

                The Universal Data Converter
                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~

           Written by:  Hannibal Lecter  ~~~ChUrcH oF ThE nOnConFOrMisT~~~
           ~~~~~~~~~~~~~~~~~~~~~~~~~~~~  -=[     DELAMO LABS INC       ]=-
    """"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
         <NOT THE FUCKING KrAD WaR3Z DuDe...the REAL Hannibal !!!!!!!!!>

        What you will gain from this file is general knowledge of the
    Universal data converter, as well as some general hacking knowledge
    and information explaining the data you will retrieve from this piece
    of Tel-Co equipment.  You will also learn a little about the hardware
    of this piece of shyt, and possibly something you dont already know.

    Enough of that, heres some info:


What IS a UDC?!
"""""""""""""""

        A Universal Data converter (UDC), by Applied Computing Devices,
 was began widespread use in 1979.  A UDC is used primarily in
 connection with a variety of switches, to log everything the switch does,
 and report it to the Central Office in a standard format, allowing the
 monitoring and reporting of a variety of different switches by one processor
 without the need of understanding each individual switch. This lets the
  Telco-Trouble shooters monitor exactly how much traffic is passing
  thru a given switch.  Exact number of calls, busys & fraud attempts, are
  some examples.  A UDC will give detailed reports of such activity, as
 well as hold it in a buffer file which you can view for your own excitement.
  The real purpose of this piece of hardware is to buffer data, convert it
 to a standard format, and send it on it's merry way to the Central Processor.
 Information may be buffered for up to an hour, before being able to be
 recieved by the Central Processor.

Which Switches use a UDC?
"""""""""""""""""""""""""

        Well, apparently, nearly all switches owned by a tel-co use a UDC
 for their daily reports.  Here is a list of the  switches of which I know
  may be connected to a converter:


       At&t Autoplex 100
       ITT/North 1210
       ITT/North NX-1E
       ITT/North "1200" Series (DSS-1)
       GTE GTD-1 (Automatic Electric no. 1 EAX)
       GTE GTD-2 (Automatic Electric no. 2 EAX)
       GTE GTD-3 (Automatic Electric no. 3 EAX)
       GTE GTD-5
       Motorola EMX-250
       NEC NEAX-61
       NEC ND-20S
       Northern Telecom DMS-10
       Northern Telecom DMS-100
       Northern Telecom DMS-200
       Northern Telecom DMS-250
       Northern Telecom DMS-300
       Northern Telecom SL-1  (Seen these around locally)
       Northern Telecom SP-1 PABX
       Stromberg Carlson DCO
       TRW Vidar ITS-4
       TRW Vidar ITS-4/5
       TRW Vidar ITS-5
       Western Electric 5 ESS
       GTE PBX's (GTD-1000, GTD-4600)



General Configurations:
"""""""""""""""""""""""

A UDC may be configured in several ways.  A UDC consists of up to 6 ports.
 Port 0 is usually a dialin line, in which it is connected to a 300/1200
 baud modem, so that GTE employees may call to check their switch
 information in the field.

Port 0 may also be a dedicated line, which is linked to a computer somewhere
important, but if this is the case, you can't have found it anyways, so don't
worry about it. (Unless of course you another indial port possibly 1)

Port 2 is usually the line which is hardwired to the data output of the
switch.  This port recieves the messages of a switch, analyses the data,
buffers it, and waits until it is told to send the data to the CP, which
may be every time the buffer flips, which of course is configured by hardware.

Port 1 & 3-7 are also multi-use ports , which may be configured
 either for a dedicated line, or a standard phone line, just like port 1.
 The difference between this port and port 0 however, is that this port may
  also be used to test lines other than the hardware set report line #.
   More later.

The UDC can be configured (though I have never seen it this way) so that any
 of the six ports can preform the functions instead of the first three.
If you find a UDC, be sure to check all the ports, and not just three.

        The general idea of this box of tin is that it will monitor any
switch, collect data, convert it to a standard data file, and store it in
it's buffer until ready for polling.  When the data is sent out, it is sent
in standard UDC format, regardless of the type of switch, therefore any
switch may be monitored without special equipment, along with any other
types of switches.
        Also, a UDC may be used to test lines within a given area, which
is usefull for breaking up a connection or conversation of a busy line,
by having the UDC test it, thus breaking the connection for it's
communtication test.  NOTE:  This is a very good feature, being that newer
line monitoring systems such as the 4TEL line testing systems can test lines
without breaking connections.  Nice, but no good for us!

Yeah Great what the ?#!$ do I do?
""""""""""""""""""""""""""""""""'

        Scan your local area for all numbers ending in 99xx or 00xx, often
(with GTE anyways) the prefix may be something like 446-9988, or something
outright obvious.  Once you find one, you will know, because you will
get one of two things.
Depending on the configuration of the UDC,
you will either begin getting a dump of data, which will go into detail
about the switch information, or you will get a prompt:

*B*>


 When you recieve this prompt, you can make your life easy by typing
 HELP in all caps, for a menu of commands, which will seem important at
 first (don't fool yourself).

Each letter between *'s represents a seperate processor (yes even this tin
box has more than one!  These letters will be in the menu
when you type HELP.  To change processors, you will need to hold control
while pressing the letter of the processor you wish to change to.

Here is a list of commands for each processor:

                        The Basic processor
                        ~~~~~~~~~~~~~~~~~~~

*B*> DATE               Display the system Date

*B*> DATE mm/dd/yy      Set the date to mm/dd/yy

*B*> DIAGNOSTIC         This puts you in debug mode for the UDC's program
                        When typing this command the UDC will respond with
                        "PASSWORD" and will not echo letters.  If the password
                        given is correct, you will get a prompt like this:
                        *B*> DIAG
                        PASSWORD          > I enter the good password<
                        DEBUG 1,3         > 1,3 are the ports in use <
                        ?
                        At this point you can reboot the UDC by typing:
                        ? G
                        (ADDR)=1000       > I tell it to go to 1000 <
                        Then all hell will break loose...trust me!
                        O.k. well it will look like it anyway...
                        
                        P.S.  No I wont tell you the password...you're a
                        hacker! hack! I did...it's usually 3-5 digits...

*B*> HELP               Duh um, a Menu

*B*> RAMPAGE            Test traffic data storage area

*B*> SYSTEM             Display system checksums

*B*> TIME               Display system time

*B*> TIME hh:mm:ss      Set system time (confuse them, set it back then forwd)


                        The Patch Processor
                        ~~~~~~~~~~~~~~~~~~~

*P*> ANSWER n           Take channel 'n' off hook (neato)

*P*> BAUD c,bbbb,nnn    Set Channel 'c' Baud rate to 'bbbb', and
                        number of nulls to 'nnn'
*P*> HANGUP n           Put channel 'n' on hook (log out too)

*P*> HELP               Help Menus

*P*> PATCH n            Patch calling port to port 'n' (Dial out!)
                        (I lied earlier, you can call out!! Ditched the k0dies)

                        The Plant Queue Processor
                        ~~~~~~~~~~~~~~~~~~~~~~~~~

*Q*> ALARM              Display the alarm (error message) string

*Q*> ALARM xx..xxx      Set Alarm String (change it back if u want)

*Q*> CLEAR              Clear buffer without printing contents (not prefered)

*Q*> DUMP               Print and clear contents (destructve, not prefered)

*Q*> HELP               Help Menu

*Q*> LIMITS             Display buffer alarm threshold

*Q*> LIMITS nnnnn       Set buffer alarm threshold to 'nnnn'

*Q*> LIST               Display buffer contents (Better than dump)(ok!)

*Q*> LIST nnnn          Display buffer contents from 'nnnn' to end


                        The Report Processor
                        ~~~~~~~~~~~~~~~~~~~~

*R*> BACKUP             Transfer a copy of the ROM based table to the
                        editor workspace
*R*> DEFAULT            Make the ROM based table effective (can crash)

*R*> EDIT               Engage in edit mode

        APPEND          Add line to RMT (Hi there Gen-Tel!)
        DELETE          Delete line from RMT
        END             End edit session
        HELP            List Editor Commands
        LIST            List RMT
        MODIFY          Modify a line in RMT

*R*> DOWNLOAD           Download RMT to PROM programmer (ha!)

*R*> HELP               More menus

*R*> LIST               List effective RMT

*R*> LIST N             List RMT without Heading

*R*> LIST nnnn          List line 'nnnn' of effective RMT

*R*> LIST nnnnN         List line 'nnnn' of effective RMT without heading

*R*> LIST nnnn,mmmm     List lines 'nnnn' to 'mmmm' of RMT

*R*> LIST nnnn,mmmmN    List lines 'nnnn' to 'mmmm' of RMT without heaading

*R*> NEW                Clear the editor workspace

*R*> USER               Make RAM based RMT active


                        The Scanner Processor
                        ~~~~~~~~~~~~~~~~~~~~~

*S*> CIRCUT             Display Status Report

*S*> CIRCUT nnn OFF     Turn off circut 'nnn' and print Status report

*S*> CIRCUT nnn OFF N   Turn off circut 'nnn' without report

*S*> CIRCUT nnn,mmm OFF Turn off circuts 'nnn' to 'mmm'

*S*> CIRCUT nnn,mmm OFF N  Turn off 'nnn' to 'mmm' without report

*S*> CIRCUT nnn ON      Turn 'nnn' ON and print report

*S*> CIRCUT nnn ON N    Turn 'nnn' ON without report

*S*> CIRCUT nnn,mmm ON  Turn circuts 'nnn' to 'mmm' on and prnt status report

*S*> CIRCUT nnn,mmm,ON N   Turn on 'nnn' to 'mmm' but do not print report

*S*> REPORT             Display names of disable reports

*S*> REPORT report.type OFF     Disable 'report.type' for printing

*S*> REPORT report.type ON      Enable  'report.type' for printing

*S*> RESTART            Restart scanner interrogation

*S*> ROUTE n            Display all future alarm reports on channel 'n'

*S*> STOP               Stop scanner interrogation

*S*> TEST               Dial the alarm number set on the system optioning
                        board (dip switches on the config board) for
                        communication line testing.

*S*> TEST 3,1 nnn nnn nnnn    Dial the indicated number (on port 3) and test
                              the communication lines.
                              If you test with the port you called in on,
                              you will have to hangup and call bacl for the
                              results. (Port 0)

                        The Traffic Processor
                        ~~~~~~~~~~~~~~~~~~~~~

*T*> ACTIVE             Display the contents of the active buffer

*T*> BANK               Display bank to be polled

*T*> BANK n             Set Bank to be polled (bank 'n')

*T*> FLIP               Flip the buffers (this MAY cause polling, depending
                        on the hardware (switch) & port configuration)
*T*> HELP               Processor Menus

*T*> METERS             Display current meter limits

*T*> METERS nnnn        Set upper meter limits

*T*> METERS mmmm,nnnn   Set lower and upper meter limits

*T*> METERS mmmm,nnnn V Set variable meter limits

*T*> METERS mmmm,nnnn F Set fixed meter limits

*T*> PASSIVE            Display the contents of a Passive buffer

*T*> TRAFFIC            Interrupt or resume traffic after user interaction
                        with channel 1



Standard Control Codes
~~~~~~~~~~~~~~~~~~~~~~

^A      Start of Heading
^B      Start of Text
^C      End of Text
^D      End of transmission
^E      Enquiry (no not like CBI)
^F      Acknowledgement
^G      Bell :)
^H      Backspace
^I      Horizontal Tab
^J      Line feed
^K      Vertical Tab
^L      Form Feed
^M      Carriage return
^N      Shift out
^O      Shift in
^P      Data line escape
^Q      Device Control 1
^R      Device Control 2
^S      Device Control 3
^T      Device Control 4
^U      Negative Acknowledgement
^V      Syncronous Idle
^W      End of Transmission Block
^X      Cancel
^Y      End of Medium
^Z      Substitute



What is all this?
~~~~~~~~~~~~~~~~~

The RMT data is the data transmitted to the UDC by the switch.  This data
is formatted in such a way that it tells the UDC what is happening and what
has already happened since the last buffer flip.  This data is then converted
to a standard format to be transfered to the Central Processor.  For examples
of switch output, refer to the switch example list further in this article.

Here is an example of the System Output data, after being translated into
standard format by the UDC:


The first two lines of the System Output data will contain the values
of the 19 status regiters as follows:

       0     1     2     3     4     5     6     7     8     9

000  00345 00003 00013 00000 00005 00000 00005 01903 00012 00000
001  06800 01021 01101 01065 00000 00003 00007 02435 00000 00000

       10    11    12    13    14    15    16    17    18    19

The registers are as follows:

0       UDC control program number (usually 345, newer versions may be diff.)
1       UDC control program version (1,3,5,etc.)
2       Hour at buffer flip (active to passive)
3       Minute at buffer flip (active to passive)
4       Number of buffer flips since power on (65535 maximum)
5       Power interrupt flag (99 if fewer than two intervals have occured
        since the power interrupt or hard restart; 0 otherwise)
6       Number of reports in the buffer
7       Total number of meters in this buffer (including headers)
8       Hour at buffer flip (passive to active)
9       Minute at buffer flip (passive to active)
10-13   Strapping Card signature
14      Total number of errors since last had reset or power up
15      Number of soft restarts since last power-up or hard restart
16      Number of buffer flips since last soft restart
17      Address oflast error which caused a soft restart
18-19   unused


When a traffic report is to be sent, the following header will be sent
(in the System Output) to the UDC processor(s) to tell the traffic processor
to begin buffering the report:

       0     1     2     3     4     5     6     7     8     9

190  65535 00008 00022 00000 00000 00000 00000 00000 00000 00000
191  00004 00027 00078 00700 00800 31227 00074 00000 00002 00018
192  00078 00000 00000 00000 00000 00000 00000 00000 00000 00000

       10    11    12    13    14    15    16    17    18    19

The registers for the header are as follows:

0       65535 (This signals the beginning of the switch report)
1       Message type obtained from the 'type' field of the RMT
2       The number of registers used by the message, including the
        the 10 registers of this header.
3-9     unused (00000)



Ok ?!  Now what?!
~~~~~~~~~~~~~~~~~~

Well now that I have explained all the commands, the data formats, etc,
of the UDC, you can now check the RMT or TRAFFIC buffers to see exactly
what type of switch you are monitoring.  Here are some examples of the
Data format for the following switches:

************************************************************************
-------------------  AT&T AUTOPLEX 100 SWITCH  -------------------------
************************************************************************


Example of RMT data:
~~~~~~~~~~~~~~~~~~~~


ENTRY  REQUIRED   STRING        NEW     ACTION  TYPE    STARTING      ENDING
        PHASE                   PHASE                   REGISTER      REGISTER
------------------------------------------------------------------------------
001     000     /M 00/          001     075     255     65535           65535
002     001     /BLOCK C/       002     077     001     00020           00169
003     002     /FINISH/        001     073     255     65535           65535
004     001     /CELL 001/      001     077     002     00170           00229
005     001     /CELL 002/      001     077     003     00230           00289
006     001     /CELL 003/      001     077     004     00290           00349
007     001     /CELL 005/      001     077     005     00350           00409
008     001     /CELL 006/      001     077     006     00410           00469
009     001     /CELL 007/      001     077     007     00470           00529
010     001     /CELL 008/      001     077     008     00530           00589
011     001     /CELL 009/      001     077     009     00590           00649
012     001     /CELL 010/      001     077     010     00650           00709
013     001     /CELL 011/      001     077     011     00710           00769
014     001     /CELL 012/      001     077     012     00770           00829
015     001     /CELL 013/      001     077     013     00830           00889
016     001     /BLOCK H/       001     077     014     00890           00949
017     001     /FINISH/        001     073     255     65535           65535


Example of TRAFFIC report:
~~~~~~~~~~~~~~~~~~~~~~~~~~

M 00    3/7/1993        THU     13:00:00
        #068

        A 30

        BLOCK C 000034   13:00  3/7/1993        12:00   3/7/1993

(0)
000100 000313 000197 000049 000029 000103 000226 000125 000220 000066
(1)
000180 000291 000238 000123 000050 000154 000326 000146 000074 000089
(2)
000000 000007 000000 000000 000000 000000 000000 000000 000000 000000
(3)
000000 000000 000000 000000 000000 000000 000000 000036 000180 000000
(4)
000023 000023 000366 000000 000000 000000 000000 000000 000000 000000
(5)
.
.
.
  (more data)

.
.
(13)
000000 000000 000000 000000 000000 000000 000000 000000 000000 000000
        FINISH
        03/07/93  13:30:38
        #371
        .
        .
        .

M 00    3/7/1993 THU 13:00:00
        #068


00 REPT:AMPSTRSF        CELL 001  START 120    STOP 130     03/07   COMPLETE
000089 000014 000000 000000 000000 000000 000084 000014 000201 000001
000052 000050 000048 000036 000002 000008 000003 000199 000000 002654
000000 000031 000000 000360 000000 000000 000000 000036 003728 005170
000000 004065 003170 000000 003992 000071 000000 000067 000146 000000
000241 000000 000000 000000 000000 000000 000000 000000 000000 000000
#077

        M 00 REPT:RC CENSUS
                OFFICE RC CHANNEL = REM
                TRCA OVER 0% FULL
                RBA OVER 5% FULL
                RCMDS   MODE = 0
                #082


        M 00 REPT:RC SOURCE

        SCV=0
        CFV=0
        RCS=0
        DLY=0
        VSS=0
        ACS=0
        CSR=0
        BIS=0
        TRB=0
        FBP=0
        LOG=0
        CR6=0
        #083
        .
        .
        .
        (more)
        .
        .

*************************************************************************
---------------------   ITT/North 1210 Switch  --------------------------
*************************************************************************



Example of RMT data:
~~~~~~~~~~~~~~~~~~~~

ACTION  IN LINE  003                    FIXED LOWER: 00000  UPPER: 02039

ENTRY  REQUIRED STRING          NEW     ACTION  TYPE  STARTING  ENDING
        PHASE                   PHASE                 REGISTER  REGISTER
-------------------------------------------------------------------------------
001     000     /:/             001     076     255     65535   65535
002     001     /TYPE/          002     073     255     65535   65535
003     002     /2  /           003     077     002     00020   00098
004     002     /4  /           003     077     004     00100   00319
005     002     /5  /           003     077     005     00320   00469
006     002     /16 /           003     077     016     00670   01769
007     002     /18 /           003     077     018     01770   02040
008     002     /20 /           003     077     020     00470   00669
009     003     /END/           000     073     255     65535   65535

Example of a TRAFFIC report:
~~~~~~~~~~~~~~~~~~~~~~~~~~~

DSS-1  VAR-00 VER-00 PAT=43   ACD
938 R TRAFF 4703 12/06/93       09:00:00 SBG-B
                                DATA FROM 1210 SWITCH TO UDC

DIAL TONE DELAY
TYPE    CODE    SCAN(SEC)       BRP     START/TIME   LENGTH(MIN) ORDER/DATE
  2      R          10          21(45)   08:00          60       12/16/93

THRESHOLD TIME 2.0

LSID    DTD  TIME(SEC)  CALLS   DELAY CALLS
 1              .34     60           1
 2              .47     34           0
SYS TOTAL       .43     94           1
END

936 TRAFF  4703 12/06/93        09:45:55        SBG-B
SEPERATIONS

TYPE    CODE    SCAN(SEC) BRP   START/TIME      LENGTH(MIN)     ORDER/DATE
  4      R      NONE     10(43Z 12:00            60             12/06/79

CNTR*  VALUE  CNTR*  VALUE  CNTR*   VALUE CNTR*  VALUE  CNTR*  VALUE
  1    32      2      65     3       73    4      84     5      64
  6    42      7      84     8       51    9      63     10     69

END

9344  TRAFF 4703  12/06/93  09:46:00    CALL COUNT
.
.
(more)
.
.

        note: This thing is a beast! If you find one of these call
                a museum quick!!!

*************************************************************************
---------------         ITT/North NX-1E Switch    -----------------------
*************************************************************************



RMT data example:
""""""""""""""""""



ACTION IN LINE 000                      VARIABLE LOWER: 00000 UPPER: 00019

ENTRY   REQUIRED        STRING  NEW     ACTION  TYPE    STARTING  ENDING
        PHASE                   PHASE                   REGISTER  REGISTER
---------------------------------------------------------------------------

001     000        /:/          001     076     255     65535     65535
002     001        /DATA TYPE/  001     078     001     65535     65535
003     001        /END OF/     000     073     255     65535     65535


Example of a TRAFFIC report:
""""""""""""""""""""""""""""

26 JUNE 86   10:00:00    THT  735    TM GROUPED   DATA DUMP REPORT

TIME OF LAST REPORT:    26 JUNE 78    09:00:00

DATA TYPE               GROUPED DATA

SOTU    572     681

SOTP    434     863

RSOU    894

RSOP    978

GTCA    1       1       2       3       4       5       6

SLA     0       0       0       0       1       1       1

TKTU    631     408     17      358     951     426     324
        436     384     277     462     46      853     956

TKTP    543     753     783     34      572     294     815
        426     85      357     392     739     212     142

TK2U    584     282     53      19

BSWU    27      7

QTCU    18

END OF GROUPED DATA DUMP



***************************************************************************
----------- THE GTE GTD-1 (Automatic Electric No.1 EAX) Switch-------------
***************************************************************************

Example of RMT data:
~~~~~~~~~~~~~~~~~~~~




ACTION IN LINE 007                      VARIABLE LOWER: 00000 UPPER: 00079

ENTRY   REQUIRED  STRING        NEW     ACTION  TYPE    STARTING   ENDING
        PHASE                   PHASE                   REGISTER   REGISTER
---------------------------------------------------------------------------

001     000     /HO UR/         000     075     255     65535      65535
002     000     /MS 19/         001     077     001     00020      00039
003     001     /MS 19/         001     081     001     00101      65535
004     001     /COUNTS/        001     073     255     65535      65535
005     001     /MS 21/         002     077     002     00040      00079
006     002     /MS 21/         002     081     001     00101      65535
007     002     /COUNTS/        003     073     255     65535      65535





Example of TRAFFIC report:
~~~~~~~~~~~~~~~~~~~~~~~~~~

I  00  HO UR  1:00:00
R  00  ME RR   9
R  00  MS 19   7 COUNTS GREATER THAN 0
R  00  MS 19   1,01   1152  1,02  1350  1,03  1194
R  00  MS 19   1,04   1378  1,05  1212  1,06  1231
R  00  MS 19   1,07   1099
R  00  MS 21   7 COUNTS GREATER THAN 0
R  00  MS 21   1,01   397  1,02  570  1,03  574
R  00  MS 21   1,04   542  1,05  682  1,06  668
R  00  MS 21   1,07   542
R  00  MS 22   7 COUNTS GREATER THAN 0


**************************************************************************
--------- THE GTE GTD-2 (Automatic Electric No.2 EAX) Switch -------------
**************************************************************************

Example of RMT data:
~~~~~~~~~~~~~~~~~~~~

ACTION IN LINE 007                      VARIABLE LOWER: 00000 UPPER: 00079

ENTRY  REQUIRED STRING          NEW     ACTION  TYPE   STARTING ENDING
       PHASE                    PHASE                  REGISTER REGISTER
---------------------------------------------------------------------------
001     000     /S@/            001     084     255     65535   65535
002     001     /MPTK/          001     078     001     65535   65535
003     001     /MPSW/          001     078     002     65535   65535
004     001     /MPLB/          001     078     003     65535   65535
005     001     /MPMA/          001     078     004     65535   65535
006     001     /MPLS/          001     078     005     65535   65535
007     001     /MPSP/          001     078     006     65535   65535


Example of TRAFFIC report:
~~~~~~~~~~~~~~~~~~~~~~~~~~

S@1900  TDA     MPTK    08-14-86        1900    2000

        TRK     ICT     ICT     ICT     OGT     OGT     OGT     PRE
        GRP     USAGE   ATT     HITS    USAGE   ATT     OFL     DIAL

        128     0       0       0       31      18      0       0
        129     0       0       0       32      12      0       0
        130     0       0       0       0       0       0       0
        131     0       0       0       486     269     0       0
        132     0       0       0       55      13      0       0
        133     317     143     0       264     108     0       0
        134     0       0       0       1       2       0       0

S@1901  TDA     PMSW    08-14-86        1900    2000

        SVC     USAGE   ATT     OFL

        10      3
        10      3       164     0
        11      17      163     0
        14      302     2523    0
        15      200     2391    0
        16      377     2187    0
        18      84      1171    0
        19      113     1477    0


**************************************************************************
------------------- The Motorola EMX-250 Switch --------------------------
**************************************************************************


Example of RMT data:
~~~~~~~~~~~~~~~~~~~~

ACTION IN LINE 003                      VARIABLE  LOWER: 00000 UPPER: 00389

ENTRY  REQUIRED    STRING       NEW     ACTION  TYPE    STARTING  ENDING
        PHASE                   PHASE                   REGISTER  REGISTER
----------------------------------------------------------------------------
001     000        /TRA21/      001     078     001     65535     65535
002     001        / /          002     073     255     65535     65535
003     002        /^M/         000     078     002     65535     65535



Example of TRAFFIC report:
~~~~~~~~~~~~~~~~~~~~~~~~~

TRA21   0307    1400    1500
0369    0000    00
00129 00045 00178 00127 00000 00000 00000 00000
00000 00000 00000 00001 00000 00000 00000 00000
101 000 BBBBBBBBBBBBBBBBBBBBBBBBBB 262 1234 1

TRA30 0307 1400 1500
0000 0000 00
00000 00000 00000 00000 00000 00000 00000 00000
00000 00000 00000 00000 00000 00000 00000 00000
247 000 BBBBBBBBBBBBBBBBBBBBBBBBBB 262 2134 1

TRA31 0307 1400 1500
0000 0000 00
00000 00000 00000 00000 00000 00000 00000 00000
00000 00000 00000 00000 00000 00000 00000 00000
253 000 BBBBBBBBBBBBBBBBBBBBBBBBBB 262 1234 1

TRA32 0307 1400 1500
00000 00000 00000 00000 00000 00000 00000 00000
00000 00000 00000 00000 00000 00000 00000 00000
254 000 BBBBBBBBBBBBBBBBBBBBBBBBBB 262 1234 1


************************************************************************
-----------------         NEC ND-20S SWITCH      -----------------------
************************************************************************


Example of RMT data
"""""""""""""""""""



ENTRY   REQUIRED   STRING       NEW     ACTION  TYPE    STARTING  ENDING
        PHASE                   PHASE                   REGISTER  REGISTER
--------------------------------------------------------------------------

001     000        ///          000     075     255     65535     65535
002     000        /ORG. CALL/  001     078     001     65535     65535
003     001        /DUMP END/   000     073     255     65535     65535
004     000        /SPECIAL DU/ 001     078     002     65536     65535


Example of TRAFFIC report
~~~~~~~~~~~~~~~~~~~~~~~~~


06/21   20:01   CON-TEST        NG
PL:1 0 5 4 5 4 6 PT:1 0 3 1 6 4 2
06/21   20:02   * TRAFFIC NORMAL DUMP *

        COM  ORG. CALL ATTEMPTS (PEG COUNT)

026613  000079  000233   00000 00000 00000 00038
000000  000114

        COM  ORG. CALL COMPLETED (PEG COUNT)

012172  000049  000113  000047

        OOH  TER. CALL COMPLETED (PEG COUNT)

034146  000142  000000

        OOH  CALLED PARTY BUSY ENCOUNTERED   (PEG COUNT)

003356

06/21   20:04   *NORMAL DUMP END*


000000 000000

        00H  CALLED OFFICE   (PEG COUNT)

000000 000000 000000 000000 000000 000000 000000 000000

        OOH  A-LINK     USAGE PER NW BASIS  (CCS)


0733.80  0594.40 0000.00 0000.00

        OOH  TRUNK USAGE   (CCS)  OGY

0002.40  0004.20 0009.00 0001.60 0009.60 0002.20 0016.00
0000.00  0003.00 0000.00 0000.00 0046.80 0000.00 0003.00

06/21   20:22  *SPECIAL DUMP END*

06/21   20:22


***************************************************************************
------------------ Northern Telecom DMS-10 Switch -------------------------
***************************************************************************

Example of RMT data:
~~~~~~~~~~~~~~~~~~~~

ACTION IN LINE 011                      VARIABLE LOWER: 00000 UPPER: 00560

ENTRY  REQUIRED  STRING         NEW     ACTION  TYPE    STARTING  ENDING
        PHASE                   PHASE                   REGISTER  REGISTER
--------------------------------------------------------------------------
001     000     /OPM001/        000     072     001     65535     65535
002     000     /OPM002/        000     078     002     65535     65535
003     000     /OPM003/        000     078     003     65535     65535
004     000     /OPM004/        000     078     004     65535     65535
005     000     /OPM005/        000     078     005     65535     65535
006     000     /OPM006/        000     078     006     65535     65535
007     000     /OPM007/        000     078     007     65535     65535
008     000     /OPM008/        000     078     008     65535     65535
009     000     /OPM009/        000     078     009     65535     65535
010     000     /OPM010/        000     078     010     65535     65535
011     000     /OPM011/        000     078     011     65535     65535
012     000     /OPM012/        000     078     012     65535     65535
013     000     /OPM013/        000     078     013     65535     65535


Example of TRAFFIC report
~~~~~~~~~~~~~~~~~~~~~~~~~

OPM001 TRAF HLST MON   08/19/86   15:00:00  HRHR

                PEG     BLK     USE
        ORTM    00635   00000   00978
        OROG    00477   00000   00685
        ORNC    00089
        RVRT    00012
        INTM    00429   00000   00707
        INOG    00000   00000   00000
        INNC    00003

OPM002 OSVC HLST MON  11/02/85  15:00:00 HRHR

                PEG

        PSIG    00027
        PDTO    00015
        PABN    00092
        FSTR    00168
        DGTC    00599
        DPC     00874
        TOTC    01473
                  %
        DGTS    000.0
        DPS     000.0
        TOTS    000.0


************************************************************************
----------------- Northern Telecom DMS-100 Switch ----------------------
************************************************************************

Example of RMT data
~~~~~~~~~~~~~~~~~~~

ACTION IN LINE 004                      VARIABLE LOWER: 00000 UPPER: 01015

ENTRY   REQUIRED   STRING       NEW     ACTION  TYPE    STARTING   ENDING
        PHASE                   PHASE                   REGISTER   REGISTER
---------------------------------------------------------------------------
001     000        /QWMPR2/     001     075     255     65535      65535
002     001        /SLOWS/      002     077     001     00020      00999
003     002        /TRMT2/      003     068     066     65535      65535
004     002        /ANN^J/      002     068     119     65535      65535
005     002        /SITE^J/     003     073     255     65535      65535
006     003        /TRK^J/      004     077     002     01000      04499
007     004        /KEY/        005     081     019     00027      65535
008     005        /QFZ^J/      000     077     003     04500      04920


Example of TRAFFIC report
~~~~~~~~~~~~~~~~~~~~~~~~~

CMFLINT OMPR213  AUG13  15:01:09     3684       INFO  CM  REPORT

CLASS: NMCTRAFF
START: 1986/08/13  14:00:00  WED; STOP: 1986/08/13   15:00:00 WED;
SLOWSAMPLES:         36;  FASTSAMPLES:          360;

CPU
        MTCHINT   TRAPINT   CPUFLT  SYSWINIT SYSCINIT    SYNCLOSS
        MSYLOSSU  SSYLOSSU
 0           0         0       0       0          0           0
             0         0

ICO

        IOCERR    IOCLKERR   IOCFLT   IOCLKSBU   IOLKMBU  IOCSBU
        IOCMBU
 0           0         0        0      0          0           0
             0

CMC
        KEY (CMC_INDEX)
        .
        .
        .

***********************************************************************
----------------- Northern Telecom DMS-250 ----------------------------
***********************************************************************

Example of RMT data
~~~~~~~~~~~~~~~~~~~

ACTION IN LINE 003                      VARIABLE LOWER: 00000 UPPER: 02387

ENTRY     REQUIRED    STRING    NEW   ACTION  TYPE STARTING  ENDING
          PHASE                 PHASE              REGISTER  REGISTER
--------------------------------------------------------------------------
001        000       /QMPR2/    001     072   255  65535     65535
002        001       /INFO/     002     073   255  65535     65535
003        002       /SLOWS/    000     078   001  65535     65535



Example of TRAFFIC data
~~~~~~~~~~~~~~~~~~~~~~~

QMPR18 AUG28  17:00:43 4000 INFO QM REPORT
        CLASS:SCHOURDC
        START:1984/08/28  16:00:00  TUE; STOP: 1984/08/28 17:00:00 TUE;
        SLOWSAMPLES:       36; FASTSAMPLES

TRMT1
        VACT    UNCA    HNPI    UNDN    BLDN    UNIN
        TESS

   0     60       0       0       0       0       0
          0       0       0

TRMT2

        DNTR    CNOT    DCFC    PRSC    GNCT    ATBS
                MHLD

   0      0       0       0       0       0       0
          0       0


QMPR220 AUG28 17:30:16  6100 INFO REPORT
        CLASS: ADHOURC
        START:1984/08/28        17:00:00 TUE; STOP 1984/08/28   18:00:00 TUE;
        SLOWSAMPLES:    36;     FASTSAMPLES:    360;

TRK
        KEY (COMMON_LANGUAGE_NAME)
        INFO (QM2TRKINFO)
          INCATOT PRERTEAB   INFAIL   NATMPT MOVFLATB   GLARE
          QUTFAIL DEFLCDA    DREU     PREU   TRU        SBU
          ANSWER  INVAUTH    CONNECT  TANDEM AQF        ANF


*********************************************************************
---------------- Northern Telecom SL-1 Switch ----------------------
*********************************************************************

Example of RMT data
~~~~~~~~~~~~~~~~~~~

ACTION IN LINE 005 (RAM)        VARIABLE LOWER: 00000 UPPER: 00010

ENTRY   REQUIRED   STRING       NEW     ACTION  TYPE    STARTING ENDING
        PHASE                   PHASE                   REGISTER REGISTER
-------------------------------------------------------------------------
001     000     /TFS000/        001     073     255     65535    65535
002     001     /19/            002     073     255     65535    65535
003     002     / /             000     084     255     65535    65535
004     001     /TF/            000     073     255     65535    65535
005     002     /TF/            000     073     255     65535    65535
006     000     /TFS001/        000     078     001     65535    65535
007     000     /TFS002/        000     078     002     65535    65535
008     000     /TFS411/        000     078     141     65535    65535
009     000     /TFS412/        000     078     142     65535    65535
010     000     /TFS999/        000     073     255     65535    65535


Example of TRAFFIC report
~~~~~~~~~~~~~~~~~~~~~~~~~

001 TFS000

13      10      1978
10      30      00

001 TFS102

00      0000157 00100

001 TFS102

01      0000194 00100

001 TFS102

02      0000194 00100

.
.
.

001     TFS001

00      TERM    00000   0000012 00023   00000   0000157 00161
01      TERM    00000   0000028 00018   00000   0000256 00157
02      TERM    00000   0000015 00019   00000   0000194 00134
06      CONF    00000   0000000 00000   00000   0000001 00003
07      TDS     00000   0000000 00000   00000   0000000 00000
 .
 .
 .



************************************************************************
---------------- Northern Telecom SP-1 PABX Switch ---------------------
************************************************************************


Example of RMT data
~~~~~~~~~~~~~~~~~~~

ACTION IN LINE 013                      VARIABLE LOWER: 00000 UPPER: 00042

ENTRY   REQUIRED  STRING        NEW     ACTION  TYPE    STARTING  ENDING
        PHASE                   PHASE                   REGISTER  REGISTER
--------------------------------------------------------------------------
001     001       /JAN/         002     073     255     65535     65535
002     001       /FEB/         002     073     255     65535     65536
003     001       /MAR/         002     073     255     65535     65535
004     001       /APR/         002     073     255     65535     65535
005     001       /MAY/         002     073     255     65535     65535
006     001       /JUN/         002     073     255     65535     65535
007     001       /JUL/         002     073     255     65535     65535
008     001       /AUG/         002     073     255     65535     65535
009     001       /SEP/         002     073     255     65535     65535
010     001       /OCT/         002     073     255     65535     65535
011     001       /NOV/         002     073     255     65535     65535
012     001       /DEC/         002     073     255     65535     65535
013     002       /19/          000     075     054     65535     65535
.
.
.

Example of TRAFFIC report
~~~~~~~~~~~~~~~~~~~~~~~~~


0067  OPR  MEA  00315  013077  18 - 200SUS

LIN#    0       78
 2      2       8       0       0       32      0       36      0     2  82

LIN#    1       8
 0      0       8       0       0       32      0       0       32     2  0


WED 11 SEPT     1980    112777

572     415     23      3       46      160     1992    0
  0     516      0      0       22        1     2180    0

        0055  OPR  MEA   045331   112044

2420    1713    101     10      327     628     4512    8512    0

 WED  11 SEPT 1980    1:06:27    1606CLS3


 .
 .
 .


***********************************************************************
--------------- Stromberg Carlson DCO Switch (!!) ---------------------
***********************************************************************

Example of RMT data
~~~~~~~~~~~~~~~~~~~

ACTION IN LINE 006                      VARIABLE LOWER: 00000 UPPER: 00837

ENTRY   REQUIRED  STRING        NEW     ACTION  TYPE    STARTING ENDING
        PHASE                   PHASE                   REGISTER REGISTER
--------------------------------------------------------------------------
001     000      /COMPLETION/   000     084     255     65535    65535
002     000      /ROW/          001     077     001     00100    02039
003     001      /END OF TMR/   000     073     255     65535    65535
004     001      /***/          002     073     255     65535    65535
005     002      /^M/           001     066     001     65535    65535


Example of a TRAFFIC report
~~~~~~~~~~~~~~~~~~~~~~~~~~~

SITE:ACD,INC.           GROUP: 1                BUFFER:ACTIVE
COLLECTION TIME: 08:00:00       05/01/79
COMPLETION TIME: 08:01:05       05/01/79

ROW     ODD3S   ODTNP
0       1       2
1
        OLOSZ   OLMAT   ORVEC
2       3       2       1
        OLOTB   OLOTL   OLOTP   OLMDS   OLMBY
3       7       2       1       8       3

4

5

...
.
.
.
.


***********************************************************************
-------------- TRW Vidar ITS 4/5 and ITS 5 Switches -------------------
***********************************************************************



Example of RMT data
~~~~~~~~~~~~~~~~~~~


ACTION IN LINE 006              VARIABLE LOWER: 00000 UPPER: 00837

ENTRY   REQUIRED   STRING       NEW     ACTION  TYPE    STARTING  ENDING
        PHASE                   PHASE                   REGISTER  REGISTER
---------------------------------------------------------------------------
001     000     /ITD REPORT/    000     073     255     65535     65535
002     000     / TO /          000     072     001     65535     65535
003     000     /SYSTEM/        000     078     002     65535     65535
004     000     /GRADE/         000     078     004     65535     65535
005     000     /SEPAR/         000     073     004     65535     65535
006     000     /END/           000     004     255     65535     65535


Example of TRAFFIC report
~~~~~~~~~~~~~~~~~~~~~~~~~

TIMED  ITS REPORT   ADAM FROM 08-18-86  13:01:31 TO 08-18-86 14:00:28
CLEARING COUNTERS

GROUP TOTALS

        NAME    TYPE    ATT     COM     XCS     AVH     OFL

        LSSO    ORIG    131     93      1671    13      0
        LSSO    TERM    129     98      1729    13      0
        LSS1    ORIG    159     111     3093    19      0
        LSS1    TERM    114     97      2793    25      0
        LSS2    ORIG
        .
        .
        .
        .


*********************************************************************
------------- Western Electric ESS 5 Switch -------------------------
*********************************************************************

Example of RMT data
~~~~~~~~~~~~~~~~~~~

ACTION IN LINE 003                      VARIABLE LOWER: 00000 UPPPER: 00100

ENTRY   REQUIRED   STRING       NEW     ACTION  TYPE    STARTING ENDING
        PHASE                   PHASE                   REGISTER REGISTER
----------------------------------------------------------------------------
001     000     /S570/          001     075     255     65535    65535
002     001     /TION 1:/       002     078     001     65535    65535
003     002     /TION 3:/       003     078     002     65535    65535

Example of TRAFFIC report
~~~~~~~~~~~~~~~~~~~~~~~~~

S570-108396613 86-05-13  12:01:22  12430
OP TRFC30 VLD
  TIME: 12:0:27

SECTION 1: VALIDITY

PROC    DATLOS  SCN10   SCN100
0       VALID   0       18
7       VALID   180     18
10      VALID   180     19
9       VALID   180     18
2       VALID   180     18
6       VALID   180     18
4       VALID   180     18
3       VALID   180     18
8       VALID   180     18
5       VALID   180     18
1       VALID   180     18
11      VALID   180     18


S570-108396613  86-05-13 12:01:24  12431
OP TRFC30 OFC
  TIME 12:0:27

SECTION 3: OFFICE TOTALS

DPORQ =   46    TTPRQ =  693  DPINRQ =  1226
MFINRQ=   9577  CDIRR =  58   TCBUSY =  11
 .
 .
 .
 .
 .



----------------------------------------------------------------------------

FUNNY CAPTURES: (How to crash a UDC...)
---------------------------------------



CONNECT (300)


INVALID INPUT!

*P*>^B

*B*>HELP

*B* BASIC COMMANDS     DATE, DIAGNOSTIC, HELP, RAMPAGE, SYSTEM, TIME
*P* CHANNEL UTILITY    ANSWER, BAUD, HANGUP, PATCH
*Q* PLANT QUEUE        ALARM, CLEAR, DUMP, LIMIT, LIST
*R* REPORT MAPPING     BACKUP, DEFAULT, DOWNLOAD, EDIT, LIST, NEW, USER    
*S* SCANNER            CIRCUIT, REPORT, RESTART, ROUTE, STOP, TEST
*T* TRAFFIC            ACTIVE, FLIP, METERS, PASSIVE, TRAFFIC, BANK 

*B*>^T

*T*>BANK

BANK D
*T*>
>
>


*T*>^S

*S*>REPORT

REPORTS OFF: NONE.

*S*>CIRCUT


D001 ALARM STATUS: (RESET) (DISABLED) AT 11:23:13 ON 00/18/00

      0      1      2      3      4      5      6      7      8      9

MINOR

00                                                                      
01                                                                      
02                                                                      
03        (PERM)                                                        
04                                                                      
05                                                                      
06                      (PERM)
[esc to cancel this shyt]

*S*>^P
*P*>BAUD 1,1200
                      <let's change them all just for fun!>
*P*>BAUD 2,1200

*P*>BAUD 3,1200

*P*>BAUD 4,1200

*P*>BAUD 5,1200

*P*>BAUD 6,1200


*P*>BAUD 0,1200)B]mJMs!OxxxxxxxxxxxxxxxxxOmJMs1N
NO CARRIER

[HAVE TO CALL BACK AT 1200!]

A/
CONNECT 1200



*S*>HELP

*B* BASIC COMMANDS     DATE, DIAGNOSTIC, HELP, RAMPAGE, SYSTEM, TIME
*P* CHANNEL UTILITY    ANSWER, BAUD, HANGUP, PATCH
*Q* PLANT QUEUE        ALARM, CLEAR, DUMP, LIMIT, LIST
*R* REPORT MAPPING     BACKUP, DEFAULT, DOWNLOAD, EDIT, LIST, NEW, USER    
*S* SCANNER            CIRCUIT, REPORT, RESTART, ROUTE, STOP, TEST
*T* TRAFFIC            ACTIVE, FLIP, METERS, PASSIVE, TRAFFIC, BANK 

*S*>^P
*P*>BAUD 0,2400         <Wonder if they have 2400 baud modems yet?>
zzzdhfk#@$svvvxs
'4Dzzz[8.
NO CARRIER

ATDT*67,xxx-99xx
CONNECT 1200
MH- gFl
z[#.ll*\

<guess not!>  CrAsH!!!!!!

The UDC, port 0 is at 2400 and the modem is at 1200.....hahahha
Oh well. . .manual re-boot is in order!

----------------------------------------------------------

Thats ok...should have seen me learning how to DEBUG the ports!! BAH!

