Sie sind auf Seite 1von 25

/******************No.

:1******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
1
2013-05-18 11:03:00.510 GMM
RECEIVE SERVICE REQUEST
40472520
0000155 918547198071
7-65535-255
GMM Context Id:1581
-----------------Detailed Decode-------------------Service Request
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management messages (0x08)
Message type: Service Request (0x0C)
0000 .... = Service type
0... .... = Spare: 0x00
.000 .... = Service type: Signalling (0x00)
.... 0010 = GPRS Ciphering Key Sequence Number
.... 0... = Spare: 0x00
.... .010 = GPRS Ciphering Key Sequence Number: 0x02
P-TMSI
Length of mobile identity contents: 5 (Bytes)
1111 .... = Spare: 0x0F
.... 0... = odd/even indic: even number of identity digits (0x00)
.... .100 = Type of identity: TMSI/P-TMSI (0x04)
TMSI/P-TMSI: C7 16 01 72 (Hex)
PDP Context Status
Length of PDP Context Status: 2 (Bytes)
PDP Context Status Contents: 00 00 (Hex)
000. .... = NSAPI(7-5): 0 0 0 (0:PDP-INACTIVE 1:not PDP-INACTIVE )
...0 0000 = NSAPI(4-0): 0 0 0 0 0 (Spare)
NSAPI(15-8): 0 0 0 0 0 0 0 0 (0:PDP-INACTIVE 1:not PDP-INACTIVE )
-----------------Primitive Code--------------------000000 08 0C 02 05 F4 C7 16 01 72 32 02 00 00

........r2...

/******************No.:2******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
2
2013-05-18 11:03:00.510 GMM
SEND
AUTHENTICATION and CIPHERING REQ
UEST
404725200000155 918547198071
7-65535-255
GMM Context Id:1581
-----------------Detailed Decode-------------------Authentication and Ciphering Request
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management messages (0x08)
Message type: Authentication and Ciphering Request (0x12)
0000 .... = IMEISV request: IMEISV not requested (0x00)
.... 0000 = Ciphering algorithm: ciphering not used (0x00)
0011 .... = A and C reference number: 0x03
.... 0000 = Force To Standby: Force to standby not indicated (0x00)
Authentication parameter RAND
Authentication parameter RAND Value: BE 77 6B 3D 9E 49 0E AE 47 AF 8A 0E
21 B5 7F AC (Hex)
GPRS Ciphering Key Sequence Number
.... 0... = Spare: 0x00
.... .011 = GPRS Ciphering Key Sequence Number: 0x03
Authentication Parameter AUTN
Length of Authentication Parameter AUTN: 16 (Bytes)
SQN xor AK: E0 4A 51 E2 AF 67 (Hex)
AMF: 12 34 (Hex)
MAC: 7F E3 60 C9 0B 69 93 6B (Hex)

-----------------Primitive Code--------------------000000 08 12 00 30 21 BE 77 6B 3D 9E 49 0E AE 47 AF 8A
000010 0E 21 B5 7F AC 83 28 10 E0 4A 51 E2 AF 67 12 34
000020 7F E3 60 C9 0B 69 93 6B

...0!.wk=.I..G..
.!....(..JQ..g.4
..`..i.k

/******************No.:3******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
3
2013-05-18 11:03:00.520 RANAP RECEIVE N_ConnectIndEvent
INITIAL
UE MESSAGE
404725200000155
7-65535-255
RANAPID:
1700-GMM Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)
Procedure Code: id-InitialUE-Message(0x13)
01.. .... = Criticality: ignore(0x01)
Number of Octets in PDU: 0x45
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x07
CN DomainIndicator IE
id-CN-DomainIndicator: 0x03
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x01
1... .... = CN-DomainIndicator: ps-domain(0x01)
LAI IE
id-LAI: 0x0F
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x06
0... .... = ProtocolExtensionContainer: no present(0x00)
PLMN-ID: 04 F4 27 (Hex)
LAC: 1B D6 (Hex)
RAC IE
id-RAC: 0x37
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x01
RAC: 26 (Hex)
SAI IE
id-SAI: 0x3A
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x08
0... .... = ProtocolExtensionContainer: no present(0x00)
PLMN-ID: 04 F4 27 (Hex)
LAC: 1B D6 (Hex)
SAC: 27 07 (Hex)
NAS PDU IE
id-NAS-PDU: 0x10
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x0E
NAS-PDU: 08 0C 02 05 F4 C7 16 01 72 32 ... (Hex)
Service Request
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management mes
sages (0x08)
Message type: Service Request (0x0C)
0000 .... = Service type
0... .... = Spare: 0x00

.000 .... = Service type: Signalling (0x00)


.... 0010 = GPRS Ciphering Key Sequence Number
.... 0... = Spare: 0x00
.... .010 = GPRS Ciphering Key Sequence Number: 0x02
P-TMSI
Length of mobile identity contents: 5 (Bytes)
1111 .... = Spare: 0x0F
.... 0... = odd/even indic: even number of identity digits (
0x00)
.... .100 = Type of identity: TMSI/P-TMSI (0x04)
TMSI/P-TMSI: C7 16 01 72 (Hex)
PDP Context Status
Length of PDP Context Status: 2 (Bytes)
PDP Context Status Contents: 00 00 (Hex)
000. .... = NSAPI(7-5): 0 0 0 (0:PDP-INACTIVE 1:not PDPINACTIVE )
...0 0000 = NSAPI(4-0): 0 0 0 0 0 (Spare)
NSAPI(15-8): 0 0 0 0 0 0 0 0 (0:PDP-INACTIVE 1:not PDP-I
NACTIVE )
IuSigConId IE
id-IuSigConId: 0x4F
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x03
IuSignallingConnectionIdentifier: 00 14 8B (Hex)
Global RNC ID IE
id-GlobalRNC-ID: 0x56
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x05
PLMN-ID: 04 F4 27 (Hex)
RNC ID: 0x162
-----------------Primitive Code--------------------000000 00 13 40 45 00 00 07 00 03 40 01 80 00 0F 40
000010 00 04 F4 27 1B D6 00 37 40 01 26 00 3A 40 08
000020 04 F4 27 1B D6 27 07 00 10 40 0E 0D 08 0C 02
000030 F4 C7 16 01 72 32 02 00 00 00 4F 40 03 00 14
000040 00 56 40 05 04 F4 27 01 62

06
00
05
8B

..@E.....@....@.
...'...7@.&.:@..
..'..'...@......
....r2....O@....
.V@...'.b

/******************No.:4******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
4
2013-05-18 11:03:00.520 RANAP SEND
N_DataReqEvent DIRECT TRANSFER
404725200000155 918547198071
7-65535-255
RANAPID:1700-GMM
Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)
Procedure Code: id-DirectTransfer(0x14)
01.. .... = Criticality: ignore(0x01)
Number of Octets in PDU: 0x35
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x02
NAS PDU IE
id-NAS-PDU: 0x10
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x29
NAS-PDU: 08 12 00 30 21 BE 77 6B 3D 9E ... (Hex)

Authentication and Ciphering Request


0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management mes
sages (0x08)
Message type: Authentication and Ciphering Request (0x12)
0000 .... = IMEISV request: IMEISV not requested (0x00)
.... 0000 = Ciphering algorithm: ciphering not used (0x00)
0011 .... = A and C reference number: 0x03
.... 0000 = Force To Standby: Force to standby not indicated (0x
00)
Authentication parameter RAND
Authentication parameter RAND Value: BE 77 6B 3D 9E 49 0E AE
47 AF 8A 0E 21 B5 7F AC (Hex)
GPRS Ciphering Key Sequence Number
.... 0... = Spare: 0x00
.... .011 = GPRS Ciphering Key Sequence Number: 0x03
Authentication Parameter AUTN
Length of Authentication Parameter AUTN: 16 (Bytes)
SQN xor AK: E0 4A 51 E2 AF 67 (Hex)
AMF: 12 34 (Hex)
MAC: 7F E3 60 C9 0B 69 93 6B (Hex)
SAPI IE
id-SAPI: 0x3B
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x01
00.. .... = SAPI: sapi-0(0x00)
-----------------Primitive Code--------------------000000 00 14 40 35 00 00 02 00 10 40 29 28 08 12 00 30
000010 21 BE 77 6B 3D 9E 49 0E AE 47 AF 8A 0E 21 B5 7F
000020 AC 83 28 10 E0 4A 51 E2 AF 67 12 34 7F E3 60 C9
000030 0B 69 93 6B 00 3B 40 01 00

..@5.....@)(...0
!.wk=.I..G...!..
..(..JQ..g.4..`.
.i.k.;@..

/******************No.:5******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
5
2013-05-18 11:03:00.880 RANAP RECEIVE N_DataIndEvent DIRECT TRANSFER
404725200000155 918547198071
7-65535-255
RANAPID:1700-GMM
Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)
Procedure Code: id-DirectTransfer(0x14)
01.. .... = Criticality: ignore(0x01)
Number of Octets in PDU: 0x31
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x04
NAS PDU IE
id-NAS-PDU: 0x10
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x0F
NAS-PDU: 08 13 03 22 64 A2 27 DE 29 04 ... (Hex)
Authentication and Ciphering Response
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management mes
sages (0x08)
Message type: Authentication and Ciphering Response (0x13)

0000 .... = Spare Half Octet: 0x00


.... 0011 = A and C reference number: 0x03
Authentication Response parameter
Authentication Response parameter Value: 64 A2 27 DE (Hex)
Authentication Response parameter (extension)
Length of Authentication Response parameter (extension): 4 (
Bytes)
Authentication Response parameter (extension) Value: 79 22 1
E 96 (Hex)
LAI IE
id-LAI: 0x0F
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x06
0... .... = ProtocolExtensionContainer: no present(0x00)
PLMN-ID: 04 F4 27 (Hex)
LAC: 1B D6 (Hex)
RAC IE
id-RAC: 0x37
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x01
RAC: 26 (Hex)
SAI IE
id-SAI: 0x3A
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x08
0... .... = ProtocolExtensionContainer: no present(0x00)
PLMN-ID: 04 F4 27 (Hex)
LAC: 1B D6 (Hex)
SAC: 27 07 (Hex)
-----------------Primitive Code--------------------000000 00 14 40 31 00 00 04 00 10 40 0F 0E 08 13 03 22
000010 64 A2 27 DE 29 04 79 22 1E 96 00 0F 40 06 00 04
000020 F4 27 1B D6 00 37 40 01 26 00 3A 40 08 00 04 F4
000030 27 1B D6 27 07

..@1.....@....."
d.'.).y"....@...
.'...7@.&.:@....
'..'.

/******************No.:6******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
6
2013-05-18 11:03:00.880 GMM
RECEIVE AUTHENTICATION and CIPHERING RES
PONSE
404725200000155 918547198071
7-65535-255
GMM Context Id:1581
-----------------Detailed Decode-------------------Authentication and Ciphering Response
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management messages (0x08)
Message type: Authentication and Ciphering Response (0x13)
0000 .... = Spare Half Octet: 0x00
.... 0011 = A and C reference number: 0x03
Authentication Response parameter
Authentication Response parameter Value: 64 A2 27 DE (Hex)
Authentication Response parameter (extension)
Length of Authentication Response parameter (extension): 4 (Bytes)
Authentication Response parameter (extension) Value: 79 22 1E 96 (Hex)
-----------------Primitive Code--------------------000000 08 13 03 22 64 A2 27 DE 29 04 79 22 1E 96
/******************No.:7******************/

..."d.'.).y"..

---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
7
2013-05-18 11:03:00.880 RANAP SEND
N_DataReqEvent SECURITY MODE CO
MMAND 404725200000155 918547198071
7-65535-255
RANAPID:
1700-GMM Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)
Procedure Code: id-SecurityModeControl(0x06)
00.. .... = Criticality: reject(0x00)
Number of Octets in PDU: 0x34
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x03
IntegrityProtectionInformation IE
id-IntegrityProtectionInformation: 0x0C
00.. .... = Criticality: reject(0x00)
Number of Octets in IE: 0x12
0... .... = ProtocolExtensionContainer: no present(0x00)
.000 0000 0... .... = IntegrityProtectionAlgorithms
.000 0... = Number of IntegrityProtectionAlgorithms: 0x01
.... .000 0... .... = 1. IntegrityProtectionAlgorithm: standard-UMTS
-integrity-algorithm-UIA1(0x00)
IntegrityProtectionKey: 30 97 B1 7A A2 7B 9D 5F E3 2A 96 47 E1 37 A9 91
(Hex)
EncryptionInformation IE
id-EncryptionInformation: 0x0B
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x12
0... .... = ProtocolExtensionContainer: no present(0x00)
.000 0000 0... .... = PermittedEncryptionAlgorithms
.000 0... = Number of PermittedEncryptionAlgorithms: 0x01
.... .000 0... .... = 1. EncryptionAlgorithm: no-encryption(0x00)
EncryptionKey: FD 25 FB FB 0F 85 5F 5D 31 12 D4 80 93 E7 D0 82 (Hex)
KeyStatus IE
id-KeyStatus: 0x4B
00.. .... = Criticality: reject(0x00)
Number of Octets in IE: 0x01
01.. .... = KeyStatus: new(0x01)
-----------------Primitive Code--------------------000000 00 06 00 34 00 00 03 00 0C 00 12 00 00 30 97 B1
000010 7A A2 7B 9D 5F E3 2A 96 47 E1 37 A9 91 00 0B 40
000020 12 00 00 FD 25 FB FB 0F 85 5F 5D 31 12 D4 80 93
000030 E7 D0 82 00 4B 00 01 40

...4.........0..
z.{._.*.G.7....@
....%...._]1....
....K..@

/******************No.:8******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
8
2013-05-18 11:03:01.020 RANAP RECEIVE N_DataIndEvent SECURITY MODE CO
MPLETE 404725200000155 918547198071
7-65535-255
RANAPID:
1700-GMM Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.01. .... = RANAP-PDU Index: successfulOutcome(0x01)
Procedure Code: id-SecurityModeControl(0x06)

00.. .... = Criticality: reject(0x00)


Number of Octets in PDU: 0x0D
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x02
ChosenIntegrityProtectionAlgorithm IE
id-ChosenIntegrityProtectionAlgorithm: 0x06
00.. .... = Criticality: reject(0x00)
Number of Octets in IE: 0x01
0000 .... = ChosenIntegrityProtectionAlgorithm: standard-UMTS-integrityalgorithm-UIA1(0x00)
ChosenEncryptionAlgorithm IE
id-ChosenEncryptionAlgorithm: 0x05
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x01
0000 .... = ChosenEncryptionAlgorithm: no-encryption(0x00)
-----------------Primitive Code--------------------000000 20 06 00 0D 00 00 02 00 06 00 01 00 00 05 40 01
000010 00

.............@.
.

/******************No.:9******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
9
2013-05-18 11:03:01.020 RANAP SEND
N_DataReqEvent COMMON ID
404725200000155 918547198071
7-65535-255
RANAPID:1700-GMM
Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)
Procedure Code: id-CommonID(0x0F)
01.. .... = Criticality: ignore(0x01)
Number of Octets in PDU: 0x10
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x01
Permanent NAS UE ID IE
id-PermanentNAS-UE-ID: 0x17
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x09
0... .... = choice index: IMSI(0x00)
Permanent NAS UE Identity: 40 47 25 20 00 00 15 5F (Hex)
-----------------Primitive Code--------------------000000 00 0F 40 10 00 00 01 00 17 40 09 50 04 74 52 02
000010 00 00 51 F5

..@......@.P.tR.
..Q.

/******************No.:10******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
10
2013-05-18 11:03:01.050 RANAP RECEIVE N_DataIndEvent DIRECT TRANSFER
404725200000155 918547198071
7-65535-255
RANAPID:1700-GMM
Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)

Procedure Code: id-DirectTransfer(0x14)


01.. .... = Criticality: ignore(0x01)
Number of Octets in PDU: 0x57
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x04
NAS PDU IE
id-NAS-PDU: 0x10
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x35
NAS-PDU: 0A 41 05 03 0C 00 00 1F 10 00 ... (Hex)
Activate PDP Context Request
0000 .... = Transaction identifier: 0x00
.... 1010 = Protocol discriminator: GPRS session management mess
ages(0x0A)
Message type: Activate PDP Context Request (0x41)
Requested NSAPI: 0x05
0000 .... = Spare: 0
.... 0101 = Requested NSAPI: 0x05
Requested LLC SAPI: 0x03
0000 .... = Spare: 0
.... 0011 = Requested LLC SAPI: 0x03
Requested QoS (R5)
Length of Quality of Service: 12 (Bytes)
00.. .... = Spare: 0
..00 0... = Delay Class: Subscribed delay class (0x00)
.... .000 = Reliability Class: Subscribed reliability class
(0x00)
0000 .... = Peak Throughput: Subscribed peak throughput (0x0
0)
.... 0... = Spare: 0
.... .000 = Precedence Class: Subscribed precedence (0x00)
000. .... = Spare: 0
...1 1111 = Mean Throughput: Best effort (0x1F)
000. .... = Traffic Class: Subscribed traffic class (0x00)
...1 0... = Delivery Order: Without delivery order ('no') (0
x02)
.... .000 = Delivery of Erroneous SDUs: Subscribed delivery
of erroneous SDUs
Maximum SDU Size: Subscribed maximum SDU size (0x00)
Maximum Bit Rate for Uplink: Subscribed maximum bit rate for
uplink (0x00)
Maximum Bit Rate for Downlink: Subscribed maximum bit rate f
or downlink (0x00)
0000 .... = Residual Bit Error Rate: Subscribed residual BER
(0x00)
.... 0000 = SDU Error Ratio: Subscribed SDU error ratio (0x0
0)
0000 00.. = Transfer Delay: Subscribed transfer delay (0x00)
.... ..00 = Traffic Handling Priority: Subscribed traffic ha
ndling priority (0x00)
Guaranteed Bit Rate for Uplink: Subscribed maximum bit rate
for uplink (0x00)
Guaranteed Bit Rate for Downlink: Subscribed maximum bit rat
e for downlink (0x00)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signall
ing traffic (0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
Requested PDP Address

Length of PDP Address Contents: 2 (Bytes)


0000 .... = Spare: 0x00
.... 0001 = PDP Type Organisation: IETF allocated address (0
x01)
PDP Type Number Value: IPv4 (0x21)
Access Point Name
Length of Access Point Name Contents: 8 (Bytes)
Access Point Name: bsnlmms
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes
)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00
.... .000 = Configuration Protocol: 0
Protocol Identifier: IPCP (0x8021)
Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
LAI IE
id-LAI: 0x0F
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x06
0... .... = ProtocolExtensionContainer: no present(0x00)
PLMN-ID: 04 F4 27 (Hex)
LAC: 1B D6 (Hex)
RAC IE
id-RAC: 0x37
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x01
RAC: 26 (Hex)
SAI IE
id-SAI: 0x3A
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x08
0... .... = ProtocolExtensionContainer: no present(0x00)
PLMN-ID: 04 F4 27 (Hex)
LAC: 1B D6 (Hex)
SAC: 27 07 (Hex)
-----------------Primitive Code--------------------000000 00 14 40 57 00 00 04 00 10 40 35 34 0A 41 05
000010 0C 00 00 1F 10 00 00 00 00 00 00 00 00 02 01
000020 28 08 07 62 73 6E 6C 6D 6D 73 27 14 80 80 21
000030 01 00 00 10 81 06 00 00 00 00 83 06 00 00 00
000040 00 0F 40 06 00 04 F4 27 1B D6 00 37 40 01 26
000050 3A 40 08 00 04 F4 27 1B D6 27 07

03
21
10
00
00

..@W.....@54.A..
...............!
(..bsnlmms'...!.
................
..@....'...7@.&.
:@....'..'.

/******************No.:11******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
11
2013-05-18 11:03:01.050 SM
RECEIVE ACTIVATE PDP CONTEXT REQUEST
404725200000155 918547198071
7-65535-255
-----------------Detailed Decode-------------------Activate PDP Context Request
0000 .... = Transaction identifier: 0x00
.... 1010 = Protocol discriminator: GPRS session management messages(0x0A)
Message type: Activate PDP Context Request (0x41)
Requested NSAPI: 0x05
0000 .... = Spare: 0
.... 0101 = Requested NSAPI: 0x05

Requested LLC SAPI: 0x03


0000 .... = Spare: 0
.... 0011 = Requested LLC SAPI: 0x03
Requested QoS (R5)
Length of Quality of Service: 12 (Bytes)
00.. .... = Spare: 0
..00 0... = Delay Class: Subscribed delay class (0x00)
.... .000 = Reliability Class: Subscribed reliability class (0x00)
0000 .... = Peak Throughput: Subscribed peak throughput (0x00)
.... 0... = Spare: 0
.... .000 = Precedence Class: Subscribed precedence (0x00)
000. .... = Spare: 0
...1 1111 = Mean Throughput: Best effort (0x1F)
000. .... = Traffic Class: Subscribed traffic class (0x00)
...1 0... = Delivery Order: Without delivery order ('no') (0x02)
.... .000 = Delivery of Erroneous SDUs: Subscribed delivery of erroneous
SDUs
Maximum SDU Size: Subscribed maximum SDU size (0x00)
Maximum Bit Rate for Uplink: Subscribed maximum bit rate for uplink (0x0
0)
Maximum Bit Rate for Downlink: Subscribed maximum bit rate for downlink
(0x00)
0000 .... = Residual Bit Error Rate: Subscribed residual BER (0x00)
.... 0000 = SDU Error Ratio: Subscribed SDU error ratio (0x00)
0000 00.. = Transfer Delay: Subscribed transfer delay (0x00)
.... ..00 = Traffic Handling Priority: Subscribed traffic handling prior
ity (0x00)
Guaranteed Bit Rate for Uplink: Subscribed maximum bit rate for uplink (
0x00)
Guaranteed Bit Rate for Downlink: Subscribed maximum bit rate for downli
nk (0x00)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signalling traffic
(0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
Requested PDP Address
Length of PDP Address Contents: 2 (Bytes)
0000 .... = Spare: 0x00
.... 0001 = PDP Type Organisation: IETF allocated address (0x01)
PDP Type Number Value: IPv4 (0x21)
Access Point Name
Length of Access Point Name Contents: 8 (Bytes)
Access Point Name: bsnlmms
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00
.... .000 = Configuration Protocol: 0
Protocol Identifier: IPCP (0x8021)
Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
-----------------Primitive Code--------------------000000 0A 41 05 03 0C 00 00 1F 10 00 00 00 00 00 00 00
000010 00 02 01 21 28 08 07 62 73 6E 6C 6D 6D 73 27 14
000020 80 80 21 10 01 00 00 10 81 06 00 00 00 00 83 06
000030 00 00 00 00
/******************No.:12******************/
---------------Summary Information--------------

.A..............
...!(..bsnlmms'.
..!.............
....

No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
12
2013-05-18 11:03:01.050 GTP
SEND
CREATE PDP CONTEXT REQUEST
404725200000155 918547198071
7-65535-255
218.248.72.52 218.248.84.5
GTPC Context Id:FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
-----------------Detailed Decode-------------------Create PDP Context Request
GTP Header
001. .... = GTP Version: 1
...1 .... = Protocol Type (PT) : GTP(0x01)
.... 0... = Spare: 0
.... .0.. = Extension Header Flag (E): 0
.... ..1. = Sequence Number Flag (S) : 1
.... ...0 = N-PDU Number Flag (PN): 0
GTP Message Type: Create PDP Context Request(0x10)
Length: 149 (Bytes)
Tunnel Endpoint Identifier(TEID): 0x00000000
Sequence Number: 0x0566
N-PDU Number: 0x00
Next Extension Header Type: No more extension headers(0x00)
IMSI
IMSI: 404725200000155
Routing Area Identity
MCC: 404
MNC: 72
LAC: 65534
RAC: 255
Recovery
Restart Counter: 217
Selection Mode
1111 11.. = Spare: 0x3F
.... ..00 = Selection Mode Value: MS or network provided APN, subscribed
verified(0x00)
Tunnel Endpoint Identifier Data I
Tunnel Endpoint Identifier(TEID): 0x8F580054
Tunnel Endpoint Identifier Control Plane
Tunnel Endpoint Identifier(TEID): 0xA8A802B6
NSAPI: 0x05
0000 .... = Spare: 0x00
.... 0101 = NSAPI: 0x05
Charging Characteristics
0000 .... = Spare: 0
.... 1... = Normal Charging: Yes (0x01)
.... .0.. = Prepaid Charging: No (0x00)
.... ..0. = Flat Rate Charging: No (0x00)
.... ...0 = Hot Billing Charging: No (0x00)
Reserved: 0
End User Address
Length: 2 (Bytes)
1111 .... = Spare: 0x0F
.... 0001 = PDP Type Organisation: IETF (0x01)
PDP Type Number Value: IPv4 (0x21)
Access Point Name
Length of Access Point Name Contents: 8 (Bytes)
Access Point Name: bsnlmms
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00
.... .000 = Configuration Protocol: 0

Protocol Identifier: IPCP (0x8021)


Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
SGSN Address for Signalling (IPv4 address: 218.248.72.52)
Length: 4 (Bytes)
IPv4 address: 218.248.72.52
SGSN Address for User Traffic (IPv4 address: 218.248.72.54)
Length: 4 (Bytes)
IPv4 address: 218.248.72.54
MSISDN
Length: 7 (Bytes)
1... .... = Extension Flag : No Extension(0x01)
.001 .... = Nature of Address Indicator : 0x01
.... 0001 = Numbing Plan Indicator : 0x01
MSISDN: 918547198071
Quality of Service Profile (R5)
Length: 13 (Bytes)
Allocation/Retention Priority: 0x02
00.. .... = Spare: 0
..10 0... = Delay Class: Delay class 4(best effort) (0x04)
.... .011 = Reliability Class: Unacknowledged GTP and LLC; Acknowledged
RLC, Protected data (0x03)
1001 .... = Peak Throughput: Up to 256 000 octet/s (0x09)
.... 0... = Spare: 0
.... .010 = Precedence Class: Normal priority (0x02)
000. .... = Spare: 0
...1 1111 = Mean Throughput: Best effort (0x1F)
100. .... = Traffic Class: Background class (0x04)
...1 0... = Delivery Order: Without delivery order ('no') (0x02)
.... .011 = Delivery of Erroneous SDUs: Erroneous SDUs are not delivered
('no'): (0x03)
Maximum SDU Size: 1450octets (0x91)
Maximum Bit Rate for Uplink: 8640kbps (0xFE)
Maximum Bit Rate for Downlink: 8640kbps (0xFE)
0111 .... = Residual Bit Error Rate: 1e-5 (0x07)
.... 0100 = SDU Error Ratio: 1e-4 (0x04)
0000 00.. = Transfer Delay: Reserved (0x00)
.... ..00 = Traffic Handling Priority: Reserved (0x00)
Guaranteed Bit Rate for Uplink: 0kbps (0xFF)
Guaranteed Bit Rate for Downlink: 0kbps (0xFF)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signalling traffic
(0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
RAT Type
Length: 1 (Bytes)
RAT Type: UTRAN(0x01)
User Location Information
Length: 8 (Bytes)
Geographic Location Type: SAI(0x01)
MCC: 404
MNC: 72
LAC: 7126
SAC: 9991
MS Time Zone
Length: 2 (Bytes)
Time Zone: GMT+05:30 (0x22)
0000 00.. = Spare: 0x00
.... ..00 = Daylight Saving Time: No adjustment for Daylight Saving Time
(0x00)

IMEI(SV)
Length: 8 (Bytes)
IMEI(SV): 3562520171289759
-----------------Primitive Code--------------------000000 32 10 00 95 00 00 00 00 05 66 00 00 02 04 74
000010 02 00 00 51 F5 03 04 F4 27 FF FE FF 0E D9 0F
000020 10 8F 58 00 54 11 A8 A8 02 B6 14 05 1A 08 00
000030 00 02 F1 21 83 00 08 07 62 73 6E 6C 6D 6D 73
000040 00 14 80 80 21 10 01 00 00 10 81 06 00 00 00
000050 83 06 00 00 00 00 85 00 04 DA F8 48 34 85 00
000060 DA F8 48 36 86 00 07 91 19 58 74 91 08 17 87
000070 0D 02 23 92 1F 93 91 FE FE 74 00 FF FF 00 97
000080 01 01 98 00 08 01 04 F4 27 1B D6 27 07 99 00
000090 22 00 9A 00 08 53 26 25 10 17 82 79 95

52
FC
80
84
00
04
00
00
02

2........f....tR
...Q....'.......
..X.T...........
...!....bsnlmms.
....!...........
...........H4...
..H6.....Xt.....
..#......t......
........'..'....
"....S&%...y.

/******************No.:13******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
13
2013-05-18 11:03:01.270 GTP
RECEIVE CREATE PDP CONTEXT RESPONSE
404725200000155 918547198071
7-65535-255
218.248.84.5
218.248.72.52
GTPC Context Id:FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
-----------------Detailed Decode-------------------Create PDP Context Response
GTP Header
001. .... = GTP Version: 1
...1 .... = Protocol Type (PT) : GTP(0x01)
.... 0... = Spare: 0
.... .0.. = Extension Header Flag (E): 0
.... ..1. = Sequence Number Flag (S) : 1
.... ...0 = N-PDU Number Flag (PN): 0
GTP Message Type: Create PDP Context Response(0x11)
Length: 87 (Bytes)
Tunnel Endpoint Identifier(TEID): 0xA8A802B6
Sequence Number: 0x0566
N-PDU Number: 0x00
Next Extension Header Type: No more extension headers(0x00)
Cause: Request accepted (0x80)
Reordering Required
1111 111. = Spare: 0x7F
.... ...0 = Reordering Req: No (0x00)
Recovery
Restart Counter: 2
Tunnel Endpoint Identifier Data I
Tunnel Endpoint Identifier(TEID): 0x0402D72D
Tunnel Endpoint Identifier Control Plane
Tunnel Endpoint Identifier(TEID): 0x2EFAC502
Charging ID
Charging ID: 0x2EFAC503
End User Address
Length: 6 (Bytes)
1111 .... = Spare: 0x0F
.... 0001 = PDP Type Organisation: IETF (0x01)
PDP Type Number Value: IPv4 (0x21)
IPv4 address: 10.12.0.28
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00

.... .000 = Configuration Protocol: 0


Protocol Identifier: IPCP (0x8021)
Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
GGSN Address for Control Plane (IPv4 address: 218.248.84.5)
Length: 4 (Bytes)
IPv4 address: 218.248.84.5
GGSN Address for User Traffic (IPv4 address: 218.248.84.5)
Length: 4 (Bytes)
IPv4 address: 218.248.84.5
Quality of Service Profile (R5)
Length: 13 (Bytes)
Allocation/Retention Priority: 0x02
00.. .... = Spare: 0
..10 0... = Delay Class: Delay class 4(best effort) (0x04)
.... .011 = Reliability Class: Unacknowledged GTP and LLC; Acknowledged
RLC, Protected data (0x03)
1001 .... = Peak Throughput: Up to 256 000 octet/s (0x09)
.... 0... = Spare: 0
.... .010 = Precedence Class: Normal priority (0x02)
000. .... = Spare: 0
...1 1111 = Mean Throughput: Best effort (0x1F)
100. .... = Traffic Class: Background class (0x04)
...1 0... = Delivery Order: Without delivery order ('no') (0x02)
.... .011 = Delivery of Erroneous SDUs: Erroneous SDUs are not delivered
('no'): (0x03)
Maximum SDU Size: 1450octets (0x91)
Maximum Bit Rate for Uplink: 1984kbps (0x96)
Maximum Bit Rate for Downlink: 8640kbps (0xFE)
0111 .... = Residual Bit Error Rate: 1e-5 (0x07)
.... 0100 = SDU Error Ratio: 1e-4 (0x04)
0000 00.. = Transfer Delay: Reserved (0x00)
.... ..00 = Traffic Handling Priority: Reserved (0x00)
Guaranteed Bit Rate for Uplink: 0kbps (0xFF)
Guaranteed Bit Rate for Downlink: 0kbps (0xFF)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signalling traffic
(0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
-----------------Primitive Code--------------------000000 32 11 00 57 A8 A8 02 B6 05 66 00 00 01 80 08
000010 0E 02 10 04 02 D7 2D 11 2E FA C5 02 7F 2E FA
000020 03 80 00 06 F1 21 0A 0C 00 1C 84 00 14 80 80
000030 10 04 00 00 10 81 06 00 00 00 00 83 06 00 00
000040 00 85 00 04 DA F8 54 05 85 00 04 DA F8 54 05
000050 00 0D 02 23 92 1F 93 91 96 FE 74 00 FF FF 00

FE
C5
21
00
87

2..W.....f......
......-.........
.....!.........!
................
......T......T..
...#......t....

/******************No.:14******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
14
2013-05-18 11:03:01.270 RANAP SEND
N_DataReqEvent RAB ASSIGNMENT R
EQUEST 404725200000155 918547198071
7-65535-255
RANAPID:
1700-GMM Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)
Procedure Code: id-RAB-Assignment(0x00)

00.. .... = Criticality: reject(0x00)


Number of Octets in PDU: 0x33
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x01
RAB SetupOrModifyList IE
id-RAB-SetupOrModifyList: 0x36
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x2C
Number of RAB-SetupOrModifyItem: 0x01
1. RAB-SetupOrModifyList
Number IEs in Item: 0x01
RAB SetupOrModifyItem IE
id-RAB-SetupOrModifyItem: 0x35
00.. .... = Criticality: reject(0x00)
RAB-SetupOrModifyItemFirst
Number of Octets in IE: 0x21
0... .... = IE Extension: no present(0x00)
.0.. .... = NAS-SynchronisationIndicator: no present(0x00)
..1. .... = RAB-Parameters: present(0x01)
...1 .... = UserPlaneInformation: present(0x01)
.... 1... = TransportLayerInformation: present(0x01)
.... .1.. = Service-Handover: present(0x01)
.... ..0. = ProtocolExtensionContainer: no present(0x00)
.... ...0 0000 101. = RAB ID: 0x05
RAB-Parameters
.... ...0 = IE Extension: no present(0x00)
0... .... = RAB-Parameter-GuaranteedBitrateList: no pres
ent(0x00)
.0.. .... = TransferDelay: no present(0x00)
..0. .... = TrafficHandlingPriority: no present(0x00)
...1 .... = AllocationOrRetentionPriority: present(0x01)
.... 0... = SourceStatisticsDescriptor: no present(0x00)
.... .1.. = RelocationRequirement: present(0x01)
.... ..0. = ProtocolExtensionContainer: no present(0x00)
.... ...0 11.. .... = TrafficClass: background(0x03)
..01 1... = RAB-AsymmetryIndicator: asymmetric-bidirecti
onal(0x03)
RAB-Parameter-MaxBitrateList
.... .1.. = Number of MaxBitrate: 0x02
1. MaxBitrate: 8640000
2. MaxBitrate: 1984000
1... .... = DeliveryOrder: delivery-order-not-requested(
0x01)
MaxSDU-Size: 11600
0000 1000 0000 0110 0000 1000 1... .... = SDU-Parameters
000. .... = Number of SDU-Parameters: 0x01
...0 1000 0000 0110 0000 1000 1... .... = 1. SDU-Par
ameters
...0 .... = IE Extension: no present(0x00)
.... 1... = SDU-ErrorRatio: present(0x01)
.... .0.. = SDU-FormatInformationParameters: no
present(0x00)
.... ..0. = ProtocolExtensionContainer: no prese
nt(0x00)
.... ...0 0000 011. = SDU-ErrorRatio
.... ...0 = IE Extension: no present(0x00)
0000 .... = mantissa: 0x01
.... 011. = exponent: 0x04
.... ...0 0000 100. = ResidualBitErrorRatio

.... ...0 = IE Extension: no present(0x00)


0000 .... = mantissa: 0x01
.... 100. = exponent: 0x05
.... ...0 1... .... = DeliveryOfErroneousSDU: no
(0x01)
.001 0001 11.. .... = AllocationOrRetentionPriority
.0.. .... = IE Extension: no present(0x00)
..0. .... = ProtocolExtensionContainer: no present(0
x00)
...1 000. = PriorityLevel: 0x08
.... ...1 = Pre-emptionCapability: may-trigger-pre-e
mption(0x01)
1... .... = Pre-emptionVulnerability: pre-emptable(0
x01)
.1.. .... = QueuingAllowed: queueing-allowed(0x01)
..01 .... = RelocationRequirement: none(0x01)
.... 0000 0000 0000 0000 0001 = UserPlaneInformation
.... 0... = IE Extension: no present(0x00)
.... .0.. = ProtocolExtensionContainer: no present(0x00)
.... ..00 = UserPlaneMode: transparent-mode(0x00)
UP-ModeVersions: 00 01 (Hex)
TransportLayerInformation
0... .... = IE Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
TransportLayerAddress: 0A 2F 6E 68 (Hex)
IuTransportAssociation
00.. .... = choice index: GTP-TEI(0x00)
IuTransportAssociation: 8F 58 00 54 (Hex)
000. .... = Service-Handover: handover-to-GSM-should-be-perf
ormed(0x00)
01.. .... = Criticality: ignore(0x01)
RAB-SetupOrModifyItemSecond
Number of Octets in IE: 0x02
0... .... = IE Extension: no present(0x00)
.1.. .... = PDP-TypeInformation: present(0x01)
..1. .... = DataVolumeReportingIndication: present(0x01)
...0 .... = DL-GTP-PDU-SequenceNumber: no present(0x00)
.... 0... = UL-GTP-PDU-SequenceNumber: no present(0x00)
.... .0.. = DL-N-PDU-SequenceNumber: no present(0x00)
.... ..0. = UL-N-PDU-SequenceNumber: no present(0x00)
.... ...0 = ProtocolExtensionContainer: no present(0x00)
0001 1... = PDP-TypeInformation
0... .... = Number of PDP-Type: 0x01
.001 1... = 1. PDP-Type: ipv4(0x03)
.... .0.. = DataVolumeReportingIndication: do-report(0x00)
-----------------Primitive Code--------------------000000 00 00 00 33 00 00 01 00 36 40 2C 00 00 01 00 35
000010 00 21 3C 0A 14 DE 83 D5 FF 80 1E 45 FF 80 2D 50
000020 08 06 08 91 D0 00 01 03 E0 0A 2F 6E 68 00 8F 58
000030 00 54 00 40 02 60 18

...3....6@,....5
.!<........E..-P
........../nh..X
.T.@.`.

/******************No.:15******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
15
2013-05-18 11:03:02.070 RANAP RECEIVE N_DataIndEvent RAB ASSIGNMENT R
ESPONSE 404725200000155 918547198071
7-65535-255
RANAPID:
1700-GMM Context Id:0
-----------------Detailed Decode--------------------

Radio Access Network Application Part


0... .... = RANAP-PDU Extension: no present(0x00)
.11. .... = RANAP-PDU Index: outcome(0x03)
Procedure Code: id-RAB-Assignment(0x00)
00.. .... = Criticality: reject(0x00)
Number of Octets in PDU: 0x1A
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x01
RAB SetupOrModifiedList IE
id-RAB-SetupOrModifiedList: 0x34
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x13
Number of RAB-SetupOrModifiedList: 0x01
1. RAB-SetupOrModifiedList
Number IEs in Item: 0x01
RAB SetupOrModifiedItem IE
id-RAB-SetupOrModifiedItem: 0x33
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x0C
0... .... = IE Extension: no present(0x00)
.1.. .... = TransportLayerAddress: present(0x01)
..1. .... = IuTransportAssociation: present(0x01)
...0 .... = dl-dataVolumes: no present(0x00)
.... 0... = Protocol Extension: no present(0x00)
.... .000 0010 1... = RAB ID: 0x05
TransportLayerAddress
TransportLayerAddress: 0A 2F 78 E1 (Hex)
IuTransportAssociation
00.. .... = choice index: GTP-TEI(0x00)
IuTransportAssociation: 00 1B 00 17 (Hex)
-----------------Primitive Code--------------------000000 60 00 00 1A 00 00 01 00 34 40 13 00 00 01 00 33
000010 40 0C 60 28 7C 0A 2F 78 E1 00 00 1B 00 17

`.......4@.....3
@.`(|./x......

/******************No.:16******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
16
2013-05-18 11:03:02.070 SM
SEND
ACTIVATE PDP CONTEXT ACCEPT
404725200000155 918547198071
7-65535-255
PDP Context Id:2
829582769
-----------------Detailed Decode-------------------Activate PDP Context Accept
1000 .... = Transaction identifier: 0x08
.... 1010 = Protocol discriminator: GPRS session management messages(0x0A)
Message type: Activate PDP Context Accept (0x42)
Negotiated LLC SAPI: 0x03
0000 .... = Spare: 0
.... 0011 = Negotiated LLC SAPI: 0x03
Negotiated QoS (R5)
Length of Quality of Service: 12 (Bytes)
00.. .... = Spare: 0
..10 0... = Delay Class: Delay class 4(best effort) (0x04)
.... .011 = Reliability Class: Unacknowledged GTP and LLC; Acknowledged
RLC, Protected data (0x03)
1001 .... = Peak Throughput: Up to 256 000 octet/s (0x09)
.... 0... = Spare: 0
.... .010 = Precedence Class: Normal priority (0x02)

000.
...1
100.
...1
....

....
1111
....
0...
.011

=
=
=
=
=

Spare: 0
Mean Throughput: Best effort (0x1F)
Traffic Class: Background class (0x04)
Delivery Order: Without delivery order ('no') (0x02)
Delivery of Erroneous SDUs: Erroneous SDUs are not delivered

('no')
Maximum SDU Size: 1450octets (0x91)
Maximum Bit Rate for Uplink: 1984kbps (0x96)
Maximum Bit Rate for Downlink: 8640kbps (0xFE)
0111 .... = Residual Bit Error Rate: 1e-5 (0x07)
.... 0100 = SDU Error Ratio: 1e-4 (0x04)
0000 00.. = Transfer Delay: Reserved (0x00)
.... ..00 = Traffic Handling Priority: Reserved (0x00)
Guaranteed Bit Rate for Uplink: 0kbps (0xFF)
Guaranteed Bit Rate for Downlink: 0kbps (0xFF)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signalling traffic
(0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
0000 .... = Spare Half Octet: 0x00
.... 0010 = Radio Priority: priority level 2 (0x02)
PDP Address (IPv4 address: 10.12.0.28)
Length of PDP Address Contents: 6 (Bytes)
0000 .... = Spare: 0x00
.... 0001 = PDP Type Organisation: IETF allocated address (0x01)
PDP Type Number Value: IPv4 (0x21)
IPv4 address: 10.12.0.28
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00
.... .000 = Configuration Protocol: 0
Protocol Identifier: IPCP (0x8021)
Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
-----------------Primitive Code--------------------000000 8A 42 03 0C 23 92 1F 93 91 96 FE 74 00 FF FF 00
000010 02 2B 06 01 21 0A 0C 00 1C 27 14 80 80 21 10 04
000020 00 00 10 81 06 00 00 00 00 83 06 00 00 00 00

.B..#......t....
.+..!....'...!..
...............

/******************No.:17******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
17
2013-05-18 11:03:02.070 RANAP SEND
N_DataReqEvent DIRECT TRANSFER
404725200000155 918547198071
7-65535-255
RANAPID:1700-GMM
Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)
Procedure Code: id-DirectTransfer(0x14)
01.. .... = Criticality: ignore(0x01)
Number of Octets in PDU: 0x3C
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x02
NAS PDU IE
id-NAS-PDU: 0x10

01.. .... = Criticality: ignore(0x01)


Number of Octets in IE: 0x30
NAS-PDU: 8A 42 03 0C 23 92 1F 93 91 96 ... (Hex)
Activate PDP Context Accept
1000 .... = Transaction identifier: 0x08
.... 1010 = Protocol discriminator: GPRS session management mess
ages(0x0A)
Message type: Activate PDP Context Accept (0x42)
Negotiated LLC SAPI: 0x03
0000 .... = Spare: 0
.... 0011 = Negotiated LLC SAPI: 0x03
Negotiated QoS (R5)
Length of Quality of Service: 12 (Bytes)
00.. .... = Spare: 0
..10 0... = Delay Class: Delay class 4(best effort) (0x04)
.... .011 = Reliability Class: Unacknowledged GTP and LLC; A
cknowledged RLC, Protected data (0x03)
1001 .... = Peak Throughput: Up to 256 000 octet/s (0x09)
.... 0... = Spare: 0
.... .010 = Precedence Class: Normal priority (0x02)
000. .... = Spare: 0
...1 1111 = Mean Throughput: Best effort (0x1F)
100. .... = Traffic Class: Background class (0x04)
...1 0... = Delivery Order: Without delivery order ('no') (0
x02)
.... .011 = Delivery of Erroneous SDUs: Erroneous SDUs are n
ot delivered ('no')
Maximum SDU Size: 1450octets (0x91)
Maximum Bit Rate for Uplink: 1984kbps (0x96)
Maximum Bit Rate for Downlink: 8640kbps (0xFE)
0111 .... = Residual Bit Error Rate: 1e-5 (0x07)
.... 0100 = SDU Error Ratio: 1e-4 (0x04)
0000 00.. = Transfer Delay: Reserved (0x00)
.... ..00 = Traffic Handling Priority: Reserved (0x00)
Guaranteed Bit Rate for Uplink: 0kbps (0xFF)
Guaranteed Bit Rate for Downlink: 0kbps (0xFF)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signall
ing traffic (0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
0000 .... = Spare Half Octet: 0x00
.... 0010 = Radio Priority: priority level 2 (0x02)
PDP Address (IPv4 address: 10.12.0.28)
Length of PDP Address Contents: 6 (Bytes)
0000 .... = Spare: 0x00
.... 0001 = PDP Type Organisation: IETF allocated address (0
x01)
PDP Type Number Value: IPv4 (0x21)
IPv4 address: 10.12.0.28
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes
)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00
.... .000 = Configuration Protocol: 0
Protocol Identifier: IPCP (0x8021)
Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
SAPI IE
id-SAPI: 0x3B

01.. .... = Criticality: ignore(0x01)


Number of Octets in IE: 0x01
00.. .... = SAPI: sapi-0(0x00)
-----------------Primitive Code--------------------000000 00 14 40 3C 00 00 02 00 10 40 30 2F 8A 42 03
000010 23 92 1F 93 91 96 FE 74 00 FF FF 00 02 2B 06
000020 21 0A 0C 00 1C 27 14 80 80 21 10 04 00 00 10
000030 06 00 00 00 00 83 06 00 00 00 00 00 3B 40 01

0C
01
81
00

..@<.....@0/.B..
#......t.....+..
!....'...!......
............;@..

/******************No.:18******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
18
2013-05-18 11:03:06.510 RANAP RECEIVE N_DataIndEvent DIRECT TRANSFER
404725200000155 918547198071
7-65535-255
RANAPID:1700-GMM
Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)
Procedure Code: id-DirectTransfer(0x14)
01.. .... = Criticality: ignore(0x01)
Number of Octets in PDU: 0x26
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x04
NAS PDU IE
id-NAS-PDU: 0x10
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x04
NAS-PDU: 0A 46 24 (Hex)
Deactivate PDP Context Request
0000 .... = Transaction identifier: 0x00
.... 1010 = Protocol discriminator: GPRS session management mess
ages(0x0A)
Message type: Deactivate PDP Context Request (0x46)
SM Cause: Regular deactivation (0x24)
LAI IE
id-LAI: 0x0F
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x06
0... .... = ProtocolExtensionContainer: no present(0x00)
PLMN-ID: 04 F4 27 (Hex)
LAC: 1B D6 (Hex)
RAC IE
id-RAC: 0x37
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x01
RAC: 26 (Hex)
SAI IE
id-SAI: 0x3A
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x08
0... .... = ProtocolExtensionContainer: no present(0x00)
PLMN-ID: 04 F4 27 (Hex)
LAC: 1B D6 (Hex)
SAC: 27 07 (Hex)
-----------------Primitive Code---------------------

000000 00 14 40 26 00 00 04 00 10 40 04 03 0A 46 24 00
000010 0F 40 06 00 04 F4 27 1B D6 00 37 40 01 26 00 3A
000020 40 08 00 04 F4 27 1B D6 27 07

..@&.....@...F$.
.@....'...7@.&.:
@....'..'.

/******************No.:19******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
19
2013-05-18 11:03:06.510 SM
RECEIVE DEACTIVATE PDP CONTEXT REQUEST
404725200000155 918547198071
7-65535-255
PDP Context Id:2
829582769
-----------------Detailed Decode-------------------Deactivate PDP Context Request
0000 .... = Transaction identifier: 0x00
.... 1010 = Protocol discriminator: GPRS session management messages(0x0A)
Message type: Deactivate PDP Context Request (0x46)
SM Cause: Regular deactivation (0x24)
-----------------Primitive Code--------------------000000 0A 46 24

.F$

/******************No.:20******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
20
2013-05-18 11:03:06.510 GTP
SEND
DELETE PDP CONTEXT REQUEST
404725200000155 918547198071
7-65535-255
218.248.72.52 218.248.84.5
GTPC Context Id:FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
-----------------Detailed Decode-------------------Delete PDP Context Request
GTP Header
001. .... = GTP Version: 1
...1 .... = Protocol Type (PT) : GTP(0x01)
.... 0... = Spare: 0
.... .0.. = Extension Header Flag (E): 0
.... ..1. = Sequence Number Flag (S) : 1
.... ...0 = N-PDU Number Flag (PN): 0
GTP Message Type: Delete PDP Context Request(0x14)
Length: 8 (Bytes)
Tunnel Endpoint Identifier(TEID): 0x2EFAC502
Sequence Number: 0x0567
N-PDU Number: 0x00
Next Extension Header Type: No more extension headers(0x00)
Teardown Ind
1111 111. = Spare: 0x7F
.... ...1 = Teardown Ind: Yes (0x01)
NSAPI: 0x05
0000 .... = Spare: 0x00
.... 0101 = NSAPI: 0x05
-----------------Primitive Code--------------------000000 32 14 00 08 2E FA C5 02 05 67 00 00 13 FF 14 05

2........g......

/******************No.:21******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
21
2013-05-18 11:03:06.540 GTP
RECEIVE DELETE PDP CONTEXT RESPONSE
404725200000155 918547198071
7-65535-255
218.248.84.5
218.248.72.52
GTPC Context Id:FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

-----------------Detailed Decode-------------------Delete PDP Context Response


GTP Header
001. .... = GTP Version: 1
...1 .... = Protocol Type (PT) : GTP(0x01)
.... 0... = Spare: 0
.... .0.. = Extension Header Flag (E): 0
.... ..1. = Sequence Number Flag (S) : 1
.... ...0 = N-PDU Number Flag (PN): 0
GTP Message Type: Delete PDP Context Response(0x15)
Length: 6 (Bytes)
Tunnel Endpoint Identifier(TEID): 0xA8A802B6
Sequence Number: 0x0567
N-PDU Number: 0x00
Next Extension Header Type: No more extension headers(0x00)
Cause: Request accepted (0x80)
-----------------Primitive Code--------------------000000 32 15 00 06 A8 A8 02 B6 05 67 00 00 01 80

2........g....

/******************No.:22******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
22
2013-05-18 11:03:06.540 SM
SEND
DEACTIVATE PDP CONTEXT ACCEPT
404725200000155 918547198071
7-65535-255
PDP Context Id:2
829582769
-----------------Detailed Decode-------------------Deactivate PDP Context Accept
1000 .... = Transaction identifier: 0x08
.... 1010 = Protocol discriminator: GPRS session management messages(0x0A)
Message type: Deactivate PDP Context Accept (0x47)
-----------------Primitive Code--------------------000000 8A 47

.G

/******************No.:23******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
23
2013-05-18 11:03:06.540 RANAP SEND
N_DataReqEvent DIRECT TRANSFER
404725200000155 918547198071
7-65535-255
RANAPID:1700-GMM
Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)
Procedure Code: id-DirectTransfer(0x14)
01.. .... = Criticality: ignore(0x01)
Number of Octets in PDU: 0x0F
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x02
NAS PDU IE
id-NAS-PDU: 0x10
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x03
NAS-PDU: 8A 47 (Hex)
Deactivate PDP Context Accept
1000 .... = Transaction identifier: 0x08

.... 1010 = Protocol discriminator: GPRS session management mess


ages(0x0A)
Message type: Deactivate PDP Context Accept (0x47)
SAPI IE
id-SAPI: 0x3B
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x01
01.. .... = SAPI: sapi-3(0x01)
-----------------Primitive Code--------------------000000 00 14 40 0F 00 00 02 00 10 40 03 02 8A 47 00 3B
000010 40 01 40

..@......@...G.;
@.@

/******************No.:24******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
24
2013-05-18 11:03:06.540 RANAP SEND
N_DataReqEvent RAB ASSIGNMENT R
EQUEST 404725200000155 918547198071
7-65535-255
RANAPID:
1700-GMM Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)
Procedure Code: id-RAB-Assignment(0x00)
00.. .... = Criticality: reject(0x00)
Number of Octets in PDU: 0x11
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x01
RAB Release List IE
id-RAB-ReleaseList: 0x29
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x0A
Number of RAB-ReleaseItem: 0x01
1. RAB-ReleaseItem
Number IEs in Item: 0x01
RAB Release Item IE
id-RAB-ReleaseItem: 0x28
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x03
0... .... = IE Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
..00 0001 01.. .... = RAB ID: 0x05
..00 1000 10.. .... = Cause
..00 10.. = cause choice: CauseNAS(0x02)
.... ..00 10.. .... = cause value: normal-release(0x53)
-----------------Primitive Code--------------------000000 00 00 00 11 00 00 01 00 29 40 0A 00 00 01 00 28
000010 40 03 01 48 80

........)@.....(
@..H.

/******************No.:25******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
25
2013-05-18 11:03:07.470 RANAP RECEIVE N_DataIndEvent RAB ASSIGNMENT R
ESPONSE 404725200000155 918547198071
7-65535-255
RANAPID:
1700-GMM Context Id:0
-----------------Detailed Decode--------------------

Radio Access Network Application Part


0... .... = RANAP-PDU Extension: no present(0x00)
.11. .... = RANAP-PDU Index: outcome(0x03)
Procedure Code: id-RAB-Assignment(0x00)
00.. .... = Criticality: reject(0x00)
Number of Octets in PDU: 0x12
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x01
RAB Released List IE
id-RAB-ReleasedList: 0x2B
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x0B
Number of RAB-ReleasedItemIEs: 0x01
1. RAB-ReleasedItemIEs
Number IEs in Item: 0x01
RAB Released Item IE
id-RAB-ReleasedItem: 0x2A
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x04
0... .... = IE Extension: no present(0x00)
.1.. .... = DataVolumeList: present(0x01)
..0. .... = DL-GTP-PDU-SequenceNumber: no present(0x00)
...0 .... = UL-GTP-PDU-SequenceNumber: no present(0x00)
.... 0... = Protocol Extension: no present(0x00)
.... .000 0010 1... = RAB ID: 0x05
.... .0.. = Number of DataVolumeList: 0x01
.... .000 0000 0000 0000 0000 = dl-UnsuccessfullyTransmittedData
Volume
.... ..00 0000 0000 0000 0000 = 1. DataVolumeList
.... ..0. = Protocol Extension: no present(0x00)
.... ...0 = DataVolumeReference: no present(0x00)
0... .... = ProtocolExtensionContainer: no present(0x00)
Unsuccessfully Transmitted Data Volume: 0x00
-----------------Primitive Code--------------------000000 60 00 00 12 00 00 01 00 2B 40 0B 00 00 01 00 2A
000010 40 04 40 28 00 00

`.......+@.....*
@.@(..

/******************No.:26******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
26
2013-05-18 11:03:07.480 RANAP SEND
N_DataReqEvent IU RELEASE COMMA
ND
404725200000155 918547198071
7-65535-255
RANAPID:
1700-GMM Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.00. .... = RANAP-PDU Index: initiatingMessage(0x00)
Procedure Code: id-Iu-Release(0x01)
00.. .... = Criticality: reject(0x00)
Number of Octets in PDU: 0x08
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x01
Cause IE
id-Cause: 0x04
01.. .... = Criticality: ignore(0x01)
Number of Octets in IE: 0x01

0010 .... = cause choice: CauseNAS(0x02)


.... 0010 = cause value: normal-release(0x53)
-----------------Primitive Code--------------------000000 00 01 00 08 00 00 01 00 04 40 01 22

.........@."

/******************No.:27******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
27
2013-05-18 11:03:07.510 RANAP RECEIVE N_DataIndEvent IU RELEASE COMPL
ETE
404725200000155 918547198071
7-65535-255
RANAPID:
1700-GMM Context Id:0
-----------------Detailed Decode-------------------Radio Access Network Application Part
0... .... = RANAP-PDU Extension: no present(0x00)
.01. .... = RANAP-PDU Index: successfulOutcome(0x01)
Procedure Code: id-Iu-Release(0x01)
00.. .... = Criticality: reject(0x00)
Number of Octets in PDU: 0x03
0... .... = Message Extension: no present(0x00)
.0.. .... = ProtocolExtensionContainer: no present(0x00)
Number IEs in PDU: 0x00
-----------------Primitive Code--------------------000000 20 01 00 03 00 00 00

......

/******************No.:28******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
28
2013-05-18 11:03:07.510 RANAP SEND
N_DisconnectReqEvent
404725200000155 918547198071
7-65535-255
RANAPID:1700-GMM
Context Id:0
-----------------Detailed Decode------------------------------------Primitive Code---------------------

Das könnte Ihnen auch gefallen