🚀 go-pugleaf

Na pukaczy! :) Wystarczy wysyłać do Ericssona AT+CPAS np. 
co pół sekundy przy 9600 bps, bez kontroli parzystości, 
dziewięciobitowo z jednym bitem stopu (czyli osiem danych), 
i jak się dostanie odpowiedź +CPAS: 3 to odesłać ATA, 
a zaraz ATH. Na razie znalazłem na ten temat tyle:

#v+
     +-----------------------------------------------------------+
     |Pin|Designation|Function                        |Direction |
     |---+-----------+--------------------------------+----------|
     |1  |AFMS       |Audio Out                       |Out       |
     |---+-----------+--------------------------------+----------|
     |2  |ATMS       |Audio In                        |In        |
     |---+-----------+--------------------------------+----------|
     |3  |EXTAUD     |External Audio Accessoriy Sense |In        |
     |---+-----------+--------------------------------+----------|
     |4  |AGND       |GND (analog)                    |-         |
     |---+-----------+--------------------------------+----------|
     |5  |PORTHF     |Portable Hands Free             |In        |
     |---+-----------+--------------------------------+----------|
     |6  |MUTE       |Mute                            |Out       |
     |---+-----------+--------------------------------+----------|
     |7  |VPPFLASH   |Test/Flash                      |In        |
     |---+-----------+--------------------------------+----------|
     |8  |VDD        |Logic Reference (+5V)           |Out       |
     |---+-----------+--------------------------------+----------|
     |9  |TFMS/DFMS  |Data Out                        |Out       |
     |---+-----------+--------------------------------+----------|
     |10 |GND        |GND (DC and digital)            |-         |
     |---+-----------+--------------------------------+----------|
     |11 |TTMS/DTMS  |Data In                         |In        |
     |---+-----------+--------------------------------+----------|
     |12 |DCIO       |DC I/O                          |In/Out    |
     +-----------------------------------------------------------+

     Short description

      1. AFMS - Audio From Mobile Station
      2. ATMS - Audio To Mobile Station
      3. EXTAUD - External Analog Audio Accessory Sense. 0V to enable
      4. AGND - Analog GND
      5. PORTHF - Portable Hands Free Sense. OV to enable Hands Free
      6. MUTE - Music Mute. +5V while scrolling or during a conversation.
      7. VPPFLASH - +5V to Enable test mode, +12V to Enable test mode and set
         Flash voltage, during power up.
         In this mode the serial line works at 115200 instead of the standard
         9600.
      8. VDD - Logical Reference (+5V). Used do enable status on accessories
         (over 100mA).
      9. TFMS/DFMS - Terminal adaptor equipment from Mobile Station/Data from
         Mobile Station.
         RS232 serial output at TTL level (0/5V).
     10. GND - Digital and DC GND.
     11. TTMS/DTMS - Terminal adaptor equipment to Mobile Station/Data to
         Mobile Station.
         RS232 serial input at TTL level (0/5V).
     12. DCIO - DC for phone battery recharging and External Accessory power.
         Recharge at +7.2V (600mA).

     NOTES:

   * Pins are numbered from left to right with keyboard up.
   * Comunication are at 9600 n 8 1.
   * Debug messages are text format, have trailing 0x0A0D and appear at
     115200 baud.

  Portable Handsfree Unit

     +----------------------------------------+
     |Pin|Function                 |Value     |
     |---+-------------------------+----------|
     |1  |Earphone                 |16 Ohm    |
     |---+-------------------------+----------|
     |2  |Microphone               |<= 2 kOhm |
     |---+-------------------------+----------|
     |4  |Analog GND               |          |
     |---+-------------------------|          |
     |5  |Connected to GND (Pin 4) |          |
     +----------------------------------------+

  AT command supported and DATA communucation

     These are THE ONLY AT commands supported by the ERICSSON GH688. Marked
     on bold are commands sent and on blue reply received.
     All valid commands are echoed by the mobile phone. ME stands for Mobile
     Equipment, TE stands for Terminal Equipment and TA stands for Terminal
     Adaptor.
     More infos on sh888 AT command are found in the official ericcson AT
     command documentation (pdf).
     NOTE: The sh888 does only support some basic at commands over the
     standard rs232 (without ericsson software). All other
     at commands are only supported after the ericsson software is installed
     because the modem in the sh888 talk IRDA protocoll
     over the wire (see AT*BINARY). So the sh888 is not the right choice for
     non Windows machines which would like to communicate
     via rs232. A direct IRDA connection (without a cable) is no problem for
     all machines speaking IRDA protocoll
     (The ericsson software is only available for windows)

     ' Don't what is the purpose of this
     AT
     OK

     ' GET MANUFACTURER IDENTIFICATION
     ' Implementation: mandatory for TA, optional for ME
     AT+GMI
     ERICSSON

     OK
     AT+CGMI
     ERICSSON

     OK

     ' GET MANUFACTURER MODEL IDENTIFICATION
     ' Implementation: mandatory for TA, optional for ME
     AT+GMM
     1050701

     OK
     AT+CGMM
     1050701

     OK

     ' GET MODEL REVISION IDENTIFICATION
     ' Implementation: mandatory for TA, optional for ME
     ' Returns: YearMonthDayHourMinute,A,B,I,J,T2
     AT+GMR
     YYMMDDHHmm,A,B,I,J,T2

     OK
     AT+CGMR
     YYMMDDHHmm,A,B,I,J,T2

     OK

     ANSWER INCOMING PHONE CALL
     ' This command is only available when ringing.
     ATA

     DIAL PHONE NUMBER
     ' This command only dials voice calls.
     ' Format: ATD<number>;
     ' Returns OK when call is answered
     ATD123;
     OK

     END PHONE CALL
     ' This ends an ongoing phone call
     ATH
     OK

     ' GET BATTERY CHARGE LEVEL
     ' Implementation: optional
     ' Format: AT+CBC=(bcs),(bcl)
     ' (bcs)
     '     0 = ME is powered by the battery
     '     1 = ME has a battery connected but not powered by it
     '     2 = ME does not have a battery connected
     '     3 = Recorgnized power fault, calls inhibited
     ' (bcl)
     '     0 = battery is exhausted, or ME does not have a battery connected
     '     1 ... 100 = battery has 1 ... 100 percent of capacity remaining
     AT+CBC=?
     +CRC: (0,1),(0-100)

     OK
     AT+CBC
     +CBC: 0,100

     OK

     ' GET PHONE ACTIVITY STATUS
     ' Implementation: mandatory when ME can be operated from TE
     ' Return value:
     '     0 = ready
     '     1 = unavailable
     '     2 = unknown
     '     3 = ringing
     '     4 = call in progress
     '     5 = asleep
     AT+CPAS=?
     +CPAS: (1)

     OK
     AT+CPAS
     +CPAS: 0

     OK

     ' CELLULAR INCOMING CALL TYPE INDICATION RESULT CODE
     ' Implementation: mandatory when data or fax calls implemented
     ' Format: AT+CRC=(mode)
     ' (mode)
     '     0 = disables extended format
     '     1 = enables extended format
     AT+CRC=?
     +CRC: (0,1)

     OK
     AT+CRC?
     +CRC: 0

     OK

     'Enter Frame mode
     AT*BINARY
     CONNECT
     ...and the phone is frame connected to the serial port.
     If you dont reply it will send (char in HEX) 02 02 31 0C four times with
     a second of interval. If you keep not replying it will send 02 02 01 01
     four times also spaced a second.

     ' GET/SET FUNCTIONALITY LEVEL
     ' Set to 0 to switch off the phone.
     ' Returns 1 when the phone is on.
     AT*ONOFF=?
     *ONOFF: (0,1)

     OK
     AT*ONOFF?
     *ONOFF: 1

     OK
     AT+CFUN=?
     +CFUN: (0,1)

     OK
     AT+CFUN?
     +CFUN: 1

     OK

     ' Don't know what this is for but a value from 0 to 15 can be used.
     ' I suppose it is for setting baud rate.
     AT*TRANSCH=?
     OK
     AT*TRANSCH=0
     CONNECT
#v-

Fajo. :) Tylko nie ma opisanych komend ATRD i ATWR, 
a na nich mi najbardziej zależy (chcę napisać własny 
soft do swojego starego Ericssona żeby podsłuchiwać 
rozmowy innych komórek w okolicy).

-- 
Gophi * Bofh# 265791 * wysocki.lodz.pdi.net/~adam/
EKG/Gadu #413992 * Member of the PFT Hacking Group
MSISDN Idea 505439030 Plus 691337795 IRCNet: gophi
Want more info? Finger me via gophi@cyberspace.org