Home

Telephone and Line Analyzer User Manual

1. 000b82 000b82 000b82 000f3df OO0f 3df 000b82 O00f3df 000b82 000f3df 000b82 OO0Of3df COCCCCCCCCCCCCCCPrPEPPCOCCCHA 46 Dest IP 192 16 192 16 192 16 192 16 192 16 192 16 192 16 192 16 192 16 192716 192 16 192 16 192 16 192 16 192 16 192 16 192 16 192 16 192 16 192 16 192 16 5060 gt 5060 5060 gt 5060 5060 gt 5060 Request Reply Request 5060 gt 5060 5060 gt 5060 5060 gt 5060 5060 gt 5060 5060 gt 5060 5060 gt 5060 5060 gt 5060 5060 gt 5060 5004 gt 15762 15762 gt 5004 5004 gt 15762 15762 gt 5004 5004 gt 15762 15762 gt 5004 5004 gt 15762 MANUAL TEST FUNGTIONS To access the functionality of the VolP Analyzer do the following Interface Function gt File gt Start Trace or Traffic light icon Start data collection File gt Stop Trace or Stop sign icon Stop data collection Details Tab View highlighted packet details Stats Tab View overall collection statistics File gt Export Save collected data to file on USB CF File gt Clear Clear collected data from memory File gt Properties Access setup and filter definitions File gt Enable Filtering Apply defined filter to new collection File gt Close Close Analyzer program Close icon x Close Analyzer program Features of the TALAN VoIP Analyzer include e displaying the source destinat
2. J 10Hz 1 48 It is highly recommended that the rotary dial be used to adjust the power level of the Line bias function The rotary dial provides a much finer control while the stylus may provide quick large jumps in voltage You should be careful not to put too much voltage on a line MANUAL TEST FUNGTIONS A B Comparison The TALAN is equipped to evaluate the results from multiple tests by comparing a live test against a known good reference The Compare dashboard can be accessed from either the dropdown list or from the Compare button on the Test Options dashboard E Option Lock E Continuous Pairs jallpairs Lx Display chart Wire Ordering Defaut is Se A Balanced Pairs 4 5 Compare 3 EE 7 Clear During any test mode the results are saved in the or Live position They can then be compared to a previous test or reference file loaded into the B or Ref position All TALAN Test functions can be compared using this A B Comparison mode however only an FDR example is provided in this manual as an example 49 R I MANUAL TEST FUNGTIONS The first image below shows an FDR test for the Live position The second image shows a known good FDR test on a similar line in the Ref position O A Live Ref Difference 4 Live Q B Ref Difference Live to Ref Live to Ref Ref to Live Ref to Live 1 3 1 3 1 4 1 4 1 5 1 5 1 6 1 6 1 7 Lig
3. O 27 e MANUAL TEST FUNGTIONS Audio The Audio test provides for listening to both Digital and Analog Audio Select the Audio option from the Manual menu to access the Audio test screen Volume Gain ne Auto Pre pA LI Na MA VAAR TEA LAMA Bandpass Filter Digital BO rr BO rr BO O O OOOO O De 1 oe F n 7 Le p e i P J a Ek rr 3 Ek rr 3 BO Z O O OOOO O 3 oe Ek Ek rr j A Ek rrr d d E Digital Decode After opening the Audio screen there are several methods to select the desired pair e Tap the desired pair listed 4 5 is shown on the test display e Tap the Input portion of the Summary dashboard to bring up the Connection dashboard e Press the C button on the keypad to bring up the Connection dashboard In most cases the center pair should be selected Pair 4 5 as shown in the figure l 28 MANUAL TEST FUNGTIONS To select the proper digital demodulation you must specify the proper digital system Press the Digital button on the Audio dashboard to open the Digital Audio dashboard and then select Install to load the proper Digital system You must select Upload to program the TALAN for this system It will take approximately 1 minute to upload the system demodulation program for a particular digital system Digital Audio Installed System Samsung DCS828 Install Codec a law prlaw NOON ON m oe et Phone Systems Channels Primar
4. Compare Clear rd 3 2 v gt gt Boe ee 1 po a 2 enO OSOS 2 KF 2 2 Kk _ ___ 3 3 3 z E o oo 3 A SIN N amp pe rir Jysem To determine the proper pair with the tap the transmit power is manually decreased until only the true pair shows an NLJD response 41 R MANUAL TEST FUNGTIONS In this case the Tx power was reduced to less than 10 and hence the parallel tap is clearly being displayed only on pair 4 5 Test Options E Option Lock fl Continuous Pairs falipars l Display jOveriay WN N NON NON me ee BD Wire Ordering Second and Third v Defaut ll POE Compare co oo O yA ODO y oa Fo 4 Eu Fa FY FG 69 1 FY 9 PE PI FP DB Clear td E In the next example there is a serial tap only on conductor number 8 Therefore only combinations that contain conductor 8 will get a response Test Options W Option Lock E Continuous Pairs fall pairs Display Wire Ordering Defaut Second and Third v Compare Clear Summary R 49 MANUAL TEST FUNGTIONS In the next example below there is an electret microphone that is placed on an unbalanced pair combination of 1 3 You can see a strong 2 harmonic response on many pair combinations that contain 1 or 3 and also some response on the unbalanced 2 6 pair whose conductors are balanced with 1 and 3 This is an excellent example
5. NOTE The overall effectiveness of any technical surveillance countermeasure is directly dependent on the level of threat and the user s ability to properly deploy the appropriate countermeasure REI s Center for Technical Security offers training on technical surveillance countermeasure equipment OWNER S RECORD The Serial Number of each TALAN is located on the underside of the unit Please record this number and refer to it whenever you contact your dealer or Research Electronics International concerning this product Note Removal or alteration of the serial number automatically voids all warranties of this product MODEL TALAN DPA 7000 SERIAL NUMBER 7 7 RESEARCH ELECTRONICS INTL We 455 Security Drive lm Algood TN 38506 U S A p Ww ji 1 931 537 6032 www reiusa net TABLE OF CONTENTS BASIC TALAN OPERATIONS cccccccsseceeceeceeceeeeeceeeeeeseeeeeeseeeeeesseaeeesseeeees 1 Battery Charging and Power Control cccccccccseeceeeeeeeeeeeeeeeeeeseeeeesaeeesaeeeeeas 1 Updating the Software and Firmware c ccccccceeceeeeeeeeeeeeeeaeeeeseeeeesaeeesaeeeeas 1 Saving Screen Shots to Thumb Drive rrannrnnnnnrnnnnnevrnnnenrnnnnnnnnnennansnnnnnennnnsennnnn 1 Te 1 CO FMI OTT UN 10 aS NE 2 Information DISPIAY ccccccceeccseeeseeeceeeceeeeaeeeceeeeeueeseeeseueeeueeseeeseeesaueeseeeseeeeaes 2 INPUTS AND AUTOMATIC SWITCHING sceri 5 TEST DATABASE MANAGEMENT ccccccsecceeeeece
6. you can identify the connection as a series or parallel connection Furthermore when testing a line for an NLJD response you must consider that a strong 3 harmonic response is typically not the result of a corrosive line rather it may be the result of limiting diodes in a phone tap It is highly recommended that you only use the NLJD function on a dry line meaning the phone should be disconnected and the line should be disconnected from the switch Ideally there should be no electronics on the line However in the first example below the line was still connected to the switch and it appears that there are electronics on many pairs but if you look closely it is clear that the transmit power is turned off and therefore the response that you are seeing is merely the digital signals on the line that are in the frequency range of the NLJD detection circuit In other words the indicated responses in the figure below are not threat NLJD signals You should always be careful when using the NLJD function to make sure that the signals that you are detecting are not part of the phone system Test Options W Option Lock E Continuous Pairs fal pairs Ls Display nk ON Hn amp Ww On HD nn sb WwW 1 1 1 1 1 1 2 2 2 2 2 2 3 3 Wire Ordering Defaut l Second and Third v i C Compare nan nu wn wn A A y G Ny A G Ny D ME T l 40 MANUAL TEST FUNGTIONS Analyzing 2 and 3 Harmonic Results I
7. 1 8 1 8 2 3 213 2 4 2 4 2 5 25 2 6 216 217 2z 2 8 28 3 4 3 4 3 5 x Swap Swap on Clear Live Clear Live Clear Ref Clear Ref nn uu on A A A on On AONGA nan nu ann A on On DON HD Recall to Ref Recall to Ref Known Good Reference Finally we see the comparison of the two tests on the same screen which shows a fault on the Live line at approximately 96 feet 4 Live 5 Ref O Difference Live to Ref Ref to Live Pe ee ee ee n ma f a f pe pe ub ON DM Aa w ON Aw w Swap Ww w on Clear Live Clear Ref n nun wn wn A on Ont non GC Recall to Ref Comparison of Live and Known Good Reference N I 50 HARMONIC LOCATOR PROBE LINE TRACING AND TAP DETECTION HARMONIC LOCATOR PROBE LINE TRACING AND TAP DETECTION The Harmonic Locator Probe provides two basic capabilities 1 An RF Line Tracer that operates at 225 kHz 2 A harmonic detector to locate the existence of an electronic tap This system consists of a Non Linear Junction Detector in which the main TALAN unit provides the transmit function and the hand held locator probe provides the receive function Basic procedure is the following 1 Connect the main TALAN unit to an isolated dry line without the phone or the switch connected to the line 2 Then select Line tracing from the Manual menu and adjust the transmit power level using the stylus 3 Using the Connections dashboard select a w
8. TALAN the right hand side of the display is used for the dashboard functions and to provide overall information about the testing process You can always return to this high level summary dashboard by pressing the F4 Summary button It may be necessary to press F4 multiple times depending on the currently displayed dashboard You can access various dashboards by using the pull down menu at the top of the display Battery Date zai Database i Target Info Line Bias Status Phone and Audio Connection Summary Pair Summary R 2 BASIC TALAN OPERATIONS Digital Audio Line Bias Connection DENNE He All dashboards can be accessed using the pull down menu at the top each dashboard PHONE DIGITAL SOURCE VOL GAIN FILTER st 3 56 7 amp ee TA Red e He Balanced Pairs 4 5 3 1 7 3 R I BASIG TALAN OPERATIONS Images of dashboard screens are below Audio Line Bias and Connection These are accessed by pressing A Audio B Bias or C Connection buttons Since these dashboards are accessed often they were assigned special hard buttons for quick access C Volume BM Mute BG Auto rare O DC Static Ac Sine Power 100 Banana Red Black Black Green Bandpass Filter Digital Define l 4 INPUTS AND AUTOMATIG SWITCHING INPUTS AND AUTOMATIC SWITCHING The TALAN provides modular 8 type connectors Line
9. and the few spikes at very short range are showing the short cable that is connected from the TALAN to the wall jack Test Options 68 931 ft h W Option Lock E Continuous Pairs Single pair v Display Wire Ordering Defaut Show All Hide All Compare 4 4 4 5 5 5 6 6 Clear J 2 z OOo 5 LY 7 j o 2 j 2 mn 7 2 C 7 3 amp U n i tem 35 R I MANUAL TEST FUNGTIONS RF Analysis RF analysis is broken into 3 testing functions 1 RF Level 2 RF Spectrum 3 RF Antenna Level The RF Level function is a broadband detector analysis that covers a frequency range to 600MHz the RF Spectrum function is a spectrum analyzer function to 85 MHz and the RF Antenna Level function is to be used with the supplied antennas to a frequency range of 8 GHz Broadband Line RF Level Analysis Select the RF Level test to access the screen below Test Options E Option Lock E Continuous Pairs Jallpars z Display 1 TE 1 1 ij 1 Wire Ordering Defaut 30 seconds eo a Ea Ea Compare nm nm E O mo cc OO Eo E x x _ oo _ In this screen all pairs were tested for general broadband RF energy As you can see from the screen in this example all pair combinations containing a 4 or 5 contain reasonable RF energy This is because pair 4 5 in this particular system is active and cu
10. headphone jack on the left side of the unit see Figure 13 uses a standard mono 3 5mm plug Figure 13 Headphone Jack R 58 TALAN SPEGIFIGATIONS TALAN SPECIFICATIONS CONTROL SYSTEM Primary Computer 32bit RISC processor 520MHz Internal Memory 64MB SDRAM OS 64MB Flash External Memory Compact Flash Type III USB mass storage DIGITAL I O Network 10 100 Ethernet Controller for IP Packet Detection USB USB Device A Type supports external keyboard mouse and USB mass storage device USB Host B type for future use ANALOG I O Headphone Output 3 5mm connector Microphone Input 3 5mm input USER INTERFACE Hard Keys 6 Soft Menu Keys 5 Button Quadrant Navigation amp other dedicated keys Encoder High Resolution Optical Encoder Integrated Touch Screen with Stylus Test Inputs Dual MOD8 Supports 2 4 6 amp 8 wire Modular Phone Jacks Banana Type Standard sleeved sockets Ring Tip and Earth SMB RF Input RF Antenna Connection to 8 GHz Broadband Detector Expansion Port Supports communication and measurement for use with future accessories All Inputs Electrically Isolated RF SYSTEM Spectrum Analyzer Dual Conversion Super Heterodyne Receiver Frequency Range 30kHz to 85MHz Sweep Time 2 Seconds Step Size 1kHz Bandwidth 18kHz Sensitivity 100dBm Broadband Detector RF SMB Input 100kHz to 8GHz Line Level Test 100kHz to 600MHz Sensitivity 65dBm C DIGITAL MULTIMETER Quick
11. hours Note It is recommended that the TALAN battery be recharged on a regular basis during extended periods of storage 3 months or more to prevent damage to the battery Additionally when storing TALAN for long periods 1 month or more it is recommended that the battery be removed from the unit and placed in the storage compartment in the case Storing the TALAN with the battery in the unit can deplete it more rapidly potentially shortening the life of the battery Updating the Software and Firmware e Software updates in the form of a FIX file will be available on line or by contacting REI at sales reiusa net Place the downloaded FIX file on a USB thumb drive Plug the thumb drive with FIX update file into the TALAN Press the F6 System button and choose Update from the pop up menu Highlight the FIX file and press the OK button The TALAN will now update the software firmware Follow any on screen directions as the TALAN may need to be restarted for the update to take effect e Remove the thumb drive and save the FIX file as a back up Note Check REI s website or the REI TSCM Newsletter for software update notification If you have any questions contact REI at sales reiusa net Saving Screen Shots to Thumb Drive To assist in report writing the TALAN provides the ability to capture screen shots from the TALAN display These images are created as BMP bitmap images and stored to a thumb drive To use this function the thu
12. menu to label and then save this record in the database Save Data Job Name test tal C Date DCvolt b1 f3 0101 1 Input Panel Esc ih 2 3 5 6 F 8 Q Ins q W Z f E y L i O E Home Up Back Intl Sym a S Cc j g F j Left Ret Right Cap Shift Space z X 8 y a A T End Down Del MANUAL TEST FUNGTIONS You can also select Recall Data to later retrieve this stored data You must be careful to document your filenames to keep track of the data that was stored a0 om o7 020 uio om om ne TARGET SEQ STAGE fet WwW w DC Voltage VDC BIAS LEVEL FREQ PHONE DIGITAL SOURCE PT GE ED nim ia FEE nb ON au BW ON aus w VOL GAIN FILTER 5 OE 8 1234567 Red Black Green eS a Balanced Pairs w og on DW WN 1 Pa nn wn nn A on On THON DH Recall Data Retrieve Data Job Name test tal C DCvolt b1 f3 0101 1 4 5 2011 9 26 58 25 l MANUAL TEST FUNGTIONS DMM Digital Multimeter Open the DMM test screen by pressing the F3 Manual button and then press the Options button to display the Test Option dashboard where you can specify whether to test a single pair balanced pairs or to test all pair combinations Also the continuous box specifies whether or not to continually update the test results Test Options Wi Option Lock E Continuous Pairs Jallpairs Lx Display 1 1 1 1 1 1 Wire Ordering berau Ls Compar
13. on the left is the frequency spectrum window and the window on the right is the time domain window The time domain window is basically an oscilloscope view of the demodulated signal The main difference between the Sweep and Analyze modes is that the Sweep mode scans across the entire frequency spectrum in 10 kHz steps but the Analyze mode locks the receiver to a fixed frequency so that a signal may be demodulated and 37 R I MANUAL TEST FUNGTIONS listened to Hence if the Analyze mode is selected the Sweep window will not be updated as shown in the next figure Selecting and Analyzing a Signal While in the Sweep screen you can select a signal by tapping on the Sweep window at the desired frequency using the stylus Then simply press the Analyze button to go into the Analyze mode You may need to re adjust the frequency by tapping the analyze screen at the appropriate frequency location or turning the rotary dial to adjust the frequency Displaying multiple traces for Comparison You can have the unit display multiple RF traces simultaneously For example it may be useful to capture an RF trace of the main 4 5 pair as well as the other balanced pairs This can be done by classifying the balanced pairs and having the TALAN automatically capture these spectrum traces or simply by manually selecting the pairs of interest and displaying the spectrum traces simultaneously In the figure below combinations 1 2 3 6 4 5 and 7 8 have be
14. p 81 2 m 433 2 p 79 8 m 2 9654 n 94 7 m 1977 n 80 2 m 212773 n 80 6 m 18134 n 11 7 m 212263 n 11 5 m 21973 n 12 2m 20516n HE Clear test tal C LOC bdg1 3rdfoor ofc 101 TARGET deskphone SEQ bdgi3rdfloor ofr101 des On hook DMM Unsaved Audio Empty RF Spectrum Empty RF Level Empty RF Antenna Level Empty Off hook Disconnected Open Circuit End of Line 1 2 3 4 5 6 EN on EE cy oe i oo he oa sl Save as mono em fv sfvun sn 2 2 oo al Sequence Manual Options Config System 19 R I TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE Save Sequence Data Functions As shown below when data has been measured but not saved the surrounding field will be indicated in red on the summary dashboard to the right To save this data select Save as to store this data into the database structure When data is saved it will be indicated with a field Red background indicates data has NOT been saved WwW DET ETT ET Ne Se EE Er ELSE LEE JE JE TELE EL JE SE RE 4 TE LE TE ER a Save Sequence Data Job test tal Location bdg1 3rdfloor ofc101 Target deskphone Sequence bdg1 3rdf loor ofc101 deskphone 20110405 Select Data to save Saves only the data from current test On hook stage data Saves all the data from current stage Sequence data Saves all the data from all stages Select Save Method Unsaved data only Overwrites only changed data Unsaved and empty data Over
15. wo s N N 3 ke W D pa 3 3 Disconnected N oO S Open Circuit End of Line J ONE J E 3 N wi 3 Non 02m 02m 02m 214m 215m 02m 02m 02m Ne on N No MESEN gt 0m BEG Open Save Audio Detect m Save as Clear Stage Sequence System 21 R I MANUAL TEST FUNGTIONS MANUAL TEST FUNCTIONS This section provides an overview of all TALAN testing functions The figure below shows the available manual testing options SEQ STAGE DC Voltage VDC 440 V A BIAS LEVEL FREQ PHONE DIGITAL SOURCE VOL GAIN FILTER lad a j 2445 67 8 1 345 6 7 8 Red Black Green EE Balanced Pairs 1 2 3 4 5 6 7 8 le Geer EG as es a ee a E C ss I I I l l i i l I I l l l I l l l i MA Anu n a od i ee Aa A hud The manual test controls for each function are very similar For each test once the test pairs have been defined single balanced or all under the Test Options dashboard and any other test parameters have been specified the test is started by pressing the START STOP button or tapping Start on the screen Save Recall for Manual Test Functions For all Manual Test functions the user can save the current active data by simply selecting the Save Data command under the Manual test functions tab This will save that particular data set within the current active Job Name D
16. E Bandpass Filter Digital Digital Decode tr mn dd bE 1 8 i E C EE gg S j E BE C M EE Upa maa PEER a y aons CONTIG y ee Jysem Ne l 32 MANUAL TEST FUNGTIONS Classify Pairs When planning to test a telephone line it is important to be able to identify the balanced pair combinations The TALAN provides some test functions that will assist in identifying which pair combinations are the balanced pairs This is very useful because for many testing functions it is sufficient to only test the balanced pairs and to save time by NOT testing all of the odd pair combinations To classify the appropriate balanced pairs press the F3 Manual button at the bottom of the screen and select Classify Pairs To Run the pair classification test 1 Ensure that the phone is disconnected and that the TALAN is only connected to the line that goes to the switch 2 Press the START button This test is a line impedance test that measures the coupling between balanced line palrs The pair combinations with the strongest bar graphs should be balanced pairs In the example below the balanced pairs are clearly 1 2 3 6 4 5 and 7 8 After reviewing the balanced line data you should manually define the combinations of balanced pairs by selecting them in the Define Connections dashboard Tap the connector numbers that make up the pair and select Add to define the pair as a balanced pair Once the balanced pairs have bee
17. ING Care should be taken when tracing wires to ensure that the Locator Probe never comes in contact with high voltage wiring HLP Locator Probe Display 3 Low Battery Indicator 1 Fundamental Receive Cs iato gt 2 279 Harmonic Signal HARMONIC Receive Signal Strength Pens OH PROBE Strength Indicator ah Pee Indicator Figure 1 Front Panel Indicators Please refer to Figure 1 for the following function descriptions NOTE The indicators are shown as they would be seen in a normal operating condition 1 The Green LEDs are used to show the relative Received Signal Strength Indication RSSI of the 225kHz injected onto the wire to be traced 2 The Red LEDs are used to show the relative RSSI of 450kHz This frequency indicates the presence of a semiconductor The injected 225kHz from the TALAN is sent into the wire and the generated harmonic is being re radiated 3 The LOW BATTERY indicator is lit when the 9V battery gets down to 5 8V 53 R I HARMONIC LOCATOR PROBE LINE TRACING AND TAP DETECTION HLP Controls POWER The POWER button serves two purposes Turn power off on or return to normal operation UP Used to increase the volume MODE The MODE button is used to select mode of operation 3 _ _ i om icv i DOWN Used to decrease the volume Figure 2 Control Buttons HLP Modes of Operation The Harmonic Locator Probe HLP has three operation modes Combination Mode Tracing Mode an
18. Phone banana plug connectors Black Ring Red Tip Green Earth an expansion port for future applications and an RF antenna input e The Expansion port will be used for future upgrades as developed but currently has NO function Warning Even though the Expansion port Is currently unused it is still connected to the test input circuitry Devices other than those provided by REI should NEVER be attached to this connector e The RF Antenna port is used for RF broadband analysis using the 2 provided antennas e The banana plugs can be used for any type of miscellaneous testing Warning The TALAN circuitry is designed for testing sensitive phone networks and equipment The banana plugs should NOT be connected to high current or high voltage test points such as power outlets e The modular 8 connectors provide for switching between selected pairs for most types of wiring For example if a cable has 8 conductors the typical wiring pairs are as follow 4 5 is typically the primary pair 3 6 is the secondary pair 1 2 is an auxiliary pair 7 8 is an auxiliary pair Using these 8 conductors it is important to note there are 28 possible combinations to consider For example 5 R I INPUTS AND AUTOMATIG SWITCHING The switching matrix in the TALAN provides for automatic switching and test measurement for all of these possible combinations Users can also specify only testing a single wire pair or the balanced pair combinat
19. Response Auto Ranging 500msec Sample Rate AC DC Volts 0 to 250V Maximum AC DC Current 0 to 300mA Maximum Resistance 0 to 42MQ Capacitance 50pF to 40uF BIAS GENERATOR Optically Isolated Direct Digital Control High voltage DAC Output Ceiling 80V Modulation Fixed voltage or variable rate Sine wave 10Hz 300HZ AUDIO Audio Bandwidth 20Hz 20kHz Gain Up to 80dB total system gain AGG Digitally Controlled Automatic Gain Filter Analog Voice band filter 300Hz to 3kHz POWER SYSTEM External Input 15VDC 3A Universal Power Supply 100 240VAC 50 60Hz Removable Battery Rechargeable Lithium ion 4 6 hours of run time MECHANICAL Dimensions 10 0in x 12 9in x 2 7in 25 4cm x 32 8cm x 6 9cm Weight with Battery 6 lbs 2 7 kg Case Dimensions 5 4in x 14 9in x 19 5in 13 7cm x 37 8cm x 49 5cm Loaded Case Weight 19 0 Ibs 7 1kg Operating Temperature 0 C to 50 C HARMONIC LOCATOR PROBE Operational Frequency 225kHz amp 450kHz Antenna Type Balanced Loopstick Headphone Audio Output 160 105dB SPL limited Battery 9V Alkaline Run Time 10 hours average 22 hours headphones Size 17 5in x 1 5in 44 45cm x 3 8cm stored 63 75in x 1 5in 162cm x 3 8cm fully extended Weight 1lbs 5kg NOTE Product descriptions and specifications subject to change without notice 59 R
20. TALAN Telephone and Line Analyzer User Manual 455 Security Drive Algood TN 38506 U S A l J 1 931 537 6032 www reiusa net A 2 RESEARCH ELECTRONICS INTL E Copyright Research Electronics International LLC TALAN Telephone And Line Analyzer User s Manual This document is intended to provide guidance and instruction on using the TALAN Telephone and Line Analyzer for telephone testing The overall effectiveness of this product and of any surveillance countermeasure is dependent on the threat level and the user s ability to properly deploy the appropriate countermeasure Revision 2 44 COPYRIGHT RESEARCH ELECTRONICS INTERNATIONAL REI products are designed and intended for legal commercial applications however because laws and regulations vary from state to state and country to country it is the sole responsibility of the purchaser and user operator to check and comply with all applicable laws and regulations for the possession and operation of this equipment before and after making a purchase This manual contains proprietary information intended solely for use with the TALAN Telephone and Line Analyzer Information contained in this manual including product operation and specifications is subject to change without notice Any product or brand names contained in this manual are used only for identification purposes and are trademarks or registered trademarks of their respective holders
21. ama NTERNATIONAL Figure 8 COMBO Figure 9 TRACE Figure 10 DEVICE DETECT Initially the first press will initiate a lamp test of the current operational mode Subsequent MODE button presses will sequence through these displays When the selected operation is obtained pressing the POWER button will return the user back to normal operation Otherwise the unit will return to normal operation automatically after a preset timeout occurs l 56 HARMONIC LOCATOR PROBE LINE TRACING AND TAP DETECTION Misc Displays Startup When the user first puts in a battery or turns the unit on there will be a brief period approximately 2 seconds where the unit goes through the calibration routine This is used to sample the current ambient noise floor and is used to establish the proper operation of the RSSI display During this process the user will notice the bottom green and red LED oscillating back and forth Low Battery Condition If the 9V battery ever gets below 5 8V the Low Battery Indicator LBI in the top center will glow red See Figure 11 KJ 2nd gt gt e gt a D Trace HARMONIC LOCATOR PROBE Figure 11 Low Battery Condition HLP Battery Compartment The power source is a 9V battery There is a sliding door that is used to retain the battery See Figure 12 JJ Figure 12 Battery Compartment 57 R I HARMONIC LOCATOR PROBE LINE TRACING AND TAP DETECTION HLP Headphone Jack The
22. atabase In essence all of the data is stored within the Job Name Database file Also it is very important to understand that you can save multiple measurements for each test function within the same job name The user can maintain the manually collected data under the Job name by clearly documenting the location and target that is currently being worked on through the file naming provided during the save and recall process To demonstrate the basic Save and Recall functions we have taken simple DC voltage measurements of a line this test is explained later under Test Functions portion of the manual It is important to note that any measurements that are taken with the TALAN i e 23 R I MANUAL TEST FUNGTIONS DMM FDR NLJD Audio level RF Spectrum trace etc can be stored within the Job Name Database and later recalled for review or comparison For example the test measurement is taken as shown in this example of DC Voltage LOC TARGET SEQ STAGE 00 gt 04 f gt 07 gt 020 i 00 gt om gt om gt 0 Jf gt ENES EEE DC Voltage VDC jaov x BIAS LEVEL FREQ PHONE DIGITAL SOURCE VOL GAIN WW N NNN N N m p ee et mf ON Hu ha WwW JE HD EE Alw on FILTER 123456 8 SEA GE Red Black Green ME e Balanced Pairs nn un un wn A on On non nH Save Data oy ld on An W N pr EE ee GE ee GE GE FAE EEE Ge GE KE EE KE ee KE ee ee Select Save Data on the F3 Manual
23. cess the Sequence testing press the F2 Sequence button and simply begin selecting the desired tests under the Stage submenu It is highly recommended that the test stages and test functions be performed in the order that they are presented www oh y Aer be i New Sequence w w 4 u hd LA Within the test Sequence different stages will be defined as previously described and specific tests will be available under these test stages as indicated by the example menu structure below WW NNN NN be mT ww amp Ww w n A A On hook DMM Save as Start Clear When executing the tests under the Sequencing Mode the TALAN will automatically test all combinations of pairs and will utilize default settings for the various test functions 18 TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE Below is an example of the Stage 1 On Hook DMM tests fak 1 1 m 25 4 M 33 6 m 49 5 m 2 2 M 4 6 m 3 7 m 20 8 m 39 6 m 52 9 mM 2 60 m 1 5m 4 2m 61 1 m 45 9 m 15 8 m 11 6 m 8 5 m 47 03 41 2 mM 30 1 m 47 8 m 28 9 m 57 3m 39 9 m 44m 6 5 m 2 5 m 9 4 m 2 8340 n 20 m 13519 n 67 7 m 3 048 n 68 7 m 212682 n 19 7 m 2 5652 n 11 2 m 18584 n 9 1 m 17621 n 20 1 m 210465 n 66 6 m 3 9057 n 67 6 m 12398 n 19 6 m 19050 n 11 6 m 17367 n 9 4m 16371 n 76 1 m 3 980 n 75 4 m 1 1546 n 11 7 m 3 4732 n 8 m 271223 n 5 4m 27004 n 17 8 m Active Lo Z 95 7 m 931 6
24. d Device Detection Mode detailed below 1 Combination Mode There is a combination mode that the unit defaults to upon the first time power is applied In this mode the receiver will oscillate between TRACING and DEVICE DETECTION Each column will change accordingly to the RSSI for that frequency In this example both the fundamental 225kHz used for line tracing and the secondary 450kHz have a similar RSSI level This indication is typical of a situation where the HLP is close to a semiconductor on the line of interest See Figure 3 You will also be able to hear the audio tone if the user chooses to enable it on the TALAN If there is no semiconductor or if you are too far away from the semiconductor in the combination mode then the red LEDs will indicate a minimum RSSI See Figure 4 end HARMONIC LOCATOR PROBE Figure 4 Combination MODE while only tracing R 54 HARMONIC LOCATOR PROBE LINE TRACING AND TAP DETECTION 2 Tracing Mode Trace end HARMONIC LOCATOR PROBE EE The Tracing Mode utilizes a 225kHz signal with selectable audio modulation from the TALAN to be injected into the wire to be traced As you trace the wire the green RSSI indicator LEDs should increase in number and the audio tone should be heard when the antenna Is pointed in the direction of the traced wire and within close proximity See Figure 5 Typically you will hear the tone before you will see a visual indication of close
25. e na in in in e oe BE E Pa BE 7 BE J gt EE a 5 ee Clear Then select which tests to measure as shown above It should be noted that to prevent a non practical test there are automatic conditions for performing some of the tests for example you cannot measure capacitance on a line that is terminated or powered These conditions are as follows e Resistance Only measured if there is no voltage on the line e Capacitance Only measured if there is no voltage on the line and the resistance is very high indicating an open line Also if all tests and all pairs are selected then there is a built in automatic ranging function to ensure that each measurement is meaningful But if a single test is specified then the range must be manually selected e lf the display reads the measurement is OUT OF RANGE For the Resistance measurement it may indicate a very high resistance or open e lf the display reads Active the test was not performed because a high DC voltage indicates the line may be in use e lf the display reads Lo Z it means that the capacitance was not measured because Capacitance can only be measured on an open line l 26 MANUAL TEST FUNGTIONS It should be noted that capacitance measurements may vary greatly because capacitive coupling varies greatly between unbalanced pairs However balanced pairs should have very consistent capacitance measure
26. each of these stages 1 On Hook Test Stage Handset on hook TALAN in line with phone set e No audio should exist on any pair e Characterize system parameters such as voltage e Test for RF Carrier Current signals Tests DMM Audio analysis Broadband RF and Activity level 2 Off Hook Test Stage Handset off hook a call is in progress audio should be passing through the line only on the main pair e To validate Audio Testing Test for audio on odd pairs e Characterize system parameters such as voltage and compare with On Hook Case e Test for RF Carrier Current signals Tests DMM Audio analysis Broadband RF and Activity level 3 Phone Disconnected Stage Phone disconnected from line but line is connected to digital switch e Characterize system parameters such as voltage e Analyze Line with FDR and compare FDR results between pairs to look for taps Tests DMM FDR 4 Open Circuit Stage Line is not connected to switch or phone set No electronic connections should exist anywhere on the line Line is completely isolated from everything except the TALAN e Test Line with bias voltage for attached microphones e Analyze Line with FDR and compare FDR results between pairs e Test Line for taps and microphones Tests NLJD FDR Capacitance 5 End of Line Stage The line is isolated as in the above stage however there is a passive load no electronics only a resistive network attached to the end of the line to improve FDR sensitivity and prov
27. en captured and are being shown Pair 4 5 is the current active pair and shown in red Test Options Wi Option Lock Continuous Pairs IC hin Vy Ve niei nl eat el Ali HO Men fa sa Display EG Sweep l l Wire Ordering Analyze 6 Defaut fr Show All Hide All Compare Clear l 38 MANUAL TEST FUNGTIONS RF Antenna Level In this mode the unit only takes data from the RF antenna port and displays a bar graph very similar to a CPM 700 Broadband Detector but with the additional advantage of having the time window to observe changes over time as the product is used as a broadband RF detector It is important to note that the frequency ranges of the supplied antennas are Whip Antenna 10 MHz to 2 GHz High Frequency Antenna extends the range up to 8 GHz The example below was taken with the whip antenna as the antenna was passed near a low power transmitter The peaks in the time level graph indicate when the antenna was closest to the transmitter Test Options E Option Lock Continuous Pairs fr Display re Wire Ordering befaat l Com pare Clear 39 R I MANUAL TEST FUNGTIONS NLJD Line Non Linear Junction Detection The Non Linear Junction Detector function is one of the most powerful tests in the TALAN It is very reliable for determining if there are additional electronics attached to a line Additionally you can easily identify which conductors have the additional electronics and
28. ephone cable is a FLAT cable then a FLAT patch cable should be used between the TALAN and the wall jack b If the Telephone cable is a Twisted Pair cable a Twisted Pair patch cable typically CAT5 should be used between the TALAN and the wall jack 5 With the Phone ON HOOK Stage 1 a Test all pairs for DC voltage to get a basis for operating voltage amp DC Current b Test all pair combinations for audio There should be NO audio 6 With the Phone OFF HOOK and a call in progress Stage 2 a Test all pairs for audio Note you may also hear audio on any pair combination that has either conductor from the main pair because the TALAN audio system can pull audio from one wire in a balanced pair b Test all pairs for DC voltage This gives a basis for the operating voltage 7 With the Phone Disconnected Stage 3 a Classify the Pairs define balanced pairs b Test the main pairs with the FDR Put all FDR traces on the screen and visually compare They should be very similar It is recommended to concentrate only on the balanced pairs Double Ended Testing 8 With the Phone Set Disconnected and the Switch Disconnected Stage 4 a Test all pair combinations with the NLJD There should be NO response on any pair combinations THIS IS THE MOST RELIABLE TEST 9 With the Phone Set Disconnected the Switch Disconnected and the End Of Line terminator placed on the line Stage 5 a Test main pairs with the FDR to indicate locatio
29. esting Standard Telecom Line to VoIP Cable Switch PBX kin Line to VolP Phone PHONE Notes Warning It is important to connect the TALAN in line with the phone system using the proper cables to ensure that wiring configurations are maintained For VoIP and Digital Phone systems it is recommended that you use patch cables that match the type of cabling that you are connecting to for example if your phone uses Cat 5 cable you should use the Cat 5 patch cable and then add the VoIP Adapter Cable To reduce the risk of damage to the phone system or the TALAN with only the Switch line connected to the TALAN s Line jack use the TALAN s DMM to measure for voltage on each line If voltage exists on any line other than 4 or 5 unintentionally reversing the lines due to incorrect cabling could damage the TALAN or the phone system See page 44 for instructions on connecting a VoIP phone to the TALAN s Ethernet port to test for IP traffic 13 R I TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE Testing Stages When testing with the TALAN there are different testing conditions that must be considered We have defined these conditions as test stages and they are 1 On Hook Test Stage 2 Off Hook Test Stage 3 Phone Disconnected Stage 4 Open Circuit Stage 5 End of Line Stage It is not necessary to conduct all possible tests in each of these test stages therefore we have provided a description and benefit for
30. ide loop resistance test e Analyze Line with FDR and compare FDR results between pairs and with Open Circuit stage e Test Line for serial taps using loop resistance Tests FDR Loop resistance R 14 TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE Summary of Recommended Tests The testing stages listed above result in large amounts of test data However it is important to consider which tests provide the most benefit in the shortest amount of time For this situation we recommend the following simplified and reduced test outline Set Up 1 Set up the TALAN prior to making test measurements Methods for performing these steps are provided later in the manual a Enter a Job Name prior to testing b Enter the Location and Target information c Define the number of conductors that exist on the line d Define a Sequence Name e Install digital phone type i e Avaya Nortel Samsung Non Alerting 2 Without disconnecting the line or altering the handset test the line for audio using the banana plugs a Find a place somewhere on the line to gain access to the pairs b Test each pair for voltage to verify the main active pair c Test each pair for both analog and digital Audio d Test each pair for carrier current signals with the RF Level amp Spectrum tests 3 Using the RF Antennas test for RF energy coming from the telephone Single Ended Testing 4 Atthe phone set connect the TALAN in line a lf the Tel
31. ile not affecting the gigabit traffic Disconnecting a VoIP phone to connect the VoIP Test Adapter will disrupt any active network traffic on that line Leaving a VoIP Test Adapter in place ona specific phone line provides the capability to test the phone at any time without having to disrupt the line Additional VoIP Test Adapters can be purchased from REI The VolP Test Adapter small black box pictured above should not be confused with the VolP Adapter Cable discussed on page 12 The VolP Test Adapter black box is used to analyze VoIP traffic from a VoIP phone using the TALAN s Ethernet port The VolP Adapter Cable is used when performing TALAN s other test functions DMM Audio FDR RF Analysis etc by inserting it between the VolP phone and the PHONE jack on the back of the TALAN 45 R I MANUAL TEST FUNGTIONS Once the TALAN is correctly attached to the VoIP network the VoIP traffic IP packets can then be collected displayed and analyzed by the TALAN VoIP Analyzer software TALAN VoIP Analyzer Trace Stats Seq Src MAC OOOF3df 000b82 000b82 OOOf3df 000b82 001705 000b82 O00f 3df 000b82 000b82 OOOf3cf OOOF3df OOOf3df 000b82 000b82 000f3df 000b82 00O0f3df 000b82 000f3df 000b82 1 2 3 4 5 6 7 8 9 Dest MAC 000b82 00O0f3df O00f 3df 000b82 OO0Of3cf fff Tt tTTTTtT OO0Of3cf 000b82 OO0f3df O00f3df
32. in a Job Target will be used to identify a specific target phone set network access point etc to analyze within a location 1 3rdfioor ofc101 Available Wires define how many wires are used in the phone cord maximum of 8 conductors may be in a phone cord and the conducting pairs should always be defined from the center outward For example a 2 wire system should be defined with 4 and 5 selected and all unused pairs de selected If a 4 conductor phone cord is used then the 1 2 7 and 8 should be de selected The example below shows a typical 6 wire system setup Input Panel TEST DATABASE MANAGEMENT Prior to beginning testing it is important to define the test sequence The test sequence name is used by the database to identify the series of tests that are performed on a target For a single target on a job you may perform multiple test sequences Namek bdg1 ardfloor ofe101_ R 10 TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE Testing Locations The TALAN can be used to test a phone line from several different testing points Testing at Phone Set 3 Extension Lines Block Testing To Switch Phone Block TALAN It is important to understand that prior to interrupting the phone line you should first verify that there is no audio passing down the line Therefore regardless of where you test the line you should first use the bana
33. indeendeciatnemdedndendadacecedadasonnadees 59 TSCM TRAINING REI Center for Technical Security REI offers the World s largest unclassified commercially available Technical Surveillance Countermeasure TSCM training facility Training courses include classroom instruction and hands on exercises where students perform sweep exercises in live environments utilizing target rich project rooms The progressive course curriculum is designed for the beginner or the seasoned TSCM Technician REI has specific classrooms and project rooms with integrated digital phone systems designed specifically for telephone testing Regularly scheduled courses are taught monthly visit REI s website www reiusa net or contact REI sales reiusa net for training dates REI Equipment Certification This ts to certify that John D Smith has completes The REI Equipment Certification Course ECC 240 40 hours REI Center for Technical Security Research Electronics International Contact REI for more information about TSCM training and or other TSCM equipment www reiusa net R iv BASIC TALAN OPERATIONS BASIC TALAN OPERATIONS Battery Charging and Power Control The TALAN has a built in battery charger To charge the battery simply plug the power adapter into the AC adapter port while the battery is in the TALAN Expected charge time 1 5 hours with the TALAN off 8 hours with TALAN operational Expected run time on battery 3
34. ion MAC addresses type of packet ARP TCP UDP and source destination IP addresses e calculating statistics Stats tab for each collection total number of packets collected total average rate for all packets running average rate for the last 5 seconds peak 5 seconds average rate amp run time e allowing the user to setup custom filters to determine the type of packet captures e g only to from specific sources e providing for the export of packet files in text format or in WinPCap format for import into a PC based network packet analyzer such as WireShark or Cain amp Abel 47 R I MANUAL TEST FUNGTIONS Line Bias The TALAN provides the ability to put a voltage bias on the line to enhance other types of testing This line bias voltage can range up to 80 volts DC TALAN can also provide AC bias ranging from 10 Hz to 300 Hz Application of a line bias should only be performed on an isolated line that is not connected to a switch By placing voltage on a line you may power an electret microphone or provide power to a tap to increase the probability of detection By placing voltage on a line you may improve the detection capability of the NLJD function because a voltage will provide power and some bias to the electronic tap To activate line bias function press the B button to access the following dashboard on O DC Static DC Static 4c Sine Ac Sine Power Freq Power 100 300 Hz 100
35. ions as described later in this manual For most test functions press the F4 Options button and select All Pairs Balanced Pairs or Single Pair Note the Continuous function allows for repeated sequential testing of the selected function and wire pair s Note the Option Lock function provides a way to maintain or lock the current test option settings while navigating between multiple manual tests and touch screen taps Test Options E Option Lock Continuous Pairs a pairs e Display Wire Ordering Defaut r Compare l k a i p F p F Fl p a a E ee ee ee 1 ee ee eee 1 a a ee ee ee 4 Clear l 6 TEST DATABASE MANAGEMENT TEST DATABASE MANAGEMENT All TALAN test data can be saved to an external memory system This memory system can be either a USB thumb drive or a Compact Flash card Ports for both of these memory media are located at the base of the unit Once test data has been saved it can be further analyzed using the TALAN s A B Comparison function detailed later in this manual Note The USB thumb drives may be installed or removed at any time while the product is in use However the Compact Flash memory must be installed in the TALAN on startup to be properly recognized and accessed Note A USB Keyboard may be connected to the TALAN to facilitate alohanumeric entry for various input fields Prior to saving data i
36. ire pair that includes the conductor under test and an unbalanced partner wire The figure below shows a test of wire 4 with wire 8 selected instead of the balanced partner wire 5 The best result is achieved when a single conductor is traced rather than a balanced pair this is because in a balanced pair there is very little leakage and the coupling between the pair minimizes the ability to trace the wire 51 R I HARMONIC LOCATOR PROBE LINE TRACING AND TAP DETECTION 4 Turn on the Harmonic Locator Probe HLP 5 Test the locator probe by passing it over the wire to be traced Connection 1 1 2 2 3 3 4 4 5 5 6 7 7 8 8 Banana Red Black Black Green Open Her Define J y ster For long runs of wire it may be necessary to increase the transmit power as you trace farther and farther from the main TALAN unit l 52 HARMONIC LOCATOR PROBE LINE TRACING AND TAP DETECTION When doing a countersurveillance investigation it is important to analyze all of the wiring in the environment to ensure that building wiring is not being utilized to transport audio or video information This wiring may include but is not limited to telephone wiring LAN wiring security system or access control wiring intercom speaker wiring heating and cooling wiring etc The HLP is an ideal tool to work with the TALAN to track miscellaneous wiring and or identify the location of a semiconductor device on the wire WARN
37. mb drive must be inserted in the USB port on the front of the TALAN Press the following key sequence to store the current screen image e SHIFT e HELP If the screen shot is successful the TALAN logo in the upper right corner will cycle through background colors of green and yellow before returning to black If the screen shot is not successful e g no USB drive the TALAN logo will cycle through background colors of blue and red before returning to black If the volume is turned up there will be an audible sound that indicates the image is being saved Touch Screen and Keypad The easiest method to access and control TALAN functions is to use the built in touch screen There is a stylus located in the left grip which will give the most precise control of the touch screen 1 R I BASIC TALAN OPERATIONS To calibrate the touch screen press the F6 System button and select Touch Screen from the menu Follow the on screen instructions Calibration should only be required after a complete software update is performed Common Functions In using the TALAN you will discover that there are several functions that are accessed very often The user interface was designed to quickly access these functions using hard buttons Some of the most common functions or button display pairs are Hard Button Function gt 0O A amp A Audio Dashboard PF B Line Bias Dashboard Connection Dashboard pC Information Display While using the
38. ments The example below shows a Samsung digital phone system that uses a 45 volt supply on the main pair of 4 5 In this example the balanced pairs are 1 2 3 6 4 5 and 7 8 The balanced pairs should have the same capacitance values 2 97nF in this example as indicated for pairs 1 2 3 6 and 7 8 The capacitance value of 4 5 is not measured because the pair is active with voltage on the line 6 7m 16 6 m 129 m 54 4 m 10 2 m 2 9818 n 25 1 m 2 5885 n 104 4 m 103 9 m 11392 n 25 7 m 2 4542 n 2 O Research Electronics Intl Bn 100 14 5 m 1 7895 n 24 May 2011 15 20 19 JOB lt empty gt pa ph p ee a fk LOC 14 1 m 1 8222 n 25 2 m 2 5051 n 106 4 m 110437 n 103 3 m 25 6 m 2 4207 n 14 2 m 119639 n 13 9 m 1 114 4 m 101580 n Mem Active lo 13 5 m 2 9478 n 119328 n 5 7m 1 9215 n 19 2 m 139 2 m 2 9763 n 122 6 m 2 8836 n 119 9 m 2 9236 n 140 7 m 120 7 m z 2 Balanced Pairs 118 6 m 12 12 3 m 19271 n JE 11 6 m 19453n E 4 7 4m 14 2m 2 9685 n 15 7 m 15 3 m 113 1 m 7 1m SEQ as STAGE h n ra BIAS LEVEL FREQ fs PHONE Samsung DCS828 DIGITAL 110 m G SOURCE Unavailable 3 5m 1 5m 0 1 m hud w WwW NM NM a SOE 14 6 m 9 4m J E 120 3 m 126 7 m 111 6 m 8m 146m METT 86m 1203m 1267m 1116m ee 85m co 3 i G mi fy ae ES usa pes fm o o o NININ N N N N Sequence Manual Options Cc em
39. n classic NLJD technology that is used for detecting bugging devices a strong 2 harmonic is indication of an electronic device while a strong 3 harmonic typically indicates a corrosive false alarm junction However when using NLJD technology for looking for taps you cannot expect that a strong 3 harmonic indicates a false corrosive junction The reason is that many telephone tap circuits rely on parallel diode limiting circuits The figure below shows a portion of a tap circuit that uses a transformer to isolate the tap electronics a blocking capacitor to isolate DC voltage for a parallel tap and 2 diodes to limit the input to the amplifier circuit These 2 diodes in parallel create an NLJD response that results in a strong 3 harmonic response The next two examples will show responses to this type of tap In the figure below there is a parallel tap installed on an isolated 8 conductor line on pair 4 5 Again you can see that every pair with either a 4 or 5 has strong harmonic level even though 4 5 indicates the strongest response It is also important to note that the transmit power is about 70 of maximum power The reason that the response is showing up on combinations of either 4 or 5 is that there is sufficient power to get good response even though only 1 wire of the pair is connected to the tap device Tap to line E Option Lock E Continuous Pairs fallpars Display Wire Ordering Defaut Second and Third v
40. n defined all other test screens will display the balanced pairs with a yellow background 33 AE DO i KD O I z Pa 3 J 2 p 3 b 3 5 HE O O g 2 RO 3 3 EE Z DO i i A NM Define Connectior w Available 1 Pairs Balanced 5 3 6 4 5 7 8 Connections MANUAL TEST FUNGTIONS It is important to note that depending on the length of the cable and the type of cable this test will have varying results It is intended only as a guide and if the test does not result in definitive results the user can always simply look at the pair combinations within the cable itself to determine proper pair combinations Note the plug shows the balanced pairs of 1 2 3 6 4 5 and 7 8 It is also important to note that flat cables will have some interesting results For example a 4 conductor flat cable will have strong coupling between all the pairs that are adjacent to each other in the cable For example 1 2 2 3 3 4 will all have strong responses The standard for flat cable is that the center pair is the main pair and the outer pair is the secondary therefore the correct cable pairing for this situation is 2 3 and 1 4 and must be manually implemented In the example below a six conductor flat cable is analyzed In this case adjacent conductors always couple with each other as indicated by the test However the actual standard pairs are defined from the inside
41. na plugs connect to the main audio pair and test for audio This is often easier at an intermediate block Then it is recommended that the user start testing at the phone set For the remainder of this document it is assumed that the testing is performed at the phone set 11 R I TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE VoIP Wiring and Using the TALAN VoIP Adapter Cable Traditional Telecom Cables Typical analog and digital phone systems use a reversed modular 8 conductor cable where Pin 1 on one end of the cable corresponds to Pin 8 on the other end of the cable Pin 2 to Pin 7 and so on Flat modular cords are most often in this reversed format This reversed wiring can be seen in the image at the right note the reversed colored conductors on each connector os mim m A vtatalatglgg i t BODDE 000 FV sans n i d vr 37 ea A a The TALAN can be used in line with a phone system using the TALAN s two modular jacks which are identified as LINE and PHONE The modular jacks on the TALAN are wired in the reversed fashion to allow for most common telephone systems Pin 1 on the LINE jack corresponds to Pin 8 on the PHONE jack and so on The reversed connection between the LINE and PHONE Jacks allows for the use of the reversed modular cords described earlier It is important to remember that the pin numbers displayed on the TALAN screen refer to the LINE jack only Cat5 Cables Unlike the reve
42. ns of electronic connections 10 Use the Locator Probe as needed to find the tap 15 R I TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE Recommended Test Sequence Non Alert Test Open End Test Single End Test Disconnect Phone 16 TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE Automated Sequencing and Manual Operation The TALAN has many test functions that can be performed in either an Automated Sequence Mode or Manual Mode The main difference is that the Automated Sequence Mode is designed to walk the user through the previously recommended test sequence while the Manual Mode is designed to allow the user to go to any specific tests and completely control the parameters and conditions of the tests Manual Mode is most useful for testing for specific items of interest while the Automated Sequencing Is recommended for a complete evaluation of the line In both modes the testing screens are very similar however the Automated Sequencing Mode test screens have a green background while the Manual Mode test screens have a brown background DC Voltage VDC aov x am wow gt w w w NN NNN na uuv uw w w WwW NN NN NN be mmm m DMM Sequence Tests DMM Manual Tests This section will describe how to utilize the Sequence mode However the details of the actual tests being performed will be described later as Manual Tests functions 17 R I TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE To ac
43. of inductive coupling that can occur in a telephone line Test Options E Option Lock E Continuous Pairs jallpairs xd Display Wire Ordering 10 S Second and Third v JE Compare Clear System W Option Lock 2 a B oy ws ny Continuous Pairs falpars Ls Display Wire Ordering Defaut Second and Third v uD o sJ on n A so ic nm 4 n A dd b ov Compare o J ow J i wo O O O O z O Ol a mi 3 O 3 i O 3 Clear Sequence Manual Summary System From studying these types of responses it is easy to quickly identify different types of taps 43 R MANUAL TEST FUNGTIONS VolP Analysis Voice over IP VolP technology encodes speech for transmission over IP internet protocol networks TALAN has the ability to monitor IP packet traffic using its built in network interface card NIC and to display analyze and save those packets to assess the threat of illicit VolP phone system intrusions To activate the VolP packet analyzer select VolP Analysis from the F3 Manual menu and then press START The TALAN VolP Analyzer interface below will appear en salve 9 EE TALAN VoIP Analyzer OK Trace Detail Stats Seq Sre MAC Dest MAC T Src IP Dest IP To analyze VoIP traffic the TALAN should be connected via the TALAN network port under the right grip between the phone and the phone system network Some VolP phone handsets have a n
44. on switched internet port which can be connected directly to the TALAN s network port allowing the TALAN to see the VoIP traffic between the phone and the network However the more common scenario is a phone with no extra port or a phone with a switched port allowing network access but does NOT include the phone traffic In these scenarios no network port or switched port that does not include phone traffic the VoIP Test Adapter must be used in line with the phone network line See diagram below VoIP Test Adapter CATS CATS a lt O SWITCH TALAN VoIP Phone R 44 MANUAL TEST FUNGTIONS Using an additional CAT5 cable included connect the VolP Test Adapter in line using the PHONE and NETWORK ports on the test adapter This allows normal phone activity to take place Using a 2 additional CAT5 cable also included connect the TALAN network port under right grip to either the Rx or Tx port on the test adapter to monitor either the information being received Rx by the phone or transmitted Tx from the phone The adapter acts as a passive tap on 10 100 Mbps networks If connected to a network that operates at faster rates 1Gbps the tap is designed to force the network to auto negotiate down to the 100Mbps rate compatible with TALAN Notes To connect the TALAN to Gigabit systems that will not auto negotiate down to 100 Mbps a third party switch could be used to provide a mirrored port at 100 Mbps wh
45. out as 4 5 3 6 and 2 7 Define Connectior Available Pairs Balanced 1 1 4 5 3 6 2 7 8 8 Connections s nn p ed F l 34 MANUAL TEST FUNGTIONS FDR Frequency Domain Reflectometer The FDR Frequency Domain Reflectometer functions very similarly to a TDR Time Domain Reflectometer however the FDR function provides similar results based on a different physics principal To provide the best comparison of multiple pairs the TALAN provides the ability to plot multiple FDR traces on the same display The Distance and Gain can be adjusted using the on screen controls You must specify the Measurement Units the Velocity Coefficient Gain and Distance but you do NOT specify a pulse width as required with a TDR To get the range to any point simply tap on the screen and a blue vertical line will indicate the range Furthermore multiple FDR traces can be plotted on the same graph In the example shown below all pair combinations were automatically acquired however only the main pairs are being displayed This is accomplished by tapping the desired pair for display using the stylus In this example pair 4 5 is the main pair shown in red and is connected to the phone switch however pairs 1 2 3 6 and 7 8 are not connected to the switch These unused pairs are terminated at the patch panel before the switch with a slightly shorter cable length Furthermore the switch is located 169 ft from the TALAN
46. proximity to the wire being traced Figure 5 Tracing Mode 3 Device Detection Mode Trace HARMONIC LOCATOR PROBE RE The Device Detection Mode utilizes the injected 225kHz signal from the TALAN As you trace the wire the red RSSI indicator LEDs indicating the presence of the 450kHz 2 harmonic should increase in number when the antenna is pointed in the direction of the device and within close proximity Figure 6 Device Detection Mode 55 R I HARMONIC LOCATOR PROBE LINE TRACING AND TAP DETECTION Service Routines The Harmonic Locator Probe has two service routines described below 1 Volume 2 Mode 1 Volume The volume can be changed by pressing the UP or DOWN button The green LEDs will indicate the relative volume level When finished changing the volume pressing the POWER button will return the user back to normal operation Otherwise the unit will return to normal operation automatically after a preset timeout occurs 4 gt b e ka e kai e Trace end HARMONIC LOCATOR PROBE KS ess Ett ET RON IC l AENA INTERNATIONALI Figure 7 Volume Control Display 2 Mode If the user presses the MODE button one of these modes can be selected TLL STILT TT TLL STILTE nm Trace 2nd Trace nM Trace HARMONIC HARMONIC HARMONIC LOCATOR PROBE LOCATOR PROBE LOCATOR PROBE ELECTRONI ICE ELECTRONI ICE KSE ess ELECTRONICS KE JE NTERNAT ION At Elk NTERNAT IONA K
47. rrently communicating with the phone handset The time level graph plots the changes in broadband level over time In this example the data was captured by automatically switching through the pairs so the time graph roughly reflects the same data as shown in the bar graph representation of each pair I 36 MANUAL TEST FUNGTIONS RF Spectrum Analysis Select the RF Spectrum test function to access the RF spectrum analyzer This mode is strictly designed to analyze the RF spectrum of telephone wiring up to 85 MHz in a method very similar to the OSCOR It is recommended that the desired pair is selected by first selecting the Single pair option and then tapping the desired pair for analysis as indicated in the figure below The RF Spectrum Screen will be updated after the START button is pressed The and buttons are used to zoom into the spectrum and look at specific signals or portions of the spectrum This is accomplished by positioning the cursor with a stylus and then using the and to zoom in or out WE Option Lock Continuous Pairs Single pair Display Sweep Wire Ordering 15 Show All Hide All Compare Clear Sweep and Analyze Screens The RF Spectrum Analyzer screen is divided into two sections Sweep and Analyze The Sweep screen is the wider top window that shows the full spectrum to 85 MHz The two windows below the Sweep screen are the Analyze windows the window
48. rsed modular flat cables found in most voice systems Cat5 twisted pair cables which are used in VoIP phone systems and some digital phone systems are wired in a straight though manner Pin 1 to Pin 1 Pin 2 to Pin 2 etc Typically VoIP systems use Pins 1 2 3 and 6 of an eight wire twisted pair cable This straight through wiring is shown in the image to the right note the colored conductors are in the same order in both connectors When using the TALAN in line on a VoIP phone system the reverse between the LINE and PHONE jacks will flip the signals on Pins 1 and 2 to Pins 7 and 8 and the VoIP phone will not work To re reverse these connections an Adapter Cable is required How To Use The TALAN VolP Adapter Cable The TALAN VolP Adapter Cable is simply a very short reverse cable that counteracts the reverse in the LINE and PHONE jacks and allows the VoIP signal to remain on the correct pairs R 12 TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE To connect the TALAN to a VoIP phone system using the VoIP Adapter Cable see the instructions below 1 Disconnect the eight wire straight through cable from the VoIP phone and plug it into the LINE jack on the TALAN 2 Plug the TALAN VolP adapter cable into the PHONE jack on the TALAN 3 Connect another eight wire straight through cable from the TALAN VoIP adapter cable to the phone instrument 4 The VoIP phone should now operate normally and is ready for t
49. ry low and increase as needed If the Gain level is set too high it will overload the Automatic Gain Control Circuit and the audio board will basically turn off Also care should be taken to avoid feedback with the phone system It is recommended that headphones be used with the TALAN to avoid feedback and to be non alerting while testing When the set up is performed properly the user should be able to generate good audio including Oscilloscope views of the digital audio as shown below The example below shows a typical dial tone signal on a single pair Volume Gain ne Aut Wi Bandpass Filter Digital Digital Decode 31 R I MANUAL TEST FUNGTIONS Note in the example below the Test Options dashboard was used to test all pairs for audio In this particular case the cable that was tested was only a 2 wire system but an 8 conductor Cat 5 cable was used in the system Hence any combination of 4 or 5 results in some audio because the system is capable of demodulating the audio even if only 1 2 of the signal is present It is also interesting to note that the audio levels are basically the same for the combinations that contain audio This is because the strength of the digital system is not indicated through the digital demodulation process In other words a weak digital signal and strong digital signal will basically result in the same analog audio level after the demodulation Volume Gain MiMiute MH Auto
50. seeeeeeseeeecesseeeceesaeesessaaees 7 TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE 11 TSS LOCATIONS ea ects 11 VoIP Wiring and Using the TALAN VoIP Adapter Cable rrrrrnnnrrnnnrennnnennnnen 12 FESTING SAGE ee 14 Summary of Recommended Tests c cseccccseeecceeccsceeeecceeessceseectereseserenes 15 Automated Sequencing and Manual Operation ccccccseeeeseeeeeeeeeeeeeeaeeeens 17 save Sequence Data FONC IONS sii cocccecsdesexsedcocscesaconecdeacencedaceacenseccoueadeacencssacses 20 MANUAL TEST FUNCTIONS raerronnnonrnnnnrnnnnnnrnnnnnnennnnnnsennnnnnennnnnnennnnnnsnnnnnsennnnnn 23 save Recall for Manual Test Functions rrarrrnnnrrvrrnnrvvnnrrennnrrennnrrennnrrennnsnen 23 DMM Digital Multimeter rarrrnnrrnnnennnrrnnnnnnnennnrrnnnnnnnennnrnnnnnnnnennnrnnnnnnnnennnen 26 Te EE 28 PENN ee EE eee ee 33 FDR Frequency Domain Reflectometer ccccssccsseeceeeseeeceeeeeeeeseeseeeeens 35 et LEE EE 36 NLJD Line Non Linear Junction Detection rrrnnrrnnnrrnnnrrnnnrrnnnrrrnnrrnnnrernnrennn 40 VolP EEE 44 ENG DIAS secre a E E e EAA 48 AB GEN 49 HARMONIC LOCATOR PROBE LINE TRACING AND TAP DETECTION 51 ALP Locator Prope BIG oa EE NE 53 UP 54 ALP Modes Of Opera uuavavvvsvvvvvvnssanmn naive 54 TN 56 VELDE SEE VEV 57 HLP Battery GOmMPAMIMEMIN errereen rnn EEE EE N EE EEE E RT 57 HLP Headphone Jack Sene 58 TALAN SPECIFICATIONS eprsetnricsaciederecaedisecmaadiericemdnd
51. t is necessary to define a Job Name This creates a unique database under the Job Name so that all test data associated with this Job can be saved in the same database structure Press the F1 Job button and select New Job see below N p p j f DC Voltage VDC v jaov Ww WU N N N NN w w New Job 4 4 7 4 5 S 7 5 6 6 7 R I TEST DATABASE MANAGEMENT You can define the Job name using the stylus and the provided keypad Press the OK button to accept the Job name You can also select the storage medium either USB for the thumb drive or CF for the Compact Flash card Kename Jeiete 12 21 10 7 2 10 6 2 lest TAL Input Panel You can also use this screen to cut and paste a complete Job Database from one storage medium to another To enter specific notes about a Job select the Job Notes from the F1 Job menu A USB keyboard is recommended for entering text quickly is iS a test mote for demonstration It was created by connecting a LSS evboard to the TALAN This is the easiest method for creating notes to store pod Luck with your testing Tam Jones Input Panel l 8 TEST DATABASE MANAGEMENT You will also notice Targets and Locations under the Job menu This selection is used to define additional information about the particular target being tested Locations will be used to identify specific locations address building number building floor office number etc with
52. writes changed and empty data All sequence data Overwrites entire sequence N I 20 TESTING CONCEPTS AND RECOMMENDED TEST SEQUENCE 8 gt 3 Bis pa 3 Bi Mos Blue background indicates data HAS BEEN SAVED g ee l gt ae si S re i 1213 s p i gt hal rs i 3 2m 94m__ p rer 3 SEE ol hal Su alka gt 33 33 gt All of the remaining sequencing can be completed by selecting the testing stages and suggested tests in the order that they appear on the screen For example after the DMM test sequence Is completed it is recommended to continue the sequence with other available tests within this Stage It is recommended that each Stage be tested in order All test functions are described in detail in the following section entitled Manual Test Functions 1 1m 25 4 m 33 6 m 49 5 m 2 8340 n 20m 113519 n 67 7m 3 048 n 68 7 m 212682 n 19 7 m 2 5652 n 11 2 m 118584 n 17821 n 20 1 m 2 3 9057 n 67 6 m 12398 n 19 6 m 119050 n 11 6 m 17367 n 3 7 RF Antenna Level 16371 n ones 3 980 n 75 4 m 1 1546 n 11 7 m 3 4732 n 211223 n 5 4 m 2 1004 n 17 8 m 931 6 p 81 2 m 433 2 p 79 8 m 2 9654 n BT TE a On hook 7 JOB test tal C LOC bdg1 3rdfloor ofc101 TARGET deskphone SEQ bdgi 3rdfloor ofc101 des FEIN 4 6m 3 7m 20 8 m 39 6 m 52 9 m 2 6 m 1 5m On hook DMM Audio NN wm om ee RF Spectrum RF Level n wm gt Ww
53. y Samsung DCS828 2 E Reality 4 wire Rockwell Spectrum 7 Secondary e ENEZ O Mixed nt On SJ amp WY On HD wm amp WwW Siemens Realitis ISDT 2 wire Siemens ROLMLink Reset nn wn un wu A A oan On Tn ON H Audio Digital Decode Digital Audio Installed System Samsung DCS828 Install Codec non amp Ww On DH nH amp WwW Installing Phone System Decoder samsung DCS828 mm a ETT Channels Audio Il Digital Decode nn un un A A A Je EJ i an 29 I MANUAL TEST FUNGTIONS In the Digital Audio dashboard Channels indicates which side of conversation is being demodulated Select Mixed in order to hear both sides of the phone conversation Primary to hear only the handset or Secondary to select the audio coming from the switch To listen to normal analog audio Digital Decode should be unselected Digital Audio Installed System BRI Install Audio The Codec indicates the type of modulation that is used u law is used primarily in North America and Japan while a law is prominent in the rest of the world To adjust Volume and Gain Control the controls are on the default audio dashboard You can access the Audio dashboard by pressing the button or by selecting the Audio button on the Digital Audio dashboard n I 30 MANUAL TEST FUNGTIONS For audio analysis the Mute and Bandpass Filter should be off Initially start with the Volume and Gain settings ve

Telephone and Line Analyzer User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents