Wireshark Trace Analysis

BSSoverIP Wireshark Trace Analysis
Nehal Sheira
GSM Network Engineering team

March, 2009
Agenda
1. BSSoverIP Main Protocols
CS Main Protocol Messages
PS Main Protocol Messages
2. Wireshark Trace Analysis
3. Wireshark Test Cases
4. Open Points
5. Annex
BSSoverIP Main Protocols
3 | B10 mCCCH | September 2008
Alcatel-Lucent 2008, d.r., XXXXX
CS Software Plane
IP Signaling Plane
BSC
IP User Plane
CS Protocol Messages
IPTCH
MUX_TRAUP
Length
IP header UDP header Common
header TRAUP#1
Payload
TRAUP#1
Length
Payload
TRAUP#N TRAUP#N
CS Protocol Messages
IPTCH
Uplink TRAUP Packet
Uplink Address :The Uplink Address identifies the associated TRAU Channel to be used by the TC
Subsystem (length 2 bytes)
Control :The Control field shall contain control and configuration information necessary for the
TRAU. (length 1 to n bytes)
Payload :containing data for Speech, Silence or Data and control information for the codec
speech processing (length 0 to n bytes)
Downlink TRAUP Packet

Generation-ID &Downlink Address: Generation-ID is used to distinguish between two successive
calls, Downlink Address identifies the associated CCU Channel to be used by the BTS. (length 2
bytes)
Control :contain control and report Information necessary for the CCU. (length 1 to n bytes)
Payload : containing data for Speech, Silence or Data and control information for channel
encoding (length 0 to n bytes)
PS Software Plane
IP Signaling Plane
IP User Plane
Back
PS protocols Messages
IPGCH initialization
Each TRE is associated with TCP connection and the connection is closed when
theres no activity is detected on the whole TRE.
Lab Test: The TCP Connection is always opened due :
EN_FAST_INITIAL_GPRS_ACCESS :
For an IP BTS, the Fast Initial PS Access feature consists in the permanent
establishment of an IPGCH TCP connection for the first TRX having some
allocated RTSs in a cell
PS protocols
IPGCH Messages
PS protocols
PMU-PTU intrface
IPGCHU Data User Plane
MS
BTS
MFS
LLC
LLC
RRM
PMU-PTU
PMU-PTU
MAC
IPGCHU
UDP
IPGCHU
UDP
RF
IP
ethernet
IP
ethernet
RLC
RLC
MAC
RF
SGSN
IPGCHC Control Plane

BTS
MFS
PMU-PTU
RRM
PMU-PTU
IPGCHC
TCP
IPGCHC
TCP
IP
ethernet
IP
ethernet
PS protocols
PMU-PTU Messages
Class 1:
PTU-INIT:To provide PTU and telecom layer configuration parameters and allow
PTU to handle other messages.
Class 2:
TRX-CREATE : To create a TRX context (configuration parameters)
TRX-SYS: To provide logical channel configuration and packet system information
PMU-PTU Message
PS protocols
PMU-PTU Messages
Class 3:
TBF-ACTIVATE :To start the TBF and the allocation of radio resource
TBF-DL/UL-UNITDATA :To send DL/UL LLC PDU
TBF-ESTABLISH :To establish/create a TBF context
TBF-RELEASE :To release the TBF context
TBF-START :To indicate the reception of the first RLC data block
TBF-UL-LAST-UNITDATA :To report the last UL LLC PDU number
Class 4:
PDCH -DL- CONTROL :To send signaling to the MS
PDCH-RELEASE :To release a PDCH
Wireshark Trace Analysis
Wireshark
Wireshark tool:
http://aww.mrc.alcatel.ro/Icg/Platform/Ethereal/Ethereal_index.htm
New plugins to add for the new protocols of the B11
In each plug-ins delivery noteits mentioned the way of installation and configuration
For example the parameters needed from your network to configure the MUXTRAUP
protocol inside wireshark:
Plug in version
BTS IP /Primary TC address/secondary TC address
MUXTRAUP UDP port list - can be filled with the port number if known or with a range of
ports
Note :range of ports in how to link according to the SFD
Wireshark Test Cases
Before Wireshark
We have to know the following:
Main Lab Test Configuration: all IP addresses/UDP/TCP port list for all protocols
For Simplicity : have a name resolution for the IP addresses with the
corresponding NE in the Wireshark directly can be done in the Hosts file
(C:\WINDOWS\SYSTEM32\DRIVERS\ETC)
Main tests to be carried out.
Main Protocols to be monitored and filtered according to each test.
Wireshark connection in BSSoverIP
Wireshark Connection
Wireshark PC should be connected to the same router thats connected to the
relevant Network elements (BTS/BSC/TC/MFC) in order to monitor the required
interfaces.
Port mirroring option

Is used on the router in order to send a copy of all packets seen on all the ports to
a network monitoring connection on another port which is represented by the
Wireshark PC.
IP Lab Test Connections

Wireshark PC
IP Lab Test Connections
IP Addressing
Telecom part (IP Address, UDP/TCP ports)
1. BTS
1 IP Address :100.40.64.65 and Different TCP/UDP ports depending on protocols
CS
User Plane: IPTCH : BTSTC (100.40.64.65,UDP Port:51200)
Control Plane :RSL : BTS BSC (100.40.64.65,UDP Port:50202)
PS
User Plane:IPGCHC :BTSMFS (100.40.64.65,TCP Port:53818)
Control Plane :IPGCHU : BTSMFS (100.40.64.65,TCP Port:53306)

OMC Snapshot
IP Addressing
2. BSC
Different IP Address and Different TCP/UDP ports depending on protocols
TCSL : BSCTC (100.40.64.1,TCP Port:59392)
Asig :BSCTC (100.40.64.1,TCP Port:61440)
RSL : BSC BTS (100.40.64.2,UDP Port:50178)
IPGSL :BSCMFS (100.40.64.2,TCP Port:50176)
OMC Snapshot
IP Addressing
3. TC
IPTCH: TCBTS(100.40.64.10,UDP Port:51201)
TCSL : TC BSC (100.40.64.11,TCP Port:59394)
ASIG :TCBSC (100.40.64.13,TCP Port:61440)
IP Addressing
4. MFS
IPGCHU: GPUBTS(100.100.1.1,UDP Port:53249)
IPGCHC:GPUBTS(100.100.1.1,TCP Port:53269)
IPGSL : GPU BSC (100.100.0.1,TCP Port:52486)

OMC Snapshot
WiresharkCS Protocols Setup

Edit preferences
Main CS Tests
Examples
Call Setup
CS Call over IP
Protocols to be filtered through Wireshark (IPTCH,ASIG)

Call: MUXTRAUP
Call Control : rsl-al or bssap
How to filter on a Mobile?
gsm-a.tmsi
CS : Mobile Originating Call
WiresharkPS Protocols Setup
WiresharkPS Protocols Setup
Main PS tests
Examples
TCP/UDP Parameters
GPRS Attach
GPRS PDP Context Activation
Ping Tests
FTP Tests
To monitor the data transfer filter on IPGCHU/ftp-data/icmp

To monitor the control And PMU-PTU messages filter on IPGCHC
To monitor the resource management between MFS and BSC filter on BSCGB
Micros oft Excel

Works heet
PS
FTP DL Transfer( Segmentation/reassembly and in-sequence delivery )
MFS
PCC
BTS
IPGCHC
IPGCHU
TBF-DL-UNITDATA (a)
IPGCHU
IPGCHC
RLC/MAC
IPGCGU segment a.0 (SQN=0, FSF=1)

IPGCHU segment a.1 (SQN=1)
IPGCHU segment a.2 (SQN=2, LSF=1)

DL Acknowledgement (ABW: 0, 2)
3
TBF-DL-UNITDATA (b)
IPGCHU segment b.0 (SQN=3, FSF=1)
IPGCHU segment b.1 (SQN=4)

IPGCHU segment b.2 (SQN=5)
IPGCHU segment b.3 (SQN=6, LSF=1)
DL Acknowledgement (ABW: 0, 2, 3, 4, 5, 6)
DL_Acknowledgement (ABW: empty)
6
TBF-DL-UNITDATA (a)
TBF-DL-UNITDATA (b)
UL LLC PDU transmission handling
PS
FTP UL PMU-PTU Messages
normalEndHandling to indicate the TBF supports extended uplink mode.
Open points
Wireshark Open Points

1. How to filter on a call? we can filter TMSI however not all messages consists of
TMSI
2. How can the Wireshark monitor more than BTS at the same time? To have an
option of entering an array of IP addresses of different BTSs !!
3. How can we perform statistical analysis on the BSSoverIP protocols using
Wireshark or this will require a macro on top of it?
4. How to report any issues/bugs of Wireshark?
Future Work:
Obtaining failure cases for analysis.
ANNEX
PS protocols
PMU-PTU Messages
PS protocols
PMU-PTU Messages
OMCBTS IP Address
Back
OMC BSC TC IP Address
Back
OMC MFS show equipment
Back
OMC Cell Edit Muxtraup Size
Computing the MUXTRAUP size
Back
PS
TCP MSS (Maximum Segment Size) for IPGCHC
MFS
PCC
BTS
IPGCHC
1
TCP
TCP
IPGCHC
RLC/MAC
Open TCP connection
SYN segment (UL MSS)

SYN segment (DL MSS) + ACK
ACK
Notification of TCP connection opening
PS
WiresharkTCP UL MSS Size
PS
WiresharkTCP DL MSS Size
PS
Computing the maximum IPGCHU segment size (MISS)
MFS
PCC
BTS
IPGCHC
1
TCP
TCP
RLC/MAC
Open TCP connection
SYN segment (UL MSS)

SYN segment (DL MSS) + ACK
ACK
IPGCHC
IPGCH Init req

IPGCH Init cnf (MISS)
From this step, both DL LLC PDUs (sent by the MFS) and UL LLC PDUs (sent by the BTS)
are segmented in groups of up to MISS bytes
DATA TRAFFIC ON IPGCH INTERFACE (IPGCHU)
Wireshark Determining the MISS for the IPGCHU segment size
Wireshark Verifying the IPGCHU Segment Size
Back
BSCGP Messages
First TCP connection establishment between MFS and BSC
www.alcatel-lucent.com
www.alcatel-lucent.com

Wireshark Trace Analysis

Transféré par

Informations du document

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

Wireshark Trace Analysis

Transféré par

Droits d'auteur :

Formats disponibles

BSSoverIP Wireshark Trace Analysis

GSM Network Engineering team

BSSoverIP Main Protocols

3 | B10 mCCCH | September 2008

Alcatel-Lucent 2008, d.r., XXXXX

Alcatel-Lucent 2008, d.r., XXXXX

Alcatel-Lucent 2008, d.r., XXXXX

Downlink TRAUP Packet

Alcatel-Lucent 2008, d.r., XXXXX

Alcatel-Lucent 2008, d.r., XXXXX

Alcatel-Lucent 2008, d.r., XXXXX

IPGCHC Control Plane

Alcatel-Lucent 2008, d.r., XXXXX

Alcatel-Lucent 2008, d.r., XXXXX

Alcatel-Lucent 2008, d.r., XXXXX