Today's Messages (OFF)  | Unanswered Messages (ON)

Forum: Alinco Mods
 Topic: Alinco DJ-160 Mod Extend TX
Alinco DJ-160 Mod Extend TX [message #2996] Sat, 06 July 2013 01:04
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member
The new Alinco DJ-160 Radio will receive between 137-174 Mhz, and transmit in the 2Meter band only (144-148Mhz). A simple modifihoneyion to the radio will enable it to transmit in the full range it receives currently. I have not tested the output power on other frequencies (Due to my one and only watt meter getting fried) however I have tried setting a weather receiver a small distance away, and I did hear the radio in the receiver. To make the mod, the following must be done: (I assume that you have some experience with electronics and that you can tell a wire from a resistor, from a transistor)

1) Take the battery of the radio by lifting the battery release button. If you look at the bottom of the radio, there will be a metal plate that is held on with 4 small screws. Take this plate off, noting exactly how the clip was held on (like the slot for the battery release clip)

2) On the back of the radio there are two screws that hold the back of the radio on, take these screws out.

3) Now you should be able to lift the bottom part of the radio by the battery release button slightly apart. I was told that you should take the top knobs off, but I found that I didn't have to.

4) If you take the Battery Release Button and turn it about 90 degrees, the button should come out easily. After you get the small piece of plastic that is the button, you should see a yellow wire behind where the clip was.

5) Take a small wire cutter and CUT this YELLOW wire. You should probably make sure that the wire doesn't have bare metal showing from a lousy cutter, because I don't think that grounding this wire to the case would be HEALTHY for your radio. Smile

6) After You cut this wire. Assemble the radio, and just before you turn on the radio, do a power reset by holding the FUNC button while turning on the radio. This will reset the radio to ALL of the factory set parameters. YOU WILL LOOSE PROGRAMMED REQUENCIES that were programmed into the memory mode of the radio, so just write the frequencies down before proceeding with the above instructions.

7) The radio should be just like new, except that the transmit will be enabled for ALL frequencies! GOOD Luck!

If you use these mods for ILLEGAL purposes, pity upon thy sole, for you do not belong in the ranks of Amateur Radio. This
information is only supplied for Legal and Informational Purposes
only and I can NOT be held responsible for anything that you do with this INFO. And if you screw up your radio, TOO BAD. I can't be held responsible.

Name: Donald L. Schleede
Call: KB2LZF

[Updated on: Sat, 06 July 2013 01:06]

Forum: Purchasing Equipment
 Topic: MINT Elecraft K3/100
MINT Elecraft K3/100 [message #2989] Mon, 20 May 2013 02:08
raycoustier  is currently offline raycoustier
Messages: 3
Registered: May 2013
Junior Member
For Sale: Loaded Elecraft K3 and P3 panadapter with many options
including the second receiver and antenna tuner. It was a kit but expertly assembled
and it works and looks great.
Below is the complete list of options:
K3/100 - 100w Transceiver ......KBPF3 - gen coverage bandpass filter
KDVR3 - digital voice recorder......KFL3A-500 - 500hz cw filter
KFL3A-6K - 6khz AM filter..........KFL3B-FM - 13 khz FM filter
KRX3- second receiver.......KTCXO3-1 - TCXO 0.5PPM
KXV3A - K3 rx ant,IF out, Xvtr interface.....MH2 - Hand Mic
P3- Panadapter
Asking : $1850 shipped (worldwide)
Contact :

Icom IC-756 Pro III in as new condition from a non smoking environment. I purchased the radio new. The radio is pristine, no scratches,dings or marks and it works as it should. NO ISSUES !
Comes with PS-125 power supply microphone, power cord, manual and factory box and packing materials S/N 3203519.
Price $1300.00
Mr. Ray
Contact :
(408) 419-9615
 Topic: For sale:Pioneer CDJ-400 & DJM-400 Mixer Package
For sale:Pioneer CDJ-400 & DJM-400 Mixer Package [message #196] Sun, 19 April 2009 03:22
delivery1  is currently offline delivery1
Messages: 1
Registered: April 2009
Location: ca
Junior Member
we are a registered delaers of musical instrument such as Keyboards,Piano,Guitar,Digital Mixers and more. With our experience, we are very focused on the

needs of our customers and provide excellent quality products to our customers.

our items comes with standard international warranty,and 6 months factory guarantee plus 6 months return policy.We ship worldwide through FedEx, UPS or DHL

and delivery is within 2-3 days worldwide.we are ready to send you a full price list on request.


JBL LSR4328P Pak Studio Monitor..............$750usd
JBL LSR4326P Pak Studio Monitor...............$690usd
JBL LSR4312SP Studio Monitor..................$600usd
JBL LSR6328P Package Studio Monitor ..........$1,00usd
JBL LSR6325P/5.1 Studio Monitor...............$900usd

ADAM Audio S3A Studio Monitor................$800SD
ADAM Audio P22A Studio Monitor...............$690usd
ADAM Audio P33A Studio Monitor...............$650usd
ADAM Audio Sub10 MK2 Studio Monitor...........$780usd
ADAM Audio S2A Studio Monitor................$730usd

YAMAHA Tascam DM3200 Digital Mixer----------------1,000$
YAMAHA N12 12-CHANNEL DIGITAL MIXER---------------650$
Yamaha O2R96V2 Digital Mixer .....................$4000usd
Yamaha 01V96 V2 Digital Mixer ....................$1000usd
Yamaha N12 12-Channel Digital Mixer...............$550usd
Yamaha N8 8-Channel Digital Mixer ................$450usd

Pioneer CDJ-400 & DJM-400 Mixer Package-----------1,200$
Pioneer DJM-1000 6 Channel Mixer------------------1,500$
PIONEER CDJ-800 MK3 PLAYER ........................$600
PIONEER CDJ-1000 MK2 PLAYER .......................$300
PIONEER CDJ-800 MP3 MK2 PLAYER ....................$400
PIONEER DJM 1000...................................$700
PIONEER DJM 800....................................$600
PIONEER DJM 600....................................$500
Pioneer DVJ-X1 DVD ................................$700

ALLEN & HEATH GL 3300 MIXER SOUND BOARD----------------1,500$
ALLEN & HEATH GL2400-24 Channel Mixer Board w/ATA Case--800$
Allen & Heath GL2800 832 32-Channel Live Mixer Console--2,000$

Korg M3-88 Key Workstation/Sampler ...................$1,100usd
Korg Pa2XPro 76-key Arranger Keyboard.................$1,800usd
Korg TR61 61-key Workstation...........................$510usd
Korg M3 73 73-key Workstation/Sampler.................$900usd
Korg M3 61 61-key Workstation.........................$800usd






Forum: Technical Discussion
 Topic: sudden decrease in mic audio Icom IC_2200H
sudden decrease in mic audio Icom IC_2200H [message #342] Wed, 06 April 2011 23:41
W3RX  is currently offline W3RX
Messages: 1
Registered: April 2011
Junior Member
I have a rarely used Icom IC-220H that used to have very nice transmit audio.

Yesterday I transmitted and everyone said that it had low audio, and a little bit of a muffled sound. I pulled it from the car, and tested it on the bench. I get full power out, and all functions (as far as the usual menu items) work fine. It is set to the wide (W) setting, which is where I have always had it (it is really low, now, on the N setting).

There is now doubt that the audio is not what it used to be in amplitude or quality. My HT sounds much, much better, if that gives you any idea. Besides the loss of amplitude, there is a loss of bass, and perhaps a little muffle sound. It is hard to describe. I went ahead and drilled a bigger hole in the mic for the element to have a chance to get more from my voice, and that does not help at all, as I expected since it was working fine before.

A visual inspection inside the control head and the body of the rig showed nothing out of the ordinary.

I will say that the Jeep that this rig was in made a moderate amount of alternator whine. Maybe there are spikes on the 12 volts that zapped something?

Any ideas?

 Topic: spectrum analyzer
Re: spectrum analyzer [message #229 is a reply to message #223 ] Wed, 23 June 2010 01:54
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member
Tektronix has a nice PDF on Spectrum Analyzers. You can do a google search for "tektronix fundamentals of real time spectrum analyzers" and that PDF should be listed somewhere on that first page. But it depends on what analyzer you have, if you are looking for the use of the controls, etc, you will probably have to get the manual on the scope itself. I have an HP and it is fairly easy to use. Good luck!
spectrum analyzer [message #223] Mon, 03 May 2010 13:55
jaredaengel  is currently offline jaredaengel
Messages: 1
Registered: May 2010
Location: california
Junior Member
I just signed up to this forum with the intent of getting some help in figuring out how to use a spectrum analyzer. Does anybody know anything about those things?
 Topic: ADI AT600 Radios - HELP
ADI AT600 Radios - HELP [message #210] Sun, 27 September 2009 15:34
RBoyette  is currently offline RBoyette
Messages: 2
Registered: September 2009
Location: Ft Myers, FL
Junior Member
I have several AT600 ADI radios from when I did search and rescue work. I pulled these radios out and they still work but I need new batteries. Where do I get them? How about a manual or anyone who knows how to program them? Any help is appreciated.

 Topic: alinco dj-v5
alinco dj-v5 [message #202] Thu, 10 September 2009 16:23
garster  is currently offline garster
Messages: 1
Registered: September 2009
Location: ontario canada
Junior Member
i have an alinco dj-v5 and just recently i have noticed when i tried to charge the battery and try to turn on the radio it is not getting any power can someone please help me.
 Topic: Anyone repair cracked case's on a VX-170?
Anyone repair cracked case's on a VX-170? [message #199] Sat, 13 June 2009 17:54
Beltgunner  is currently offline Beltgunner
Messages: 1
Registered: June 2009
Location: S.E. Ohio
Junior Member
I recently discovered my VX-170 has a crack running from the Antenna mount to the Battery compartment.I use this Radio doing relief work in hurricane zones so the waterproof feature is kinda important.Im not sure how much it would cost to get repaired considering I can get another Brand new Radio for $100 bucks on ebay so I'm not sure its worth messing with..Anyone have any Idea's?
 Topic: ICOM Models HM77, HM78, HM79, HM95, HM97 Microphone Pin-outs
ICOM Models HM77, HM78, HM79, HM95, HM97 Microphone Pin-outs [message #107] Wed, 07 February 2007 23:36
kc2nda  is currently offline kc2nda
Messages: 29
Registered: December 2004
Location: New Paltz
Junior Member
ICOM Models HM77, HM78, HM79, HM95, HM97 Microphone Pin-outs


PIN 1 +8 VOLTS DC output (max 10 Ma)

[Updated on: Wed, 07 February 2007 23:38]

Forum: Buyer/Seller Feedback
 Topic: coach outlet store online 65692
coach outlet store online 65692 [message #2795] Sat, 20 April 2013 04:03
Anonymous Coward
Related articles:

After you've chosen an era, you can start looking at the setting for your layout. With the Steam era,coach outlet store online, you can choose from a wide range of setting including, for example, the Rockies with lots of mountains and trees. Or you could choose the Prairies with lots of wide-open spaces broken up only by tiny farm towns,louis vuitton outlet online.
Misting fans are basically like an electric fan with motor and blades. It has a pump that stores water which is been pressurized and sprayed out through a nozzle. The water droplets would be very small in diameter and as soon as they are spurted out, the air propelled by the fan would evaporate it quickly thereby lowering the temperature in the surrounding area.
However, all such information can only be in the form of predispositions - ways to behave given the 'right' (although negative) conditions for the inherent information/potential behaviours to flourish, This must be the case, for adaption (survival) purposes - it would not be sensible to be born into an unknown environment with 'fixed' attitudes/behaviours. Eg,coach bags.
Named after Professor David Littmann, a famous cardiologist from Harvard Medical School, who created his stethoscope in 1963, this medical tool is critically acclaimed for its accuracy, precision and quality, In 1967 3M acquired Dr,coach outlet. Littmann firm,louis vuitton purses, Cardiosonics Inc., and went on developing and improving these stethoscopes still carrying the Littman brand,Coach Embossed Bags, with such improvements as the ground-breaking Ambient Noise Reduction mechanism that decreases distracting room and outdoor noises by an average of 75 per cents (-twelve decibels) from the diaphragm actual range and from the bell.
For chic casual,louis vuitton, it is adapted that women action some accessories and arise well-coordinated. Slacks and a cottony shirt forth with that,coach factory outlet, would advice cull off a accidental yet semi-formal look. Wearing a blow clothing would additionally be advised adapted for women,coach outlet.
During the summer,coach factory outlet, you should always try to carry a cover-up if you may be going indoors,michael kors. Buildings tend to blast the air conditioner,coach purses outlet, and you can be freezing inside when it is 90 degrees outside. A cover-up is especially useful when you are going out after work as you can leave it on during the day and take it off when you walk out of the building..
Craft Activities kits is also expected to debut on the buy windows xp cd "I will surely lead to frustration and waste of time a user could upload any face image,michael kors outlet, which would have wanted, and whether he or she receives a letter of appreciation. Most of them she landed her very first season back in LA and graduated high school mathematics thrown in. Usually it will continue to win is the commercial break buy windows xp recovery cd up..
 Topic: SELL BRAND NEW Pioneer CDJ-1000MK3,NOKIA N97,Pioneer PDP-5050HD plasma
SELL BRAND NEW Pioneer CDJ-1000MK3,NOKIA N97,Pioneer PDP-5050HD plasma [message #203] Fri, 11 September 2009 04:53
buyeasy  is currently offline buyeasy
Messages: 2
Registered: September 2009
Junior Member
Name & Registered Office:
Company No. 04721972
phone:44 701 115 3066

We carry large collection of Dj equipment

Interested buyer should comtact us with the email address below.



Atlantic Technology System 4200e Speaker.............£750

Canton CD 3500 Main / Stereo Speaker...................£800

Aperion Audio Intimus 633 Concert XD System........£900

2 JBL PRX518S (18" Self Powered Subwoofer System)....£320

Yamaha YSP-1100 Main / Stereo Speaker...............£450

Bose 901 VI Main / Stereo Speaker.........................£400

Klipsch LA SCALA Main / Stereo Speaker...............£900

Paradigm Titan Main / Stereo Speaker.....................£900

Definitive BP7001SC Main / Stereo Speaker............£950

KEF Audio KHT5005.2 System..............................£600

Revel F52 Main / Stereo Speaker...........................£1,200


Denon DN-D4500 Pro DJ Dual CD/MP3 Player...£300

Denon DN-D9000.....................£300

Denon DN-D6000.....................£450

Denon DN S3500 (CD player)....£200

Denon DN S5000 (CD player)....£200

Denon DN X1500s (Mixer).........£200

Denon DN-HD2500 ..................£300

Pioneer CDJ-1000 CD Player.......£350

Pioneer CMX-3000 Twin CD Player...£250

Pioneer CDJ-800 CD Player........£300

Pioneer CDJ-1000MK2...............£340

Pioneer CDJ-800MK2.................£320

Pioneer CDJ-1000mk2...............£280

Pioneer CDJ-1000MK3..............£350

Pioneer CDJ-500 CD-Player.......£200

Pioneer DJM-1000 .....................£470

Pioneer DJM-800........................£320

Pioneer DJM-600 Mixer ..............£200

Pioneer DJM-3000 19" Mixer ......£210

Pioneer DJM-600-S Mixer...........£250

Pioneer DJM-909 Battle Mixer.....£220

Technics SL-1200MK2...............£200

Technics SL-DZ 1200.................£220

Technics SL-1210M5G Pro Turntable.. .£240

Technics SL-1210MK5 Pro Turntable ...£210

Technics SH-MZ1200 4 Channel DJ Mixer.........£200

Pioneer EFX-1000 Pro-Effector..£280

Pioneer DVJ-X1 DVD Player......£580

Pioneer DVJ-1000...............£500

Pioneer VSW-1 Video Switcher ..£150

Pioneer DMP-555 MultiMedia Player..£270


Robe ColorWash 575 AT Moving Yoke DMX Lighting Fixture...£1500


Behringer Europower EP1500 Power Amplifier..... £230

Behringer Ep1500 Power Amplifier ......£300

Behringer EP1500 Power Amplifier.......... £230

Behringer A500 Reference Studio Power Amplifier......... £150

Behringer EP1500 - 2-Channel Rackmount Power Amplifier Power ... £230

Behringer EP1500 Europower Stereo Power Amplifier......... £230

Behringer EP2500 - 2-Channel Rackmount Power Amplifier Power ... £300

Behringer EP2500 Europower Stereo Power Amplifier........ £300

Behringer A500 Reference Studio Power Amplifier......... £100

Behringer EP1500 Power Amplifier........... £230

Garmin nüvi 360 GPS Receiver......£150
Garmin Nuvi 660 GPS Receiver......£160
Garmin nüvi 680 GPS Receiver......£150
Garmin zumo 550 GPS Receiver....£200
Garmin StreetPilot 7500 GPS Receiver...£310

you can contact us for the price of any of the below equipments.

Guitars and Basses
Guitar Amplifiers

MIDI Keyboard Controllers
Portable Keyboards
Keyboard Accessories

Drums and Percussion
Drums and Drum Sets

Studio Equipment
Recorders and Duplicators
Studio Monitors

Live Sound Equipment
Lighting and Lasers
PA and Sound Systems
Power Amps

Orchestral Instruments
Brass Instruments
String Instruments
Woodwind Instruments

Folk and Ethnic Instruments
View all types...

General Music Accessories
Conducting Batons
Microphone Stands

DJ Equipment
DJ Audio Effects
DJ CD Players
DJ Mixers


Pioneer PDP-5050HD plasma TV $1000usd
Pioneer PDP-424MV Plasma TV $756usd
Pioneer PDP-42A3HD Plasma TV $600usd
Pioneer PDP-434CMX Plasma TV $500usd
Pioneer PDP-43A5HD Plasma TV $560usd
Pioneer PDP-4360HD Plasma TV $700usd
Pioneer PDP-504CMX Plasma TV $600usd
Pioneer PDP-505CMX Plasma TV $500usd
Pioneer PDP-5060HD Plasma TV $700usd
Pioneer PDP-614MX Plasma TV $780usd


Sharp Aquos LC-45GX6U 45 in Flat Panel LCD TV.$500
Sharp Aquos LC45GD4U 45 in Flat Panel LCD TV .$350
Sharp Aquos LC-45GD7U 45 in Flat Panel LCD TV $450
Sharp Aquos LC-20S4U 20 in Flat Panel LCD TV .$250
Sharp Aquos LC-26DA5U 26 in' LCD TV...........$300
Sharp Aquos LC-37D7U 37 in Flat Panel LCD TV .$400
Sharp Aquos LC-37D7U 37 in Flat Panel LCD TV .$450
Sharp Aquos LC-32DA5U 32 in Flat Panel LCD TV $350


NEC 42XM3 Plasma TV $700usd
NEC 42XR3 Plasma TV $500usd
NEC 50XM4 Plasma TV $780usd
NEC 50XR4 Plasma TV $900usd
NEC 61XM3 Plasma TV $560usd
NEC 61XR3 Plasma TV $500usd
NEC 84VP4 Plasma TV $690usd


Hitachi CMP4211u Plasma $850
Hitachi CMP4212u Plasma $350
Hitachi 42HDF52 Plasma HDTV $400
Hitachi 42HDT52 Plasma TV $440
Hitachi 55HDS52 Plasma HDTV $480
Hitachi 55HDT52 Plasma TV $650
Hitachi CMP-55HDM71 Plasma $420


Sony PFM-42V1/S Television.....$500usd
Sony KDE-61XBR950 Television..$5000usd
Sony KDE-42XBR950 Television..$1000usd
Sony PFM-42X1/S Television.....$500usd
Sony KDE-42XS955 Television....$550usd
Sony FWD-50PX1/S Television...$1200usd
Sony FWD-42PV1 Plasma TV.......$500usd
Sony KE-42M1 Plasma TV.........$580usd
Sony PFM-42X1 Plasma TV........$600usd
Sony KDE-42XS955 Plasma TV.....$700usd
Sony FWD-50PX1 Plasma TV.......$750usd
Sony KDE-50XS955 Plasma TV.....$680usd
Sony Grand WEGA KDFE42A10 TV...$400usd
Sony Grand WEGA SXRD KDS R60XBR1$600usd
Sony Grand WEGA SXRD KDS R50XBR1$450usd
Sony Wega KDF-E50A10 TV ......$450usd
Sony Wega KDL-V40XBR1 TV ......$400usd
Sony Wega KD-37FS130 TV ......$400usd


Samsung HP-R4252 Television $500usd
Samsung LN-R328W - LCD TV 32 $500usd
Samsung LN-R408D - LCD TV 40 $800usd
Samsung LT-P326W - LCD TV 32 $650usd
Samsung LTM 225W - LCD TV 22 $500usd
Samsung PPM63H3-plasma panel63 $2000usd
Samsung HPP5031 - plasma panel50 $1000usd
Samsung HP-R4252 Plasma TV $560usd
Samsung HP-R5052 Plasma TV $1000usd
Samsung HP-P5581 Plasma TV $950usd


Interested customers who wish to buy our goods should send us their correct shipping address to our mail box Below and your final order( HOW MANY UNITS YOU WANTS TO ORDER FROM US) Including the following information below.

BUYER FULL NAME:...........................
BUYER COUNTRY:.............................
ZIP CODE:...................................
BUYER PHONE NUMBER(IF ANY):................

pls only serious buyer should contact us.... Email: for more information.

 Topic: Apple iPhone 16GB Unlocked @220usd
Apple iPhone 16GB Unlocked @220usd [message #173] Sun, 27 April 2008 12:48
lewmab9  is currently offline lewmab9
Messages: 8
Registered: October 2006
Junior Member mpanyId=02581567





Registered No.02581567

We sell a wide range of products. Nokia , Motorola , Samsung , Sony Ericsson , Nextel , Siemens s. Digital Cameras , Nikon Camera, Canon Camera. Games , Xbox 360 , NIntendo , Play Station 2 , Sony PSP's , GBA. PDA.Pocket pc Tomtom Go 700 , Tomtom Go 600 and Tomtom Go 500 Ipods Nano , Ipod Mini , Ipod Shuffle. Laptops/Notebook.and many more, All our product are brand new,
1. Complete accessories(Well packed and sealed in original company box)
2. Unlocked / sim free.

3. Brand new (original manufacturer) box - no copies
4. All phones have english language asdefault
5. All material (software, manual) - car chargers - home chargers - usb
data cables -holsters/belt clips - wireless headsets(bluetooth) -
leather and non-leather carrying cases - batteries.

If you are interested, forward your questions and enquires to us via
email with your order and shipping details. we give 1 year warranty for
every product sold out to our costumers, our product are company class
1 tested and approved by global standard organization of wireless
industries, Brand new merchandise with complete accessories, extra
and battery.serious buyers should.
Contact us on:


Best Regards,
Forum: Motorola Mods
 Topic: Motorola Maxar/Moxy 2M Conversion
Motorola Maxar/Moxy 2M Conversion [message #1476] Sat, 01 September 2012 01:21
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member
By Tom Herman, CETma N1BEC/7

I've always wondered how easy it would be to put the Motorola Maxar/Moxy series radios onto the two meter ham band.

My gut feeling was that it shouldn't be too hard, but any interest was strictly academic because I had multichannel synthesized equipment for 2M. I hadn't had a reason to go ahead and try a conversion until my friend John, KC7OQN, came up with an old radio that he wanted to pop onto 146.52 Simplex. Many thanks to John for the "Guinea Pig", and for ponying up the $30.00 for two crystals.

My philosophy with radio conversions is to do the minimum amount of parts substitution that will give best practical performance. The usual approach is to replace capacitors, and not mess with coils, fragile, or hard to get to parts unless I absolutely have to. K.I.S.S!

The victim was a "Mid Split" (150.8-162 MHz) D23TRA1300AK two channel low power unit. The first order of business was to check out the radio to see if it worked at all on its original channel. It did, and the rocks were ordered from West Crystal in British Columbia. They got here three weeks later, right on schedule.

A quick check showed receive sensitivity was pretty good (~ .23 uV for 12 dB SINAD), but the transmit power was a tad low (4.6 watts @13.8 Volts), but I decided to go ahead with the conversion anyways.

I inadvertently left the unit powered up while I got called away from the service bench to attend to some "honey do's". When I got back, there was the unmistakable odor of burned electronics in the air. The unit was still receiving, but had no transmit.

Checking the circuit board showed a burned inductor (L 106). A closer check revealed this was an effect, and not a cause, and if I had installed another part, it would have burned up as well. The ultimate problem was a dead short on the other side of L 106: C 130, which turned out to be a .05 uF/25 volt tantalum capacitor.

It's fairly common for the Tantalum caps in the Moxy/Maxars to go critical, so a good S.O.P. is to leave a potential candidate unit powered up on a current limited power supply in a well ventilated area to see if the caps will hold up or not.

Fortunately, I have a small mountain of UHF Maxar/Moxy's, and since the exciters are practically identical to the VHF??????s, they became a valuable source of parts and quickly got the D23 going again.

Original operating frequencies were about 158 MHz TX, and 152 MHz RX. The old crystals were removed, and the '52 rocks installed. I elected to do the transmitter conversion first. The plan was to try to just align the unit, and if that worked, to go through afterwards and mop up any circuits that needed optimizing.

Keying up, I spotted the fundamental and triple of the oscillator, and zeroed the tripled signal on frequency.

L 102 and L03 are tuned first, while metering M3. L 102 tuning is quite sharp, L 103 a bit broader.

There was no L105 M5 reading, so M3 was tuned for a dip when adjusting L 105. The tuning was broad.

L 107 and L 108 tuned broad, then the PA was adjusted. Power output screamed to 14 watts! (I assume that the lower output prior to conversion was due to a partially shorting C 130 pulling down the B+ going to the tripler stage).

The tuning of L 105, L107, and L 108 were not optimum, the cores being bottomed out on the circuit board or close to it. (Managed to break the L 105 core, parts car to the rescue again!)

Check out the following table for the parts that needed to be changed out:
Inductor AffectedCapacitor ChangedHighMid"Low"
L 105C 127434756(Note: all capacitances in pico-Farads.)
L 107C 1316810
L 108C 13481015

With the new capacitors installed, all three cores tuned well towards the center of the slug form. Power was then backed down to ten watts even. Don't try going to 12 pF for C 131, 10 is ideal.

The receiver was a most pleasant surprise! Without doing anything other than dropping the crystal in the right slot and centering it on frequency, it gave 12 dB SINAD at 1.75 microvolts! Further tuning was done, and the radio dropped to a stunning .25 microvolts 12 dB SINAD with no parts replacement. No conversion was necessary on the receiver.

[Updated on: Sat, 01 September 2012 01:22]

 Topic: Mitrek High Split to 6M Ham Band Conversion
Mitrek High Split to 6M Ham Band Conversion [message #1039] Sat, 15 October 2011 04:57
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member

By Tom Herman, CETma N1BEC/7

Here are the parts that need to be changed out to make the Motorola Mitrek operate well on the Six Meter Ham Band.

The criteria here was to make the conversion as easy as possible, and to do this by changing out capacitors only, and just as many as are actually needed for good operation.

Possibly other parts could be changed out, but the following list will get you the best performance for the least grief!

Do yourself a favor, and use a good, hot soldering iron. To do this conversion, a number of coil shields must be removed, and some of the parts are soldered onto fairly substantial groundplanes.

Also, if you do not solder the cans back on well, you will wind up with annoying intermittents!

After re-tuning, the Mitrek in question gave me the rated power of 50 watts, and good receiver sensitivity.


Part #        Orig. Value   6M Value    Notes:
C 701         16 pF             12 pF   Watch soldering on cans of L 701- 
C 703         24 pF             20 pF   L 705: Very Hi Q circuits! Poor
C 704        150 pF            120 pF   Soldering will cause erratic TX
C 707         33 pF             24 pF   power!
C 710         22 pF             15 pF
C 712         22 pF             15 pF
C 713         27 pF             20 pF

Part # Orig. Value 6M Value Notes: C 166 100 pF 80-90 pF Rx picked up 0.05 uV sens. Tunes C 101 30 pF 15 pF much better after conversion! C 104 22 pF 15 pF C 106 22 pF 15 pF C 108 22 pF 15 pF C 110 22 pF 15 pF
Good Luck and have fun!

 Topic: Motorola HSN1000A
Motorola HSN1000A [message #1034] Tue, 11 October 2011 15:35
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member
How to modify a Motorola HSN1000A amplified speaker for use with other radios, scanners, etc. Obtain a Molex # 0003061061 or 0003061062 female connector. Looking at the end of the female connector with the beveled corners to the left and the two triangular notches to the right, the pins are as follow:

upper left: audio ground

upper right: audio in

middle left: +13.8 volts

middle right: power ground & external speaker ground

lower left: external speaker out

lower right: internal speaker in

Connect a 1/8' (3.5mm) mono mini phone plug across the primary winding of an audio transformer. Connect the secondary winding of the audio transformer across the audio in and audio ground pins on the Molex connector.

Plug the mono mini phone plug into the headphone jack of your audio source. Connect power across the +13.8 volt and power ground pins on the Molex connector. Also connect the power ground pin on the Molex connector to the sleeve connection of a 1/8' (3.5mm) mono mini phone jack. Connect the external speaker out pin on the Molex connector to the tip connection of the mono mini phone jack. Connect the internal speaker in pin on the Molex connector to the normally closed connection on the mono mini phone jack. Plug an external speaker into the mono mini phone jack if you wish to use one or leave the mono mini phone jack unplugged to use the speaker inside the Motorola HSN1000A.

If you always want to use the internal speaker of the Motorola HSN1000A, you can simply jumper the external speaker out pin to the internal speaker in pin and leave off the mono mini phone jack. If you want to use the HSN1000A with a handheld radio having its own power source (e.g., batteries) isolated from the power source for the HSN1000A, then the audio transformer is optional. Ideally, the audio transformer would have 8:8 ohm winding impedance, but I used a 600:600 ohm transformer that can easily be scavenged from an old telephone modem or bought at Radio Shack, if they still carry item # 273-1374.

If you want to connect the HSN1000A to an audio source with a stereo output, simply use a 1/8" (3.5mm) stereo mini phone plug instead of a mono mini phone plug and connect only the tip and sleeve connections, leaving the ring connection unconnected.

 Topic: Syntor X Amateur Conversion (2M)
Syntor X Amateur Conversion (2M) [message #309] Thu, 20 January 2011 00:38
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member
I have found the Syntor to be a relatively inexpensive easy to convert radio for 2 Meter amateur use.

The EEPROMS used commonly in the orange label memory module are 2816A(28C16)devices normally supplied by SEEQ and have no markings on the top of the package.

There is a more rare version that has a white label and it uses a unique one time burned prom. Best bet if you encounter one of these would be to upgrade to the orange label module but there are a couple of devices on the personality board that are not compatible with the faster memory module Motorola document 68-80100453 explains this in depth if you have access.

The PROMS are easily programmed using a commercial EPROM programmer that supports the 2816 device I use a Pocket Programmer from Transtronics and it seems to work fine. There is software available that allows the image to be generated and loaded to the programmer which in turn programs the memory. is an excellent source for the software.

VCO modification may be needed in some cases for general ham use the solder jumpers on the VCO board need to be soldered together where the factory tuning cut was made as that will add the necessary capacitance to allow the VCO to lock on the new frequencies. If the unlock led located near the RF board is glowing constant when PTT is applied or in RX most likely the VCO will need modification or the software did not dump the data to the programmer correctly.

Beware I have ran into some freeware software that may have possibly used the wrong algorithm which resulted in incorrect code plug data even when the software reads correctly.

Good Luck with the mod.

[Updated on: Thu, 20 January 2011 00:49]

Forum: Radio Equipment
 Topic: FS Icom PW-1 1KW Amp & ICOM IC-756PRO III #MINT
FS Icom PW-1 1KW Amp & ICOM IC-756PRO III #MINT [message #1509] Fri, 12 October 2012 11:05
james2e0rum  is currently offline james2e0rum
Messages: 3
Registered: October 2012
Junior Member
Icom PW-1 1KW Amplifier
S/N-02319, this amplifier is in excellent condition! 10/12 meter mod done.
Includes original box, cables and manuals.
Must be a licensed amateur, this will be verified.
Feel free to email with any questions.
COSTS $1800usd

Mint ICOM IC-756PRO III in PERFECT FULL working condition and MINT cosmetics. If has been kept with cover (included) and comes with original box, cables, fuses, etc as new. I have used this radio for a while, and it puts out FULL output and absolutely everything work as it should. I can provide pictures and we can talk on 40 meters.
Costs: $1200usd

Contact : Mr. Jack
Email :
 Topic: FS:Icom PW-1 1KW Amplifier AND KENWOOD TS-950SDX.
FS:Icom PW-1 1KW Amplifier AND KENWOOD TS-950SDX. [message #1274] Thu, 23 February 2012 17:44
2w0cdz73  is currently offline 2w0cdz73
Messages: 1
Registered: February 2012
Junior Member
Icom PW-1 1KW Amplifier

S/N-02308, this amplifier is in excellent condition! 10/12 meter mod done.
Includes original box, cables and manuals.
Must be a licensed amateur, this will be verified.
Feel free to email with any questions.



KENWOOD TS-950SDX in excellent condition both electronically and cosmetically. Radio is a late production with serial number in the 90 million range. Non-smoker. Operating manual, hand mic, color sales brochures, and Service Manual (on CD) are all included.


  • Attachment: Ken.jpg
    (Size: 39.46KB, Downloaded 822 time(s))

 Topic: Rohn 100ft SS Tower
Rohn 100ft SS Tower [message #214] Fri, 06 November 2009 09:16
Messages: 1
Registered: November 2009
Location: Houston
Junior Member
I have two disassembled Rohn 100 ft towers for sale. Built 09/2004. $5000 each.
 Topic: yaesu ft-411e handheld for sale
yaesu ft-411e handheld for sale [message #180] Thu, 18 September 2008 03:39
tazmaniadevil  is currently offline tazmaniadevil
Messages: 1
Registered: September 2008
Location: stilesville,indiana
Junior Member

make me an offer

 Topic: Nokia N95 8GB @200usd
Nokia N95 8GB @200usd [message #172] Sun, 27 April 2008 12:46
lewmab9  is currently offline lewmab9
Messages: 8
Registered: October 2006
Junior Member mpanyId=02581567





Registered No.02581567

We sell a wide range of products. Nokia , Motorola , Samsung , Sony Ericsson , Nextel , Siemens s. Digital Cameras , Nikon Camera, Canon Camera. Games , Xbox 360 , NIntendo , Play Station 2 , Sony PSP's , GBA. PDA.Pocket pc Tomtom Go 700 , Tomtom Go 600 and Tomtom Go 500 Ipods Nano , Ipod Mini , Ipod Shuffle. Laptops/Notebook.and many more, All our product are brand new,
1. Complete accessories(Well packed and sealed in original company box)
2. Unlocked / sim free.

3. Brand new (original manufacturer) box - no copies
4. All phones have english language asdefault
5. All material (software, manual) - car chargers - home chargers - usb
data cables -holsters/belt clips - wireless headsets(bluetooth) -
leather and non-leather carrying cases - batteries.

If you are interested, forward your questions and enquires to us via
email with your order and shipping details. we give 1 year warranty for
every product sold out to our costumers, our product are company class
1 tested and approved by global standard organization of wireless
industries, Brand new merchandise with complete accessories, extra
and battery.serious buyers should.
Contact us on:


Best Regards,
 Topic: selling gear,
selling gear, [message #143] Tue, 02 October 2007 13:07
blacksheep  is currently offline blacksheep
Messages: 1
Registered: October 2007
Location: midwest
Junior Member
Yaesu FT-847 great condition, 650.00

Ameritron AL-80B 700.OO

Icom-272OH 150.00

Bird meter (43uhf) 215.00

All items are in original packaging with proper paper work, also owned by a non smoker.

Have other stuff and will list later.
 Topic: trans radio
trans radio [message #92] Mon, 18 December 2006 18:43
jokster5982  is currently offline jokster5982
Messages: 2
Registered: December 2006
Junior Member

trans diamond radio model 60 23 upper lower asking 350
 Topic: Kenwood TH-22AT
Kenwood TH-22AT [message #72] Tue, 22 August 2006 13:47
Arben  is currently offline Arben
Messages: 1
Registered: August 2006
Location: Tennessee
Junior Member
I have a Kenwood TH-22AT handy talkie for sell. Please visit for details.

2 GE BASE UNITS [message #71] Mon, 31 July 2006 01:02
MOTOROLA2006  is currently offline MOTOROLA2006
Messages: 1
Registered: July 2006
Junior Member

CHANNEL 1 RX 463.950 TX 468.950 PL 131.8
CHANNEL 2 RX 464.950 TX 469.950 PL 131.8

CHANNEL 1 RX 146.300 TX 147.300 PL 127.3
CHANNEL 2 RX 147.650 TX 148.650 PL 127.3

 Topic: HTX-212 2Meter Radio Shack Mobile
HTX-212 2Meter Radio Shack Mobile [message #4] Wed, 29 December 2004 00:24
n2nys  is currently offline n2nys
Messages: 2
Registered: December 2004
Location: Hyde Park, NY
Junior Member

HTX-212 2Meter Radio Shack Mobile - seller is opting out - busniness matter closed - found use for it in house - sorry - Dave

[Updated on: Fri, 09 September 2005 19:24]

Dave Bogdan
N2NYS (Formally KB2ZUH)
Entertainment Technician &
Computing Advisor
Home & Cell: 845-242-6653
\\\\\\\"God puts us all in each other lives for one reason or another. Some people come into our lives, stay a while, leave footprints on our hearts and we are never, ever the same\\\\\\\"
Forum: Kenwood Mods
 Topic: Kenwood TH-K20A - MARS / CAP TX Modification
Kenwood TH-K20A - MARS / CAP TX Modification [message #1396] Thu, 05 July 2012 01:19
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member
This modification is provided "as is," and is subject to change without notice. The author makes no warranty of any kind with regard to this modification procedure. The author shall not be liable for any error or for incidental or consequential damage in connection with the furnishing, performance, or use of this modification procedure.

It is illegal to operate outside the limits of your class license or permits.

Procedure for the Kenwood TH-K20A Mars Mod:

Turn off the transceiver and remove the battery pack.

Remove the antenna, channel selector knob, and volume knob.

Remove the Side Jack Accessory Cover.

Remove the two screws from the bottom of the radio on the back side.

Carefully lift the front panel up from the chassis, starting at the bottom of the radio. Be careful not to damage the speaker wires as you're opening the radio.

Locate and carefully remove the Diode reference D from the TX/RX unit - (see Figure 1).

Assemble the transceiver.

Reset the radio.
Press and Hold the F Key While Turning the Radio On
Release the F Key
Use the Channel Knob to Select Full Reset (FL.RST)
Press F then Press F Key Again to Confirm Reset

Transmitter Operating Range: 142 ~ 151.995MHz

KENWOOD TH-K20A – Full Extended TX Modification

This modification is provided "as is," and is subject to change without notice. The author makes no warranty of any kind with regard to this modification procedure. The author shall not be liable for any error or for incidental or consequential damage in connection with the furnishing, performance, or use of this modification procedure.

It is illegal to operate outside the limits of your class license or permits. Procedure:

Turn off the transceiver and remove the battery pack.

Remove the antenna, channel selector knob, and volume knob.

Remove the Side Jack Accessory Cover.

Remove the two screws from the bottom of the radio on the back side.

Carefully lift the front panel up from the chassis, starting at the bottom of the radio. Be careful not to damage the speaker wires as you're opening the radio.

Locate and carefully remove both Diodes reference C & D from the TX/RX unit - (see Figure 1).

Assemble the transceiver.

Reset the radio.
Press and Hold the F Key While Turning the Radio On
Release the F Key
Use the Channel Knob to Select Full Reset (FL.RST)
Press F then Press F Key Again to Confirm Reset

Transmitter Operating Range: 136 ~ 173.995MHz

Caution: This modification requires soldering equipment rated for CMOS type circuits. It also requires familiarity with surface mount soldering techniques. If you do not have the proper equipment or knowledge, do not attempt this modification yourself Seek qualified assistance.


Forum: PIC Microcontrollers
 Topic: Arduino Uno32 Bootloader Reprogramming
Arduino Uno32 Bootloader Reprogramming [message #985] Mon, 05 September 2011 20:29
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member
Some Ardruino boards were shipped with bad bootloaders. When you try to burn a new program, the programmer will throw an error like this:

avrdude: verifihoneyion error, first mismatch at byte 0x0000
0x0c != 0xff
avrdude: verifihoneyion error; content mismatch

Many people are having these problems with these boards. If you are having these problems you need to burn a new bootloader.

Connect to the Uno32 with a terminal program (like puttytel). Set the baud rate to whatever COM port the Uno32 is connected to and use 115200 for the baud rate. As soon as you connect, type !!! and then you should see something like this:

Explorer stk500V2 by MLS V1.0

Then type ? (question mark)

Bootloader>? CPU stats
Explorer stk500V2 by MLS V1.0
Compiled on = Apr 24 2011
CPU Type = 32MX320F128H
GCC Version = 3.4.4 Microchip MPLAB C Compiler for PIC32 MCUs v1.11(A)-2010050 4
DEVID = 5090A053

You will see the compile date.. This bootloader in this example was bad.

After the new bootloader was burned (file is attached). The problem should disappear. You must cycle the power. If you connect the Uno32 again with a terminal you will see the new compile date.

How do you reprogram the Arduino Uno32 bootloader?

This is a good question. There isn't anything that has a very good documentation for doing this. Some posts may tell you to return the board. If you can't understand the following, then it would be better to send the board back. BUT, this type of thing should really be learned if one isn't sure how to do this.

First the Arduino Uno32 board that was purchased, didn't have any pins installed (soldered) on the board for the ICSP section. You must take solder a 6 pin header to the board in order to use it.. I do not know why they didn't come with it in the first place. You can get header pins from Mouser or Digi-Key.

Then you will need a programmer that will program via the ICSP. A PICkit 2 in this case was used to reprogram the bootloader. A 12V power supply (doesn't need 12V, 9V will probably do just fine) was used to power the Arduino Uno32 board while this was being accomplished. If you don't power the Uno32 board, you will probably be drawing too much current for both the PICKit and the Arduino board. Hooking them in series to program will fail. The PICkit software will throw an error message saying the voltage is too low or wrong as soon as you load the program.

Open the PICkit software while the equipment is hooked up, load the hex file and burn! The Uno32 board needs to be restarted when completed. This should complete the process. If you don't have a PICkit, you can use any other programmer than has an ICSP port.

Hope this helps anyone that is having problems with their Arduino Uno32 boards... It isn't so intuitive and there isn't very much supporting documentation for it...
Arduino Uno32 ICSP
Arduino Uno32 ICSP

[Updated on: Mon, 05 September 2011 20:33]

 Topic: PIC Assembler Directives
PIC Assembler Directives [message #80] Sun, 01 October 2006 20:03
kc2nda  is currently offline kc2nda
Messages: 29
Registered: December 2004
Location: New Paltz
Junior Member

PIC Assembler Language Directives

Assembler directives are instructions that direct the assembler to do something.

Directives do many things; some tell the assembler to set aside space for variables, others tell the assembler to include additional source files, and others establish the start address for your program. The directives available are shown below:

= Assigns a value to a symbol (same as EQU)

EQU Assigns a value to a symbol (same as =)

ORG Sets the current origin to a new value. This is used to set the program or register address during assembly. For example, ORG 0100h tells the assembler to assemble all subsequent code starting at address 0100h.

DS Defines an amount of free space. No code is generated. This is sometimes used for allohoneying variable space.

ID Sets the PIC's identifihoneyion bytes. PIC16C5x chips have two ID bytes, which can be set to a 2-byte value. Newer PICs have four 7-bit ID lohoneyions, which can be filled with a 4-character text string.

INCLUDE Loads another source file during assembly. This allows you to insert an additional source file into your code during assembly. Included source files usually contain common routines or data. By using an INCLUDE directive at the beginning of your program, you can avoid re-typing common information. Included files may not contain other included files. NOTE: The Device Include directive (i.e. INCLUDE 'C:\PicTools\' ) for the targeted device MUST be at the beginning of your source code.

FUSES NOTE that FUSE CONFIGURATIONs can be '&' together on a single line and/or spread between multiple lines. ALL FUSES directives are ANDed together to create the composite FUSE CONFIGURATION. (view the device "include" file for specific fuse syntax)

IF Assembles code if expression evaluates to TRUE.

IFNOT Assembles code if expression evaluates to FALSE.

ELSE Assembles code if preceeding evaluation is rejected.

ENDIF Ends conditional evaluation.

RESET Sets the reset start address. This address is where program execution will start following a reset. A jump to the given address is inserted at the last lohoneyion in memory. After the PIC is reset, it starts executing code at the last lohoneyion, which holds the jump to the given address. RESET is only available for PIC16C5x chips.

EEORG Sets the current data EEPROM origin to a new value. This is used to set the data EEPROM address during assembly. This directive usually precedes EEDATA. EEORG is only available for PICs that have EEPROM memory .

EEDATA Loads data EEPROM with given values. This provides a means of automatically storing values in the data EEPROM when the PIC is programmed. This is handy for storing configuration or start-up information. EEDATA is only available for PICs that have EEPROM memory.

Assembler Directive Examples

Include 'C:\PICTOOLS\' ; loads default symbols
; for the targeted device.
FUSES _WD_OFF&_LP_OSC ; specify multiple fuse settings
; using the '&' operator.
FUSES _CP_ON ; Specifies 1 fuse setting per line.
Digit = 43h ; Assign value 43h to Digit
Max EQU 1Ah ; Assign value 1Ah to Max
>ORG 10h ; Set assembly address to 10h
Count DS 2 ; Define 2 bytes at 10h & 11h
; Bytes can be referred to
; later as Count and Count+1
ID 1234h ; Set 16C5x ID to 1234h
ID "ABCD" ; Set newer PIC ID to 'ABCD'
INCLUDE "KEYS.SRC" ; Include KEYS.SRC file at
; point of insertion
RESET Start ; Set 16C5x reset jump to
; lohoneyion at Start
Start mov Count,#00 ; This will be executed
; when PIC is reset
EEORG 10h ; Set EEPROM address to 10h
EEDATA 02h,88h,34h ; Store 3 bytes in EEPROM

[Updated on: Sat, 08 December 2012 02:44] by Moderator

 Topic: PIC Assembly Language Commands
PIC Assembly Language Commands [message #59] Sun, 21 May 2006 23:55
kc2nda  is currently offline kc2nda
Messages: 29
Registered: December 2004
Location: New Paltz
Junior Member

PIC Assembly Language Commands







Add Literal to W




Add W to file




And Literal with W




And W with file




Clear a bit from file




Set a bit in file




Test bit in file, skip next if clear (0)




Test bit in file, skip next if set (1)




Call subroutine




Set file to 0




Set W to 0




Clear watchdog timer




Complement (Invert) file




Decrement file




Decrement file, skip next if zero




Goto line number




Increment file




Increment file, skip next if zero




(Inclusive) OR literal with W




(Inclusive) OR W with file




Move literal to W




Move file to W




Move W to file




No operation

Do nothing



Copies W into Option register

To be discontinued



Return from handling interrupt




Return with a literal in W




Return from subroutine




Rotate a file left




Rotate a file right




Enter 'sleep' mode




Subtract literal from W




Subtract W from file




Swap 2 files




Configure ports as I/O

To be discontinued



(Exclusive) OR literal with W




(Exclusive) OR W with file


[Updated on: Mon, 22 May 2006 00:05] by Moderator

 Topic: Enhanced Willem Programmer
Enhanced Willem Programmer [message #48] Tue, 04 April 2006 01:46
kc2nda  is currently offline kc2nda
Messages: 29
Registered: December 2004
Location: New Paltz
Junior Member
I purchased an Enhanced Willem Programmer to read and program chips. It is probably one of the best programmers I have used yet. Although I do wish the documentation was better! If anyone is looking for a programmer that will program PIC chips, I recommend this programmer. Of course before purchasing, make sure it will handle the chips you are looking to program.

In order to use this programmer to program some PIC chips, you do need to use the ICSP pins. The easiest way i think would be to get a 5 pin connector (to match the ICSP header on the PCB) and a 28 or 40 pin socket. Solder the 5 wires to the connector then solder the other sides to the chip socket in the right order (of course).

Here is the 5pin ICSP header to a 28 pin PIC chip's connection:

Vpp <--------> Pin 1
Vdd <--------> Pin 20
GND <--------> Pin 19
RB7 <--------> Pin 28
RB6 <--------> Pin 27

Here is the 5pin ICSP header to a 40 pin PIC chip's connection:

Vpp <--------> Pin 1
Vdd <--------> Pin 32
GND <--------> Pin 31
RB7 <--------> Pin 40
RB6 <--------> Pin 39

Here is the 5pin ICSP header to a 18 pin PIC chip's connection:

Vpp <--------> Pin 4
Vdd <--------> Pin 14
GND <--------> Pin 5 (Vss)
RB7 <--------> Pin 13
RB6 <--------> Pin 12

I hope this helps any newbies. Don't forget to look at the chip's datasheet though. It MAY or MAY NOT be different. It is always better to make sure the pinouts are the same. This Enhanced Willem Programmer is awesome! After reading most frustrated forum posters, I have come to realize that it is easier to get mad at someone else than to try to solve the problem. Most of the problems I have had with the programmer is LACK of documentation. Other than that, I have gotten it to read and program many different chips. Hats off to the developers of this programmer. It is very nice for the money! If anyone else finds this post helpful, PLEASE pbass it on. The documentation on these should be better written!


[Updated on: Sat, 15 April 2006 19:38]

Forum: Pagers
 Topic: Cloning Flex pagers
Cloning Flex pagers [message #303] Thu, 21 October 2010 17:11
stepnjump  is currently offline stepnjump
Messages: 1
Registered: October 2010
Location: Montreal
Junior Member
Hi guys,

I have a lot of pagers. they are all on the same frequency. Years ago, it used to be cheaper to have them all on the group call than now. Now it costs even more to have them on group call than if they were all on separate phone numbers!

Would any of you know if there would be a way to have them all again on the same cap-code or clone them so that once I page one beeper, they would all ring?

 Topic: Motorola Service Manuals
Motorola Service Manuals [message #213] Sat, 10 October 2009 22:01
kc2nda  is currently offline kc2nda
Messages: 29
Registered: December 2004
Location: New Paltz
Junior Member
Universal Programming Interface

Instruction Manual (w/schematics): 6881010B39

Bravo Plus
Theory/Maintenance: 6881012B35
Service Manual 33-37, 40-50 MHz: 6881012B15
Service Manual 138-174 MHz: 6881012B20
Service Manual, Synthesized RX 152-160: 6881012B80
Service Manaul 406-422, 435-512 MHz: 6881012B25
Service Manual 929-932 MHz: 6881012B30
Service Manual, Synthesized RX 929-932 MHz: 6881012B85

Scriptor LX2/Advisor Pro
Theory Maintenance Manual: 6881021B90
VHF Receiver Servicing Supplement: 6881103B36
Decoder Servicing Supplement: 6881104B25
Service Manual AARD RX kits, 132-174 MHz: 6881022B60

Theory/Maintenance Manual: 6881011B75
Service Manual 138-174 MHz: 6881011B55
Decoder Servicing Supplement: 6881104B15
Servicing Supplement: 6881103B02

Bravo Series Stand Alone Programmer
Instruction/Service Manual: 6881051C20

Theory/Maintenance Manual, GSC: 6881046C40
Service Manual, GSC 138-174 MHz: 6881046C30
Theory/Maintenance Manual, POGSAG: 6881047C95
Service Manual, Low-band VHF: 6881047C70
Service Manual, High-band VHF: 6881047C75
Service Manual, UHF: 6881047C80
Service Manual, 900 MHz: 6881006B85


Instruction/Service Manual, Tone and Voice, 138-174 MHz: 6881008B15

Wrist Watch Pager
Theory/Maintenance Manual: 6881011B15
Service Manual 138-174 MHz: 6881011B10
Programmer Instructions: 6881011B06
Operating Instructions: 6881011B05

Theory/Maintenance Manual: 6881033C65
Tone Alert/Silent Alert Service Manual, VHF: 6881032C55
Tone Alert/Silent Alert Service Manual, Low-band VHF: 6881032C75
Tone and Voice Service Manual, VHF: 6881032C50
Tone and Voice Service Manual, Low-band VHF: 6881032C60

Pageboy II
Theory/Maintenance Manual, 138-174 MHz: 6881000C90
Instruction Manual, 450-512 MHz: 6881009C60

Instruction Manual 132-174 MHz: 6881014C20

 Topic: Paging Frequency Allocations
Paging Frequency Allocations [message #69] Sat, 01 July 2006 22:49
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member
List of Paging Frequencies:

The FCC has set aside several frequency bands that paging companies are able
to use. These bands are (in MHz):

35 - 36
43 - 44
138 - 159
454 - 460
929 - 932
959 - 960

 Topic: Bravo Plus Receiver Board Part Numbers and Frequencies
Bravo Plus Receiver Board Part Numbers and Frequencies [message #67] Sat, 01 July 2006 22:36
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member
-Bravo Plus-

Service Manual Numbers:
Theory/Maintenance: 6881012B35
Service Manual 138-174 MHz: 6881012B20
Service Manual, Synthesized RX 152-160: 6881012B80
Service Manual 406-422, 435-512 MHz: 6881012B25

Receiver Board Part Numbers
138 - 143 MHz - AARD4050A
138 - 143 MHz - NRD7211A,B
143 - 148.6 MHz - AARD4051A
143 - 148.6 MHz - NRD7212A,B
148.6 - 152 MHz - AARD4052A
148.6 - 152 MHz - NRD7213A,B
152 - 159 MHz - AARD4053A
- NRD4050G
454 MHz - NRE6553C


[Updated on: Sat, 01 July 2006 22:48]

 Topic: POCSAG Pager Protocol
POCSAG Pager Protocol [message #66] Sat, 01 July 2006 21:28
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member

The following summary describes the coding used on POCSAG pager
signals and may be of interest to those curious about what those ear-splitting
beeps and buzzes mean and how they encode data. This summary is
based on a very old text of the standard from my files; the current
text of the POCSAG standard is available as CCIR Radiopaging Format 1.

Note that some current POCSAG signals (so called Super-POCSAG)
transmit paging at 1200 or 2400 baud instead of the 512 baud I refer to
here, but use essentially a similar coding standard.

The interested USA reader is reminded that willfully intercepting
other than tone only paging is a violation of the ECPA with similar
penalties and criminal status to willfully intercepting cellular phone calls.

The interested reader is advised that at least two of Universal
Shortwave's RTTY reading devices (the M8000 and the new C-400) are
capable of reading at least the older 512 baud version of POCSAG paging,
so commercial devices for this purpose are currently being sold in
the USA.

And finally, much alphanumeric paging - particularly that installed
some time ago, uses a proprietary Motorola encoding format called
GOLAY which is quite different from POCSAG. The two can be told apart
by their baud rates - GOLAY is 600 baud.


First POCSAG stands for Post Office Code Standarization Advisory
Group. Post office in this context is the British Post Office
which used to be the supplier of all telecommunihoneyions services in
England before privatization.

POCSAG as defined in the standard, (original POCSAG) is 512 bits
per second direct FSK (not AFSK) of the carrier wave with +- 4.5 khz shift
(less deviation than that is used in some US systems). Data is
NRZ coded with the higher frequency representing 0 (space) and the
lower one representing 1 (mark).

The basic unit of data in a POCSAG message is the codeword which
is always a 32 bit long entity. The most significant bit of a codeword
is transmitted first followed immediately by the next most significant
bit and so forth. The data is NRZ, so that mark and space values (plus
and minus voltages) as sampled on the output of the receiver
discriminator at a 512 hz rate corrospond directly to bits in the
codeword starting with the MSB. (Note that the audio output circuitry
following the discriminator in a typical voice scanner may considerably
distort this square wave pattern of bits, so it is best to take the
signal directly off the discriminator before the audio filtering).

The first (msb) bit of every POCSAG codeword (bit 31) indihoneyes
whether the codeword is an address codeword (pager address) (bit 31 = 0)
or a message codeword (bit 31 = 1). The two codeword types have
have different internal structure.

Message codewords (bit 31 = 1) use the 20 bits starting at bit
30 (bit 30-11) as message data. Address codewords (bit 31 = 0) use 18
bits starting at bit 30 as address (bits 30-13) and bits 12 and 11 as
function bits which indihoneye the type and format of the page. Bits 10 through
1 of both types of codewords are the bits of a BCH (31,21) block ECC
code computed over the first 31 bits of the codeword, and bit 0
of both codeword types is an even parity bit.

The BCH ECC code used provides a 6 bit hamming distance between
all valid codewords in the possible set (that is every valid 32 bit
codeword differs from ever other one in at least 6 bits). This makes
one or two bit error correction of codewords possible, and provides
a robust error detection capability (very low chance of false pages).
The generating polynomial for the (31,21) BCH code is x**10 + x**9
+ x**8 + x**6 + x**5 + x**3 + 1.

Codewords are transmitted in groups of 16 (called batches), and
each batch is preceeded by a special 17th codeword which contains a
fixed frame synchronization pattern. At least as of the date of the
spec I have, this sync magic word was 0x7CD215D8.

Batches of codewords in a transmission are preceeded by a start
of transmission preamble of reversals (10101010101 pattern) which must
be at least 576 bits long. Thus a transmission (paging burst) consists
of carrier turnon during which it is modulated with 512 baud reversals
(the preamble pattern) followed by at least 576/512 seconds worth of
actual preamble, and then a sync codeword (0x7CD215D8), followed by 16
data/address codewords, another sync codeword, 16 more data/address
codewords and so forth until the traffic is completely transmitted. As
far I am aware there is no specified postamble. I beleive that all 16
of the last codewords of a transmission are always sent before the
carrier is shut off, and if there is no message to be sent in them the
idle codeword (0x7A89C197) is sent. Later versions of the standard may
have modified this however.

In order to save on battery power and not require that a pager
receive all the bits of an entire transmission (allowing the receiver
to be turned off most of the time, even when a message is being transmitted
on the channel) a convention for addressing has been incorperated which
splits the pager population into 8 groups. Members of each group
only pay attention to the two address code words following the synch
codeword of a block that corrospond to their group. This means that
as far as addressing is concerned, the 16 codewords in a batch are
divided into 8 frames of two codewords apiece and any given pager
pays attention only to the two in the frame to which it assigned.

A message to a pager consists of an address codeword in the
proper two codeword frame within the batch to match the recipients frame
assignment (based on the low three bits of the recipient's 21 bit
effective address), and between 0 and n of the immediately following
code words which contain the message text. A message is terminated by
either another address code word or an idle codeword. Idle codewords
have the special hex value of 0x7A89C197. A message with a long text
may potentially spill over between two or more 17 codeword batches.

Space in a batch between the end of a message in a transmission and
either the end of the batch or the start of the next message (which of
course can only start in the two correct two codeword frame assigned to
the recipient) is filled with idle codewords. A long message which
spills between two or more batches does not disrupt the batch structure
(sync codeword and 16 data/address code words - sync code word and
16 data/address codewords and so forth) so it is possible for a pager
not being addressed to predict when to next listen for its address and
only turn on it's receiver then.

The early standard text I have available to me specifies a 21 bit
address format for a pager (I beleive this has been extended since)
with the upper 18 bits of a pager's address mapping into bits
30-13 of the address codeword and the lower 3 bits specifiying which
codewords within a 17 codeword batch to look at for possible messages.
The address space is further subdivided into 4 different message classes
as specified by the function bits (bits 12 and 11 of a codeword). These
address classes corrospond to different message types (for example
bits 12 and 11 both zero indihoneye a numeric message encoded in 4 bit BCD,
whilst bits 12 and 11 both set to 1 indihoneye an alpha message encoded
in 7 bit ASCII). It was apparently envisioned that a given pager could
have different addresses for different message types.

There are two message coding formats defined for the text of messages,
BCD and 7 bit ASCII. BCD encoding packs 4 bit BCD symbols 5 to a codeword
into bits 30-11. The most significant nibble (bits 30,29,28,27) is the
leftmost (or most significant) of a BCD coded numeric datum. Values beyond 9
in each nibble (ie 0xA through 0xF) are encoded as follows:

0xA Reserved (probably used for something now - address extension ?)
0xB Character U (for urgency)
0xC " ", Space (blank)
0xD "-", Hyphen (or dash)
0xE ")", Left bracket
0xF "(", Right bracket

BCD messages are space padded with trailing 0xC's to fill the codeword.
As far as I know there is no POCSAG specified restriction on length but
particular pagers of course have a fixed number of characters in their

Alphanumeric messages are encoded in 7 bit ASCII characters packed
into the 20 bit data area of a message codeword (bits 30-11). Since four
seven bit characters are 21 rather than 20 bits and the designers of the
standard did not want to waste transmission time, they chose to pack the
first 20 bits of an ASCII message into the first code word, the next
20 bits of a message into the next codeword and so forth. This means
that a 7 bit ASCII character of a message that falls on a boundary can
and will be split between two code words, and that the alignment of character
boundaries in a particular alpha message code word depends on which code
word it is of a message. Within a codeword 7 bit characters are packed
from left to right (MSB to LSB). The LSB of an ASCII character is sent
first (is the MSB in the codeword) as per standard ASCII transmission
conventions, so viewed as bits inside a codeword the characters are
bit reversed.

ASCII messages are terminated with ETX, or EOT (my documentation
on this is vague) and the remainder of the last message codeword is
padded to the right with zeros (which looks like some number of NULL
characters with the last one possibly partial (less than 7 bits)).

The documentation I have does not specify how long a ASCII
message may be, but I suspect that subsequent standards have probably
addressed the issue and perhaps defined a higher level message protocol
for partitioning messages into pieces. The POCSAG standard clearly
does seem to allow for the notion of encoding messages as mixed
strings of 7 bit alpha encoded text and 4 bit BCD numerics, and it
is at least possible that some pagers and paging systems use this
to reduce message transmission time (probably by using some character
other than ETX to delimit a partial ASCII message fragment).

Brett Miller N7OLQ

[Updated on: Sun, 02 July 2006 01:01]

 Topic: Phrack Magazine - The Wonderful World of Pagers
Phrack Magazine - The Wonderful World of Pagers [message #38] Sun, 22 January 2006 23:04
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member
==Phrack Magazine==

Volume Five, Issue Forty-Six, File 8 of 28

************************************************************ ****************

The Wonderful World of Pagers

by Erik Bloodaxe

Screaming through the electromagnet swamp we live in are hundreds of
thousands of messages of varying degrees of importance. Doctors,
police, corporate executives, housewives and drug dealers all find
themselves constantly trapped at the mercy of a teeny little box:
the pager.

Everyone has seen a pager; almost everyone has one. Over 20 million
pagers are on the streets in the US alone, sorting out their particular
chunk of the radio-spectrum. Another fifty-thousand more are
put into service each day.

But what the hell are these things really doing? What more can we
do with them than be reminded to call mom, or to "pick up dry-cleaning?"



Pagers today use a variety of signalling formats such as POCSAG, FLEX
and GOLAY. The most common by far is POCSAG (Post Office Standardization
Advisory Group), a standard set by the British Post Office and adopted
world-wide for paging.

POCSAG is transmitted at three transmission rates--512, 1200 and 2400 bps.
Most commercial paging companies today use at least 1200, although many
companies who own their own paging terminals for in-house use transmit
at 512. Nationwide carriers (SkyTel, PageNet, MobileComm, etc.) send
the majority of their traffic at 2400 to make the maximum use of
their bandwidth. In other words, the faster they can deliver pages,
the smaller their queue of outgoing pages is. Although these
carriers have upgraded their equipment in the field to broadcast at
2400 (or plan to do so in the near future), they still send out
some pages at 1200 and 512 to accommodate their customers with older
pagers. Most 512 and 1200 traffic on the nationwide services is
numeric or tone-only pages.

POCSAG messages are broadcast in batches. Each batch is comprised of 8
frames, and each frame contains two codewords separated by a
"synchronization" codeword. A message can have as many codewords
as needed to deliver the page and can stretch through several batches
if needed. The end of a complete message is indicated by a "next address"
codeword. Both addressing and user data are sent in the codewords, the
distinction being the least significant bit of the codeword:
0 for address data, and 1 for user-data.

Standard alphanumeric data is sent in a seven-bit format, with each codeword
containing 2 6/7 characters. A newer 8-bit alphanumeric format is
implemented by some carriers which allow users to send data such as
computer files, graphics in addition to regular alphanumeric messages.
The 8 bit format allows for 2.5 characters per codeword.

Numeric data is 4 bit, allowing up to 5 numbers to be transmitted per
codeword. Tone and voice pages contain address information only.

(NOTE: Pager data uses BCH 32,21 for encoding. I don't imagine
very many of you will be trying to decode pager data by building your
own decoders, but for those of you who may, take my interpretation
of POCSAG framing with a grain of salt, and try to dig up the
actual POCSAG specs.)


Paging receivers come in hundreds of shapes and sizes, although the vast
majority are manufactured by Motorola. Numeric pagers comprise over
fifty percent all pagers in use. Alphanumeric comprises about thirty
percent, with tone and voice pagers making up the remainder.

Pagers are uniquely addressed by a capcode. The capcode is usually six
to eight digits in length, and will be printed somewhere on the pager
itself. Many pager companies bassign customers PIN numbers, which are
then cross-referenced to a given capcode in databases maintained by
the service provider. PIN numbers have no other relationship
to the capcode.

Tone pagers are by far the most limited paging devices in use.
When a specified number has been called, an address only message
is broadcast, which causes the intended receiver to beep. Wow.
Tone pagers usually have 4 capcodes, which can correspond to
different locations to call back. Voice pagers are similar, except
they allow the calling party to leave a 15 to 30 second message.
The voice message is broadcast immediately after the capcode of the
receiver, which unsquelches the device's audio.

Numeric pagers, although seemingly limited by their lack of display
options have proven otherwise by enterprising users. Most numeric
data sent is obviously related to phone numbers, but numerous users
have developed codes relating to various actions to be carried out
by the party being paged. The most prolific users of this have
been the Chinese who have one of the most active paging networks
in the world. I suppose the next biggest users of code-style numeric
paging would be drug dealers. (2112 0830 187 -- get to the fudgeing
drop site by 8:30 or I'll bust a cap in your bass!) Smile

Alphanumeric pagers are most often contacted through a dedicated
service that will manually enter in the message to be sent onto the
paging terminal. One such service, NDC, offers its phone-answering
and message typing services to various pager companies. Next time
you are talking to a pager operator, ask him or her if they are at
NDC. They probably are.

In addition to the capcode, pagers will have an FCC ID number, a serial
number, and most importantly, the frequency that the device has been
crystaled for imprinted on the back of the device. Although technology
exists that would allow pagers to listen on a number of frequencies
by synthesizing the frequency rather than using a crystal, pager
manufacturers stick to using crystals to "keep the unit cost down."

Pagers may have multiple capcodes by which they can be addressed by.
Multiple capcodes are most often used when a person has subscribed to
various services offered by their provider, or when the subscriber is
part of a group of individuals who will all need to receive the same
page simultaneously (police, EMTs, etc.).

Most low-cost pagers have their capcode stored on the circuit board
in a PAL. Most paging companies will completely exchange pagers
rather than remove and reprogram the PAL, so I don't think
it's worth it for any experimenter to attempt. However, like most
Motorola devices, many of their paging products can be reprogrammed
with a special serial cable and software. Reprogramming software
is usually limited to changing baud rates, and adding capcodes.

Additionally, some units can be reprogrammed over the air by the
service provider. Using a POCSAG feature known as OTP (over the air
programming) the service provider can instruct the paging receiver to
add capcodes, remove capcodes, or even shut itself down in the case
of non-payment.


With the growing popularity of alphanumeric pagers, many service providers
have decided to branch out into the information business. The most
common of these services is delivery of news headlines. Other services
include stock quotes, airline flight information, voice mail and
fax reception notification, and email. Of course, all of these services
are available for a small additional monthly premium.

Email is probably the single coolest thing to have sent to your
alpha pager. (Unless you subscribe to about a zillion mailing lists)
Companies like SkyTel and Radiomail give the user an email address
that automatically forwards to your paging device.
IE: Several packages exist for forwarding
email from a UNIX system by sending stripping down the email to
pertinent info such as FROM and SUBJECT lines, and executing a script
to send the incoming mail out via a pager terminal data port.
One such program is IXOBEEPER, which can be found with an archie

Radiomail's founder, (and rather famous ex-hacker in his own right - go
look at ancient ComputerWorld headlines), Geoff Goodfellow had devised
such a method back in the late 70's. His program watched for incoming
email, parsed the mail headers, and redirected the FROM and SUBJECT
lines to his alphanumeric pager. Obviously, not many people had
alphanumeric pagers at all, much less email addresses on ARPANET
back in the 70's, so Geoff's email pager idea didn't see much
wide-spread use until much later.

Two RFC's have been issued recently regarding paging and the Internet.
RFC 1568, the Simple Network Paging Protocol, acts similarly to SMTP.
Upon connecting to the SNPP port the user issues commands such as:

PAGE followed by pager telephone number
MESS followed by the alpha or numeric message

RFC 1568 has met with some opposition in the IETF, who don't consider
it worthwhile to implement a new protocol to handle paging, since it
can be handled easily using other methods.

The other RFC, number 1569, suggests that paging be addressed in a rather
unique manner. Using the domain TPC.INT, which would be reserved for
services that necessitate the direct connection to The Phone Company,
individual pagers would be addressed by their individual phone numbers.
Usernames would be limited to pager-alpha or pager-numeric to represent
the type of pager being addressed. For example, an alpha-page being sent to
1-800-555-1212 would be sent as


Many services offer modem connections to pager terminals so that
computer users can send pages from their desks using software packages
like WinBeep, Notify! or Messenger. All of these services connect to
the pager terminal and speak to it using a protocol known as

Upon connection, a pager terminal identifies itself with the following:


(I bet you always wondered what the hell those systems were)
Paging terminals default to 300 E71, although many larger companies
now have dialups supporting up to 2400.

Many such systems allow you to manually enter in the appropriate information
by typing a capital "M" and a return at the ID= prompt. The system will then
prompt you for the PIN of the party you wish to page, followed by a prompt
for the message you wish to send, followed by a final prompt asking if you
wish to send more pages. Not every pager terminal will support a manual
entry, but most do.

All terminals support the IXO protocol. As there are far too many
site specific examples within the breadth of IXO, we will concentrate on
the most common type of pager services for our examples.

[ Sample IXO transaction of a program sending the message ABC to PIN 123
gleened from the IXOBeeper Docs ]

Pager Terminal YOU
------------------------------------------------------------ --

Processing - Please Wait




The checksum data came from:

STX 000 0010
1 011 0001
2 011 0010
3 001 0011
000 1101
A 100 0001
B 100 0010
C 100 0011
000 1101
ETX 000 0011
1 0111 1011
1 7 ; Get it? Get an ASCII chart and it will all make sense.

Note: Everything in the paging blocks, from STX to ETX inclusive are used
to generate the checksum. Also, this is binary data, can't
just type at the ID= prompt and expect to have it recognized as IXO.
It wants specific BITS. Got it? Just checking...


[Frequencies transmitting pager information are extremely easy to
identify while scanning. They identify each batch transmission
with a two-tone signal, followed by bursts of data. People with
scanners may tune into some of the following frequencies to
familiarize themselves with this distinct audio.]

Voice Pager Ranges: 152.01 - 152.21
453.025 - 453.125
454.025 - 454.65
462.75 - 462.925

Other Paging Ranges: 35.02 - 35.68
43.20 - 43.68
152.51 - 152.84
157.77 - 158.07
158.49 - 158.64
459.025 - 459.625
929.0125 - 931.9875


Austria 162.050 - 162.075 T,N,A
Australia 148.100 - 166.540 T,N,A
411.500 - 511.500 T,N,A
Canada 929.025 - 931-975 T,N,A
138.025 - 173.975 T,N,A
406.025 - 511.975 T,N,A
China 152.000 - 172.575 N,A
Denmark 469.750 N,A
Finland 450.225 T,N,A
146.275 - 146.325 T,N,A
France 466.025 - 466.075 T,N,A
Germany 465.970 - 466.075 T,N,A
173.200 T,N,A
Hong Kong 172.525 N,A
280.0875 T,N,A
Indonesia 151.175 - 153.050 A
Ireland 153.000 - 153.825 T,N,A
Italy 466.075 T,N,A
161.175 T,N
Japan 278.1625 - 283.8875 T,N
Korea 146.320 - 173.320 T,N,A
Malaysia 152.175 - 172.525 N,A,V
931.9375 N,A
Netherlands 156.9865 - 164.350 T,N,A
New Zealand 157.925 - 158.050 T,N,A
Norway 148.050 - 169.850 T,N,A
Singapore 161.450 N,A
931.9375 N,A
Sweden 169.8 T,N,A
Switzerland 149.5 T,N,A
Taiwan 166.775 N,A
280.9375 N,A
Thailand 450.525 N,A
172.525 - 173.475 N,A
UK 138.150 - 153.275 T,N,A
454.675 - 466.075 T,N,A

T = Tone
N = Numeric
A = Alphanumeric
V = Voice


For many years the interception of pages was not considered an
invasion of privacy because of the limited information provided
by the tone-only pagers in use at the time. In fact, when
Congress pbassed the Electronic Communications Privacy Act in 1986
tone-only pagers were exempt from its provisions.

According to the ECPA, monitoring of all other types of paging signals,
including voice, is illegal. But, due to this same law, paging
transmissions are considered to have a reasonable expectation to
privacy, and Law Enforcement officials must obtain a proper court
order to intercept them, or have the consent of the subscriber.

To intercept pages, many LE-types will obtain beepers programmed with
the same capcode as their suspect. To do this, they must contact
the paging company and obtain the capcode bassociated with the person
or phone number they are interested in. However, even enlisting
the bassistance of the paging companies often requires following
proper legal procedures (warrants, subpoenas, etc.).

More sophisticated pager-interception devices are sold by a variety
of companies. SWS Security sells a device called the "Beeper Buster"
for about $4000.00. This particular device is scheduled as
a Title III device, so any possession of it by someone outside
a law enforcement agency is a federal crime. Greyson Electronics
sells a package called PageTracker that uses an ICOM R7100
in conjunction with a personal computer to track and decode pager
messages. (Greyson also sells a similar package to decode
AMPS cellular messages from forward and reverse channels called

For the average hacker-type, the most realistic and affordable option
is the Universal M-400 decoder. This box is about 400 bucks and
will decode POCSAG at 512 and 1200, as well as GOLAY (although I've never
seen a paging service using GOLAY.) It also decodes CTCSS, DCS, DTMF,
takes audio input from any scanners external speaker jack, and
is probably the best decoder available to the Hacker/HAM for the price.

Output from the M400 shows the capcode followed by T, N or A (tone, numeric
or alpha) ending with the message sent. Universal suggests hooking
the input to the decoder directly to the scanner before any de-emphasis
circuitry, to obtain the true signal. (Many scanners alter the audio
before output for several reasons that aren't really relevant to this
article...they just do. Smile )

Obviously, even by viewing the pager data as it streams by is of little
use to anyone without knowing to whom the pager belongs to. Law Enforcement
can get a subpoena and obtain the information easily, but anyone else
is stuck trying to social engineer the paging company. One other alternative
works quite well when you already know the individuals pager number,
and need to obtain the capcode (for whatever reason).

Pager companies will buy large blocks in an exchange for their customers.
It is extremely easy to discover the paging company from the phone number
that corresponds to the target pager either through the RBOC or by paging
someone and asking them who their provider is when they return your call.
Once the company is known, the frequencies allocated to that company
are registered with the FCC and are public information. Many CD-ROMs
are available with the entire FCC Master Frequency Database.
(Percon sells one for 99 bucks that covers the whole country -
716-386-6015) Libraries and the FCC itself will also have this information

With the frequency set and a decoder running, send a page that will be
incredibly easy to discern from the tidal wave of pages spewing
forth on the frequency. (6666666666, THIS IS YOUR TEST PAGE, etc...)
It will eventually scroll by, and presto! How many important people
love to give you their pager number?


With the advent of new technologies pagers will become even more
present in both our businesses and private lives. Notebook computers
and PDAs with PCMCIA slots can make use of the new PCMCIA pager cards.
Some of these cards have actual screens that allow for use without the
computer, but most require a program to pull message data out. These
cards also have somewhat large storage capacity, so the length of
messages have the option of being fairly large, should the service
provider allow them to be.

With the advent of 8-bit alphanumeric services, users with PCMCIA pagers
can expect to receive usable computer data such as spreadsheet
entries, word processing documents, and of course, GIFs. (Hey, porno
entrepreneurs: beeper-porn! Every day, you get a new gif sent to your
pagecard! Woo Woo. Sad thing is, it would probably sell.)

A branch of Motorola known as EMBARC (Electronic Mail Broadcast to A
Roaming Computer) was one of the first to allow for such broadcasts.
EMBARC makes use of a proprietary Motorola protocol, rather than
POCSAG, so subscribers must make use of either a Motorola NewsStream
pager (with nifty serial cable) or a newer PCMCIA pager. Messages are
sent to (and received by) the user through the use of special client

The software dials into the EMBARC message switch accessed through
AT&T's ACCUNET packet-switched network. The device itself is used
for authentication (most likely its capcode or serial number)
and some oddball protocol is spoken to communicate with the switch.

Once connected, users have the option of sending a page out, or
retrieving pages either too large for the memory of the pager, or
from a list of all messages sent in the last 24 hours, in case the
subscriber had his pager turned off.

Additionally, the devices can be addressed directly via x.400
addresses. (X.400: The CCITT standard that covers email address
far too long to be worth sending anyone mail to.) So essentially,
any EMBARC customer can be contacted from the Internet.

MTEL, the parent company of the huge paging service SkyTel, is
implementing what may be the next generation of paging technologies.
This service, NWN, being administrated by MTEL subsidiary Destineer,
is most often called 2-way paging, but is more accurately Narrowband-PCS.

The network allows for the "pager" to be a transceiver. When a page
arrives, the device receiving the page will automatically send back
an acknowledgment of its completed reception. Devices may also
send back some kind of "canned response" the user programs. An example
might be: "Thanks, I got it!" or "Why on Earth are you eating up my
allocated pages for the month with this crap?"

MTEL's service was awarded a Pioneers Preference by the FCC, which gave them
access to the narrowband PCS spectrum before the auctions. This is a big
deal, and did not go unnoticed by Microsoft. They dumped cash into the
network, and said the devices will be supported by Chicago. (Yeah,
along with every other device on the planet, right? Plug and Pray!)

The network will be layed out almost identically to MTEL's existing paging
network, using dedicated lines to connect towers in an area to a central
satellite up/downlink. One key difference will be the addition of
highly somewhat sensitive receivers on the network, to pick up the ACKs
and replies of the customer units, which will probably broadcast at
about 2 or 3 watts. The most exciting difference will be the
speed at which the network transmits data: 24,000 Kbps. Twenty-four
thousand. (I couldn't believe it either. Not only can you get your
GIFs sent to your pager, but you get them blinding FAST!) The actual
units themselves will most likely look like existing alphanumeric pagers
with possibly a few more buttons, and of course, PCMCIA units will
be available to integrate with computer applications.

Beyond these advancements, other types of services plan on offering
paging like features. CDPD, TDMA & CDMA Digital Cellular and ESMR
all plan on providing a "pager-like" option for their customers.
The mere fact that you can walk into a K-Mart and buy a pager
off a rack would indicate to me that pagers are far to ingrained into
our society, and represent a wireless technology that doesn't scare
or confuse the yokels. Such a technology doesn't ever really go away.


Kneitel, Tom, "The Secret Life of Beepers," _Popular Communications_,
p. 8, July, 1994.

O'Brien, Michael, "Beep! Beep! Beep!," _Sun Expert_, p. 17, March, 1994.

O'Malley, Chris, "Pagers Grow Up," _Mobile Office_, p. 48, August, 1994.

[Updated on: Sun, 22 January 2006 23:07]

 Topic: POCSAG Encoding
POCSAG Encoding [message #37] Sun, 22 January 2006 22:59
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member

You do not have a problem let me explain how POCSAG is encoded so that you
can understand why you are getting these results................

00000000000000000011101101001001 Cap Code 8 seen as 32 bits- Alphanumeric

In the example above the MSB is the bit on the left and is called bit 32.
bit 32 is a zero if the codeword is a cap code and a 1 if it is data.
bit 31 to bit 14 is where the Capcode is placed, the lower 3 bits of the
capcode are discarded and not sent (I will explain why in a moment)
bits 13 and 12 are the function bits setting the page as
Alphanumeric/Numeric/Tone one/Tone two.
bits 11 to 2 are a CRC (Cyclic Redundency Checksum) this can be used to
correct up to 2 bit errors in the sent data. (This is a huge subject in its
own right)
bit 1 is an even parity bit.... if all the bits that are a 1 in the codeword
add up to an uneven number then this bit is set to one, if not then its set
to zero.

POCSAG data is sent as 32 bit codewords and after 16 codewords have been
sent then a syncronization codeword is sent and then another 16 codewords
and then another syncronization codeword and so on and so on.
Each 16 codewords is called a FRAME.
The Frame is further split into double codewords, that gives us a total of 8
pairs of codewords....... now if you remember we dropped the last 3 bits of
the CAP code..... 3 bits gives us a number from 0 to 7...... 0 to 7 is eight
Because we dropped these 3 bits it means that pager 7 wil have the same
codeword value as pager 0 and pager 1 and pager 2 etc etc.
So in order to make sure that each pager only gets the pages its meant to
get what we do is to send pager zero's capcode and message in the first
double pair after a syncronization codeword and pager one's capcode and
message in the second double pair after a syncronization codeword...... etc

So to recap.........
If you enter the Cap code 8, then the first thing my PE software does is to
convert it to 1....... If you enter a Cap code of 9 then that is also
converted to 1....... infact all capcodes from 8 to 16 are all converted
into 1...... but when they are transmitted they are sent at different points
in time.... the point in time that a page is sent decides its value for the
lower 3 bits that we discarded.
So Cap Codes 0 to 7 have a POCSAG codeword of 0
So Cap Codes 8 to 15 have a POCSAG codeword of 1
So Cap Codes 16 to 24 have a POCSAG codeword of 2
And so on..........
There are over 2 million different Cap codes but only just over 250 thousand
Cap Code codewords transmitted.

So what you are experiencing is exactly what is supposed to happen with
POCSAG data.

I hope this helps,

All the best
Clive Cooper.
PE Version 3 is now available at my website

Forum: Forum Rules
 Topic: Ham's Forum Rules
Ham's Forum Rules [message #1] Mon, 20 December 2004 01:35
root  is currently offline root
Messages: 146
Registered: December 2004
Senior Member Forum Rules strives to create a friendly Ham Radio Community. In doing so, there are some rules and guidelines that should be followed:

1. When posting, pretend that you are on the radio and do not say things that you would not say on the radio. Our Administrators and Moderators reserve the right to delete or edit any posts that are deemed vulgar or inappropriate.

2. Flaming, name calling, or any other type of disruptive or insulting posts will not be tolerated. If you should have a problem with another user, contact the administrator. Ham operators should be role models. It is ok to disagree and discuss all sides of an issue, but please hold discussions in a civilized manner.

3. Spamming is not allowed. Any posts deemed as spam will be deleted.

4. Respect any warnings given by the Administrators or Moderators.

5. The Administrator has the right to ban anyone who refuses to obey the rules and guidelines set forth here.

6. is NOT responsible for your actions with anything in regards to any posts on this website. What you do with information found on this site is your business. You are solely responsible for your own actions. This website is for information purposes only!

7. Enjoy the forum

[Updated on: Sun, 27 August 2006 08:45]

Pages (6): [ «    1  2  3  4  5  6    »]

Current Time: Sun Dec 21 21:03:49 EST 2014

Total time taken to generate the page: 0.10087 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 2.7.6.
Copyright ©2001-2007 FUD Forum Bulletin Board Software