SM message group

ACTIVATE AA PDP CONTEXT ACCEPT
ACTIVATE AA PDP CONTEXT REJECT
ACTIVATE AA PDP CONTEXT REQUEST
ACTIVATE PDP CONTEXT ACCEPT
ACTIVATE PDP CONTEXT REJECT
ACTIVATE PDP CONTEXT REQUEST
ACTIVATE SECONDARY PDP CONTEXT ACCEPT
ACTIVATE SECONDARY PDP CONTEXT REJECT
ACTIVATE SECONDARY PDP CONTEXT REQUEST
DEACTIVATE AA PDP CONTEXT ACCEPT
DEACTIVATE AA PDP CONTEXT REQUEST
DEACTIVATE PDP CONTEXT ACCEPT
DEACTIVATE PDP CONTEXT REQUEST
MODIFY PDP CONTEXT ACCEPT
MODIFY PDP CONTEXT REJECT
MODIFY PDP CONTEXT REQUEST
REQUEST PDP CONTEXT ACTIVATION
REQUEST PDP CONTEXT ACTIVATION REJECT
SM STATUS

[1] NetHawk GSM Analyser v7.9 HELP
[2] GSM Layer 3 (GSM L3) 3GPP TS 24.008 V.4.8.0 (2002-09) , 3GPP TS 44.018 V4.11.0

070619-draft

GMM message group

ATTACH ACCEPT
ATTACH COMPLETE
ATTACH REJECT
ATTACH REQUEST
AUTHENTICATION AND CIPHERING FAILURE
AUTHENTICATION AND CIPHERING REJECT
AUTHENTICATION AND CIPHERING REQUEST
AUTHENTICATION AND CIPHERING RESPONSE
DETACH ACCEPT
DETACH REQUEST
GMM INFORMATION
GMM STATUS
IDENTITY REQUEST
IDENTITY RESPONSE
P-TMSI REALLOCATION COMMAND
P-TMSI REALLOCATION COMPLETE
ROUTING AREA UPDATE ACCEPT
ROUTING AREA UPDATE COMPLETE
ROUTING AREA UPDATE REJECT
ROUTING AREA UPDATE REQUEST

[1] NetHawk GSM Analyser v7.9 HELP
[2] GSM Layer 3 (GSM L3) 3GPP TS 24.008 V.4.8.0 (2002-09) , 3GPP TS 44.018 V4.11.0

070619-draft

CC message group

ALERTING
CALL CONFIRMED
CALL PROCEEDING
CC-ESTABLISHMENT
CC-ESTABLISHMENT CONFIRMED
CONGESTION CONTROL
CONNECT
CONNECT ACKNOWLEDGE
DISCONNECT
EMERGENCY SETUP
FACILITY
HOLD
HOLD ACKNOWLEDGE
HOLD REJECT
MODIFY
MODIFY COMPLETE
MODIFY REJECT
NOTIFY
PROGRESS
RECALL
RELEASE
RELEASE COMPLETE
RETRIEVE
RETRIEVE ACKNOWLEDGE
RETRIEVE REJECT
SETUP
START CC
START DTMF
START DTMF ACKNOWLEDGE
START DTMF REJECT
STATUS
STATUS ENQUIRY
STOP DTMF
STOP DTMF ACKNOWLEDGE
USER INFORMATION

Ref:
[1] NetHawk GSM Analyser v7.9 HELP
[2] GSM Layer 3 (GSM L3) 3GPP TS 24.008 V.4.8.0 (2002-09) , 3GPP TS 44.018 V4.11.0

070619-draft

MM message group

ABORT
AUTHENTICATION FAILURE
AUTHENTICATION REJECT
AUTHENTICATION REQUEST
AUTHENTICATION RESPONSE
CM RE-ESTABLISHMENT REQUEST
CM SERVICE ABORT
CM SERVICE ACCEPT
CM SERVICE PROMPT
CM SERVICE REJECT
CM SERVICE REQUEST
IDENTITY REQUEST
IDENTITY RESPONSE
IMSI DETACH INDICATION
LOCATION UPDATING ACCEPTED
LOCATION UPDATING REJECT
LOCATION UPDATING REQUEST
MM INFORMATION
MM NULL
MM-STATUS
NOTIFICATION RESPONSE
TMSI REALLOCATION COMMAND
TMSI REALLOCATION COMPLETE

Ref:
[1] NetHawk GSM Analyser v7.9 HELP
[2] GSM Layer 3 (GSM L3) 3GPP TS 24.008 V.4.8.0 (2002-09) , 3GPP TS 44.018 V4.11.0.

070619r1-draft

RR message: MEASUREMENT REPORT

Interface:
GSM Um [MS --> BTS];
GSM Abis [BTS --> BSC]

Conn:1 Line:1 TS:30 Subch:0 164 10:58:50.767533
--------E1:
VALID FRAME
00 03 03 08 28 01 0A 1B 3E 19 0A 3F 3F 00 00 02 FF FF 22 00 00 04 0F 0A
98 00 0B 00 12 06 15 3F 3F 01 C0 00 00 00 00 00 00 00 00 00 00 00 00
--------LAPD:
UNNUMBERED INFO
SAPI: 0 (0h) TEI: 1 (1h) C/R: 0 P/F: 0
08 28 01 0A 1B 3E 19 0A 3F 3F 00 00 02 FF FF 22 00 00 04 0F 0A 98 00 0B
00 12 06 15 3F 3F 01 C0 00 00 00 00 00 00 00 00 00 00 00 00
--------BTSM:
MEAS. RES. (DCh) T=0
Channel Nr
- full rate TCH
- timeslot : 2
Meas.Res. Nr
- value : 62 (3eh)
Uplink Meas.
- length : 10 (ah)
- downlink DTX not used
- rxlev_full : 63 (> -48 dBm)
- rxlev_sub : 63 (> -48 dBm)
- rxqual_full : 0
- rxqual_sub : 0
- suppl. info : 0002FFFF220000
BS Power
- Fast Power Control not in use
- power control level : pn 30 db
L1 Info
- MS power control level : 19 (13h)
- Fast Power Control not in use
- actual TA : 0 (00h) (0 km) <- 將MS的TA數值送給BSC。
L3 Info
- Length indicator: 18 (0012h)
- Link layer serv. data unit
06 15 3F 3F 01 C0 00 00 00 00 00 00 00 00 00 00 00 00
--------RR:
MEASUREMENT REPORT (RR)
Skip Indicator: 00
RR management Protocol Discriminator: 06
Measurement Results:
- BA-Used: 0
- DTX Used: 0 DTX was not used
- Full-Serving-Cell:
- RXLEV: 63 (greater than -48 dBm + SCALE)
- _3G-BA-Used: 00
- MEAS-Valid: 0 The measurement results are valid
- Sub-Serving-Cell:
- RXLEV: 63 (greater than -48 dBm + SCALE)
- RXQUAL-Full-Serving-Cell: 00
- RXQUAL-Sub-Serving-Cell: 00
- NO-NCell-M:
Neighbour cell information not available for serving cell
[EOM]

070617r1版本

Call Trace in Abis

[前言]
用戶MS建立一通呼叫或使用某服務所產生的信令message之間的關連性有很多是非常隱微的，無法從信令message本身的名稱看出來，或是由IMSI/TMSI/P-TMSI等ID來辨識，因此如果沒有一個非常聰明的分析工具，工程師往往感到很頭痛，不知message之間如何由時間上與邏輯性來串聯起來，針對一個用戶的MS需求來分析所有的信令。

[Abis]

Scenario 1:MS發起的BTSM: P-Channel Required
[BTS --> BSC]
Conn:2 Line:1 TS:30 Subch:0 745 10:49:02.0835486
--------E1
VALID FRAME: 00 03 76 46 20 63 01 88 13 7A F1 D1 11 00
--------LAPD:
INFO
SAPI: 0 (0h) TEI: 1 (1h) C/R: 0 P/F: 0
N(R): 23H N(S): 3BH: 20 63 01 88 13 7A F1 D1 11 00
--------BTSM:
P-CHANNEL REQUIRED (GPRS) T=0
Channel Nr
- uplink CCCH (RACH)
- timeslot : 0
Req. Ref
- Est. cause : one phase packet access <- 理由
- used
- random reference : 2 (2h) <- 隨機碼
- T1' : 30 (1eh) <- 參數1
- T2 : 17 (11h) <- 參數2
- T3 : 14 (eh) <- 參數3
- Frame number : 39641 <- 參數4
Access Delay
- value : 0 (00h)
[EOM]

[BTS <-- BSC]
Conn:2 Line:1 TS:30 Subch:0 746 10:49:02.0885487
--------E1:
VALID FRAME: 00 03 01 78
--------LAPD:
RECEIVER READY
SAPI: 0 (0h) TEI: 1 (1h) C/R: 0 P/F: 0
N(R): 3CH
[EOM]

[BTS <-- BSC]
Conn:2 Line:1 TS:30 Subch:0 752 10:49:02.1405491
--------E1:
VALID FRAME
02 03 46 78 20 60 01 90 2B 17 2D 06 3F 10 0A 00 78 7A F1 D1 00 00 C9 08
00 28 2B 2B 2B 2B 2B 2B 2B FC 00 04
--------LAPD:
INFO
SAPI: 0 (0h) TEI: 1 (1h) C/R: 1 P/F: 0
N(R): 3CH N(S): 23H
20 60 01 90 2B 17 2D 06 3F 10 0A 00 78 7A F1 D1 00 00 C9 08 00 28 2B 2B
2B 2B 2B 2B 2B FC 00 04
--------BTSM:
P-IMM ASSIGN CCCH COMMAND (GPRS) T=0
Channel Nr
- downlink CCCH (PCH + AGCH)
- timeslot : 0
Full Imm. Ass. Info
- value (hex) : 2D 06 3F 10 0A 00 78
7A F1 D1 00 00 C9 08 00 28 2B 2B 2B
2B 2B 2B 2B
Message Sequence Id
- MSI value: 4 (4h)
--------RR:
IMMEDIATE ASSIGNMENT (RR)
L2 Pseudo Length: 0B
Skip Indicator: 00
RR management Protocol Discriminator: 06
Dedicated mode or TBF:
- TMA: No meaning
- down-link: No meaning
- T/D: 1 this message assigns a Temporary Block Flow (TBF)
Page Mode:
- PM: Normal paging
Packet Channel Description:
- Channel type: 01
- TN: 02
- TSC: 00
- ARFCN: 00 78
Request Reference:
- Est Cause: <- 理由(與P-Channel Required的理由相同)
One phase packet access with request for single timeslot uplink transmission; one PDCH is needed
- Random Reference: 2 (0x2) <- 隨機碼(與P-Channel Required的隨機碼相同)
- T1': 30 (0x1e) <- 參數1(與P-Channel Required的相同)
- T2: 17 (0x11) <- 參數2(與P-Channel Required的相同)
- T3: 14 (0xe) <- 參數3(與P-Channel Required的相同)
- Frame number : 39641 <- 參數4(與P-Channel Required的相同)
Timing advance value: 00
Mobile Allocation Length: 00
MA C: empty
IA Rest Octets:
- Packet Uplink Assignment:
- TFI Assignment: 04
- Polling: no action is required from MS
- USF: 04
- USF Granularity: 00
- Channel Coding Command: coding scheme 1, CS-1
- TLLI Block Channel Coding:
mobile station shall use CS-1 in GPRS TBF mode or MCS-1 in EGPRS TBF mode
- Gamma: GammaCH = 0 dB
- Timing Advance Index: 04
[EOM]

[BTS --> BSC]
Conn:2 Line:1 TS:30 Subch:0 753 10:49:02.1435492
--------E1:
VALID FRAME: 02 03 01 48
--------LAPD:
RECEIVER READY
SAPI: 0 (0h) TEI: 1 (1h) C/R: 1 P/F: 0
N(R): 24H
[EOM]

[BTS --> BSC]
Conn:2 Line:1 TS:30 Subch:0 765 10:49:02.2495499
--------E1:
VALID FRAME: 00 03 78 48 20 61 01 90 FC 00 04 08 F0 C8
--------LAPD:
INFO
SAPI: 0 (0h) TEI: 1 (1h) C/R: 0 P/F: 0
N(R): 24H N(S): 3CH: 20 61 01 90 FC 00 04 08 F0 C8
--------BTSM:
P-IMMEDIATE ASSIGN ACK (GPRS) T=0
Channel Nr
- downlink CCCH (PCH + AGCH)
- timeslot : 0
Message Sequence Id
- MSI value: 4 (4h)
Frame Number
- T1' : 30 (1eh)
- T2 : 8 (8h)
- T3 : 6 (6h)
- Frame number : 39684
[EOM]

070617r1版本