Looking for a RantCell Alternative with Layer 3 and MOS?
RantCell is a recognised cloud-based drive test platform. If your engineering workflow requires real-time Layer 3 protocol decoding (RRC, NAS, IMS/SIP) or objective VoLTE MOS scoring, HiCellTek is purpose-built for those use cases — running on any rooted Qualcomm Android device.
Disclosure: Information about third-party products on this page is based on publicly available documentation (vendor websites, official product pages, app store listings) verified as of April 2026. Feature availability may have changed — always confirm with the vendor before making a purchasing decision. RantCell is a trademark of its respective owner. HiCellTek is not affiliated with, endorsed by, or sponsored by RantCell.
HiCellTek is a professional Android application for 2G/3G/4G/5G network diagnostics. It accesses the Qualcomm DIAG interface to decode Layer 3 RRC and NAS messages in real time on the device, compute VoLTE MOS scores using ViSQOL (Google Research), and export QMDL-compatible measurement logs. It targets telecom field engineers, network operators, and spectrum regulators who require 3GPP-traceable measurement evidence beyond what standard Android telephony APIs provide. Pricing starts at EUR 249/month per device. Root access on a Qualcomm Snapdragon device is required.
When Layer 3 access is a requirement, not an option
Standard Android telephony APIs expose signal levels, technology, and cell identity. They do not expose Layer 3 protocol messages. The following engineering tasks require L3 data.
Handover root cause analysis
RRC Reconfiguration messages contain MeasurementReport trigger events, target PCI, cause code, and A3/A5 event thresholds. Without L3, handover failures appear as unexplained signal drops.
VoLTE / VoNR call drop investigation
IMS re-INVITE failures, SIP BYE cause codes, RTCP-XR loss events, and RTP jitter anomalies are only visible at the protocol layer. MOS scores without L3 context lack root cause traceability.
5G NSA EN-DC debugging
SCG (Secondary Cell Group) configuration failures, split bearer setup issues, and NR-ARFCN measurement events are encoded in NR RRC messages. Telephony APIs report the end state, not the cause.
NAS / core protocol audits
EMM Attach reject cause codes (3GPP TS 24.301), TAU failure reasons, PDU Session Establishment rejection, and AMF registration issues (TS 24.501) are only readable at the NAS layer.
Regulator-grade evidence
Spectrum regulators in the EU, Africa, and Middle East require 3GPP-traceable measurement logs with full protocol context. QMDL-format exports satisfy this requirement.
Private 5G site acceptance
SA registration flows, NSSAI slice selection, and UPF data path verification require NAS 5GS and NR RRC message capture from the UE side.
Capability Comparison
Based on publicly available documentation. Cells marked ⓘ indicate features not listed in current public sources — verify with the vendor for the latest information.
| Capability | HiCellTek | SaaS API-based tools |
|---|---|---|
| Layer 3 RRC / NAS decoding | ✓ Real-time on device (TS 36.331, TS 38.331, TS 24.301, TS 24.501) | Not listed in current public documentation ⓘ |
| VoLTE / VoNR MOS scoring | ✓ ViSQOL (Google Research, Apache 2.0) — 1.0–5.0 scale, no reference audio | Not listed as available in current public documentation ⓘ |
| QMDL export (Qualcomm-compatible) | ✓ Native QMDL output | Not listed in current public documentation ⓘ |
| Encrypted log export (HLOG) | ✓ HLOG v1, XChaCha20-Poly1305 | Not listed in current public documentation ⓘ |
| Chipset access method | Qualcomm DIAG interface (root required) | Standard Android telephony APIs (per public documentation) |
| Root required | Yes — required for DIAG access | No (per public documentation) |
| Supported chipsets | Qualcomm Snapdragon (DIAG-enabled) | Broad Android compatibility (per public documentation) |
| 5G NR SA standalone | ✓ Full SA registration, AMF cause codes, NR RRC | ✓ (per public documentation) |
| 5G NR NSA / EN-DC monitoring | ✓ EN-DC SCG config, split bearer, NR-ARFCN | ✓ (per public documentation) |
| GPS drive test and cartography | ✓ Real-time map, GeoJSON export, Desktop replay | ✓ Cloud dashboard (per public documentation) |
What HiCellTek delivers for field engineers
L3 Decoder — RRC, NAS, IMS
Full ASN.1 decoding of LTE RRC (TS 36.331), NR RRC (TS 38.331), EPS NAS (TS 24.301), 5GS NAS (TS 24.501), and IMS/SIP in real time. Message tree with field names, enum labels, and hex inspector.
VoLTE QoE — MOS, RTP, SIP
ViSQOL MOS scoring (1.0–5.0, ITU-T P.800 scale), RTP jitter (RFC 3550), packet loss ratio, RTCP-XR round-trip delay (RFC 3611), codec detection (AMR-WB TS 26.171, EVS TS 26.441), SIP call setup latency.
RF Monitor — Chipset-level KPIs
RSRP, RSRQ, SINR, CQI, MCS, MIMO rank, BLER, EARFCN/NR-ARFCN, PCI, serving and up to 32 neighbor cells. All from Qualcomm DIAG — not Android telephony API averages.
GPS Drive Test + Walk Test
Real-time cartography on Mapbox, OSM, or Google Maps. GPS-tagged KPI samples at 1Hz minimum. Indoor walk test with floor plan import and heatmap overlay. GeoJSON export.
QMDL + HLOG Export
QMDL output compatible with standard Qualcomm log processing tools. HLOG v1 with XChaCha20-Poly1305 encryption for tamper-evident field evidence. Excel and CSV for reporting workflows.
Lock Suite — Band and Cell Control
Force the device onto a specific LTE or NR band (B3, B7, n78…), lock to a given PCI or EARFCN/NR-ARFCN, and isolate individual sectors. Indispensable for per-antenna validation and interference testing.
Frequently Asked Questions
Does HiCellTek provide real-time Layer 3 RRC and NAS decoding?
Yes. HiCellTek decodes 3GPP RRC and NAS messages in real time, on the device, with no server round-trip. The L3 Decoder module supports LTE RRC (3GPP TS 36.331), 5G NR RRC (TS 38.331), EPS NAS (TS 24.301), and 5GS NAS (TS 24.501). Every OTA message is displayed as a structured, fully expanded ASN.1 tree with field names, values, and enum labels.
Can HiCellTek measure VoLTE and VoNR call quality with a MOS score?
Yes. The VoLTE QoE module computes an objective MOS (Mean Opinion Score) per ITU-T P.800 using ViSQOL (Google Research, Apache 2.0). ViSQOL produces a MOS on the 1.0 to 5.0 scale with no reference audio signal required, making it suitable for live field measurement on subscriber calls. Scores are timestamped, GPS-tagged, and correlated with RTP jitter, packet loss, and SIP signaling events. For VoNR, the same MOS engine applies to NR voice bearers (5QI 1, per 3GPP TS 23.501).
Does HiCellTek work on devices without root?
No. HiCellTek accesses the Qualcomm DIAG interface to capture Layer 3 messages and chipset-level RF measurements. The DIAG interface requires root access on Qualcomm Snapdragon devices (e.g. via Magisk). This is what enables raw OTA capture and QMDL-grade log fidelity — data not accessible through standard Android telephony APIs.
What formats does HiCellTek export measurement data in?
HiCellTek exports to QMDL (Qualcomm-compatible binary log format compatible with standard post-processing tools), encrypted HLOG v1 (XChaCha20-Poly1305 for data integrity), Excel, CSV, and GeoJSON for GIS integration. The Desktop Companion handles post-campaign replay, multi-KPI dashboards, and cartography.
Which use cases require Layer 3 data that standard telephony APIs cannot provide?
Layer 3 data is required for: (1) handover root cause analysis (RRC reconfiguration, cause codes, MeasurementReport triggers), (2) VoLTE/VoNR call drop investigation (IMS re-INVITE, BYE cause, RTCP-XR loss events), (3) 5G NSA setup debugging (EN-DC SCG configuration, RLC AM/UM failure), (4) NAS protocol audits (EMM/MM reject cause codes, attach failure, PDU session rejection), and (5) regulator-grade measurement evidence requiring 3GPP message traceability.
How do I migrate from a cloud-based drive test SaaS to HiCellTek?
Install HiCellTek on any compatible Qualcomm-based Android device. Your team can run both tools in parallel on the same route during an initial validation phase to cross-check KPI consistency on metrics available in both tools (RSRP, RSRQ, SINR, throughput). HiCellTek exports in GeoJSON and CSV for compatibility with existing post-processing and reporting workflows. The 14-day trial allows full evaluation with no commitment.
Test HiCellTek on your next campaign
14-day free trial. Full feature access. No credit card required. Compatible with Samsung Galaxy S/A, OnePlus, Pixel (Qualcomm Snapdragon, rooted).
Pro from EUR 249/month/device · Team from EUR 399/month (3 devices) · Enterprise on quote