Full Tr

MTP2 ITU.UDT.Begin [UpdateLocation] [TCAP/MAP R7] CB 91 3F 83 DE C3 30 0A 09 81 03 10 1B 0D 52 06 00 61 04 04 84 10 02 10 72 18 02 0B 12 07 00 12 04 19 49 24 92 99 59 5A 62 58 48 04 00 00 66 D9 6B 1E 28 1C 06 07 00 11 86 05 01 01 01 A0 11 60 0F 80 02 07 80 A1 09 06 07 04 00 00 01 00 01 03 6C 30 A1 2E 02 01 00 02 01 02 30 26 04 08 04 84 10 02 10 72 18 F2 81 07 91 19 49 24 92 99 69 04 07 91 19 49 24 92 99 59 A6 08 80 02 05 E0 85 02 06 80 POS BINARY NAME VALUE

MTP2 ITU 00 .1001011 BSN 75

1....... BIB 101 .0010001 FSN 17

1....... FIB 102 ..111111 LI 63

00...... Spare 0SIO

03 ....0011 Service indicator 3 (SCCP Service)....0011 Sub-service field see below..00.... Spare 010...... Network indicator 2 (National network)

SIF 4-129 SIF 126 Octets (hex): DE C3 30 0A 09...

SCCP ITU Routing Label

4-5 DPC 9905-7 OPC 1043507 0000.... SLS 0

Message type

08 00001001 Message type UDT (9)

Protocol class 09 ....0001 Protocol class 1 (class 1)

1000.... Message handling 8 (return message on error)Pointer to Called party address

10 00000011 Pointer to Called party address 3

Pointer to Calling party address

11 00010000 Pointer to Calling party address 16

Pointer to Data

12 00011011 Pointer to Data 27

Called party address

13 00001101 Length indicator 13

14 01010010 Address indicator see below

0....... spare 0

1

POS BINARY NAME VALUE

.1...... Routing indicator 1 (Route on SSN)

..0100.. Global title indicator 4 (global title includes translation type numbering plan and encoding scheme and nature

of address indicator) ......1. SSN indicator 1 (address contains a subsystem number).......0 Point code indicator 0 (address does not contain a signalling point code)

15 00000110 Subsystem number 6 (HLR)

16-26 Global title 0100 see below

16 00000000 Translation type 0

17 0110.... Numbering plan 6 (land mobile numbering plan)....0001 Encoding scheme 1 (BCD odd)

18 0....... spare 0.0000100 Nature of address indicator 4 (international number)

19-26 Address signals 404801200127812Calling party address



0....... spare 0.0...... Routing indicator 0 (Route on GT)



29 00000111 Subsystem number 7 (VLR)



31 0001.... Numbering plan 1 (ISDN/telephony numbering plan)....0010 Encoding scheme 2 (BCD even)


33-38 Address signals 919442299995Data


40-129 Data 90 Octets (hex): 62 58 48 04 00...TCAP/MAP R7

44-47 otid 4 Octets (hex): 00 00 66 D9dialoguePortion

52-79 external see below54-60 dialogue_as_id {itu-t(0) recommendation(0) q(17) 773 as(1) dialogue-as(1)

2


version1(1)}63-79 dialoguePDU dialogueRequest65-79 dialogueRequest see below67-68 protocol-version 1 Bits: 1

67 0....... version1 (bit #0) 1

73-79 application-context-name {itu-t(0) identified-organization(4) etsi(0) mobileDomain(0) gsm-Network(1) ac(0)

networkLocUp(1) version3(3)} components

82-129 components[0] invoke84-129 invoke see below

86 00000000 invokeID 0

87-89 operationCode localValue

89 00000010 localValue 2 (UpdateLocation)

90-129 parameter UpdateLocation92-129 UpdateLocation see below94-101 imsi 404801200127812104-110 msc_Number see below

104 1....... Ext Reserved value (1).001.... Type of number international number (1)

....0001 Numbering plan identification ISDN/telephony numbering plan (1)

105-110 Number digits 919442299996

113-119 vlr_Number see below



114-119 Number digits 919442299995

122-129 vlr_Capability see below

124-125 supportedCamelPhases 3 Bits: 111

124 0....... phase1 (bit #0) 1.0...... phase2 (bit #1) 1..0..... phase3 (bit #2) 1

128-129

supportedLCS_CapabilitySets 2 Bits: 10

128 0....... lcsCapabilitySet1 (bit #0) 1

3

MTP2 ITU.UDT.End [UpdateLocation] [TCAP/MAP Ph2] 93 CD 3F 83 C3 A8 F7 E0 09 00 03 0E 19 0B 12 07 00 12 04 19 49 24 92 99 59 0B 12 06 00 12 04 19 49 34 91 99 49 1F 64 1D 49 04 00 00 A6 D9 6C 15 A2 13 02 01 00 30 0E 02 01 02 30 09 04 07 91 19 49 34 91 99 49 07 04 00 00 01 00 01 03 6C 30 A1 2E 02 01 00 02 01 02 30 26 04 08 04 84 10 02 10 72 18 F2 81 07 91 19 49 24 92 99 69 04 07 91 19 49 24 92 99 59 A6 08 80 02 05 E0 85 02 06 80 07 04 00 00 01 00 01 03 6C 30 A1 2E 02 01 00 02 01 02 30 26 04 08 04 84 10 02 10 72 18 F2 81 07 91 19 49 24 92 99 69 04 07 91 19 49 24 92 99 59 A6 08 80 02 05 E0 85 02 06 80 POS BINARY NAME VALUE

MTP2 ITU 00 .0010011 BSN 19

1....... BIB 101 .1001101 FSN 77

1....... FIB 1

4


02 ..111111 LI 6300...... Spare 0

SIO 03 ....0011 Service indicator 3 (SCCP Service)

....0011 Sub-service field see below..00.... Spare 010...... Network indicator 2 (National network)

SIF 4-

184 SIF 181 Octets (hex): C3 A8 F7 E0 09...


4-5 DPC 104355-7 OPC 99007 1110.... SLS 14

Message type



0000.... Message handling 0 (no special options)Pointer to Called party address




Pointer to Data











5


017 0001.... Numbering plan 1 (ISDN/telephony numbering plan)

....0010 Encoding scheme 2 (BCD even)18 0....... spare 0

.0000100 Nature of address indicator 4 (international number)19-24 Address signals 919442299995

Calling party address











31-36 Address signals 919443199994

Data


38-68 Data 31 Octets (hex): 64 1D 49 04 00...

TCAP/MAP Ph2 42-45 dtid 4 Octets (hex): 00 00 A6 D9

components 48-68 components[0] returnResultLast

50-68 returnResultLast see below

52 00000000 invokeID 0

55-68 result see below

6


55-57 operationCode localValue

57 00000010 localValue 2 (UpdateLocation)

58-68 parameter UpdateLocation

58-68 UpdateLocation extensibleUpdateLocationRes

60-68 extensibleUpdateLocationRes see below

62-68 hlr_Number see below



63-68 Number digits 919443199994

MTP2 ITU.CC.AUTHENTICATION REQUEST EB C8 27 83 38 01 3C 1A 02 0F 27 41 25 59 AE 02 01 0F 16 01 00 13 05 12 00 5E 55 4C 14 90 D8 A9 A6 10 02 DB 14 A9 00 D8 F1 00 POS BINARY NAME VALUE

MTP2 ITU 00 .1101011 BSN 107

1....... BIB 101 .1001000 FSN 72

1....... FIB 102 ..100111 LI 39

00...... Spare 0SIO

03 ....0011 Service indicator 3 (SCCP Service)....0011 Sub-service field see below

7


..00.... Spare 010...... Network indicator 2 (National network)

SIF 4-41 SIF 38 Octets (hex): 38 01 3C 1A 02...


4-5 DPC 3125-7 OPC 1048007 0001.... SLS 1

Message type 08 00000010 Message type CC (2)

Destination local reference 9-11 Destination local reference 4269839

Source local reference 12-14 Source local reference 11426085


0000.... spare 0Pointer to start of optional part

16 00000001 Pointer to start of optional part 1Data

17 00001111 Parameter name Data (15)18 00010110 Length indicator 22

19-40 Data 22 Octets (hex): 01 00 13 05 12...End of optional parameters

41 00000000 End of optional parameters 0GSM BSSAP Distribution Data Unit

19 00000001 Discrimination Parameter 1 (Transparent)20 00000000 DLCI see below

00...... Control channel identification control channel is not further specified (0)..000... spare 0.....000 SAPI 0 (CC, MM, RR)

Length indicator 21 00010011 Length indicator 19

Layer 3 data 22-40 Layer 3 data 19 Octets (hex): 05 12 00 5E 55...

GSM DTAP 22-40 19 Octets (hex): 05 12 00 5E 55...

GSM Radio L3 22 ....0101 Mobility management protocol discriminator 5 (mobility management messages)

0000.... Skip Indicator 0Authentication Request message type

23 00...... N(SD) 0..010010 Message type Authentication request (18)

8


Spare half octet 24 0000.... Spare half octet 0

Ciphering key sequence Number ....0... Spare spare value (0).....000 key sequence 0 (0)

Authentication parameter RAND (UMTS challenge or GSM challenge) 25-40 Authentication parameter RAND (UMTS challenge or GSM challenge) 16 Octets (hex): 5E 55 4C 14 90...

MTP2 ITU.UDT.End [SendAuthenticationInfo] [TCAP/MAP R7] DC B7 3F 83 C3 A8 F7 E0 09 00 03 0E 19 0B 12 07 00 12 04 19 49 24 92 99 59 0B 12 06 00 12 04 19 49 34 91 99 49 D3 64 81 D0 49 04 00 00 20 6D 6B 26 28 24 06 07 00 11 86 05 01 01 01 A0 19 61 17 A1 09 06 07 04 00 00 01 00 0E 02 A2 03 02 01 00 A3 05 A1 03 02 01 00 6C 81 9F A2 81 9C 02 01 00 30 81 96 02 01 38 30 81 90 30 22 04 10 8F C6 30 2F 3A 4E 49 0B 1E A7 38 80 B0 C4 C4 93 04 04 C9 B7 33 E3 04 08 12 D2 A2 7F D5 D3 3A C6 30 22 04 10 32 4E 2B 63 D9 29 F2 F1 B0 B8 79 9A 68 78 54 AE 04 04 08 D8 F1 D6 04 08 00 CE B0 3E CF 17 36 36 30 22 04 10 78 56 75 32 9C BF 77 75 A4 5B 06 3E E1 92 26 E1 04 04 7D 65 6F AB 04 08 FC AA D0 94 32 02 5E 54 30 22 04 10 E5 14 00 45 B7 97 BF ED 3D 89 F3 E0 59 EB E8 3A 04 04 82 D6 0A 47 04 08 56 AB DB F2 A8 B8 DF F0 04 00 00 01 00 0E 02 00 00 00 00 00 00 00 00 00 00 6C 14 A1 80 02 01 8F 02 01 38 04 08 04 84 10 01 50 97 37 F9 00 00 POS BINARY NAME VALUE

MTP2 ITU 00 .1011100 BSN 92

1....... BIB 101 .0110111 FSN 55

1....... FIB 102 ..111111 LI 63

00...... Spare 0SIO


SIF 4-287 SIF 284 Octets (hex): C3 A8 F7 E0 09...

Discrepancy in contents: .SIF: value not in specified subset (size 2..272) SCCP ITU Routing Label

4-5 DPC 104355-7 OPC 99007 1110.... SLS 14

9


Message type







Pointer to Data


















of address indicator)

10


......1. SSN indicator 1 (address contains a subsystem number)

.......0 Point code indicator 0 (address does not contain a signalling point code)








38-248 Data 211 Octets (hex): 64 81 D0 49 04...TCAP/MAP R7

43-46 dtid 4 Octets (hex): 00 00 20 6DdialoguePortion

51-86 external see below53-59 dialogue_as_id {itu-t(0) recommendation(0) q(17) 773 as(1) dialogue-as(1) version1(1)}62-86 dialoguePDU dialogueResponse64-86 dialogueResponse see below

protocol-version 1 Bits: 1version1 (bit #0) 1


infoRetrieval(14) version2(2)}

79 00000000 result 0 (accepted)

82-86 result-source-diagnostic dialogue-service-user

86 00000000 dialogue-service-user 0 (null)

components 90-248 components[0] returnResultLast93-248 returnResultLast see below

95 00000000 invokeID 0

99-248 result see below99-101 operationCode localValue

101 00111000 localValue 56 (SendAuthenticationInfo)

102-248 parameter SendAuthenticationInfo

102-248 SendAuthenticationInfo SEQUENCE OF

105- SEQUENCE OF 4 Elements

11


248105-140 SEQUENCE OF[0] SEQUENCE OF

107-140 SEQUENCE OF 3 Elements

107-124

SEQUENCE OF[0] OCTET STRING

109-124

OCTET STRING 16 Octets (hex): 8F C6 30 2F 3A...

125-130


127-130

OCTET STRING 4 Octets (hex): C9 B7 33 E3

131-140


133-140

OCTET STRING 8 Octets (hex): 12 D2 A2 7F D5...



143-160


145-160

OCTET STRING 16 Octets (hex): 32 4E 2B 63 D9...

161-166


163-166

OCTET STRING 4 Octets (hex): 08 D8 F1 D6

167-176


169-176

OCTET STRING 8 Octets (hex): 00 CE B0 3E CF...



179-196


181-196

OCTET STRING 16 Octets (hex): 78 56 75 32 9C...

197-202


199-202

OCTET STRING 4 Octets (hex): 7D 65 6F AB

203-212


205-212

OCTET STRING 8 Octets (hex): FC AA D0 94 32...

12




215-232


217-232

OCTET STRING 16 Octets (hex): E5 14 00 45 B7...

233-238


235-238

OCTET STRING 4 Octets (hex): 82 D6 0A 47

239-248


241-248

OCTET STRING 8 Octets (hex): 56 AB DB F2 A8...

Discrepancy in encoding: octet 102: .components(0).returnResultLast.result .parameter.SendAuthenticationInfo: tag [CONT 3] expected in value being decoded, but [UNIV 16] found

13

MTP2 ITU.IAM 81 82 1F 05 BC 41 53 10 01 00 01 00 20 00 0A 03 02 08 06 03 10 11 11 11 F2 0A 06 83 13 22 22 22 01 00 POS BINARY NAME VALUE

MTP2 ITU 00 .0000001 BSN 1

1....... BIB 101 .0000010 FSN 2

1....... FIB 102 ..011111 LI 31

00...... Spare 0SIO

03 ....0101 Service indicator 5 (ISDN User Part Service)....0101 Sub-service field see below..00.... Spare 000...... Network indicator 0 (International network)

SIF 4-33 SIF 30 Octets (hex): BC 41 53 10 01...

ISUP ITU Routing Label

4-5 DPC 4445-7 OPC 33307 0001.... SLS 1

CIC 8-9 CIC 1

Message type 10 00000001 Message type IAM (1)

Nature of connection indicators 11 ......00 Satellite indicator 0 (no satellite circuit in the connection)

....00.. Continuity check indicator 0 (continuity check not required)...0.... Echo control device indicator 0 (outgoing echo control device not included)000..... spare 0

Forward call indicators 12 .......0 National/international call indicator 0 (call to be treated as a national call)

.....00. End-to-end method indicator 0 (no end-to-end method available)....0... Interworking indicator 0 (no interworking encountered)...0.... End-to-end information indicator 0 (no end-to-end information available)..1..... ISDN user part indicator 1 (ISDN user part used all the way)00...... ISDN user part preference indicator 0 (ISDN user part preferred all the way)

13 .......0 ISDN access indicator 0 (originating access non-ISDN).....00. SCCP method indicator 0 (no indication)....0... spare 0

0000.... reserved for national use 0

14


Calling party's category 14 00001010 Calling party's category 10 (ordinary calling subscriber)

Transmission medium requirement 15 00000011 Transmission medium requirement 3 (3.1 kHz audio)

Pointer to Called party number 16 00000010 Pointer to Called party number 2

Pointer to start of optional part 17 00001000 Pointer to start of optional part 8

Called party number 18 00000110 Length indicator 619 0....... Odd/even indicator 0 (even number of address signals)

.0000011 Nature of address indicator 3 (national (significant) number)20 0....... Internal Network Number indicator 0 (routing to internal network number allowed)

.001.... Numbering plan indicator 1 (ISDN numbering plan)....0000 spare 0

21-24 Address signals 1111112Calling party number

25 00001010 Parameter name Calling party number (10)26 00000110 Length indicator 627 1....... Odd/even indicator 1 (odd number of address signals)

.0000011 Nature of address indicator 3 (national number)28 0....... Number Incomplete indicator 0 (Complete)

.001.... Numbering plan indicator 1 (ISDN numbering plan)....00.. Address presentation restricted indicator 0 (presentation allowed)......11 Screening indicator 3 (network provided)

29-32 Address signals 2222221End of optional parameters

33 00000000 End of optional parameters 0

MTP2 ITU.ACM B2 AE 0B 85 AE 94 50 C4 4C 03 06 02 34 00 POS BINARY NAME VALUE

MTP2 ITU 00 .0110010 BSN 50

1....... BIB 101 .0101110 FSN 46

1....... FIB 102 ..001011 LI 11

00...... Spare 0SIO

03 ....0101 Service indicator 5 (ISDN User Part Service)....0101 Sub-service field see below..00.... Spare 010...... Network indicator 2 (National network)

SIF

15


4-13 SIF 10 Octets (hex): AE 94 50 C4 4C...ISUP ITU Routing Label

4-5 DPC 52945-7 OPC 441807 1100.... SLS 12

CIC 8-9 CIC 844

Message type 10 00000110 Message type ACM (6)

Backward call indicators 11 ......10 Charge indicator 2 (charge)

....00.. Called party's status indicator 0 (no indication)

..00.... Called party's category indicator 0 (no indication)00...... End-to-end method indicator 0 (no end-to-end method available)

12 .......0 Interworking indicator 0 (no interworking encountered)......0. End-to-end information indicator 0 (no end-to-end information available).....1.. ISDN user part indicator 1 (ISDN user part used all the way)....0... Holding indicator 0 (holding not requested)...1.... ISDN access indicator 1 (terminating access ISDN)..1..... Echo control device indicator 1 (incoming echo control device included)00...... SCCP method indicator 0 (no indication)

Pointer to start of optional part 13 00000000 Pointer to start of optional part 0 (No optional part)

MTP2 ITU.CC.AUTHENTICATION REQUEST EB C8 27 83 38 01 3C 1A 02 0F 27 41 25 59 AE 02 01 0F 16 01 00 13 05 12 00 5E 55 4C 14 90 D8 A9 A6 10 02 DB 14 A9 00 D8 F1 00 POS BINARY NAME VALUE

MTP2 ITU 00 .1101011 BSN 107

1....... BIB 101 .1001000 FSN 72

1....... FIB 102 ..100111 LI 39

00...... Spare 0SIO




16


4-5 DPC 3125-7 OPC 1048007 0001.... SLS 1

Message type 08 00000010 Message type CC (2)




0000.... spare 0Pointer to start of optional part

16 00000001 Pointer to start of optional part 1Data

17 00001111 Parameter name Data (15)18 00010110 Length indicator 22

19-40 Data 22 Octets (hex): 01 00 13 05 12...End of optional parameters

41 00000000 End of optional parameters 0GSM BSSAP Distribution Data Unit




Layer 3 data 22-40 Layer 3 data 19 Octets (hex): 05 12 00 5E 55...

GSM DTAP 22-40 19 Octets (hex): 05 12 00 5E 55...

GSM Radio L3 22 ....0101 Mobility management protocol discriminator 5 (mobility management messages)

0000.... Skip Indicator 0Authentication Request message type

23 00...... N(SD) 0..010010 Message type Authentication request (18)

Spare half octet 24 0000.... Spare half octet 0

Ciphering key sequence Number ....0... Spare spare value (0).....000 key sequence 0 (0)

Authentication parameter RAND (UMTS challenge or GSM challenge)

17


25-40 Authentication parameter RAND (UMTS challenge or GSM challenge) 16 Octets (hex): 5E 55 4C 14 90...MTP2 ITU.UDT.End [SendAuthenticationInfo] [TCAP/MAP R7] DC B7 3F 83 C3 A8 F7 E0 09 00 03 0E 19 0B 12 07 00 12 04 19 49 24 92 99 59 0B 12 06 00 12 04 19 49 34 91 99 49 D3 64 81 D0 49 04 00 00 20 6D 6B 26 28 24 06 07 00 11 86 05 01 01 01 A0 19 61 17 A1 09 06 07 04 00 00 01 00 0E 02 A2 03 02 01 00 A3 05 A1 03 02 01 00 6C 81 9F A2 81 9C 02 01 00 30 81 96 02 01 38 30 81 90 30 22 04 10 8F C6 30 2F 3A 4E 49 0B 1E A7 38 80 B0 C4 C4 93 04 04 C9 B7 33 E3 04 08 12 D2 A2 7F D5 D3 3A C6 30 22 04 10 32 4E 2B 63 D9 29 F2 F1 B0 B8 79 9A 68 78 54 AE 04 04 08 D8 F1 D6 04 08 00 CE B0 3E CF 17 36 36 30 22 04 10 78 56 75 32 9C BF 77 75 A4 5B 06 3E E1 92 26 E1 04 04 7D 65 6F AB 04 08 FC AA D0 94 32 02 5E 54 30 22 04 10 E5 14 00 45 B7 97 BF ED 3D 89 F3 E0 59 EB E8 3A 04 04 82 D6 0A 47 04 08 56 AB DB F2 A8 B8 DF F0 04 00 00 01 00 0E 02 00 00 00 00 00 00 00 00 00 00 6C 14 A1 80 02 01 8F 02 01 38 04 08 04 84 10 01 50 97 37 F9 00 00 POS BINARY NAME VALUE

MTP2 ITU 00 .1011100 BSN 92

1....... BIB 101 .0110111 FSN 55

1....... FIB 102 ..111111 LI 63

00...... Spare 0SIO


SIF 4-287 SIF 284 Octets (hex): C3 A8 F7 E0 09...

Discrepancy in contents: .SIF: value not in specified subset (size 2..272) SCCP ITU Routing Label

4-5 DPC 104355-7 OPC 99007 1110.... SLS 14

Message type







Pointer to Data 12 0001100 Pointer to Data 25

18


1Called party address
























19


138-248 Data 211 Octets (hex): 64 81 D0 49 04...

TCAP/MAP R7 43-46 dtid 4 Octets (hex): 00 00 20 6D

dialoguePortion 51-86 external see below53-59 dialogue_as_id {itu-t(0) recommendation(0) q(17) 773 as(1) dialogue-as(1) version1(1)}62-86 dialoguePDU dialogueResponse64-86 dialogueResponse see below

protocol-version 1 Bits: 1version1 (bit #0) 1


infoRetrieval(14) version2(2)}

79 00000000 result 0 (accepted)

82-86 result-source-diagnostic dialogue-service-user

86 00000000 dialogue-service-user 0 (null)

components 90-248 components[0] returnResultLast93-248 returnResultLast see below

95 00000000 invokeID 0

99-248 result see below99-101 operationCode localValue

101 00111000 localValue 56 (SendAuthenticationInfo)

102-248 parameter SendAuthenticationInfo

102-248 SendAuthenticationInfo SEQUENCE OF




107-124


109-124

OCTET STRING 16 Octets (hex): 8F C6 30 2F 3A...

125-130


127-130

OCTET STRING 4 Octets (hex): C9 B7 33 E3

131-140


20


133-140

OCTET STRING 8 Octets (hex): 12 D2 A2 7F D5...



143-160


145-160

OCTET STRING 16 Octets (hex): 32 4E 2B 63 D9...

161-166


163-166

OCTET STRING 4 Octets (hex): 08 D8 F1 D6

167-176


169-176

OCTET STRING 8 Octets (hex): 00 CE B0 3E CF...



179-196


181-196

OCTET STRING 16 Octets (hex): 78 56 75 32 9C...

197-202


199-202

OCTET STRING 4 Octets (hex): 7D 65 6F AB

203-212


205-212

OCTET STRING 8 Octets (hex): FC AA D0 94 32...



215-232


217-232

OCTET STRING 16 Octets (hex): E5 14 00 45 B7...

233-238


235-238

OCTET STRING 4 Octets (hex): 82 D6 0A 47

239-248


241-248

OCTET STRING 8 Octets (hex): 56 AB DB F2 A8...

21


Discrepancy in encoding: octet 102: .components(0).returnResultLast.result .parameter.SendAuthenticationInfo: tag [CONT 3] expected in value being decoded, but [UNIV 16] found

MTP2 ITU.DT1.CIPHER MODE COMMAND 5F D4 18 83 38 01 3C 1A 06 0F 27 41 00 01 0C 00 0A 53 07 02 06 00 0A 01 01 23 01 POS BINARY NAME VALUE

MTP2 ITU 00 .1011111 BSN 95

0....... BIB 001 .1010100 FSN 84

1....... FIB 102 ..011000 LI 24

00...... Spare 0SIO




4-5 DPC 3125-7 OPC 1048007 0001.... SLS 1

Message type 08 00000110 Message type DT1 (6)


Segmenting/reassembling 12 0000000. spare 0

.......0 More data indication 0 (no more data)Pointer to Data

13 00000001 Pointer to Data 1Data

14 00001100 Length indicator 1215-26 Data 12 Octets (hex): 00 0A 53 07 02...

GSM BSSAP Distribution Data Unit

15 00000000 Discrimination Parameter 0 (Non Transparent)Length indicator

16 00001010 Length indicator 10Layer 3 data

17-26 Layer 3 data 10 Octets (hex): 53 07 02 06 00...

22


GSM BSSMAP 17 01010011 Message Type CIPHER MODE COMMAND (83)

Layer 3 Header Information 18 00000111 Information Element Identifier Layer 3 Header Information (7)19 00000010 Length 220 00000110 Protocol discriminator 621 00000000 Transaction identifier 0

Encryption Information 22 00001010 Information Element Identifier Encryption Information (10)23 00000001 Length 124 00000001 Permitted algorithms see below

0....... GSM A5/7 0 (not permitted).0...... GSM A5/6 0 (not permitted)..0..... GSM A5/5 0 (not permitted)...0.... GSM A5/4 0 (not permitted)....0... GSM A5/3 0 (not permitted).....0.. GSM A5/2 0 (not permitted)......0. GSM A5/1 0 (not permitted).......1 No encryption 1 (permitted)

Cipher Response Mode 25 00100011 Information Element Identifier Cipher Response Mode (35)26 0000000. spare 0

.......1 Bit 1 1 (IMEISV must be included by the Mobile Station)

MTP2 ITU.DT1.CIPHER MODE COMPLETE DC 65 01 83 F0 28 4E A0 06 25 59 AE 00 01 10 00 0E 55 20 0B 17 09 33 15 08 09 50 49 94 02 F0 POS BINARY NAME VALUE

MTP2 ITU 00 .1011100 BSN 92

1....... BIB 101 .1100101 FSN 101

0....... FIB 002 ..000001 LI 1

00...... Spare 0SIO


SIF 4-30 SIF 27 Octets (hex): F0 28 4E A0 06...


4-5 DPC 104805-7 OPC 312

23


07 1010.... SLS 10Message type

08 00000110 Message type DT1 (6)Destination local reference

9-11 Destination local reference 11426085Segmenting/reassembling

12 0000000. spare 0.......0 More data indication 0 (no more data)


Data 14 00010000 Length indicator 16

15-30 Data 16 Octets (hex): 00 0E 55 20 0B...GSM BSSAP Distribution Data Unit



17-30 Layer 3 data 14 Octets (hex): 55 20 0B 17 09...GSM BSSMAP

17 01010101 Message Type CIPHER MODE COMPLETE (85)Layer 3 Message Contents

18 00100000 Information Element Identifier Layer 3 Message Contents (32)19 00001011 Length 11

20-30 Layer 3 message contents 11 Octets (hex): 17 09 33 15 08...

MTP2 ITU.DT1.TMSI REALLOCATION COMMAND FA DE 1C 83 38 01 3C 1A 06 0F 27 41 00 01 10 01 00 0D 05 1A 04 F4 17 00 70 05 F4 27 81 49 D1 POS BINARY NAME VALUE

MTP2 ITU 00 .1111010 BSN 122

1....... BIB 101 .1011110 FSN 94

1....... FIB 102 ..011100 LI 28

00...... Spare 0SIO



SCCP ITU

24


Routing Label 4-5 DPC 3125-7 OPC 1048007 0001.... SLS 1

Message type

08 00000110 Message type DT1 (6)





Data


15-30 Data 16 Octets (hex): 01 00 0D 05 1A...


15 00000001 Discrimination Parameter 1 (Transparent)

16 00000000 DLCI see below


Length indicator


Layer 3 data 18-30 Layer 3 data 13 Octets (hex): 05 1A 04 F4 17...

GSM DTAP 18-30 13 Octets (hex): 05 1A 04 F4 17...

GSM Radio L3

18 ....0101 Mobility management protocol discriminator 5 (mobility management messages)

0000.... Skip Indicator 0TMSI Reallocation Command message type

19 00...... N(SD) 0..011010 Message type TMSI reallocation command (26)

Location area identification 20 0000.... MCC digit 2 0

25


....0100 MCC digit 1 421 1111.... MNC digit 3 15

....0100 MCC digit 3 422 0001.... MNC digit 2 1

....0111 MNC digit 1 723-24 LAC 112

Mobile identity


26 .....100 Type of identity TMSI/P-TMSI (4)

....0... Odd/even indicator even number of identity digits and also when the TMSI/P-TMSI is used (0)

1111.... spare 1527-30 TMSI/P-TMSI Identity digits 4 Octets (hex): 27 81 49 D1

MTP2 ITU.DT1.SETUP FA DF 1E 83 38 01 3C 1A 06 0F 27 41 00 01 12 01 00 0F 13 05 04 01 A0 5C 08 11 83 19 18 85 58 17 41 POS BINARY NAME VALUE

MTP2 ITU 00 .1111010 BSN 122

1....... BIB 101 .1011111 FSN 95

1....... FIB 102 ..011110 LI 30

00...... Spare 0SIO




4-5 DPC 3125-7 OPC 1048007 0001.... SLS 1




.......0 More data indication 0 (no more data)

26




15-32 Data 18 Octets (hex): 01 00 0F 13 05...GSM BSSAP Distribution Data Unit




Layer 3 data 18-32 Layer 3 data 15 Octets (hex): 13 05 04 01 A0...

GSM DTAP 18-32 15 Octets (hex): 13 05 04 01 A0...

GSM Radio L3 18 ....0011 Call control protocol discriminator 3 (call control; call related SS messages)

Transaction identifier .001.... TIO TI value 1 (1)0....... TI flag The message is sent from the side that originates the TI (0)

Setup Message type 19 00...... N(SD) 0

..000101 Message type Setup (5)Bearer capability list

20-22 Bearer capability 1 Elements20-22 Bearer capability[0] see below

20 00000100 Information Element Identifier 421 00000001 Length indicator 122 1....... Ext3 no octet 3a (1)

.01..... radio channel requirement full rate support only MS / fullrate speech version 1 supported (1)...0.... Coding standard GSM standardized coding as described below (0)....0... transfer mode circuit mode (0).....000 information transfer capability speech (0)

Calling party BCD Number 23 01011100 Information Element Identifier 9224 00001000 Length indicator 825 0....... Ext Octet 3a follows (0)

.001.... Type of number international number (1)....0001 Numbering plan identification ISDN/telephony numbering plan (1)

26 1....... Ext3a Reserved value (1).00..... Presentation indicator Presentation allowed (0)...000.. spare spare value (0)

27


......11 screening indicator Network provided (3)27-32 Number digits 918158857114

MTP2 ITU.DT1.ASSIGNMENT REQUEST 89 F4 22 83 38 01 3C 1A 06 0F 27 41 00 01 16 00 14 01 0B 05 01 0F 91 81 05 07 02 06 00 06 01 19 01 00 B5 19 01 POS BINARY NAME VALUE

MTP2 ITU 00 .0001001 BSN 9

1....... BIB 101 .1110100 FSN 116

1....... FIB 102 ..100010 LI 34

00...... Spare 0SIO




4-5 DPC 3125-7 OPC 1048007 0001.... SLS 1






14 00010110 Length indicator 2215-36 Data 22 Octets (hex): 00 14 01 0B 05...




17-36 Layer 3 data 20 Octets (hex): 01 0B 05 01 0F...

28


GSM BSSMAP 17 00000001 Message Type ASSIGNMENT REQUEST (1)

Channel Type 18 00001011 Information Element Identifier Channel Type (11)19 00000101 Length 520 0000.... spare 0

....0001 Speech / data indicator 1 (Speech)21 00001111 Channel rate and type for speech 15 (Full or Half rate TCH channel, preference specified, changes allowed)

22-24 Permitted speech version indication 3 Elements22 10010001 Permitted speech version indication[0] see below

1....... Extension bit 1 (extension).0010001 permitted speech version identifier 17 (GSM speech full rate version 2)

23 10000001 Permitted speech version indication[1] see below1....... Extension bit 1 (extension)

.0000001 permitted speech version identifier 1 (GSM speech full rate version 1)24 00000101 Permitted speech version indication[2] see below

0....... Extension bit 0 (no extension).0000101 permitted speech version identifier 5 (GSM speech half rate version 1)

Layer 3 Header Information 25 00000111 Information Element Identifier Layer 3 Header Information (7)26 00000010 Length 227 00000110 Protocol discriminator 628 00000000 Transaction identifier 0

Priority 29 00000110 Information Element Identifier Priority (6)30 00000001 Length 131 0....... spare 0

.0...... pci 0 (this allocation request shall not preempt an existing connection)..0110.. priority level 6 (priority level 6)......0. qa 0 (queuing not allowed).......1 pvi 1 (this connection might be preempted by another allocation request)

Circuit Identity Code 32 00000001 Information Element Identifier Circuit Identity Code (1)

33-34 CIC 181Downlink DTX Flag

35 00011001 Information Element Identifier Downlink DTX Flag (25)36 0000000. spare 0

.......1 Downlink DTX flag 1 (the MSC forbids the BSS to activate DTX in the downlink direction)

MTP2 ITU.DT1.ASSIGNMENT COMPLETE 83 15 13 83 F0 28 4E A0 06 25 59 AE 00 01 07 00 05 02 21 08 40 11 POS BINARY NAME VALUE

MTP2 ITU 00 .0000011 BSN 3

1....... BIB 1

29


01 .0010101 FSN 210....... FIB 0

02 ..010011 LI 1900...... Spare 0





4-5 DPC 104805-7 OPC 31207 1010.... SLS 10






14 00000111 Length indicator 715-21 Data 7 Octets (hex): 00 05 02 21 08...




17-21 Layer 3 data 5 Octets (hex): 02 21 08 40 11GSM BSSMAP

17 00000010 Message Type ASSIGNMENT COMPLETE (2)Chosen Channel

18 00100001 Information Element Identifier Chosen Channel (33)19 0000.... Channel mode 0 (no channel mode indication)

....1000 Channel 8 (1 Full rate TCH)Speech Version (Chosen)

20 01000000 Information Element Identifier Speech Version (64)21 0....... spare 0

.0010001 Speech version identifier 17 (GSM speech full rate version 2)

30

MTP2 ITU.DT1.ALERTING 83 16 11 83 F0 28 4E A0 06 25 59 AE 00 01 05 01 00 02 93 41 POS BINARY NAME VALUE

MTP2 ITU 00 .0000011 BSN 3

1....... BIB 101 .0010110 FSN 22

0....... FIB 002 ..010001 LI 17

00...... Spare 0SIO




4-5 DPC 104805-7 OPC 31207 1010.... SLS 10






14 00000101 Length indicator 515-19 Data 5 Octets (hex): 01 00 02 93 41





Layer 3 data 18-19 Layer 3 data 2 Octets (hex): 93 41

31


GSM DTAP 18-19 2 Octets (hex): 93 41


Transaction identifier .001.... TIO TI value 1 (1)1....... TI flag The message is sent to the side that originates the TI (1)

Alerting message type 19 01...... N(SD) 1

..000001 Message type Alerting (1)

MTP2 ITU.DT1.CONNECT 96 4A 11 83 F0 28 4E A0 06 25 59 AE 00 01 05 01 00 02 93 07 POS BINARY NAME VALUE

MTP2 ITU 00 .0010110 BSN 22

1....... BIB 101 .1001010 FSN 74

0....... FIB 002 ..010001 LI 17

00...... Spare 0SIO




4-5 DPC 104805-7 OPC 31207 1010.... SLS 10






14 00000101 Length indicator 515-19 Data 5 Octets (hex): 01 00 02 93 07

32






Layer 3 data 18-19 Layer 3 data 2 Octets (hex): 93 07

GSM DTAP 18-19 2 Octets (hex): 93 07


Transaction identifier .001.... TIO TI value 1 (1)1....... TI flag The message is sent to the side that originates the TI (1)

Connect message type 19 00...... N(SD) 0

..000111 Message type Connect (7)

MTP2 ITU.DT1.CONNECT ACKNOWLEDGE E5 B2 11 83 38 01 3C 1A 06 0F 27 41 00 01 05 01 00 02 13 0F POS BINARY NAME VALUE

MTP2 ITU 00 .1100101 BSN 101

1....... BIB 101 .0110010 FSN 50

1....... FIB 102 ..010001 LI 17

00...... Spare 0SIO




4-5 DPC 3125-7 OPC 1048007 0001.... SLS 1

Message type

33


08 00000110 Message type DT1 (6)Destination local reference

9-11 Destination local reference 4269839Segmenting/reassembling

12 0000000. spare 0.......0 More data indication 0 (no more data)



15-19 Data 5 Octets (hex): 01 00 02 13 0FGSM BSSAP Distribution Data Unit




Layer 3 data 18-19 Layer 3 data 2 Octets (hex): 13 0F

GSM DTAP 18-19 2 Octets (hex): 13 0F



Connect acknowledge message type 19 00...... N(SD) 0

..001111 Message type Connect acknowledge (15)

MTP2 ITU.DT1.DISCONNECT C6 DD 14 83 38 01 3C 1A 06 0F 27 41 00 01 08 01 00 05 13 25 02 EA 90 POS BINARY NAME VALUE

MTP2 ITU 00 .1000110 BSN 70

1....... BIB 101 .1011101 FSN 93

1....... FIB 102 ..010100 LI 20

00...... Spare 0SIO

03 ....0011 Service indicator 3 (SCCP Service)

34





4-5 DPC 3125-7 OPC 1048007 0001.... SLS 1











Layer 3 data 18-22 Layer 3 data 5 Octets (hex): 13 25 02 EA 90

GSM DTAP 18-22 5 Octets (hex): 13 25 02 EA 90



Disconnect message type 19 00...... N(SD) 0

..100101 Message type Disconnect (37)Cause


35


21 1....... Ext No octet 3a (1).11..... coding standard Standard defined for the GSM PLMNS (3)...0.... Spare spare value (0)

....1010 location network beyond interworking point (10)22 1....... Ext4 Reserved value (1)

.0010000 cause value Normal call clearing (16)Diagnostics 0 Octets

MTP2 ITU.RLSD D1 E6 0E 83 38 01 3C 1A 04 0F 27 41 25 59 AE 00 00 POS BINARY NAME VALUE

MTP2 ITU 00 .1010001 BSN 81

1....... BIB 101 .1100110 FSN 102

1....... FIB 102 ..001110 LI 14

00...... Spare 0SIO




4-5 DPC 3125-7 OPC 1048007 0001.... SLS 1

Message type 08 00000100 Message type RLSD (4)



Release cause 15 00000000 Release cause 0 (end user originated)

Pointer to start of optional part 16 00000000 Pointer to start of optional part 0 (No optional part)

MTP2 ITU.RLC 87 75 0C 83 F0 28 4E A0 05 25 59 AE 0F 27 41


MTP2 ITU

36


00 .0000111 BSN 71....... BIB 1

01 .1110101 FSN 1170....... FIB 0

02 ..001100 LI 1200...... Spare 0





4-5 DPC 104805-7 OPC 31207 1010.... SLS 10

Message type 08 00000101 Message type RLC (5)



MTP2 ITU.DT1.CLEAR COMMAND CE E3 16 83 38 01 3C 1A 06 0F 27 41 00 01 0A 00 08 20 07 02 06 00 04 01 09 POS BINARY NAME VALUE

MTP2 ITU 00 .1001110 BSN 78

1....... BIB 101 .1100011 FSN 99

1....... FIB 102 ..010110 LI 22

00...... Spare 0SIO




4-5 DPC 312

37


5-7 OPC 1048007 0001.... SLS 1










17-24 Layer 3 data 8 Octets (hex): 20 07 02 06 00...GSM BSSMAP

17 00100000 Message Type CLEAR COMMAND (32)Layer 3 Header Information

18 00000111 Information Element Identifier Layer 3 Header Information (7)19 00000010 Length 220 00000110 Protocol discriminator 621 00000000 Transaction identifier 0

Cause 22 00000100 Information Element Identifier Cause (4)23 00000001 Length 124 0....... 0/1 ext 0 (the Cause Value is a single octet field)

.0001001 Cause Value 9 (Call control)

MTP2 ITU.DT1.CLEAR COMPLETE 87 73 0F 83 F0 28 4E A0 06 25 59 AE 00 01 03 00 01 21


MTP2 ITU 00 .0000111 BSN 7

1....... BIB 101 .1110011 FSN 115

0....... FIB 002 ..001111 LI 15

00...... Spare 0SIO

38





4-5 DPC 104805-7 OPC 31207 1010.... SLS 10






14 00000011 Length indicator 315-17 Data 3 Octets (hex): 00 01 21




17 00100001 Layer 3 data 1 Octets (hex): 21GSM BSSMAP

17 00100001 Message Type CLEAR COMPLETE (33)

MTP2 ITU.UDT.PAGING C1 A9 2A 83 38 91 3C 2A 09 00 03 07 0B 04 43 38 01 FE 04 43 F0 28 FE 15 00 13 52 08 08 49 40 17 11 00 10 86 31 1A 06 04 04 F4 17 00 70 30 02 83 00 A1 35 02 01 39 02 01 30 30 2D A0 11 A0 0F 81 01 0F 82 01 0C 83 01 0B 85 01 0F 86 01 08 A2 18 A0 16 A0 0E BD 0C 02 02 01 0A 02 02 01 0E 02 02 01 14 81 01 01 82 01 5A POS BINARY NAME VALUE

MTP2 ITU 00 .1000001 BSN 65

1....... BIB 101 .0101001 FSN 41

1....... FIB 102 ..101010 LI 42

00...... Spare 0

39






4-5 DPC 44085-7 OPC 1048207 0010.... SLS 2

Message type 08 00001001 Message type UDT (9)



10 00000011 Pointer to Called party address 3Pointer to Calling party address

11 00000111 Pointer to Calling party address 7Pointer to Data

12 00001011 Pointer to Data 11Called party address

13 00000100 Length indicator 414 01000011 Address indicator see below

0....... spare 0.1...... Routing indicator 1 (Route on SSN)

..0000.. Global title indicator 0 (no global title included)......1. SSN indicator 1 (address contains a subsystem number).......1 Point code indicator 1 (address contains a signalling point code)

15-16 Signalling point code see below15-16 Signalling point code 312

16 00...... spare 017 11111110 Subsystem number 254 -> reserved for national networks

Calling party address 18 00000100 Length indicator 419 01000011 Address indicator see below


..0000.. Global title indicator 0 (no global title included)......1. SSN indicator 1 (address contains a subsystem number).......1 Point code indicator 1 (address contains a signalling point code)

20-21 Signalling point code see below20-21 Signalling point code 10480

40


21 00...... spare 022 11111110 Subsystem number 254 -> reserved for national networks


24-44 Data 21 Octets (hex): 00 13 52 08 08...GSM BSSAP Distribution Data Unit



26-44 Layer 3 data 19 Octets (hex): 52 08 08 49 40...GSM BSSMAP

26 01010010 Message Type PAGING (82)IMSI

27 00001000 Information Element Identifier IMSI (8)28 00001000 Length 829 .....001 Type of identity IMSI (1)

....1... Odd/even indicator odd number of identity digits (1)29-36 Identity digits 404711100016813

Cell Identifier List 37 00011010 Information Element Identifier Cell Identifier List (26)38 00000110 Length 639 0000.... spare 0

....0100 Cell identification discriminator 4 (Location Area Identification, LAI, is used to identify all cells within a LocationArea)

40-44 Cell identification 1 Elements40-44 Cell identification[0] LAI40-44 LAI see below

40 0000.... MCC dig 2 0....0100 MCC dig 1 4

41 1111.... MNC dig 3 15....0100 MCC dig 3 4

42 0001.... MNC dig 2 1....0111 MNC dig 1 7

43-44 LAC 112

MTP2 ITU.CR.COMPLETE LAYER 3 INFORMATION.PAGING RESPONSE CB 4F 2E 83 F0 28 4E A0 01 0F 27 41 02 02 04 02 42 FE 0F 1C 00 1A 57 05 05 01 00 70 2F 1D 17 10 06 27 06 03 23 59 81 08 49 40 17 11 00 10 86 31 00 A0 0F 81 01 0F 82 01 0C 83 01 0B 85 01 0F 86 01 08 A2 18 A0 16 A0 0E BD 0C 02 02 01 0A 02 02 01 0E 02 02 01 14 81 01 01 82 01 5A POS BINARY NAME VALUE

MTP2 ITU 00 .1001011 BSN 75

1....... BIB 1

41


01 .1001111 FSN 790....... FIB 0

02 ..101110 LI 4600...... Spare 0





4-5 DPC 104805-7 OPC 31207 1010.... SLS 10

Message type

08 00000001 Message type CR (1)



0000.... spare 0Pointer to Called party address


Pointer to start of optional part

14 00000100 Pointer to start of optional part 4





..0000.. Global title indicator 0 (no global title included)......1. SSN indicator 1 (address contains a subsystem number).......0 Point code indicator 0 (address does not contain a signalling point code)

17 11111110 Subsystem number 254 -> reserved for national networks

Data

18 00001111 Parameter name Data (15)


42


20-47 Data 28 Octets (hex): 00 1A 57 05 05...

End of optional parameters

48 00000000 End of optional parameters 0


20 00000000 Discrimination Parameter 0 (Non Transparent)

Length indicator


Layer 3 data 22-47 Layer 3 data 26 Octets (hex): 57 05 05 01 00...

GSM BSSMAP

22 01010111 Message Type COMPLETE LAYER 3 INFORMATION (87)

Cell Identifier

23 00000101 Information Element Identifier Cell Identifier (5)

24 00000101 Length 5

25 0000.... spare 0....0001 Cell identification discriminator 1 (Location Area Code, LAC, and Cell Identify, CI, is used to identify the cells)

26-29 Cell identification LAC and CI

26-29 LAC and CI see below

26-27 LAC 112

28-29 CI value 12061

Layer 3 Information

30 00010111 Information Element Identifier Layer 3 Information (23)

31 00010000 Length 16

32-47 Layer 3 information 16 Octets (hex): 06 27 06 03 23...

GSM Radio L3

32 ....0110 RR management Protocol Discriminator 6 (radio resources management messages)

0000.... Skip Indicator 0Paging Response Message type

33 00100111 Message type Paging response (39)

43


Spare Half Octet 34 0000.... Spare Half Octet 0

Ciphering Key Sequence Number

....0... Spare spare value (0).....110 key sequence 6 (6)

Mobile Station Classmark


36 0....... Spare spare value (0).01..... Revision level Used by GSM phase 2 mobile stations (1)...0.... ES IND 'Controlled Early Classmark Sending' option is not implemented in the MS (0)....0... A5/1 algorithm supported encryption algorithm A5/1 available (0).....011 RF power capability power class 4 (3)

37 0....... Spare2 spare value (0).1...... PS capability PS capability present (1)..01.... SS Screening Indicator capability of handling of ellipsis notation and phase 2 error handling (1)....1... SM capability Mobile station supports mobile terminated point to point SMS (1).....0.. VBS notification reception no VBS capability or no notifications wanted (0)......0. VGCS notification reception no VGCS capability or no notifications wanted (0)

.......1 FC Frequency Capability When a GSM 900 band is used - The MS does support the E-GSM or R-GSM band (1)

38 1....... CM3 The MS supports options that are indicated in classmark 3 IE (1).0...... Spare3 spare value (0)..0..... LCS VA capability location request notification via CS domain not supported (0)

...0.... UCS2 treatment the ME has a preference for the default alphabet (defined in 3GPP TS 23.038 [8b]) over

UCS2 (0) ....0... SoLSA The ME does not support SoLSA (0).....0.. CM Service Prompt 'Network initiated MO CM connection request' not supported (0)......0. A5/3 algorithm supported encryption algorithm A5/3 not available (0).......1 A5/2 algorithm supported encryption algorithm A5/2 available (1)

Mobile Identity


40 .....001 Type of identity IMSI (1)....1... Odd/even indicator odd number of identity digits (1)

40-47 Identity digits 404711100016813

44

45

Documents

Full Tr