[ News ] [ Paper Feed ] [ Issues ] [ Authors ] [ Archives ] [ Contact ]


..[ Phrack Magazine ]..
.:: Voice Response Systems ::.

Issues: [ 1 ] [ 2 ] [ 3 ] [ 4 ] [ 5 ] [ 6 ] [ 7 ] [ 8 ] [ 9 ] [ 10 ] [ 11 ] [ 12 ] [ 13 ] [ 14 ] [ 15 ] [ 16 ] [ 17 ] [ 18 ] [ 19 ] [ 20 ] [ 21 ] [ 22 ] [ 23 ] [ 24 ] [ 25 ] [ 26 ] [ 27 ] [ 28 ] [ 29 ] [ 30 ] [ 31 ] [ 32 ] [ 33 ] [ 34 ] [ 35 ] [ 36 ] [ 37 ] [ 38 ] [ 39 ] [ 40 ] [ 41 ] [ 42 ] [ 43 ] [ 44 ] [ 45 ] [ 46 ] [ 47 ] [ 48 ] [ 49 ] [ 50 ] [ 51 ] [ 52 ] [ 53 ] [ 54 ] [ 55 ] [ 56 ] [ 57 ] [ 58 ] [ 59 ] [ 60 ] [ 61 ] [ 62 ] [ 63 ] [ 64 ] [ 65 ] [ 66 ] [ 67 ] [ 68 ]
Current issue : #52 | Release date : 1998-01-26 | Editor : route
IntroductionPhrack Staff
Phrack LoopbackPhrack Staff
Line Noisevarious
Phrack Prophile on o0Phrack Staff
Everything a hacker needs to know about getting bustedAgent Steal
Hardening the Linux Kerneldaemon9
The Linux pingddaemon9
Steganography Thumbprintingunknown
On the Morality of PhreakingPhrack Staff
A Quick NT Interrogation Probetwitch
Subscriber Loop Carriervoyager
Voice Response Systemsvoyager
Pay Per View (you don't have to)cavalier
The International Crime Syndicate AssociationD. Demming
Digital CertificatesYggdrasil
Piercing Firewallsbishnu
Protected mode programming and O/S developmentmythrandir
Weakening the Linux Kernelplaguez
Phrack World Newsdisorder
extract.cPhrack Staff
Title : Voice Response Systems
Author : voyager
---[  Phrack Magazine   Volume 8, Issue 52 January 26, 1998, article 12 of 20


-------------------------[  Voice Response Systems


--------[  Voyager[TNO]



=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=


 I................................................................ Overview
 II............................................................... DATU
 III.............................................................. SOLTS
 IV............................................................... FAST
 V................................................................ Conclusion


=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=




                             +----------+
                             +  Part I  +
                             +          +
                             +   --     +
                             +          +
                             + Overview +
                             +----------+


A VRS (Voice Response System) is a computer system that is called using
a normal DTMF (Dual-Tone Multi-Frequency) telephone and interacted with
by speaking or by pressing buttons on the telephone keypad.

This article will discuss three such systems which are used by LLC Local
Loop Carriers (LLCs) to maintain the Public Switched Telephone Network
(PSTN). The systems are:

                . DATU
                . SOLTS
                . FAST


                +-------------------------------------+
                +              Part II                +
                +                                     +
                +                --                   +
                +                                     +
                + DATU LC/RT Loop Conditioning System +
                +-------------------------------------+


I.    Introduction
II.   Features
III.  Usage
IV.   Part Numbers


Introduction
~~~~~~~~~~~~

The Harris Corporation's DATU Loop Conditioning System combines a full
range of advanced features with unmatched versatility to help maximize
field testing and conditioning capabilities. The DATU system extends the
field technicians testing capabilities of subscriber lines through the
non-metallic environment of a pair gain system.

DATU is a printed wiring card that employs micro-processor control of
test functions and provides voice prompting. The card is installed in
the Metallic Facility Terminal (MFT) frame and connected through a
No-Test trunk to a switching facility. It may be used with most types of
Central Offices (CO) including SXS, Crossbar, ESS and DMS.

The DATU system can include the Pair Gain Applique (PGA) II, located
with the DATU system at the CO, and the Metallic Access Unit (MAU),
which is mounted within a remote terminal.

PGA units allow testing of subscriber lines being served through an
SLC-96 pair gain system. The PGA provides an interface between the DATU
and a Pair Gain Control Unit. The DATU will transmit tones to assist in
determining the status of the carrier channel. When a subscriber line is
being served by a pair-gain-system and the DATU is used to test it, a
warble tone is heard. The warble tone is followed by either a single
one-second tone, two one-second tones, or three one-second tones. This
indicates either a single party channel, multi party channel or a coin
channel. The absence of a tone indicates trouble with the channel or
channel equipment.


Features
~~~~~~~~

AUDIO MONITOR - The subscriber line may be monitored for up to 10
minutes, after which time the DATU disconnects from the No-Test trunk.
Audio Monitor may be used on either busy or idle lines. Traffic on a
busy line will be audible but unintelligible. The Audio Monitor Mode may
be exited before the end of the 10 minute period by selecting an
appropriate test function.

OPEN LINE - Opens subscriber line by removing battery and ground.

SHORT LINE - A metallic short is placed across the tip and ring of the
subscriber line.

SHORT TO GROUND - A metallic connection between tip, ring, and ground.
This feature is not available on a busy line.

TIP TO GROUND - A metallic connection between tip and ground with the
ring open.

RING TO GROUND - A metallic connection between ring and ground with the
tip open.

HIGH LEVEL TEST TONE - A high level 577Hz metallic-tracing tone,
interrupted four times per second, for identity purposes. The High Level
Test Tone is not available on a busy line.

HIGH LEVEL TONE ON TIP - Test tone is placed only on the tip side of the
line, with the ring side grounded.

HIGH LEVEL TONE ON RING - Test tone is placed only on the ring side of
the line, with the tip side grounded.

LOW LEVEL TEST TONE - A low level 577Hz simplex-tracing tone,
interrupted four times per second, for identity purposes. The Low Level
Test Tone may be applied even if the line under test is busy, and it
will not disturb traffic on that line. Note that on some No.5 ESS
switches, Simplex tone may not transmit.

SINGLE LINE ACCESS - Allows conditioning functions on the same line used
to access the DATU system.

HOLD - Used to continue a line preparation function after disconnecting
from the system's access line.

FORCED DISCONNECT - Allows the technician to disconnect from the system
at any time by dialing ##.

ADMINISTRATIVE - Password protection for both user and administrator
modes of access. System usage counters and timers are accessible through
interactive voice response.


DATU Usage
~~~~~~~~~~
                Dial DATU Number.
                Dial User Security Code.
                Dial 7 Digit Subscriber Number.

                          / \
                        /     \
                      /         \
                    /             \
                  /                 \
                /                     \
               |                       |

Normal Subscriber Line          SLC Subscriber Line
~~~~~~~~~~~~~~~~~~~~~~          ~~~~~~~~~~~~~~~~~~~
OK                              8 second warble
               |                       -then-
               |                60 IPM busy:   Pair Gain Test Controller Alarm
               |                        -or-
               |                120 IPM Busy:  Busy test pair
               |                        -or-
               |                1 second tone: One party line
               |                        -or-
               |                2 second tone: Two party line
               |                        -or-
               |                3 second tone: Pay phone
               |                        -or-
               |                No tone:        Bad carrier channel
               |
               |                       |
                \                     /
                  \                 /
                    \             /
                      \         /
                        \     /
                          \ /

                Enter DATU function code for condition:

                1  Menu
                2  Audio Monitor
                3  Short Tip and Ring to Ground
                4  High Level Coiling Tone
                5  Low Level Simplex Tone
                7  Short Tip to Ring
                *  Continue test after disconnect (1 = 1 minute, 0=10 minutes)
                #  Enter new seven digit subscriber number


Harris DATU Part Numbers
~~~~~~~~~~~~~~~~~~~~~~~~

DATU-LC Loop Conditioning System        P/N 24820-001
PGA IIS                                 P/N 24810-002
DATU-RT Loop Conditioning System        P/N 24820-003
TSA                                     P/N 24800-103
DATU-RT (GTD-5 Version)                 P/N 24820-005
TDC                                     P/N 24800-102
Metallic Access Unit                    P/N 24840-002
MFT Card File                           P/N 25460-002
Metallic Access Unit (RSU version)      P/N 24845-005





                  +----------------------------------+
                  +            PART III              +
                  +                                  +
                  +             --                   +
                  +                                  +
                  + Small Office Loop Testing System +
                  +                                  +
                  +            (SOLTS)               +
                  +----------------------------------+


Small Office Loop Testing System (SOLTS) is a system used by telephone
company field repair personnel to test a phone line from any touch-tone
telephone.

When dialing a SOLTS number, the first prompt is:

        ~Please enter ID, terminate with #~

SOLTS allows 30 seconds to enter a correct ID, then prompts:

        ~Please enter line number and press #~

SOLTS allows 60 seconds to enter a line number, then prompts:

        ~Select mode, for help enter 0~

SOLTS allows 60 seconds to choose one of six options:


Enter:

1) Interactive Testing
2) Calling on test line
3) Retrieve results
8) Hang up
9) Enter line number
0) Help


Option one allows testing the telephone line connected to the number
entered in step two above. Option two tests the line the technician is
calling from. Option three is used to retrieve the results generated
using options one and two. Option eight disconnects from the system.
Option nine allows a new line number to be entered for testing. Option
zero accesses on-line help.


    Mode 1 -- Interactive Testing
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    #) Line test
    1) Fault Location
    2) Special tests
    3) Completion Test
    8) Hang up
    9) Enter line number
    0) Help


        Line Test
        ~~~~~~~~~
        Perform a line test on the number entered, then:

        7) Repeat Results
        8) Hang up
        9) Enter line number
        0) Help


        Fault Location
        ~~~~~~~~~~~~~~
        Performs initial line test on the number entered, then:

        2) Next step
        7) Repeat results
        8) Hang up
        9) Enter line number
        0) Help


        Special Tests
        ~~~~~~~~~~~~~
        Performs initial line test on the number entered, then:

        #) Repeat line test
        2) Loop and Ground
        3) Pull dial tone
        5) Pair ID Tone
        7) Repeat results
        8) Hang up
        9) Enter line number
        0) Help


        Completion Test
        ~~~~~~~~~~~~~~~

        Performs a line test on the number entered, records the results,
        then requests:

        7) Repeat results
        8) Hang up
        9) Enter line number
        0) Help


    Mode 2 -- Calling On Test Line
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

        #) Line Test
        3) Completion Test
        8) Hang up
        9) Enter line number
        0) Help


        Line Test
        ~~~~~~~~~

        Performs a line test on the number entered, if line is busy
        requests Craft to hang up, performs a line test and stores the
        results.

        8) Hang up
        9) Enter line number
        0) Help

        Completion Test
        ~~~~~~~~~~~~~~~

        Performs a line test on the number entered, if line is busy
        requests Craft to hang up, performs a line test, and records the
        results.

        8) Hang up
        9) Enter line number
        0) Help


    Mode 3 -- Retrieve Results
    ~~~~~~~~~~~~~~~~~~~~~~~~~~

        States the stored results for the line number entered, then:

        7) Repeat results
        8) Hang up
        9) Enter line number
        0) Help





                      +---------------------------+
                      +         PART IV           +
                      +                           +
                      +            --             +
                      +                           +
                      + Field Access Service Tool +
                      +                           +
                      +        (F.A.S.T.)         +
                      +---------------------------+

When calling FAST, the first prompt is a request for a security code.
The security code is usually the employee badge number. After the
security code is entered and the # key is pressed, FAST will prompt for
the password. The password is usually 4-7 digits long and usually
expires every 30 days. The default password is usually the security
code. After the password is entered and the # key is pressed the FAST
New Notices and Features are played.

After all of that, the FAST Main Menu is made available:

FAST Main Menu

1. Facilities Inquiry
2. MLT Test
3. Cut to new facilities
4. Change Status of a cable and pair
5. Test Caller-ID
6. Close a Service Order
7. Cable transfer (for splicers)
8. Administrative
9. News and documentation
0. Connect call to Help Line

1:	LFACS Inquiry
	1. by phone number
	2. by cable pair

	1:	Enter telephone number
		1. Correct
		2. Re-enter

		1. Current assignment
		2. Spare pairs
		3. Multiple appearances

		1. F1 (feeder)
		2. F2 (distribution)
		3. F3 (if any)
		4. All facilities in loop

	2:	Enter wire center NXX
		1. Correct
		2. Re-enter

		Enter cable number
		1. Correct
		2. Re-enter

		Enter pair count
		1. Correct
		2. Re-enter

		1. Current status
		2. Spare pairs
		3. Multiple appearances
		4. Defective pair list
		5. Another cable-pair
		6. Another pair, same cable


2:	MLT test
	1. Quick
	2. Loop
	3. Full
	4. Add tone
	5. Remove tone

	Tone: Enter telephone number
	1. Correct
	2. Re-enter
	
	Add tone - enter number of minutes of tone #

	1. Another request
	2. End call
	3. Wait for tone


3:	Cut to new facilities
	1. Service Order
	2. Trouble Ticket

	1:	Service Order
		1. C-Order
		2. N-Order
		3. T-Order
		4. Other

		Enter 6 digit numeric portion of order number
		1. Correct
		2. Re-enter
	
		+-----------------------------------+
		| Go to "Hear F1 assignment" below. |
		+-----------------------------------+
	
	2:	Trouble Ticket
		Enter telephone number
		1. Correct
		2. Re-enter

		Hear F1 assignment
		1. Cut
		2. Keep

		Hear F2 assignment
		1. Cut
		2. Keep

		Hear F3 assignment
		1. Cut
		2. Keep

		+------------------------------------------+
		| Go to "Specify code for bad pair" below. |
		+------------------------------------------+


4:	Change status of a cable/pair to defective or non-defective

		Specify code for bad pair
		1. GTP
		2. OPN
		3. OTP
		4. UBL
		5. SHT
		6. GRG
		7. CBY
		8. Other

			Other
			1. Non-defective
			2. Defective, unknown
			3. Exposed
			4. Split pair
			5. Previous list

		Specify pair to use
		
		Enter new cable number or only # if no change
		1. Correct
		2. Re-enter

		Enter new pair number
		1. Correct
		2. Re-enter

                FAST pages the technician to indicate the success
                of the cut.

		Note: If F1 is being cut both LFACS and COSMOS need
                      updates. Two pager messages will be sent.

                      If CF pair is used as spare, information will be
                      given to break connection.


5: 	Test Caller-ID
	Enter 7 digit telephone number to be called.
	1. Correct
	2. Re-enter
	3. Correct and calling from the number


6:      Close Service Order
	1. C-Order
	2. N-Order
	3. T-Order
	4. Other

	Enter 6 digit numeric portion of order number
	1. Correct
	2. Re-enter

	1. Closed today
	2. Closed yesterday
	3. Other


7:	Cable transfer
	Enter TN from cut sheet
	1. Correct EWO.xfer
	2. Re-enter TN

	Enter first item number
	Enter last item number
	1. Correct
	2. Re-enter

	To transfer this item:
	1. Move to new equipment
	2. Skip this item


8:	Administrative
	1. Change Password
	2. Change 3 digit EC
	3. Change 3 digit NPA


9:	FAST News


0:	FAST Help Line


Notes:  When entering a variable number of digits, # is required to end entry.
        When entering a fixed number of digits, # is not required.
        Pressing 9 will always return to the main menu.

	To enter alpha characters press * to enter alpha mode and then
        use the following key sequences. Use * again to exit alpha mode.

	For example: Voy866 would be *836393*866.

	A	21
	B	21
	C	23
	D	31
	E	32
	F	33
	G	41
	H	42
	I	43
	J	51
	K	52
	L	53
	M	61
	N	62
	O	63
	P	71
	Q	01
	R	73
	S	73
	T	81
	U	82
	V	83
	W	91
	X	92
	Y	93
	Z	03
	-	11
	.	12
	+	13





                             +------------+
                             +   Part V   +
                             +            +
                             +    --      +
                             +            +
                             + Conclusion +
                             +------------+


Voice Response Systems can be a great deal of fun, and they can be
safely accessed from a public telephone. Don't play with these from
home. VRSs are a great way to hack without using a computer.

For information on the Teradyne 4Tel VRS System, read the LOD/H
Technical Journal, Issue #3: File 05 of 11: An Overview of the Teradyne
4Tel System by Doom Prophet LOD/H.


----[  EOF

[ News ] [ Paper Feed ] [ Issues ] [ Authors ] [ Archives ] [ Contact ]
© Copyleft 1985-2014, Phrack Magazine.