PROTOCOL (T8803 Pro T8806)

V5.6

Protocol No
Packet Description Response No (Server)
(Device)
0x230x230x01 Login Data (From Tracker) 0x230x230x01

0x230x230x02 GPS Data to Server (From Tracker) Null

0x230x230x03 Heartbeat (From Tracker) 0x230x230x03

0x230x230x04 Alarm Data (From Tracker) 0x230x230x04

Protocol Setting No
Packet Description Response No (Device)
(Server)

0x230x230x81 Setting/Broadcast/Forward (From Server) 0x230x230x81

Back to Introduction
Login Data (From Tracker) (0x01)
Protocol Packet Serial
Start Bit IMEI Number Version Information
Number Length Number
HEX HEX HEX HEX HEX DEC
(2 bytes) (1 byte) (2 bytes) (2 bytes) (8 bytes) (6 bytes)
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18
0x23 0x23 0x01 0x00 0x15 0x04 0x05 0x08 0x80 0x06 0x16 0x89 0x88 0x88 0x88 0x14 0x01 0x87

Basis software version: 0x140x0

IMEI =88061689888888; Firmware software version: 0x010
Platform: 6250
Login serial number; Hardware version:5.0
1.The frist serial number is 1;
2. Auto add 1 ;
3. From 0 to 65535;

4. If device doesn't receive the

response from server within 25
seconds, it will relink the server
again;

5. If the server doesn’t reply to

the
device, it will lead to a
continuous reconnected by the
device and comsume a lot of
GPRS data from device.

Packet length = 7+8+6 =0x00 0x15

Response Login Data (From Server) (0x01)

Protocol Packet Serial

Start Bit IMEI Number
Number Length Number

HEX HEX HEX HEX HEX

(2 bytes) (1 byte) (2 bytes) (2 bytes) (8 bytes)
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
0x23 0x23 0x01 0x00 0x0F 0x00 0x01 0x08 0x80 0x61 0x68 0x98 0x88 0x88 0x88

IMEI =880616898888888;

Login
1.The serial
serial number;
number always
0001

Packet length = 7 + 8 = 0x00 0x0F;

 Version Information

DEC
(6 bytes)
19 20 21
0x62 0x50 0x50

software version: 0x140x0 V1.40

are software version: 0x010x87V1
m: 6250
are version:5.0
Back to Introduction
GPS Data to Server (From Tracker) (0x02)
ACC ON
Protocol Packet Serial
Start Bit IMEI Number Interval
Number Length Number
(Second)

HEX HEX HEX HEX HEX HEX

(2 bytes) (1 byte) (2 bytes) (2 bytes) (8 bytes) (2 bytes)

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
0x23 0x23 0x02 0x00 0x42 0x00 0x01 0x08 0x80 0x61 0x68 0x98 0x88 0x88 0x88 0x00
1.ACC ON/OFF upload interv
IMEI =880616898888888; range 0 ~ 65535;
2. if = 0, close upload;
GPS data serial number;

1.The frist serial number is 1;

2: Auto add 1 ;

3.: From 0 to 65535;

Packet length =7+ 8 + 2+ 5+... = 0x000x42

 ACC ON ACC OFF Gsensor
Angle Distance Speed Alarm GPS Data Heartbeat
Interval Interval Manager Reserve
(Degree) (Meter) (KM/H or <Mile/H) Status (Minute)
(Second) (Second) Status

HEX HEX HEX HEX HEX HEX HEX HEX HEX HEX
(2 bytes) (2 bytes) (1 Byte) (2 bytes) (1 Byte) (1 Byte) (1 Byte) (1 Byte) (1 Byte) (1 Byte)

17 18 19 20 21 22 23 24 25 26 27 28
0x0A 0x00 0xFF 0x20 0x01 0x00 0x00 0x20 0x00 0x96 0x00 0x98
1.ACC ON/OFF upload interval 1.Bit7~Bit0
1.Angle 1.Bit7=0,re
range 0 ~ 65535; 1.Bit 7 = 0,Unit is ,range
compem 1.Dinstance altime GPS 1.Bit7~Bit4
KM/H,Bit 7 = 1,unit is from
2. if = 0, close upload; sation compensati data,Bit7=1 , total 16
Mile/H; 1~255；
range is on range is ,history different
0~180; 0~65535; GPS data; sensitivity;
2.Speed range is
0~32767 (from bit 7~
2.Can't set
bit 0); 2. If Bit7- Bit7~bit0
2. If = 0, 2. Bit4 is 0, to 0;
1.If = 0, close 3.If = 0 (from bit 7~ bit
bit6=0,LBS close
close 0), close speed alarm
dinstance data, Gsensor
angle function;
compensati bit6=1,GP function,
compens on function; S data; the
ation Gsensor
function; 3.Bit5=0,G sensitivity
PS is in is improved
work if the
mode,bit5= number is
1,GPS is in bigger;
sleep
mode;
3.Bit4~Bit0
, show 4
4.Bit4~Bit0 managers
,the GPS status;
satellite
number;
4. If Bit3=,
manger 4
is set, if
bit3=0,
manager 4
is null;
 Relay Drag
Digital I/O Alarm
Status Alarm setting 2 Analog input
Status Data
(KM/H) (Meter)

HEX HEX HEX DEC(analog1 input) DEC(analog2 input) HEX

(1 Byte) (2 Bytes) (2 Bytes) (2 Bytes) (2 Bytes) (1 Byte)

29 30 31 32 33 34 35 36 37 38
0x99 0x10 0x10 0x10 0x10 0x05 0x55 0x10 0x10 0x05
1.Bit15,external power
1.Bit15~Bit0,the range supply,if
is 0~65535; Bit15=0,external power
1.The input range from 1.The input range from
2.If Bit15~Bit0=0, close connect, if 1.=1,extern
1.Bit7=0,rel the Drag alarm 0~12V 0~12V
Bit15=1,external power al power
ay is in function; disconnect; 2.0555 means 5.55V 2.0555 means 5.55V disconnect;
normal
status, 2.Bit14,ACC input, =1
Bit7=1, get ACC ON, =0 ACC
the cut fuel 3.When from ACC ON OFF;
command, to ACC OFF, the alarm
but need will be auto set; 2.=2, low
wait the 3.Bit13, AC input.=1 power
speed AC on,=0 AC off; alarm(inner
meet the power
safe cut 4.Bit12~Bit11, digital voltage
fuel speed; input reseve; 3.5V);

5.Bit10,relay output,=1
2.Bit6=0,R
relay enable,=0 relay 3.=3, SOS
elay
disable; alarm;
doesn't
work,Bit6=
1,realy
works and 7.Bit6,speaker status, if
cut fuel; Bit6=0, speaker works, 4.=4,
Bit6=1, speaker doesn't overspeed
work; alarm;
3.Bit5=0,cu
t off engine 8.Bit5~Bit0, reserve;
consider
speed(less 5.=5,
than reserve;
20km/h),
Bit5=1, cut
off engine
don't
consider 6.=6,
speed; reserve;

4.Bit4~bit0,
reserve;
7.=7,drag
alarm
when set;

8.=8,resev
e;

9.=9,devic
e apply
address;

10.=10,anti
-theft
alarm;
10.=10,anti
-theft
alarm;

11.=11,ana
nlog 1 fill
the tank;

12.=12,
analog 1
fuel
leakage;

13.=13,ana
nlog 2 fill
the tank;

14.=14,
analog 2
fuel
leakage;
 Inner
Mileage Battery
Reserve YY MM DD HH
(Meter) Voltage(pe
rcent)
HEX HEX DEC HEX HEX HEX HEX
(1 Byte) (4 Bytes) (1 Bytes) (1 Byte) (1 Byte) (1 Byte) (1 Byte)

39 40 41 42 43 44 45 46 47 48
0x05 0x10 0x10 0x05 0x05 0x00 0x05 0x05 0x10 0x10
1.Total mileage range from 0~4294967295;
1.Percent
of inner
backup
battery;

2.00
means
100%;
3.90
means
90%;

4.10% is
one step;
 Height
MM SS Longitude
(Meter)

HEX HEX
HEX HEX
( Need Translate to Floating-point Number ( Need Translate to Floating-point Number
(1 Byte) (1 Byte)
4 Bytes) 4 Bytes)
49 50 51 52 53 54 55 56 57 58
0x05 0x05 0x58 0x86 0x6B 0x42 0x76 0xD6 0xE3 0x42

1. 0x58 0x86 0x6B 0x42 convert to flating-point 1. 0x76 0xD6 0xE3 0x42 convert to flating-point
number is 58.8812 meters; number is 113.9189;

MCC MNC LAC CI

HEX(2 Bytes) HEX(2 Bytes) HEX(2 Bytes) HEX(2 Bytes)
51 52 53 54 55 56 57 58
0x10 0x10 0x05 0x05 0x10 0x10 0x05 0x05
Mobile Country Code Mobile Network Code Location Area Code Cell Tower ID
 Speed Direction
Latitude
(KM/H) (Degree)

HEX
DEC HEX
( Need Translate to Floating-point Number
(2 Bytes) (2 Bytes)
4 Bytes)
59 60 61 62 63 64 65 66
0x91 0x2A 0xB4 0x41 0x11 0x15 0x05 0x05
1.Range is 0~360
degree;
1. 0x91 0x2A 0xB4 0x41 convert to flating-point 1.0x11 0x15 means
number is 22.52078; 111.5km/h;

2. The range from

000.0 ~999.9km/h

LAC CI LAC CI
HEX(2 Bytes) HEX(2 Bytes) HEX(2 Bytes) HEX(2 Bytes)
59 60 61 62 63 64 65 66
0x10 0x10 0x05 0x05 0x10 0x10 0x05 0x05
Location Area Code Cell Tower ID Location Area Code Cell Tower ID
Back to Introduction
Heartbeat (From Tracker) (0x03)
Protocol Packet Serial
Start Bit IMEI Number
Number Length Number
HEX HEX HEX HEX HEX
(2 bytes) (1 byte) (2 bytes) (2 bytes) (8 bytes)
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
0x23 0x23 0x03 0x00 0x0F 0x00 0x01 0x08 0x80 0x61 0x68 0x98 0x88 0x88 0x88

IMEI = 880616898888888;

Heartbeat serial number;

1.The frist serial number is 1;
2.Auto add 1 ;
3. If
4. From 0 to 65535;
the server doesn’t reply to
the
device, it will relink with server,
it will consume more GPRS
data;

Packet length = 7+8 = 0x000x0F;

Response Heatbeat (From Server) (0x03)

Protocol Packet Serial
Start Bit IMEI Number
Number Length Number
HEX HEX HEX HEX HEX
(2 bytes) (1 byte) (2 bytes) (2 bytes) (8 bytes)
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
0x23 0x23 0x03 0x00 0x0F 0x00 0x01 0x08 0x80 0x06 0x16 0x89 0x88 0x88 0x88

IMEI =88061689888888;

Login
1.The serial
serial number;
number always
0001

Packet length = 7+8= 0x000x0F;

Back to Introduction
Alarm data (From Tracker) (0x04
ACC ON
Protocol Packet Serial
Start Bit IMEI Number Interval
Number Length Number
(Second)

HEX HEX HEX HEX HEX HEX

(2 bytes) (1 byte) (2 bytes) (2 bytes) (8 bytes) (2 bytes)

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
0x23 0x23 0x04 0x00 0x42 0x00 0x01 0x08 0x80 0x61 0x68 0x98 0x88 0x88 0x88 0x00
1.Angle compemsation range
IMEI =880616898888888 0~180;

2. if = 0, close upload;

Alarm data serial number;

1.The frist serial number is 1;

2: Auto add 1 ;

3.: From 1 to 65535;

Packet length =7+ 8 + 2+ 5+ ... = 0x000x42

Response data (From Server) (0x04)

Protocol Packet Serial Alarm
Start Bit IMEI Number
Number Length Number Data
HEX HEX HEX HEX HEX HEX
(2 bytes) (1 byte) (2 bytes) (2 bytes) (8 bytes) (1 Byte)
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
0x23 0x23 0x04 0x00 0x10 0x00 0x01 0x08 0x80 0x61 0x68 0x98 0x88 0x88 0x88 0x0*

IMEI =880616898888888;
1.=1,extern
al power
disconnect;
Login serial number;
1.The serial number always
0001
2.=2, low
power
alarm(inner
power
voltage
Packet length = 7+8+1 = 0x000x10 3.5V);
3.=3, SOS
alarm;

4.=4,
overspeed
alarm;

5.=5,
reserve;

6.=6,
reserve;

7.=7,drag
alarm
when set;

8.=8,resev
e;

9.=9,devic
e apply
address;

10.=10,anti
-theft
alarm;

11.=11,ana
nlog 1 fill
the tank;

12.=12,
analog 1
fuel
leakage;

13.=13,ana
nlog 2 fill
the tank;

14.=14,
analog 2
fuel
leakage;
 ACC ON ACC OFF Gsensor
Angle Distance Speed Alarm GPS Data Heartbeat
Interval Interval Manager Reserve
(Degree) (Meter) (KM/H or <Mile/H) Status (Minute)
(Second) (Second) Status

HEX HEX HEX HEX HEX HEX HEX HEX HEX HEX
(2 bytes) (2 bytes) (1 Byte) (2 bytes) (1 Byte) (1 Byte) (1 Byte) (1 Byte) (1 Byte) (1 Byte)

17 18 19 20 21 22 23 24 25 26 27 28
0x0A 0x00 0xFF 0x20 0x01 0x00 0x00 0x20 0x00 0x96 0x00 0x98
1.Angle compemsation range is
1.Bit7~Bit0
0~180; 1.Angle 1.Bit7=0,re
1.Bit 7 = 0,Unit is ,range
compem 1.Dinstance altime GPS 1.Bit7~Bit4
KM/H,Bit 7 = 1,unit is from
2. if = 0, close upload; sation compensati data,Bit7=1 , total 16
Mile/H; 1~255;
range is on range is ,history different
0~180; 0~65535; 2.Speed range is GPS data; sensitivity;
0~32767 (from bit 7~
2.Can't set
bit 0);
2. If Bit7- Bit7~bit0
1.If = 0, 2. If = 0, 2. Bit4 is 0, to 0;
3.If = 0 (from bit 7~ bit
close close bit6=0,LBS close
0), close speed alarm
angle dinstance data, Gsensor
function;
compens compensati bit6=1,GP function,
ation on function; S data; the
function; 3.Bit5=0,G Gsensor
PS is in sensitivity
work is improved
mode,bit5= if the
1,GPS is in number is
sleep bigger;
mode;
3.Bit4~Bit0
, show 4
4.Bit4~Bit0
managers
,the GPS
status;
satellite
number;
4. If Bit3=,
manger 4
is set, if
bit3=0,
manager 4
is null;

Note 1: If the server doesn’t reply to tracker in 25 seconds for alarm, tracker will
send alarm to server every 60 seconds until server response;
Note 2: The max alarm data we only keep newest 10 records, if server always
doesn't response tracker;
 Relay Drag
Digital I/O Alarm
Status Alarm setting 2 Analog input
Status Data
(KM/H) (Meter)

HEX HEX HEX DEC(analog1 input) DEC(analog2 input) HEX

(1 Byte) (2 Bytes) (2 Bytes) (2 Bytes) (2 Bytes) (1 Byte)

29 30 31 32 33 34 35 36 37 38
0x99 0x10 0x10 0x10 0x10 0x05 0x05 0x04 0x03 0x00

1.Bit15~Bit0,the range 1.Bit15,external power

is 0~65535; supply,if
Bit15=0,external power
1.The input range from 1.The input range from
2.If Bit15~Bit0=0, close connect, if 1.=1,extern
1.Bit7=0,rel the Drag alarm 0~12V 0~12V
Bit15=1,external power al power
ay is in function; disconnect; 2.0555 means 5.55V 2.0555 means 5.55V disconnect;
normal
status, 2.Bit14,ACC input, =1
Bit7=1, get ACC ON, =0 ACC
the cut fuel
3.When from ACC ON OFF;
command,
to ACC OFF, the alarm
but need 2.=2, low
will be auto set;
wait the 3.Bit13, AC input.=1 power
speed AC on,=0 AC off; alarm(inner
meet the power
safe cut 4.Bit12~Bit11, digital voltage
fuel speed; input reseve; 3.5V);

5.Bit10,relay output,=1
2.Bit6=0,R
relay enable,=0 relay 3.=3, SOS
elay
disable; alarm;
doesn't
work,Bit6=
1,realy
7.Bit6,speaker status, if
works and
Bit6=0, speaker works, 4.=4,
cut fuel;
Bit6=1, speaker doesn't overspeed
work; alarm;

8.Bit5~Bit0, reserve;
3.Bit5=0,cu
t off engine 5.=5,
consider reserve;
speed(less
than
20km/h),
Bit5=1, cut
off engine
don't
consider 6.=6,
speed; reserve;

4.Bit4~bit0,
reserve;
7.=7,drag
alarm
when set;

8.=8,resev
e;

9.=9,devic
e apply
address;
10.=10,anti
-theft
alarm;

11.=11,ana
nlog 1 fill
the tank;

12.=12,
analog 1
fuel
leakage;

13.=13,ana
nlog 2 fill
the tank;

14.=14,
analog 2
fuel
leakage;
 Inner
Mileage
Reserve Battery YY MM DD HH
(Meter)
Voltage(V)

HEX HEX DEC HEX HEX HEX HEX

(1 Byte) (4 Bytes) (1 Bytes) (1 Byte) (1 Byte) (1 Byte) (1 Byte)

39 40 41 42 43 44 45 46 47 48
0X00 0x00 0x00 0x00 0x00 0x03 0x00 0x00 0x00 0x00
1.Total mileage range from 0~4294967295;

1.Percent
of inner
backup
battery;

2.00
means
100%;

3.90
means
90%;

4.10% is
one step;
 Height
MM SS Longitude
(Meter)

HEX HEX
HEX HEX
( Need Translate to Floating-point Number ( Need Translate to Floating-point Number
(1 Byte) (1 Byte)
4 Bytes) 4 Bytes)
49 50 51 52 53 54 55 56 57 58
0x00 0x00 0x58 0x86 0x6B 0x42 0x76 0xD6 0xE3 0x42

1. 0x58 0x86 0x6B 0x42 convert to flating-point 1. 0x76 0xD6 0xE3 0x42 convert to flating-point
number is 58.8812 meters; number is 113.9189;

MCC MNC LAC CI

HEX(2 Bytes) HEX(2 Bytes) HEX(2 Bytes) HEX(2 Bytes)
51 52 53 54 55 56 57 58
0x10 0x10 0x05 0x05 0x10 0x10 0x05 0x05
Mobile Country Code Mobile Network Code Location Area Code Cell Tower ID
 Speed Direction
Latitude
(KM/H) (Degree)

HEX
DEC HEX
( Need Translate to Floating-point Number
(2 Bytes) (2 Bytes)
4 Bytes)
59 60 61 62 63 64 65 66
0x91 0x2A 0xB4 0x41 0x11 0x15 0x05 0x05
1.Range is 0~360
degree;
1. 0x91 0x2A 0xB4 0x41 convert to flating-point 1.0x11 0x15 means
number is 22.52078; 111.5km/h;

2. The range from

000.0 ~999.9km/h

LAC CI LAC CI
HEX(2 Bytes) HEX(2 Bytes) HEX(2 Bytes) HEX(2 Bytes)
59 60 61 62 63 64 65 66
0x10 0x10 0x05 0x05 0x10 0x10 0x05 0x05
Location Area Code Cell Tower ID Location Area Code Cell Tower ID
Back to Introduction
Setting/Broadcast/Forward (From Server) (0x81)
Protocol Packet Serial Protocol
Start Bit IMEI Number Data
Number Length Number Number
HEX HEX HEX HEX HEX HEX ASCII / Unico
(2 bytes) (1 byte) (2 bytes) (2 bytes) (8 bytes) (1 byte) (* bytes)
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
0x23 0x23 0x81 0x00 0x** 0x00 0x01 0x08 0x80 0x61 0x68 0x98 0x88 0x88 0x88 0x0* 0x12

1.0x01,settin
IMEI =880616898888888; 1. Setting data ( ASCI
g mode;
Setting/Broadcast serial
number;
2.0x02,broad 1. Setting data ( Unico
1.The serial number always cast mode; );
0001;

3.0x03,forwa 1. Setting data ( Unico

rd mode; );
Packet length = 7+8+1+N+1= 0x**
0x**; 4.0x05,check
credit of SIM 1. Forward check (AS
card;

Response Setting/Broadcast/Forward (From Tracker) (0x81)

Protocol Packet Serial Protocol
Start Bit IMEI Number Data
Number Length Number Number
HEX HEX HEX HEX HEX HEX ASCII / Unico
(2 bytes) (1 byte) (2 bytes) (2 bytes) (8 bytes) (1 byte) (* bytes)
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
0x23 0x23 0x81 0x** 0x** 0x00 0x01 0x08 0x80 0x61 0x68 0x98 0x88 0x88 0x88 0x0* 0x12

1.0x01,settin 1.Feedback data to

IMEI =880616898888888; g mode; server (Unicode);
Setting/Broadcast serial
number;
2.0x02,broad
1.Null;
1.The serial number always cast mode;
0001;

3.0x03,forwa
1.Null;
rd mode;
Packet length = 7+8+1+N+1= 0x**
0x**; 4.0x05,check
1.Balance or Forward
credit of SIM
(Unicode);
card;
 Data

ASCII / Unicode
(* bytes)
18 … N N+1
0x34 0x56 0x78 0x90

1. Setting data ( ASCII format );

1. Setting data ( Unicode format

);

1. Setting data ( Unicode format

);

1. Forward check (ASCII);

Data

ASCII / Unicode
(* bytes)
18 … N N+1
0x34 0x56 0x78 0x90

1.Feedback data to
server (Unicode);

1.Null;

1.Null;

1.Balance or Forward reply

(Unicode);