/******************No.

:1******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
1
2012-07-13 11:00:34.510 LLC
RECEIVE UI FRAME
41006050
7697197
2-65535-255
LLC Context Id:4294967295 tlli:0
x7D8EBC23 RAI:0x14F060031502
-----------------Detailed Decode-------------------LLC UI format
Address field
0... .... = PD : LLC(0x00)
.0.. .... = C/R : Command(MS->SGSN) : (0x00)
..00 .... = SPARE : 0x00
.... 0001 = SAPI : LLGMM(0x01)
Control field
110. .... = LLC UI format flag
...0 0... = SPARE : 0x00
.... .000 0000 00.. = N(U) : 0
.... ..0. = E : non-ciphered(0x00)
.... ...1 = PM : protected(0x01)
Information field
Attach Request
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management message
s (0x08)
Message type: Attach Request (0x01)
MS Network Capability
Ms Network Capability Length: 2 (Bytes)
1... .... = GPRS Encryption Algorithm GEA/1 : Available (0x01)
.1.. .... = SM Capabilities via Dedicated channels: Support (0x0
1)
..1. .... = SM Capabilities via GPRS Channels: Support (0x01)
...0 .... = UCS2 Support: ME has a preference for the default al
phabet over UCS2 (0x00)
.... 01.. = Supplementary Service Screening Indicator: capabilit
y of handling of ellipsis notation and phase 2 error handling (0x01)
.... ..0. = SoLSA Capability: not Support (0x00)
.... ...1 = Revision Level Indicator: supporting R99+ protocol (
0x01)
1... .... = BSS Packet Flow Procedure Feature Mode: Support (0x0
1)
.110 000. = GPRS Encryption Algorithm GEA/2-7 (0=notAvailable 1=
Available): 110000
.... ...0 = Location request Notification via PS Domain: not Sup
port (0x00)
0111 .... = GPRS Ciphering Key Sequence Number
0... .... = Spare: 0x00
.111 .... = GPRS Ciphering Key Sequence Number: 0x07
.... 0001 = Attach Type
.... 0... = No follow-on request pending (0x00)
.... .001 = GPRS attach (0x01)
DRX Parameter
Split Page Cycle value: 0x07
0000 .... = ENG CN Specific DRX Cycle Length: CN Specific DRX cy
cle length coefficient not specified by the MS (0x00)
.... 0... = Split Page Cycle on CCCH Flag: Split pg cycle on CCC
H is not supported by the mobile station (0x00)
.... .100 = Non-DRX Timer: max. 8 sec non-DRX mode after transfe
r state (0x04)
P-TMSI or IMSI

Length of mobile identity contents: 8 (Bytes)

0100 1... = odd/even indic: odd number of identity digits (0x01)
.... .001 = Type of identity: IMSI (0x01)
IMSI : 410060507697197
Old Routing Area Identification
MCC: 410
MNC: 06
LAC: 65534
RAC: 2
MS Radio Access Capability : 12 19 53 42 2A E5 7E F9 09 00 6A A4 D5
94 32 12 00 D5 40
Requested READY Timer
000. .... = Unit: value is incremented in multiples of 2 seconds
(0x00)
...1 0110 = Value: 0x16
FCS check : [correct]
-----------------Primitive Code--------------------000000 01 C0 01 08 01 02 E5 E0 71 07 04 08 49 01 60 50
000010 70 96 17 79 14 F0 60 FF FE 02 12 19 53 42 2A E5
000020 7E F9 09 00 6A A4 D5 94 32 12 00 D5 40 17 16 2B
000030 62 48

........q...I.`P
p..y..`.....SB*.
~...j...2...@..+
bH

/******************No.:2******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
2
2012-07-13 11:00:34.510 GMM
RECEIVE ATTACH REQUEST
41006050
7697197
2-65535-255
GMM Context Id:302
-----------------Detailed Decode-------------------Attach Request
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management messages (0x08)
Message type: Attach Request (0x01)
MS Network Capability
Ms Network Capability Length: 2 (Bytes)
1... .... = GPRS Encryption Algorithm GEA/1 : Available (0x01)
.1.. .... = SM Capabilities via Dedicated channels: Support (0x01)
..1. .... = SM Capabilities via GPRS Channels: Support (0x01)
...0 .... = UCS2 Support: ME has a preference for the default alphabet o
ver UCS2 (0x00)
.... 01.. = Supplementary Service Screening Indicator: capability of han
dling of ellipsis notation and phase 2 error handling (0x01)
.... ..0. = SoLSA Capability: not Support (0x00)
.... ...1 = Revision Level Indicator: supporting R99+ protocol (0x01)
1... .... = BSS Packet Flow Procedure Feature Mode: Support (0x01)
.110 000. = GPRS Encryption Algorithm GEA/2-7 (0=notAvailable 1=Availabl
e): 110000
.... ...0 = Location request Notification via PS Domain: not Support (0x
00)
0111 .... = GPRS Ciphering Key Sequence Number
0... .... = Spare: 0x00
.111 .... = GPRS Ciphering Key Sequence Number: 0x07
.... 0001 = Attach Type
.... 0... = No follow-on request pending (0x00)
.... .001 = GPRS attach (0x01)
DRX Parameter
Split Page Cycle value: 0x07
0000 .... = ENG CN Specific DRX Cycle Length: CN Specific DRX cycle leng
th coefficient not specified by the MS (0x00)

.... 0... = Split Page Cycle on CCCH Flag: Split pg cycle on CCCH is not
supported by the mobile station (0x00)
.... .100 = Non-DRX Timer: max. 8 sec non-DRX mode after transfer state
(0x04)
P-TMSI or IMSI
Length of mobile identity contents: 8 (Bytes)
0100 1... = odd/even indic: odd number of identity digits (0x01)
.... .001 = Type of identity: IMSI (0x01)
IMSI : 410060507697197
Old Routing Area Identification
MCC: 410
MNC: 06
LAC: 65534
RAC: 2
MS Radio Access Capability : 12 19 53 42 2A E5 7E F9 09 00 6A A4 D5 94 32 12
00 D5 40
Requested READY Timer
000. .... = Unit: value is incremented in multiples of 2 seconds (0x00)
...1 0110 = Value: 0x16
-----------------Primitive Code--------------------000000 08 01 02 E5 E0 71 07 04 08 49 01 60 50 70 96 17
000010 79 14 F0 60 FF FE 02 12 19 53 42 2A E5 7E F9 09
000020 00 6A A4 D5 94 32 12 00 D5 40 17 16

.....q...I.`Pp..
y..`.....SB*.~..
.j...2...@..

/******************No.:3******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
3
2012-07-13 11:00:34.510 MAP
SEND
MAP OPEN REQUEST
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_OpenReqEvent
DialogID: 0x0F06
InvokeID: 0x00
NetworkID: 0x01
Application context value: infoRetrieval(0x0E)
Application context version: version3(0x03)
servRef
module: 0x00
seqNo: 0x00000000
Destination address
1... .... = Reserved for national use: 0x01
.0.. .... = Routing indicator: Route on GT(0x00)
..01 00.. = Global title indicator: global title includes translation ty
pe, numbering plan, encoding scheme and nature of address indicator(0x04)
.... ..1. = SSN indicator: 0x01
.... ...0 = Point code indicator: 0x00
Signalling point code: FF FF FF (Hex)
Subsystem number: HLR (Home Location Register)(0x06)
Global Title 4
Translation type: 0x00
0111 .... = Numbering plan: ISDN/mobile numbering plan (Recommendati
on E.214)(0x07)
.... 0001 = Encoding Scheme: BCD, odd number of digits(0x01)
0... .... = free: 0x00
.000 0100 = Nature of Address Indicator: international number(0x04)
Global title address information: 923450507697197FFFFFFFFFFFFFFFFF
Reserved Bytes For Destination reference: 22 Bytes
Originating address flag: 0x01

Originating address
0... .... = Reserved for national use: 0x00
.0.. .... = Routing indicator: Route on GT(0x00)
..01 00.. = Global title indicator: global title includes translation ty
pe, numbering plan, encoding scheme and nature of address indicator(0x04)
.... ..1. = SSN indicator: 0x01
.... ...0 = Point code indicator: 0x00
Signalling point code: 00 00 00 (Hex)
Subsystem number: SGSN(MAP)(0x95)
Global Title 4
Translation type: 0x00
0001 .... = Numbering plan: ISDN/telephony numbering plan (Recommend
ations E.163 and E.164)(0x01)
.... 0010 = Encoding Scheme: BCD, even number of digits(0x02)
0... .... = free: 0x00
.000 0100 = Nature of Address Indicator: international number(0x04)
Global title address information: 923455000022FFFFFFFFFFFFFFFFFFFF
Reserved Bytes For Originating reference: 22 Bytes
emptyNumFg: 0x00
CMPLevel: 0x00
Reserved Bytes For Specific information: 33 Bytes
-----------------Primitive Code--------------------000000 06 0F 00 01 0E 03 00 00 00 00 00 92 FF FF FF
000010 00 71 04 29 43 05 05 67 79 91 F7 FF FF FF FF
000020 FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00
000030 00 00 00 00 00 00 00 00 00 01 12 00 00 00 95
000040 12 04 29 43 55 00 00 22 FF FF FF FF FF FF FF
000050 FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00
000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000080 00 00 00 00 00 00 00 00 00 00 00

06
FF
00
00
FF
00
00
00

................
.q.)C..gy.......
................
................
..)CU.."........
................
................
................
...........

/******************No.:4******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
4
2012-07-13 11:00:34.510 MAP
SEND
Send Authentication Info Request
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_Send_Authentication_Info Request
DialogID: 0x0F06
InvokeID: 0x01
OpCode: 0x38
LinkIdFg: 0x00
LinkId: 0x00
Message Segment: 0x00
Last Message: 0x00
BuffLen: 0x0014
SendAuthenticationInfoArg
IMSI
Content: 410060507697197F
numberOfRequestedVectors
Content:0x05
segmentationProhibited
requestingNodeType
Content: SGSN(1)
-----------------Primitive Code--------------------000000 06 0F 01 38 00 00 00 00 14 00 30 12 80 08 14 00

...8......0.....

000010 06 05 67 79 91 F7 02 01 05 05 00 83 01 01

..gy..........

/******************No.:5******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
MSISDN Source Source Address Destination Address
Extend ID
5
2012-07-13 11:00:34.510 MAP
SEND
MAP DELIMITER REQUEST
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_DeliReqEvent
DialogID: 0x0F06
InvokeID: 0x00
-----------------Primitive Code--------------------000000 06 0F 00

IMSI

...

/******************No.:6******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
6
2012-07-13 11:00:34.590 MAP
RECEIVE MAP OPEN CONFIRM
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_OpenCnfEvent
DialogID: 0x0F06
InvokeID: 0x00
Result: Dialogue Accepted(0x00)
Application context name flag: 0x01
Application context value: infoRetrieval(0x0E)
Application context version: version3(0x03)
Reserved Bytes For Specific information: 33 Bytes
Responding address flag: 0x01
Responding address
1... .... = Reserved for national use: 0x01
.0.. .... = Routing indicator: Route on GT(0x00)
..01 00.. = Global title indicator: global title includes translation ty
pe, numbering plan, encoding scheme and nature of address indicator(0x04)
.... ..1. = SSN indicator: 0x01
.... ...0 = Point code indicator: 0x00
Signalling point code: FF FF FF (Hex)
Subsystem number: HLR (Home Location Register)(0x06)
Global Title 4
Translation type: 0x00
0111 .... = Numbering plan: ISDN/mobile numbering plan (Recommendati
on E.214)(0x07)
.... 0001 = Encoding Scheme: BCD, odd number of digits(0x01)
0... .... = free: 0x00
.000 0100 = Nature of Address Indicator: international number(0x04)
Global title address information: 923450507697197FFFFFFFFFFFFFFFFF
Reserved Bytes For Refuse-reason: 2 Bytes
Reserved Bytes For Provider error: 2 Bytes
-----------------Primitive Code--------------------000000 06 0F 00 00 01 0E 03 00 00 00 00 00 00 00 00
000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000020 00 00 00 00 00 00 00 00 01 92 FF FF FF 06 00
000030 04 29 43 05 05 67 79 91 F7 FF FF FF FF FF FF
000040 FF 00 00 00 00
/******************No.:7******************/

00
00
71
FF

................
................
...............q
.)C..gy.........
.....

---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
MSISDN Source Source Address Destination Address
Extend ID
7
2012-07-13 11:00:34.590 MAP
RECEIVE Send Authentication
e
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_Send_Authentication_Info Response
DialogID: 0x0F06
InvokeID: 0x01
OpCode: 0x38
Last Component: 0x01
Message Segment: 0x00
Last Message: 0x01
BuffLen: 0x0070
SendAuthenticationInfoRes
tripletList
AuthenticationTriplet
rand
Content: 3E 3D A0 CC 4D FC B7 E9 14 0D B5 E2 3A
x)
sres
Content: 27 3E 4D 6A (Hex)
kc
Content: ED A0 56 7D 9B 47 E0 00 (Hex)
AuthenticationTriplet
rand
Content: 79 B7 0B 55 C3 0D 3C D9 C0 27 B8 17 DD
x)
sres
Content: 7C E7 06 07 (Hex)
kc
Content: D7 65 50 BB 5E 31 C4 00 (Hex)
AuthenticationTriplet
rand
Content: E0 23 7B 52 0F DC 5F B8 63 26 61 34 B0
x)
sres
Content: 98 CE F5 54 (Hex)
kc
Content: D2 F5 C2 26 F4 78 0C 00 (Hex)
-----------------Primitive Code--------------------000000 06 0F 01 38 01 00 01 70 00 A3 6E A0 6C 30 22
000010 10 3E 3D A0 CC 4D FC B7 E9 14 0D B5 E2 3A D1
000020 79 04 04 27 3E 4D 6A 04 08 ED A0 56 7D 9B 47
000030 00 30 22 04 10 79 B7 0B 55 C3 0D 3C D9 C0 27
000040 17 DD 12 48 9A 04 04 7C E7 06 07 04 08 D7 65
000050 BB 5E 31 C4 00 30 22 04 10 E0 23 7B 52 0F DC
000060 B8 63 26 61 34 B0 AA 78 39 04 04 98 CE F5 54
000070 08 D2 F5 C2 26 F4 78 0C 00

04
3E
E0
B8
50
5F
04

IMSI
Info Respons

D1 3E 79 (He

12 48 9A (He

AA 78 39 (He

...8...p..n.l0".
.>=..M.......:.>
y..'>Mj....V}.G.
.0"..y..U..<..'.
...H...|......eP
.^1..0"...#{R.._
.c&a4..x9.....T.
....&.x..

/******************No.:8******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
8
2012-07-13 11:00:34.590 GMM
SEND
AUTHENTICATION and CIPHERING REQ
UEST
410060507697197
2-65535-255
GMM Cont
ext Id:302
-----------------Detailed Decode-------------------Authentication and Ciphering Request

0000 .... = Skip indicator: 0x00

.... 1000 = Protocol discriminator: GPRS mobility management messages (0x08)
Message type: Authentication and Ciphering Request (0x12)
0000 .... = IMEISV request: IMEISV not requested (0x00)
.... 0000 = Ciphering algorithm: ciphering not used (0x00)
0000 .... = A and C reference number: 0x00
.... 0000 = Force To Standby: Force to standby not indicated (0x00)
Authentication parameter RAND
Authentication parameter RAND Value: 3E 3D A0 CC 4D FC B7 E9 14 0D B5 E2
3A D1 3E 79 (Hex)
GPRS Ciphering Key Sequence Number
.... 0... = Spare: 0x00
.... .000 = GPRS Ciphering Key Sequence Number: 0x00
-----------------Primitive Code--------------------000000 08 12 00 00 21 3E 3D A0 CC 4D FC B7 E9 14 0D B5
000010 E2 3A D1 3E 79 80

....!>=..M......
.:.>y.

/******************No.:9******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
9
2012-07-13 11:00:34.590 LLC
SEND
UI FRAME
41006050
7697197
2-65535-255
LLC Context Id:302 tlli:0x7D8EBC
23 RAI:0x000000000000
-----------------Detailed Decode-------------------LLC UI format
Address field
0... .... = PD : LLC(0x00)
.1.. .... = C/R : Command(SGSN->MS) : (0x01)
..00 .... = SPARE : 0x00
.... 0001 = SAPI : LLGMM(0x01)
Control field
110. .... = LLC UI format flag
...0 0... = SPARE : 0x00
.... .000 0000 01.. = N(U) : 1
.... ..0. = E : non-ciphered(0x00)
.... ...1 = PM : protected(0x01)
Information field
Authentication and Ciphering Request
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management message
s (0x08)
Message type: Authentication and Ciphering Request (0x12)
0000 .... = IMEISV request: IMEISV not requested (0x00)
.... 0000 = Ciphering algorithm: ciphering not used (0x00)
0000 .... = A and C reference number: 0x00
.... 0000 = Force To Standby: Force to standby not indicated (0x00)
Authentication parameter RAND
Authentication parameter RAND Value: 3E 3D A0 CC 4D FC B7 E9 14
0D B5 E2 3A D1 3E 79 (Hex)
GPRS Ciphering Key Sequence Number
.... 0... = Spare: 0x00
.... .000 = GPRS Ciphering Key Sequence Number: 0x00
FCS check : [correct]
-----------------Primitive Code--------------------000000 41 C0 05 08 12 00 00 21 3E 3D A0 CC 4D FC B7 E9
000010 14 0D B5 E2 3A D1 3E 79 80 46 FF 27

A......!>=..M...
....:.>y.F.'

/******************No.:10******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
10
2012-07-13 11:00:35.330 LLC
RECEIVE UI FRAME
41006050
7697197
2-65535-255
LLC Context Id:302 tlli:0x7D8EBC
23 RAI:0x14F060031502
-----------------Detailed Decode-------------------LLC UI format
Address field
0... .... = PD : LLC(0x00)
.0.. .... = C/R : Command(MS->SGSN) : (0x00)
..00 .... = SPARE : 0x00
.... 0001 = SAPI : LLGMM(0x01)
Control field
110. .... = LLC UI format flag
...0 0... = SPARE : 0x00
.... .000 0000 01.. = N(U) : 1
.... ..0. = E : non-ciphered(0x00)
.... ...1 = PM : protected(0x01)
Information field
Authentication and Ciphering Response
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management message
s (0x08)
Message type: Authentication and Ciphering Response (0x13)
0000 .... = Spare Half Octet: 0x00
.... 0000 = A and C reference number: 0x00
Authentication Response parameter
Authentication Response parameter Value: 27 3E 4D 6A (Hex)
FCS check : [correct]
-----------------Primitive Code--------------------000000 01 C0 05 08 13 00 22 27 3E 4D 6A 73 88 05

......"'>Mjs..

/******************No.:11******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
11
2012-07-13 11:00:35.330 GMM
RECEIVE AUTHENTICATION and CIPHERING RES
PONSE
410060507697197
2-65535-255
GMM Cont
ext Id:302
-----------------Detailed Decode-------------------Authentication and Ciphering Response
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management messages (0x08)
Message type: Authentication and Ciphering Response (0x13)
0000 .... = Spare Half Octet: 0x00
.... 0000 = A and C reference number: 0x00
Authentication Response parameter
Authentication Response parameter Value: 27 3E 4D 6A (Hex)
-----------------Primitive Code--------------------000000 08 13 00 22 27 3E 4D 6A

..."'>Mj

/******************No.:12******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
MSISDN Source Source Address Destination Address
Extend ID
12
2012-07-13 11:00:35.330 MAP
SEND
MAP OPEN REQUEST

IMSI

410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_OpenReqEvent
DialogID: 0x0F07
InvokeID: 0x00
NetworkID: 0x01
Application context value: gprsLocationUpdate(0x20)
Application context version: version3(0x03)
servRef
module: 0x00
seqNo: 0x00000000
Destination address
1... .... = Reserved for national use: 0x01
.0.. .... = Routing indicator: Route on GT(0x00)
..01 00.. = Global title indicator: global title includes translation ty
pe, numbering plan, encoding scheme and nature of address indicator(0x04)
.... ..1. = SSN indicator: 0x01
.... ...0 = Point code indicator: 0x00
Signalling point code: FF FF FF (Hex)
Subsystem number: HLR (Home Location Register)(0x06)
Global Title 4
Translation type: 0x00
0111 .... = Numbering plan: ISDN/mobile numbering plan (Recommendati
on E.214)(0x07)
.... 0001 = Encoding Scheme: BCD, odd number of digits(0x01)
0... .... = free: 0x00
.000 0100 = Nature of Address Indicator: international number(0x04)
Global title address information: 923450507697197FFFFFFFFFFFFFFFFF
Reserved Bytes For Destination reference: 22 Bytes
Originating address flag: 0x01
Originating address
0... .... = Reserved for national use: 0x00
.0.. .... = Routing indicator: Route on GT(0x00)
..01 00.. = Global title indicator: global title includes translation ty
pe, numbering plan, encoding scheme and nature of address indicator(0x04)
.... ..1. = SSN indicator: 0x01
.... ...0 = Point code indicator: 0x00
Signalling point code: 00 00 00 (Hex)
Subsystem number: SGSN(MAP)(0x95)
Global Title 4
Translation type: 0x00
0001 .... = Numbering plan: ISDN/telephony numbering plan (Recommend
ations E.163 and E.164)(0x01)
.... 0010 = Encoding Scheme: BCD, even number of digits(0x02)
0... .... = free: 0x00
.000 0100 = Nature of Address Indicator: international number(0x04)
Global title address information: 923455000022FFFFFFFFFFFFFFFFFFFF
Reserved Bytes For Originating reference: 22 Bytes
emptyNumFg: 0x00
CMPLevel: 0x00
Reserved Bytes For Specific information: 33 Bytes
-----------------Primitive Code--------------------000000 07 0F 00 01 20 03 00 00 00 00 00 92 FF FF FF
000010 00 71 04 29 43 05 05 67 79 91 F7 FF FF FF FF
000020 FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00
000030 00 00 00 00 00 00 00 00 00 01 12 00 00 00 95
000040 12 04 29 43 55 00 00 22 FF FF FF FF FF FF FF
000050 FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00
000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

06
FF
00
00
FF
00
00

.... ...........
.q.)C..gy.......
................
................
..)CU.."........
................
................

000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000080 00 00 00 00 00 00 00 00 00 00 00

................
...........

/******************No.:13******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
13
2012-07-13 11:00:35.330 MAP
SEND
Update Gprs Location Request
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_Update_GPRS_Location Request
DialogID: 0x0F07
InvokeID: 0x01
OpCode: 0x17
LinkIdFg: 0x00
LinkId: 0x00
Message Segment: 0x00
Last Message: 0x00
BuffLen: 0x0024
UpdateGprsLocationArg
IMSI
Content: 410060507697197F
SGSN-Number
ISDN Address Attribute
1... .... = extension:no extersion(0x01)
.001 .... = nature of address indicator:international number(0x0
1)
.... 0001 = numbering plan indicator:ISDN/Telephony Numbering Pl
an(0x01)
ISDN String:923455000022
SGSN-Address
00.. .... = Address Type:IPv4(0x00)
..00 0100 = Address Length:(0x04)
Address:10.85.9.1
SGSN_Capability
gprsEnhancementsSupportIndicator
SupportedCamelPhases
Number of Unused bits:5
0... .... = phase1: 0x00
.0.. .... = pahse2: 0x00
..1. .... = phase3: 0x01
...0 0000 = Unused bits: 0x00
-----------------Primitive Code--------------------000000 07 0F 01 17 00 00 00 00 24 00 30 22 04 08 14 00
000010 06 05 67 79 91 F7 04 07 91 29 43 55 00 00 22 04
000020 05 04 0A 55 09 01 A0 06 83 00 84 02 05 20

........$.0"....
..gy.....)CU..".
...U.........

/******************No.:14******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
MSISDN Source Source Address Destination Address
Extend ID
14
2012-07-13 11:00:35.330 MAP
SEND
MAP DELIMITER REQUEST
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_DeliReqEvent
DialogID: 0x0F07
InvokeID: 0x00
-----------------Primitive Code---------------------

IMSI

000000 07 0F 00

...

/******************No.:15******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
15
2012-07-13 11:00:35.440 MAP
RECEIVE MAP OPEN CONFIRM
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_OpenCnfEvent
DialogID: 0x0F07
InvokeID: 0x00
Result: Dialogue Accepted(0x00)
Application context name flag: 0x01
Application context value: gprsLocationUpdate(0x20)
Application context version: version3(0x03)
Reserved Bytes For Specific information: 33 Bytes
Responding address flag: 0x01
Responding address
0... .... = Reserved for national use: 0x00
.0.. .... = Routing indicator: Route on GT(0x00)
..01 00.. = Global title indicator: global title includes translation ty
pe, numbering plan, encoding scheme and nature of address indicator(0x04)
.... ..1. = SSN indicator: 0x01
.... ...0 = Point code indicator: 0x00
Signalling point code: 00 00 00 (Hex)
Subsystem number: HLR (Home Location Register)(0x06)
Global Title 4
Translation type: 0x00
0001 .... = Numbering plan: ISDN/telephony numbering plan (Recommend
ations E.163 and E.164)(0x01)
.... 0010 = Encoding Scheme: BCD, even number of digits(0x02)
0... .... = free: 0x00
.000 0100 = Nature of Address Indicator: international number(0x04)
Global title address information: 923450000530F0000000000000000000
Reserved Bytes For Refuse-reason: 2 Bytes
Reserved Bytes For Provider error: 2 Bytes
-----------------Primitive Code--------------------000000 07 0F 00 00 01 20 03 00 00 00 00 00 00 00 00
000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000020 00 00 00 00 00 00 00 00 01 12 00 00 00 06 00
000030 04 29 43 05 00 50 03 0F 00 00 00 00 00 00 00
000040 00 00 00 00 00

00
00
12
00

..... ..........
................
................
.)C..P..........
.....

/******************No.:16******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
16
2012-07-13 11:00:35.440 MAP
RECEIVE Insert Subscriber Data Request
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_Insert_Subscriber_Data Request
DialogID: 0x0F07
InvokeID: 0x01
OpCode: 0x07
LinkIdFg: 0x00
LinkId: 0x00
Message Segment: 0x01
Last Message: 0x01

BuffLen: 0x0052
InsertSubscriberDataArg
MSISDN
ISDN Address Attribute
1... .... = extension:no extersion(0x01)
.001 .... = nature of address indicator:international number(0x0
1)
.... 0001 = numbering plan indicator:ISDN/Telephony Numbering Pl
an(0x01)
ISDN String:923458550352
subscriberStatus
Content: serviceGranted(0)
teleserviceList
Ext-TeleserviceCode
Content: shortMessageMT-PP (0x21)
Ext-TeleserviceCode
Content: shortMessageMO-PP (0x22)
gprsSubscriptionData
completeDataListIncluded
gprsDataList
PDP-Context
pdp-ContextId
Content:0x01
pdp-Type
1111 .... = spare: (0x0F)
.... 0001 = PDPOrganize: IETF address(0x01)
PDPNumber: IPv4(0x21)
qos-Subscribed
00.. .... = spare: (0x00)
..10 0... = Delay class: Delay class 4(best effort)(0x04
)
.... .011 = Reliability Class: Unacknowledged GTP and LL
C; Acknowledged RLC, Protected data(0x03)
1001 .... = Peak Throughput: Up to 256 000 octet/s(0x09)
.... 0... = spare: (0x00)
.... .010 = Precedence Class: Normal priority(0x02)
000. .... = spare: (0x00)
...1 1111 = Mean Throughput: Best effort(0x1F)
apn
Apn Name: *
networkAccessMode
Content: both MSC And SGSN(0)
sgsn-CAMEL-SubscriptionInfo
mo-sms-CSI
sms-CAMEL-TDP-DataList
SMS-CAMEL-TDP-Data
sms-TriggerDetectionPoint
Content: sms-CollectedInfo(1)
serviceKey
Content: 0x2B
gsmSCF-Address
ISDN Address Attribute
1... .... = extension:no extersion(0x01)
.001 .... = nature of address indicator:internat
ional number(0x01)
.... 0001 = numbering plan indicator:ISDN/Teleph
ony Numbering Plan(0x01)
ISDN String:923455000028
defaultSMS-Handling
Content: continueTransaction(0)

camelCapabilityHandling
Content:0x03
chargingCharacteristics
0000 .... = spare: (0x00)
.... 0... = Normal Charging: (0x00)
.... .1.. = Prepaid Charging: (0x01)
.... ..0. = Flat Rate Charging: (0x00)
.... ...0 = Hot Billing Charging: (0x00)
spare: (0x00)
-----------------Primitive Code--------------------000000 07 0F 01 07 00 00 01 01 52 00 30 50 81 07 91
000010 43 85 55 30 25 83 01 00 A6 06 04 01 21 04 01
000020 B0 16 05 00 A1 12 30 10 02 01 01 90 02 F1 21
000030 03 23 92 1F 94 02 01 2A 98 01 00 B1 1B A1 19
000040 14 30 12 80 01 01 81 01 2B 82 07 91 29 43 55
000050 00 82 83 01 00 81 01 03 92 02 04 00

29
22
92
A0
00

........R.0P...)
C.U0%.......!.."
......0.......!.
.#.....*........
.0......+...)CU.
............

/******************No.:17******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
17
2012-07-13 11:00:35.440 MAP
SEND
Insert Subscriber Data Response
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_Insert_Subscriber_Data Response
DialogID: 0x0F07
InvokeID: 0x01
OpCode: 0x07
Last Component: 0x01
Message Segment: 0x00
Last Message: 0x00
BuffLen: 0x0006
InsertSubscriberDataRes
SupportedCamelPhases
Number of Unused bits:5
0... .... = phase1: 0x00
.0.. .... = pahse2: 0x00
..1. .... = phase3: 0x01
...0 0000 = Unused bits: 0x00
-----------------Primitive Code--------------------000000 07 0F 01 07 01 00 00 06 00 30 04 86 02 05 20

.........0....

/******************No.:18******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
MSISDN Source Source Address Destination Address
Extend ID
18
2012-07-13 11:00:35.440 MAP
SEND
MAP DELIMITER REQUEST
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_DeliReqEvent
DialogID: 0x0F07
InvokeID: 0x00
-----------------Primitive Code--------------------000000 07 0F 00
/******************No.:19******************/
---------------Summary Information--------------

...

IMSI

No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
19
2012-07-13 11:00:35.540 MAP
RECEIVE Update Gprs Location Response
410060507697197
2-65535-255
-----------------Detailed Decode-------------------MAP_Update_GPRS_Location Response
DialogID: 0x0F07
InvokeID: 0x01
OpCode: 0x17
Last Component: 0x01
Message Segment: 0x00
Last Message: 0x01
BuffLen: 0x000B
UpdateGPRSLocationRes
HLR-Number
ISDN Address Attribute
1... .... = extension:no extersion(0x01)
.001 .... = nature of address indicator:international number(0x0
1)
.... 0001 = numbering plan indicator:ISDN/Telephony Numbering Pl
an(0x01)
ISDN String:923450000530
-----------------Primitive Code--------------------000000 07 0F 01 17 01 00 01 0B 00 30 09 04 07 91 29 43
000010 05 00 50 03

.........0....)C
..P.

/******************No.:20******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
20
2012-07-13 11:00:35.540 GMM
SEND
ATTACH ACCEPT
41006050
7697197 923458550352
2-65535-255
GMM Context Id:302
-----------------Detailed Decode-------------------Attach Accept
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management messages (0x08)
Message type: Attach Accept (0x02)
0000 .... = Force To Standby: Force to standby not indicated (0x00)
.... 0001 = Attach Result
.... 0... = Follow-on proceed (0x00)
.... .001 = GPRS only attached (0x01)
Periodic RA Update Timer
010. .... = Unit: value is incremented in multiples of decihours (0x02)
...0 1001 = Value: 0x09
0000 .... = Radio Priority for Tom8: priority level 4 (lowest) (0x00)
.... 0001 = Radio Priority for SMS: priority level 1 (highest) (0x01)
Routing Area Identification
MCC: 410
MNC: 06
LAC: 789
RAC: 2
P-TMSI Signature
P-TMSI Signature Value: CA 4F 00 (Hex)
Negotiated READY Timer
000. .... = Unit: value is incremented in multiples of 2 seconds (0x00)
...1 1110 = Value: 0x1E
Allocated PTMSI
Length of mobile identity contents: 5 (Bytes)
1111 .... = Spare: 0x0F

.... 0... = odd/even indic: even number of identity digits (0x00)

.... .100 = Type of identity: TMSI/P-TMSI (0x04)
TMSI/P-TMSI: CA 4F 00 4B (Hex)
T3302 Timer
Length of T3302 Value: 1 (Bytes)
001. .... = Unit: value is incremented in multiples of 1 minute (0x01)
...0 1100 = Value: 0x0C
-----------------Primitive Code--------------------000000 08 02 01 49 01 14 F0 60 03 15 02 19 CA 4F 00 17
000010 1E 18 05 F4 CA 4F 00 4B 2A 01 2C

...I...`.....O..
.....O.K*.,

/******************No.:21******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
21
2012-07-13 11:00:35.540 LLC
SEND
UI FRAME
41006050
7697197
2-65535-255
LLC Context Id:302 tlli:0x7D8EBC
23 RAI:0x000000000000
-----------------Detailed Decode-------------------LLC UI format
Address field
0... .... = PD : LLC(0x00)
.1.. .... = C/R : Command(SGSN->MS) : (0x01)
..00 .... = SPARE : 0x00
.... 0001 = SAPI : LLGMM(0x01)
Control field
110. .... = LLC UI format flag
...0 0... = SPARE : 0x00
.... .000 0000 10.. = N(U) : 2
.... ..0. = E : non-ciphered(0x00)
.... ...1 = PM : protected(0x01)
Information field
Attach Accept
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management message
s (0x08)
Message type: Attach Accept (0x02)
0000 .... = Force To Standby: Force to standby not indicated (0x00)
.... 0001 = Attach Result
.... 0... = Follow-on proceed (0x00)
.... .001 = GPRS only attached (0x01)
Periodic RA Update Timer
010. .... = Unit: value is incremented in multiples of decihours
(0x02)
...0 1001 = Value: 0x09
0000 .... = Radio Priority for Tom8: priority level 4 (lowest) (0x00
)
.... 0001 = Radio Priority for SMS: priority level 1 (highest) (0x01
)
Routing Area Identification
MCC: 410
MNC: 06
LAC: 789
RAC: 2
P-TMSI Signature
P-TMSI Signature Value: CA 4F 00 (Hex)
Negotiated READY Timer
000. .... = Unit: value is incremented in multiples of 2 seconds
(0x00)

...1 1110 = Value: 0x1E

Allocated PTMSI
Length of mobile identity contents: 5 (Bytes)
1111 .... = Spare: 0x0F
.... 0... = odd/even indic: even number of identity digits (0x00
)
.... .100 = Type of identity: TMSI/P-TMSI (0x04)
TMSI/P-TMSI: CA 4F 00 4B (Hex)
T3302 Timer
Length of T3302 Value: 1 (Bytes)
001. .... = Unit: value is incremented in multiples of 1 minute
(0x01)
...0 1100 = Value: 0x0C
FCS check : [correct]
-----------------Primitive Code--------------------000000 41 C0 09 08 02 01 49 01 14 F0 60 03 15 02 19 CA
000010 4F 00 17 1E 18 05 F4 CA 4F 00 4B 2A 01 2C 93 48
000020 FA

A.....I...`.....
O.......O.K*.,.H
.

/******************No.:22******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
22
2012-07-13 11:00:35.990 LLC
RECEIVE UI FRAME
41006050
7697197
2-65535-255
LLC Context Id:302 tlli:0x7D8EBC
23 RAI:0x14F060031502
-----------------Detailed Decode-------------------LLC UI format
Address field
0... .... = PD : LLC(0x00)
.0.. .... = C/R : Command(MS->SGSN) : (0x00)
..00 .... = SPARE : 0x00
.... 0001 = SAPI : LLGMM(0x01)
Control field
110. .... = LLC UI format flag
...0 0... = SPARE : 0x00
.... .000 0000 10.. = N(U) : 2
.... ..0. = E : non-ciphered(0x00)
.... ...1 = PM : protected(0x01)
Information field
Attach Complete
0000 .... = Skip indicator: 0x00
.... 1000 = Protocol discriminator: GPRS mobility management message
s (0x08)
Message type: Attach Complete (0x03)
FCS check : [correct]
-----------------Primitive Code--------------------000000 01 C0 09 08 03 39 D7 BC
/******************No.:23******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event
MSISDN Source Source Address Destination Address
23
2012-07-13 11:00:35.990 GMM
RECEIVE ATTACH
7697197 923458550352
2-65535-255
-----------------Detailed Decode-------------------Attach Complete
0000 .... = Skip indicator: 0x00

.....9..

Sub Event
IMSI
Extend ID
COMPLETE
41006050
GMM Context Id:302

.... 1000 = Protocol discriminator: GPRS mobility management messages (0x08)

Message type: Attach Complete (0x03)
-----------------Primitive Code--------------------000000 08 03

..

/******************No.:24******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
24
2012-07-13 11:00:52.150 LLC
RECEIVE UI FRAME
41006050
7697197
2-65535-255
LLC Context Id:302 tlli:0xCA4F00
4B RAI:0x14F060031502
-----------------Detailed Decode-------------------LLC UI format
Address field
0... .... = PD : LLC(0x00)
.0.. .... = C/R : Command(MS->SGSN) : (0x00)
..00 .... = SPARE : 0x00
.... 0001 = SAPI : LLGMM(0x01)
Control field
110. .... = LLC UI format flag
...0 0... = SPARE : 0x00
.... .000 0000 11.. = N(U) : 3
.... ..0. = E : non-ciphered(0x00)
.... ...1 = PM : protected(0x01)
Information field
Activate PDP Context Request
0000 .... = Transaction identifier: 0x00
.... 1010 = Protocol discriminator: GPRS session management messages
(0x0A)
Message type: Activate PDP Context Request (0x41)
Requested NSAPI: 0x05
0000 .... = Spare: 0
.... 0101 = Requested NSAPI: 0x05
Requested LLC SAPI: 0x03
0000 .... = Spare: 0
.... 0011 = Requested LLC SAPI: 0x03
Requested QoS (R6)
Length of Quality of Service: 14 (Bytes)
00.. .... = Spare: 0
..00 0... = Delay Class: Subscribed delay class (0x00)
.... .000 = Reliability Class: Subscribed reliability class (0x0
0)
0000 .... = Peak Throughput: Subscribed peak throughput (0x00)
.... 0... = Spare: 0
.... .000 = Precedence Class: Subscribed precedence (0x00)
000. .... = Spare: 0
...1 1111 = Mean Throughput: Best effort (0x1F)
000. .... = Traffic Class: Subscribed traffic class (0x00)
...1 0... = Delivery Order: Without delivery order ('no') (0x02)
.... .000 = Delivery of Erroneous SDUs: Subscribed delivery of e
rroneous SDUs
Maximum SDU Size: Subscribed maximum SDU size (0x00)
Maximum Bit Rate for Uplink: Subscribed maximum bit rate for upl
ink (0x00)
Maximum Bit Rate for Downlink: Subscribed maximum bit rate for d
ownlink (0x00)
0000 .... = Residual Bit Error Rate: Subscribed residual BER (0x
00)

.... 0000 = SDU Error Ratio: Subscribed SDU error ratio (0x00)
0000 00.. = Transfer Delay: Subscribed transfer delay (0x00)
.... ..00 = Traffic Handling Priority: Subscribed traffic handli
ng priority (0x00)
Guaranteed Bit Rate for Uplink: Subscribed maximum bit rate for
uplink (0x00)
Guaranteed Bit Rate for Downlink: Subscribed maximum bit rate fo
r downlink (0x00)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signalling
traffic (0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
Extended Maximum Bit Rate for Downlink: 0x00
Extended Guaranteed Bit Rate for Downlink: 0x00
Requested PDP Address
Length of PDP Address Contents: 2 (Bytes)
0000 .... = Spare: 0x00
.... 0001 = PDP Type Organisation: IETF allocated address (0x01)
PDP Type Number Value: IPv4 (0x21)
Access Point Name
Length of Access Point Name Contents: 9 (Bytes)
Access Point Name: internet
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00
.... .000 = Configuration Protocol: 0
Protocol Identifier: IPCP (0x8021)
Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
FCS check : [correct]
-----------------Primitive Code--------------------000000 01 C0 0D 0A 41 05 03 0E 00 00 1F 10 00 00 00 00
000010 00 00 00 00 00 00 02 01 21 28 09 08 69 6E 74 65
000020 72 6E 65 74 27 14 80 80 21 10 01 00 00 10 81 06
000030 00 00 00 00 83 06 00 00 00 00 1C B8 EC

....A...........
........!(..inte
rnet'...!.......
.............

/******************No.:25******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
25
2012-07-13 11:00:52.150 SM
RECEIVE ACTIVATE PDP CONTEXT REQUEST
410060507697197 923458550352
2-65535-255
-----------------Detailed Decode-------------------Activate PDP Context Request
0000 .... = Transaction identifier: 0x00
.... 1010 = Protocol discriminator: GPRS session management messages(0x0A)
Message type: Activate PDP Context Request (0x41)
Requested NSAPI: 0x05
0000 .... = Spare: 0
.... 0101 = Requested NSAPI: 0x05
Requested LLC SAPI: 0x03
0000 .... = Spare: 0
.... 0011 = Requested LLC SAPI: 0x03
Requested QoS (R6)
Length of Quality of Service: 14 (Bytes)
00.. .... = Spare: 0
..00 0... = Delay Class: Subscribed delay class (0x00)
.... .000 = Reliability Class: Subscribed reliability class (0x00)

0000
....
....
000.
...1
000.
...1
....

....
0...
.000
....
1111
....
0...
.000

=
=
=
=
=
=
=
=

Peak Throughput: Subscribed peak throughput (0x00)

Spare: 0
Precedence Class: Subscribed precedence (0x00)
Spare: 0
Mean Throughput: Best effort (0x1F)
Traffic Class: Subscribed traffic class (0x00)
Delivery Order: Without delivery order ('no') (0x02)
Delivery of Erroneous SDUs: Subscribed delivery of erroneous

SDUs
Maximum SDU Size: Subscribed maximum SDU size (0x00)
Maximum Bit Rate for Uplink: Subscribed maximum bit rate for uplink (0x0
0)
Maximum Bit Rate for Downlink: Subscribed maximum bit rate for downlink
(0x00)
0000 .... = Residual Bit Error Rate: Subscribed residual BER (0x00)
.... 0000 = SDU Error Ratio: Subscribed SDU error ratio (0x00)
0000 00.. = Transfer Delay: Subscribed transfer delay (0x00)
.... ..00 = Traffic Handling Priority: Subscribed traffic handling prior
ity (0x00)
Guaranteed Bit Rate for Uplink: Subscribed maximum bit rate for uplink (
0x00)
Guaranteed Bit Rate for Downlink: Subscribed maximum bit rate for downli
nk (0x00)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signalling traffic
(0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
Extended Maximum Bit Rate for Downlink: 0x00
Extended Guaranteed Bit Rate for Downlink: 0x00
Requested PDP Address
Length of PDP Address Contents: 2 (Bytes)
0000 .... = Spare: 0x00
.... 0001 = PDP Type Organisation: IETF allocated address (0x01)
PDP Type Number Value: IPv4 (0x21)
Access Point Name
Length of Access Point Name Contents: 9 (Bytes)
Access Point Name: internet
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00
.... .000 = Configuration Protocol: 0
Protocol Identifier: IPCP (0x8021)
Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
-----------------Primitive Code--------------------000000 0A 41 05 03 0E 00 00 1F 10 00 00 00 00 00 00 00
000010 00 00 00 02 01 21 28 09 08 69 6E 74 65 72 6E 65
000020 74 27 14 80 80 21 10 01 00 00 10 81 06 00 00 00
000030 00 83 06 00 00 00 00

.A..............
.....!(..interne
t'...!..........
.......

/******************No.:26******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
26
2012-07-13 11:00:52.160 GTP
SEND
CREATE PDP CONTEXT REQUEST
410060507697197 923458550352
2-65535-255
10.85.9.1
202.69.14.160
-----------------Detailed Decode-------------------Create PDP Context Request

GTP Header
001. .... = GTP Version: 1
...1 .... = Protocol Type (PT) : GTP(0x01)
.... 0... = Spare: 0
.... .0.. = Extension Header Flag (E): 0
.... ..1. = Sequence Number Flag (S) : 1
.... ...0 = N-PDU Number Flag (PN): 0
GTP Message Type: Create PDP Context Request(0x10)
Length: 139 (Bytes)
Tunnel Endpoint Identifier(TEID): 0x00000000
Sequence Number: 0x030B
N-PDU Number: 0x00
Next Extension Header Type: No more extension headers(0x00)
IMSI
IMSI: 410060507697197
Routing Area Identity
MCC: 410
MNC: 06
LAC: 65534
RAC: 255
Recovery
Restart Counter: 73
Selection Mode
1111 11.. = Spare: 0x3F
.... ..01 = Selection Mode Value: MS provided APN, subscription not veri
fied(0x01)
Tunnel Endpoint Identifier Data I
Tunnel Endpoint Identifier(TEID): 0x0218007F
Tunnel Endpoint Identifier Control Plane
Tunnel Endpoint Identifier(TEID): 0xF750011C
NSAPI: 0x05
0000 .... = Spare: 0x00
.... 0101 = NSAPI: 0x05
Charging Characteristics
0000 .... = Spare: 0
.... 0... = Normal Charging: No (0x00)
.... .1.. = Prepaid Charging: Yes (0x01)
.... ..0. = Flat Rate Charging: No (0x00)
.... ...0 = Hot Billing Charging: No (0x00)
Reserved: 0
End User Address
Length: 2 (Bytes)
1111 .... = Spare: 0x0F
.... 0001 = PDP Type Organisation: IETF (0x01)
PDP Type Number Value: IPv4 (0x21)
Access Point Name
Length of Access Point Name Contents: 9 (Bytes)
Access Point Name: internet
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00
.... .000 = Configuration Protocol: 0
Protocol Identifier: IPCP (0x8021)
Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
SGSN Address for Signalling (IPv4 address: 10.85.9.1)
Length: 4 (Bytes)
IPv4 address: 10.85.9.1
SGSN Address for User Traffic (IPv4 address: 10.85.9.2)

Length: 4 (Bytes)
IPv4 address: 10.85.9.2
MSISDN
Length: 7 (Bytes)
1... .... = Extension Flag : No Extension(0x01)
.001 .... = Nature of Address Indicator : 0x01
.... 0001 = Numbing Plan Indicator : 0x01
MSISDN: 923458550352
Quality of Service Profile (R5)
Length: 13 (Bytes)
Allocation/Retention Priority: 0x02
00.. .... = Spare: 0
..10 0... = Delay Class: Delay class 4(best effort) (0x04)
.... .011 = Reliability Class: Unacknowledged GTP and LLC; Acknowledged
RLC, Protected data (0x03)
1001 .... = Peak Throughput: Up to 256 000 octet/s (0x09)
.... 0... = Spare: 0
.... .010 = Precedence Class: Normal priority (0x02)
000. .... = Spare: 0
...1 1111 = Mean Throughput: Best effort (0x1F)
100. .... = Traffic Class: Background class (0x04)
...1 0... = Delivery Order: Without delivery order ('no') (0x02)
.... .011 = Delivery of Erroneous SDUs: Erroneous SDUs are not delivered
('no'): (0x03)
Maximum SDU Size: 1500octets (0x96)
Maximum Bit Rate for Uplink: 2048kbps (0x97)
Maximum Bit Rate for Downlink: 2048kbps (0x97)
0111 .... = Residual Bit Error Rate: 1e-5 (0x07)
.... 0100 = SDU Error Ratio: 1e-4 (0x04)
0000 00.. = Transfer Delay: Reserved (0x00)
.... ..00 = Traffic Handling Priority: Reserved (0x00)
Guaranteed Bit Rate for Uplink: 0kbps (0xFF)
Guaranteed Bit Rate for Downlink: 0kbps (0xFF)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signalling traffic
(0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
RAT Type
Length: 1 (Bytes)
RAT Type: GERAN(0x02)
User Location Information
Length: 8 (Bytes)
Geographic Location Type: CGI(0x00)
MCC: 410
MNC: 06
LAC: 789
CI: 63003
MS Time Zone
Length: 2 (Bytes)
Time Zone: GMT+08:00 (0x23)
0000 00.. = Spare: 0x00
.... ..00 = Daylight Saving Time: No adjustment for Daylight Saving Time
(0x00)
-----------------Primitive Code--------------------000000 32 10 00 8B 00 00 00 00 03 0B 00 00 02 14 00
000010 05 67 79 91 F7 03 14 F0 60 FF FE FF 0E 49 0F
000020 10 02 18 00 7F 11 F7 50 01 1C 14 05 1A 04 00
000030 00 02 F1 21 83 00 09 08 69 6E 74 65 72 6E 65
000040 84 00 14 80 80 21 10 01 00 00 10 81 06 00 00

06
FD
80
74
00

2...............
.gy.....`....I..
.......P........
...!....internet
.....!..........

000050
000060
000070
000080
000090

00
04
00
00
02

83
0A
0D
01
23

06
55
02
02
00

00
09
23
98

00
02
92
00

00
86
1F
08

00
00
93
00

85
07
96
14

00
91
97
F0

04
29
97
60

0A
43
74
03

55
85
00
15

09
55
FF
F6

01
30
FF
1B

85
25
00
99

00
87
97
00

...........U....
..U......)C.U0%.
...#......t.....
.........`......
.#.

/******************No.:27******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
27
2012-07-13 11:00:52.160 GTP
RECEIVE CREATE PDP CONTEXT RESPONSE
410060507697197 923458550352
2-65535-255
202.69.14.160 10.85.9.1
-----------------Detailed Decode-------------------Create PDP Context Response
GTP Header
001. .... = GTP Version: 1
...1 .... = Protocol Type (PT) : GTP(0x01)
.... 0... = Spare: 0
.... .0.. = Extension Header Flag (E): 0
.... ..1. = Sequence Number Flag (S) : 1
.... ...0 = N-PDU Number Flag (PN): 0
GTP Message Type: Create PDP Context Response(0x11)
Length: 87 (Bytes)
Tunnel Endpoint Identifier(TEID): 0xF750011C
Sequence Number: 0x030B
N-PDU Number: 0x00
Next Extension Header Type: No more extension headers(0x00)
Cause: Request accepted (0x80)
Reordering Required
1111 111. = Spare: 0x7F
.... ...0 = Reordering Req: No (0x00)
Recovery
Restart Counter: 98
Tunnel Endpoint Identifier Data I
Tunnel Endpoint Identifier(TEID): 0x87C8C22D
Tunnel Endpoint Identifier Control Plane
Tunnel Endpoint Identifier(TEID): 0x532CC42D
Charging ID
Charging ID: 0x5BABBECF
End User Address
Length: 6 (Bytes)
1111 .... = Spare: 0x0F
.... 0001 = PDP Type Organisation: IETF (0x01)
PDP Type Number Value: IPv4 (0x21)
IPv4 address: 10.59.136.179
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00
.... .000 = Configuration Protocol: 0
Protocol Identifier: IPCP (0x8021)
Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
GGSN Address for Control Plane (IPv4 address: 202.69.14.160)
Length: 4 (Bytes)
IPv4 address: 202.69.14.160
GGSN Address for User Traffic (IPv4 address: 202.69.14.160)
Length: 4 (Bytes)
IPv4 address: 202.69.14.160
Quality of Service Profile (R5)

Length: 13 (Bytes)
Allocation/Retention Priority: 0x02
00.. .... = Spare: 0
..10 0... = Delay Class: Delay class 4(best effort) (0x04)
.... .011 = Reliability Class: Unacknowledged GTP and LLC; Acknowledged
RLC, Protected data (0x03)
1001 .... = Peak Throughput: Up to 256 000 octet/s (0x09)
.... 0... = Spare: 0
.... .010 = Precedence Class: Normal priority (0x02)
000. .... = Spare: 0
...1 1111 = Mean Throughput: Best effort (0x1F)
100. .... = Traffic Class: Background class (0x04)
...1 0... = Delivery Order: Without delivery order ('no') (0x02)
.... .011 = Delivery of Erroneous SDUs: Erroneous SDUs are not delivered
('no'): (0x03)
Maximum SDU Size: 1500octets (0x96)
Maximum Bit Rate for Uplink: 2048kbps (0x97)
Maximum Bit Rate for Downlink: 2048kbps (0x97)
0111 .... = Residual Bit Error Rate: 1e-5 (0x07)
.... 0100 = SDU Error Ratio: 1e-4 (0x04)
0000 00.. = Transfer Delay: Reserved (0x00)
.... ..00 = Traffic Handling Priority: Reserved (0x00)
Guaranteed Bit Rate for Uplink: 0kbps (0xFF)
Guaranteed Bit Rate for Downlink: 0kbps (0xFF)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signalling traffic
(0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
-----------------Primitive Code--------------------000000 32 11 00 57 F7 50 01 1C 03 0B 00 00 01 80 08
000010 0E 62 10 87 C8 C2 2D 11 53 2C C4 2D 7F 5B AB
000020 CF 80 00 06 F1 21 0A 3B 88 B3 84 00 14 80 80
000030 10 03 00 00 10 81 06 AC 12 12 14 83 06 CA 45
000040 0B 85 00 04 CA 45 0E A0 85 00 04 CA 45 0E A0
000050 00 0D 02 23 92 1F 93 96 97 97 74 00 FF FF 00

FE
BE
21
08
87

2..W.P..........
.b....-.S,.-.[..
.....!.;.......!
..............E.
.....E......E...
...#......t....

/******************No.:28******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
28
2012-07-13 11:00:52.160 SM
SEND
ACTIVATE PDP CONTEXT ACCEPT
410060507697197 923458550352
2-65535-255
PDP Context Id:4
149215789
-----------------Detailed Decode-------------------Activate PDP Context Accept
1000 .... = Transaction identifier: 0x08
.... 1010 = Protocol discriminator: GPRS session management messages(0x0A)
Message type: Activate PDP Context Accept (0x42)
Negotiated LLC SAPI: 0x03
0000 .... = Spare: 0
.... 0011 = Negotiated LLC SAPI: 0x03
Negotiated QoS (R5)
Length of Quality of Service: 12 (Bytes)
00.. .... = Spare: 0
..10 0... = Delay Class: Delay class 4(best effort) (0x04)
.... .011 = Reliability Class: Unacknowledged GTP and LLC; Acknowledged
RLC, Protected data (0x03)
1001 .... = Peak Throughput: Up to 256 000 octet/s (0x09)
.... 0... = Spare: 0

....
000.
...1
100.
...1
....

.010
....
1111
....
0...
.011

=
=
=
=
=
=

Precedence Class: Normal priority (0x02)

Spare: 0
Mean Throughput: Best effort (0x1F)
Traffic Class: Background class (0x04)
Delivery Order: Without delivery order ('no') (0x02)
Delivery of Erroneous SDUs: Erroneous SDUs are not delivered

('no')
Maximum SDU Size: 1500octets (0x96)
Maximum Bit Rate for Uplink: 2048kbps (0x97)
Maximum Bit Rate for Downlink: 2048kbps (0x97)
0111 .... = Residual Bit Error Rate: 1e-5 (0x07)
.... 0100 = SDU Error Ratio: 1e-4 (0x04)
0000 00.. = Transfer Delay: Reserved (0x00)
.... ..00 = Traffic Handling Priority: Reserved (0x00)
Guaranteed Bit Rate for Uplink: 0kbps (0xFF)
Guaranteed Bit Rate for Downlink: 0kbps (0xFF)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signalling traffic
(0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
0000 .... = Spare Half Octet: 0x00
.... 0010 = Radio Priority: priority level 2 (0x02)
PDP Address (IPv4 address: 10.59.136.179)
Length of PDP Address Contents: 6 (Bytes)
0000 .... = Spare: 0x00
.... 0001 = PDP Type Organisation: IETF allocated address (0x01)
PDP Type Number Value: IPv4 (0x21)
IPv4 address: 10.59.136.179
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00
.... .000 = Configuration Protocol: 0
Protocol Identifier: IPCP (0x8021)
Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
-----------------Primitive Code--------------------000000 8A 42 03 0C 23 92 1F 93 96 97 97 74 00 FF FF 00
000010 02 2B 06 01 21 0A 3B 88 B3 27 14 80 80 21 10 03
000020 00 00 10 81 06 AC 12 12 14 83 06 CA 45 08 0B

.B..#......t....
.+..!.;..'...!..
............E..

/******************No.:29******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
29
2012-07-13 11:00:52.160 LLC
SEND
UI FRAME
41006050
7697197
2-65535-255
LLC Context Id:302 tlli:0xCA4F00
4B RAI:0x000000000000
-----------------Detailed Decode-------------------LLC UI format
Address field
0... .... = PD : LLC(0x00)
.1.. .... = C/R : Command(SGSN->MS) : (0x01)
..00 .... = SPARE : 0x00
.... 0001 = SAPI : LLGMM(0x01)
Control field
110. .... = LLC UI format flag
...0 0... = SPARE : 0x00
.... .000 0000 11.. = N(U) : 3

.... ..0. = E : non-ciphered(0x00)

.... ...1 = PM : protected(0x01)
Information field
Activate PDP Context Accept
1000 .... = Transaction identifier: 0x08
.... 1010 = Protocol discriminator: GPRS session management messages
(0x0A)
Message type: Activate PDP Context Accept (0x42)
Negotiated LLC SAPI: 0x03
0000 .... = Spare: 0
.... 0011 = Negotiated LLC SAPI: 0x03
Negotiated QoS (R5)
Length of Quality of Service: 12 (Bytes)
00.. .... = Spare: 0
..10 0... = Delay Class: Delay class 4(best effort) (0x04)
.... .011 = Reliability Class: Unacknowledged GTP and LLC; Ackno
wledged RLC, Protected data (0x03)
1001 .... = Peak Throughput: Up to 256 000 octet/s (0x09)
.... 0... = Spare: 0
.... .010 = Precedence Class: Normal priority (0x02)
000. .... = Spare: 0
...1 1111 = Mean Throughput: Best effort (0x1F)
100. .... = Traffic Class: Background class (0x04)
...1 0... = Delivery Order: Without delivery order ('no') (0x02)
.... .011 = Delivery of Erroneous SDUs: Erroneous SDUs are not d
elivered ('no')
Maximum SDU Size: 1500octets (0x96)
Maximum Bit Rate for Uplink: 2048kbps (0x97)
Maximum Bit Rate for Downlink: 2048kbps (0x97)
0111 .... = Residual Bit Error Rate: 1e-5 (0x07)
.... 0100 = SDU Error Ratio: 1e-4 (0x04)
0000 00.. = Transfer Delay: Reserved (0x00)
.... ..00 = Traffic Handling Priority: Reserved (0x00)
Guaranteed Bit Rate for Uplink: 0kbps (0xFF)
Guaranteed Bit Rate for Downlink: 0kbps (0xFF)
000. .... = Spare: 0
...0 .... = Signalling Indication: Not Optimised for signalling
traffic (0x00)
.... 0000 = Source Statistics Descriptor: unknown (0x00)
0000 .... = Spare Half Octet: 0x00
.... 0010 = Radio Priority: priority level 2 (0x02)
PDP Address (IPv4 address: 10.59.136.179)
Length of PDP Address Contents: 6 (Bytes)
0000 .... = Spare: 0x00
.... 0001 = PDP Type Organisation: IETF allocated address (0x01)
PDP Type Number Value: IPv4 (0x21)
IPv4 address: 10.59.136.179
Protocol Configuration Options
Length of Protocol Configuration Options Contents: 20 (Bytes)
1... .... = Extension Flag Bit: 1
.000 0... = Spare: 0x00
.... .000 = Configuration Protocol: 0
Protocol Identifier: IPCP (0x8021)
Length of Protocol Identifier Contents: 16 (Bytes)
Protocol Identifier Contents: (16 Bytes)
FCS check : [correct]
-----------------Primitive Code--------------------000000 41 C0 0D 8A 42 03 0C 23 92 1F 93 96 97 97 74 00
000010 FF FF 00 02 2B 06 01 21 0A 3B 88 B3 27 14 80 80

A...B..#......t.
....+..!.;..'...

000020 21 10 03 00 00 10 81 06 AC 12 12 14 83 06 CA 45
000030 08 0B DE 99 B5

!..............E
.....

/******************No.:30******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
30
2012-07-13 11:01:19.570 GTP
RECEIVE DELETE PDP CONTEXT REQUEST
410060507697197 923458550352
2-65535-255
202.69.14.160 10.85.9.1
-----------------Detailed Decode-------------------Delete PDP Context Request
GTP Header
001. .... = GTP Version: 1
...1 .... = Protocol Type (PT) : GTP(0x01)
.... 0... = Spare: 0
.... .0.. = Extension Header Flag (E): 0
.... ..1. = Sequence Number Flag (S) : 1
.... ...0 = N-PDU Number Flag (PN): 0
GTP Message Type: Delete PDP Context Request(0x14)
Length: 8 (Bytes)
Tunnel Endpoint Identifier(TEID): 0xF750011C
Sequence Number: 0x6BE3
N-PDU Number: 0x00
Next Extension Header Type: No more extension headers(0x00)
Teardown Ind
1111 111. = Spare: 0x7F
.... ...1 = Teardown Ind: Yes (0x01)
NSAPI: 0x05
0000 .... = Spare: 0x00
.... 0101 = NSAPI: 0x05
-----------------Primitive Code--------------------000000 32 14 00 08 F7 50 01 1C 6B E3 00 00 13 FF 14 05

2....P..k.......

/******************No.:31******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
31
2012-07-13 11:01:19.570 SM
SEND
DEACTIVATE PDP CONTEXT REQUEST
410060507697197 923458550352
2-65535-255
PDP Context Id:4
149215789
-----------------Detailed Decode-------------------Deactivate PDP Context Request
1000 .... = Transaction identifier: 0x08
.... 1010 = Protocol discriminator: GPRS session management messages(0x0A)
Message type: Deactivate PDP Context Request (0x46)
SM Cause: Regular deactivation (0x24)
Tear Down Indicator: 0x01
-----------------Primitive Code--------------------000000 8A 46 24 91

.F$.

/******************No.:32******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
32
2012-07-13 11:01:19.570 LLC
SEND
UI FRAME
41006050
7697197
2-65535-255
LLC Context Id:302 tlli:0xCA4F00
4B RAI:0x000000000000
-----------------Detailed Decode--------------------

LLC UI format
Address field
0... .... = PD : LLC(0x00)
.1.. .... = C/R : Command(SGSN->MS) : (0x01)
..00 .... = SPARE : 0x00
.... 0001 = SAPI : LLGMM(0x01)
Control field
110. .... = LLC UI format flag
...0 0... = SPARE : 0x00
.... .000 0001 00.. = N(U) : 4
.... ..0. = E : non-ciphered(0x00)
.... ...1 = PM : protected(0x01)
Information field
Deactivate PDP Context Request
1000 .... = Transaction identifier: 0x08
.... 1010 = Protocol discriminator: GPRS session management messages
(0x0A)
Message type: Deactivate PDP Context Request (0x46)
SM Cause: Regular deactivation (0x24)
Tear Down Indicator: 0x01
FCS check : [correct]
-----------------Primitive Code--------------------000000 41 C0 11 8A 46 24 91 A5 53 E2

A...F$..S.

/******************No.:33******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
33
2012-07-13 11:01:20.560 GTP
RECEIVE DELETE PDP CONTEXT REQUEST
410060507697197 923458550352
2-65535-255
202.69.14.160 10.85.9.1
-----------------Detailed Decode-------------------Delete PDP Context Request
GTP Header
001. .... = GTP Version: 1
...1 .... = Protocol Type (PT) : GTP(0x01)
.... 0... = Spare: 0
.... .0.. = Extension Header Flag (E): 0
.... ..1. = Sequence Number Flag (S) : 1
.... ...0 = N-PDU Number Flag (PN): 0
GTP Message Type: Delete PDP Context Request(0x14)
Length: 8 (Bytes)
Tunnel Endpoint Identifier(TEID): 0xF750011C
Sequence Number: 0x6BE3
N-PDU Number: 0x00
Next Extension Header Type: No more extension headers(0x00)
Teardown Ind
1111 111. = Spare: 0x7F
.... ...1 = Teardown Ind: Yes (0x01)
NSAPI: 0x05
0000 .... = Spare: 0x00
.... 0101 = NSAPI: 0x05
-----------------Primitive Code--------------------000000 32 14 00 08 F7 50 01 1C 6B E3 00 00 13 FF 14 05
/******************No.:34******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event
MSISDN Source Source Address Destination Address

2....P..k.......

Sub Event
Extend ID

IMSI

34
2012-07-13 11:01:21.810 LLC
RECEIVE UI FRAME
41006050
7697197
2-65535-255
LLC Context Id:302 tlli:0xCA4F00
4B RAI:0x14F060031502
-----------------Detailed Decode-------------------LLC UI format
Address field
0... .... = PD : LLC(0x00)
.0.. .... = C/R : Command(MS->SGSN) : (0x00)
..00 .... = SPARE : 0x00
.... 0001 = SAPI : LLGMM(0x01)
Control field
110. .... = LLC UI format flag
...0 0... = SPARE : 0x00
.... .000 0001 00.. = N(U) : 4
.... ..0. = E : non-ciphered(0x00)
.... ...1 = PM : protected(0x01)
Information field
Deactivate PDP Context Accept
0000 .... = Transaction identifier: 0x00
.... 1010 = Protocol discriminator: GPRS session management messages
(0x0A)
Message type: Deactivate PDP Context Accept (0x47)
FCS check : [correct]
-----------------Primitive Code--------------------000000 01 C0 11 0A 47 AC 60 59

....G.`Y

/******************No.:35******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
35
2012-07-13 11:01:21.810 SM
RECEIVE DEACTIVATE PDP CONTEXT ACCEPT
410060507697197 923458550352
2-65535-255
PDP Context Id:4
149215789
-----------------Detailed Decode-------------------Deactivate PDP Context Accept
0000 .... = Transaction identifier: 0x00
.... 1010 = Protocol discriminator: GPRS session management messages(0x0A)
Message type: Deactivate PDP Context Accept (0x47)
-----------------Primitive Code--------------------000000 0A 47

.G

/******************No.:36******************/
---------------Summary Information-------------No.
Time
Protocol Type Direction
Event Sub Event
IMSI
MSISDN Source Source Address Destination Address
Extend ID
36
2012-07-13 11:01:21.810 GTP
SEND
DELETE PDP CONTEXT RESPONSE
410060507697197 923458550352
2-65535-255
10.85.9.1
202.69.14.160
-----------------Detailed Decode-------------------Delete PDP Context Response
GTP Header
001. .... = GTP Version: 1
...1 .... = Protocol Type (PT) : GTP(0x01)
.... 0... = Spare: 0
.... .0.. = Extension Header Flag (E): 0
.... ..1. = Sequence Number Flag (S) : 1
.... ...0 = N-PDU Number Flag (PN): 0
GTP Message Type: Delete PDP Context Response(0x15)
Length: 6 (Bytes)

Tunnel Endpoint Identifier(TEID): 0x532CC42D

Sequence Number: 0x6BE3
N-PDU Number: 0x00
Next Extension Header Type: No more extension headers(0x00)
Cause: Request accepted (0x80)
-----------------Primitive Code--------------------000000 32 15 00 06 53 2C C4 2D 6B E3 00 00 01 80

2...S,.-k.....