSS Status Broadcast LRA 00 Sys 13E Sub 01 Site 14 channel 0-459(857.96250) (data,voice,registration) Connected Transmission
00:00:00.706 133 7   3B 00 00 BE E0 91 3E 04 59 70 F6 3C Network Status Broadcast LRA 00 WACN BEE09 Sys 13E channel 0-459(857.96250) (data,voice,registration)
00:00:00.709 133 7   05 90 40 80 C0 00 00 00 08 00 BB 73 Channel Access Information Broadcast AM N TDMA Y FRA 2 RRA 3 Zone 0 CA 0 PDR 0
00:00:00.742 133 7  -B9 00 01 14 05 5D 04 05 99 04 96 8F Secondary Control Channel Broadcast Sub 01 Site 14 channel 0-55D(859.58750)(backup control channel only) channel 0-599(859.96250)(backup control channel only)
00:00:00.831 133 C   37 FD 00 00 31 3E 81 3C 01 44 8D 97 Adjacent Status Broadcast (Extended) WACN BEE09 Sys 13E Sub 01 Site 44 TX 3-E93(159.42750) RX 3-610(153.98000)c f V A (data,voice,registration)
00:00:00.831 133 C  -3E 93 36 10 70 BE E0 90 D3 E1 15 19
00:00:00.835 133 3 TDU