Inter MSC Handover Trouble Shooting Guide

1. Revision Information.........................................................2

2. Protocol Signalling Diagram..........................................2

3. Commands......................................................................4

4. Exchange Properties......................................................9

5. Serving BSC sends Handover Required to Anchor MSC, which sends Prepare Handover to Non-Anchor MSC (containing Handover Request message).........10

6. Prepare Handover received by Non-Anchor MSC, Handover Request sent to Target BSC.......................12

7. Non-Anchor MSC receives Handover Request Acknowledge from Target BSC and sends Prepare Handover Acknowledge to Anchor MSC (containing Handover Request Acknowledge and Handover Command messages)...................................................16

8. Prepare Handover Acknowledge in received in Anchor MSC with Handover Number........................................18

9. Set up Speech connection between Anchor and Target MSC via ISUP using Handover Number..........20

10. Anchor MSC sends Handover Command to Serving BSC and MS...................................................................22

11. Target BSC sends Handover Detect and Handover Complete to Non-Anchor MSC.....................................24

12. Anchor MSC receives Handover Detect, ANM and Handover Complete messages....................................26

13. Handover Complete......................................................28

14. Test System Trace Commands....................................29

15. Protocol Analyser Trace...............................................30

1

1. Revision Information

Revision A : First Release. Based on the EED R10 N300/21240 N600/2133 LA preconfigured network.

2. Protocol Signalling Diagram

2

3

3. Commands

Anchor

<MGOCP:CELL=OC6AG00;MT OUTER CELL DATACELL AREAID MSC NCSOC6AG00 262-02-60-1 MSC4 0END

<MGNMP:MSC=MSC4;MT NEIGHBOURING MSC DATAMSC MSCADDR R MSCCAPAMSC4 4-49172603333 2MHOC4 MAPV-3 MSLOT-4 14DOT4-1END

MAPV-3 = MAP version 3 used between VLRs.MSLOT = Multi-slot configuration : Enabled with maximum four full rate traffic channels.14DOT4 = 14.4 kbps channel coding supported by the neighbouring MSC.

<DBTSP:TAB=AXEPARS,SETNAME=OMSRF,NAME=MGS;DATABASE TABLE

BLOCK TAB TABLE WRAPPEDPARA AXEPARS YES

NAME SETNAME PARID VALUE UNIT CLASS DISTRIBMGS OMSRF 1399 1 FEATURE IMMED STATUS FCVSET FCVALUE DCINFO FCODE UPDATED FALSE 0 UNDEF 0

END

<DBTSP:TAB=AXEPARS,SETNAME=GSMMSCF,NAME=COMBINODE;DATABASE TABLE

BLOCK TAB TABLE WRAPPEDPARA AXEPARS YES

NAME SETNAME PARID VALUE UNIT CLASS DISTRIBCOMBINODE GSMMSCF 1401 1 FEATURE IMMED STATUS FCVSET FCVALUE DCINFO FCODE UPDATED FALSE 0 UNDEF 0

END

4

<EXROP:R=1MHOC;ROUTE DATAR ROUTE PARAMETERS1MHOC DETY=MHOC FNC=1 MIS3=259 BO=4 RO=4 END

Note : Route for Outgoing Handover Call to Non-Anchor MSC. This route is used by MHOCOIP when setting up an outgoing handover call to a non-anchor MSC. All outgoing inter-MSC handover calls from anchor MSC/VLR Server use the same data. Only one route definition is needed for inter-MSC handovers. If the route is not defined, inter-MSC handover cannot be performed. No compatibility check is done for a software route (that is route parameter CCH = NO).

Note : B-number, that is the handover number, is always sent to the B-number analysis in international E.164 format.

<PNBSP:BO=4;PRE-ANALYSIS OF B-NUMBER INFORMATIONOPERATING AREABO NAPI BNT RESULT4END

<ANBSP:B=4-491726; ! Handover Number received from Non-Anchor MSC !B-NUMBER ANALYSIS DATAOPERATING AREAB-NUMBER MISCELL F/N ROUTE CHARGE L A4-44-49 4-491 4-4917 4-49172 4-491726 4-4917260 F=14 M=2END

5

<ANBSP:B=14-1726;B-NUMBER ANALYSIS DATAOPERATING AREAB-NUMBER MISCELL F/N ROUTE CHARGE L A14-114-17 14-172 14-1726 14-17260 14-172608 14-1726088 RC=600 L=10 M=0-49 D=5-0 TRD=602 BNT=414-1726089 RC=600 L=10 M=0-49 D=5-0 TRD=602 BNT=4END

<ANRSP:RC=600;ROUTING CASE DATAOPERATING AREARC CCH BR ROUTING SP DATA600 YES P01=1 R=U4600O MM1 COT EST SI ESS ESR 0 0 0 0 BNT RN SPR OLI OLI2 00 0 ISC FCP D 0 P01=2 R=BIA600O MM1 COT EST SI ESS ESR 0 0 1 0 BNT RN SPR OLI OLI2 00 0 ISC FCP D 0 P01=3 R=600NO MM1 COT EST SI ESS ESR 0 0 1 1 BNT RN SPR OLI OLI2 00 0 ISC FCP D 0END

Note : These are ISUP and BICC routes towards the Non-Anchor MSC.

6

Non-Anchor

<MGCEP:LAI=262-02-60;MT CELL DATACELL CGI BSC CO RO NCS EAC6AG00 262-02-60-1 BSC6A 4 1 0 1C6AH00 262-02-60-44 BSC1131 6 3 0 3C6AH10 262-02-60-45 BSC1131 6 3 0 2C6AH20 262-02-60-46 BSC1131 6 3 0 2END

<MGCEP:CELL=C6AG00;MT CELL DATACELL CGI BSC CO RO NCS EAC6AG00 262-02-60-1 BSC6A 4 1 0 1END

<MGOCP:CELL=OC1AG00;MT OUTER CELL DATACELL AREAID MSC NCSOC1AG00 262-02-1-1 MSC1 0END

<MGBSP:BSC=BSC6A;MT BASE STATION CONTROLLER DATABSC R1 R2 MGGBSC6A MA121O MA121I MA6121O MA6121I MGWG6A HR3121O HR3121I MGWG3A

BSCMGG PBSD GBSC6Q FORWD

BSCDATA MSLOT-4 14DOT4-1 HRATE-1 NIRR-1 MSCODER-1 PHASE2-1END

<EXROP:R=MA121O&MA121I;ROUTE DATAR ROUTE PARAMETERSMA121O DETY=MALT TTRANS=3 FNC=3 R=MA121I RNO=1 SI=SCCP SP=2-121 MA121I DETY=MALT PRI=10 FNC=3 R=MA121O RNO=1 SI=SCCP SP=2-121 END

7

<EXROP:R=2MHOC4;ROUTE DATAR ROUTE PARAMETERS2MHOC4 DETY=MHOC FNC=2 MIS1=1 RO=1 END

Note : Route for Incoming Mobile-Originating Traffic. This route data is used for all incoming mobile-originating calls from non-anchor MSC after inter-MSC handover during a handover call. This is possible, for example, when the existing call is put on hold and a new call is set up. One route is needed for each non-anchor MSC from where mobile-originating calls are to be allowed after inter-MSC handover during a handover call. If a route is not connected to an MSC/VLR Server, incoming mobile-originating calls cannot be performed during a handover call after inter-MSC handover.

Also Handover Numbers :

MGRSP:MSRNS=ALL; MGRNP:MSRN=ALL; MGRPP:MSRNS=ALL;

8

4. Exchange Properties

Inter-MSC Handover in Non-Anchor MSC

The following exchange properties are valid and can be changed only if the feature "GSM access" is enabled.

HNDSDCCHINTI : Incoming inter-MSC handover on signalling channels in non-anchor MSC.It determines if incoming inter-MSC handover is allowed on signalling channels in non-anchor MSC. The parameter is only valid if the inter-MSC handover dialogue has been established with MAP version 2 by the anchor MSC.0 = Incoming inter-MSC handover is not allowed on signalling channels1 = Incoming inter-MSC handover is allowed on signalling channelsDefault value = 1. The parameter is owned by the block MHIC.

HNDRELCHSUBNON : Channel release in subsequent handover in non-anchor MSC.The parameter defines the release of the original channel after expiration of the timer HNDTCMDSUBNON for handover time supervision in subsequent handover in non-anchor MSC.0 = Terminate the handover and continue the call on the original channel1 = Release the original channelDefault value = 1. The parameter is owned by the block MHIC.

HNDTCMDBASNON : Time supervision in basic handover in non-anchor MSC.The parameter specifies the time between the PSTN message 'Address complete' and BSSAP message 'Handover complete' in basic handover in non-anchor MSC. After expiration of this timer the handover is terminated and the reserved channel is released. The value is specified in seconds with one s intervals.Default value = 20. The parameter is owned by the block MHIC.

HNDTCMDSUBNON : Time supervision in subsequent handover in non-anchor MSC.The parameter specifies the time between 'Handover command' and 'End signal' messages in subsequent handover in non-anchor MSC. After expiration of this timer the handover is terminated and the reserved channel is released. The value is specified in seconds with one s intervals.Default value = 20. The parameter is owned by the block MHIC.

9

5. Serving BSC sends Handover Required to Anchor MSC, which sends Prepare Handover to Non- Anchor MSC (containing Handover Request message)

Note that the BSC receives measurement reports from the MS concerning the neighbouring cell strengths.According to a selection algorithm in the BSC, it may decide to initiate an handover to a better cell. This decision results in a Handover Required message being sent to the connected MSC also known as the Anchor MSC.

10

11

6. Prepare Handover received by Non-Anchor MSC, Handover Request sent to Target BSC

12

13

14

7. Non-Anchor MSC receives Handover Request Acknowledge from Target BSC and sends Prepare Handover Acknowledge to Anchor MSC (containing Handover Request Acknowledge and Handover Command messages)

15

16

8. Prepare Handover Acknowledge in received in Anchor MSC with Handover Number

17

18

9. Set up Speech connection between Anchor and Target MSC via ISUP using Handover Number

19

20

10. Anchor MSC sends Handover Command to Serving BSC and MS

21

22

Note that now the MS sends bursts on the new TCH towards the BTS of the Target BSC. The BSC detects this and sends Handover Detect to the Non-Anchor MSC.

11. Target BSC sends Handover Detect and Handover Complete to Non-Anchor MSC

23

24

12. Anchor MSC receives Handover Detect, ANM and Handover Complete messages

25

26

13. Handover Complete

The Handover is now complete. The MS is now in the Location Area of the Non-Anchor MSC.

The Anchor MSC sends a BSSMAP message Clear Command with Cause Code “Handover Successful” to the BSC and the radio resources in the Source BSC and Anchor MSC are cleared down.

When the call is disconnected the MS will do a Location Update towards the Non-Anchor MSC.

27

14. Test System Trace Commands

TEST SYSTEM;

ON IN MHO;ON OU MHO;OFF IN MHO CLSCAN0 CLSCAN1 CLTIME0 CLTIME1;OFF OU MHO CLSCAN0 CLSCAN1; ON IN MHOAAP3;ON OU MHOAAP3;

ON IN MHOC;ON OU MHOC;OFF IN MHOC CLSCAN0 CLTIME0;OFF OU MHOC CLSCAN0;

ON IN MHOCASG;ON OU MHOCASG;OFF IN MHOCASG CLSCAN0 CLTIME0;OFF OU MHOCASG CLSCAN0; ON IN MHOCOIP;ON OU MHOCOIP;

ON IN MHOCP;ON OU MHOCP;OFF IN MHOCP CLSCAN0 CLSCAN1 CLSCAN2 CLTIME0;OFF OU MHOCP CLSCAN0 CLSCAN1 CLSCAN2;

ON IN MHOMH;ON OU MHOMH;

ON IN MHONAP3;ON OU MHONAP3;OFF IN MHONAP3 CLSCAN0 CLSCAN1 CLTIME0;OFF OU MHONAP3 CLSCAN0 CLSCAN1;

ON IN MRRM;ON OU MRRM;OFF IN MRRM RLOADCNTR CLSCAN0 CLSCAN1 CLSCAN2 CLSCAN3 CLSCAN4 CLSCAN5 CLSCAN6 CLSCAN7 CLSCAN8 CLTIME0; OFF OU MRRM RLOADCNT CLSCAN0 CLSCAN1 CLSCAN2 CLSCAN3 CLSCAN4 CLSCAN5 CLSCAN6 CLSCAN7 CLSCAN8; ON IN MRRMHO;ON OU MRRMHO;OFF IN MRRMHO CLSCAN0 CLSCAN1 CLTIME0; OFF OU MRRMHO CLSCAN0 CLSCAN1; TMSIZE=32000;INIT;

28

15. Protocol Analyser Trace

**************************************************************************TIME : Wed Jan 18 14:47:07 2006------------------------------- FULL DATA STREAM (29 octets printed 20 per line) : 83 2C 41 19 B0 06 FF 00 5E 00 01 11 00 0F 11 04 01 0C 1B 1A 08 00 62 F2 20 00 3C 00 01 ---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 300 (H'12C) Anchor MSCOrigination Point Code 101 (H'65) Serving BSCSignalling Link Selection 11Remaining Message Length 24 octets---SCCP Level------------------------------------------------------------- SCCP Data Stream (total 24 octets , 20 printed per line) : 06 FF 00 5E 00 01 11 00 0F 11 04 01 0C 1B 1A 08 00 62 F2 20 00 3C 00 01 SCCP Message: Data Form 1 [H'06] Destination Local Reference: H'5E00FF Segmentation/Reassembling: H'0 Variable Pointer: H'1 Data: ------------------------------------------- Data Length: 17 octets

---BSSAP Level---BSSMAP--------------------- BSSAP Length: 17 octetsBSSMAP Message: Handover Required [H'11])BSSMAP Length: 15 octetsCause Code:---------- Cause Code: Better Cell [H'0C]Response Request---------------- Handover Required Reject Message required by BSSCell Identifier List:-------------------- CellID Discr.: Whole CGI used to identify cells [H'00] Cell ID: PLMN-ID: 262-02 LAC: 60 CI: 01--------------------------------------------------------------------------BSSMAP DataStream: 00 0F 11 04 01 0C 1B 1A 08 00 62 F2 20 00 3C 00 01

29

**************************************************************************TIME : Wed Jan 18 14:47:07 2006------------------------------- FULL DATA STREAM (190 octets printed 20 per line) : 83 BD 82 25 F0 09 81 AB 02 0D 0B 12 08 00 11 04 94 71 42 20 22 02 9B 62 81 98 48 04 63 00 01 FF 6B 1E 28 1C 06 07 00 11 86 05 01 01 01 A0 11 60 0F 80 02 07 80 A1 09 06 07 04 00 00 01 00 0B 03 6C 80 A1 6C 02 01 7F 02 01 44 A3 80 80 07 62 F2 20 00 3C 00 01 A2 80 0A 01 01 04 3B 00 39 10 0B 03 01 08 01 0A 09 07 12 34 56 78 90 12 34 56 12 03 59 18 A3 05 08 00 62 F2 20 00 01 00 01 06 01 6C 05 08 00 62 F2 20 00 3C 00 01 04 01 0C 13 05 8F 52 BF 00 FE 40 01 00 00 84 08 62 02 12 30 00 00 50 F0 AA 80 80 01 00 81 02 11 00 00 00 00 00 00 00 0B 52 08 00 11 04 94 71 62 30 33 03 ---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 701 (H'2BD) Non-Anchor MSCOrigination Point Code 150 (H'96) Anchor MSCSignalling Link Selection 15Remaining Message Length 185 octets

30

---SCCP Level------------------------------------------------------------- SCCP Data Stream (total 185 octets , 20 printed per line) : 09 81 AB 02 0D 0B 12 08 00 11 04 94 71 42 20 22 02 9B 62 81 98 48 04 63 00 01 FF 6B 1E 28 1C 06 07 00 11 86 05 01 01 01 A0 11 60 0F 80 02 07 80 A1 09 06 07 04 00 00 01 00 0B 03 6C 80 A1 6C 02 01 7F 02 01 44 A3 80 80 07 62 F2 20 00 3C 00 01 A2 80 0A 01 01 04 3B 00 39 10 0B 03 01 08 01 0A 09 07 12 34 56 78 90 12 34 56 12 03 59 18 A3 05 08 00 62 F2 20 00 01 00 01 06 01 6C 05 08 00 62 F2 20 00 3C 00 01 04 01 0C 13 05 8F 52 BF 00 FE 40 01 00 00 84 08 62 02 12 30 00 00 50 F0 AA 80 80 01 00 81 02 11 00 00 00 00 00 00 00 0B 52 08 00 11 04 94 71 62 30 33 03 SCCP Message: Unit Data [H'09] Protocol Class: Class 1 Message Handling: Return Message on Error Called Party Address Offset: H'AB Calling Party Address Offset: H'2 Data Portion Pointer: H'D Called Party Address: --------------------- Address Length: H'B Sign. Point Code Indicator: not Included Subsystem Number Indicator: Included Global Title Indicator: Global Title (trans, plan, encode, noa) Routing Indicator: Route by Point Code and Subsystem Subsystem Number: MAP-MSC [H'8] Translation Type: H'0 Encoding Scheme: BCD, odd number of Digits Numbering Plan: ISDN/Telephony (E.164/E.163) Nature of Address: International Number Odd number of Signals: 0 Address Information: 491726033330 Non-Anchor MSC Calling Party Address: --------------------- Address Length: H'B Sign. Point Code Indicator: not Included Subsystem Number Indicator: Included Global Title Indicator: Global Title (trans, plan, encode, noa) Routing Indicator: Route by Global Title Subsystem Number: MAP-MSC [H'8] Translation Type: H'0 Encoding Scheme: BCD, odd number of Digits Numbering Plan: ISDN/Telephony (E.164/E.163) Nature of Address: International Number Odd number of Signals: 0 Address Information: 491724022220 Anchor MSC Data: ------------------------------------------- Data Length: 155 octets

31

---TCAP Level------------------------------ TCAP Message: Begin Message [H'62]TCAP Message Length: 152 octet(s)Originating Tx ID:------------------------ Tx ID: 630001FFDialog Portion:------------------------ Length 30 octet(s)External Tag:------------------------ Length: 28 octet(s)Object Identifier Tag:------------------------ Length: 7 octet(s) Reference: CCITT Q Ref Document: x305 Dialogue-AS-ID: -------------- Name (Value) 1 Version: (MAP) Version 1ASN1 Type Tag:------------------------ Length: 17 octet(s)Dialog Request Tag (PDU Selection):----------------------------------- Length: 15 octet(s)Protocol Version Tag:------------------------ Length: 2 octet(s) Protocol Version: 0780Application Context Name Tag:----------------------------- Length: 9 octet(s)Object Identifier Tag:------------------------ Length: 7 octet(s) Application Context: ------------------- Application Name (value) 11 Version/Revision 3 Complete Content 04 00 00 01 00 0B 03Component Portion:------------------------ Length Indefinite Form Invoke Component: ========================================================================== Component Length 108 octet(s) Invoke ID: ========================================================================== Invoke ID Length 1 octet(s) Invoke ID 127Operation Code: -------------------------------------------------------------------------- Operation Code Length 1 octet(s) Operation Code Prepare Handover [68]

32

================= Prepare Handover: ================= Sequence Length Indefinite Form Target Cell ID: Length 7 octet(s) Cell ID: 262-02-60-01 an-APDU: Sequence Length Indefinite Form Access Network Protocol ID: ts3G-48006 Signal Info: Length 59 octet(s)---BSSAP Level---BSSMAP--------------------- BSSAP Length: 59 octetsBSSMAP Message: Handover Request [H'10])BSSMAP Length: 57 octetsChannel Type:------------ Sp/D Indicator: Speech Ch. Rate & Type: Full Rate TCH Bm [H'8] Speech Coding: Speech Full Rate Version 1Encryption Information:---------------------- Perm. Algorithm: No Encyption Perm. Algorithm: GSM A5/1 Perm. Algorithm: GSM A5/2 Key1: 12 Key2: 34 Key3: 56 Key4: 78 Key5: 90 Key6: 12 Key7: 34 Key8: 56Mobile Station Classmark (2)---------------------------- Revision Level: Used by MSs supporting R99 Early Classmark: Supported A5/1 Encryption: Available RF Power Cap.: Class 2 PS Capability: Not Supported SS Screening: Phase2 Error and Ellipsis SM Capability: Present VBS Notification: no VBS cap. or no notify wanted VGCS Notific.: no VGCS cap. or no notify wanted Frequency Cap.: G1 Extension not supported Classmark3: Available LCS VA Cap: Supported LCS VA Cap: prefers default alphabet SoLSA: not Supported CM Serv. Prompt: not Supported A5/3 Encryption: Available A5/2 Encryption: AvailableCell Identifier:--------------- CellID Discr.: Whole CGI used to identify cells [H'00] Cell ID: PLMN-ID: 262-02 LAC: 01 CI: 01

33

Priority-------- PCI Indicator: May Preempt Existing Connection PVI Indicator: Shall not be Preempted by other Request QA Indicator: Queueing not Allowed Priority: 11Cell Identifier:--------------- CellID Discr.: Whole CGI used to identify cells [H'00] Cell ID: PLMN-ID: 262-02 LAC: 60 CI: 01Cause Code:---------- Cause Code: Better Cell [H'0C]Mobile Station Classmark (3)---------------------------- Classmark Information Type 3 length : 5 Octets --- Octet 03: 8F --- Octet 04: 52 --- Octet 05: BF --- Octet 06: 00 --- Octet 07: FE Band 1: P-GSM: not Supported Band 2: E-GSM or R-GSM: not Supported Band 3: DCS 1800: not Supported A5/4 Encryption: Available A5/5 Encryption: Available A5/6 Encryption: Available A5/7 Encryption: Available R-Support: NOT included Multi-Slot Capability: included Multi-Slot Class: H'9 UCS2 support: NOT included Ext. Measurement Capability: included MS Measurement Capability: NOT included MS Pos. Method Capability: included MS Pos. Method: H'1F ECSD Multislot Capability: NOT included ECSD Struct: Modul. Cap.: NOT included GSM 400 Bands: NOT Supported GSM 850 Assoc. Radio Cap.: NOT Supported PCS 1900 Assoc. Radio Cap.: NOT Supported UMTS FDD R-Acc.-Techn. Cap.: NOT Supported UMTS 3.84 Mcps TDD Cap.: NOT Supported CDMA 2000 R-Acc.-Techn. Cap.:NOT set DTM GPRS Multi Slot Cap.: included DTM GPRS Multi Slot Class: H'3 Mac Mode Support Bit: set DTM EGPRS Multi Slot Cap.: Supported DTM EGPRS Multi Slot Class: H'3Speech Coder Version:-------------------- Speech Version ID: Speech Full Rate Version 1

--------------------------------------------------------------------------BSSMAP DataStream: 00 39 10 0B 03 01 08 01 0A 09 07 12 34 56 78 90 12 34 56 12 03 59 18 A3 05 08 00 62 F2 20 00 01 00 01 06 01 6C 05 08 00 62 F2 20 00 3C 00 01 04 01 0C 13 05 8F 52 BF 00 FE 40 01

34

IMSI: Length 8 octet(s) IMSI: 262021030000050 Allowed UMTS Algorithms: Sequence Length Indefinite Form Integrity Protection Algorithm: 00 Encryption Algorithm: 11 00 --------------------------------------------------------------------------TCAP Data Stream: 62 81 98 48 04 63 00 01 FF 6B 1E 28 1C 06 07 00 11 86 05 01 01 01 A0 11 60 0F 80 02 07 80 A1 09 06 07 04 00 00 01 00 0B 03 6C 80 A1 6C 02 01 7F 02 01 44 A3 80 80 07 62 F2 20 00 3C 00 01 A2 80 0A 01 01 04 3B 00 39 10 0B 03 01 08 01 0A 09 07 12 34 56 78 90 12 34 56 12 03 59 18 A3 05 08 00 62 F2 20 00 01 00 01 06 01 6C 05 08 00 62 F2 20 00 3C 00 01 04 01 0C 13 05 8F 52 BF 00 FE 40 01 00 00 84 08 62 02 12 30 00 00 50 F0 AA 80 80 01 00 81 02 11 00 00 00 00 00 00 00

35

**************************************************************************TIME : Wed Jan 18 14:47:07 2006------------------------------- FULL DATA STREAM (85 octets printed 20 per line) : 83 79 00 96 00 01 FF 00 39 02 02 06 04 43 79 00 FE 04 04 43 58 02 FE 0F 3B 00 39 10 0B 03 01 08 01 0A 09 07 12 34 56 78 90 12 34 56 12 03 59 18 A3 05 08 00 62 F2 20 00 01 00 01 06 01 6C 01 00 41 19 00 05 08 00 62 F2 20 00 3C 00 01 13 05 8F 52 BF 00 FE 00

---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 121 (H'79) Target BSCOrigination Point Code 600 (H'258) Non-Anchor MSCSignalling Link Selection 0Remaining Message Length 80 octets ---SCCP Level------------------------------------------------------------- SCCP Data Stream (total 80 octets , 20 printed per line) : 01 FF 00 39 02 02 06 04 43 79 00 FE 04 04 43 58 02 FE 0F 3B 00 39 10 0B 03 01 08 01 0A 09 07 12 34 56 78 90 12 34 56 12 03 59 18 A3 05 08 00 62 F2 20 00 01 00 01 06 01 6C 01 00 41 19 00 05 08 00 62 F2 20 00 3C 00 01 13 05 8F 52 BF 00 FE 00 SCCP Message: Connection Request [H'01] Source Local Reference: H'3900FF Protocol Class: Class 2 Mandatory Variable Pointer: H'2 Optional Pointer: H'6 Mandatory Variable Portion -------------------------- Called Party Address: --------------------- Address Length: H'4 Sign. Point Code Indicator: Included Subsystem Number Indicator: Included Global Title Indicator: No Global Title Included Routing Indicator: Route by Point Code and Subsystem Signalling Point Code: 121 Target BSC Subsystem Number: ITU-T BSSAP [H'FE] Optional Variable Portion -------------------------- Calling Party Address: --------------------- Address Length: H'4 Sign. Point Code Indicator: Included Subsystem Number Indicator: Included Global Title Indicator: No Global Title Included Routing Indicator: Route by Point Code and Subsystem Signalling Point Code: 600 Non-Anchor MSC Subsystem Number: ITU-T BSSAP [H'FE]

36

---BSSAP Level---BSSMAP--------------------- BSSAP Length: 59 octetsBSSMAP Message: Handover Request [H'10])BSSMAP Length: 57 octetsChannel Type:------------ Sp/D Indicator: Speech Ch. Rate & Type: Full Rate TCH Bm [H'8] Speech Coding: Speech Full Rate Version 1Encryption Information:---------------------- Perm. Algorithm: No Encyption Perm. Algorithm: GSM A5/1 Perm. Algorithm: GSM A5/2 Key1: 12 Key2: 34 Key3: 56 Key4: 78 Key5: 90 Key6: 12 Key7: 34 Key8: 56Mobile Station Classmark (2)---------------------------- Revision Level: Used by MSs supporting R99 Early Classmark: Supported A5/1 Encryption: Available RF Power Cap.: Class 2 PS Capability: Not Supported SS Screening: Phase2 Error and Ellipsis SM Capability: Present VBS Notification: no VBS cap. or no notify wanted VGCS Notific.: no VGCS cap. or no notify wanted Frequency Cap.: G1 Extension not supported Classmark3: Available LCS VA Cap: Supported LCS VA Cap: prefers default alphabet SoLSA: not Supported CM Serv. Prompt: not Supported A5/3 Encryption: Available A5/2 Encryption: AvailableCell Identifier:--------------- CellID Discr.: Whole CGI used to identify cells [H'00] Cell ID: PLMN-ID: 262-02 LAC: 01 CI: 01Priority-------- PCI Indicator: May Preempt Existing Connection PVI Indicator: Shall not be Preempted by other Request QA Indicator: Queueing not Allowed Priority: 11

37

Circuit Identity Code:--------------------- PCM Multiplex: 02 Timeslot Used: 01Downlink DTX Flag----------------- Downlink DTX: otherwise (enabled)Cell Identifier:--------------- CellID Discr.: Whole CGI used to identify cells [H'00] Cell ID: PLMN-ID: 262-02 LAC: 60 CI: 01Mobile Station Classmark (3)---------------------------- Classmark Information Type 3 length : 5 Octets --- Octet 03: 8F --- Octet 04: 52 --- Octet 05: BF --- Octet 06: 00 --- Octet 07: FE Band 1: P-GSM: not Supported Band 2: E-GSM or R-GSM: not Supported Band 3: DCS 1800: not Supported A5/4 Encryption: Available A5/5 Encryption: Available A5/6 Encryption: Available A5/7 Encryption: Available R-Support: NOT included Multi-Slot Capability: included Multi-Slot Class: H'9 UCS2 support: NOT included Ext. Measurement Capability: included MS Measurement Capability: NOT included MS Pos. Method Capability: included MS Pos. Method: H'1F ECSD Multislot Capability: NOT included ECSD Struct: Modul. Cap.: NOT included GSM 400 Bands: NOT Supported GSM 850 Assoc. Radio Cap.: NOT Supported PCS 1900 Assoc. Radio Cap.: NOT Supported UMTS FDD R-Acc.-Techn. Cap.: NOT Supported UMTS 3.84 Mcps TDD Cap.: NOT Supported CDMA 2000 R-Acc.-Techn. Cap.:NOT set DTM GPRS Multi Slot Cap.: included DTM GPRS Multi Slot Class: H'3 Mac Mode Support Bit: set DTM EGPRS Multi Slot Cap.: Supported DTM EGPRS Multi Slot Class: H'3No More Additional Data --------------------------------------------------------------------------BSSMAP DataStream: 00 39 10 0B 03 01 08 01 0A 09 07 12 34 56 78 90 12 34 56 12 03 59 18 A3 05 08 00 62 F2 20 00 01 00 01 06 01 6C 01 00 41 19 00 05 08 00 62 F2 20 00 3C 00 01 13 05 8F 52 BF 00 FE 00 End of Optional Data

38

**************************************************************************TIME : Wed Jan 18 14:47:07 2006------------------------------- FULL DATA STREAM (14 octets) : 83 58 42 1E 00 02 FF 00 39 CF 1C FA 02 00

---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 600 (H'258) Non-Anchor MSCOrigination Point Code 121 (H'79) Target BSCSignalling Link Selection 0Remaining Message Length 9 octets ---SCCP Level------------------------------------------------------------- SCCP Data Stream (9 octets) : 02 FF 00 39 CF 1C FA 02 00 SCCP Message: Connection Confirmed [H'02] Destination Local Reference: H'3900FF Source Local Reference: H'FA1CCF Protocol Class: Class 2 Variable Pointer: H'0

39

**************************************************************************TIME : Wed Jan 18 14:47:08 2006------------------------------- FULL DATA STREAM (26 octets printed 20 per line) : 83 58 42 1E 00 06 FF 00 39 00 01 0E 00 0C 12 17 09 06 6B D1 04 3E 00 09 82 00

---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 600 (H'258) Non-Anchor MSCOrigination Point Code 121 (H'79) Target BSCSignalling Link Selection 0Remaining Message Length 21 octets ---SCCP Level------------------------------------------------------------- SCCP Data Stream (total 21 octets , 20 printed per line) : 06 FF 00 39 00 01 0E 00 0C 12 17 09 06 6B D1 04 3E 00 09 82 00 SCCP Message: Data Form 1 [H'06] Destination Local Reference: H'3900FF Segmentation/Reassembling: H'0 Variable Pointer: H'1 ---BSSAP Level---BSSMAP--------------------- BSSAP Length: 14 octetsBSSMAP Message: Handover Request Ack [H'12])BSSMAP Length: 12 octetsLayer 3 Information:------------------- ---BSSAP Level---DTAP----------------------- BSSAP Length: 9 octetsDLCI: SAPI 7N(Sd): 1MM DTAP Message: Handover Command [H'2B]MM DTAP Length: 9 octetsCell Description:---------------- PLMN Color Code: 2 BS Color Code: 1 BCCH ARFCN: 772Channel Description 2:--------------------- Ch.Type and TDMA: SDCCH/4 + SDCCH/C4 or CBCH, Subchannel 3 Timeslot Number: 6 Training Sequence:0 Hopping Channel: Single RF Channel ARFCN: 9Handover Reference:------------------ Reference Value: H'82Power Command:------------- MS Power Level: GSM900: 43 dBm DCS1800: 30 dBm PCS1900: 30 dBm--------------------------------------------------------------------------DTAP DataStream: 12 17 09 06 6B D1 04 3E 00 09 82 00 --------------------------------------------------------------------------BSSMAP DataStream: 00 0C 12 17 09 06 6B D1 04 3E 00 09 82 00

40

**************************************************************************TIME : Wed Jan 18 14:47:08 2006------------------------------- FULL DATA STREAM (145 octets printed 20 per line) : 83 96 40 AF C0 09 81 7E 02 0D 0B 12 08 00 11 04 94 71 62 30 33 03 6E 65 6C 48 04 A7 00 01 FF 49 04 63 00 01 FF 6B 2A 28 28 06 07 00 11 86 05 01 01 01 A0 1D 61 1B 80 02 07 80 A1 09 06 07 04 00 00 01 00 0B 03 A2 03 02 01 00 A3 05 A1 03 02 01 00 6C 80 A2 2E 02 01 7F 30 29 02 01 44 A3 80 80 07 91 94 71 62 80 49 99 A2 80 0A 01 01 04 10 00 0E 12 17 09 06 6B D1 04 3E 00 09 82 00 2C 00 00 00 00 00 00 00 0B 52 08 00 11 04 94 71 42 20 22 02 ---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 150 (H'96) Anchor MSCOrigination Point Code 701 (H'2BD) Non-Anchor MSCSignalling Link Selection 12Remaining Message Length 140 octets

41

---SCCP Level------------------------------------------------------------- SCCP Data Stream (total 140 octets , 20 printed per line) : 09 81 7E 02 0D 0B 12 08 00 11 04 94 71 62 30 33 03 6E 65 6C 48 04 A7 00 01 FF 49 04 63 00 01 FF 6B 2A 28 28 06 07 00 11 86 05 01 01 01 A0 1D 61 1B 80 02 07 80 A1 09 06 07 04 00 00 01 00 0B 03 A2 03 02 01 00 A3 05 A1 03 02 01 00 6C 80 A2 2E 02 01 7F 30 29 02 01 44 A3 80 80 07 91 94 71 62 80 49 99 A2 80 0A 01 01 04 10 00 0E 12 17 09 06 6B D1 04 3E 00 09 82 00 2C 00 00 00 00 00 00 00 0B 52 08 00 11 04 94 71 42 20 22 02 SCCP Message: Unit Data [H'09] Protocol Class: Class 1 Message Handling: Return Message on Error Called Party Address Offset: H'7E Calling Party Address Offset: H'2 Data Portion Pointer: H'D Called Party Address: --------------------- Address Length: H'B Sign. Point Code Indicator: not Included Subsystem Number Indicator: Included Global Title Indicator: Global Title (trans, plan, encode, noa) Routing Indicator: Route by Point Code and Subsystem Subsystem Number: MAP-MSC [H'8] Translation Type: H'0 Encoding Scheme: BCD, odd number of Digits Numbering Plan: ISDN/Telephony (E.164/E.163) Nature of Address: International Number Odd number of Signals: 0 Address Information: 491724022220 Anchor MSC Calling Party Address: --------------------- Address Length: H'B Sign. Point Code Indicator: not Included Subsystem Number Indicator: Included Global Title Indicator: Global Title (trans, plan, encode, noa) Routing Indicator: Route by Global Title Subsystem Number: MAP-MSC [H'8] Translation Type: H'0 Encoding Scheme: BCD, odd number of Digits Numbering Plan: ISDN/Telephony (E.164/E.163) Nature of Address: International Number Odd number of Signals: 0 Address Information: 491726033330 Non-Anchor MSC Data: ------------------------------------------- Data Length: 110 octets

42

---TCAP Level------------------------------ TCAP Message: Continue Message [H'65]TCAP Message Length: 108 octet(s)Originating Tx ID:------------------------ Tx ID: A70001FFDestination Tx ID:------------------------ Tx ID: 630001FFDialog Portion:------------------------ Length 42 octet(s)External Tag:------------------------ Length: 40 octet(s)Object Identifier Tag:------------------------ Length: 7 octet(s) Reference: CCITT Q Ref Document: x305 Dialogue-AS-ID: -------------- Name (Value) 1 Version: (MAP) Version 1ASN1 Type Tag:------------------------ Length: 29 octet(s)Dialog Response Tag:-------------------- Length: 27 octet(s)Protocol Version Tag:------------------------ Length: 2 octet(s) Protocol Version: 0780Application Context Name Tag:----------------------------- Length: 9 octet(s)Object Identifier Tag:------------------------ Length: 7 octet(s) Application Context: ------------------- Application Name (value) 11 Version/Revision 3 Complete Content 04 00 00 01 00 0B 03Result Tag:------------------------ Length: 3 octet(s)Integer Tag:------------------------ Length: 1 octet(s) Associate Result: 00User Source Diagnostic Tag:------------------------ Length: 5 octet(s) User Source Diagnostic: A103020100

43

Component Portion:------------------------ Length Indefinite Form Result Component: ========================================================================== Component Length 46 octet(s) Invoke ID: ========================================================================== Invoke ID Length 1 octet(s) Invoke ID 127 Parameter Sequence: ========================================================================== Sequence Length 41 octet(s) Operation Code: -------------------------------------------------------------------------- Operation Code Length 1 octet(s) Operation Code Prepare Handover [68] Prepare Handover: -------------------------------------------------------------------- Sequemce Length Indefinite Form Handover Number: --------------- Length 7 octet(s) Type of Number: International [H'1] Numbering Plan: ISDN/Telephony (E.164/E.163) [H'1] Handover-Number: 491726089499 an-APDU: ------- Sequence Length Indefinite Form Access Network Protocol ID: ts3G-48006 Signal Info: Length 16 octet(s)

44

---BSSAP Level---BSSMAP--------------------- BSSAP Length: 16 octetsBSSMAP Message: Handover Request Ack [H'12])BSSMAP Length: 14 octets Layer 3 Information:-------------------Layer3Info Length: 9 octetsProt. Discrimin.: Radio Resource Management [H'06]MM DTAP Message: Handover Command [H'2B]MM DTAP Length: 9 octetsCell Description:---------------- PLMN Color Code: 2 BS Color Code: 1 BCCH ARFCN: 772Channel Description 2:--------------------- Ch.Type and TDMA: SDCCH/4 + SDCCH/C4 or CBCH, Subchannel 3 Timeslot Number: 6 Training Sequence:0 Hopping Channel: Single RF Channel ARFCN: 9Handover Reference:------------------ Reference Value: H'82Power Command:------------- MS Power Level: GSM900: 43 dBm DCS1800: 30 dBm PCS1900: 30 dBm--------------------------------------------------------------------------DTAP DataStream: 12 17 09 06 6B D1 04 3E 00 09 82 00 2C 00 Chosen Encryption Algorithm:--------------------------- Chosen Encrypt.: reserved --------------------------------------------------------------------------BSSMAP DataStream: 00 0E 12 17 09 06 6B D1 04 3E 00 09 82 00 2C 00 --------------------------------------------------------------------------TCAP Data Stream: 65 6C 48 04 A7 00 01 FF 49 04 63 00 01 FF 6B 2A 28 28 06 07 00 11 86 05 01 01 01 A0 1D 61 1B 80 02 07 80 A1 09 06 07 04 00 00 01 00 0B 03 A2 03 02 01 00 A3 05 A1 03 02 01 00 6C 80 A2 2E 02 01 7F 30 29 02 01 44 A3 80 80 07 91 94 71 62 80 49 99 A2 80 0A 01 01 04 10 00 0E 12 17 09 06 6B D1 04 3E 00 09 82 00 2C 00 00 00 00 00 00 00

45

**************************************************************************TIME : Wed Jan 18 14:47:10 2006------------------------------- FULL DATA STREAM (36 octets printed 20 per line) : 83 65 00 4B B0 06 90 3B BF 00 01 18 00 16 13 17 09 06 6B D1 04 3E 00 09 82 00 05 08 00 62 F2 20 00 3C 00 01 ---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 101 (H'65) Serving BSCOrigination Point Code 300 (H'12C) Anchor MSCSignalling Link Selection 11Remaining Message Length 31 octets---SCCP Level------------------------------------------------------------- SCCP Data Stream (total 31 octets , 20 printed per line) : 06 90 3B BF 00 01 18 00 16 13 17 09 06 6B D1 04 3E 00 09 82 00 05 08 00 62 F2 20 00 3C 00 01 SCCP Message: Data Form 1 [H'06] Destination Local Reference: H'BF3B90 Segmentation/Reassembling: H'0 Variable Pointer: H'1 Data: ------------------------------------------- Data Length: 24 octets

46

---BSSAP Level---BSSMAP--------------------- BSSAP Length: 24 octetsBSSMAP Message: Handover Command [H'13])BSSMAP Length: 22 octetsLayer 3 Information:-------------------Layer3Info Length: 9 octetsProt. Discrimin.: Radio Resource Management [H'06]MM DTAP Message: Handover Command [H'2B]MM DTAP Length: 9 octetsCell Description:---------------- PLMN Color Code: 2 BS Color Code: 1 BCCH ARFCN: 772Channel Description 2:--------------------- Ch.Type and TDMA: SDCCH/4 + SDCCH/C4 or CBCH, Subchannel 3 Timeslot Number: 6 Training Sequence:0 Hopping Channel: Single RF Channel ARFCN: 9Handover Reference:------------------ Reference Value: H'82Power Command:------------- MS Power Level: GSM900: 43 dBm DCS1800: 30 dBm PCS1900: 30 dBm --------------------------------------------------------------------------DTAP DataStream: 13 17 09 06 6B D1 04 3E 00 09 82 00 05 08 00 62 F2 20 00 3C 00 01 Cell Identifier:--------------- CellID Discr.: Whole CGI used to identify cells [H'00] Cell ID: PLMN-ID: 262-02 LAC: 60 CI: 01 --------------------------------------------------------------------------BSSMAP DataStream: 00 16 13 17 09 06 6B D1 04 3E 00 09 82 00 05 08 00 62 F2 20 00 3C 00 01

47

**************************************************************************TIME : Wed Jan 18 14:47:13 2006------------------------------- FULL DATA STREAM (15 octets) : 83 58 42 1E 00 06 FF 00 39 00 01 03 00 01 1B

---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 600 (H'258) Non-Anchor MSCOrigination Point Code 121 (H'79) Target BSCSignalling Link Selection 0Remaining Message Length 10 octets ---SCCP Level------------------------------------------------------------- SCCP Data Stream (10 octets) : 06 FF 00 39 00 01 03 00 01 1B SCCP Message: Data Form 1 [H'06] Destination Local Reference: H'3900FF Segmentation/Reassembling: H'0 Variable Pointer: H'1 ---BSSAP Level---BSSMAP--------------------- BSSAP Length: 3 octetsBSSMAP Message: Handover Detect [H'1B])BSSMAP Length: 1 octets --------------------------------------------------------------------------BSSMAP DataStream: 00 01 1B

48

**************************************************************************TIME : Wed Jan 18 14:47:13 2006------------------------------- FULL DATA STREAM (75 octets printed 20 per line) : 83 96 40 AF C0 09 81 38 02 0D 0B 12 08 00 11 04 94 71 62 30 33 03 28 65 26 48 04 A7 00 01 FF 49 04 63 00 01 FF 6C 18 A1 16 02 01 7E 02 01 21 A3 80 30 80 0A 01 01 04 03 00 01 1B 00 00 00 00 0B 52 08 00 11 04 94 71 42 20 22 02 ---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 150 (H'96) Anchor MSCOrigination Point Code 701 (H'2BD) Non-Anchor MSCSignalling Link Selection 12Remaining Message Length 70 octets

---SCCP Level------------------------------------------------------------- SCCP Data Stream (total 70 octets , 20 printed per line) : 09 81 38 02 0D 0B 12 08 00 11 04 94 71 62 30 33 03 28 65 26 48 04 A7 00 01 FF 49 04 63 00 01 FF 6C 18 A1 16 02 01 7E 02 01 21 A3 80 30 80 0A 01 01 04 03 00 01 1B 00 00 00 00 0B 52 08 00 11 04 94 71 42 20 22 02 SCCP Message: Unit Data [H'09] Protocol Class: Class 1 Message Handling: Return Message on Error Called Party Address Offset: H'38 Calling Party Address Offset: H'2 Data Portion Pointer: H'D Called Party Address: --------------------- Address Length: H'B Sign. Point Code Indicator: not Included Subsystem Number Indicator: Included Global Title Indicator: Global Title (trans, plan, encode, noa) Routing Indicator: Route by Point Code and Subsystem Subsystem Number: MAP-MSC [H'8] Translation Type: H'0 Encoding Scheme: BCD, odd number of Digits Numbering Plan: ISDN/Telephony (E.164/E.163) Nature of Address: International Number Odd number of Signals: 0 Address Information: 491724022220 Anchor MSC Calling Party Address: --------------------- Address Length: H'B Sign. Point Code Indicator: not Included Subsystem Number Indicator: Included Global Title Indicator: Global Title (trans, plan, encode, noa) Routing Indicator: Route by Global Title Subsystem Number: MAP-MSC [H'8] Translation Type: H'0 Encoding Scheme: BCD, odd number of Digits Numbering Plan: ISDN/Telephony (E.164/E.163) Nature of Address: International Number Odd number of Signals: 0 Address Information: 491726033330 Non-Anchor MSC Data: ------------------------------------------- Data Length: 40 octets

49

---TCAP Level------------------------------ TCAP Message: Continue Message [H'65]TCAP Message Length: 38 octet(s)Originating Tx ID:------------------------ Tx ID: A70001FFDestination Tx ID:------------------------ Tx ID: 630001FF Component Portion:------------------------ Length 24 octet(s) Invoke Component: ========================================================================== Component Length 22 octet(s) Invoke ID: ========================================================================== Invoke ID Length 1 octet(s) Invoke ID 126 Operation Code: -------------------------------------------------------------------------- Operation Code Length 1 octet(s) Operation Code Process Access Signalling [33] ========================= Process Access Signalling: ========================= Sequence Length Indefinite Form an-APDU: ------- Sequence Length Indefinite Form Access Network Protocol ID: ts3G-48006 Signal Info: Length 3 octet(s) ---BSSAP Level---BSSMAP--------------------- BSSAP Length: 3 octetsBSSMAP Message: Handover Detect [H'1B])BSSMAP Length: 1 octets --------------------------------------------------------------------------BSSMAP DataStream: 00 01 1B --------------------------------------------------------------------------TCAP Data Stream: 65 26 48 04 A7 00 01 FF 49 04 63 00 01 FF 6C 18 A1 16 02 01 7E 02 01 21 A3 80 30 80 0A 01 01 04 03 00 01 1B 00 00 00 00

50

**************************************************************************TIME : Wed Jan 18 14:47:13 2006------------------------------- FULL DATA STREAM (15 octets) : 83 58 42 1E 00 06 FF 00 39 00 01 03 00 01 14

---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 600 (H'258) Non-Anchor MSCOrigination Point Code 121 (H'79) Target BSCSignalling Link Selection 0Remaining Message Length 10 octets ---SCCP Level------------------------------------------------------------- SCCP Data Stream (10 octets) : 06 FF 00 39 00 01 03 00 01 14 SCCP Message: Data Form 1 [H'06] Destination Local Reference: H'3900FF Segmentation/Reassembling: H'0 Variable Pointer: H'1 ---BSSAP Level---BSSMAP--------------------- BSSAP Length: 3 octetsBSSMAP Message: Handover Complete [H'14])BSSMAP Length: 1 octets --------------------------------------------------------------------------BSSMAP DataStream: 00 01 14

51

**************************************************************************TIME : Wed Jan 18 14:47:13 2006------------------------------- FULL DATA STREAM (75 octets printed 20 per line) : 83 96 40 AF C0 09 81 38 02 0D 0B 12 08 00 11 04 94 71 62 30 33 03 28 65 26 48 04 A7 00 01 FF 49 04 63 00 01 FF 6C 18 A1 16 02 01 7D 02 01 1D A3 80 30 80 0A 01 01 04 03 00 01 14 00 00 00 00 0B 52 08 00 11 04 94 71 42 20 22 02 ---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 150 (H'96) Anchor MSCOrigination Point Code 701 (H'2BD) Non-Anchor MSCSignalling Link Selection 12Remaining Message Length 70 octets---SCCP Level------------------------------------------------------------- SCCP Data Stream (total 70 octets , 20 printed per line) : 09 81 38 02 0D 0B 12 08 00 11 04 94 71 62 30 33 03 28 65 26 48 04 A7 00 01 FF 49 04 63 00 01 FF 6C 18 A1 16 02 01 7D 02 01 1D A3 80 30 80 0A 01 01 04 03 00 01 14 00 00 00 00 0B 52 08 00 11 04 94 71 42 20 22 02 SCCP Message: Unit Data [H'09] Protocol Class: Class 1 Message Handling: Return Message on Error Called Party Address Offset: H'38 Calling Party Address Offset: H'2 Data Portion Pointer: H'D Called Party Address: --------------------- Address Length: H'B Sign. Point Code Indicator: not Included Subsystem Number Indicator: Included Global Title Indicator: Global Title (trans, plan, encode, noa) Routing Indicator: Route by Point Code and Subsystem Subsystem Number: MAP-MSC [H'8] Translation Type: H'0 Encoding Scheme: BCD, odd number of Digits Numbering Plan: ISDN/Telephony (E.164/E.163) Nature of Address: International Number Odd number of Signals: 0 Address Information: 491724022220 Anchor MSC Calling Party Address: --------------------- Address Length: H'B Sign. Point Code Indicator: not Included Subsystem Number Indicator: Included Global Title Indicator: Global Title (trans, plan, encode, noa) Routing Indicator: Route by Global Title Subsystem Number: MAP-MSC [H'8] Translation Type: H'0 Encoding Scheme: BCD, odd number of Digits Numbering Plan: ISDN/Telephony (E.164/E.163) Nature of Address: International Number Odd number of Signals: 0 Address Information: 491726033330 Non-Anchor MSC Data: ------------------------------------------- Data Length: 40 octets

52

---TCAP Level------------------------------ TCAP Message: Continue Message [H'65]TCAP Message Length: 38 octet(s)Originating Tx ID:------------------------ Tx ID: A70001FFDestination Tx ID:------------------------ Tx ID: 630001FF Component Portion:------------------------ Length 24 octet(s) Invoke Component: ========================================================================== Component Length 22 octet(s) Invoke ID: ========================================================================== Invoke ID Length 1 octet(s) Invoke ID 125 Operation Code: -------------------------------------------------------------------------- Operation Code Length 1 octet(s) Operation Code Send End Signal [29] =============== Send End Signal: =============== Sequence Length Indefinite Form an-APDU: ------- Sequence Length Indefinite Form Access Network Protocol ID: ts3G-48006 Signal Info: Length 3 octet(s) ---BSSAP Level---BSSMAP--------------------- BSSAP Length: 3 octetsBSSMAP Message: Handover Complete [H'14])BSSMAP Length: 1 octets --------------------------------------------------------------------------BSSMAP DataStream: 00 01 14 --------------------------------------------------------------------------TCAP Data Stream: 65 26 48 04 A7 00 01 FF 49 04 63 00 01 FF 6C 18 A1 16 02 01 7D 02 01 1D A3 80 30 80 0A 01 01 04 03 00 01 14 00 00 00 00

53

**************************************************************************TIME : Wed Jan 18 14:47:14 2006------------------------------- FULL DATA STREAM (22 octets printed 20 per line) : 83 65 00 4B B0 06 90 3B BF 00 01 0A 00 08 20 07 02 06 00 04 01 0B ---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 101 (H'65) Serving BSCOrigination Point Code 300 (H'12C) Anchor MSCSignalling Link Selection 11Remaining Message Length 17 octets---SCCP Level------------------------------------------------------------- SCCP Data Stream (17 octets) : 06 90 3B BF 00 01 0A 00 08 20 07 02 06 00 04 01 0B SCCP Message: Data Form 1 [H'06] Destination Local Reference: H'BF3B90 Segmentation/Reassembling: H'0 Variable Pointer: H'1 Data: ------------------------------------------- Data Length: 10 octets---BSSAP Level---BSSMAP--------------------- BSSAP Length: 10 octetsBSSMAP Message: Clear Command [H'20])BSSMAP Length: 8 octetsLayer 3 Header Information:-------------------------- PD: 6 TI: 0Cause Code:---------- Cause Code: Handover Successful [H'0B]--------------------------------------------------------------------------BSSMAP DataStream: 00 08 20 07 02 06 00 04 01 0B

54

**************************************************************************TIME : Wed Jan 18 14:47:14 2006------------------------------- FULL DATA STREAM (15 octets) : 83 2C 41 19 B0 06 FF 00 5E 00 01 03 00 01 21

---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 300 (H'12C) Anchor MSCOrigination Point Code 101 (H'65) Serving BSCSignalling Link Selection 11Remaining Message Length 10 octets

---SCCP Level------------------------------------------------------------- SCCP Data Stream (10 octets) : 06 FF 00 5E 00 01 03 00 01 21 SCCP Message: Data Form 1 [H'06] Destination Local Reference: H'5E00FF Segmentation/Reassembling: H'0 Variable Pointer: H'1 Data: ------------------------------------------- Data Length: 3 octets ---BSSAP Level---BSSMAP--------------------- BSSAP Length: 3 octetsBSSMAP Message: Clear Complete [H'21])BSSMAP Length: 1 octets --------------------------------------------------------------------------BSSMAP DataStream: 00 01 21

55

**************************************************************************TIME : Wed Jan 18 14:47:15 2006------------------------------- FULL DATA STREAM (14 octets) : 83 65 00 4B B0 04 90 3B BF FF 00 5E 00 00

---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 101 (H'65) Serving BSCOrigination Point Code 300 (H'12C) Anchor MSCSignalling Link Selection 11Remaining Message Length 9 octets ---SCCP Level------------------------------------------------------------- SCCP Data Stream (9 octets) : 04 90 3B BF FF 00 5E 00 00 SCCP Message: Released [H'04] Destination Local Reference: H'BF3B90 Source Local Reference: H'5E00FF Release Cause: End User Originated Variable Pointer: H'0

**************************************************************************TIME : Wed Jan 18 14:47:15 2006------------------------------- FULL DATA STREAM (12 octets) : 83 2C 41 19 B0 05 FF 00 5E 90 3B BF

---MTP Level-------------------------------- Service Indicator SCCP (H'03) Network Indicator National (14bit) (H'02) Destination Point Code 300 (H'12C) Anchor MSCOrigination Point Code 101 (H'65) Serving BSCSignalling Link Selection 11Remaining Message Length 7 octets ---SCCP Level------------------------------------------------------------- SCCP Data Stream (7 octets) : 05 FF 00 5E 90 3B BF SCCP Message: Release Complete [H'05] Destination Local Reference: H'5E00FF Source Local Reference: H'BF3B90

56