STATION ID - 7047/3.12

9x Datakit Network
FOR OFFICIAL USE ONLY

This is a 9x system, restricted to authorized persons and for
official 9x business only. Anyone using this system, network or data
is subject to being monitored at any time for system administration and
for identifying unauthorized users or system misuse. Anyone using this
system expressly consents to such monitoring and is advised that any
evidence of criminal activity revealed through such monitoring may be
provided to law enforcement for prosecution.

----------------------------------------------------------
The Dynatel Subscriber Loop Analyzer

"The All-In-One Phreaker Tool"

by: phonic
6/27/99
----------------------------------------------------------

This file is for information purposes only. I am not responsible for anything
you do with the information, nor am I condoning any illegal activity.

BACKGROUND:
Manufactured by: 3M
features:
Handheld, Lightweight, User-friendly
On-line Help, Single-button Auto test
DC and AC Volts, Current, Resistance
Resistance Fault Locate (Bridge)
TDR (Time Domain Reflectometer)
Prequalification of ISDN and HDSL
Opens meter, Load Coil Counter
Loss, Noise, Longitudinal Balance
Talk Set, Tone, Caller ID
------------

When most people think about what they would like to, *ahem*, borrow
out of the back of a telco tech's truck, they usually think of testsets,
printouts, manuals, etc. However, there is a much larger prize for the
curious phreaker out there. It is called the Dynatel Subscriber Loop
Analyzer, and it is manufactured by 3M for telco's and anyone else who
can afford it. It serves many purposes which I will get into, and it should
also be mentioned that the unit (which will be refered to as the
Dynatel unit from now on) serves as a fully fuctioning phone as well as all
the other utilities its programmed with.

First off, so you know what the unit looks like (relatively), here is a
rough drawing of it. This way you know basically what it looks like and what
I'm talking about.

                ------------------------------------------------
                |  ------------------------------------------  |
                |  |                                        |  |
                |**|                                        |  |
                |  |                                        |  |
                |**|                                        |  |
                |  |                                        |  |
                |**|                                        |  |
                |**|                                        |  |
                |**|                                        |  |
                |  |                                        |  |
                |  |                |                                              |
                |          3M 965 DSP                          |
                --------|                               |-------
                        | |---|   |---|   |---|   |---| |
                        | |---|   |---|   |---|   |---| |                               |
                        |                               |
                        | |---|   |---|   |---|   |---| |
                        | |---|   |---|   |---|   |---| |
                        |                               |
                        | |---|   |---|   |---|   |---| |
                        | |---|   |---|   |---|   |---| |
                        |                               |
                        | |---|   |---|   |---|   |---| |
                        | |---|   |---|   |---|   |---| |
                        |                               |
                        | |---|   |---|   |---|   |---| |
                        | |---|   |---|   |---|   |---| |
                        |                               |
                        | |---|   |---|   |---|   |---| |
                        | |---|   |---|   |---|   |---| |
                        |                               |
                        |                               |
                        |  (*)   (*)   (*)   (*)   (*)  |
                        |                               |      
                        |-------------------------------|

	
Keep in mind that this is just a rough drawing of the Dynatel for easy
identification and understanding. Its is a handheld unit that can fit
relatively easily in the pants pocket.

Now, I suggest that if anyone here ever happens to come across one of these,
they go home with it. This unit, new, carries a price tag of between
$2000-$5000 depending on the model. The newest being the 965 DSP, which
will be the one covered in this text file.

Second, the Dynatel unit will cover most tests a telco tech would want
to perform, so it will probably cover all the tests you could use it for.
Due to its hard casing, it takes quite an impact to brake it. It was also
designed very "user friendly" operation, including a help button, so
learning the extended ins-and-outs of its programming should be relatively
easy.

I had an earlier model of the Dynatel and I can honestly say that the
newer model is much nicer. The model that I had was the size and shape
of a lunchbox (with the same design scheme) and weighed about 20lbs.
That was the 760. Both the 760 and the 965 are bright yellow in color
The main difference being the shape and power. While, the newer model can
be carried around inconspicuously, the older model stuck out like a....sore
thumb. anywayz. In addition to being a different size and shape, the 760
only had a 1 character height line display. The 965 has a screen and
graphics.

They main problem you will have in the usage of a "borrowed" Dynatel unit
is the battery. Now, the battery is a long life one and is rechargeable,
but not by and battery recharger your gonna get at the local radio shack.
It is concievable that you could BUILD one, but I don't know how, nor
do I wish to get into that area of the unit, so all you electronic engineering
majors can make a text file on how to build one later. I talked to some
telco techs, and they told me that the recharging units cost a few thousand
dollars and are kept in the main repair center's garage. So, you have 5 options:
1) Get a new model every few months *RISKY*
2) Brake into the repair center *STUPID*
3) Use it until it dies and say "oh well" *LAZY*
4) Build a recharger *SKILLED*
5) Buy one from 3M *RICH*

So, you should figure out which category best suits you (ie: risky, stupid,
lazy, skilled, or rich) and do the matching selection.

Now, since the whole purpose of this text file isn't on the theft of the
unit, but on the features and operation of it, I will refraim from any more
comments about stealing. Don't do it. It's wrong. You'll get caught.

In case your interested, the batteries are Nickle Metal Hydride.

The unit also boasts an easily upgradeable system in both hardware and
software. So that when a new version comes out, they can be upgraded without
having to buy a whole new unit. Isn't that nice of 3M!

Each user is able to customize his/her unit to their specifications. This
enables you to design certain tests and programs to be performed the way
you want them to.

Not only is this unit user-friendly, but it is septa-lingual. It speaks
English, Spanish, French, German, Danish, Italian and Canadian French, with
Asian models availible.

The Dynatel will test the levels of volts, ohms, and milliamps on the line.
It performs all the tests of a multimeter. It also can test for insulation
resistance. It has a resistance fault locator, and tests for the presence
and levels of line noice, balance and power loss.

A cool function that the Dynatel has is called the TDR (Time Domain
Reflectometer). The TDR uses the display to accutually show you the
line and any "objects" on it. Objects being: load coils, bridge taps,
splits, faults, and opens. The coolest part of this feature is it shows
you how many FEET you are (approx) to the CO. So, if you don't know where
your local CO is, just walk down the street hooking the unit up to every
building's phone line until the screen says:
DISTANCE TO CO: 0 FEET
Then your all set. :)

It tests the line to determine whether it is an ISDN one or a POTS. It also
is designed to be a fully functioning phone capable of accessing EITHER
kind of system. This is extremely useful if you want to beige box on an
ISDN line.
Note: the 965DSP will not detect older ISDN formats (such as ATT AMI,
DMS100, P-Phone, etc.)

Not only can the unit perform the standard DTMF tones, but it also can emit
user selected tones. Hence, the unit can also serve as a blue box and
red box. It may be suspicious if you bring it to a NYC payphone on the street
and start having it "deposit" quarters for you though.

The 965DSP comes with 5 test leads. Red, Black and Green are used for most
functions. Yellow is used for RFL, and Yellow and Blue are used for TDR.
The Shorting Strap is only used in RFL.

The Tones Function:
There are three types of tones: ID Tone for pair identification and
coiling, Precision Tone for 600 (omega) loss measurements and High Frequency
Tone for 135 Ohms wideband loss measurements. The ID Tone is always sent as an
interupted tone. The other tones are uninterrupted continuous tones.
The interrupted tone is used for Pair Identification. The uninterrupted
continuous tones are used for measuring Loss using a separate 965DSP or
another instrument as a signal source at a "far end" access point.


The last important feature of this unit, is its caller-id. It will display
the number of the calling party on its screen.

Now, I do need to mention that these are just the BASIC features of the
newest model. Since the units are programmable, they can have other
features added to them by the telco (ie: ANI, ALI, etc.) all depending on
what the telco needed and what there systems could do. I have seen models
that could pull the location and number off of the line, as well as models
that could kill the line for 10 minutes with just one click. (accutually,
it took four, but "with just one click" sounds more powerful and cooler).

It is easy to see why the Dynatel Subscriber Loop Analyzer is the perfect
tool for the phreaker. It makes a perfect christmas gift to.

the end.


Greetz:
rsh, kimmie, theorem, angieb, chameleon, arsine, asd, phen, rw-, spyder,
ld-50, UGLYPIG!, lusta, spacity, substance, blotter, #900mhz, foneman, javaman,
dalai, darkcube, duro (the conf man), voronika, jennicide, #telephony,
di9ital (the dms ninja), tchort (the krad krackhead), #9x
all the old-skewl defcon/916 bridge ppl, dunwich horror + machine dreams bbs's.

Flamez:
Shamrock: fucking prick and shady ass mother fucker
          YOU KNOW WHAT IM TALKING ABOUT BITCH!
tr0n: j00 cl00bie
psuedo (the show): 1) your show sucks
                   2) can i get a free freebsd cd to!?


-------------------------------------------------------------------------

-phonic
phonic@phreaker.net
irc -efnet

