0% found this document useful (0 votes)
124 views9 pages

SPGW 2

A new incoming call is being traced. The call details include the IMSI, IMEI, MSISDN, and session type. A GTP Create PDP Context Request message is received containing the subscriber and routing information. A Diameter Credit-Control Request is sent to the online charging system with the subscriber and service details.

Uploaded by

Katea Ulianovici
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
124 views9 pages

SPGW 2

A new incoming call is being traced. The call details include the IMSI, IMEI, MSISDN, and session type. A GTP Create PDP Context Request message is received containing the subscriber and routing information. A Diameter Credit-Control Request is sent to the online charging system with the subscriber and service details.

Uploaded by

Katea Ulianovici
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 9

C - Control Events (ON ) 11 - PPP (ON ) 21 - L2TP (ON )

D - Data Events (ON ) 12 - A11 (ON ) 22 - L2TPMGR (OFF)


E - EventID Info (ON ) 13 - RADIUS Auth (ON ) 23 - L2TP Data (OFF)
I - Inbound Events (ON ) 14 - RADIUS Acct (ON ) 24 - GTPC (ON )
O - Outbound Events (ON ) 15 - Mobile IPv4 (ON ) 25 - TACACS (ON )
S - Sender Info (OFF) 16 - A11MGR (OFF) 26 - GTPU (OFF)
T - Timestamps (ON ) 17 - SESSMGR (ON ) 27 - GTPP (ON )
X - PDU Hexdump (OFF) 18 - A10 (OFF) 28 - DHCP (ON )
A - PDU Hex/Ascii (ON ) 19 - User L3 (ON ) 29 - CDR (ON )
+/- Verbosity Level ( 3) 31 - Radius COA (ON ) 30 - DHCPV6 (ON )
L - Limit Context (OFF) 32 - MIP Tunnel (ON ) 53 - SCCP (OFF)
M - Match Newcalls (ON ) 33 - L3 Tunnel (OFF) 54 - TCAP (OFF)
R - RADIUS Dict: (no-override) 34 - CSS Data (OFF) 55 - MAP (ON )
G - GTPP Dict: (no-override) 35 - CSS Signal (OFF) 56 - RANAP (OFF)
Y - Multi-Call Trace (ON ) 36 - EC Diameter (ON ) 57 - GMM (ON )
H - Display ethernet (OFF) 37 - SIP (IMS) (OFF) 58 - GPRS-NS (OFF)
U - Mon Display (ON ) 40 - IPSec IKEv2 (OFF) 59 - BSSGP (OFF)
V - PCAP Hexdump NONE 41 - IPSG RADIUS (ON ) 60 - CAP (ON )
42 - ROHC (OFF) 64 - LLC (OFF)
43 - WiMAX R6 (ON ) 65 - SNDCP (OFF)
44 - WiMAX Data (OFF) 66 - BSSAP+ (OFF)
45 - SRP (OFF) 67 - SMS (OFF)
68 - OpenFlow(ON )
46 - BCMCS SERV AUTH(OFF)
47 - RSVP (ON )
48 - Mobile IPv6 (ON ) 69 - X2AP (ON )
77 - ICAP (ON )
50 - STUN (IMS) (OFF) 78 - Micro-Tunnel(ON )
51 - SCTP (OFF)
72 - HNBAP (ON ) 79 - ALCAP (ON )
73 - RUA (ON ) 80 - SSL (ON )
74 - EGTPC (ON )
75 - App Specific Diameter (OFF)
81 - S1-AP (ON ) 82 - NAS (ON )
83 - LDAP (ON ) 84 - SGS (ON )
85 - AAL2 (ON ) 86 - S102 (ON )
87 - PPPOE (ON )
88 - RTP(IMS) (OFF) 89 - RTCP(IMS) (OFF)
91 - NPDB(IMS) (OFF)
92 - SABP (ON )
94 - SLS (ON )
96 - SBc-AP (ON )
97 - M3AP (ON )
49 - PFCP (ON )
76 - NSH (ON )

(Q)uit, <ESC> Prev Menu, <SPACE> Pause, <ENTER> Re-Display Options

----------------------------------------------------------------------
(Adding Trace) - New Incoming Call:
----------------------------------------------------------------------
MSID/IMSI : 259010116480987 Callid : 0693bca5
IMEI : 35904108096268 MSISDN : 37362143456
Username : 37362143456 SessionType : ggsn-pdp-type-ipv4
Status : Active Service Name: ggsn
Src Context : spgw
----------------------------------------------------------------------
Sunday February 23 2020
INBOUND>>>>> 11:17:48:107 Eventid:47000(3)
GTPC Rx PDU, from 193.239.182.212:19114 to 193.239.182.249:2123 (170)
TEID: 0x00000000, Message type: GTP_CREATE_PDP_CONTEXT_REQ_MSG (0x10)
Sequence Number:: 0x6B68 (27496)
GTP HEADER FOLLOWS:
Version number: 1
Protocol type: 1 (GTP C/U)
Extended header flag: Not present
Sequence number flag: Present
NPDU number flag: Not present
Message Type: 0x10 (GTP_CREATE_PDP_CONTEXT_REQ_MSG)
Message Length: 0x00A2 (162)
Tunnel ID: 0x00000000
Sequence Number: 0x6B68 (27496)
GTP HEADER ENDS.
INFORMATION ELEMENTS FOLLOW:
IMSI: 259010116480987
ROUTING AREA IDENTITY (RAI) FOLLOWS:
MCC: 259
MNC: 01
LAC:FFFE
RAC:FF
ROUTING AREA IDENTITY (RAI) ENDS.
Selection Mode: 0x0 (MS or network provided APN, subscribed verified
(Subscribed))
Tunnel ID Data I: 0x80472072
Tunnel ID Control I: 0x818D8072
NSAPI: 0x05 (5)

CHARGING CHARACTERISTIC FOLLOWS:


Charging Chars # 1: 0x0800 (Normal)
CHARGING CHARACTERISTIC ENDS.
END USER ADDRESS FOLLOWS:
PDP Type Organisation: IETF
PDP Type Number: IPv4
Address: Empty
END USER ADDRESS ENDS.
Access Point Name: wap.orange.md
PROTOCOL CONFIG. OPTIONS FOLLOW:
IE Length: 0x17 (23)
Configuration Protocol: (0) PPP
Extension Bit: (1)

Protocol id: 0x8021 (IPCP)


Protocol length: 0x10 (16)
Protocol contents: 01010010810600000000830600000000
Container id: 0x000D (IPv4-DNS-Server)
Container length: 0x00 (0)
Container contents:
PROTOCOL CONFIG. OPTIONS END.
GSN Address I: 0xC1EFB6D4 (193.239.182.212)
GSN Address II: 0xC1EFB6D4 (193.239.182.212)
MSISDN: 37362143456
QOS Profile: 0x0213921F719697FE44FAFFFF006400
COMMON FLAGS FOLLOW:
Prohibit Payload Compression: no
MBMS Service Type: Multicast Service
RAN Procedures Ready: no
MBMS Counting Information: no
No QoS negotiation: no
NRSN: yes
Upgrade QoS Supported: no
Dual Address Bearer Flag: no
COMMON FLAGS END.
Radio Access Technology: UTRAN
USER LOCATION INFORMATION: 259-01-115-50618
MS Time Zone: +2:00
Daylight Saving Time: +0 hour
IMEI(SV): 3590410809626801
INFORMATION ELEMENTS END.
PDU HEX DUMP FOLLOWS:
0x0000 3210 00a2 0000 0000 6b68 0000 0252 0901 2.......kh...R..
0x0010 1146 0889 f703 52f9 10ff feff 0ffc 1080 .F....R.........
0x0020 4720 7211 818d 8072 1405 1a08 0080 0002 G.r....r........
0x0030 f121 8300 0e03 7761 7006 6f72 616e 6765 .!....wap.orange
0x0040 026d 6484 0017 8080 2110 0101 0010 8106 .md.....!.......
0x0050 0000 0000 8306 0000 0000 000d 0085 0004 ................
0x0060 c1ef b6d4 8500 04c1 efb6 d486 0007 9173 ...............s
0x0070 6312 3454 f687 000f 0213 921f 7196 97fe c.4T........q...
0x0080 44fa ffff 0064 0094 0001 2097 0001 0198 D....d..........
0x0090 0008 0152 f910 0073 c5ba 9900 0280 009a ...R...s........
0x00a0 0008 5309 1480 9026 8610 ..S....&..

Sunday February 23 2020


<<<<OUTBOUND 11:17:48:111 Eventid:81990(5)
Diameter message from 10.126.3.76:50495 to 172.19.0.5:3870
Base Header Information:
Version: 1
Message Length: 836
Command Flags: REQ PXY (192)
Command Code: Credit-Control-Request (272)
Application ID: Credit-Control (4)
Hop2Hop-ID: 0xbf5bad05
End2End-ID: 0x02fa6e81
AVP Information:
[M] Session-Id: 0001-
diamproxy.af.gy.orange.md;110345381;978034711;5e52433c-1702
[M] Origin-Host: 0001-diamproxy.af.gy.orange.md
[M] Origin-Realm: gy.orange.md
[M] Destination-Realm: orange.md
[M] Auth-Application-Id: 4
[M] Service-Context-Id: [email protected]
[M] CC-Request-Type: INITIAL_REQUEST (1)
[M] CC-Request-Number: 0
[M] User-Name: [email protected]
[M] Origin-State-Id: 1521156408
[M] Event-Timestamp: Sunday February 23 09:17:48 GMT 2020
[M] Subscription-Id:
[M] Subscription-Id-Type: END_USER_E164 (0)
[M] Subscription-Id-Data: 37362143456
[M] Subscription-Id:
[M] Subscription-Id-Type: END_USER_IMSI (1)
[M] Subscription-Id-Data: 259010116480987
[M] Multiple-Services-Indicator: MULTIPLE_SERVICES_SUPPORTED (1)
[M] User-Equipment-Info:
[M] User-Equipment-Info-Type: IMEISV (0)
[M] User-Equipment-Info-Value: 3590410809626801
[V] [M] Service-Information:
[V] [M] PS-Information:
[V] [M] 3GPP-Charging-Id: 124713264
[V] [M] 3GPP-PDP-Type: IPv4 (0)
[V] [M] PDP-Address: IPv4 10.90.97.36
[V] [M] 3GPP-GPRS-QoS-Negotiated-Profile: 05-
13921F719697FE44FAFFFF006400
[V] [M] SGSN-Address: IPv4 193.239.182.212
[V] [M] GGSN-Address: IPv4 193.239.182.249
[V] [M] Serving-Node-Type: SGSN (0)
[V] [M] 3GPP-IMSI-MCC-MNC: 25901
[V] [M] 3GPP-GGSN-MCC-MNC: 25901
[V] [M] 3GPP-NSAPI: 5
[M] Called-Station-Id: wap.orange.md
[V] [M] 3GPP-Selection-Mode: 0
[V] [M] 3GPP-Charging-Characteristics: 0800
[V] [M] 3GPP-SGSN-MCC-MNC: 25901
[V] [M] 3GPP-MS-TimeZone: MS Time Zone: +2:00 Daylight Saving Time: +0
hour
[V] [M] Charging-Rule-Base-Name: wap.orange.md
[V] [M] 3GPP-User-Location-Info: Location Type: SAI (1) Location Info
(SAI): 259-01-0x73-0xC5BA
[V] [M] 3GPP-RAT-Type: 0x01
[V] [M] PDP-Context-Type: PRIMARY (0)

0x0000 0100 0344 c000 0110 0000 0004 bf5b ad05 ...D.........[..
0x0010 02fa 6e81 0000 0107 4000 0048 3030 3031 [email protected]
0x0020 2d64 6961 6d70 726f 7879 2e61 662e 6779 -diamproxy.af.gy
0x0030 2e6f 7261 6e67 652e 6d64 3b31 3130 3334 .orange.md;11034
0x0040 3533 3831 3b39 3738 3033 3437 3131 3b35 5381;978034711;5
0x0050 6535 3234 3333 632d 3137 3032 0000 0108 e52433c-1702....
0x0060 4000 0026 3030 3031 2d64 6961 6d70 726f @..&0001-diampro
0x0070 7879 2e61 662e 6779 2e6f 7261 6e67 652e xy.af.gy.orange.
0x0080 6d64 0000 0000 0128 4000 0014 6779 2e6f md.....(@...gy.o
0x0090 7261 6e67 652e 6d64 0000 011b 4000 0011 range.md....@...
0x00a0 6f72 616e 6765 2e6d 6400 0000 0000 0102 orange.md.......
0x00b0 4000 000c 0000 0004 0000 01cd 4000 0016 @...........@...
0x00c0 3332 3235 3140 3367 7070 2e6f 7267 0000 [email protected]..
0x00d0 0000 01a0 4000 000c 0000 0001 0000 019f ....@...........
0x00e0 4000 000c 0000 0000 0000 0001 4000 0021 @...........@..!
0x00f0 3337 3336 3231 3433 3435 3640 7761 702e 37362143456@wap.
0x0100 6f72 616e 6765 2e6d 6400 0000 0000 0116 orange.md.......
0x0110 4000 000c 5aab 0138 0000 0037 4000 000c @...Z..8...7@...
0x0120 e1fc c1bc 0000 01bb 4000 0028 0000 01c2 ........@..(....
0x0130 4000 000c 0000 0000 0000 01bc 4000 0013 @...........@...
0x0140 3337 3336 3231 3433 3435 3600 0000 01bb 37362143456.....
0x0150 4000 002c 0000 01c2 4000 000c 0000 0001 @..,....@.......
0x0160 0000 01bc 4000 0017 3235 3930 3130 3131 [email protected]
0x0170 3634 3830 3938 3700 0000 01c7 4000 000c 6480987.....@...
0x0180 0000 0001 0000 01ca 4000 002c 0000 01cb ........@..,....
0x0190 4000 000c 0000 0000 0000 01cc 4000 0018 @...........@...
0x01a0 3335 3930 3431 3038 3039 3632 3638 3031 3590410809626801
0x01b0 0000 0369 c000 0194 0000 28af 0000 036a ...i......(....j
0x01c0 c000 0188 0000 28af 0000 0002 c000 0010 ......(.........
0x01d0 0000 28af 076e f930 0000 0003 c000 0010 ..(..n.0........
0x01e0 0000 28af 0000 0000 0000 04cb c000 0012 ..(.............
0x01f0 0000 28af 0001 0a5a 6124 0000 0000 0005 ..(....Za$......
0x0200 c000 002b 0000 28af 3035 2d31 3339 3231 ...+..(.05-13921
0x0210 4637 3139 3639 3746 4534 3446 4146 4646 F719697FE44FAFFF
0x0220 4630 3036 3430 3000 0000 04cc c000 0012 F006400.........
0x0230 0000 28af 0001 c1ef b6d4 0000 0000 034f ..(............O
0x0240 c000 0012 0000 28af 0001 c1ef b6f9 0000 ......(.........
0x0250 0000 07ff c000 0010 0000 28af 0000 0000 ..........(.....
0x0260 0000 0008 c000 0011 0000 28af 3235 3930 ..........(.2590
0x0270 3100 0000 0000 0009 c000 0011 0000 28af 1.............(.
0x0280 3235 3930 3100 0000 0000 000a c000 000d 25901...........
0x0290 0000 28af 3500 0000 0000 001e 4000 0015 ..(.5.......@...
0x02a0 7761 702e 6f72 616e 6765 2e6d 6400 0000 wap.orange.md...
0x02b0 0000 000c c000 000d 0000 28af 3000 0000 ..........(.0...
0x02c0 0000 000d c000 0010 0000 28af 3038 3030 ..........(.0800
0x02d0 0000 0012 c000 0011 0000 28af 3235 3930 ..........(.2590
0x02e0 3100 0000 0000 0017 c000 000e 0000 28af 1.............(.
0x02f0 8000 0000 0000 03ec c000 0019 0000 28af ..............(.
0x0300 7761 702e 6f72 616e 6765 2e6d 6400 0000 wap.orange.md...
0x0310 0000 0016 c000 0014 0000 28af 0152 f910 ..........(..R..
0x0320 0073 c5ba 0000 0015 c000 000d 0000 28af .s............(.
0x0330 0100 0000 0000 04df c000 0010 0000 28af ..............(.
0x0340 0000 0000 ....

Sunday February 23 2020


INBOUND>>>>> 11:17:48:152 Eventid:81991(5)
Diameter message from 172.19.0.5:3870 to 10.126.3.76:50495
Base Header Information:
Version: 1
Message Length: 200
Command Flags: PXY (64)
Command Code: Credit-Control-Answer (272)
Application ID: Credit-Control (4)
Hop2Hop-ID: 0xbf5bad05
End2End-ID: 0x02fa6e81
AVP Information:
[M] Session-Id: 0001-
diamproxy.af.gy.orange.md;110345381;978034711;5e52433c-1702
[M] Result-Code: DIAMETER_END_USER_SERVICE_DENIED (4010)
[M] Origin-Host: alfaocc03.orange.md
[M] Origin-Realm: orange.md
[M] Auth-Application-Id: 4
[M] CC-Request-Number: 0
[M] CC-Request-Type: INITIAL_REQUEST (1)
[M] CC-Session-Failover: FAILOVER_NOT_SUPPORTED (0)

0x0000 0100 00c8 4000 0110 0000 0004 bf5b ad05 ....@........[..
0x0010 02fa 6e81 0000 0107 4000 0048 3030 3031 [email protected]
0x0020 2d64 6961 6d70 726f 7879 2e61 662e 6779 -diamproxy.af.gy
0x0030 2e6f 7261 6e67 652e 6d64 3b31 3130 3334 .orange.md;11034
0x0040 3533 3831 3b39 3738 3033 3437 3131 3b35 5381;978034711;5
0x0050 6535 3234 3333 632d 3137 3032 0000 010c e52433c-1702....
0x0060 4000 000c 0000 0faa 0000 0108 4000 001b @...........@...
0x0070 616c 6661 6f63 6330 332e 6f72 616e 6765 alfaocc03.orange
0x0080 2e6d 6400 0000 0128 4000 0011 6f72 616e .md....(@...oran
0x0090 6765 2e6d 6400 0000 0000 0102 4000 000c ge.md.......@...
0x00a0 0000 0004 0000 019f 4000 000c 0000 0000 ........@.......
0x00b0 0000 01a0 4000 000c 0000 0001 0000 01a2 ....@...........
0x00c0 4000 000c 0000 0000 @.......

Sunday February 23 2020


<<<<OUTBOUND 11:17:48:152 Eventid:81990(5)
Diameter message from 10.126.3.76:50495 to 172.19.0.5:3870
Base Header Information:
Version: 1
Message Length: 848
Command Flags: REQ PXY (192)
Command Code: Credit-Control-Request (272)
Application ID: Credit-Control (4)
Hop2Hop-ID: 0xbf5bad06
End2End-ID: 0x02fa6e83
AVP Information:
[M] Session-Id: 0001-
diamproxy.af.gy.orange.md;110345381;978034711;5e52433c-1702
[M] Origin-Host: 0001-diamproxy.af.gy.orange.md
[M] Origin-Realm: gy.orange.md
[M] Destination-Realm: orange.md
[M] Auth-Application-Id: 4
[M] Service-Context-Id: [email protected]
[M] CC-Request-Type: TERMINATION_REQUEST (3)
[M] CC-Request-Number: 1
[M] Destination-Host: alfaocc03.orange.md
[M] User-Name: [email protected]
[M] Origin-State-Id: 1521156408
[M] Event-Timestamp: Sunday February 23 09:17:48 GMT 2020
[M] Subscription-Id:
[M] Subscription-Id-Type: END_USER_E164 (0)
[M] Subscription-Id-Data: 37362143456
[M] Subscription-Id:
[M] Subscription-Id-Type: END_USER_IMSI (1)
[M] Subscription-Id-Data: 259010116480987
[M] Termination-Cause: DIAMETER_ADMINISTRATIVE (4)
[M] User-Equipment-Info:
[M] User-Equipment-Info-Type: IMEISV (0)
[M] User-Equipment-Info-Value: 3590410809626801
[V] [M] Service-Information:
[V] [M] PS-Information:
[V] [M] 3GPP-Charging-Id: 124713264
[V] [M] 3GPP-PDP-Type: IPv4 (0)
[V] [M] PDP-Address: IPv4 10.90.97.36
[V] [M] 3GPP-GPRS-QoS-Negotiated-Profile: 05-
13921F719697FE44FAFFFF006400
[V] [M] SGSN-Address: IPv4 193.239.182.212
[V] [M] GGSN-Address: IPv4 193.239.182.249
[V] [M] Serving-Node-Type: SGSN (0)
[V] [M] 3GPP-IMSI-MCC-MNC: 25901
[V] [M] 3GPP-GGSN-MCC-MNC: 25901
[V] [M] 3GPP-NSAPI: 5
[M] Called-Station-Id: wap.orange.md
[V] [M] 3GPP-Selection-Mode: 0
[V] [M] 3GPP-Charging-Characteristics: 0800
[V] [M] 3GPP-SGSN-MCC-MNC: 25901
[V] [M] 3GPP-MS-TimeZone: MS Time Zone: +2:00 Daylight Saving Time: +0
hour
[V] [M] Charging-Rule-Base-Name: wap.orange.md
[V] [M] 3GPP-User-Location-Info: Location Type: SAI (1) Location Info
(SAI): 259-01-0x73-0xC5BA
[V] [M] 3GPP-RAT-Type: 0x01

0x0000 0100 0350 c000 0110 0000 0004 bf5b ad06 ...P.........[..
0x0010 02fa 6e83 0000 0107 4000 0048 3030 3031 [email protected]
0x0020 2d64 6961 6d70 726f 7879 2e61 662e 6779 -diamproxy.af.gy
0x0030 2e6f 7261 6e67 652e 6d64 3b31 3130 3334 .orange.md;11034
0x0040 3533 3831 3b39 3738 3033 3437 3131 3b35 5381;978034711;5
0x0050 6535 3234 3333 632d 3137 3032 0000 0108 e52433c-1702....
0x0060 4000 0026 3030 3031 2d64 6961 6d70 726f @..&0001-diampro
0x0070 7879 2e61 662e 6779 2e6f 7261 6e67 652e xy.af.gy.orange.
0x0080 6d64 0000 0000 0128 4000 0014 6779 2e6f md.....(@...gy.o
0x0090 7261 6e67 652e 6d64 0000 011b 4000 0011 range.md....@...
0x00a0 6f72 616e 6765 2e6d 6400 0000 0000 0102 orange.md.......
0x00b0 4000 000c 0000 0004 0000 01cd 4000 0016 @...........@...
0x00c0 3332 3235 3140 3367 7070 2e6f 7267 0000 [email protected]..
0x00d0 0000 01a0 4000 000c 0000 0003 0000 019f ....@...........
0x00e0 4000 000c 0000 0001 0000 0125 4000 001b @..........%@...
0x00f0 616c 6661 6f63 6330 332e 6f72 616e 6765 alfaocc03.orange
0x0100 2e6d 6400 0000 0001 4000 0021 3337 3336 .md.....@..!3736
0x0110 3231 3433 3435 3640 7761 702e 6f72 616e [email protected]
0x0120 6765 2e6d 6400 0000 0000 0116 4000 000c ge.md.......@...
0x0130 5aab 0138 0000 0037 4000 000c e1fc c1bc Z..8...7@.......
0x0140 0000 01bb 4000 0028 0000 01c2 4000 000c ....@..(....@...
0x0150 0000 0000 0000 01bc 4000 0013 3337 3336 [email protected]
0x0160 3231 3433 3435 3600 0000 01bb 4000 002c 2143456.....@..,
0x0170 0000 01c2 4000 000c 0000 0001 0000 01bc ....@...........
0x0180 4000 0017 3235 3930 3130 3131 3634 3830 @...259010116480
0x0190 3938 3700 0000 0127 4000 000c 0000 0004 987....'@.......
0x01a0 0000 01ca 4000 002c 0000 01cb 4000 000c ....@..,....@...
0x01b0 0000 0000 0000 01cc 4000 0018 3335 3930 [email protected]
0x01c0 3431 3038 3039 3632 3638 3031 0000 0369 410809626801...i
0x01d0 c000 0184 0000 28af 0000 036a c000 0178 ......(....j...x
0x01e0 0000 28af 0000 0002 c000 0010 0000 28af ..(...........(.
0x01f0 076e f930 0000 0003 c000 0010 0000 28af .n.0..........(.
0x0200 0000 0000 0000 04cb c000 0012 0000 28af ..............(.
0x0210 0001 0a5a 6124 0000 0000 0005 c000 002b ...Za$.........+
0x0220 0000 28af 3035 2d31 3339 3231 4637 3139 ..(.05-13921F719
0x0230 3639 3746 4534 3446 4146 4646 4630 3036 697FE44FAFFFF006
0x0240 3430 3000 0000 04cc c000 0012 0000 28af 400...........(.
0x0250 0001 c1ef b6d4 0000 0000 034f c000 0012 ...........O....
0x0260 0000 28af 0001 c1ef b6f9 0000 0000 07ff ..(.............
0x0270 c000 0010 0000 28af 0000 0000 0000 0008 ......(.........
0x0280 c000 0011 0000 28af 3235 3930 3100 0000 ......(.25901...
0x0290 0000 0009 c000 0011 0000 28af 3235 3930 ..........(.2590
0x02a0 3100 0000 0000 000a c000 000d 0000 28af 1.............(.
0x02b0 3500 0000 0000 001e 4000 0015 7761 702e [email protected].
0x02c0 6f72 616e 6765 2e6d 6400 0000 0000 000c orange.md.......
0x02d0 c000 000d 0000 28af 3000 0000 0000 000d ......(.0.......
0x02e0 c000 0010 0000 28af 3038 3030 0000 0012 ......(.0800....
0x02f0 c000 0011 0000 28af 3235 3930 3100 0000 ......(.25901...
0x0300 0000 0017 c000 000e 0000 28af 8000 0000 ..........(.....
0x0310 0000 03ec c000 0019 0000 28af 7761 702e ..........(.wap.
0x0320 6f72 616e 6765 2e6d 6400 0000 0000 0016 orange.md.......
0x0330 c000 0014 0000 28af 0152 f910 0073 c5ba ......(..R...s..
0x0340 0000 0015 c000 000d 0000 28af 0100 0000 ..........(.....

Sunday February 23 2020


INBOUND>>>>> 11:17:48:174 Eventid:81991(5)
Diameter message from 172.19.0.5:3870 to 10.126.3.76:50495
Base Header Information:
Version: 1
Message Length: 188
Command Flags: PXY (64)
Command Code: Credit-Control-Answer (272)
Application ID: Credit-Control (4)
Hop2Hop-ID: 0xbf5bad06
End2End-ID: 0x02fa6e83
AVP Information:
[M] Session-Id: 0001-
diamproxy.af.gy.orange.md;110345381;978034711;5e52433c-1702
[M] Result-Code: DIAMETER_UNKNOWN_SESSION_ID (5002)
[M] Origin-Host: alfaocc03.orange.md
[M] Origin-Realm: orange.md
[M] Auth-Application-Id: 4
[M] CC-Request-Number: 1
[M] CC-Request-Type: TERMINATION_REQUEST (3)

0x0000 0100 00bc 4000 0110 0000 0004 bf5b ad06 ....@........[..
0x0010 02fa 6e83 0000 0107 4000 0048 3030 3031 [email protected]
0x0020 2d64 6961 6d70 726f 7879 2e61 662e 6779 -diamproxy.af.gy
0x0030 2e6f 7261 6e67 652e 6d64 3b31 3130 3334 .orange.md;11034
0x0040 3533 3831 3b39 3738 3033 3437 3131 3b35 5381;978034711;5
0x0050 6535 3234 3333 632d 3137 3032 0000 010c e52433c-1702....
0x0060 4000 000c 0000 138a 0000 0108 4000 001b @...........@...
0x0070 616c 6661 6f63 6330 332e 6f72 616e 6765 alfaocc03.orange
0x0080 2e6d 6400 0000 0128 4000 0011 6f72 616e .md....(@...oran
0x0090 6765 2e6d 6400 0000 0000 0102 4000 000c ge.md.......@...
0x00a0 0000 0004 0000 019f 4000 000c 0000 0001 ........@.......
0x00b0 0000 01a0 4000 000c 0000 0003 ....@.......

Sunday February 23 2020


<<<<OUTBOUND 11:17:48:176 Eventid:47001(3)
GTPC Tx PDU, from 193.239.182.249:2123 to 193.239.182.212:19114 (40)
TEID: 0x818D8072, Message type: GTP_CREATE_PDP_CONTEXT_RES_MSG (0x11)
Sequence Number:: 0x6B68 (27496)
GTP HEADER FOLLOWS:
Version number: 1
Protocol type: 1 (GTP C/U)
Extended header flag: Not present
Sequence number flag: Present
NPDU number flag: Not present
Message Type: 0x11 (GTP_CREATE_PDP_CONTEXT_RES_MSG)
Message Length: 0x0020 (32)
Tunnel ID: 0x818D8072
Sequence Number: 0x6B68 (27496)
GTP HEADER ENDS.
INFORMATION ELEMENTS FOLLOW:
Cause: 0xC7 (GTP_NO_RESOURCES_AVAILABLE)
PROTOCOL CONFIG. OPTIONS FOLLOW:
IE Length: 0x17 (23)
Configuration Protocol: (0) PPP
Extension Bit: (1)

Protocol id: 0x8021 (IPCP)


Protocol length: 0x10 (16)
Protocol contents: 01010010810600000000830600000000
Container id: 0x000D (IPv4-DNS-Server)
Container length: 0x00 (0)
Container contents:
PROTOCOL CONFIG. OPTIONS END.
INFORMATION ELEMENTS END.
PDU HEX DUMP FOLLOWS:
0x0000 3211 0020 818d 8072 6b68 0000 01c7 8400 2......rkh......
0x0010 1780 8021 1001 0100 1081 0600 0000 0083 ...!............
0x0020 0600 0000 0000 0d00 ........

Sunday February 23 2020


***CONTROL*** 11:17:48:262 Eventid:10285
CALL STATS: msisdn <37362143456>, apn <wap.orange.md>, imsi <259010116480987>,
Call-Duration(sec): 0
input pkts: 0 output pkts: 0
input bytes: 0 output bytes: 0
input bytes dropped: 0 output bytes dropped: 0
input pkts dropped: 0 output pkts dropped: 0
pk rate from user(bps): 0 pk rate to user(bps): 0
ave rate from user(bps): 0 ave rate to user(bps): 0
sust rate from user(bps): 0 sust rate to user(bps): 0
pk rate from user(pps): 0 pk rate to user(pps): 0
ave rate from user(pps): 0 ave rate to user(pps): 0
sust rate from user(pps): 0 sust rate to user(pps): 0
link online/active percent: 0
ipv4 bad hdr: 0 ipv4 ttl exceeded: 0
ipv4 fragments sent: 0 ipv4 could not fragment: 0
ipv4 input acl drop: 0 ipv4 output acl drop: 0
ipv4 bad length trim: 0
ipv4 input non-mip drop: 0 ipv4 output non-mip drop: 0
ipv4 input css drop: 0 ipv4 output css drop: 0
output gre xoff pkts drop: 0 output gre xoff bytes drop: 0
ipv4 output no-flow drop: 0
ipv4 source violations: 0 ipv4 early pdu drop: 0
ipv4 proxy-dns redirect: 0 ipv4 proxy-dns pass-thru: 0
ipv4 proxy-dns drop: 0 ipv4 proxy-dns redirect tcp connection: 0

ipv6 bad hdr: 0 ipv6 bad length trim: 0


ip source violation no acct: 0 ip source violation ignored: 0
dlnk pkts exceeded bw: 0 dlnk pkts violated bw: 0
uplnk pkts exceeded bw: 0 uplnk pkts violated bw: 0
Disconnect Reason: failed-auth-with-charging-svc
Last Progress State: Authenticating

***
*** Call Finished - Waiting to trace next matching call
***

Press any key to continue...

You might also like