|
---------------------------------------------------------------------------
C-16. What is a CNA number?
CNA stands for Customer Name and Address. The CNA number is a phone number for telephone company personnel to call and get the name and address for a phone number. If a telephone lineman finds a phone line he does not recognize, he can use the ANI number to find its phone number and then call the CNA operator to see who owns it and where they live.
Normal CNA numbers are available only to telephone company personnel. Private citizens may legally get CNA information from private companies. Two such companies are:
Cross-Reference Directories (900)288-3020 AT&T National Directory Assistance (900)555-1212 Telename (900)884-1212 Unidirectory (900)933-3330
Note that these are 900 numbers, and will cost you approximately one dollar per minute.
If you are in 312, 708, or parts of 815, AmeriTech has a pay-for-play CNA service available to the general public. The number is 796-9600. The cost is $.35/call and can look up two numbers per call.
If you are in 415, Pacific Bell offers a public access CNL service at (415)705-9299.
If you are in Bell Atlantic territory you can call (201)555-5454 or (908)555-5454 for automated CNA information. The cost is $.50/call.
The legal telephone company CNA for Ontario is 555-1313.
You can fool (800)967-5356 into giving you a free CNA by requesting a free disk and then entering the number you want the adress for at the prompt.
You can often social engineer CNA information out of telephone company employees or out of employees of other companies with CNA access.
Here is a sample script that works if your target has ever ordered pizza from Domino's or Pizza Hut:
Them: Hi, thanks for call, may I take your order please? You: Yes, I'd like 4 large pepperoni pizzas. Them: May I have your phone number please? You: <State your targets phone number here> Them: Is this 238 Ward Road? You: Yes ma'am.
---------------------------------------------------------------------------
C-17. What is the telephone company CNA number for my area?
203 (203)771-8080 CT N 214 (214)744-9500 Southwestern Bell N 214 (214)745-7505 Southwestern Bell N 217 (217)789-8290 Ameritech (Illinois) 312 (312)796-9600 Chicago, IL 506 (506)555-1313 New Brunswick 513 (513)397-9110 Cincinnati/Dayton, OH 516 (516)321-5700 Hempstead/Long Island, NY 614 (614)464-0123 Columbus/Steubenville, OH 813 (813)270-8711 Ft. Meyers/St. Petersburg/Tampa, FL N 912 (912)752-2000 #1367 Albany/Savannah, GA NYNEX (518)471-8111 New York, Connecticut, Vermont, Rhode Island, New Hampshire, and Massachusetts
---------------------------------------------------------------------------
C-18. What are some numbers that always ring busy?
In the following listings, "xxx" means that the same number is used as a constantly busy number in many different prefixes. In most of these, there are some exchanges that ring busy and some exchanges that are in normal use. *ALWAYS* test these numbers at least three times during normal business hours before using as a constantly busy number.
800 999-1803 WATS 201 635-9970 Hackensack/Jersey City/Newark/Paterson, NJ 212 724-9970 Manhattan, NY 213 xxx-1117 Los Angeles, CA 213 xxx-1118 Los Angeles, CA 213 xxx-1119 Los Angeles, CA 213 xxx-9198 Los Angeles, CA 216 xxx-9887 Akron/Canton/Cleveland/Lorain/Youngstown, OH 303 431-0000 Denver, CO 303 866-8660 Denver, CO 310 xxx-1117 Long Beach, CA 310 xxx-1118 Long Beach, CA 310 xxx-1119 Long Beach, CA 310 xxx-9198 Long Beach, CA 316 952-7265 Dodge City/Wichita, KS 501 377-99xx AR N 518 571-xxxx Albany, NY 719 472-3772 Colorado Springs/Leadville/Pueblo, CO 805 255-0699 Bakersfield/Santa Barbara, CA 714 xxx-1117 Anaheim, CA 714 xxx-1118 Anaheim, CA 714 xxx-1119 Anaheim, CA 714 xxx-9198 Anaheim, CA 717 292-0009 Harrisburg/Scranton/Wilkes-Barre, PA N 717 980-xxxx Harrisburg/Scranton/Wilkes Barre, PA 818 xxx-1117 Pasadena, CA 818 xxx-1118 Pasadena, CA 818 xxx-1119 Pasadena, CA 818 xxx-9198 Pasadena, CA 818 885-0699 Pasadena, CA (???-0699 is a pattern) 860 525-7078 Hartford, CT 906 632-9999 Marquette/Sault Ste. Marie, MI 906 635-9999 Marquette/Sault Ste. Marie, MI
---------------------------------------------------------------------------
C-19. What are some numbers that temporarily disconnect phone service?
If your NPA is not listed, or the listing does not cover your LATA, try common numbers such as 119 (GTD5 switches) or 511.
N 209 999 Stockton/Fresno/Lodi, CA (100 seconds) N 313 xxx-9994 Ann Arbor/Dearborn/Detroit, MI (Ameritech) (1 minute) 314 511 Columbia/Jefferson City/St.Louis, MO (1 minute) 404 420 Atlanta, GA (5 minutes) 405 953 Enid/Oklahoma City, OK (1 minute) 407 511 Orlando, FL (United Telephone) (1 minute) 414 958-0013 Fond du Lac/Green Bay/Milwaukee/Racine, WI (1 minute) 512 200 Austin/Corpus Christi, TX (1 minute) 516 480 Hempstead/Long Island, NY (1 minute) N 517 xxx-9994 Bay City/Jackson/Lansing, MI (Ameritech) (1 minute) N 518 958 Albany, NY (1 minute) 603 980 NH 614 xxx-9894 Columbus/Steubenville, OH N 616 xxx-9994 Battle Creek/Grand Rapids/Kalamazoo, MI (Ameritech)(1 minute) 805 119 Bakersfield/Santa Barbara, CA (3 minutes) 807 211 Thunder Bay, Ontario (3 minutes) N 810 xxx-9994 Pontiac/Southfield/Troy, MI (Ameritech) (1 minute) N 906 xxx-9994 Marquette/Sault Ste. Marie, MI (Ameritech) (1 minute) 919 211 or 511 Durham, NC (10 min - 1 hour)
---------------------------------------------------------------------------
C-20. What is a Proctor Test Set?
A Proctor Test Set is a tool used by telco personnel to diagnose problems with phone lines. You call the Proctor Test Set number and press buttons on a touch tone phone to active the tests you select.
---------------------------------------------------------------------------
C-21. What is a Proctor Test Set in my area?
If your NPA is not listed try common numbers such as 111 or 117.
805 111 Bakersfield/Santa Barbara, CA 909 117 Tyler, TX 913 611-1111 Lawrence/Salina/Topeka, KS
---------------------------------------------------------------------------
C-22. What is scanning?
Scanning is dialing a large number of telephone numbers in the hope of finding anything interesting. Interesting items often include test tones, computers, Voice Message Boxes (VMB's), Private Branch Exchanges (PBX's), and government offices.
Scanning can be done by hand, although dialing several thousand telephone numbers by hand is extremely boring and takes a long time.
Much better is to use a scanning program, sometimes called a war dialer or a demon dialer. Currently, the best war dialer available to PC-DOS users is ToneLoc from Minor Threat and Mucho Maas. ToneLoc can be ftp'd from ftp.paranoia.com /pub/toneloc/. For the Macintosh, try Assault Dialer.
A war dialer will dial a range of numbers and log what it finds at each number. You can then only dial up the numbers that the war dialer marked as carriers or tones.
---------------------------------------------------------------------------
C-23. Is scanning illegal?
Excerpt from: 2600, Spring 1990, Page 27:
-BQ- In some places, scanning has been made illegal. It would be hard, though, for someone to file a complaint against you for scanning since the whole purpose is to call every number once and only once. It's not likely to be thought of as harassment by anyone who gets a single phone call from a scanning computer. Some central offices have been known to react strangely when people start scanning. Sometimes you're unable to get a dialtone for hours after you start scanning. But there is no uniform policy. The best thing to do is to first find out if you've got some crazy law saying you can't do it. If, as is likely, there is no such law, the only way to find out what happens is to give it a try. -EQ-
It should be noted that a law making scanning illegal was recently passed in Colorado Springs, CO. It is now illegal to place a call in Colorado Springs without the intent to communicate.
---------------------------------------------------------------------------
C-24. How can I make a lineman's handset?
This FAQ answer was written by Phucked Agent 04:
This is the "right hand" of both the professional and the amatuer lineman. Basically, it is a customized portable telephone which is designed to be hooked onto raw cable terminals in the field and used to monitor the line, talk, or dial out. The monitor function is usually the main difference between the "butt-in" test set and the normal phone. If you don't have a real test set already, the following circuit can convert a normal $4 made-in-taiwan phone into a working test set. The "all-in-one" handset units without bases are the best (I tend to like QUIK's and GTE Flip Phone II's). Anyway-
OFFICIAL Agent 04 Generic Test Set Modification (tm)
Ring >---------------------------------> to "test set" phone Tip >------! SPST Switch !--------> !-----/ ----------! >from !-------/!/!/!/!--! C = 0.22 uF 200 WVDC Mylar cable pair ! C R ! R = 10 kOhm 1/2 W (alligators) !--! (------------! SPST = Talk / Monitor
When SPST is closed, you are in talk mode; when you lift the switch- hook on the "test set" phone, you will get a dial tone as if you were a standard extension of the line you are on. You will be able to dial out and receive calls. When the SPST is opened, the resistor and capacitor are no longer shunted, and they become part of the telephone circuit. When you lift the switchhook on the test set, you will not receive dial tone, due to the fact that the cap blocks DC, and the resistor passes less than 4 mA nominally (far below the amount necessary to saturate the supervisory ferrod on ESS or close the line relay on any other switch). However, you will be able to silently monitor all audio on the line. The cap reactance + the phone's impedance insure that you won't cut the signal too much on the phone line, which might cause a noticeable change (..expedite the shock force, SOMEONE'S ON MY LINE!!). It's also good to have a VOM handy when working outside to rapidly check for active lines or supervision states.
---------------------------------------------------------------------------
C-25. Where can I purchase a lineman's handset?
Contact East 335 Willow Street North Andover, MA 01845-5995 (508)682-2000
Jensen Tools 7815 S. 46th Street Phoenix, AZ 85044-5399 (800)426-1194
Specialized Products 3131 Premier Drive Irving, TX 75063 (800)866-5353
Time Motion Tools 12778 Brookprinter Place Poway, CA 92064 (619)679-0303
---------------------------------------------------------------------------
C-26. What are the DTMF frequencies?
DTMF stands for Dual Tone Multi Frequency. These are the tones you get when you press a key on your telephone touch pad. The tone of the button is the sum of the column and row tones. The ABCD keys do not exist on standard telephones.
1209hz 1336hz 1477hz 1633hz 697hz 1 2 3 A
770hz 4 5 6 B
852hz 7 8 9 C
941hz * 0 # D
---------------------------------------------------------------------------
C-27. What are the frequencies of the telephone tones?
Many of these tones are no longer used and are mentioned here only for historical accuracy.
Low Tone ~~~~~~~~ This is a generic tone used with various interruption patterns for specific tones listed below and described under their own titles:
Line Busy Tone Reorder RevertingTone No Circuit Tone No Such Number Vacant Code Group Busy Tone Deposit Coin Tone Vacant Position Tone Dial Off-Normal Tone Trouble Tone Dial Jack Tone Dial Test Signal Class of Service
Low Tone 480 Hz and 620 Hz at -24 dBm0/frequency. On some systems manufactured before 1974, Low Tone was 600 Hz modulated at 120, 133, 140 or 160 Hz at 61 - 71 dBrnC.
High Tone ~~~~~~~~~ This is a generic tone used with various interruption patterns for the specific tones listed below and described under their own titles:
Partial Dial Tone Permanent Signal Coin Return (Test) Tone Coin Return Tone Number Checking Tone Intercepting Loopback Tone Warning Tone Order Tone Station Ringer Test Class of Service
High Tone 480 Hz at -17 dBm0. On some systems manufactured before 1974, High Tone was 400 Hz or 500 Hz at 61 - 71 dBrnC.
Dial Tone ~~~~~~~~~ This tone is sent to a customer or operator to indicate that the receiving end is ready to receive dial pulses or DTMF signals. It is used in all types of dial offices when dial pulses are produced by the customer's or operator's dials. Normally dial tone means that the entire wanted number may be dialed; however, there are some cases where the calling party must await a second dial tone or where an operator, after dialing an initial group of digits, must wait for a second dial tone before the rest of the number can be dialed. Some dialing switchboards are arranged to permit listening for dial tone between certain digits.
Dial Tone is 350 Hz and 440 Hz held steady at -13 dBm0/frequency.
Audible Ring Tone ~~~~~~~~~~~~~~~~~ This is a ringing indication which is intercepted by the calling party to mean that the called line has been reached and that the ringing has started. It is also used on calls to operators (special service, long distance, intercepting, etc) during the "awaiting-operator-answer" interval.
Audible Ring Tone is 440 Hz and 480 Hz for 2 seconds on and 4 seconds off at -13 dBm0/frequency.
Line Busy Tone ~~~~~~~~~~~~~~ The Line Busy Tine indicates that the called customer's line has been reached but that it is busy or being rung or on permanent signal. When a line busy signal is applied by an operator, it is sometimes calls a busy-back tone.
Line Busy Tone is Low Tone on and off every .5 seconds.
Reorder ~~~~~~~ Reorder indicates that the local or toll switching or transmission paths to the office or equipment serving the called customer is busy. This signal may indicate a condition such as a timed-out sender or unassigned code dialed. It is interpreted by either a customer or an operator as a reorder signal.
Reorder on a local call is Low Tone for .3 seconds on and .2 seconds off. Reorder on a toll call is Low Tone for .2 seconds on and .3 seconds off. In No. 5 crossbar, No. 1/1A ESS, No. 2/2B ESS switching equipment and No. 1 step-by-step offices using the Precise Tone Plan, the temporal pattern is 0.25 second of low tone and 0.25 second off.
Alerting Tone ~~~~~~~~~~~~~ Indicates that an operator has connected to the line (emergency interrupt on a busy line during a verification call).
Alerting Tone is 440 Hz on for 2 seconds and then on again for .5 seconds every ten seconds.
Recorder Warning Tone ~~~~~~~~~~~~~~~~~~~~~ When recording equipment is used, this tone is connected to the line to inform the distant party that the conversation is bveing recorded. The tone source is located within the recording equipment and cannot be controlled by the party applying the recording equipment to the line. This tone is required by law and is recorded along with the speech.
Recorder Warning Tone is a .5 second burst at 1400 Hz every 15 seconds.
Recorder Connected Tone ~~~~~~~~~~~~~~~~~~~~~~~ This tone is used to inform the customer that his/her call is connected to a recording machine and that he/she should proceed to leave a message, dictate, etc. It is to be distinguished from the recorder warning tone, which warns the customer that his/her 2-way conversation is being recorded.
Recorder Warning Tone is a .5 second burst at 440 Hz every 5 seconds.
Reverting Tone ~~~~~~~~~~~~~~ The same type of signal as line busy tone is used for reverting tone in all systems. In No. 5 crossbar systems, a second dial tone is sometimes also used when a calling party identification digit is required. The reverting signal informs the calling subscriber that the called party is on the same line and that he/she should hang up while the line is being rung.
Reverting Tone is is Low Tone on and off every .5 seconds at -24 dBm0/frequency.
Deposit Coin Tone ~~~~~~~~~~~~~~~~~ This tone, sent from a Community Dial Office to a post-pay coin telephone, informs the calling party that the called party has answered and that the coin should be deposited.
Deposit Coin Tone is a steady Low Tone.
Receiver Off-Hook Tone ~~~~~~~~~~~~~~~~~~~~~~ This tone is used to cause off-hook customers to replace the receiver on-hook on a permanent signal call and to signal a non-PBX off-hook line when ringing key is operated by a switchboard operator.
Receiver Off-Hook Tone is 1400 Hz, 2060 Hz, 2450 Hz and 2600 Hz at 0 dBm0/frequency on and off every .1 second. On some older space division switching systems Receiver Off-Hook was 1400 Hz, 2060 Hz, 2450 Hz and 2600 Hz at +5 VU on and off every .1 second. On a No. 5 ESS this continues for 30 seconds. On a No. 2/2B ESS this continues for 40 seconds. On some other AT&T switches there are two iterations of 50 seconds each.
Howler ~~~~~~ This tone is used in older offices to inform a customer that their receiver is off-hook. It has been superseded by the receiver off-hook tone.
Howler was a 480 Hz tone incremented in volume every second for ten seconds until it reaches +40 VU.
Partial Dial Tone ~~~~~~~~~~~~~~~~~ High-tone is used to notify the calling party that he/she has not commenced dialing within a preallotted time, measured after receipt of dial tone (permanent signal condition), or that he/she has not dialed enough digits (partial dial condition). This is a signal to hang up and dial again.
Partial Dial Tone is a steady High Tone.
No Such Number a.k.a. "Cry Baby" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This signal tells the calling party to hang up, check the called number, and dial again. In modern systems, calls to unassigned or discontinued numbers will also be routed to a machine announcement system, such as 6A or 7A, which verbally supplies the require message. In some older offices, you could be routed to an intercepting operator. In some offices, reorder tone is returned in this condition.
No Such Number is 200 to 400 Hz modulated at 1 Hz, interrupted every 6 seconds for .5 seconds.
Vacant Code ~~~~~~~~~~~ This tone is used in crossbar systems to indicate that the dialed office code is unassigned. In step-by-step areas, this signal is called vacant level tone. For operator-originated calls, the verbal announcement is preceeded by two flashes. In modern systems, recorded verbal announcements are used for this service.
Vacant Code is Low Tone for .5 seconds on, .5 seconds off, .5 seconds of and 1.5 seconds off.
Busy Verification Tone (Centrex) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Busy verification is a Centrex feature that allows the attendant to call and be connected to a busy Centrex station within the attendant's customer group. The busy verification tone is applied to both parties of the connection to inform them of the intrusion by the attendant. No tone is applied if the station called for busy verification is idle.
Busy Verification Tone (Centrex) is 440 Hz at -13 dBm0 for 1.5 seconds and then again for .3 seconds every 7.5 to 10 seconds. On a No. 1/1A ESS, Busy Verification Tone (Centrex) is 440 Hz at -13 dBm0 for 1.5 seconds and then again for .3 seconds every 6 seconds.
There is also a TSPS Busy Verification tone, which is 440 Hz at -13 dBm0 for 2 seconds and then on again for .5 seconds every 10 seconds.
Call Waiting Tone ~~~~~~~~~~~~~~~~~ Call Waiting is a special service that allows a busy line to answer an incoming call by flashing the switchhook. Audible ring (instead of line busy) is applied to the calling line, and the Call Waiting tone is applied to the called line. (So that only the called party hears the tone, the connection is momentarily broken, and the other party to that connection experiences a moment of silence.) Flashing the switchhook places the existing connection on hold and connects the customer to the waiting call.
Call Waiting Tone is two bursts of 440 Hz at -13 dBm0/frequency for .3 seconds plus or minus ten percent every ten seconds.
Confirmation Tone ~~~~~~~~~~~~~~~~~ This tone is used to acknowledge receipt by automatic equipment of information necessary for special services. It is currently used for:
(1) Speed Calling - dialed number has been recorded (2) Call Forwarding - dialed number has been recorded and service is activated (3) Call Forwarding - service is deactivated
Confirmation Tone is 350 Hz and 440 Hz at -13 dBm0/frequency on for .1 second, off for .1 second and then on for .3 seconds.
Indication of Camp-On ~~~~~~~~~~~~~~~~~~~~~ Attendant camp-on service allows an electronic switching system Centrex attendant to hold incoming calls to busy lines. Each time the attendant releases his/her talking connection from the loop involved in the camped-on call, the indication of camp-on tone is heard by the called customer if the customer has subscribed to the indication of camp-on option. The customer may get this tone several times as the attendant reconnects and releases from the loop in response to timed reminders from the console.
Indication of Camp On is 440 Hz at -13 dBm0 for one second every time the attendant releases from the loop.
Special Dial Tone ~~~~~~~~~~~~~~~~~ This tone is used with Three-Way Calling, Centrex station dial transfer, and Centrex conference (station or attendant) services. The user on an existing connection flashes the switchhook, receives special dial tone, and dials number of the third party to be added to the connection.
Special Dial Tone is 350 Hz and 440 Hz at -13 dBm0/frequency for .1 second on, .1 second off, .1 second on, .1 second off, .1 second on, .1 second off, and then on steady.
Priority Audible Ring (AUTOVON) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This tone replaces normal audible ring for priority calls within the AUTOVON network.
Priority Audible Ring is 440 Hz and 480 Hz at -16 dBm0/frequency on for 1.65 seconds and off for .35 seconds.
Preemption Tone (AUTOVON) ~~~~~~~~~~~~~~~~~~~~~~~~~ This tone is provided to both parties of a connection that is preempted by a priority call from the AUTOVON network.
Preemption Tone is 440 Hz and 620 Hz at -18 dBm0/frequency steady for anywhere from three to fifteen seconds.
Data Set Answer Back Tone ~~~~~~~~~~~~~~~~~~~~~~~~~ This set is heard when manually initiating a data call. It normally occurs shortly after the start of audible ringing and means that the remote data set has answered. The data set at the calling end should then be put into the data mode.
Data Set Answer Back Tone is 2025 Hz steady at -13 dBm.
Calling Card Service Prompt Tone ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This tone is used to inform the customer that his/her credit card information must be keyed in. The first 60 milliseconds of this composite tone is 941 Hz abd 1477 Hz which is the DTMF '#'. This tone will release and DTMF to dial pulse converter in the conneciton.
Calling Card Service Prompt Tone is 941 Hz and 1477 Hz at -10 dBm0/frequency at -3 Transmission Level Point for 60 milliseconds and then 440 Hz and 350 Hz at -7 dBm0 for .940 seconds exponentially decayed from -10 dBm per frequency at -3 Transmission Level Point at time constant of .2 seconds.
Class of Service ~~~~~~~~~~~~~~~~ These signals are used at a toll board operating as an 'A" board to identify the class or service of the calling customer. The indication may be high, low, or no tone.
Class of Service is a single burst of either High Tone or Low Tone for .05 to 1 seconds.
Dial-Normal Transmission Signal ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This is a second dial tone returned to an operator between digits indicating that he/she may dial the remainder of the number. For example, when an operator reaches a link-type Community Dial Office via a step-by-step office after dialing a routing code, he/she must pause until an idle link at the Community Dial Office returns dial tone. This method of operation is not recommended or considered standard.
Dial-Normal Transmission Signal is a steady Low Tone.
Dial Jack Tone ~~~~~~~~~~~~~~ Low tone is used as a start-dial signal to tell a DSA operator that the connection reached through a dial jack is ready to receive dialing.
Dial Jack Tone is a steady Low Tone.
Order Tone ~~~~~~~~~~ High tones sent over interposition, local interoffice, or toll trunks indicate:
(1) the the originating operator that the order should be passed (2) to the receiving operator that an order is about to be passed
For Call Announcement and Autometic Display Call Indicator, the tone serves function two only.
(a) Single-order tone - This is a relatively long (0.5 second) signal which means that the originating operator should pass the office name and number.
(b) Double-order tone - This signal is two short spurts in quick succession and means that the operator should pass only the desired number.
(c) Triple-order tone - This signal is three short spurts in quick succession and means that the operator should pass the office name only and wait for another order tone.
(d) Quadruple-order tone - This signal is four short spurts in quick succession and means that the operator should pass the city name only and wait for another challenge. It is used in manual toll tandem (also called zip tones or trunk assignment tones).
Single-order tone is one .5 spurt of High Tone. Double-order tone is two short spurts of High Tone. Triple-order tone is three short spurts of High Tone. Quadruple-order tone is four short spurts of High Tone.
Intercepting Loopback Tone ~~~~~~~~~~~~~~~~~~~~~~~~~~ High tone sent from an intercept operator to the 'A' board operator in manual offices indicates that an intercept operator has completed the call and that the 'A' should disconnect from the circuit. The completion of intercepted calls in this manner is no longer recommended.
Intercepting Loopback Tone is a steady High Tone.
Number Checking Tone ~~~~~~~~~~~~~~~~~~~~ High tone is sometimes used at DSA switchboards in No. 1 crossbar and some step-by-step areas to verify the verbal identification of the calling line.
Number Checking Tone is a steady High Tone. On some older systems, Number Checking Tone was a steady 135 Hz tone.
Coin Denomination Tones ~~~~~~~~~~~~~~~~~~~~~~~ These tones enable the operator to determine the amount deposited in coin telephones.
Coin Denomination Tones for the old 3 slot payphones were:
Nickel - One tap of 1050 Hz and 1100 Hz (bell) Dime - Two taps of 1050 Hz and 1100 Hz (bell) Quarter - One tap at 800 Hz (gong)
Coin Collect Tone ~~~~~~~~~~~~~~~~~ Low tone over a coin recording-completing trunk informs the originating toll operator that the local operator or coin control circuit has collected the charge.
Coin Collect Tone is a steady Low Tone.
Coin Return Tone ~~~~~~~~~~~~~~~~ High tone over a coin recording-completing trunk informs the originating toll operator that the local operator or coin control circuit has returned the change when the connection is not completed (also called coin refund tone).
Coin Return Tone is a single .5 to 1 second burst of High Tone.
Coin Return (Test) Tone ~~~~~~~~~~~~~~~~~~~~~~~ High tone is used to tell an operator in a dial central office that a tester has completed a call to his/her position over a coin trunk.
Coin Return (Test) Tone is a single .5 to 1 second burst of High Tone.
Group Busy Tone ~~~~~~~~~~~~~~~ This audible signal is indicated by low tone on the sleeve of trunk jacks at cord switchboards. Absense of the tone tells the operator that there is at least one idle trunk in a group.
Group Busy Tone is a steady Low Tone.
Vacant Position Tone ~~~~~~~~~~~~~~~~~~~~ Low tone is applied to all straightforward trunks terminating in a vacated position in manual offices.
Vacant Position Tone is a steady Low Tone.
Dial Off-Normal Tone ~~~~~~~~~~~~~~~~~~~~ Low tone is returned to an operator after he/she has completed a call into a step-by-step office and after the calling party has answered to remind him/her to restore the dial key.
Dial Off-Normal Tone is a steady Low Tone.
Permanent Signal ~~~~~~~~~~~~~~~~ A customer line, not in use, which exhibits a steady off-hook condition is routed to a permanent signal trunk. High tone, superimposed on battery, is supplied through a resistance lamp to the ring of the trunk. The tone is used to inform an operator or other employee making a verification test that the line is temporarily out of service. An intermittent ground may also be applied to the ring of the telephone systems left in the hold condition. Typical reasons for the line condition are:
(a) No dialing within the allowed waiting interval. (b) A handset is off-hook. (c) Low insulation resistance or other line trouble.
In some offices, if three or more digits are dialed but not a complete telephone number or code, the call is released and dial tone is returned.
Permanent Signal is a steady High Tone.
Warning Tone ~~~~~~~~~~~~ High tone warns an operator that the circuit he/she is connected to is not in condition for normal operation. Examples:
(1) An operator at an Automatic Display Call Indicator position plugs in the wrong jack. (2) An operator at a sender monitor position plugs into a sender supervisory jack while the sender is under test.
Warning Tone is a steady High Tone.
Trouble Tone ~~~~~~~~~~~~ Low tone applied by an operator or test person at a B position in a manual office to the jack sleeve of a line or trunk in a calling multiple tells other operators the line or trunk is in trouble (also called plugging up codr tone).
Trouble Tone is a steady Low Tone.
Service Observing Tone ~~~~~~~~~~~~~~~~~~~~~~ This tone indicated that the trunk to which it is applied is being service-observed.
Service Observing Tone is a steady 135 Hz.
Proceed to Send Tone (International Direct Distance Dialing) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This tone informs the operator that an overseas sender has been siezed and the address information (KP-CC-CC-ST) should be transmitted.
Proceed to Send Tone is a steady 480 Hz at -22 dBm0.
Centralized Intercept Bureau Order Tone ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This tone tells the centralized intercept bureau operator that a call has reached the position.
Centralized Intercept Bureau Order Tone is a .5 second burst of 1850 Hz at -17 dBm0.
ONI Order Tone ~~~~~~~~~~~~~~ This tone tells the ONI operator that a call has reached the position.
ONI Order Tone is 700 Hz and 1100 Hz at -25 dBm for .095 to .25 seconds.
---------------------------------------------------------------------------
C-28. What is the voltage used to ring a telephone?
According to AT&T, the ringing signal is an 88v 20Hz A.C. signal superimposed on 48v nominal D.C. supervisory voltage. However, the actual rining signal used can and does vary greatly from one location to another. The frequency of the AC signal is normally between 15 and 70Hz. The interval between ringing signals is normally four seconds.
---------------------------------------------------------------------------
C-29. What are all of the * (LASS) codes?
Local Area Signalling Services (LASS) and Custom Calling Feature Control Codes:
Service Tone Pulse/rotary Notes -------------------------------------------------------------------------- Assistance/Police *12 n/a [1] Cancel forwarding *30 n/a [C1] Automatic Forwarding *31 n/a [C1] Notify *32 n/a [C1] [2] Intercom Ring 1 (..) *51 1151 [3] Intercom Ring 2 (.._) *52 1152 [3] Intercom Ring 3 (._.) *53 1153 [3] Extension Hold *54 1154 [3] Customer Originated Trace *57 1157 Selective Call Rejection *60 1160 (or Call Screen) Selective Distinct Alert *61 1161 Selective Call Acceptance *62 1162 Selective Call Forwarding *63 1163 ICLID Activation *65 1165 Call Return (outgoing) *66 1166 Number Display Blocking *67 1167 [4] Computer Access Restriction *68 1168 Call Return (incoming) *69 1169 Call Waiting disable *70 1170 [4] No Answer Call Transfer *71 1171 Usage Sensitive 3 way call *71 1171 Call Forwarding: start *72 or 72# 1172 Call Forwarding: cancel *73 or 73# 1173 Speed Calling (8 numbers) *74 or 74# 1174 Speed Calling (30 numbers) *75 or 75# 1175 Anonymous Call Rejection *77 1177 [5] [M: *58] Call Screen Disable *80 1180 (or Call Screen) [M: *50] Selective Distinct Disable *81 1181 [M: *51] Select. Acceptance Disable *82 1182 [4] [7] Select. Forwarding Disable *83 1183 [M: *53] ICLID Disable *85 1185 Call Return (cancel out) *86 1186 [6] [M: *56] Anon. Call Reject (cancel) *87 1187 [5] [M: *68] Call Return (cancel in) *89 1189 [6] [M: *59]
Notes:
[C1] - Means code used for Cellular One service [1] - for cellular in Pittsburgh, PA A/C 412 in some areas [2] - indicates that you are not local and maybe how to reach you [3] - found in Pac Bell territory; Intercom ring causes a distinctive ring to be generated on the current line; Hold keeps a call connected until another extension is picked up [4] - applied once before each call [5] - A.C.R. blocks calls from those who blocked Caller ID (used in C&P territory, for instance) [6] - cancels further return attempts [7] - *82 (1182) has been mandated to be the nationwide code for "Send CLID info regardless of the default setting on this phone line." [M: *xx] - alternate code used for MLVP (multi-line variety package) by Bellcore. It goes by different names in different RBOCs. In Bellsouth it is called Prestige. It is an arrangement of ESSEX like features for single or small multiple line groups.
The reason for different codes for some features in MLVP is that call-pickup is *8 in MLVP so all *8x codes are reassigned *5x
These appear to be standard, but may be changed locally
Under GTE, some LASS/CLASS tones may be changed from *NN to NN#. Under pulse, GTD5 allows either NN<pause> or 11NN, but with 11NN it may conflict with a test number.
At one time these were called CLASS Codes, for Custom Local Area Signalling Services.
---------------------------------------------------------------------------
C-30. What frequencies do cordless phones operate on?
Here are the frequencies for the first generation 46/49mhz phones.
Channel Handset Transmit Base Transmit ------- ---------------- ------------- 1 49.670mhz 46.610mhz 2 49.845 46.630 3 49.860 46.670 4 49.770 46.710 5 49.875 46.730 6 49.830 46.770 7 49.890 46.830 8 49.930 46.870 9 49.990 46.930 10 49.970 46.970
The new "900mhz" cordless phones have been allocated the frequencies between 902-228MHz, with channel spacing between 30-100KHz.
Following are some examples of the frequencies used by phones currently on the market. ---------------------------------------------------------------- Panasonic KX-T9000 (60 Channels) base 902.100 - 903.870 Base frequencies (30Khz spacing) handset 926.100 - 927.870 Handset frequencies CH BASE HANDSET CH BASE HANDSET CH BASE HANDSET -- ------- ------- -- ------- ------- -- ------- ------- 01 902.100 926.100 11 902.400 926.400 21 902.700 926.700 02 902.130 926.130 12 902.430 926.430 22 902.730 926.730 03 902.160 926.160 13 902.460 926.460 23 902.760 926.760 04 902.190 926.190 14 902.490 926.490 24 902.790 926.790 05 902.220 926.220 15 902.520 926.520 25 902.820 926.820 06 902.250 926.250 16 902.550 926.550 26 902.850 926.850 07 902.280 926.280 17 902.580 926.580 27 902.880 926.880 08 902.310 926.310 18 902.610 926.610 28 902.910 926.910 09 902.340 926.340 19 902.640 926.640 29 902.940 926.940 10 902.370 926.370 20 902.670 926.670 30 902.970 926.970
31 903.000 927.000 41 903.300 927.300 51 903.600 927.600 32 903.030 927.030 42 903.330 927.330 52 903.630 927.630 33 903.060 927.060 43 903.360 927.360 53 903.660 927.660 34 903.090 927.090 44 903.390 927.390 54 903.690 927.690 35 903.120 927.120 45 903.420 927.420 55 903.720 927.720 36 903.150 927.150 46 903.450 927.450 56 903.750 927.750 37 903.180 927.180 47 903.480 927.480 57 903.780 927.780 38 903.210 927.210 48 903.510 927.510 58 903.810 927.810 39 903.240 927.240 49 903.540 927.540 59 903.840 927.840 40 903.270 927.270 50 903.570 927.570 60 903.870 927.870
------------------------------------------------------------ V-TECH TROPEZ DX900 (20 CHANNELS) 905.6 - 907.5 TRANSPONDER (BASE) FREQUENCIES (100 KHZ SPACING) 925.5 - 927.4 HANDSET FREQUENCIES CH BASE HANDSET CH BASE HANDSET CH BASE HANDSET -- ------- ------- -- ------- ------- -- ------- ------- 01 905.600 925.500 08 906.300 926.200 15 907.000 926.900 02 905.700 925.600 09 906.400 926.300 16 907.100 927.000 03 905.800 925.700 10 906.500 926.400 17 907.200 927.100 04 905.900 925.800 11 906.600 926.500 18 907.300 927.200 05 906.000 925.900 12 906.700 926.600 19 907.400 927.300 06 906.100 926.000 13 906.800 926.700 20 907.500 927.400 07 906.200 926.100 14 906.900 926.800 ------------------------------------------------------------ Other 900mhz cordless phones AT&T #9120 - - - - - 902.0 - 905.0 & 925.0 - 928.0 MHZ OTRON CORP. #CP-1000 902.1 - 903.9 & 926.1 - 927.9 MHZ SAMSUNG #SP-R912- - - 903.0 & 927.0 MHZ ------------------------------------------------------------
---------------------------------------------------------------------------
C-31. What is Caller-ID?
This FAQ answer is stolen from Rockwell:
Calling Number Delivery (CND), better known as Caller ID, is a telephone service intended for residential and small business customers. It allows the called Customer Premises Equipment (CPE) to receive a calling party's directory number and the date and time of the call during the first 4 second silent interval in the ringing cycle.
Parameters ~~~~~~~~~~ The data signalling interface has the following characteristics:
Link Type: 2-wire, simplex Transmission Scheme: Analog, phase-coherent FSK Logical 1 (mark) 1200 +/- 12 Hz Logical 0 (space) 2200 +/- 22 Hz Transmission Rate: 1200 bps Transmission Level: 13.5 +/- dBm into 900 ohm load
Protocol ~~~~~~~~ The protocol uses 8-bit data words (bytes), each bounded by a start bit and a stop bit. The CND message uses the Single Data Message format shown below.
| Channel | Carrier | Message | Message | Data | Checksum | | Seizure | Signal | Type | Length | Word(s) | Word | | Signal | | Word | Word | | |
Channel Seizure Signal ~~~~~~~~~~~~~~~~~~~~~~ The channel seizure is 30 continuous bytes of 55h (01010101) providing a detectable alternating function to the CPE (i.e. the modem data pump).
Carrier Signal ~~~~~~~~~~~~~~ The carrier signal consists of 130 +/- 25 mS of mark (1200 Hz) to condition the receiver for data.
Message Type Word ~~~~~~~~~~~~~~~~~ The message type word indicates the service and capability associated with the data message. The message type word for CND is 04h (00000100).
Message Length Word ~~~~~~~~~~~~~~~~~~~ The message length word specifies the total number of data words to follow.
Data Words ~~~~~~~~~~ The data words are encoded in ASCII and represent the following information:
o The first two words represent the month o The next two words represent the day of the month o The next two words represent the hour in local military time o The next two words represent the minute after the hour o The calling party's directory number is represented by the remaining words in the data word field
If the calling party's directory number is not available to the terminating central office, the data word field contains an ASCII "O". If the calling party invokes the privacy capability, the data word field contains an ASCII "P".
Checksum Word ~~~~~~~~~~~~~ The Checksum Word contains the twos complement of the modulo 256 sum of the other words in the data message (i.e., message type, message length, and data words). The receiving equipment may calculate the modulo 256 sum of the received words and add this sum to the received checksum word. A result of zero generally indicates that the message was correctly received. Message retransmission is not supported.
Example CNS Single Data Message ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ An example of a received CND message, beginning with the message type word, follows:
04 12 30 39 33 30 31 32 32 34 36 30 39 35 35 35 31 32 31 32 51
04h= Calling number delivery information code (message type word) 12h= 18 decimal; Number of data words (date,time, and directory number words) ASCII 30,39= 09; September ASCII 33,30= 30; 30th day ASCII 31,32= 12; 12:00 PM ASCII 32,34= 24; 24 minutes (i.e., 12:24 PM) ASCII 36,30,39,35,35,35,31,32,31,32= (609) 555-1212; calling party's directory number 51h= Checksum Word
Data Access Arrangement (DAA) Requirements ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To receive CND information, the modem monitors the phone line between the first and second ring bursts without causing the DAA to go off hook in the conventional sense, which would inhibit the transmission of CND by the local central office. A simple modification to an existing DAA circuit easily accomplishes the task.
Modem Requirements ~~~~~~~~~~~~~~~~~~ Although the data signalling interface parameters match those of a Bell 202 modem, the receiving CPE need not be a Bell 202 modem. A V.23 1200 bps modem receiver may be used to demodulate the Bell 202 signal. The ring indicate bit (RI) may be used on a modem to indicate when to monitor the phone line for CND information. After the RI bit sets, indicating the first ring burst, the host waits for the RI bit to reset. The host then configures the modem to monitor the phone line for CND information.
Signalling ~~~~~~~~~~ According to Bellcore specifications, CND signalling starts as early as 300 mS after the first ring burst and ends at least 475 mS before the second ring burst
Applications ~~~~~~~~~~~~ Once CND information is received the user may process the information in a number of ways.
1. The date, time, and calling party's directory number can be displayed.
2. Using a look-up table, the calling party's directory number can be correlated with his or her name and the name displayed.
3. CND information can also be used in additional ways such as for:
a. Bulletin board applications b. Black-listing applications c. Keeping logs of system user calls, or d. Implementing a telemarketing data base
References ~~~~~~~~~~ For more information on Calling Number Delivery (CND), refer to Bellcore publications TR-TSY-000030 and TR-TSY-000031.
To obtain Bellcore documents contact:
Bellcore Customer Service 60 New England Avenue, Room 1B252 Piscataway, NJ 08834-4196 (908) 699-5800
---------------------------------------------------------------------------
C-32. How do I block Caller-ID?
Always test as much as possible before relying on any method of blocking Caller-ID. Some of these methods work in some areas, but not in others.
Dial *67 before you dial the number. (141 in the United Kingdom) Dial your local TelCo and have them add Caller-ID block to your line. Dial the 0 Operator and have him or her place the call for you. Dial the call using a pre-paid phone card. Dial through Security Consultants at (900)PREVENT for U.S. calls ($1.99/minute) or (900)STONEWALL for international calls ($3.99/minute). Dial from a pay phone. :-)
---------------------------------------------------------------------------
C-33. How do I defeat Caller-ID blocking?
Forward your phone line to a friend who lives in another LATA. When he receives the anonymous phone call, have him use *69 Call Return to dial to offending party back. As he is now placing a long distance phone call, the telephone number of the anonymous caller will show up on your friends phone bill at the end of the month.
A variation of this system is available in areas where the local phone company offers per-call billing (as opposed to unlimited flat rate local calling) and where the local phone company issues itemized bills on those local phone calls. In those areas, you can switch your phone line to itemized local calling, *69 Call Return the anonymous telephone call, and read the anonymous callers telephone number at the end of the month.
If you are particularly anxious, you can often request your toll records from your local telephone company without waiting for your final bill.
---------------------------------------------------------------------------
C-34. What is a PBX?
A PBX (Private Branch Exchange) is a small telephone switch owned by a company or organization. These organizations purchase PBX's to reduce the total number of telephone lines they need to lease from the telephone company. Without a PBX, a company will need to lease one telephone line for every employee with a telephone.
With a PBX, every employees telephone line is wired to the PBX. When an employee takes the receiver off hook (i.e. picks up the telephone) and dials the outside access code (usually 9), the PBX connect the employee to an outside line (often, though somewhat incorrectly, referred to as a trunk). With a PBX, the company only needs to lease as many lines from the telephone company as the maximum number of employees that will be making outside calls at one time. This is usually around 10% of the number of extensions.
Two common PBX systems are AT&T's Definity series (also known as the System 75 and Sytem 85) and Northern Telecom's Meridian series. Other manufacturers include ROLM, Siemens, NEC, and Mitel.
---------------------------------------------------------------------------
C-35. What is a VMB?
A VMB (Voice Mail Box) is a computer that acts as an answering machine for hundreds or thousands of users. Each user will have their own Voice Mail Box on the system. Each mail box will have a box number and a pass code.
Without a passcode, you will usually be able to leave messages to users on the VMB system. With a passcode, you can read messages and administer a mailbox. Often, mailboxes will exist that were created by default or are no longer used. These mailboxes may be taken over by guessing their passcode. Often the passcode will be the mailbox number or a common number such as 1234.
Two common VMB systems are AT&T's Audix system and Northern Telecom's Meridian Mail.
---------------------------------------------------------------------------
C-36. What are the ABCD tones for?
The ABCD tones are simply additional DTFM tones that may be used in any way the standard (0-9) tones are used. The ABCD tones are used in the U.S. military telephone network (AutoVon), in some Automatic Call Distributor (ACD) systems, for control messages in some PBX systems, and in some amateur radio auto-patches.
In the AutoVon network, special telephones are equipped with ABCD keys. The ABCD keys are defined as such:
A - Flash B - Flash override priority C - Priority communication D - Priority override
Using a built-in maintenance mode of the Automatic Call Distributor (ACD) systems once used by Directory Assistance operators, you could connect two callers together.
The purpose of the Silver Box is to create the ABCD tones.
See also "What are the DTMF Frequencies?"
---------------------------------------------------------------------------
C-37. What are the International Direct Numbers?
The numbers are used so that you may connect to an operator from a foreign telephone network, without incurring long distance charges. These numbers may be useful in blue boxing, as many countries still have older switching equipment in use.
Australia (800)682-2878 Austria (800)624-0043 Belgium (800)472-0032 Belize (800)235-1154 Bermuda (800)232-2067 Brazil (800)344-1055 British VI (800)278-6585 Cayman (800)852-3653 Chile (800)552-0056 China (Shanghai) (800)532-4462 Costa Rica (800)252-5114 Denmark (800)762-0045 El Salvador (800)422-2425 Finland (800)232-0358 France (800)537-2623 Germany (800)292-0049 Greece (800)443-5527 Guam (800)367-4826 HK (800)992-2323 Hungary (800)352-9469 Indonesia (800)242-4757 Ireland (800)562-6262 Italy (800)543-7662 Japan (800)543-0051 Korea (800)822-8256 Macau (800)622-2821 Malaysia (800)772-7369 Netherlands (800)432-0031 Norway (800)292-0047 New Zealand (800)248-0064 Panama (800)872-6106 Portugal (800)822-2776 Philippines (800)336-7445 Singapore (800)822-6588 Spain (800)247-7246 Sweden (800)345-0046 Taiwan (800)626-0979 Thailand (800)342-0066 Turkey (800)828-2646 UK (800)445-5667 Uruguay (800)245-8411 Yugoslavia (800)367-9842 (Belgrade) 367-9841 (Zagreb) USA from outside (800)874-4000 Ext. 107
---------------------------------------------------------------------------
C-38. What are some telephone switches?
SWITCH VENDOR TYPE DESCRIPTION -------- ------- ------- ----------------------------------- 1AES AT&T Analog No. 1A ESS 1ES AT&T Analog No. 1 ESS 2BES AT&T Analog No. 2B ESS 2ES AT&T Analog No. 2 ESS 3ES AT&T Analog No. 3 ESS 3XB AT&T E/M No. 3 Cross-Bar 4ES AT&T Digital No. 4 ESS 5AXB AT&T E/M No. 5A Cross-Bar 5ES AT&T Digital No. 5 ESS 5ORM AT&T Digital Optical Remote Module 5RSM AT&T Digital Remote Switching Module 5XB AT&T E/M No. 5 Cross-Bar AXE10 Ericsson Digital Stand Alone or Host AXRSS Ericsson Digital Remote DGTL Digital Generic Digital Switch DMS1/200 NTI Digital DMS 100/200 DMS10 NTI Digital DMS 10 DMS100 NTI Digital DMS 100 DMS200 NTI Digital DMS 200 DPN NTI Packet Packet Switch EDX Siemens Packet Packet Switch NC23 NEC E/M NEC Cross-Bar NEAX61E NEC Digital NEC switch RLCM NTI Digital Remote Line Conc Module RLCM-10 NTI Digital Remote Line Conc Module RLM NTI Digital Remote Line Module RSC NTI Digital Remote Switching Center RSCI NTI Digital ISDN RSC RSLE NTI Digital Remote Subscr Line Equip RSM AT&T Digital Remote Switching System RSS AT&T Analog Remote Switching System RSU Digital Generic Remote Switching Unit SXS AT&T E/M Step by Step
SECTION D
|