Frame Number: 2

geninfo General information
- num Number
- len Frame Length
- caplen Captured Length
- timestamp Captured Time
frame Frame 2: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) on interface 0
- frame.interface_id Interface id: 0 (unknown)
- frame.encap_type Encapsulation type: Linux cooked-mode capture (25)
- frame.time Arrival Time: Nov 14, 2014 12:16:48.741516000 Eastern Standard Time
- frame.offset_shift Time shift for this packet: 0.000000000 seconds
- frame.time_epoch Epoch Time: 1415985408.741516000 seconds
- frame.time_delta Time delta from previous captured frame: 0.000386000 seconds
- frame.time_delta_displayed Time delta from previous displayed frame: 0.000386000 seconds
- frame.time_relative Time since reference or first frame: 0.000386000 seconds
- frame.number Frame Number: 2
- frame.len Frame Length: 140 bytes (1120 bits)
- frame.cap_len Capture Length: 140 bytes (1120 bits)
- frame.marked Frame is marked: False
- frame.ignored Frame is ignored: False
- frame.protocols Protocols in frame: sll:ethertype:ip:sctp:s1ap:s1ap:s1ap:s1ap:s1ap:nas-eps
sll Linux cooked capture
- sll.pkttype Packet type: Unicast to us (0)
- sll.hatype Link-layer address type: 772
- sll.halen Link-layer address length: 6
- sll.src.eth Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
- sll.etype Protocol: IP (0x0800)
ip Internet Protocol Version 4, Src: 192.168.168.183 (192.168.168.183), Dst: 192.168.168.183 (192.168.168.183)
- ip.version Version: 4
- ip.hdr_len Header Length: 20 bytes
- ip.dsfield Differentiated Services Field: 0x02 (DSCP 0x00: Default; ECN: 0x02: ECT(0) (ECN-Capable Transport))
  - ip.dsfield.dscp 0000 00.. = Differentiated Services Codepoint: Default (0x00)
  - ip.dsfield.ecn .... ..10 = Explicit Congestion Notification: ECT(0) (ECN-Capable Transport) (0x02)
- ip.len Total Length: 124
- ip.id Identification: 0x8433 (33843)
- ip.flags Flags: 0x02 (Don't Fragment)
  - ip.flags.rb 0... .... = Reserved bit: Not set
  - ip.flags.df .1.. .... = Don't fragment: Set
  - ip.flags.mf ..0. .... = More fragments: Not set
- ip.frag_offset Fragment offset: 0
- ip.ttl Time to live: 64
- ip.proto Protocol: SCTP (132)
- ip.checksum Header checksum: 0xe308 [validation disabled]
  - ip.checksum_good Good: False
  - ip.checksum_bad Bad: False
- ip.src Source: 192.168.168.183 (192.168.168.183)
- ip.addr Source or Destination Address: 192.168.168.183 (192.168.168.183)
- ip.src_host Source Host: 192.168.168.183
- ip.host Source or Destination Host: 192.168.168.183
- ip.dst Destination: 192.168.168.183 (192.168.168.183)
- ip.addr Source or Destination Address: 192.168.168.183 (192.168.168.183)
- ip.dst_host Destination Host: 192.168.168.183
- ip.host Source or Destination Host: 192.168.168.183
- Source GeoIP: Unknown
- Destination GeoIP: Unknown
sctp Stream Control Transmission Protocol, Src Port: 36412 (36412), Dst Port: 38341 (38341)
- sctp.srcport Source port: 36412
- sctp.dstport Destination port: 38341
- sctp.verification_tag Verification tag: 0x57bcab2d
- sctp.assoc_index Assocation index: 0
- sctp.port Port: 36412
- sctp.port Port: 38341
- sctp.checksum Checksum: 0xfa937fb1 (not verified)
- sctp SACK chunk (Cumulative TSN: 124054246, a_rwnd: 106496, gaps: 0, duplicate TSNs: 0)
  - sctp.chunk_type Chunk type: SACK (3)
    - sctp.chunk_bit_1 0... .... = Bit: Stop processing of the packet
    - sctp.chunk_bit_2 .0.. .... = Bit: Do not report
  - sctp.chunk_flags Chunk flags: 0x00
    - sctp.sack_nounce_sum .... ...0 = Nounce sum: 0
  - sctp.chunk_length Chunk length: 16
  - sctp.sack_cumulative_tsn_ack Cumulative TSN ACK: 124054246
    - sctp.ack Acknowledges TSN: 124054246
      - sctp.ack_frame Chunk acknowledged in frame: 1
      - sctp.sack_rtt The RTT since DATA was: 0.000386000 seconds
  - sctp.sack_a_rwnd Advertised receiver window credit (a_rwnd): 106496
  - sctp.sack_number_of_gap_blocks Number of gap acknowledgement blocks: 0
  - sctp.sack_number_of_duplicated_tsns Number of duplicated TSNs: 0
- sctp DATA chunk(ordered, complete segment, TSN: 3156877666, SID: 1, SSN: 0, PPID: 18, payload length: 60 bytes)
  - sctp.chunk_type Chunk type: DATA (0)
    - sctp.chunk_bit_1 0... .... = Bit: Stop processing of the packet
    - sctp.chunk_bit_2 .0.. .... = Bit: Do not report
  - sctp.chunk_flags Chunk flags: 0x03
    - sctp.data_e_bit .... ...1 = E-Bit: Last segment
    - sctp.data_b_bit .... ..1. = B-Bit: First segment
    - sctp.data_u_bit .... .0.. = U-Bit: Ordered delivery
    - sctp.data_i_bit .... 0... = I-Bit: Possibly delay SACK
  - sctp.chunk_length Chunk length: 76
  - sctp.data_tsn TSN: 3156877666
  - sctp.data_sid Stream Identifier: 0x0001
  - sctp.data_ssn Stream sequence number: 0
  - sctp.data_payload_proto_id Payload protocol identifier: S1 Application Protocol (S1AP) (18)
s1ap S1 Application Protocol
- per.extension_bit 0... .... Extension Bit: False
- per.choice_index Choice Index: 0
- s1ap.S1AP_PDU S1AP-PDU: initiatingMessage (0)
  - s1ap.initiatingMessage_element initiatingMessage
    - s1ap.procedureCode procedureCode: id-downlinkNASTransport (11)
    - per.enum_index Enumerated Index: 1
    - s1ap.criticality criticality: ignore (1)
    - per.open_type_length Open Type Length: 56
    - s1ap.value_element value
      - s1ap.DownlinkNASTransport_element DownlinkNASTransport
        
        per.extension_bit 0... .... Extension Bit: False
        
        per.sequence_of_length Sequence-Of Length: 3
        
        s1ap.protocolIEs protocolIEs: 3 items
        
        s1ap Item 0: id-MME-UE-S1AP-ID
        
        s1ap.ProtocolIE_Field_element ProtocolIE-Field
        
        s1ap.id id: id-MME-UE-S1AP-ID (0)
        
        per.enum_index Enumerated Index: 0
        
        s1ap.criticality criticality: reject (0)
        
        per.open_type_length Open Type Length: 2
        
        s1ap.value_element value
        
        s1ap.MME_UE_S1AP_ID MME-UE-S1AP-ID: 211
        
        s1ap Item 1: id-eNB-UE-S1AP-ID
        
        s1ap.ProtocolIE_Field_element ProtocolIE-Field
        
        s1ap.id id: id-eNB-UE-S1AP-ID (8)
        
        per.enum_index Enumerated Index: 0
        
        s1ap.criticality criticality: reject (0)
        
        per.open_type_length Open Type Length: 2
        
        s1ap.value_element value
        
        s1ap.ENB_UE_S1AP_ID ENB-UE-S1AP-ID: 1
        
        s1ap Item 2: id-NAS-PDU
        
        s1ap.ProtocolIE_Field_element ProtocolIE-Field
        
        s1ap.id id: id-NAS-PDU (26)
        
        per.enum_index Enumerated Index: 0
        
        s1ap.criticality criticality: reject (0)
        
        per.open_type_length Open Type Length: 37
        
        s1ap.value_element value
        
        per.octet_string_length Octet String Length: 36
        
        s1ap.NAS_PDU NAS-PDU: 075200e80526e22caab2fc9a4dda558c612e6a109113c6e1...
        
        nas-eps Non-Access-Stratum (NAS)PDU
        
        nas_eps.security_header_type 0000 .... = Security header type: Plain NAS message, not security protected (0)
        
        gsm_a.L3_protocol_discriminator .... 0111 = Protocol discriminator: EPS mobility management messages (0x07)
        
        nas_eps.nas_msg_emm_type NAS EPS Mobility Management Message Type: Authentication request (0x52)
        
        nas_eps.emm.spare_half_octet 0000 .... = Spare half octet: 0
        
        nas_eps.emm.tsc .... 0... = Type of security context flag (TSC): Native security context (for KSIasme)
        
        nas_eps.emm.nas_key_set_id .... .000 = NAS key set identifier: (0) ASME
        
        gsm_a.dtap Authentication Parameter RAND - EPS challenge
        
        gsm_a.dtap.rand RAND value: e80526e22caab2fc9a4dda558c612e6a
        
        gsm_a Authentication Parameter AUTN (UMTS and EPS authentication challenge) - EPS challenge
        
        gsm_a.len Length: 16
        
        gsm_a.dtap.autn AUTN value: 9113c6e1085c9001df93421ca180ebe5
        
        gsm_a.dtap.autn.sqn_xor_ak SQN xor AK: 9113c6e1085c
        
        gsm_a.dtap.autn.amf AMF: 9001
        
        gsm_a.dtap.autn.mac MAC: df93421ca180ebe5