Receive ALL group calls regardless of call ID hack

[billrenrut]

Looking for a way to receive all calls (like transmitting an "All Call" but in reverse). So regardless what Group Call ID someone is transmitting from, I'll be able to hear them. 16777215 is the magic "All Call" number to transmit on but of course you can't add this as a Group Call ID - which, if you could, you might be able to receive any group calls. The closest Group Call ID you can enter is 16776415.

Not 100% sure that by having a 16777215 Group Call ID will let you receive any group calls but it seems sort of logical.

So, following the Mototrbo "Out of Band" hack, I've tried the same by modifying the codeplug Group Call ID with 16777215 then going to the rangevalidation.lmx file in the CPS and editing the 16776415 limit to 16777215. Files saved and re-encrypted. Load the codeplug but alas, it switches back to Group Call ID of 1. So there must be another check that's occurring in the CPS.

Would be a great hack if it's possible.

[Napalm]

I wouldn't mind knowing if this is possible too, but I doubt somehow.

[com501]

Bump

Anyone had success with this?

[gopher]

yes that would be nice, all call on tx AND RX, please mother moto!
i wanted to see how hard it is to listen in on a local systems with unknown system parameters, off the top of my head here is what i think i did not sure if its 100% correct
If the radio programmers had setup a group calls that were very random then this would not work would spent the next 10 years doing this.
however on 3 different systems i have determined all color codes and all group calls to be 1-16 or 100-116 or 1000-1016

looked up the freqs in the fcc database for the company
programmed into analog scanner
noted 2 freqs with the recognizable trbo digital sound

programmed group calls 1-16 with values 1 - 16
programmed group calls 100-116 with values 100 - 116
programmed group calls 1000-1016 with values 1000 - 1016

rx group list 1 had group calls 1 - 16
rx group list 2 had group calls 100-116
rx group list 3 had group calls 1000-1016

heres how i programmed the channels


zone 1
chan 1 with freq 1 time slot 1 color code 1 rxg1
chan 2 with freq 1 time slot 1 color code 2 rxg1
...
chan 15 with freq 1 time slot 1 color code 15 rxg1
chan 16 with freq 1 time slot 1 color code 0 rxg1


zone 2
chan 1 with freq 1 time slot 2 color code 1 rxg1
chan 2 with freq 1 time slot 2 color code 2 rxg1
...
chan 15 with freq 1 time slot 2 color code 15 rxg1
chan 16 with freq 1 time slot 2 color code 0 rxg1


you get the idea
setup a scan list for each zone
when didnt hear anything on the trbo but i did hear audio on the analog i know the rx group must be wrong. ( or encryption is enabled, buy i think if it is you still hear garbled audio right ? )
while scanning i think i had to stop the scan and turn the dial to see what color code was being decoded since it does not display on the screen. its tediouis but i got lucky and it worked

[com501]

If the channel is encrypted the radio does not unmute at all. There is no way to have the unmute option if the encryption doesn't match as far as I know.

[Forts]

If they are using enhanced privacy and you have an improper key loaded you will hear garbled audio (at least I do with my radio). Also, if you have the correct timeslot, color code and group code selected you should see the radio ID's as each unit TX's. If you have a discriminator tapped radio you could try using DSD to see if they are encrypted.