Frame Number: 41
expand all
collapse all
geninfo General information
num Numberlen Frame Lengthcaplen Captured Lengthtimestamp Captured Time frame Frame 41: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) on interface 0
frame.interface_id Interface id: 0 (unknown)frame.encap_type Encapsulation type: Ethernet (1)frame.time Arrival Time: Jul 11, 2013 06:43:23.482227000 Eastern Daylight Timeframe.offset_shift Time shift for this packet: 0.000000000 secondsframe.time_epoch Epoch Time: 1373539403.482227000 secondsframe.time_delta Time delta from previous captured frame: 1.000254000 secondsframe.time_delta_displayed Time delta from previous displayed frame: 1.000254000 secondsframe.time_relative Time since reference or first frame: 5.015971000 secondsframe.number Frame Number: 41frame.len Frame Length: 150 bytes (1200 bits)frame.cap_len Capture Length: 150 bytes (1200 bits)frame.marked Frame is marked: Falseframe.ignored Frame is ignored: Falseframe.protocols Protocols in frame: eth:ethertype:ip:sctp:s1ap:s1ap:s1ap:s1ap:nas-eps:s1ap:s1ap:s1ap eth Ethernet II, Src: IntelCor_78:45:b8 (00:1b:21:78:45:b8), Dst: IntelCor_84:39:08 (00:1b:21:84:39:08)
eth.dst Destination: IntelCor_84:39:08 (00:1b:21:84:39:08)
eth.dst_resolved Destination (resolved): IntelCor_84:39:08eth.addr Address: IntelCor_84:39:08 (00:1b:21:84:39:08)eth.addr_resolved Address (resolved): IntelCor_84:39:08eth.lg .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)eth.ig .... ...0 .... .... .... .... = IG bit: Individual address (unicast) eth.src Source: IntelCor_78:45:b8 (00:1b:21:78:45:b8)
eth.src_resolved Source (resolved): IntelCor_78:45:b8eth.addr Address: IntelCor_78:45:b8 (00:1b:21:78:45:b8)eth.addr_resolved Address (resolved): IntelCor_78:45:b8eth.lg .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)eth.ig .... ...0 .... .... .... .... = IG bit: Individual address (unicast) eth.type Type: IPv4 (0x0800) ip Internet Protocol Version 4, Src: 10.1.0.10, Dst: 10.255.246.30
ip.version 0100 .... = Version: 4ip.hdr_len .... 0101 = Header Length: 20 bytes (5)ip.dsfield Differentiated Services Field: 0x02 (DSCP: CS0, ECN: ECT(0))
ip.dsfield.dscp 0000 00.. = Differentiated Services Codepoint: Default (0)ip.dsfield.ecn .... ..10 = Explicit Congestion Notification: ECN-Capable Transport codepoint '10' (2) ip.len Total Length: 136ip.id Identification: 0x0005 (5)ip.flags Flags: 0x02 (Don't Fragment)
ip.flags.rb 0... .... = Reserved bit: Not setip.flags.df .1.. .... = Don't fragment: Setip.flags.mf ..0. .... = More fragments: Not set ip.frag_offset Fragment offset: 0ip.ttl Time to live: 64ip.proto Protocol: SCTP (132)ip.checksum Header checksum: 0x2ec3 [validation disabled]ip.checksum.status Header checksum status: Unverifiedip.src Source: 10.1.0.10ip.addr Source or Destination Address: 10.1.0.10ip.src_host Source Host: 10.1.0.10ip.host Source or Destination Host: 10.1.0.10ip.dst Destination: 10.255.246.30ip.addr Source or Destination Address: 10.255.246.30ip.dst_host Destination Host: 10.255.246.30ip.host Source or Destination Host: 10.255.246.30Source GeoIP: Unknown
Destination GeoIP: Unknown
sctp Stream Control Transmission Protocol, Src Port: 32767 (32767), Dst Port: 36412 (36412)
sctp.srcport Source port: 32767sctp.dstport Destination port: 36412sctp.verification_tag Verification tag: 0xc2bf42a7sctp.assoc_index Association index: 2sctp.port Port: 32767sctp.port Port: 36412sctp.checksum Checksum: 0x020b1ce6 [unverified]sctp.checksum.status Checksum Status: Unverifiedsctp DATA chunk(ordered, complete segment, TSN: 1052154198, SID: 0, SSN: 1, PPID: 18, payload length: 87 bytes)
sctp.chunk_type Chunk type: DATA (0)
sctp.chunk_bit_1 0... .... = Bit: Stop processing of the packetsctp.chunk_bit_2 .0.. .... = Bit: Do not report sctp.chunk_flags Chunk flags: 0x03
sctp.data_e_bit .... ...1 = E-Bit: Last segmentsctp.data_b_bit .... ..1. = B-Bit: First segmentsctp.data_u_bit .... .0.. = U-Bit: Ordered deliverysctp.data_i_bit .... 0... = I-Bit: Possibly delay SACK sctp.chunk_length Chunk length: 103sctp.data_tsn Transmission sequence number: 1052154198sctp.data_sid Stream identifier: 0x0000sctp.data_ssn Stream sequence number: 1sctp.data_payload_proto_id Payload protocol identifier: S1 Application Protocol (S1AP) (18)sctp.chunk_padding Chunk padding: 00 s1ap S1 Application Protocol
per.extension_bit 0... .... Extension Bit: Falseper.choice_index Choice Index: 0s1ap.S1AP_PDU S1AP-PDU: initiatingMessage (0)
s1ap.initiatingMessage_element initiatingMessage
s1ap.procedureCode procedureCode: id-initialUEMessage (12)per.enum_index Enumerated Index: 1s1ap.criticality criticality: ignore (1)per.open_type_length Open Type Length: 83s1ap.value_element value
s1ap.InitialUEMessage_element InitialUEMessage
per.extension_bit 0... .... Extension Bit: Falseper.sequence_of_length Sequence-Of Length: 5s1ap.protocolIEs protocolIEs: 5 items
s1ap Item 0: id-eNB-UE-S1AP-ID
s1ap.ProtocolIE_Field_element ProtocolIE-Field
s1ap.id id: id-eNB-UE-S1AP-ID (8)per.enum_index Enumerated Index: 0s1ap.criticality criticality: reject (0)per.open_type_length Open Type Length: 2s1ap.value_element value
s1ap.ENB_UE_S1AP_ID ENB-UE-S1AP-ID: 4 s1ap Item 1: id-NAS-PDU
s1ap.ProtocolIE_Field_element ProtocolIE-Field
s1ap.id id: id-NAS-PDU (26)per.enum_index Enumerated Index: 0s1ap.criticality criticality: reject (0)per.open_type_length Open Type Length: 43s1ap.value_element value
per.octet_string_length Octet String Length: 42s1ap.NAS_PDU NAS-PDU: 17e6ccf1e60507480a0bf600f16004d047c00000045200f1...nas-eps Non-Access-Stratum (NAS)PDU
nas_eps.security_header_type 0001 .... = Security header type: Integrity protected (1)gsm_a.L3_protocol_discriminator .... 0111 = Protocol discriminator: EPS mobility management messages (0x7)nas_eps.msg_auth_code Message authentication code: 0xe6ccf1e6nas_eps.seq_no Sequence number: 5nas_eps.security_header_type 0000 .... = Security header type: Plain NAS message, not security protected (0)gsm_a.L3_protocol_discriminator .... 0111 = Protocol discriminator: EPS mobility management messages (0x7)nas_eps.nas_msg_emm_type NAS EPS Mobility Management Message Type: Tracking area update request (0x48)nas_eps.emm.tsc 0... .... = Type of security context flag (TSC): Native security context (for KSIasme)nas_eps.emm.nas_key_set_id .000 .... = NAS key set identifier: (0) ASMEnas_eps.emm.active_flg .... 1... = Active flag: Bearer establishment requestednas_eps.emm.update_type_value .... .010 = EPS update type value: Combined TA/LA updating with IMSI attach (2)gsm_a EPS mobile identity - Old GUTI
gsm_a.len Length: 11nas_eps.emm.odd_even .... 0... = Odd/even indication: Even number of identity digitsnas_eps.emm.type_of_id .... .110 = Type of identity: GUTI (6)e212.mcc Mobile Country Code (MCC): Unknown (1)e212.mnc Mobile Network Code (MNC): Unknown (06)nas_eps.emm.mme_grp_id MME Group ID: 1232nas_eps.emm.mme_code MME Code: 71nas_eps.emm.m_tmsi M-TMSI: 0xc0000004 nas_eps.emm Tracking area identity - Last visited registered TAI
nas_eps.emm.elem_id Element ID: 0x52e212.mcc Mobile Country Code (MCC): Unknown (1)e212.mnc Mobile Network Code (MNC): Unknown (06)nas_eps.emm.tai_tac Tracking area code(TAC): 9 nas_eps.common EPS bearer context status
nas_eps.common.elem_id Element ID: 0x57gsm_a.len Length: 2nas_eps.emm.ebi7 0... .... = EBI(7): BEARER CONTEXT-INACTIVEnas_eps.emm.ebi6 .1.. .... = EBI(6): BEARER CONTEXT-ACTIVEnas_eps.emm.ebi5 ..1. .... = EBI(5): BEARER CONTEXT-ACTIVEnas_eps.emm.ebi4 ...0 .... = EBI(4) spare: Falsenas_eps.emm.ebi3 .... 0... = EBI(3) spare: Falsenas_eps.emm.ebi2 .... .0.. = EBI(2) spare: Falsenas_eps.emm.ebi1 .... ..0. = EBI(1) spare: Falsenas_eps.emm.ebi0 .... ...0 = EBI(0) spare: Falsenas_eps.emm.ebi15 0... .... = EBI(15): BEARER CONTEXT-INACTIVEnas_eps.emm.ebi14 .0.. .... = EBI(14): BEARER CONTEXT-INACTIVEnas_eps.emm.ebi13 ..0. .... = EBI(13): BEARER CONTEXT-INACTIVEnas_eps.emm.ebi12 ...0 .... = EBI(12): BEARER CONTEXT-INACTIVEnas_eps.emm.ebi11 .... 0... = EBI(11): BEARER CONTEXT-INACTIVEnas_eps.emm.ebi10 .... .0.. = EBI(10): BEARER CONTEXT-INACTIVEnas_eps.emm.ebi9 .... ..0. = EBI(9): BEARER CONTEXT-INACTIVEnas_eps.emm.ebi8 .... ...0 = EBI(8): BEARER CONTEXT-INACTIVE gsm_a.gm MS Network Capability
gsm_a.gm.elem_id Element ID: 0x31gsm_a.len Length: 3gsm_a.gm.gmm.net_cap.gea1 1... .... = GEA/1: Encryption algorithm availablegsm_a.gm.gmm.net_cap.smdch .1.. .... = SM capabilities via dedicated channels: Mobile station supports mobile terminated point to point SMS via dedicated signalling channelsgsm_a.gm.gmm.net_cap.smgprs ..1. .... = SM capabilities via GPRS channels: Mobile station supports mobile terminated point to point SMS via GPRS packet data channelsgsm_a.gm.gmm.net_cap.ucs2 ...0 .... = UCS2 support: The ME has a preference for the default alphabet (defined in 3GPP TS 23.038 [8b]) over UCS2gsm_a.gm.gmm.net_cap.ss_scr_ind .... 01.. = SS Screening Indicator: capability of handling of ellipsis notation and phase 2 error handling (0x1)gsm_a.gm.gmm.net_cap.solsa .... ..0. = SoLSA Capability: The ME does not support SoLSAgsm_a.gm.gmm.net_cap.rev .... ...1 = Revision level indicator: Used by a mobile station supporting R99 or later versions of the protocolgsm_a.gm.gmm.net_cap.pfc 1... .... = PFC feature mode: Mobile station does support BSS packet flow proceduresgsm_a.gm.gmm.net_cap.ext_gea_bits .110 000. = Extended GEA bits: 0x30
gsm_a.gm.gmm.net_cap.gea2 .1.. .... = GEA/2: Encryption algorithm availablegsm_a.gm.gmm.net_cap.gea3 ..1. .... = GEA/3: Encryption algorithm availablegsm_a.gm.gmm.net_cap.gea4 ...0 .... = GEA/4: Encryption algorithm not availablegsm_a.gm.gmm.net_cap.gea5 .... 0... = GEA/5: Encryption algorithm not availablegsm_a.gm.gmm.net_cap.gea6 .... .0.. = GEA/6: Encryption algorithm not availablegsm_a.gm.gmm.net_cap.gea7 .... ..0. = GEA/7: Encryption algorithm not available gsm_a.gm.gmm.net_cap.lcs .... ...0 = LCS VA capability: LCS value added location request notification capability not supportedgsm_a.gm.gmm.net_cap.ps_irat_iu 1... .... = PS inter-RAT HO from GERAN to UTRAN Iu mode capability: PS inter-RAT HO to UTRAN Iu mode supportedgsm_a.gm.gmm.net_cap.ps_irat_s1 .0.. .... = PS inter-RAT HO from GERAN to E-UTRAN S1 mode capability: PS inter-RAT HO to E-UTRAN S1 mode not supportedgsm_a.gm.gmm.net_cap.comb_proc ..1. .... = EMM Combined procedures capability: Mobile station supports EMM combined proceduresgsm_a.gm.gmm.net_cap.isr ...0 .... = ISR support: The mobile station does not support ISRgsm_a.gm.gmm.net_cap.srvcc_to_geran .... 0... = SRVCC to GERAN/UTRAN capability: SRVCC from UTRAN HSPA or E-UTRAN to GERAN/UTRAN not supportedgsm_a.gm.gmm.net_cap.epc .... .1.. = EPC capability: EPC supportedgsm_a.gm.gmm.net_cap.nf .... ..0. = NF capability: Mobile station does not support the notification proceduregsm_a.gm.gmm.net_cap.geran_net_sharing .... ...0 = GERAN network sharing capability: Mobile station does not support GERAN network sharing nas_eps.common Location area identification - Old location area identification
nas_eps.common.elem_id Element ID: 0x13e212.lai Location Area Identification (LAI) - 001/06/1232
e212.lai.mcc Mobile Country Code (MCC): Unknown (1)e212.lai.mnc Mobile Network Code (MNC): Unknown (06)gsm_a.lac Location Area Code (LAC): 0x04d0 (1232) s1ap Item 2: id-TAI
s1ap.ProtocolIE_Field_element ProtocolIE-Field
s1ap.id id: id-TAI (67)per.enum_index Enumerated Index: 0s1ap.criticality criticality: reject (0)per.open_type_length Open Type Length: 6s1ap.value_element value
s1ap.TAI_element TAI
per.extension_bit 0... .... Extension Bit: Falseper.optional_field_bit .0.. .... Optional Field Bit: False (iE-Extensions is NOT present)s1ap.pLMNidentity pLMNidentity: 00f160e212.mcc Mobile Country Code (MCC): Unknown (1)e212.mnc Mobile Network Code (MNC): Unknown (06)s1ap.tAC tAC: 0009 (9) s1ap Item 3: id-EUTRAN-CGI
s1ap.ProtocolIE_Field_element ProtocolIE-Field
s1ap.id id: id-EUTRAN-CGI (100)per.enum_index Enumerated Index: 1s1ap.criticality criticality: ignore (1)per.open_type_length Open Type Length: 8s1ap.value_element value
s1ap.EUTRAN_CGI_element EUTRAN-CGI
per.extension_bit 0... .... Extension Bit: Falseper.optional_field_bit .0.. .... Optional Field Bit: False (iE-Extensions is NOT present)s1ap.pLMNidentity pLMNidentity: 00f160e212.mcc Mobile Country Code (MCC): Unknown (1)e212.mnc Mobile Network Code (MNC): Unknown (06)s1ap.cell_ID cell-ID: 07080140 [bit length 28, 4 LSB pad bits, 0000 0111 0000 1000 0000 0001 0100 .... decimal value 7372820] s1ap Item 4: id-RRC-Establishment-Cause
s1ap.ProtocolIE_Field_element ProtocolIE-Field
s1ap.id id: id-RRC-Establishment-Cause (134)per.enum_index Enumerated Index: 1s1ap.criticality criticality: ignore (1)per.open_type_length Open Type Length: 1s1ap.value_element value
per.extension_present_bit 0... .... Extension Present Bit: Falseper.enum_index Enumerated Index: 3s1ap.RRC_Establishment_Cause RRC-Establishment-Cause: mo-Signalling (3)