IMS

 

 

 

 

PSAP - Emergency Call 

 

PSAP stands for Public-Safety Wnswering Point or Public-Safety Access Point. In our daily talks, it usually mean 'IMS based emergency call', i.e 'Emergency Call going through IMS network, not through CS call'. UE may be able to make a PSAP call while it is properly registered in a network operator or it may be able to the PSAP call even without USIM (implying without being registered in a network).

 

There are several factors and radio messages getting involved in PSAP support and I will explain about it using some examples that I have done with a network simulator. Even in live network, you would see different types of PSAP operations listed below. Some UE or some carrier would allow all of these cases, but for some UE or some carrier only some of these cases are allowed. So you need to understand the exact UE specification and Network Operators requirement first before you start testing.

 

In the following examples, I wouldn't put much of comments and explanation. Based on the assumption that you are familiar with overall SIP/IMS protocol, I think just highliting some important parts can be enough explanation.

 

 

Emergency Call with Normal Registration

 

In following sample sequence, I only listed the message/procedures which is directly related to PSAP call, meaning there are many additional steps/messages which does exists in the reall call but not listed here.

Item No

Direction

Message or Procedure

Description

1

UE <-- NW

System Information Block Type 1 Specifies whether the network support IMS Emergency call or not

2

UE <-- NW

Attach Accept Emergency Bearer Supportability, Emergency Number List etc

3

 

< Complete LTE Registration >  

4

 

< Complete IMS Registration >  

5

 

< Dial the Emergency Number >  

6

UE --> NW

PDN Connectivity Request Emergency Type PDN Request

7

UE <-- NW

Activate default EPS bearer context request

Assigns EPS Bearer and Emergency APN

8

UE --> NW

SIP : INVITE INVITE to PSAP (with PSAP urn)

9

UE <-- NW

SIP : 183 Session Progress

 

10

 

< Complete VoLTE Setup >  

 

 

< System Information Block Type 1 >

 

BCCH-DL-SCH-Message

    message: c1 (0)

        c1: systemInformationBlockType1 (1)

            systemInformationBlockType1

                cellAccessRelatedInfo

                    plmn-IdentityList: 1 item

                        Item 0

                            PLMN-IdentityInfo

                                plmn-Identity

                                    mcc: 3 items

                                        Item 0

                                            MCC-MNC-Digit: 0

                                        Item 1

                                            MCC-MNC-Digit: 0

                                        Item 2

                                            MCC-MNC-Digit: 1

                                    mnc: 2 items

                                        Item 0

                                            MCC-MNC-Digit: 0

                                        Item 1

                                            MCC-MNC-Digit: 1

                                cellReservedForOperatorUse: notReserved (1)

                    trackingAreaCode: 0001 [bit length 16, 0000 0000  0000 0001 decimal value 1]

                    cellIdentity: 00000000

                    cellBarred: notBarred (1)

                    intraFreqReselection: notAllowed (1)

                    .... ..0. csg-Indication: False

                cellSelectionInfo

                    q-RxLevMin: -110dBm (-55)

                p-Max: 23dBm

                freqBandIndicator: 4

                schedulingInfoList: 2 items

                    Item 0

                        SchedulingInfo

                            si-Periodicity: rf16 (1)

                            sib-MappingInfo: 0 items

                    Item 1

                        SchedulingInfo

                            si-Periodicity: rf32 (2)

                            sib-MappingInfo: 1 item

                                Item 0

                                    SIB-Type: sibType3 (0)

                si-WindowLength: ms20 (5)

                systemInfoValueTag: 0

                nonCriticalExtension

                    nonCriticalExtension

                        ims-EmergencySupport-r9: true (0)

 

 

< Attach Accept >

 

In this message Network notifies varies information about embergency call but the detailed UE behavior may vary depending on UE implementation. See the comments I put in the message.

 

DL-DCCH-Message

    message: c1 (0)

        c1: rrcConnectionReconfiguration (4)

            rrcConnectionReconfiguration

                rrc-TransactionIdentifier: 0

                criticalExtensions: c1 (0)

                    c1: rrcConnectionReconfiguration-r8 (0)

                        rrcConnectionReconfiguration-r8

                            dedicatedInfoNASList: 1 item

                                Item 0

                                    DedicatedInfoNAS: 271166512903074202e0060000f110...

                                        Non-Access-Stratum (NAS)PDU

                                            .....

                                                                                                  // when UE tries PSAP call, usually NW assigns this APN

                                                                              // appended with .sos (e.g, testnet.sos)

                                                    Access Point Name

                                                        Length: 8

                                                        APN: testnet

                                                    PDN address

                                                        ...

                                                    Protocol Configuration Options

                                                        ...

                                            EPS mobile identity - GUTI

                                                Element ID: 0x50

                                                Length: 11

                                                .... 0... = odd/even indic: 0

                                                .... .110 = Type of identity: GUTI (6)

                                                Mobile Country Code (MCC): Unknown (1)

                                                Mobile Network Code (MNC): Unknown (01)

                                                MME Group ID: 32769

                                                MME Code: 0

                                                M-TMSI: 0x00000001

                                            Location area identification

                                                Element ID: 0x13

                                                Location Area Identification (LAI) - 001/01/1

                                                    Mobile Country Code (MCC): Unknown (1)

                                                    Mobile Network Code (MNC): Unknown (01)

                                                    Location Area Code (LAC): 0x0001 (1)

                                            Mobile identity - MS identity - TMSI/P-TMSI (0x0001)

                                                ...

                                            GPRS Timer - T3402 value

                                                ...

                                            GPRS Timer - T3423 value

                                                ...

                                            // this part may be optional. (this is just one example)

                                                                      // if this part is not specified, UE may allow

                                                                      // usual emergency number like 911. but I saw some UE

                                                                      // does not trigger emergency call at all if the

                                                                      // number is not specified here.

                                                                      // When I am testing emergency call,

                                                                      // I usually specifies the number

                                                                      // that is not used as emergency number in live network to

                                                                      // prevent the UE accidentally make emergency call to live

                                                                      // network.

                                            Emergency Number List

                                                Element ID: 0x34

                                                Length: 4

                                                Emergency Number Information: 1

                                                    Emergency Number Info length: 3

                                                    000. .... = Spare bit(s): 0

                                                    ...0 .... = Mountain Rescue: False

                                                    .... 0... = Marine Guard: False

                                                    .... .0.. = Fire Brigade: False

                                                    .... ..0. = Ambulance: False

                                                    .... ...1 = Police: True

                                                    Emergency BCD Number: 123

                                            EPS network feature support

                                                Element ID: 0x64

                                                Length: 1

                                                00.. .... = Spare bit(s): 0x00

                                                ..0. .... = ESRPS:network does not support use of

                                                ...0 0... = CS-LCS:no information about support of

                                                .... .0.. = EPC-LCS: location services via EPC not

                                                .... ..1. = EMC BS: emergency bearer services

                                                            in S1 mode supported

                                                .... ...1 = IMS VoPS: IMS voice over PS session

                                                            in S1 mode supported

                            radioResourceConfigDedicated

                                ...

 

 

< PDN Connectivity Request >

 

UL-DCCH-Message

    message: c1 (0)

        c1: ulInformationTransfer (9)

            ulInformationTransfer

                criticalExtensions: c1 (0)

                    c1: ulInformationTransfer-r8 (0)

                        ulInformationTransfer-r8

                            dedicatedInfoType: dedicatedInfoNAS (0)

                                dedicatedInfoNAS: 273a3567040...

                                    Non-Access-Stratum (NAS)PDU

                                        0010 .... = Security header type: ...

                                        .... 0111 = Protocol discriminator: ...

                                        Message authentication code: 0x3a356704

                                        Sequence number: 6

                                        0000 .... = EPS bearer identity: ...

                                        .... 0010 = Protocol discriminator: ...

                                        Procedure transaction identity: 24

                                        NAS EPS session management messages:

                                                          PDN connectivity request (0xd0)

                                        0010 .... = PDN type: IPv6 (2)

                                        .... 0100 = Request type: emergency (4)

                                        Protocol Configuration Options

                                            Element ID: 0x27

                                            Length: 13

                                            [Link direction: MS to network (0)]

                                            1... .... = Extension: True

                                            .... .000 = Configuration Protocol:

                                                   PPP for use with IP PDP type or IP PDN type(0)

                                          Protocol or Container ID:

                                                   DNS Server IPv6 Address Request (0x0003)

                                                Length: 0x00 (0)

                                          Protocol or Container ID:

                                                   P-CSCF IPv6 Address Request (0x0001)

                                                Length: 0x00 (0)

                                          Protocol or Container ID:

                                                  IP address allocation via NAS signalling(0x000a)

                                                Length: 0x00 (0)

                                          Protocol or Container ID: IPv4 Link MTU Request(0x0010)

                                                Length: 0x00 (0)

 

 

< Activate default EPS bearer context request >

 

DL-DCCH-Message

    message: c1 (0)

        c1: rrcConnectionReconfiguration (4)

            rrcConnectionReconfiguration

                rrc-TransactionIdentifier: 0

                criticalExtensions: c1 (0)

                    c1: rrcConnectionReconfiguration-r8 (0)

                        rrcConnectionReconfiguration-r8

                            dedicatedInfoNASList: 1 item

                                Item 0

                                    DedicatedInfoNAS: 273a53d882067218c101090d08616...

                                        Non-Access-Stratum (NAS)PDU

                                            0010 .... = Security header type: ...

                                            .... 0111 = Protocol discriminator: ...

                                            Message authentication code: 0x3a53d882

                                            Sequence number: 6

                                            0111 .... = EPS bearer identity: ..

                                            .... 0010 = Protocol discriminator: ...

                                            Procedure transaction identity: 24

                                            NAS EPS session management messages:

                                                Activate default EPS bearer context request (0xc1)

                                            EPS quality of service

                                                Length: 1

                                                Quality of Service Class Identifier (QCI): QCI 9

                                            Access Point Name

                                                Length: 13

                                                APN: testnet.sos

                                            PDN address

                                                Length: 9

                                                0000 0... = Spare bit(s): 0x00

                                                PDN type: IPv6 (2)

                                                PDN IPv6 if id: 0000000000000001

                                            Protocol Configuration Options

                                                Element ID: 0x27

                                                Length: 39

                                                [Link direction: Network to MS (1)]

                                                1... .... = Extension: True

                                                .... .000 = Configuration Protocol: ...

                                                Protocol or Container ID: DNS Server IPv6 Address

                                                    Length: 0x10 (16)

                                                    IPv6: 2001:0:0:3::2

                                                Protocol or Container ID: P-CSCF IPv6 Address..

                                                    Length: 0x10 (16)

                                                    IPv6: 2001:0:0:3::2

                            radioResourceConfigDedicated

                                   .....

 

 

< INVITE >

 

INVITE urn:service:sos SIP/2.0

Supported: timer,100rel,precondition

Allow: INVITE,ACK,OPTIONS,CANCEL,BYE,UPDATE,INFO,REFER,NOTIFY,MESSAGE,PRACK

User-Agent: testIMS /OK2 5.1.1

Accept-Contact: *;+g.3gpp.icsi-ref="urn%3Aurn-7%3A3gpp-service.ims.icsi.mmtel";video

P-Access-Network-Info: 3GPP-E-UTRAN-FDD;utran-cell-id-3gpp=0010100010000000

Session-Expires: 1800;refresher=uac

Min-SE: 90

Content-Type: application/sdp

Accept: application/sdp,application/3gpp-ims+xml

Route: <sip:[2001:0:0:3::2]:5060;lr>

P-Preferred-Identity: <sip:001010123456789@ims.mnc01.mcc001.3gppnetwork.org>

From: <sip:001010123456789@ims.mnc01.mcc001.3gppnetwork.org>;tag=414344133

To: "123" <urn:service:sos>

Call-ID: 1800855744@2001:0:0:3::1

CSeq: 1 INVITE

Max-Forwards: 70

Contact: <sip:001010123456789@[2001:0:0:3::1]:5060;transport=UDP>;

           +g.3gpp.icsi-ref="urn%3Aurn-7%3A3gpp-service.ims.icsi.mmtel";video;

           +g.3gpp.mid-call;+g.3gpp.srvcc-alerting;+g.3gpp.ps2cs-srvcc-orig-pre-alerting;

           +sip.instance="<urn:gsma:imei:35609506-513511-0>"

Via: SIP/2.0/TCP [2001:0:0:3::1]:5060;branch=z9hG4bK2071720670smg;transport=TCP;rport

Content-Length: 780

 

v=0

o=SAMSUNG-IMS-UE 1234567 0 IN IP6 2001:0:0:3::1

s=SS VOIP

c=IN IP6 2001:0:0:3::1

b=AS:49

b=RS:0

b=RR:0

t=0 0

m=audio 1234 RTP/AVP 114 113 102 115 105 101

b=AS:49

b=RS:0

b=RR:0

a=rtpmap:114 AMR-WB/16000/1

a=fmtp:114 mode-change-capability=2;max-red=0

a=rtpmap:113 AMR-WB/16000/1

a=fmtp:113 octet-align=1;mode-change-capability=2;max-red=0

a=rtpmap:102 AMR/8000/1

a=fmtp:102 mode-change-capability=2;max-red=0

a=rtpmap:115 AMR/8000/1

a=fmtp:115 octet-align=1;mode-change-capability=2;max-red=0

a=rtpmap:105 telephone-event/16000

a=fmtp:105 0-15

a=rtpmap:101 telephone-event/8000

a=fmtp:101 0-15

a=curr:qos local none

a=curr:qos remote none

a=des:qos mandatory local sendrecv

a=des:qos optional remote sendrecv

a=sendrecv

a=ptime:20

a=maxptime:240

 

 

< 183 Session Progresss >

 

Call-ID: 1800855744@2001:0:0:3::1

CSeq: 1 INVITE

Record-Route: <sip:[2001:0:0:3::2]:5060;lr>

Require: precondition

Require: 100rel

Supported: precondition

Supported: 100rel

RSeq: 1

User-Agent: Test-PSAP/fcefab8

Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE

P-Asserted-Identity: <tel:123;phone-context=test-cscf.com>

Content-Type: application/sdp

Content-Length: 804

Contact: <sip:[2001:0:0:3::2]:50101;transport=tcp>;+g.3gpp.icsi-ref="urn:urn-7:3gpp-service.ims.icsi.mmtel";video

Privacy: none

 

v=0

o=test 301 60302 IN IP6 2001:0:0:3::2

s=-

i=A VOIP Session

c=IN IP6 2001:0:0:3::2

t=0 0

m=audio 60000 RTP/AVP 114 113 102 115 105 101

b=AS:49

b=RS:0

b=RR:0

a=rtpmap:114 AMR-WB/16000/1

a=fmtp:114 mode-change-capability=2;max-red=0

a=rtpmap:113 AMR-WB/16000/1

a=fmtp:113 octet-align=1;mode-change-capability=2;max-red=0

a=rtpmap:102 AMR/8000/1

a=fmtp:102 mode-change-capability=2;max-red=0

a=rtpmap:115 AMR/8000/1

a=fmtp:115 octet-align=1;mode-change-capability=2;max-red=0

a=rtpmap:105 telephone-event/16000

a=fmtp:105 0-15

a=rtpmap:101 telephone-event/8000

a=fmtp:101 0-15

a=curr:qos local none

a=curr:qos remote none

a=des:qos mandatory local sendrecv

a=des:qos mandatory remote sendrecv

a=sendrecv

a=ptime:20

a=maxptime:240

a=conf:qos remote sendrecv

a=rtcp:60001

 

 

Emergency Call without Normal Registration (e.g, without USIM)

 

Item No

Direction

Message or Procedure

Description

1

UE <-- NW

System Information Block Type 1 Specifies whether the network support IMS Emergency call or not

2

 

< Power on UE with No USIM >

UE would not camp because it doesn't have USIM

3

 

< Make an Emergency Call from UE >

 

4

UE --> NW

RRC : PRACH Preamble

 

5

UE <-- NW

RRC : RACH Response

 

6

UE --> NW

RRC : RRC Connection Request

Register with

establishement cause = emergency

7

UE <-- NW

RRC : RRC Connection Setup

 

8

UE --> NW

RRC : RRC Connection Setup Complete

     + NAS : Attach Request

     + ESM : PDN Connectivity Request

Attach Request with

Request type: emergency

9

UE <-- NW

RRC : DL Information Transfer

     + NAS : Security Mode Command

 

10

UE --> NW

RRC : UL Information Transfer

     + NAS : Security Mode Complete

 

11

UE <-- NW

RRC : Security Mode Command

 

12

UE --> NW

RRC : Security Mode Complete

 

13

UE <-- NW

RRC : UE Capability Enquiry

 

14

UE --> NW

RRC : UE Capability Information

 

15

UE <-- NW

RRC : RRC Connection Reconfiguration

+ NAS : Attach Accept

+ EPS : Activate Default EPS Bearer Context Req

Allocate .sos APN name

16

UE --> NW

RRC : RRC Connection Reconfiguration Complete

+ NAS : Attach Complete

+ NAS : Activate Default EPS Bearer Context Accept

 

17

UE <-- NW

EMM : Information  

18

UE --> NW

SIP : INVITE

From: <sip:anonymous@anonymous.invalid>

To: <urn:service:sos>

19

UE <-- NW

SIP : 100 Trying  

20

UE <-- NW

SIP : 180 Ringing  

21

UE <-- NW

SIP : 200 OK  

22

UE --> NW

SIP : ACK  

 

 

< System Information Type 1 >

 

BCCH-DL-SCH-Message

    message: c1 (0)

        c1: systemInformationBlockType1 (1)

            systemInformationBlockType1

                cellAccessRelatedInfo

                    plmn-IdentityList: 1 item

                        Item 0

                            PLMN-IdentityInfo

                                plmn-Identity

                                    mcc: 3 items

                                        Item 0

                                            MCC-MNC-Digit: 0

                                        Item 1

                                            MCC-MNC-Digit: 0

                                        Item 2

                                            MCC-MNC-Digit: 1

                                    mnc: 2 items

                                        Item 0

                                            MCC-MNC-Digit: 0

                                        Item 1

                                            MCC-MNC-Digit: 1

                                cellReservedForOperatorUse: notReserved (1)

                    trackingAreaCode: 0001 [bit length 16, 0000 0000  0000 0001 decimal value 1]

                    cellIdentity: 00000000

                    cellBarred: notBarred (1)

                    intraFreqReselection: notAllowed (1)

                    .... ..0. csg-Indication: False

                cellSelectionInfo

                    q-RxLevMin: -110dBm (-55)

                p-Max: 23dBm

                freqBandIndicator: 4

                schedulingInfoList: 2 items

                    Item 0

                        SchedulingInfo

                            si-Periodicity: rf16 (1)

                            sib-MappingInfo: 0 items

                    Item 1

                        SchedulingInfo

                            si-Periodicity: rf32 (2)

                            sib-MappingInfo: 1 item

                                Item 0

                                    SIB-Type: sibType3 (0)

                si-WindowLength: ms20 (5)

                systemInfoValueTag: 0

                nonCriticalExtension

                    nonCriticalExtension

                        ims-EmergencySupport-r9: true (0)

 

 

< RRC : RRC Connection Request >

 

rrcConnectionRequest-r8

    ue-Identity: randomValue (1)

        randomValue: c81bd69ba6

    establishmentCause: emergency (0)

        spare: 00 [bit length 1, 7 LSB pad bits, 0... .... decimal value 0]

 

HEX : 5C 81 BD 69 BA 60

 

 

< RRC : RRC Connection Setup >

 

rrcConnectionSetup

    rrc-TransactionIdentifier: 0

    criticalExtensions: c1 (0)

        c1: rrcConnectionSetup-r8 (0)

            rrcConnectionSetup-r8

                radioResourceConfigDedicated

                    srb-ToAddModList: 1 item

                        Item 0

                            SRB-ToAddMod

                                srb-Identity: 1

                                rlc-Config: defaultValue (1)

                                    defaultValue: NULL

                                logicalChannelConfig: defaultValue (1)

                                    defaultValue: NULL

                    mac-MainConfig: explicitValue (0)

                        explicitValue

                            ul-SCH-Config

                                maxHARQ-Tx: n5 (4)

                                periodicBSR-Timer: sf20 (3)

                                retxBSR-Timer: sf320 (0)

                                ..0. .... ttiBundling: False

                            drx-Config: release (0)

                                release: NULL

                            timeAlignmentTimerDedicated: infinity (7)

                            phr-Config: setup (1)

                                setup

                                    periodicPHR-Timer: sf500 (5)

                                    prohibitPHR-Timer: sf200 (5)

                                    dl-PathlossChange: dB3 (1)

                    physicalConfigDedicated

                        pdsch-ConfigDedicated

                            p-a: dB0 (4)

                        pucch-ConfigDedicated

                            ackNackRepetition: release (0)

                                release: NULL

                        pusch-ConfigDedicated

                            betaOffset-ACK-Index: 10

                            betaOffset-RI-Index: 12

                            betaOffset-CQI-Index: 15

                        uplinkPowerControlDedicated

                            p0-UE-PUSCH: 0dB

                            deltaMCS-Enabled: en0 (0)

                            ..1. .... accumulationEnabled: True

                            p0-UE-PUCCH: 0dB

                            pSRS-Offset: 0

                            filterCoefficient: fc4 (4)

                        cqi-ReportConfig

                            cqi-ReportModeAperiodic: rm30 (3)

                            nomPDSCH-RS-EPRE-Offset: 0dB (0)

                        antennaInfo: defaultValue (1)

                            defaultValue: NULL

                        schedulingRequestConfig: setup (1)

                            setup

                                sr-PUCCH-ResourceIndex: 20

                                sr-ConfigIndex: 30

                                dsr-TransMax: n64 (4)

 

HEX : 60 12 9B 3E 86 0F B5 79 70 AC FC 30 04 99 C0 A0 F4

 

 

< RRC : RRC Connection Setup Complete + NAS : Attach Request + ESM : PDN Connectivity Request >

 

rrcConnectionSetupComplete

    rrc-TransactionIdentifier: 0

    criticalExtensions: c1 (0)

        c1: rrcConnectionSetupComplete-r8 (0)

            rrcConnectionSetupComplete-r8

                selectedPLMN-Identity: 1

                dedicatedInfoNAS: 074176089b09008432153007050000000019002c0201d034...

                    Non-Access-Stratum (NAS)PDU

                        ....

                        EPS mobile identity

                            Length: 8

                            .... 1... = odd/even indic: 1

                            .... .011 = Type of identity: IMEI (3)

                            IMEI: 990004823510370 // Since there is no USIM, UE use IMEI for ID

                        UE network capability

                            ...

                        ESM message container

                            Length: 44

                            ESM message container contents: 0201d03427268080211001...

                                ....

                                Procedure transaction identity: 1

                                NAS EPS session management messages: PDN connectivity request (0xd0)

                                0011 .... = PDN type: IPv4v6 (3)

                                .... 0100 = Request type: emergency (4)

                                Protocol Configuration Options

                                    ...

                                    Protocol or Container ID: Internet Protocol Control Protocol

                                        Length: 0x10 (16)

                                        PPP IP Control Protocol

                                            Code: Configuration Request (1)

                                            Identifier: 0 (0x00)

                                            Length: 16

                                            Options: (12 bytes), Primary DNS Server IP Address,

                                                    Secondary DNS Server IP Address

                                                Primary DNS Server IP Address: 0.0.0.0

                                                    Type: Primary DNS Server IP Address (129)

                                                    Length: 6

                                                    Primary DNS Address: 0.0.0.0 (0.0.0.0)

                                                Secondary DNS Server IP Address: 0.0.0.0

                                                    Type: Secondary DNS Server IP Address (131)

                                                    Length: 6

                                                    Secondary DNS Address: 0.0.0.0 (0.0.0.0)

                                    Protocol or Container ID: DNS Server IPv4 Address Request (0x000d)

                                        Length: 0x00 (0)

                                    Protocol or Container ID: DNS Server IPv6 Address Request (0x0003)

                                        Length: 0x00 (0)

                                    Protocol or Container ID: P-CSCF IPv6 Address Request (0x0001)

                                        Length: 0x00 (0)

                                    Protocol or Container ID: P-CSCF IPv4 Address Request (0x000c)

                                        Length: 0x00 (0)

                                    Protocol or Container ID: IP address allocation

                                                     via NAS signalling (0x000a)

                                        Length: 0x00 (0)

                                    Protocol or Container ID: IPv4 Link MTU Request (0x0010)

                                        Length: 0x00 (0)

                        DRX Parameter

                            ...

                        MS Network Capability

                            ....

                            

                        Mobile station classmark 2

                            ....

                        Mobile station classmark 3

                            ....

                        Supported Codec List - Supported Codecs

                            ....

                        Voice domain preference and UE's usage setting

                            Element ID: 0x5d

                            Length: 1

                            0000 0... = Spare bit(s): 0

                            .... .0.. = UE's usage setting: Voice centric

                            .... ..11 = Voice domain preference for E-UTRAN:

                                         IMS PS voice preferred, CS Voice as secondary (3)

                        MS network feature support

                            1100 .... = Element ID: 0xc-

                            .... 000. = Spare bit(s): 0

                            .... ...1 = Extended periodic timers: MS supports the extended periodic

                                        timer in this domain

 

HEX : 20 00 D0 0E 82 EC 11 36 12 01 08 64 2A 60 0E 0A 00 00 00 00 32 00 58 04 03 A0 68 4E 4D 01 00

      42 20 02 00 00 21 02 0C 00 00 00 01 06 0C 00 00 00 00 00 1A 00 00 06 00 00 02 00 00 18 00 00

      14 00 00 20 00 B8 14 00 62 07 CB C0 74 22 06 AE B1 4C 40 16 C0 28 08 5E CA 46 04 00 48 58 40

      80 10 08 04 C0 00 00 04 3E 00 BA 02 07 82

 

 

< RRC : DL Information Transfer + NAS : Security Mode Command >

 

dlInformationTransfer-r8

    dedicatedInfoType: dedicatedInfoNAS (0)

        dedicatedInfoNAS: 370000000000075d0000050000000070

            Non-Access-Stratum (NAS)PDU

                0011 .... = Security header type: Integrity protected with new EPS security context

                .... 0111 = Protocol discriminator: EPS mobility management messages (0x07)

                Message authentication code: 0x00000000

                Sequence number: 0

                0000 .... = Security header type: Plain NAS message, not security protected (0)

                .... 0111 = Protocol discriminator: EPS mobility management messages (0x07)

                NAS EPS Mobility Management Message Type: Security mode command (0x5d)

                NAS security algorithms - Selected NAS security algorithms

                    0... .... = Spare bit(s): 0x00

                    .000 .... = Type of ciphering algorithm: EPS encryption algorithm EEA0

                                (null ciphering algorithm) (0)

                    .... 0... = Spare bit(s): 0x00

                    .... .000 = Type of integrity protection algorithm: EPS integrity algorithm EIA0

                                (null integrity protection algorithm) (0)

                0000 .... = Spare half octet: 0

                .... 0... = Type of security context flag (TSC): Native security context (for KSIasme)

                .... .000 = NAS key set identifier:  (0) ASME

                UE security capability - Replayed UE security capabilities

                    ....

 

HEX : 08 00 81 B8 00 00 00 00 00 3A E8 00 00 28 00 00 00 03 80

 

 

< RRC : UL Information Transfer + NAS : Security Mode Complete >

 

ulInformationTransfer-r8

    dedicatedInfoType: dedicatedInfoNAS (0)

        dedicatedInfoNAS: 470000000000075e

            Non-Access-Stratum (NAS)PDU

                0100 .... = Security header type: Integrity protected and ciphered

                            with new EPS security context (4)

                .... 0111 = Protocol discriminator: EPS mobility management messages (0x07)

                Message authentication code: 0x00000000

                Sequence number: 0

                0000 .... = Security header type: Plain NAS message, not security protected (0)

                .... 0111 = Protocol discriminator: EPS mobility management messages (0x07)

                NAS EPS Mobility Management Message Type: Security mode complete (0x5e)

 

HEX : 48 01 08 E0 00 00 00 00 00 EB C0

 

 

< RRC : Security Mode Command >

 

securityModeCommand-r8

    securityConfigSMC

        securityAlgorithmConfig

            cipheringAlgorithm: eea0 (0)

            integrityProtAlgorithm: eia0-v920 (0)

 

HEX : 30 00 00

 

 

< RRC : Security Mode Complete >

 

securityModeComplete

    rrc-TransactionIdentifier: 0

    criticalExtensions: securityModeComplete-r8 (0)

        securityModeComplete-r8

 

HEX : 28 00

 

 

< RRC : UE Capability Enquiry >

 

ueCapabilityEnquiry

    rrc-TransactionIdentifier: 0

    criticalExtensions: c1 (0)

        c1: ueCapabilityEnquiry-r8 (0)

            ueCapabilityEnquiry-r8

                ue-CapabilityRequest: 1 item

                    Item 0

                        RAT-Type: eutra (0)

 

HEX : 38 00 00

 

 

< RRC : UE Capability Information >

 

ueCapabilityInformation-r8

    ue-CapabilityRAT-ContainerList: 1 item

        Item 0

            UE-CapabilityRAT-Container

                rat-Type: eutra (0)

                ueCapabilityRAT-Container: c998...

                    UE-EUTRA-Capability

                        accessStratumRelease: rel10 (2)

                        ue-Category: 4

                        pdcp-Parameters

                            supportedROHC-Profiles

                            ....

                        phyLayerParameters

                            ....

                        rf-Parameters

                            ...

                        measParameters

                            ....

                        featureGroupIndicators: 7fcffeba

                            ...

                        interRAT-Parameters

                            ...

                        nonCriticalExtension

                            phyLayerParameters-v920

                            interRAT-ParametersGERAN-v920

                                e-RedirectionGERAN-r9: supported (0)

                            interRAT-ParametersUTRA-v920

                                e-RedirectionUTRA-r9: supported (0)

                            csg-ProximityIndicationParameters-r9

                                utran-ProximityIndication-r9: supported (0)

                            neighCellSI-AcquisitionParameters-r9

                            son-Parameters-r9

                                rach-Report-r9: supported (0)

                            nonCriticalExtension

                                lateNonCriticalExtension: 8c00000000

                                    UE-EUTRA-Capability-v9a0-IEs

                                        featureGroupIndRel9Add-r9: c0000000

                                            ....

                                nonCriticalExtension

                                    featureGroupIndRel10-r10: 00040000

                                        ....

                                    ue-BasedNetwPerfMeasParameters-r10

                                        loggedMeasurementsIdle-r10: supported (0)

                                    nonCriticalExtension

 

HEX : 38 01 02 6C 99 80 01 0C 60 18 38 FF F0 71 FF DF F3 FF AE A2 06 00 90 E1 94 E9 52 44 8E 0B

      18 00 00 00 00 15 00 04 00 00 80 00

 

 

< RRC : RRC Connection Reconfiguration + NAS : Attach Accept + NAS : Activate Default EPS Bearer Context Req >

 

rrcConnectionReconfiguration-r8

    dedicatedInfoNASList: 1 item

        Item 0

            DedicatedInfoNAS: 27000000000...

                Non-Access-Stratum (NAS)PDU

                    0010 .... = Security header type: Integrity protected and ciphered (2)

                    .... 0111 = Protocol discriminator: EPS mobility management messages (0x07)

                    Message authentication code: 0x00000000

                    Sequence number: 1

                    0000 .... = Security header type: Plain NAS message, not security protected (0)

                    .... 0111 = Protocol discriminator: EPS mobility management messages (0x07)

                    NAS EPS Mobility Management Message Type: Attach accept (0x42)

                    0000 .... = Spare half octet: 0

                    .... 0... = Spare bit(s): 0x00

                    .... .001 = Attach result: EPS only (1)

                    GPRS Timer - T3412 value

                        ....

                    Tracking area identity list - TAI list

                        Length: 6

                        0... .... = Spare bit(s): 0x00

                        .00. .... = Type of list: list of TACs belonging to one PLMN,

                                                  with non-consecutive TAC values (0)

                        ...0 0000 = Number of elements: 0 [+1 = 1 element(s)]

                        Mobile Country Code (MCC): Unknown (1)

                        Mobile Network Code (MNC): Unknown (010)

                        Tracking area code(TAC): 0x0001

                    ESM message container

                        Length: 107

                        ESM message container contents: ...

                            0101 .... = EPS bearer identity: EPS bearer identity value 5 (5)

                            .... 0010 = Protocol discriminator: EPS session management messages (0x02)

                            Procedure transaction identity: 1

                            NAS EPS session management messages:

                                         Activate default EPS bearer context request (0xc1)

                            EPS quality of service

                                Length: 1

                                Quality of Service Class Identifier (QCI): QCI 5 (5)

                            Access Point Name

                                Length: 13

                                APN: testnet.sos

                            PDN address

                                Length: 13

                                0000 0... = Spare bit(s): 0x00

                                PDN type: IPv4v6 (3)

                                PDN IPv6 if id: 0000000000000001

                                PDN IPv4: 192.168.1.1 (192.168.1.1)

                            Protocol Configuration Options

                                Element ID: 0x27

                                Length: 72

                                [Link direction: Network to MS (1)]

                                1... .... = Extension: True

                                Configuration Protocol: PPP for use with IP PDP type

                                                        or IP PDN type (0)

                                Protocol or Container ID: Internet Protocol Control Protocol (0x8021)

                                    Length: 0x10 (16)

                                    PPP IP Control Protocol

                                        Code: Configuration Nak (3)

                                        Identifier: 0 (0x00)

                                        Length: 16

                                        Options: (12 bytes), Primary DNS Server IP Address,

                                                             Secondary DNS Server IP Address

                                            Primary DNS Server IP Address: 192.168.1.2

                                                Type: Primary DNS Server IP Address (129)

                                                Length: 6

                                                Primary DNS Address: 192.168.1.2 (192.168.1.2)

                                            Secondary DNS Server IP Address: 192.168.1.2

                                                Type: Secondary DNS Server IP Address (131)

                                                Length: 6

                                                Secondary DNS Address: 192.168.1.2 (192.168.1.2)

                                Protocol or Container ID: DNS Server IPv4 Address (0x000d)

                                    Length: 0x04 (4)

                                    IPv4: 192.168.1.2

                                Protocol or Container ID: DNS Server IPv6 Address (0x0003)

                                    Length: 0x10 (16)

                                    IPv6: 2001:0:0:1::2

                                Protocol or Container ID: P-CSCF IPv6 Address (0x0001)

                                    Length: 0x10 (16)

                                    IPv6: 2001:0:0:1::2

                                Protocol or Container ID: P-CSCF IPv4 Address (0x000c)

                                    Length: 0x04 (4)

                                    IPv4: 192.168.1.2

                    EPS mobile identity - GUTI

                        Element ID: 0x50

                        Length: 11

                        .... 0... = odd/even indic: 0

                        .... .110 = Type of identity: GUTI (6)

                        Mobile Country Code (MCC): Unknown (1)

                        Mobile Network Code (MNC): Unknown (010)

                        MME Group ID: 32769

                        MME Code: 0

                        M-TMSI: 0x00000001

                    GPRS Timer - T3402 value

                        ...

                    GPRS Timer - T3423 value

                        ....

                    EPS network feature support

                        Element ID: 0x64

                        Length: 1

                        00.. .... = Spare bit(s): 0x00

                        ..0. .... = ESRPS: network does not support use of EXTENDED SERVICE REQUEST

                                    to request for packet services

                        ...0 0... = CS-LCS: no information about support of location services

                                    via CS domain is available (0)

                        .... .0.. = EPC-LCS: location services via EPC not supported

                        .... ..1. = EMC BS: emergency bearer services in S1 mode supported

                        .... ...1 = IMS VoPS: IMS voice over PS session in S1 mode supported

    radioResourceConfigDedicated

        srb-ToAddModList: 1 item

            ...

        drb-ToAddModList: 1 item

            ...

        mac-MainConfig: explicitValue (0)

            ...

        physicalConfigDedicated

            ...

 

HEX : 20 06 04 04 91 38 00 00 00 00 08 3A 10 0F 00 30 00 00 08 80 00 08 03 5A 90 0E 08 08 28 68 43

      0B 73 93 4B A3 9B A9 88 1B 9B 7B 98 68 18 00 00 00 00 00 00 00 0E 05 40 08 09 3A 44 04 01 08

      80 18 00 00 84 08 36 05 40 08 14 18 36 05 40 08 10 00 68 26 05 40 08 10 00 18 81 00 08 00 00

      00 00 00 08 00 00 00 00 00 00 00 10 00 08 81 00 08 00 00 00 00 00 08 00 00 00 00 00 00 00 10

      00 60 26 05 40 08 12 80 5F B0 00 08 84 00 08 00 00 00 00 08 BF 02 CF 03 20 08 1B 53 E0 FA 81

      BC 0F A8 E0 60 68 26 7E 9D 52 D2 E8 00 FB 50 68 03 00 0C A0 7F E0 80 FD 02

 

 

< RRC : RRC Connection Reconfiguration Complete + NAS : Attach Complete + NAS : Activate Default EPS Bearer Context Accept >

 

rrcConnectionReconfigurationComplete

    rrc-TransactionIdentifier: 0

    criticalExtensions: rrcConnectionReconfigurationComplete-r8 (0)

        rrcConnectionReconfigurationComplete-r8

 

HEX : 10 00

 

 

< RRC : DL Information Transfer + EMM : Information >

 

ulInformationTransfer-r8

    dedicatedInfoType: dedicatedInfoNAS (0)

        dedicatedInfoNAS: 270000000001074300035200c2

            Non-Access-Stratum (NAS)PDU

                0010 .... = Security header type: Integrity protected and ciphered (2)

                .... 0111 = Protocol discriminator: EPS mobility management messages (0x07)

                Message authentication code: 0x00000000

                Sequence number: 1

                0000 .... = Security header type: Plain NAS message, not security protected (0)

                .... 0111 = Protocol discriminator: EPS mobility management messages (0x07)

                NAS EPS Mobility Management Message Type: Attach complete (0x43)

                ESM message container

                    Length: 3

                    ESM message container contents: 5200c2

                        0101 .... = EPS bearer identity: EPS bearer identity value 5 (5)

                        .... 0010 = Protocol discriminator: EPS session management messages (0x02)

                        Procedure transaction identity: 0

                        NAS EPS session management messages:

                                 Activate default EPS bearer context accept (0xc2)

 

HEX : 48 01 A4 E0 00 00 00 00 20 E8 60 00 6A 40 18 40

 

 

< SIP : INVITE >

 

INVITE urn:service:sos SIP/2.0

P-Preferred-Identity: sip:99000482-351037-0@[2001:0:0:1::1]:5060

Contact: <sip:[2001:0:0:1::1]:5060>;+sip.instance="<urn:gsma:imei:99000482-351037-0>"

Supported: timer

Allow: INVITE,ACK,OPTIONS,CANCEL,BYE,UPDATE,INFO,REFER,NOTIFY,MESSAGE,PRACK

P-Access-Network-Info: 3GPP-E-UTRAN-FDD;utran-cell-id-3gpp=31148000010000000

Session-Expires: 300

Min-SE: 90

Content-Type: application/sdp

Route: <sip:[2001:0:0:1::2]:5060;lr>

Accept-Contact: *;+g.3gpp.icsi-ref="urn%3Aurn-7%3A3gpp-service.ims.icsi.mmtel"

From: <sip:anonymous@anonymous.invalid>;tag=2043043914

To: <urn:service:sos>

Call-ID: 227004879@2001:0:0:1::1

CSeq: 1 INVITE

Max-Forwards: 70

Via: SIP/2.0/TCP [2001:0:0:1::1]:5060;branch=z9hG4bK1207526045smg;transport=TCP

Content-Length: 579

 

v=0

o=TEST-IMS-UE 1234562 0 IN IP6 2001:0:0:1::1

s=SS VOIP

i=A VOIP Session

c=IN IP6 2001:0:0:1::1

t=0 0

m=audio 49158 RTP/AVP 104 110 102 108 105 100

b=AS:38

b=RS:0

b=RR:0

a=rtpmap:104 AMR-WB/16000

a=fmtp:104 octet-align=0;mode-set=2

a=rtpmap:110 AMR-WB/16000

a=fmtp:110 octet-align=1;mode-set=2

a=rtpmap:102 AMR/8000

a=fmtp:102 octet-align=0;mode-set=7

a=rtpmap:108 AMR/8000

a=fmtp:108 octet-align=1;mode-set=7

a=rtpmap:105 telephone-event/16000

a=fmtp:105 0-15

a=rtpmap:100 telephone-event/8000

a=fmtp:100 0-15

a=sendrecv

a=ptime:20

a=maxptime:240

 

 

< SIP : 100 Trying >

 

SIP/2.0 100 Trying

Via: SIP/2.0/TCP [2001:0:0:1::1]:5060;branch=z9hG4bK1207526045smg;transport=TCP

Max-Forwards: 70

From: <sip:anonymous@anonymous.invalid>;tag=2043043914

To: <urn:service:sos>

Call-ID: 227004879@2001:0:0:1::1

CSeq: 1 INVITE

Content-Length: 0

 

 

< SIP : 180 Ringing >

 

SIP/2.0 180 Ringing

Max-Forwards: 70

Via: SIP/2.0/TCP [2001:0:0:1::1]:5060;branch=z9hG4bK1207526045smg;transport=TCP

From: <sip:anonymous@anonymous.invalid>;tag=2043043914

To: <urn:service:sos>;tag=2147483647

Call-ID: 227004879@2001:0:0:1::1

CSeq: 1 INVITE

Record-Route: <sip:[2001:0:0:1::2]:5060;lr>

Supported: precondition

Supported: 100rel

User-Agent: Test-PSAP/aeeae6a

Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE

P-Asserted-Identity: <tel:911;phone-context=testnet.com>

Content-Length: 0

Contact: <sip:[2001:0:0:1::2]:35738;transport=tcp>

Privacy: none

 

 

< SIP : 200 OK >

 

SIP/2.0 200 OK

Max-Forwards: 70

Via: SIP/2.0/TCP [2001:0:0:1::1]:5060;branch=z9hG4bK1207526045smg;transport=TCP

From: <sip:anonymous@anonymous.invalid>;tag=2043043914

To: <urn:service:sos>;tag=2147483647

Call-ID: 227004879@2001:0:0:1::1

CSeq: 1 INVITE

Record-Route: <sip:[2001:0:0:1::2]:5060;lr>

User-Agent: Test-PSAP/aeeae6a

Content-Type: application/sdp

Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE

P-Asserted-Identity: <tel:911;phone-context=testnet.com>

Content-Length: 581

Contact: <sip:[2001:0:0:1::2]:35738;transport=tcp>

Privacy: none

 

v=0

o=test 447 271448 IN IP6 2001:0:0:1::2

s=-

i=A VOIP Session

c=IN IP6 2001:0:0:1::2

t=0 0

m=audio 60000 RTP/AVP 104 110 102 108 105 100

b=AS:38

b=RS:0

b=RR:0

a=rtpmap:104 AMR-WB/16000

a=fmtp:104 octet-align=0;mode-set=2

a=rtpmap:110 AMR-WB/16000

a=fmtp:110 octet-align=1;mode-set=2

a=rtpmap:102 AMR/8000

a=fmtp:102 octet-align=0;mode-set=7

a=rtpmap:108 AMR/8000

a=fmtp:108 octet-align=1;mode-set=7

a=rtpmap:105 telephone-event/16000

a=fmtp:105 0-15

a=rtpmap:100 telephone-event/8000

a=fmtp:100 0-15

a=sendrecv

a=ptime:20

a=maxptime:240

a=rtcp:60001

 

 

< SIP : ACK >

 

ACK sip:[2001:0:0:1::2]:35738;transport=tcp SIP/2.0

From: <sip:anonymous@anonymous.invalid>;tag=2043043914

To: <urn:service:sos>;tag=2147483647

CSeq: 1 ACK

Call-ID: 227004879@2001:0:0:1::1

Max-Forwards: 70

Route: <sip:[2001:0:0:1::2]:5060;lr>

Contact: <sip:+12244004245@[2001:0:0:1::1]:5060>;+g.3gpp.icsi-ref="urn%3Aurn-7%3A3gpp-service.ims.icsi.mmtel";video;+sip.instance="<urn:gsma:imei:99000482-351037-0>"

Via: SIP/2.0/UDP [2001:0:0:1::1]:5060;branch=z9hG4bK2277799816smg;transport=UDP

Content-Length: 0