PSAP - Emergency Call
PSAP stands for Public-Safety Wnswering Point or Public-Safety Access Point. In our daily talks, it usually mean 'IMS based emergency call', i.e 'Emergency Call going through IMS network, not through CS call'. UE may be able to make a PSAP call while it is properly registered in a network operator or it may be able to the PSAP call even without USIM (implying without being registered in a network).
There are several factors and radio messages getting involved in PSAP support and I will explain about it using some examples that I have done with a network simulator. Even in live network, you would see different types of PSAP operations listed below. Some UE or some carrier would allow all of these cases, but for some UE or some carrier only some of these cases are allowed. So you need to understand the exact UE specification and Network Operators requirement first before you start testing.
- Emergency Call with Normal Registration (Same APN is used for both Emergency Call and Normal VoLTE)
- Emergency Call with Normal Registration (Different APNs are used for both Emergency Call and Normal VoLTE)
- Emergency Call without Normal Registration (e.g, without USIM)
In the following examples, I wouldn't put much of comments and explanation. Based on the assumption that you are familiar with overall SIP/IMS protocol, I think just highliting some important parts can be enough explanation.
Emergency Call with Normal Registration
In following sample sequence, I only listed the message/procedures which is directly related to PSAP call, meaning there are many additional steps/messages which does exists in the reall call but not listed here.
|
Item No |
Direction |
Message or Procedure |
Description |
|
1 |
UE <-- NW |
System Information Block Type 1 | Specifies whether the network support IMS Emergency call or not |
|
2 |
UE <-- NW |
Attach Accept | Emergency Bearer Supportability, Emergency Number List etc |
|
3 |
|
< Complete LTE Registration > | |
|
4 |
|
< Complete IMS Registration > | |
|
5 |
|
< Dial the Emergency Number > | |
|
6 |
UE --> NW |
PDN Connectivity Request | Emergency Type PDN Request |
|
7 |
UE <-- NW |
Assigns EPS Bearer and Emergency APN | |
|
8 |
UE --> NW |
SIP : INVITE | INVITE to PSAP (with PSAP urn) |
|
9 |
UE <-- NW |
||
|
10 |
|
< Complete VoLTE Setup > |
< System Information Block Type 1 >
BCCH-DL-SCH-Message
message: c1 (0)
c1: systemInformationBlockType1 (1)
systemInformationBlockType1
cellAccessRelatedInfo
plmn-IdentityList: 1 item
Item 0
PLMN-IdentityInfo
plmn-Identity
mcc: 3 items
Item 0
MCC-MNC-Digit: 0
Item 1
MCC-MNC-Digit: 0
Item 2
MCC-MNC-Digit: 1
mnc: 2 items
Item 0
MCC-MNC-Digit: 0
Item 1
MCC-MNC-Digit: 1
cellReservedForOperatorUse: notReserved (1)
trackingAreaCode: 0001 [bit length 16, 0000 0000 0000 0001 decimal value 1]
cellIdentity: 00000000
cellBarred: notBarred (1)
intraFreqReselection: notAllowed (1)
.... ..0. csg-Indication: False
cellSelectionInfo
q-RxLevMin: -110dBm (-55)
p-Max: 23dBm
freqBandIndicator: 4
schedulingInfoList: 2 items
Item 0
SchedulingInfo
si-Periodicity: rf16 (1)
sib-MappingInfo: 0 items
Item 1
SchedulingInfo
si-Periodicity: rf32 (2)
sib-MappingInfo: 1 item
Item 0
SIB-Type: sibType3 (0)
si-WindowLength: ms20 (5)
systemInfoValueTag: 0
nonCriticalExtension
nonCriticalExtension
ims-EmergencySupport-r9: true (0)
In this message Network notifies varies information about embergency call but the detailed UE behavior may vary depending on UE implementation. See the comments I put in the message.
DL-DCCH-Message
message: c1 (0)
c1: rrcConnectionReconfiguration (4)
rrcConnectionReconfiguration
rrc-TransactionIdentifier: 0
criticalExtensions: c1 (0)
c1: rrcConnectionReconfiguration-r8 (0)
rrcConnectionReconfiguration-r8
dedicatedInfoNASList: 1 item
Item 0
DedicatedInfoNAS: 271166512903074202e0060000f110...
Non-Access-Stratum (NAS)PDU
.....
// when UE tries PSAP call, usually NW assigns this APN
// appended with .sos (e.g, testnet.sos)
Access Point Name
Length: 8
APN: testnet
PDN address
...
Protocol Configuration Options
...
EPS mobile identity - GUTI
Element ID: 0x50
Length: 11
.... 0... = odd/even indic: 0
.... .110 = Type of identity: GUTI (6)
Mobile Country Code (MCC): Unknown (1)
Mobile Network Code (MNC): Unknown (01)
MME Group ID: 32769
MME Code: 0
M-TMSI: 0x00000001
Location area identification
Element ID: 0x13
Location Area Identification (LAI) - 001/01/1
Mobile Country Code (MCC): Unknown (1)
Mobile Network Code (MNC): Unknown (01)
Location Area Code (LAC): 0x0001 (1)
Mobile identity - MS identity - TMSI/P-TMSI (0x0001)
...
GPRS Timer - T3402 value
...
GPRS Timer - T3423 value
...
// this part may be optional. (this is just one example)
// if this part is not specified, UE may allow
// usual emergency number like 911. but I saw some UE
// does not trigger emergency call at all if the
// number is not specified here.
// When I am testing emergency call,
// I usually specifies the number
// that is not used as emergency number in live network to
// prevent the UE accidentally make emergency call to live
// network.
Emergency Number List
Element ID: 0x34
Length: 4
Emergency Number Information: 1
Emergency Number Info length: 3
000. .... = Spare bit(s): 0
...0 .... = Mountain Rescue: False
.... 0... = Marine Guard: False
.... .0.. = Fire Brigade: False
.... ..0. = Ambulance: False
.... ...1 = Police: True
Emergency BCD Number: 123
EPS network feature support
Element ID: 0x64
Length: 1
00.. .... = Spare bit(s): 0x00
..0. .... = ESRPS:network does not support use of
...0 0... = CS-LCS:no information about support of
.... .0.. = EPC-LCS: location services via EPC not
.... ..1. = EMC BS: emergency bearer services
in S1 mode supported
.... ...1 = IMS VoPS: IMS voice over PS session
in S1 mode supported
radioResourceConfigDedicated
...
UL-DCCH-Message
message: c1 (0)
c1: ulInformationTransfer (9)
ulInformationTransfer
criticalExtensions: c1 (0)
c1: ulInformationTransfer-r8 (0)
ulInformationTransfer-r8
dedicatedInfoType: dedicatedInfoNAS (0)
dedicatedInfoNAS: 273a3567040...
Non-Access-Stratum (NAS)PDU
0010 .... = Security header type: ...
.... 0111 = Protocol discriminator: ...
Message authentication code: 0x3a356704
Sequence number: 6
0000 .... = EPS bearer identity: ...
.... 0010 = Protocol discriminator: ...
Procedure transaction identity: 24
NAS EPS session management messages:
PDN connectivity request (0xd0)
0010 .... = PDN type: IPv6 (2)
.... 0100 = Request type: emergency (4)
Protocol Configuration Options
Element ID: 0x27
Length: 13
[Link direction: MS to network (0)]
1... .... = Extension: True
.... .000 = Configuration Protocol:
PPP for use with IP PDP type or IP PDN type(0)
Protocol or Container ID:
DNS Server IPv6 Address Request (0x0003)
Length: 0x00 (0)
Protocol or Container ID:
P-CSCF IPv6 Address Request (0x0001)
Length: 0x00 (0)
Protocol or Container ID:
IP address allocation via NAS signalling(0x000a)
Length: 0x00 (0)
Protocol or Container ID: IPv4 Link MTU Request(0x0010)
Length: 0x00 (0)
< Activate default EPS bearer context request >
DL-DCCH-Message
message: c1 (0)
c1: rrcConnectionReconfiguration (4)
rrcConnectionReconfiguration
rrc-TransactionIdentifier: 0
criticalExtensions: c1 (0)
c1: rrcConnectionReconfiguration-r8 (0)
rrcConnectionReconfiguration-r8
dedicatedInfoNASList: 1 item
Item 0
DedicatedInfoNAS: 273a53d882067218c101090d08616...
Non-Access-Stratum (NAS)PDU
0010 .... = Security header type: ...
.... 0111 = Protocol discriminator: ...
Message authentication code: 0x3a53d882
Sequence number: 6
0111 .... = EPS bearer identity: ..
.... 0010 = Protocol discriminator: ...
Procedure transaction identity: 24
NAS EPS session management messages:
Activate default EPS bearer context request (0xc1)
EPS quality of service
Length: 1
Quality of Service Class Identifier (QCI): QCI 9
Access Point Name
Length: 13
APN: testnet.sos
PDN address
Length: 9
0000 0... = Spare bit(s): 0x00
PDN type: IPv6 (2)
PDN IPv6 if id: 0000000000000001
Protocol Configuration Options
Element ID: 0x27
Length: 39
[Link direction: Network to MS (1)]
1... .... = Extension: True
.... .000 = Configuration Protocol: ...
Protocol or Container ID: DNS Server IPv6 Address
Length: 0x10 (16)
IPv6: 2001:0:0:3::2
Protocol or Container ID: P-CSCF IPv6 Address..
Length: 0x10 (16)
IPv6: 2001:0:0:3::2
radioResourceConfigDedicated
.....
INVITE urn:service:sos SIP/2.0
Supported: timer,100rel,precondition
Allow: INVITE,ACK,OPTIONS,CANCEL,BYE,UPDATE,INFO,REFER,NOTIFY,MESSAGE,PRACK
User-Agent: testIMS /OK2 5.1.1
Accept-Contact: *;+g.3gpp.icsi-ref="urn%3Aurn-7%3A3gpp-service.ims.icsi.mmtel";video
P-Access-Network-Info: 3GPP-E-UTRAN-FDD;utran-cell-id-3gpp=0010100010000000
Session-Expires: 1800;refresher=uac
Min-SE: 90
Content-Type: application/sdp
Accept: application/sdp,application/3gpp-ims+xml
Route: <sip:[2001:0:0:3::2]:5060;lr>
P-Preferred-Identity: <sip:001010123456789@ims.mnc01.mcc001.3gppnetwork.org>
From: <sip:001010123456789@ims.mnc01.mcc001.3gppnetwork.org>;tag=414344133
To: "123" <urn:service:sos>
Call-ID: 1800855744@2001:0:0:3::1
CSeq: 1 INVITE
Max-Forwards: 70
Contact: <sip:001010123456789@[2001:0:0:3::1]:5060;transport=UDP>;
+g.3gpp.icsi-ref="urn%3Aurn-7%3A3gpp-service.ims.icsi.mmtel";video;
+g.3gpp.mid-call;+g.3gpp.srvcc-alerting;+g.3gpp.ps2cs-srvcc-orig-pre-alerting;
+sip.instance="<urn:gsma:imei:35609506-513511-0>"
Via: SIP/2.0/TCP [2001:0:0:3::1]:5060;branch=z9hG4bK2071720670smg;transport=TCP;rport
Content-Length: 780
v=0
o=SAMSUNG-IMS-UE 1234567 0 IN IP6 2001:0:0:3::1
s=SS VOIP
c=IN IP6 2001:0:0:3::1
b=AS:49
b=RS:0
b=RR:0
t=0 0
m=audio 1234 RTP/AVP 114 113 102 115 105 101
b=AS:49
b=RS:0
b=RR:0
a=rtpmap:114 AMR-WB/16000/1
a=fmtp:114 mode-change-capability=2;max-red=0
a=rtpmap:113 AMR-WB/16000/1
a=fmtp:113 octet-align=1;mode-change-capability=2;max-red=0
a=rtpmap:102 AMR/8000/1
a=fmtp:102 mode-change-capability=2;max-red=0
a=rtpmap:115 AMR/8000/1
a=fmtp:115 octet-align=1;mode-change-capability=2;max-red=0
a=rtpmap:105 telephone-event/16000
a=fmtp:105 0-15
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=curr:qos local none
a=curr:qos remote none
a=des:qos mandatory local sendrecv
a=des:qos optional remote sendrecv
a=sendrecv
a=ptime:20
a=maxptime:240
Call-ID: 1800855744@2001:0:0:3::1
CSeq: 1 INVITE
Record-Route: <sip:[2001:0:0:3::2]:5060;lr>
Require: precondition
Require: 100rel
Supported: precondition
Supported: 100rel
RSeq: 1
User-Agent: Test-PSAP/fcefab8
Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE
P-Asserted-Identity: <tel:123;phone-context=test-cscf.com>
Content-Type: application/sdp
Content-Length: 804
Contact: <sip:[2001:0:0:3::2]:50101;transport=tcp>;+g.3gpp.icsi-ref="urn:urn-7:3gpp-service.ims.icsi.mmtel";video
Privacy: none
v=0
o=test 301 60302 IN IP6 2001:0:0:3::2
s=-
i=A VOIP Session
c=IN IP6 2001:0:0:3::2
t=0 0
m=audio 60000 RTP/AVP 114 113 102 115 105 101
b=AS:49
b=RS:0
b=RR:0
a=rtpmap:114 AMR-WB/16000/1
a=fmtp:114 mode-change-capability=2;max-red=0
a=rtpmap:113 AMR-WB/16000/1
a=fmtp:113 octet-align=1;mode-change-capability=2;max-red=0
a=rtpmap:102 AMR/8000/1
a=fmtp:102 mode-change-capability=2;max-red=0
a=rtpmap:115 AMR/8000/1
a=fmtp:115 octet-align=1;mode-change-capability=2;max-red=0
a=rtpmap:105 telephone-event/16000
a=fmtp:105 0-15
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=curr:qos local none
a=curr:qos remote none
a=des:qos mandatory local sendrecv
a=des:qos mandatory remote sendrecv
a=sendrecv
a=ptime:20
a=maxptime:240
a=conf:qos remote sendrecv
a=rtcp:60001
Emergency Call without Normal Registration (e.g, without USIM)
|
Item No |
Direction |
Message or Procedure |
Description |
|
1 |
UE <-- NW |
System Information Block Type 1 | Specifies whether the network support IMS Emergency call or not |
|
2 |
|
< Power on UE with No USIM > |
UE would not camp because it doesn't have USIM |
|
3 |
|
< Make an Emergency Call from UE > |
|
|
4 |
UE --> NW |
RRC : PRACH Preamble |
|
|
5 |
UE <-- NW |
RRC : RACH Response |
|
|
6 |
UE --> NW |
Register with establishement cause = emergency |
|
|
7 |
UE <-- NW |
||
|
8 |
UE --> NW |
Attach Request with Request type: emergency |
|
|
9 |
UE <-- NW |
||
|
10 |
UE --> NW |
||
|
11 |
UE <-- NW |
||
|
12 |
UE --> NW |
||
|
13 |
UE <-- NW |
||
|
14 |
UE --> NW |
||
|
15 |
UE <-- NW |
Allocate .sos APN name | |
|
16 |
UE --> NW |
||
|
17 |
UE <-- NW |
EMM : Information | |
|
18 |
UE --> NW |
SIP : INVITE |
From: <sip:anonymous@anonymous.invalid> To: <urn:service:sos> |
|
19 |
UE <-- NW |
SIP : 100 Trying | |
|
20 |
UE <-- NW |
SIP : 180 Ringing | |
|
21 |
UE <-- NW |
SIP : 200 OK | |
|
22 |
UE --> NW |
SIP : ACK |
BCCH-DL-SCH-Message
message: c1 (0)
c1: systemInformationBlockType1 (1)
systemInformationBlockType1
cellAccessRelatedInfo
plmn-IdentityList: 1 item
Item 0
PLMN-IdentityInfo
plmn-Identity
mcc: 3 items
Item 0
MCC-MNC-Digit: 0
Item 1
MCC-MNC-Digit: 0
Item 2
MCC-MNC-Digit: 1
mnc: 2 items
Item 0
MCC-MNC-Digit: 0
Item 1
MCC-MNC-Digit: 1
cellReservedForOperatorUse: notReserved (1)
trackingAreaCode: 0001 [bit length 16, 0000 0000 0000 0001 decimal value 1]
cellIdentity: 00000000
cellBarred: notBarred (1)
intraFreqReselection: notAllowed (1)
.... ..0. csg-Indication: False
cellSelectionInfo
q-RxLevMin: -110dBm (-55)
p-Max: 23dBm
freqBandIndicator: 4
schedulingInfoList: 2 items
Item 0
SchedulingInfo
si-Periodicity: rf16 (1)
sib-MappingInfo: 0 items
Item 1
SchedulingInfo
si-Periodicity: rf32 (2)
sib-MappingInfo: 1 item
Item 0
SIB-Type: sibType3 (0)
si-WindowLength: ms20 (5)
systemInfoValueTag: 0
nonCriticalExtension
nonCriticalExtension
ims-EmergencySupport-r9: true (0)
< RRC : RRC Connection Request >
rrcConnectionRequest-r8
ue-Identity: randomValue (1)
randomValue: c81bd69ba6
establishmentCause: emergency (0)
spare: 00 [bit length 1, 7 LSB pad bits, 0... .... decimal value 0]
HEX : 5C 81 BD 69 BA 60
< RRC : RRC Connection Setup >
rrcConnectionSetup
rrc-TransactionIdentifier: 0
criticalExtensions: c1 (0)
c1: rrcConnectionSetup-r8 (0)
rrcConnectionSetup-r8
radioResourceConfigDedicated
srb-ToAddModList: 1 item
Item 0
SRB-ToAddMod
srb-Identity: 1
rlc-Config: defaultValue (1)
defaultValue: NULL
logicalChannelConfig: defaultValue (1)
defaultValue: NULL
mac-MainConfig: explicitValue (0)
explicitValue
ul-SCH-Config
maxHARQ-Tx: n5 (4)
periodicBSR-Timer: sf20 (3)
retxBSR-Timer: sf320 (0)
..0. .... ttiBundling: False
drx-Config: release (0)
release: NULL
timeAlignmentTimerDedicated: infinity (7)
phr-Config: setup (1)
setup
periodicPHR-Timer: sf500 (5)
prohibitPHR-Timer: sf200 (5)
dl-PathlossChange: dB3 (1)
physicalConfigDedicated
pdsch-ConfigDedicated
p-a: dB0 (4)
pucch-ConfigDedicated
ackNackRepetition: release (0)
release: NULL
pusch-ConfigDedicated
betaOffset-ACK-Index: 10
betaOffset-RI-Index: 12
betaOffset-CQI-Index: 15
uplinkPowerControlDedicated
p0-UE-PUSCH: 0dB
deltaMCS-Enabled: en0 (0)
..1. .... accumulationEnabled: True
p0-UE-PUCCH: 0dB
pSRS-Offset: 0
filterCoefficient: fc4 (4)
cqi-ReportConfig
cqi-ReportModeAperiodic: rm30 (3)
nomPDSCH-RS-EPRE-Offset: 0dB (0)
antennaInfo: defaultValue (1)
defaultValue: NULL
schedulingRequestConfig: setup (1)
setup
sr-PUCCH-ResourceIndex: 20
sr-ConfigIndex: 30
dsr-TransMax: n64 (4)
HEX : 60 12 9B 3E 86 0F B5 79 70 AC FC 30 04 99 C0 A0 F4
< RRC : RRC Connection Setup Complete + NAS : Attach Request + ESM : PDN Connectivity Request >
rrcConnectionSetupComplete
rrc-TransactionIdentifier: 0
criticalExtensions: c1 (0)
c1: rrcConnectionSetupComplete-r8 (0)
rrcConnectionSetupComplete-r8
selectedPLMN-Identity: 1
dedicatedInfoNAS: 074176089b09008432153007050000000019002c0201d034...
Non-Access-Stratum (NAS)PDU
....
EPS mobile identity
Length: 8
.... 1... = odd/even indic: 1
.... .011 = Type of identity: IMEI (3)
IMEI: 990004823510370 // Since there is no USIM, UE use IMEI for ID
UE network capability
...
ESM message container
Length: 44
ESM message container contents: 0201d03427268080211001...
....
Procedure transaction identity: 1
NAS EPS session management messages: PDN connectivity request (0xd0)
0011 .... = PDN type: IPv4v6 (3)
.... 0100 = Request type: emergency (4)
Protocol Configuration Options
...
Protocol or Container ID: Internet Protocol Control Protocol
Length: 0x10 (16)
PPP IP Control Protocol
Code: Configuration Request (1)
Identifier: 0 (0x00)
Length: 16
Options: (12 bytes), Primary DNS Server IP Address,
Secondary DNS Server IP Address
Primary DNS Server IP Address: 0.0.0.0
Type: Primary DNS Server IP Address (129)
Length: 6
Primary DNS Address: 0.0.0.0 (0.0.0.0)
Secondary DNS Server IP Address: 0.0.0.0
Type: Secondary DNS Server IP Address (131)
Length: 6
Secondary DNS Address: 0.0.0.0 (0.0.0.0)
Protocol or Container ID: DNS Server IPv4 Address Request (0x000d)
Length: 0x00 (0)
Protocol or Container ID: DNS Server IPv6 Address Request (0x0003)
Length: 0x00 (0)
Protocol or Container ID: P-CSCF IPv6 Address Request (0x0001)
Length: 0x00 (0)
Protocol or Container ID: P-CSCF IPv4 Address Request (0x000c)
Length: 0x00 (0)
Protocol or Container ID: IP address allocation
via NAS signalling (0x000a)
Length: 0x00 (0)
Protocol or Container ID: IPv4 Link MTU Request (0x0010)
Length: 0x00 (0)
DRX Parameter
...
MS Network Capability
....
Mobile station classmark 2
....
Mobile station classmark 3
....
Supported Codec List - Supported Codecs
....
Voice domain preference and UE's usage setting
Element ID: 0x5d
Length: 1
0000 0... = Spare bit(s): 0
.... .0.. = UE's usage setting: Voice centric
.... ..11 = Voice domain preference for E-UTRAN:
IMS PS voice preferred, CS Voice as secondary (3)
MS network feature support
1100 .... = Element ID: 0xc-
.... 000. = Spare bit(s): 0
.... ...1 = Extended periodic timers: MS supports the extended periodic
timer in this domain
HEX : 20 00 D0 0E 82 EC 11 36 12 01 08 64 2A 60 0E 0A 00 00 00 00 32 00 58 04 03 A0 68 4E 4D 01 00
42 20 02 00 00 21 02 0C 00 00 00 01 06 0C 00 00 00 00 00 1A 00 00 06 00 00 02 00 00 18 00 00
14 00 00 20 00 B8 14 00 62 07 CB C0 74 22 06 AE B1 4C 40 16 C0 28 08 5E CA 46 04 00 48 58 40
80 10 08 04 C0 00 00 04 3E 00 BA 02 07 82
< RRC : DL Information Transfer + NAS : Security Mode Command >
dlInformationTransfer-r8
dedicatedInfoType: dedicatedInfoNAS (0)
dedicatedInfoNAS: 370000000000075d0000050000000070
Non-Access-Stratum (NAS)PDU
0011 .... = Security header type: Integrity protected with new EPS security context
.... 0111 = Protocol discriminator: EPS mobility management messages (0x07)
Message authentication code: 0x00000000
Sequence number: 0
0000 .... = Security header type: Plain NAS message, not security protected (0)
.... 0111 = Protocol discriminator: EPS mobility management messages (0x07)
NAS EPS Mobility Management Message Type: Security mode command (0x5d)
NAS security algorithms - Selected NAS security algorithms
0... .... = Spare bit(s): 0x00
.000 .... = Type of ciphering algorithm: EPS encryption algorithm EEA0
(null ciphering algorithm) (0)
.... 0... = Spare bit(s): 0x00
.... .000 = Type of integrity protection algorithm: EPS integrity algorithm EIA0
(null integrity protection algorithm) (0)
0000 .... = Spare half octet: 0
.... 0... = Type of security context flag (TSC): Native security context (for KSIasme)
.... .000 = NAS key set identifier: (0) ASME
UE security capability - Replayed UE security capabilities
....
HEX : 08 00 81 B8 00 00 00 00 00 3A E8 00 00 28 00 00 00 03 80
< RRC : UL Information Transfer + NAS : Security Mode Complete >
ulInformationTransfer-r8
dedicatedInfoType: dedicatedInfoNAS (0)
dedicatedInfoNAS: 470000000000075e
Non-Access-Stratum (NAS)PDU
0100 .... = Security header type: Integrity protected and ciphered
with new EPS security context (4)
.... 0111 = Protocol discriminator: EPS mobility management messages (0x07)
Message authentication code: 0x00000000
Sequence number: 0
0000 .... = Security header type: Plain NAS message, not security protected (0)
.... 0111 = Protocol discriminator: EPS mobility management messages (0x07)
NAS EPS Mobility Management Message Type: Security mode complete (0x5e)
HEX : 48 01 08 E0 00 00 00 00 00 EB C0
< RRC : Security Mode Command >
securityModeCommand-r8
securityConfigSMC
securityAlgorithmConfig
cipheringAlgorithm: eea0 (0)
integrityProtAlgorithm: eia0-v920 (0)
HEX : 30 00 00
< RRC : Security Mode Complete >
securityModeComplete
rrc-TransactionIdentifier: 0
criticalExtensions: securityModeComplete-r8 (0)
securityModeComplete-r8
HEX : 28 00
< RRC : UE Capability Enquiry >
ueCapabilityEnquiry
rrc-TransactionIdentifier: 0
criticalExtensions: c1 (0)
c1: ueCapabilityEnquiry-r8 (0)
ueCapabilityEnquiry-r8
ue-CapabilityRequest: 1 item
Item 0
RAT-Type: eutra (0)
HEX : 38 00 00
< RRC : UE Capability Information >
ueCapabilityInformation-r8
ue-CapabilityRAT-ContainerList: 1 item
Item 0
UE-CapabilityRAT-Container
rat-Type: eutra (0)
ueCapabilityRAT-Container: c998...
UE-EUTRA-Capability
accessStratumRelease: rel10 (2)
ue-Category: 4
pdcp-Parameters
supportedROHC-Profiles
....
phyLayerParameters
....
rf-Parameters
...
measParameters
....
featureGroupIndicators: 7fcffeba
...
interRAT-Parameters
...
nonCriticalExtension
phyLayerParameters-v920
interRAT-ParametersGERAN-v920
e-RedirectionGERAN-r9: supported (0)
interRAT-ParametersUTRA-v920
e-RedirectionUTRA-r9: supported (0)
csg-ProximityIndicationParameters-r9
utran-ProximityIndication-r9: supported (0)
neighCellSI-AcquisitionParameters-r9
son-Parameters-r9
rach-Report-r9: supported (0)
nonCriticalExtension
lateNonCriticalExtension: 8c00000000
UE-EUTRA-Capability-v9a0-IEs
featureGroupIndRel9Add-r9: c0000000
....
nonCriticalExtension
featureGroupIndRel10-r10: 00040000
....
ue-BasedNetwPerfMeasParameters-r10
loggedMeasurementsIdle-r10: supported (0)
nonCriticalExtension
HEX : 38 01 02 6C 99 80 01 0C 60 18 38 FF F0 71 FF DF F3 FF AE A2 06 00 90 E1 94 E9 52 44 8E 0B
18 00 00 00 00 15 00 04 00 00 80 00
rrcConnectionReconfiguration-r8
dedicatedInfoNASList: 1 item
Item 0
DedicatedInfoNAS: 27000000000...
Non-Access-Stratum (NAS)PDU
0010 .... = Security header type: Integrity protected and ciphered (2)
.... 0111 = Protocol discriminator: EPS mobility management messages (0x07)
Message authentication code: 0x00000000
Sequence number: 1
0000 .... = Security header type: Plain NAS message, not security protected (0)
.... 0111 = Protocol discriminator: EPS mobility management messages (0x07)
NAS EPS Mobility Management Message Type: Attach accept (0x42)
0000 .... = Spare half octet: 0
.... 0... = Spare bit(s): 0x00
.... .001 = Attach result: EPS only (1)
GPRS Timer - T3412 value
....
Tracking area identity list - TAI list
Length: 6
0... .... = Spare bit(s): 0x00
.00. .... = Type of list: list of TACs belonging to one PLMN,
with non-consecutive TAC values (0)
...0 0000 = Number of elements: 0 [+1 = 1 element(s)]
Mobile Country Code (MCC): Unknown (1)
Mobile Network Code (MNC): Unknown (010)
Tracking area code(TAC): 0x0001
ESM message container
Length: 107
ESM message container contents: ...
0101 .... = EPS bearer identity: EPS bearer identity value 5 (5)
.... 0010 = Protocol discriminator: EPS session management messages (0x02)
Procedure transaction identity: 1
NAS EPS session management messages:
Activate default EPS bearer context request (0xc1)
EPS quality of service
Length: 1
Quality of Service Class Identifier (QCI): QCI 5 (5)
Access Point Name
Length: 13
APN: testnet.sos
PDN address
Length: 13
0000 0... = Spare bit(s): 0x00
PDN type: IPv4v6 (3)
PDN IPv6 if id: 0000000000000001
PDN IPv4: 192.168.1.1 (192.168.1.1)
Protocol Configuration Options
Element ID: 0x27
Length: 72
[Link direction: Network to MS (1)]
1... .... = Extension: True
Configuration Protocol: PPP for use with IP PDP type
or IP PDN type (0)
Protocol or Container ID: Internet Protocol Control Protocol (0x8021)
Length: 0x10 (16)
PPP IP Control Protocol
Code: Configuration Nak (3)
Identifier: 0 (0x00)
Length: 16
Options: (12 bytes), Primary DNS Server IP Address,
Secondary DNS Server IP Address
Primary DNS Server IP Address: 192.168.1.2
Type: Primary DNS Server IP Address (129)
Length: 6
Primary DNS Address: 192.168.1.2 (192.168.1.2)
Secondary DNS Server IP Address: 192.168.1.2
Type: Secondary DNS Server IP Address (131)
Length: 6
Secondary DNS Address: 192.168.1.2 (192.168.1.2)
Protocol or Container ID: DNS Server IPv4 Address (0x000d)
Length: 0x04 (4)
IPv4: 192.168.1.2
Protocol or Container ID: DNS Server IPv6 Address (0x0003)
Length: 0x10 (16)
IPv6: 2001:0:0:1::2
Protocol or Container ID: P-CSCF IPv6 Address (0x0001)
Length: 0x10 (16)
IPv6: 2001:0:0:1::2
Protocol or Container ID: P-CSCF IPv4 Address (0x000c)
Length: 0x04 (4)
IPv4: 192.168.1.2
EPS mobile identity - GUTI
Element ID: 0x50
Length: 11
.... 0... = odd/even indic: 0
.... .110 = Type of identity: GUTI (6)
Mobile Country Code (MCC): Unknown (1)
Mobile Network Code (MNC): Unknown (010)
MME Group ID: 32769
MME Code: 0
M-TMSI: 0x00000001
GPRS Timer - T3402 value
...
GPRS Timer - T3423 value
....
EPS network feature support
Element ID: 0x64
Length: 1
00.. .... = Spare bit(s): 0x00
..0. .... = ESRPS: network does not support use of EXTENDED SERVICE REQUEST
to request for packet services
...0 0... = CS-LCS: no information about support of location services
via CS domain is available (0)
.... .0.. = EPC-LCS: location services via EPC not supported
.... ..1. = EMC BS: emergency bearer services in S1 mode supported
.... ...1 = IMS VoPS: IMS voice over PS session in S1 mode supported
radioResourceConfigDedicated
srb-ToAddModList: 1 item
...
drb-ToAddModList: 1 item
...
mac-MainConfig: explicitValue (0)
...
physicalConfigDedicated
...
HEX : 20 06 04 04 91 38 00 00 00 00 08 3A 10 0F 00 30 00 00 08 80 00 08 03 5A 90 0E 08 08 28 68 43
0B 73 93 4B A3 9B A9 88 1B 9B 7B 98 68 18 00 00 00 00 00 00 00 0E 05 40 08 09 3A 44 04 01 08
80 18 00 00 84 08 36 05 40 08 14 18 36 05 40 08 10 00 68 26 05 40 08 10 00 18 81 00 08 00 00
00 00 00 08 00 00 00 00 00 00 00 10 00 08 81 00 08 00 00 00 00 00 08 00 00 00 00 00 00 00 10
00 60 26 05 40 08 12 80 5F B0 00 08 84 00 08 00 00 00 00 08 BF 02 CF 03 20 08 1B 53 E0 FA 81
BC 0F A8 E0 60 68 26 7E 9D 52 D2 E8 00 FB 50 68 03 00 0C A0 7F E0 80 FD 02
rrcConnectionReconfigurationComplete
rrc-TransactionIdentifier: 0
criticalExtensions: rrcConnectionReconfigurationComplete-r8 (0)
rrcConnectionReconfigurationComplete-r8
HEX : 10 00
< RRC : DL Information Transfer + EMM : Information >
ulInformationTransfer-r8
dedicatedInfoType: dedicatedInfoNAS (0)
dedicatedInfoNAS: 270000000001074300035200c2
Non-Access-Stratum (NAS)PDU
0010 .... = Security header type: Integrity protected and ciphered (2)
.... 0111 = Protocol discriminator: EPS mobility management messages (0x07)
Message authentication code: 0x00000000
Sequence number: 1
0000 .... = Security header type: Plain NAS message, not security protected (0)
.... 0111 = Protocol discriminator: EPS mobility management messages (0x07)
NAS EPS Mobility Management Message Type: Attach complete (0x43)
ESM message container
Length: 3
ESM message container contents: 5200c2
0101 .... = EPS bearer identity: EPS bearer identity value 5 (5)
.... 0010 = Protocol discriminator: EPS session management messages (0x02)
Procedure transaction identity: 0
NAS EPS session management messages:
Activate default EPS bearer context accept (0xc2)
HEX : 48 01 A4 E0 00 00 00 00 20 E8 60 00 6A 40 18 40
INVITE urn:service:sos SIP/2.0
P-Preferred-Identity: sip:99000482-351037-0@[2001:0:0:1::1]:5060
Contact: <sip:[2001:0:0:1::1]:5060>;+sip.instance="<urn:gsma:imei:99000482-351037-0>"
Supported: timer
Allow: INVITE,ACK,OPTIONS,CANCEL,BYE,UPDATE,INFO,REFER,NOTIFY,MESSAGE,PRACK
P-Access-Network-Info: 3GPP-E-UTRAN-FDD;utran-cell-id-3gpp=31148000010000000
Session-Expires: 300
Min-SE: 90
Content-Type: application/sdp
Route: <sip:[2001:0:0:1::2]:5060;lr>
Accept-Contact: *;+g.3gpp.icsi-ref="urn%3Aurn-7%3A3gpp-service.ims.icsi.mmtel"
From: <sip:anonymous@anonymous.invalid>;tag=2043043914
To: <urn:service:sos>
Call-ID: 227004879@2001:0:0:1::1
CSeq: 1 INVITE
Max-Forwards: 70
Via: SIP/2.0/TCP [2001:0:0:1::1]:5060;branch=z9hG4bK1207526045smg;transport=TCP
Content-Length: 579
v=0
o=TEST-IMS-UE 1234562 0 IN IP6 2001:0:0:1::1
s=SS VOIP
i=A VOIP Session
c=IN IP6 2001:0:0:1::1
t=0 0
m=audio 49158 RTP/AVP 104 110 102 108 105 100
b=AS:38
b=RS:0
b=RR:0
a=rtpmap:104 AMR-WB/16000
a=fmtp:104 octet-align=0;mode-set=2
a=rtpmap:110 AMR-WB/16000
a=fmtp:110 octet-align=1;mode-set=2
a=rtpmap:102 AMR/8000
a=fmtp:102 octet-align=0;mode-set=7
a=rtpmap:108 AMR/8000
a=fmtp:108 octet-align=1;mode-set=7
a=rtpmap:105 telephone-event/16000
a=fmtp:105 0-15
a=rtpmap:100 telephone-event/8000
a=fmtp:100 0-15
a=sendrecv
a=ptime:20
a=maxptime:240
SIP/2.0 100 Trying
Via: SIP/2.0/TCP [2001:0:0:1::1]:5060;branch=z9hG4bK1207526045smg;transport=TCP
Max-Forwards: 70
From: <sip:anonymous@anonymous.invalid>;tag=2043043914
To: <urn:service:sos>
Call-ID: 227004879@2001:0:0:1::1
CSeq: 1 INVITE
Content-Length: 0
SIP/2.0 180 Ringing
Max-Forwards: 70
Via: SIP/2.0/TCP [2001:0:0:1::1]:5060;branch=z9hG4bK1207526045smg;transport=TCP
From: <sip:anonymous@anonymous.invalid>;tag=2043043914
To: <urn:service:sos>;tag=2147483647
Call-ID: 227004879@2001:0:0:1::1
CSeq: 1 INVITE
Record-Route: <sip:[2001:0:0:1::2]:5060;lr>
Supported: precondition
Supported: 100rel
User-Agent: Test-PSAP/aeeae6a
Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE
P-Asserted-Identity: <tel:911;phone-context=testnet.com>
Content-Length: 0
Contact: <sip:[2001:0:0:1::2]:35738;transport=tcp>
Privacy: none
SIP/2.0 200 OK
Max-Forwards: 70
Via: SIP/2.0/TCP [2001:0:0:1::1]:5060;branch=z9hG4bK1207526045smg;transport=TCP
From: <sip:anonymous@anonymous.invalid>;tag=2043043914
To: <urn:service:sos>;tag=2147483647
Call-ID: 227004879@2001:0:0:1::1
CSeq: 1 INVITE
Record-Route: <sip:[2001:0:0:1::2]:5060;lr>
User-Agent: Test-PSAP/aeeae6a
Content-Type: application/sdp
Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE
P-Asserted-Identity: <tel:911;phone-context=testnet.com>
Content-Length: 581
Contact: <sip:[2001:0:0:1::2]:35738;transport=tcp>
Privacy: none
v=0
o=test 447 271448 IN IP6 2001:0:0:1::2
s=-
i=A VOIP Session
c=IN IP6 2001:0:0:1::2
t=0 0
m=audio 60000 RTP/AVP 104 110 102 108 105 100
b=AS:38
b=RS:0
b=RR:0
a=rtpmap:104 AMR-WB/16000
a=fmtp:104 octet-align=0;mode-set=2
a=rtpmap:110 AMR-WB/16000
a=fmtp:110 octet-align=1;mode-set=2
a=rtpmap:102 AMR/8000
a=fmtp:102 octet-align=0;mode-set=7
a=rtpmap:108 AMR/8000
a=fmtp:108 octet-align=1;mode-set=7
a=rtpmap:105 telephone-event/16000
a=fmtp:105 0-15
a=rtpmap:100 telephone-event/8000
a=fmtp:100 0-15
a=sendrecv
a=ptime:20
a=maxptime:240
a=rtcp:60001
ACK sip:[2001:0:0:1::2]:35738;transport=tcp SIP/2.0
From: <sip:anonymous@anonymous.invalid>;tag=2043043914
To: <urn:service:sos>;tag=2147483647
CSeq: 1 ACK
Call-ID: 227004879@2001:0:0:1::1
Max-Forwards: 70
Route: <sip:[2001:0:0:1::2]:5060;lr>
Contact: <sip:+12244004245@[2001:0:0:1::1]:5060>;+g.3gpp.icsi-ref="urn%3Aurn-7%3A3gpp-service.ims.icsi.mmtel";video;+sip.instance="<urn:gsma:imei:99000482-351037-0>"
Via: SIP/2.0/UDP [2001:0:0:1::1]:5060;branch=z9hG4bK2277799816smg;transport=UDP
Content-Length: 0