5G SA / NSA Network Slicing Beam Measurement Any Qualcomm Android

5G Network Testing Tool Drive Test, Slicing & Beam Analysis on Android

HiCellTek is a professional 5G NR testing application for Android. Capture SSB beam measurements, monitor EN-DC dual connectivity, validate 5G network slicing (NSSAI), decode NR RRC and 5GS NAS messages in real time, and score VoNR call quality via ViSQOL — all on a rooted Qualcomm Snapdragon smartphone, no laptop required.

Start 14-day free trial Request a demo

HiCellTek is a professional 5G network testing tool that runs on any rooted Qualcomm Snapdragon Android smartphone (Android 9.0+). It accesses the Qualcomm DIAG interface to capture SSB beam-level measurements (SS-RSRP/RSRQ/SINR), decode NR RRC messages (3GPP TS 38.331), validate 5G network slicing via NSSAI analysis (TS 24.501 + TS 23.501), and score VoNR call quality (ITU-T P.800 MOS via ViSQOL). Supports 5G SA, 5G NSA (EN-DC per TS 37.340), FR1 and FR2. Pricing: EUR 249/month/device. Time to first measurement: under 30 minutes.

5G NR Testing Capabilities

Every KPI and protocol measurement a 5G RF engineer needs. Available on a single Android device, without a dedicated scanner or laptop.

📡

SSB Beam Monitor

Real-time SS-RSRP, SS-RSRQ, SS-SINR per beam index. Track beam selection, switching events, and beam failure recovery (BFR) during field measurements.

SS-RSRPSS-RSRQSS-SINRBeam IndexBFR

🔗

EN-DC Tracker

Monitor E-UTRA NR Dual Connectivity in real time: LTE anchor band, NR secondary cell group (SCG), SCG configuration, and split bearer status (3GPP TS 37.340).

EN-DCSCGNSASplit Bearer

📻

NR-ARFCN Scanner

Identify active 5G NR carriers with NR-ARFCN, band number, bandwidth, duplex mode (FDD/TDD), and subcarrier spacing. Auto-detect FR1 sub-6 GHz and FR2 mmWave.

NR-ARFCNFR1FR2SCSFDD/TDD

⚡

5G Throughput Mapping

GPS-correlated downlink and uplink PDCP throughput measurements with heatmap overlay on Mapbox, OSM, or Google Maps. BLER and MCS tracking per measurement point.

DL/ULPDCPHeatmapGPSBLER

🔄

SA / NSA Mode Detection

Automatic detection of 5G Standalone (SA) and Non-Standalone (NSA) modes. Decode NR RRC (TS 38.331), 5GC NAS registration (TS 24.501), and AMF cause codes in real time.

5G SA5G NSANR RRC5GC NASAMF

🗂️

Network Slice Validator

Capture Requested NSSAI (S-NSSAI: SST + SD) in NAS Registration Request. Verify the AMF grants the correct slice in Registration Accept. Validate per-slice QoS: 5QI, GFBR, MFBR (TS 23.501).

NSSAIS-NSSAISST5QIPrivate 5G

📶

mmWave Support

FR2 millimeter-wave band monitoring for n257, n258, n260, n261 deployments. Beam tracking and coverage analysis in dense urban and indoor mmWave scenarios.

FR2mmWaven257n258Indoor

🎙️

VoNR QoE Scoring

VoNR MOS per ITU-T P.800 using ViSQOL (Google Research). IMS/SIP decoding (TS 24.229), RTP jitter (RFC 3550), RTCP-XR (RFC 3611), and call drop cause codes from NAS.

VoNRMOSViSQOLIMS/SIPRTCP-XR

📤

QMDL + Encrypted Export

Export data in QMDL (Qualcomm-compatible binary log), HLOG v1 (XChaCha20-Poly1305 encrypted), Excel, CSV, and GeoJSON for GIS integration.

QMDLHLOGExcelGeoJSON

5G Network Slicing Validation

Network slicing (3GPP TS 23.501) enables operators to run multiple logical networks over the same 5G physical infrastructure. Each slice is identified by an S-NSSAI (Slice/Service Type + Slice Differentiator). Field verification requires capturing NAS signaling at the UE side.

HiCellTek decodes the full NSSAI negotiation in real time: the UE's Requested NSSAI in the Registration Request (TS 24.501 §8.2.6), the AMF's Allowed NSSAI in the Registration Accept (§8.2.7), and the per-slice QoS parameters in the PDU Session Establishment Accept.

Protocol Field	HiCellTek Decodes
NAS message	Registration Request (TS 24.501 §8.2.6)
IE decoded	Requested NSSAI (S-NSSAI list)
S-NSSAI fields	SST (1 byte) + optional SD (3 bytes)
eMBB	SST = 0x01
URLLC	SST = 0x02
MIoT	SST = 0x03
V2X	SST = 0x04
Accept verification	Registration Accept — Allowed NSSAI (TS 24.501 §8.2.7)
QoS validation	PDU Session Establishment Accept — 5QI, GFBR, MFBR, AMBR (TS 23.501 §5.7)

✅

Slice registration verification

Confirm the UE registers on the correct S-NSSAI and the AMF grants the Allowed NSSAI as configured.

📊

Per-slice QoS measurement

Validate 5QI, GFBR, MFBR, and Session-AMBR in PDU Session Establishment Accept per TS 23.501 §5.7.

🏢

Private 5G deployment audit

Field-verify enterprise SA deployments: UE-to-AMF registration, UPF connectivity, and slice selection across the coverage area.

5G Field Testing Scenarios

From initial site validation to private 5G deployment audit, HiCellTek supports every stage of the 5G NR deployment lifecycle.

SSV

Site Acceptance and Validation

Verify 5G NR coverage, beam performance, and throughput during SSV/CV site walks. Export evidence packs in Excel or QMDL for sign-off against vendor SLAs.

OPT

Network Optimization

Correlate beam-level RSRP/SINR with PDCP throughput to identify optimization opportunities. Track handover success rates, EN-DC SCG add/remove events, and inter-RAT fallbacks.

RCA

Root Cause Analysis

Decode NR RRC (TS 38.331) and 5GC NAS (TS 24.501) messages to pinpoint registration failures, beam failure recovery events, and SA/NSA mode switching issues at Layer 3 level.

P5G

Private 5G Deployment Audit

Validate network slicing (NSSAI/S-NSSAI), SA registration on a private AMF, UPF connectivity, per-slice QoS enforcement (5QI, GFBR), and IMS/VoNR service activation.

Professional-grade 5G testing. Any Qualcomm Android.

Traditional dedicated drive test equipment requires hardware procurement cycles, Windows laptop dependency, and per-unit licensing. HiCellTek delivers the same Layer 3 protocol depth on a device your team already carries.

No dedicated hardware

Run professional 5G NR field tests directly on a rooted Qualcomm smartphone. No scanner, no laptop, no cables.

Real-time L3 decoding

Full ASN.1 decoding of NR RRC (TS 38.331), NAS 5GS (TS 24.501), and IMS/SIP (TS 24.229) on the device. Same data depth as a dedicated laptop-based analyzer.

All-in-one platform

RF monitoring, protocol analysis, throughput testing, VoNR quality scoring, network slicing validation, and drive test mapping in a single application.

Cloud floating license

Not bound to a device IMEI. Activate on any compatible Qualcomm Android device. EU-hosted license server. EUR 249/month/device.

QMDL export

Native QMDL output for post-processing in Qualcomm-compatible tools. Also exports Excel, CSV, GeoJSON, and encrypted HLOG.

30-minute setup

From account creation to first 5G NR measurement in under 30 minutes. No calibration, no driver installation, no scanner assembly.

Start testing 5G NR in the field today

14-day free trial with full feature access — SSB beams, EN-DC, slicing validation, NR RRC/NAS decoding. No credit card. No hardware procurement.

Start free trial Book a 30-min demo

Pro EUR 249/month/device · Team EUR 399/month (3 devices min) · Enterprise on quote

Frequently Asked Questions — 5G Network Testing

What is a 5G network testing tool and why do RF engineers need one?

A 5G network testing tool is software that captures and analyzes radio parameters specific to 5G NR networks: SSB beam RSRP/RSRQ/SINR, NR-ARFCN, PCI, throughput, and Layer 3 signaling (RRC per TS 38.331, NAS per TS 24.501). RF engineers use it during drive tests, walk tests, and site acceptance to validate coverage, detect interference, optimize handovers, and troubleshoot connectivity issues in both NSA and SA deployments.

What is the difference between 5G NSA and SA, and how does HiCellTek handle both?

In NSA (Non-Standalone) mode, the device maintains a 4G LTE anchor for the control plane while adding a 5G NR carrier for data throughput via EN-DC (E-UTRA NR Dual Connectivity, 3GPP TS 37.340). In SA (Standalone) mode, the device connects directly to a 5G Core (5GC) with no LTE dependency, using 5GS NAS registration (TS 24.501) and PDU Session Establishment. HiCellTek automatically detects the active mode, decodes both NR RRC and LTE RRC signaling, and displays EN-DC band combinations, SCG configuration, and NR-only parameters in SA mode.

How does HiCellTek measure 5G beam-level performance?

HiCellTek captures SSB (Synchronization Signal Block) beam-level measurements in real time via the Qualcomm DIAG interface, including SS-RSRP, SS-RSRQ, and SS-SINR per beam index. This allows engineers to evaluate beam selection, beam switching events, and beam failure recovery (BFR) procedures. The tool tracks the serving beam index and up to 32 neighboring beams, enabling correlation of signal quality with physical beam direction and antenna tilt.

Can HiCellTek test 5G network slicing and private 5G deployments?

Yes. HiCellTek captures NAS 5GS Registration Request messages containing the Requested NSSAI (Network Slice Selection Assistance Information), which includes S-NSSAI values (SST + optional SD). This allows field engineers to verify that a UE correctly selects and registers on the intended network slice (eMBB SST=1, URLLC SST=2, MIoT SST=3) and that the AMF accepts the slice in the Registration Accept. PDU Session Establishment is also decoded, enabling per-slice QoS validation (5QI, GFBR, MFBR, Session-AMBR per TS 23.501).

What makes HiCellTek different from traditional 5G drive test tools?

HiCellTek runs entirely on a rooted Android smartphone with a Qualcomm chipset, eliminating the need for dedicated hardware and a laptop. It provides real-time Layer 3 decoding (NR RRC per TS 38.331, NAS 5GS per TS 24.501, IMS/SIP per TS 24.229), chipset-level RF measurements via Qualcomm DIAG (HDLC framing, log codes 0xB821 for NR5G RRC), VoLTE/VoNR quality scoring via ViSQOL (ITU-T P.800 MOS), and GPS-correlated drive test mapping. Data exports in Excel, CSV, QMDL, and encrypted HLOG (XChaCha20-Poly1305).

Which devices are compatible with HiCellTek for 5G NR testing?

HiCellTek requires a rooted Android smartphone (Android 9.0 or above) with a Qualcomm Snapdragon chipset that supports the DIAG interface. Validated models include Samsung Galaxy S and A series (Qualcomm variants), OnePlus, Google Pixel, and Xiaomi Qualcomm models. The device must support the 5G NR bands deployed in the target area. A full compatibility check is available via the free 14-day trial activation.

What 5G KPIs can HiCellTek collect during a drive test?

HiCellTek collects: SS-RSRP / SS-RSRQ / SS-SINR (per beam, per subframe), NR-ARFCN, PCI, band number, SCS (15/30/60/120 kHz), duplex mode (FDD/TDD), PDCP DL/UL throughput, BLER, MCS, RRC state transitions, EN-DC SCG add/remove events, NAS Registration Accept/Reject cause codes, and AMF cause codes. All measurements are GPS-timestamped and correlated with L3 protocol messages.

Does HiCellTek support VoNR (Voice over New Radio) quality testing?

Yes. HiCellTek supports VoNR QoE measurement on 5G SA deployments. The IMS/SIP signaling stack (TS 24.229) is decoded in real time, including SIP INVITE/BYE/CANCEL flows. ViSQOL computes a MOS score per ITU-T P.800 without a reference audio file. RTP jitter, packet loss (RFC 3550), and RTCP-XR (RFC 3611) extended reports are captured per call. Failures are correlated with NAS cause codes and RF parameters to enable root cause analysis.

📡

Go deeper with real-time L3 analysis

HiCellTek decodes RRC, NAS and IMS/SIP directly on your smartphone. Identify root causes in seconds.

✓ Full ASN.1 decoding
✓ Real-time filters and search
✓ Wireshark PCAP export

Request a demo View pricing