csfemto@csfemto-P560:~$ ssh admin@192.168.11.

4
ssh: connect to host 192.168.11.4 port 22: Connection refused
csfemto@csfemto-P560:~$ ssh -p 32323 admin@192.168.11.4
admin@192.168.11.4's password:
98@271_FA2:/etc#
98@271_FA2:/etc#
98@271_FA2:/etc# killall -9 hnb
98@271_FA2:/etc#
98@271_FA2:/etc# killall -9 hnb
98@271_FA2:/etc# cd /usr/dev/bin
98@271_FA2:bin# md5sum hnb
d3e480ce2a2b68e3a9280d8ea9db651f hnb
98@271_FA2:bin# chmod 777 hnb
98@271_FA2:bin# killall -9 dimclient
98@271_FA2:bin# tail -f /var/volatile/tmp/callTrace
[CL ] 2:relSfn -1 clSfn 1103 prsntSFN 1102 prevSFN 1002
[CL ] 2:relSfn -1 clSfn 1810 prsntSFN 1809 prevSFN 1709
[CL ] 2:relSfn -1 clSfn 2517 prsntSFN 2516 prevSFN 2416
[CL ] 2:relSfn -1 clSfn 3224 prsntSFN 3223 prevSFN 3123
[CL ] 2:relSfn -1 clSfn 3426 prsntSFN 3425 prevSFN 3325
[CL ] 2:relSfn -1 clSfn 37 prsntSFN 36 prevSFN 4032
[CL ] 2:relSfn -1 clSfn 542 prsntSFN 541 prevSFN 441
[CL ] 2:relSfn -1 clSfn 744 prsntSFN 743 prevSFN 643
[HNB ] RECEIVED RRC CONNECTION REQ
[HNB ] Connection Establishment Cause = 2
[HNB ] Setting Doamin to PS
[HNB ] RRC Connection received for the domain 1 ReleaseIndicator 2
[HNB ] CAC:AccessMOdeVal 1 maxue 8 CAPACITY FLAG 0 ResrvVal 0 PrefCsEnable 0 Pr
efPsEnable 0 PrefCsAndPsEnable 0 DataPrefUseRejProc 0 NonDataPrefUseRejectProc 0
[HNB ] CAC : UE sent PTMSI as init ID and Init UE Identity val 2
[HNB ] CAC : UE sent PTMSI and its length 4
[HNB ] PTMSI digit is c0 a2 15 b0
[HNB ] CAC : Store the LAI and RAC 0
[HNB ] Extracting RAC length 0
[HNB ] Extracting RAC length2 1
[HNB ] Out of Extracting RAC
[HNB ] PTMSI is not found in the PTMSI list:
[HNB ] Not an emergency Call, so check in Redirect list
[HNB ] UE Identity Enry not found in redirection PTMSI list
[HNB ] HNB is configured in OSG mode
[HNB ] Len of PTMSI = 4
[HNB ] CAC : UE Idx has NOT been found in HNB context!!. Start CAC with Invalid
UeIdx
[HNB ] ****STARTING CAC CHECK****
[HNB ] CAC:NOT RESERVED and NOT FULL,number of UE registered is: 0
[HNB ] Its not an emergency call. Start with Call preference checking!!
[HNB ] Call pref check params are:data_UseRejectProcedure = 0, nonData_UseRejec
tProcedure = 0, HoBlindForCsEnb = 0, HoBlindForPsEnb = 0
[HNB ] None of HO param or RejectCall param are TRue. So pasisng the call prefe
rence Check
[HNB ] data_UseRejectProcedure = 0, nonData_UseRejectProcedure = 0, HoBlindForC
sEnb = 0, HoBlindForPsEnb = 0
[HNB ] Call Pref Check passed. Move to CPU threshold checking
[HNB ] CPU threshold check returns Success. Move to Backhaul BW checking
[HNB ] Backhaul BW check returns Success. Move to Access & Capacity check
[HNB ] Access mode is OSG.
[HNB ] CAC : Start Capacity check for Non-emergency Request
[HNB ] Capacity Not full.
[HNB ] CAC : Capacity Check Passed!!
[HNB ] ****CAC CHECKED PASSED****
[HNB ] Extracting RAC length 0
[HNB ] Extracting RAC length2 1
[HNB ] Out of Extracting RAC
[HNB ] rrcConnReq_v690ext.ueCapbInd.val=1
[HNB ] It's not an LTE UE
[SSE ] opSSEngine: UeId(1), domain(1) MsgType =1101 Active proc =0
[SSE ] Validation success
[SSE ] Message is forwarded to UE(2) State machine With Evt 0.
[SSE ] Calling UE State Engine for ueIdx =1
[SSE ] Procedure Proceed: evt(0)
[SSE ] No queuing: ueIdx(1), evt(0)
[RRCSM ] S1E1101
[RRCSM ] For UE(1) Next State Set to --> [ S2 OP_SSE_UE_L1_CFG ].
[HNB ] rlId is 0 ueIdx is 1 in saGetFreeRlId
[HNB ] rlConCntr = 1
[HNB ] Rl_Id allocated for ueIdx 1 is 0
[HNB ] OVSF: code available from Cell setup branch and the requested SF: 6 and
allocated code is: 11
[HNB ] OVSF: RL_SETUP: allocated SF_256 CodeNum:11
[HNB ] ueIdx extracted is 1 for rlId 0
[HNB ] ueIdx extracted is 1 for rl_id 0
[SSE ] opSSEngine: UeId(1), domain(1) MsgType =1102 Active proc =2
[SSE ] Validation success
[SSE ] Message is forwarded to UE(2) State machine With Evt 1.
[SSE ] Calling UE State Engine for ueIdx =1
[RRCSM ] S2E1102
[HNB ] OVSF:rrFillDlInfPerfList: ChanCode 11
[HNB ] Connection Setup Setting inital CFN to 810
[HNB ] UEIDx (1) L2 & L3 Configuration Successful.
[SSE ] opSSEngine: UeId(1), domain(1) MsgType =2110 Active proc =2
[SSE ] Validation success
[SSE ] Message is forwarded to UE(2) State machine With Evt 3.
[SSE ] Calling UE State Engine for ueIdx =1
[RRCSM ] S2E1104
[HNB ] OVSF:rrFillDlInfPerfList: ChanCode 11
[HNB ] Connection Setup Setting inital CFN to 812
[RRCSM ] trChCfg parameters: numTf - 2, chType - 6,
cctrchId - 1, chIdentity - 5, ueId - -831520767, macdFlowId - 0
, binding ID - 0
[RRCSM ] For UE(1) Next State Set to --> [ S3 OP_SSE_UE_RRC_RSP ].
[HNB ] Stopping RADIO LINK FAILURE TIMER ueIdx = 1
[HNB ] Setting connection wait timer to max.
[HNB ] Stopping PERIODIC TIMER ueIdx = 1
[HNB ] HSDPA UE: CATEGORY=8
[HNB ] HSUPA UE
[HNB ] Intg Prot algo capb - 0, 2
[HNB ] Cyphering algo capb - 0, 3
[HNB ] Multi-mode capability is 1
[HNB ] saUeCb[1].ueCap.measmtCap.dlCompMd=1, interFreqMeasEnb=1
[SSE ] opSSEngine: UeId(1), domain(67) MsgType =1106 Active proc =2
[SSE ] Validation success
[SSE ] Message is forwarded to UE(2) State machine With Evt 5.
[SSE ] Calling UE State Engine for ueIdx =1
[RRCSM ] S3E1106
[RRCSM ] For UE(1) Next State Set to --> [ S4 OP_SSE_UE_RRC_CONTD ].
[HNB ] IDT received for domain = 1, ueIdx = 1
[HNB ] IDT Message contents:
0x8 0xc 0x14 0x5 0xf4 0xc0 0xa2 0x15 0xb0 0x32 0x2 0x20 0x0 0x36 0x2 0x20 0x0
[STAT ] After IDT, PS Domain Connection cause is = 2
[HNB ] RRC Connection release timer stopped
[HNB ] IDT domain - 1
[HNB ] Storing the IDT for domain 1
[HNB ] IDT received for domain = 1, ueIdx = 1
[NAS ][Fri Apr 27 2012 19:11:32.63394] [PTMSI: c0 a2 15 b0] Received GMM SERVIC
E REQUEST from UE
[HNB ] ueIdx =1 STATE [CS -> STATE0 PS->STATE2 ]
[NAS ][Fri Apr 27 2012 19:11:32.63955] [PTMSI: c0 a2 15 b0] Check call pref fla
g as previous check marked No HO required.
[HNB ] Call pref check params are:data_UseRejectProcedure = 0, nonData_UseRejec
tProcedure = 0, HoBlindForCsEnb = 0, HoBlindForPsEnb = 0
[HNB ] None of HO param or RejectCall param are TRue. So pasisng the call prefe
rence Check
[HNB ] data_UseRejectProcedure = 0, nonData_UseRejectProcedure = 0, HoBlindForC
sEnb = 0, HoBlindForPsEnb = 0
[NAS ][Fri Apr 27 2012 19:11:32.64468] [PTMSI: c0 a2 15 b0] Sending IDENTITY RE
QUEST from HNB to UE, for PS domain
[NAS ][Fri Apr 27 2012 19:11:32.422885] [PTMSI: c0 a2 15 b0] Received IDENTITY
RESPONSE from UE
0x8 0x16 0x8 0x49 0x5 0x50 0x20 0x90 0x87 0x30 0x84
[HNB ]
CAC :Entered ChkIfBlackListUe
[HNB ] Matching IMSI Not found in Black list
[HNB ] IMSI is not part of Black list
[HNB ] SA_PERIODIC_TMR saStopTmr(): no entry in regdImsiCb, returning
[HNB ] No.Of IMSI in list:0 idx:0 NonCSGUssers:0 csgUe:0
[HNB ] NO IMSI clash processing further...
[SSE ] opSSEngine: UeId(1), domain(1) MsgType =1108 Active proc =2
[SSE ] Validation success
[SSE ] Message is forwarded to UE(2) State machine With Evt 6.
[SSE ] Calling UE State Engine for ueIdx =1
[RRCSM ] S4E1107
[RRCSM ] SA : IMSI received in IDT, searching in HashList
[RRCSM ] For UE(1) Next State Set to --> [ S5 OP_SSE_UE_REG_SENT ].
[HNB ] Received UE RegAcc with UE identity as IMSI
[HNB ] UE registration accept received for UE 1
[SSE ] opSSEngine: UeId(1), domain(2) MsgType =1110 Active proc =2
[SSE ] Validation success
[SSE ] Message is forwarded to UE(2) State machine With Evt 8.
[SSE ] Calling UE State Engine for ueIdx =1
[RRCSM ] S5E1109
[HNB ] Filling extension container for tracing
[HNB ] SA_DELTA_TMR PS: started idx = 1
[RRCSM ] For UE(1) Next State Set to --> [ S6 OP_SSE_UE_REGD ].
[SSE ] opSSEngine: UeId(1), domain(0) MsgType =1112 Active proc =2
[SSE ] Validation success
[SSE ] Message is forwarded to UE(2) State machine With Evt 10.
[SSE ] Calling UE State Engine for ueIdx =1
[RRCSM ] S6E1111
[RRCSM ] For UE(1) Next State Set to --> [ S7 OP_SSE_UE_IUH_ESTD ].
[HNB ] raCnStSdus->sdu.hdr.procCode.val (20)
[HNB ] Received NAS message:
[HNB ] NAS Message: CN --> UE:
[HNB ] NAS Message UE --> CN:
0x8 0x13 0x0 0x22 0x30 0xb4 0x39 0x42 0x29 0x4 0x49 0xf 0x2d 0x24
[HNB ] raCnStSdus->sdu.hdr.procCode.val (6)
domain in saGetSecurityInfo is 1[HNB ] New key is received
[HNB ] opHandleSecModeCmdFromCn
[HNB ] RLC Register F8 blocksize 640 key 44379b78
[HNB ] F8API_Open rbId 0 direction 1
[HNB ] RLC Register F8 blocksize 128 key 44379b80
[HNB ] F8API_Open rbId 0 direction 0
[HNB ] RLC Register F8 blocksize 640 key 44379b78
[HNB ] F8API_Open rbId 1 direction 1
[HNB ] RLC Register F8 blocksize 128 key 44379b80
[HNB ] F8API_Open rbId 1 direction 0
[HNB ] RLC Register F8 blocksize 640 key 44379b78
[HNB ] F8API_Open rbId 2 direction 1
[HNB ] RLC Register F8 blocksize 128 key 44379b80
[HNB ] F8API_Open rbId 2 direction 0
[HNB ] RLC Register F8 blocksize 640 key 44379b78
[HNB ] F8API_Open rbId 3 direction 1
[HNB ] RLC Register F8 blocksize 128 key 44379b80
[HNB ] F8API_Open rbId 3 direction 0
[HNB ] UEIDx (1) L2 & L3 Configuration Successful.
[SSE ] opSSEngine: UeId(1), domain(1) MsgType =2110 Active proc =0
[SSE ] Ignoring message.
[SSE ] ignoring message
[HNB ] raCnStSdus->sdu.hdr.procCode.val (0)
[HNB ] ueIdx =1 STATE [CS -> STATE0 PS->STATE3 ]
[HNB ] saHdlSetOrModRAB() domain=1 No of RAB=0
[HNB ] Settin hsEnb to True
[STAT ] RB STATE(CS/PS) (0/0) & RRC Direction(CS/PS)=(0/1) Traffic Class =2
[HNB ] RAB: MAX DL AND UL RATES FROM RABASSIGN: 384 384
RAB Assignment : remote IP address:c0a8323f [HNB ] DataVolRepInd = RPT_DAT_VOL_
RPT_ON
[HNB ] RAB assignment request received and calling the SSEngine for ueIdx: 1
[SSE ] opSSEngine: UeId(1), domain(1) MsgType =2102 Active proc =0
[SSE ] Validation success
[SSE ] Message is forwarded to RB(1) State machine With Evt 0.
[SSE ] Calling RB State Engine For ueIdx =1
[SSE ] saUeCb[ueIdx].rabCtxt.domain[domain].rbState: state(0)
[SSE ] No active procedure: evt(0)
[SSE ] Procedure Proceed: evt(0)
[SSE ] No queuing: ueIdx(1), evt(0)
[HNB ] S1E101
[HNB ] OVSF: HSPA Only call: 6(5 = HSDPA, 6 = HSPA) for UE index: 1
[HNB ] TGPS parameters filled
[HNB ] ueIdx = 1 domain = 1 now rb state is =1
[HNB ] <SA_MSG_RSP_TMR> Started for ueIdx: 1
[SSE ] opSSEngine: UeId(1), domain(1) MsgType =2104 Active proc =1
[SSE ] msgType(2104),evt(1)
[SSE ] saUeCb[ueIdx].rabCtxt.domain[domain].rbState(1)
[SSE ] Validation success
[SSE ] Message is forwarded to RB(1) State machine With Evt 1.
[SSE ] Calling RB State Engine For ueIdx =1
[SSE ] otherDomainState(0)
[SSE ] orgRbMode(1)
[SSE ] Not here
[SSE ] Current RB mode: 1 domain =1
[HNB ] S2E102
[HNB ] ueIdx = 1 domain = 1 now rb state is =2
[HNB ] <SA_MSG_RSP_TMR> Started for ueIdx: 1
[SSE ] opSSEngine: UeId(1), domain(1) MsgType =2106 Active proc =1
[SSE ] msgType(2106),evt(3)
[SSE ] saUeCb[ueIdx].rabCtxt.domain[domain].rbState(2)
[SSE ] Validation success
[SSE ] Message is forwarded to RB(1) State machine With Evt 3.
[SSE ] Calling RB State Engine For ueIdx =1
[SSE ] otherDomainState(0)
[SSE ] orgRbMode(1)
[SSE ] Not here
[SSE ] Current RB mode: 1 domain =1
[HNB ] Sending RB setup for ueIdx - 1
[HNB ] DL compressed mode not required,not filling TGPS params
[HNB ] Requires compressed info filling, filling TGPS params
[HNB ] In rrFillTGPSCfgParams : Filled TGPS params
[HNB ] OVSF:rrFillInfPerRLLstr6 SF:6,code 11
[HNB ] Seq No: 0 and RbId: 2
[HNB ] ueIdx = 1 domain = 1 now rb state is =3
[HNB ] <SA_MSG_RSP_TMR> Started for ueIdx: 1
[HNB ] coun_C_ActvTm not present
[SSE ] opSSEngine: UeId(1), domain(1) MsgType =2108 Active proc =1
[SSE ] msgType(2108),evt(5)
[SSE ] saUeCb[ueIdx].rabCtxt.domain[domain].rbState(3)
[SSE ] Validation success
[SSE ] Message is forwarded to RB(1) State machine With Evt 5.
[SSE ] Calling RB State Engine For ueIdx =1
[SSE ] otherDomainState(0)
[SSE ] orgRbMode(1)
[SSE ] Not here
[SSE ] Current RB mode: 1 domain =1
[HNB ] S4E106
[HNB ] ueIdx = 1 domain = 1 now rb state is =4
[HNB ] RLC Register F8 blocksize 640 key 44379b94
[HNB ] F8API_Open rbId 8 direction 1
[HNB ] In opRegisterf8 : rbid >4 : Doing write to cl
[HNB ] Call back context is 40299608
[HNB ] Holder -> inprogres 1 786
[HNB ] RLC Register F8 blocksize 320 key 44379b94
[HNB ] F8API_Open rbId 8 direction 0
[HNB ] In opRegisterf8 : rbid >4 : Doing write to cl
[HNB ] Call back context is 40299208
[HNB ] Holder -> inprogres 1 786
[HNB ] UEIDx (1) L2 & L3 Configuration Successful.
[SSE ] opSSEngine: UeId(1), domain(1) MsgType =2110 Active proc =1
[SSE ] msgType(2110),evt(7)
[SSE ] saUeCb[ueIdx].rabCtxt.domain[domain].rbState(4)
[SSE ] Validation success
[SSE ] Message is forwarded to RB(1) State machine With Evt 7.
[SSE ] Calling RB State Engine For ueIdx =1
[SSE ] otherDomainState(0)
[SSE ] orgRbMode(1)
[SSE ] Not here
[SSE ] Current RB mode: 1 domain =1
[HNB ] S5E108
[HNB ] ueIdx = 1 domain = 1 now rb state is =5
[HNB ] Creating GTP Tunnel for UE 1
GTP teid allocated = 1[SSE ] opSSEngine: UeId(1), domain(1) MsgType =2112 Activ
e proc =1
[SSE ] msgType(2112),evt(11)
[SSE ] saUeCb[ueIdx].rabCtxt.domain[domain].rbState(5)
[SSE ] Validation success
[SSE ] Message is forwarded to RB(1) State machine With Evt 11.
[SSE ] Calling RB State Engine For ueIdx =1
[SSE ] otherDomainState(0)
[SSE ] orgRbMode(1)
[SSE ] Not here
[SSE ] Current RB mode: 1 domain =1
[HNB ] S6E112
[HNB ] In LxtCfgReq suInstId 2 spInstId 0 action 0 domain 1
[HNB ] LxtCfgCfm suInstId 2 spInstId 0 UeIdx 1 domain 1
[SSE ] opSSEngine: UeId(1), domain(1) MsgType =2116 Active proc =1
[SSE ] msgType(2116),evt(13)
[SSE ] saUeCb[ueIdx].rabCtxt.domain[domain].rbState(5)
[SSE ] Validation success
[SSE ] Message is forwarded to RB(1) State machine With Evt 13.
[SSE ] Calling RB State Engine For ueIdx =1
[SSE ] otherDomainState(0)
[SSE ] orgRbMode(1)
[SSE ] Not here
[SSE ] Current RB mode: 1 domain =1
[HNB ] S6E114
[HNB ] Stat: No Of HSPA Calls = 1
[HNB ] ueIdx = 1 domain = 1 now rb state is =6
[HNB ] Sending Active call Ind Count[CS = 0, PS = 1, MRAB = 0]
[STAT ] RB STATE(CS/PS) (0/6) & RRC Direction(CS/PS)=(0/1) Traffic Class =2
[HNB ] ueIdx =1 STATE [CS -> STATE0 PS->STATE4 ]
[HNB ] Sending CapAllToMAC ueIdx (1)
[CL ] Sending CapAllInd to MAC
[HNB ] IDT received for domain = 0, ueIdx = 1
[HNB ] IDT Message contents:
0x5 0x8 0x78 0x54 0xf0 0x50 0xff 0xfe 0x57 0x8 0x49 0x5 0x50 0x20 0x90 0x87 0x30
0x84 0x33 0x3 0x57 0x58 0xa6
[STAT ] After IDT, CS Domain Connection cause is = 2
[HNB ] RRC Connection release timer stopped
[HNB ] IDT domain - 0
[HNB ] Storing the IDT for domain 0
[HNB ] IDT received for domain = 0, ueIdx = 1
[HNB ] IDT already processed, just return
[CL ] 2:relSfn -1 clSfn 1754 prsntSFN 1753 prevSFN 1653
[CL ] 2:relSfn -1 clSfn 2259 prsntSFN 2258 prevSFN 2158
[CL ] 2:relSfn -1 clSfn 2461 prsntSFN 2460 prevSFN 2360
[CL ] 2:relSfn -1 clSfn 2966 prsntSFN 2965 prevSFN 2865
[HNB ] STOPPING CS DELTA TIMER.
[HNB ] IDT received for domain = 0, ueIdx = 1
[HNB ] IDT Message contents:
0x5 0x8 0x78 0x54 0xf0 0x50 0xff 0xfe 0x57 0x8 0x49 0x5 0x50 0x20 0x90 0x87 0x30
0x84 0x33 0x3 0x57 0x58 0xa6
[STAT ] After IDT, CS Domain Connection cause is = 2
[HNB ] RRC Connection release timer stopped
[HNB ] IDT domain - 0
[HNB ] Storing the IDT for domain 0
[HNB ] IDT received for domain = 0, ueIdx = 1
[HNB ] IDT already processed, just return
[CL ] 2:relSfn -1 clSfn 3673 prsntSFN 3672 prevSFN 3572
[CL ] 2:relSfn -1 clSfn 82 prsntSFN 81 prevSFN 4077
[CL ] 2:relSfn -1 clSfn 284 prsntSFN 283 prevSFN 183
[CL ] 2:relSfn -1 clSfn 789 prsntSFN 788 prevSFN 688
[CL ] 2:relSfn -1 clSfn 991 prsntSFN 990 prevSFN 890
[HNB ] STOPPING CS DELTA TIMER.
[CL ] 2:relSfn -1 clSfn 1496 prsntSFN 1495 prevSFN 1395
[HNB ] Ran out of Keystreams
[HNB ] countC 2554 first countc 2000 streams available 0
[HNB ] Ran out of Keystreams
[HNB ] countC 2555 first countc 2000 streams available -1
[HNB ] Ran out of Keystreams
[HNB ] countC 2556 first countc 2000 streams available -2
[HNB ] Ran out of Keystreams
[HNB ] countC 2557 first countc 2000 streams available -3
[HNB ] Ran out of Keystreams
[HNB ] countC 2558 first countc 2000 streams available -4
[HNB ] Ran out of Keystreams
[HNB ] countC 2559 first countc 2000 streams available -5
[HNB ]
[CL ] 2:relSfn -1 clSfn 1687 prsntSFN 1686 prevSFN 1586
[HNB ] IDT received for domain = 0, ueIdx = 1
[HNB ] IDT Message contents:
0x5 0x8 0x70 0x54 0xf0 0x50 0xff 0xfe 0x57 0x8 0x49 0x5 0x50 0x20 0x90 0x87 0x30
0x84 0x33 0x3 0x57 0x58 0xa6
[STAT ] After IDT, CS Domain Connection cause is = 2
[HNB ] RRC Connection release timer stopped
[HNB ] IDT domain - 0
[HNB ] Storing the IDT for domain 0
[HNB ] IDT received for domain = 0, ueIdx = 1
[HNB ] IDT already processed, just return
[CL ] 2:relSfn -1 clSfn 2192 prsntSFN 2191 prevSFN 2091
[CL ] 2:relSfn -1 clSfn 2394 prsntSFN 2393 prevSFN 2293
[CL ] 2:relSfn -1 clSfn 2899 prsntSFN 2898 prevSFN 2798
[CL ] 2:relSfn -1 clSfn 3101 prsntSFN 3100 prevSFN 3000
[CL ] 2:relSfn -1 clSfn 3404 prsntSFN 3403 prevSFN 3303
[CL ] 2:relSfn -1 clSfn 3606 prsntSFN 3605 prevSFN 3505
[HNB ]