The SGA Message Viewer Module
(Sga7w.exe)

• Program features
  • Implemented protocols
• Program requirements
• User interface
  • The main window
  • The Message details dialog window
  • The Message detail options dialog window
  • The Customize current view dialog window
  • The Compact columns dialog window
  • The Find text dialog window
  • The Find expression dialog window
  • The Message filter dialog window
  • The Save messages into a message file dialog window
  • The Save messages into a text file dialog window
  • The Save IP contents into a PCAP or PCAPNG file dialog window
  • The Calculate e2e thruput dialog window
  • The E2e thruput plot window
  • The Message trace window
  • Security feature
  • Color by column
  • Decode (All) as ...
• Configuration files
  • INI file
  • Cell names file
  • Service area names file
  • Signaling point names file
  • IP addess names file
  • BSSMAP CIC to GCP Termination ID file
  • LTE Cell names file
  • 5G Cell names file
• Functional details
  • SCCP protocol selection algorithm
  • IP packet reassembly
  • TCP stream reassembly
  • SCTP data reassembly
  • SCCP/XUDT data reassembly
  • Hiding of sensitive user data
  • Command line parameters
  • Details of message file reading
  • Message type abbreviations
    • M3UA
    • M2PA
    • IUA
    • ITU ISUP
    • ANSI ISUP
    • ITU SCCP
    • ANSI SCCP
    • DSS1
    • BSSMAP
    • BSSLAP
    • NS
    • BSSGP
    • DTAP-GMM
    • DTAP-SM
    • DTAP-EMM
    • DTAP-ESM
    • BSSAP+
    • SGsAP
    • GTP-prime (GTP')
    • GTPv0
    • GTPv1-C
    • GTPv1-U
    • GTPv2-C
    • PFCP
    • PFCP Cisco
    • ALCAP
    • FP
    • Diameter
• Version history

• Reads and decodes messages stored in message files created by the Remote Capture module
• Detailed interpretation of the message octets can be displayed
• The decoded messages can be copied to the clipboard and can be saved to file in different formats
• Compound search on protocol elements
• Small memory usage even on large message files
• Automatic reload on file change

• MS Windows XP or newer

The main window

Each item line in the main window represents a message or a part of a message in the file. The foreground color of an item line indicates various message errors:

• Red means that the message is invalid (too short / too long / file format error)
• Yellow means that MTP/CRC, MTP/Length Indicator, GPRS-L1/CRC, LAPD/FCS or LLC/FCS is not correct
• Cyan means that IP/HCS (header checksum) is not correct

Bad GPRS-L1/CRC is indicated only if Options/'Color GPRS messages with bad CRC' is checked.
Bad LLC/FCS and bad IP/HCS are indicated only if Options/'Color messages with bad LLC/FCS or IP/HCS' is checked.

The main menu

Menu	Menuitem	Shortcut(s)	Meaning
[File]	Open message file...	Ctrl+L or Ctrl+O	Open an SGAv2, SGAv3, DSP or GPRS message file
	Close & re-open	Ctrl+Shift+R	Close and re-open the message file
	Close		Close the message file
	Save as message file...	Ctrl+S	Save the messages as an SGAv2 or SGAv3 message file
	Save as text file...	Ctrl+Shift+S	Save the decoded messages in the chosen format
	Save IP contents as PCAP file...	Ctrl+I	Save the IP contents of the messages into a Wireshark PCAP or PCAPNG file
	Associate program with message files		Associate SGA, DSP and GPRS files with the current Sga7w.exe
	Exit	Alt+F4	Exit the program
[Edit] / Copy	Copy current line		Copy the current line to the clipboard
	Copy selected lines		Copy the selected lines to the clipboard
	Copy marked lines		Copy the marked lines to the clipboard
	Copy marked / selected / current line(s)	Ctrl+C or Ctrl+Ins	If the main window has the focus: - if there are lines marked then copy those lines to the clipboard; - else if there are lines selected then copy those lines to the clipboard; - else copy the current line to the clipboard. If the message details window has the focus: - copy the selected text to the clipboard.
	Copy block of values...		Select and copy a block of values to the clipboard
[Edit] / Select	Invert selection	Numpad *
	Invert selection of the current item	Space
	Select items after the current item
	Select items before the current item
	Select all the items
	Select by coloring	Ctrl + Numpad *
	Set beginning of range	Ctrl+A
	Select range	Ctrl+B
[Edit] / Unselect	Unselect all the items	Numpad /
	Unselect items after the current item
	Unselect items before the current item
	Unselect all the items
	Unselect by coloring	Ctrl + Numpad /
	Set beginning of range	Ctrl+A
	Unselect range	Ctrl+U
[Edit] / Mark	Invert markers	Shift + Numpad *
	Invert marker of the current item	Shift + Space
	Mark selected items	Numpad +
	Mark items after the current item
	Mark items before the current item
	Mark all the items
	Set beginning of range	Ctrl+Shift+A
	Mark range	Ctrl+Shift+B
[Edit] / Unmark	Unmark selected items	Numpad -
	Unmark items after the current item
	Unmark items before the current item
	Unmark all the items
	Set beginning of range	Ctrl+Shift+A
	Unmark range	Ctrl+Shift+U
[Edit] / Hide	Hide selected items	Ctrl+H
	Hide marked items	Ctrl+Shift+H
[Edit] / Keep	Keep selected items	Ctrl+K
	Keep marked items	Ctrl+Shift+K
[Edit] / Go to	Go to the first selected item	Ctrl+Home
	Go to the last selected item	Ctrl+End
	Go to the next selected item	Ctrl+Down
	Go to the previous selected item	Ctrl+Up
	Go to the first marked item	Ctrl+Shift+Home
	Go to the last marked item	Ctrl+Shift+End
	Go to the next marked item	Ctrl+Shift+Down
	Go to the previous marked item	Ctrl+Shift+Up
[Edit] / Goto message...	Go to message by number	Ctrl+G
[Edit]	Find text...	Ctrl+F	Find text in the message list or/and in the message details
	Find next text	F3	Find the next line that matches the specifications set in the Find text dialog window
	Find previous text	Shift+F3	Find the previous line that matches the specifications set in the Find text dialog window
	Find expression...	Ctrl+E	Find specific items in the message list using logical expressions
	Find next expression	F4	Find the next line that matches the specifications set in the Find expression dialog window
	Find previous expression	Shift+F4	Find the previous line that matches the specifications set in the Find expression dialog window
[Options]	Auto refresh file	Ctrl+R	If the message file is being written continuously and this menu item is checked then the program checks the file in every second and loads the new data (See also Details of message file reading)
	Auto scroll		Enable / disable auto scrolling of the list
	Message filter...	F6	Displays a dialog window to filter messages at loading
	Split SCTP user data		When checked, each SCTP message is split up so that every user data is displayed in a separate line. NOTE: If not checked then XUDT data reassembly will not work on SCTP/M3UA/SCCP messages!
	Reassemble IP fragments		See IP packet reassembly
	Reassemble TCP stream		See TCP stream reassembly
	Reassemble SCTP user data		See SCTP data reassembly
	Reassemble SCCP/XUDT user data		See SCCP/XUDT data reassembly
	Decode encrypted messages carried by IP/ESP		Decode encrypted messages carried by IPv4 or IPv6 protocols
	Decode encrypted messages carried by LLC		Decode encrypted messages carried by the LLC protocol
	Decode encrypted messages carried by DTAP-EMM		Decode encrypted messages carried by the DTAP-EMM protocol
	Include illegal codes		Include illegal file items and 'bad' messages in the message list. 'Bad' messages are those that are marked by yellow or red color. (See text before this table and also the next two rows below.)
	Color GPRS messages with bad CRC		Show lines with GPRS messages with bad CRC in yellow color
	Color messages with bad LLC/FCS or IP/HCS		Show lines with messages with bad LLC/FCS or IP/HCS in yellow or cyan colors
	Include debug info		Show lines with debug information
	Include binary data		Include binary data in the message list
	Decode DSP file messages of unknown protocol as DSS1		Decode messages of unknown protocol as DSS1 if checked; otherwise decode them as SS7 (applies for DSP files only)
	Messages detail options...		Display a dialog window to set the detail level of textual decoding
	Save window positions on exit		Save the positions of the main window and of the Message details dialog window on exit
	Save positions and options to INI file		Save window positions and decoding and other options to the INI file now
[View]	Customize current view...	F5	Displays a dialog window to select columns for the current view
	Save views to INI file		Save the column arrangement of all the views to the INI file now
	Reset all views		Reset views to their default arrangements
	Select next view	Ctrl+Tab	Choose the next view to become visible if there is no dialog window open, or focus on the next window otherwise
	Select previous view	Ctrl+Shift+Tab	Choose the previous view to become visible if there is no dialog window open, or focus on the previous window otherwise
	Select view 1..12	Ctrl+1 ... Ctrl+9, Ctrl+0 or text buttons in the tool bar	Choose which view to become visible. View columns can be selected in the Customize current view dialog window.
	Compact columns...	Alt+(Shift)+C	Specify, or toggle the width of the columns in the main window.
[Tools]	Create message sequence chart...	Ctrl+Q	Create sequence chart from the selected messages by calling the external module 'SgaSeqChartCreator.exe'
	Calculate e2e thruput...		Calculate GPRS end-to-end thruput and display it or save it to file
	Select items with message trace...	Ctrl+T	Select items with a message trace
[Help]	How to use...	F1	Show this help file
	About...	Ctrl+F1	Show copyright and version information about the program

The status line

• Ordinal of the current message
• Number of loaded items; an item can be a message, a part of a split message
• Number of selected items
• Number of marked items
• Date and time stamp of the current item
• Full name of the link of the current item / Completion scale for long operations

Special key input

• Pressing Enter key on a selected line
  or double clicking on a message line the Message details dialog window appears
• Items can be selected/unselected with Ctrl key + mouse click
  or with the Space key
• Items can be marked/unmarked with Ctrl+Shift key + mouse click
  or with the Shift+Space key
• Left and Right arrow keys move list box horizontally by 20 pixels
  Shift+Left and Shift+Right keys move list box horizontally by 4 pixels
  Ctrl+Left and Ctrl+Right keys move list box horizontally to the end
• Ctrl+Tab and Ctrl+Shift+Tab focuses on the open next/previous view/window
• Shift+Mouse1 for range select in main window
• Ctrl+Mouse1 for single select in main window

The Message details dialog window

This dialog window shows the octet and bit level decoding of the current message, and optionally the message octets are also shown separately (see the description of Binary button below). Lines can be selected and copied to the Windows clipboard.

The values are in different bases: they are in binary, decimal or hexadecimal form:

• The message octets in curly brackets are hexadecimal
• The 8-digit wide column on the left of the value names are binary
• The numbers on the right side of the equal sign is in decimal
• All the values starting with '0x' are hexadecimal
• The type codes and length values on the left of the message parameters are decimal
• The digits in quotation marks are either TBCD or hexadecimal digits

In quoted character strings (in USSD texts, for example) non-printable ASCII and Unicode characters are replaced by the following character(s): CR by "\r", LF by "\n", TAB by "\t", and the rest by a dot. The backslash character is replaced by "\\" (two backslashes).
Invalid GSM7 septet and UTF-8 octet sequences are marked by '�'.

Dialog window buttons

• Close: close the dialog window
• Previous: step to the previous message
• Next: step to the next message
• Options: invokes the 'Message detail options' dialog
• Binary: shows/hides the binary data view

Special key input

• Ctrl+C or Ctrl+Ins: copy the selected text to the clipboard; from either the message details or the message octets window, depending on the focus
• Double clicking on a word or number in the message details window copies the auto-selected string to the clipboard

The Message detail options dialog window

In this dialog window the detail level of the textual decoding of a message can be set.

Dialog window options

• Syntax hilight: use colors and boldness to enhance readability of the text
• Indent protocols: indent protocols according to their depths related to each other
• Auto jump to protocol: jump to the selected protocol automatically when message details are displayed
• Show message octets: show message octets at each protocol level
• Show parameter type and length values: show parameter type and length values before the parameter name
• Show parameter header flags: show parameter header flags and other values for ALCAP, Diameter, GTP2-C and BAT-ASE
• Show parameter value octets: show parameter value octets after the parameter name
• Show ASN.1 BER tag and length values: show ASN.1 BER tag and length values on the left side
• Show ASN.1 BER tag: show ASN.1 BER tag before the tag name
• Show ASN.1 PER tag: show ASN.1 PER tag before the tag name
• Show ASN.1 value octets: show ASN.1 value octets after the tag name
• Show field bits: show field bits on the left side
• Maximum field bits: maximum number of field bits that shall be fully displayed
• Indent size: indent (tabulator) size in characters
• TMSI/NRI length: TMSI / 'Network Resource Identifier' length in bits; zero length means no NRI
• No colors (performance mode): Disable coloring in detailed window for faster rendering (for S1AP/NGAP RAN messages)
• ASN.1 PER Max: Limit the number of PER items decoded, and displayed in the message details window

Dialog window buttons

• OK: apply the changes and close the dialog window
• Apply: apply the changes
• Save to INI: apply the changes and save the message detail options to the INI file
• Cancel: discard the changes since the last apply and close the dialog window

The Customize current view dialog window

With this dialog window the columns in the main window can be chosen. The items in the list box Display values represent the columns in the main window.

A new item can be added to the list box Display values by selecting an item in the list box Values and pressing the push button Add. To remove a column in the main window, select the corresponding item in the list box Display values and press Remove. The position of a column can be changed by selecting the corresponding item in the list box Display values and pressing Move Up or Move Down as many times as needed.

The Column type settings determine how the columns appear in the main window. If an item in Display values has the column type Joined, List or Merged, then a new column is started in the main window. If an item has the type Next, then the value will appear in the same column as the previous one. The types Joined, List and Merged are three different display formats:

• Joined: the values are separated by slashes, e.g. 200/203/6.
  The missing values are substituted by a slash.
• List: the values are separated by commas and their short names are also indicated, e.g. dpc=200, opc=203, sls=6.
  The missing values are not displayed.
• Merged: the values are separated by commas without their short names, e.g. 200, 203, 6.
  The missing values are not displayed.

Special key input

• The key Ins activates the push button Add
• The key Del activates the push button Remove
• The key Space steps to the next Column type radio button
• The key J activates the radio button Joined
• The key L activates the radio button List
• The key M activates the radio button Merged
• The key N activates the radio button Next

The Compact columns dialog window

With this dialog window the maximum width of the columns in the main window can be specified in pixels. Pressing "Ok" on the dialog box sets the new column width value, and saves it in the ini file. Entering 0 value disables the compact view, alternatively the compact column view can be toggled on or off by pressing Alt+C.

The Find text dialog window

The find feature is for finding items by text.

The Find expression dialog window

The find expression feature is for finding messages by message parameter values. A message will be found if it matches the logical expression set in this dialog.

In each line a different criterium may be set for the value of a message parameter.
Criteriums are as follows:

'==' : matches for equal values
'!=' : matches if values are not equal
'<','<=','>','>=' : matches for relational values
'is not present' : matches if field is not present
'is present' : matches if field is present
'contains' : matches if field contains string
'not contains' : matches if field does not contain string

The logical operators at the end of the lines tell how to combine the criteria. The precedence of the operators are their order:
( ... ((Criterium₁ operator₁ Criterium₂) operator₂ Criterium₃) ... operator_N-1 Criterium_N)

With the buttons Load Mn and Save Mn the current dialog settings can be loaded from and saved to the INI file.

The Message filter dialog window

The filters set in this dialog window apply at loading of the message file.
For SS7 signaling units, a filter may be set on the signaling unit type and on the MTP service indicator.
For DSS1 signaling units, a filter may be set on the control field format of the signaling unit.

The Save messages into a message file dialog window

This dialog window appears upon activation of the menu item File / Save as message file... .
The range of the items to save can be selected here.

Dialog window options

• Save as type
  • SGA message file: create a binary SGAv2 message file
  • SGAv3 message file: create a binary SGAv3 message file (compressed and encrypted)
  • Old SGA message file: create a binary DSP/GPRS message file
    (this option is available only if the loaded message file is of type DSP or GPRS)
• Range
  • All the messages: save all the items
  • Selected messages: save the selected items only
  • Marked messages: save the marked items only
  • Current message: save the current item only
• SCTP parts
  • Whole message or split parts: save all the messages and certain split SCTP parts that are in the selected range; only those split parts will be saved which are not contained by the selected messages
  • Whole message only: save only the messages in the selected range and leave out the split SCTP parts
  • Split parts only: save only the split SCTP parts in the selected range and leave out the messages
• Save TCP data only
  • Enabled: save TCP data only, with added pseudo header
  • Disabled: save all data As-Is

The Save messages into a text file dialog window

This dialog window appears upon activation of the menu item File / Save as text file... .
The detail level, the output format and the range of the items to save can be selected here.

Dialog window options

• Save as type
  • Plain text, space delimited columns: create a plain text file with columns delimited by space characters
  • Plain text, tab delimited columns: create a plain text file with columns delimited by tabulator characters
  • Comma separated values: create a CSV file
  • Semicolon separated values: create a CSV file
  • Rich text format: create an RTF file
  • Web page: create an HTML file
• Range
  • All the messages: save all the items
  • Selected messages: save the selected items only
  • Marked messages: save the marked items only
  • Current message: save the current item only
• Detail level
  • Message values: save item lines only
  • Message details: save message details only
  • Message values and details: save item lines with message details
  • First message values then details: save item lines first and then the message details

The Save IP contents into a PCAP or PCAPNG file dialog window

This dialog window appears upon activation of the menu item File / Save IP contents as PCAP file... .
The range of the items to save, the first saved IP layer and the LLC Encription flag clearing can be selected here.

Dialog window options

• File type
  • Wireshark PCAP format: save items into PCAP format
  • Wireshark PCAPNG format: save items into PCAPNG format with Aitia metadata as PCAPNG comments
• Range
  • All the messages: save all the items
  • Selected messages: save the selected items only
  • Marked messages: save the marked items only
  • Current message: save the current item only
• From layer
  • First IP layer: save the IP part from the 1st layer, if exists
  • Second IP layer: save the IP part from the 2nd layer, if exists
  • Third IP layer: save the IP part from the 3rd layer, if exists
  • First IP layer after SNDCP: save only the IP part after the SNDCP layer, if exists
• Clear LLC Encryption flag in saved message: Useful only when saving decrypted GPRS messages
• Decompress PFCP messages: Useful only when saving decompressed gzipped PFCP messages

The Calculate e2e thruput dialog window

Dialog window options

• Range
  • All the messages: save all the items
  • Selected messages: save the selected items only
  • Marked messages: save the marked items only

The E2e thruput plot window

Line colors

• The black line marks the total length of the IP segments in the given second
• The wide light blue line marks the last MS bucket size if there is bucket size info present in the given second
• The narrow dark blue line marks the latest MS bucket size if there is no bucket size info present in the given second
• The wide/narrow red lines mark the bucket leak rate similarly

Special key input

• Ctrl+C or Ctrl+Ins copies the plot to the clipboard as a bitmap image
• The arrow keys move plot
• Ctrl+Left unzooms the plot along the time axis
• Ctrl+Right zooms the plot along the time axis
• Ctrl+Up or Ctrl+Down fits the plot in the window along the y-axis

The Message trace window

Dialog window options

• Trace type
  • TCP stream: Find TCP data segments of a TCP stream.
    NOTE: TCP stream reassembly (Options / Reassemble TCP stream) must be switched on for this trace.
  • SCTP data: Find SCTP data fragments of a carried message.
    NOTE: SCTP data reassembly (Options / Reassemble SCTP data) must be switched on for this trace.
  • XUDT sequence: Find messages of a XUDT/LUDT segmentation corresponding to the current message.
    NOTE: XUDT reassembly (Options / Reassemble XUDT user data) must be switched on for this trace.
  • SCCP connection: Find messages of SCCP connections belonging to the messages selected for trace.
  • TLLI chain: Find messages with the same TLLI as those in the messages selected for trace. If TLLI changes are found then also the chains with the changed TLLI's are selected.
  • SIP Call Id: Find messages with the same SIP Call Id as those in the messages selected for trace.
  • SIP ICID with Call Id: Find messages for the SIP Call Ids with the same SIP ICID as those in the messages selected for trace, then find all messages with previously collected Call Ids without ICID.
  • PFCP SEID: Find PFCP packets with the given SEID value (flow parameters must match too).
  • PFCP sequence number: Find PFCP packets with the given sequence number value (flow parameters must match too).
  • HTTP2 stream id: Find HTTP2 packets for a given stream id (flow parameters must match too).
  • NGAP connection: Find NGAP packets for matching AMF and RAN Id-s with successful Patch Switch (flow parameters must match too).
  • Tuple: Find messages with the same IP Addresses, protocol and TCP/UDP/SCTP Port numbers as those in the messages selected for trace. Matches packets for a given IP flow (both directions).
• Start range
  • Current message: use the current message as the starting set
  • Selected messages: use the selected messages as the starting set
  • Marked messages: use the marked messages as the starting set

The messages that belong to the resulting set will be selected while the rest of the messages will be deselected after the trace.
NOTE: The applicable trace types are also displayed in a context sensitive menu when right clicking on a given message.

Security feature

When the user is not active for 10 minutes then the program's main window goes blank and the open dialogs will be hidden. In case of user activity (mouse movement or keyboard stroke) the program goes back to its previous state.

Color by column

• UDP: RTP/RTCP, GTP-prime
• TCP: HTTP, HTTP2, JSON content
• SCTP: SGsAP, Diameter

Section	Entry	Example	Meaning
[Position]	posMain	807 159 1767 872 1 -1 -1	position of the main window on the screen
	posE2ePlot	0 0 600 400 1 -1 -1	position of the E2e thruput plot window on the screen
	iDlgLeft	140	Relative X position of the Message details dialog window on the screen
	iDlgTop	72	Relative Y position of the Message details dialog window on the screen
	iDlgWidth	995	Width of the Message details dialog window on the screen
	iDlgHeight	694	Height of the Message details dialog window on the screen
	iFindTextLeft	100	Relative X position of the Find text dialog window on the screen
	iFindTextTop	100	Relative Y position of the Find text dialog window on the screen
	iFindExprLeft	100	Relative X position of the Find expression dialog window on the screen
	iFindExprTop	100	Relative Y position of the Find expression dialog window on the screen
[FileHistory]			File history
[FindText]			Find text settings and history
[ExtFindHistory]			Find expression value history
[ExtFindCriteria_M0] ... [ExtFindCriteria_M9]			Find expression criteria 'memories'
[Options]	bAutoRefresh	False	See the menu item Options/Auto refresh file
	bAutoScroll	True	See the menu item Options/Auto Scroll
	bSplitSCTP	True	See the menu item Options/Split SCTP user data
	bReassTCP	True	See the menu item Options/Reassemble TCP stream
	bReassSCTP	True	See the menu item Options/Reassemble SCTP user data
	bReassXUDT	True	See the menu item Options/Reassemble XUDT user data
	bDecodeEncryptedIP	True	See the menu item Options/Decode encrypted messages carried by IP/ESP
	bDecodeEncryptedLLC	True	See the menu item Options/Decode encrypted messages carried by LLC
	bDecodeEncryptedDTAPEMM	True	See the menu item Options/Decode encrypted messages carried by DTAP-EMM
	bMSUDisplayIllegalCodes	True	See the menu item Options/Include illegal codes
	bColorBadGprsCrc	False	See the menu item Options/Color GPRS messages with bad CRC
	bDisplayDebugInfo	False	See the menu item Options/Include debug info
	bMSUDisplayBinaryData	False	See the menu item Options/Include binary data
	bDecodeAsDSS1	False	See the menu item Options/Decode stream as DSS1
	dwSIOFilter	65535	Stores the filtering set in the SS7 / Service information group in the Message filter dialog window
	dwSUFilter	7	Stores the filtering set in the SS7 / Signaling unit type group in the Message filter dialog window
	dwDSS1FormatFilter	7	Stores the filtering set in the DSS1 / Control field format group in the Message filter dialog window
	bSaveWindowPositions	False	See the menu item Options/Save window positions on exit
	dwColumnWidth	120	See the menu item View/Compact columns...
[MsgDetailOptions]	bSyntaxHilight	True	See the Message detail options dialog window for the entries in this section
	bIndentProts	True
	bShowMsgOctets	False
	bShowParamTL	True
	bShowAsn1BerTL	True
	bShowAsn1BerTag	True
	bShowAsn1PerTag	True
	bShowAsn1V	True
	bShowFieldBits	True
	iMaxFieldBits	8
	iIndentSize	2
	iNRILength	5
[Advanced]	wRefreshInterval	1000	Time interval for checking the input message file for changes
	sDATFileCellNames	CellNames.csv	Data file needed for displaying names for MCC/MNC/LAC/CI
	sDATFileLTECellNames	LTECellNames.csv	Data file needed for displaying LTE names for MCC/MNC/(LAC)/ECI
	sDATFile5GCellNames	5GCellNames.csv	Data file needed for displaying 5G names for MCC/MNC/NRCI
	sDATFileSANames	SANames.csv	Data file needed for displaying names for MCC/MNC/LAC/SAC
	sDATFileSigPointNames	SigPointNames.csv	Data file needed for displaying the signaling point names
	sDATFileIPAddrNames2	IPAddrNames2.csv	Data file needed for displaying the IP address names
	sDATFileCIC2TermID	CIC2TermID.lst	Data file needed for displaying the GCP Termination ID for the BSSMAP CIC
	sSaveAsMsg_Path	xy.sga	The path of the file in the Save messages into a message file dialog window
	bSaveAsMsg_TCPData	False	The checkbox state of Save TCP data only in the "Save as message file..." dialog window
	bSaveAsPCAP_PFCPDecompress	False	The checkbox state of Decompress PFCP messages in the "Save IP contents as PCAP file..." dialog window
	sSaveAsMsg_SctpParts	WS	The value of the 'SCTP parts' in the Save messages into a message file dialog window
	sSaveAsText_Path	xy.htm	The path of the file in the Save decoded messages into a text file dialog window
	sSaveAsText_Format	HTML	The value of the 'Save as type' in the Save decoded messages into a text file dialog window
	sSaveAsText_Detail	VD	The value of the 'Detail level' in the Save decoded messages into a text file dialog window
	sPointCodeGrouping	5-2-2-5	Point code grouping for ITU protocols
[SCCP_CadPA_SSN]			The comma separated values and value ranges in the entries of this section define which SCCP Called party address subsystem numbers belong to which protocols (see SCCP protocol selection algorithm). If an entry is omitted then the default SSN values (shown in the Example column) will apply for that entry.
	SCMG	1	SSN's for SCMG
	MAP	5-10,145,147-150,222,224,253	SSN's for MAP
	INAP	12,128,146,240-252	SSN's for INAP and CAP
	BSSAP	254	SSN's for BSSAP
	BSSAP+	98	SSN's for BSSAP+
	RANAP	142	SSN's for RANAP
	MWI-SS	11	SSN's for MWI-SS
[SCCP_CagPA_SSN]			This section contains SCCP Calling party address SSN's. See section [SCCP_CadPA_SSN].
	SCMG		SSN's for SCMG
	MAP	6,8,222,253	SSN's for MAP
	INAP		SSN's for INAP
	BSSAP		SSN's for BSSAP
	BSSAP+		SSN's for BSSAP+
	RANAP		SSN's for RANAP
	MWI-SS		SSN's for MWI-SS
[DecodeAs]			Port list fitted to source, and destination ports to decode as the given protocol
	sRTP		UDP/TCP port list to decode as RTP or RTCP
	sGTPP		UDP/TCP port list to decode as GTP-prime
	sHTTP		TCP port list to decode as HTTP
	sHTTP2		TCP port list to decode as HTTP2
	sDiameter		SCTP port list to decode as Diameter
	sSGSAP		SCTP port list to decode as SGsAP
	sJSON		TCP/(HTTP2) port list to decode content of as JSON

Cell names file

• In the first type the MCC value is filled only. The text in the 'Name' column will be displayed for the corresponding MCC value.
• In the second type the MCC and the MNC values are filled only. The text in the 'Name' column will be displayed for the corresponding MNC value.
• In the third type the MCC, MNC and LAC values are filled only. The text in the 'Name' column will be displayed for the corresponding LAC value.
• In the fourth type all the values are filled (MCC, MNC, LAC and CI). The text in the 'Name' column will be displayed for the corresponding CI value.

Service area names file

Signaling point names file

IP address names file

BSSMAP CIC to GCP Termination ID file

LTE cell names file

5G cell names file

Functional details

IP packet reassembly

• Decoding from reassembled data: <Assembled data length>
• IPv4/IPv6 not assembled, decoding from: <Assembled data length>
• (Data not decoded because not the first segment)

TCP stream reassembly

SCTP data reassembly

SCCP/XUDT data reassembly

Hiding of sensitive user data

• the text in the TP-User-Data parameter of SMS messages is replaced with a string of '*' characters,
• the text in the USSDString and SS-Data types in MAP and SS messages are replaced with a string of '*' characters,
• the text in the Keypad facility parameters of DSS1 and DTAP-CC messages are replaced with a string of 'x' characters,
• the DTMF signals and events in GCP messages are replaced with the DTMF character 'D',
• the DTMF signals in BAT-ASE messages are replaced with the DTMF character 'D' and
• the digits in the dTMFDigitsCompleted and dTMFDigitsTimeOut components in INAP CS1+ / eventReportBCSM operation arguments are replaced with the DTMF character 'D'.

Command line parameters

Details of message file reading

If the Auto refresh file menu item is checked then the program checks the input file at a regular time interval (see the INI file setting [Advanced] / wRefreshInterval). If the file has become larger then the new messages are loaded. If the file has become shorter or if the first 1kB of the file has changed then it is re-loaded.

Every time the program needs the octets of a message for displaying, searching or saving the message values or details, it reads the message octets from the input file (thru a cache). This includes the case when the user changes the current selection by the up and down arrow keys, or when a part of the main window becomes visible. If the message can not be read from the file then the input file is closed, and if the Auto refresh file menu item is checked, then it is re-loaded.

Message type abbreviations

M3UA message type	Abbreviation
error	err
notify	ntfy
payload data	data
destination unavailable	duna
destination available	dava
destination state audit	daud
signalling congestion	scon
destination user part unavailable	dupu
destination restricted	drst
ASP up	aspup
ASP down	aspdn
heartbeat	beat
ASP up acknowledgement	aspup ack
ASP down acknowledgement	aspdn ack
heartbeat acknowledgement	beat ack
ASP active	aspac
ASP inactive	aspia
ASP active acknowledgement	aspac ack
ASP inactive acknowledgement	aspia ack
registration request	reg req
registration response	reg rsp
deregistration request	dereg req
deregistration response	dereg rsp

M2PA

M2PA message type	Abbreviation
user data	udata
link status	lstatus

IUA

IUA message type	Abbreviation
error	err
notify	ntfy
TEI status request	tei st req
TEI status confirm	tei st conf
TEI status indication	tei st ind
TEI query request	tei qr req
ASP up	aspup
ASP down	aspdn
heartbeat	beat
ASP up acknowledgement	aspup ack
ASP down acknowledgement	aspdn ack
heartbeat acknowledgement	beat ack
ASP active	aspac
ASP inactive	aspia
ASP active acknowledgement	aspac ack
ASP inactive acknowledgement	aspia ack
data request	data req
data indication	data ind
unit data request	udata req
unit data indication	udata ind
establish request	estab req
establish confirm	estab conf
establish indication	estab ind
release request	rel req
release confirm	rel conf
release indication	rel ind

ITU ISUP

ITU ISUP message type	Abbreviation
Initial address	iam
Subsequent address	sam
Information request	inr
Information	inf
Continuity	cot
Address complete	acm
Connect	con
Forward transfer	fot
Answer	anm
Release	rel
Suspend	sus
Resume	res
Release complete	rlc
Continuity check request	ccr
Reset circuit	rsc
Blocking	blo
Unblocking	ubl
Blocking acknowledgement	bla
Unblocking acknowledgement	uba
Circuit group reset	grs
Circuit group blocking	cgb
Circuit group unblocking	cgu
Circuit group blocking acknowledgement	cgba
Circuit group unblocking acknowledgement	cgua
Facility request	far
Facility accepted	faa
Facility reject	frj
Loop back acknowledgement	lba
Pass-along	pam
Circuit group reset acknowledgement	gra
Circuit group query	cqm
Circuit group query response	cqr
Call progress	cpg
User-to-user information	usr
Unequipped circuit identification code	ucic
Confusion	cfn
Overload	olm
Network resource management	nrm
Facility	fam
User part test	upt
User part available	upa
Identification request	irq
Identification response	irp
Segmentation	sgm

ANSI ISUP

ANSI ISUP message type	Abbreviation
Initial address	iam
Information request	inr
Information	inf
Continuity	cot
Address complete	acm
Connect	con
Forward transfer	fot
Answer	anm
Release	rel
Suspend	sus
Resume	res
Release complete	rlc
Continuity check request	ccr
Reset circuit	rsc
Blocking	blo
Unblocking	ubl
Blocking acknowledgement	bla
Unblocking acknowledgement	uba
Circuit group reset	grs
Circuit group blocking	cgb
Circuit group unblocking	cgu
Circuit group blocking acknowledgement	cgba
Circuit group unblocking acknowledgement	cgua
Loop back acknowledgement	lpa
Pass along	pam
Circuit group reset acknowledgement	gra
Circuit query	cqm
Call progress	cpg
Unequipped circuit identification code	ucic
Confusion	cfn
Facility	fac
Circuit validation response	cvr
Circuit reservation acknowledgement	cra
Circuit reservation	crm
Circuit validation test	cvt
Exit	exm

ITU SCCP

ITU SCCP message type	Abbreviation
Connection request	cr
Connection confirm	cc
Connection refused	cref
Released	rlsd
Release complete	rlc
Data form 1	dt1
Data form 2	dt2
Data acknowledgement	ak
Unitdata	udt
Unitdata service	udts
Expedited data	ed
Expedited data acknowledgement	ea
Reset request	rsr
Reset confirm	rsc
Protocol data unit error	err
Inactivity test	it
Extended unitdata	xudt
Extended unitdata service	xudts
Long unitdata	ludt
Long unitdata service	ludts

ANSI SCCP

ANSI SCCP message type	Abbreviation
Connection request	cr
Connection confirm	cc
Connection refused	cref
Released	rlsd
Release complete	rlc
Data form 1	dt1
Data form 2	dt2
Data acknowledgement	ak
Unitdata	udt
Unitdata service	udts
Expedited data	ed
Expedited data acknowledgement	ea
Reset request	rsr
Reset confirm	rsc
Protocol data unit error	err
Inactivity test	it
Extended unitdata	xudt
Extended unitdata service	xudts

DSS1

DSS1 message type	Abbreviation
Escape to nationally specific message type	(escape)
Alerting	alerting
Call Proceeding	call proc
Connect	connect
Connect Acknowledge	connect ack
Progress	progress
Setup	setup
Setup Acknowledge	setup ack
Hold	hold
Hold Acknowledge	hold ack
Hold Reject	hold rej
Resume	resume
Resume Acknowledge	resume ack
Resume Reject	resume rej
Suspend	suspend
Suspend Acknowledge	suspend ack
Suspend Reject	suspend rej
Retrieve	retrieve
Retrieve Acknowledge	retrieve ack
Retrieve Reject	retrieve rej
User Information	user info
Detach	detach
Detach Acknowledge	detach ack
Disconnect	disconnect
Release	release
Release Complete	release compl
Restart	restart
Restart Acknowledge	restart ack
Segment	segment
Facility	facility
Facility Acknowledge	facility ack
Facility Reject	facility rej
Register	register
Register Acknowledge	register ack
Register Reject	register rej
Cancel Acknowledge	cancel ack
Cancel Reject	cancel rej
Congestion Control	congestion ctrl
Information	info
Notify	notify
Status Enquiry	status enquiry
Status	status

BSSMAP

BSSMAP message type	Abbreviation
(Reserved)	(reserved)
Assignment request	assignment req
Assignment complete	assignment compl
Assignment failure	assignment failure
Channel modify request	channel modify req
Handover request	handover req
Handover required	handover req'd
Handover request acknowledge	handover req ack
Handover command	handover cmd
Handover complete	handover compl
Handover succeeded	handover succeeded
Handover failure	handover failure
Handover performed	handover performed
Handover candidate enquire	handover candidate enq
Handover candidate response	handover candidate resp
Handover required reject	handover req'd rej
Handover detect	handover detect
Internal handover required	int handover req'd
Internal handover required reject	int handover req'd rej
Internal handover command	int handover cmd
Internal handover enquiry	int handover enq
Clear command	clear cmd
Clear complete	clear compl
Clear request	clear req
Reserved	reserved
SAPI "N" reject	sapi "n" rej
Confusion	confusion
Suspend	suspend
Resume	resume
Perform location request	perform loc req
LSA information	lsa info
Perform location response	perform loc resp
Perform location abort	perform loc abort
Common ID	common id
Reset	reset
Reset acknowledge	reset ack
Overload	overload
Reset circuit	reset circuit
Reset circuit acknowledge	reset circuit ack
MSC invoke trace	msc invoke trace
BSS invoke trace	bss invoke trace
Connectionless information	connectionless info
Reset IP resource	reset ip resource
Reset IP resource acknowledge	reset ip resource ack
Block	block
Blocking acknowledge	blocking ack
Unblock	unblock
Unblocking acknowledge	unblocking ack
Circuit group block	circuit grp block
Circuit group blocking acknowledge	circuit grp blocking ack
Circuit group unblock	circuit grp unblock
Circuit group unblocking acknowledge	circuit grp unblocking ack
Unequipped circuit	unequipped circuit
Change circuit	change circuit
Change circuit acknowledge	change circuit ack
Resource request	resource req
Resource indication	resource ind
Paging	paging
Cipher mode command	cipher mode cmd
Classmark update	classmark update
Cipher mode complete	cipher mode compl
Queueing indication	queueing ind
Complete layer 3 information	compl layer 3 info
Classmark request	classmark req
Cipher mode reject	cipher mode rej
Load indication	load ind
VGCS/VBS setup	vgcs/vbs setup
VGCS/VBS setup ack	vgcs/vbs setup ack
VGCS/VBS setup refuse	vgcs/vbs setup refuse
VGCS/VBS assignment request	vgcs/vbs assignment req
VGCS/VBS assignment result	vgcs/vbs assignment result
VGCS/VBS assignment failure	vgcs/vbs assignment failure
VGCS/VBS queueing indication	vgcs/vbs queueing ind
VGCS/VBS assignment status	vgcs/vbs assignment status
VGCS/VBS area cell info	vgcs/vbs area cell info
Uplink request	uplink req
Uplink request acknowledge	uplink req ack
Uplink request confirmation	uplink req conf
Uplink release indication	uplink rel ind
Uplink reject command	uplink rej cmd
Uplink release command	uplink rel cmd
Uplink seized command	uplink seized cmd
VGCS additional information	vgcs additional info
VGCS SMS	vgcs sms
Notification data	notif data
Uplink application data	uplink app data

BSSLAP

BSSLAP message type	Abbreviation
(Reserved)	(reserved)
TA request	ta req
TA response	ta resp
Reject	rej
Reset	reset
Abort	abort
TA layer 3	ta layer 3
MS position command	ms pos cmd
MS position response	ms pos resp
U-TDOA request	u-tdoa req
U-TDOA response	u-tdoa resp

NS

NS message type	Abbreviation
NS-UNITDATA	udt
NS-RESET	rst
NS-RESET-ACK	rst ack
NS-BLOCK	block
NS-BLOCK-ACK	block ack
NS-UNBLOCK	unblock
NS-UNBLOCK-ACK	unblock ack
NS-STATUS	status
NS-ALIVE	alive
NS-ALIVE-ACK	alive ack
SNS-ACK	sns ack
SNS-ADD	sns add
SNS-CHANGEWEIGHT	sns changeweight
SNS-CONFIG	sns config
SNS-CONFIG-ACK	sns config ack
SNS-DELETE	sns delete
SNS-SIZE	sns size
SNS-SIZE-ACK	sns size ack

BSSGP

BSSGP message type	Abbreviation
DL-UNITDATA	dl udt
UL-UNITDATA	ul udt
RA-CAPABILITY	ra cap
DL-MBMS-UNITDATA	dl mbms udt
UL-MBMS-UNITDATA	ul mbms udt
PAGING-PS	paging ps
PAGING-CS	paging cs
RA-CAPABILITY-UPDATE	ra cap upd
RA-CAPABILITY-UPDATE-ACK	ra cap upd ack
RADIO-STATUS	radio status
SUSPEND	suspend
SUSPEND-ACK	suspend ack
SUSPEND-NACK	suspend nack
RESUME	resume
RESUME-ACK	resume ack
RESUME-NACK	resume nack
RESUME-NACK	resume nack
RESUME-NACK	resume nack
RESUME-NACK	resume nack
RESUME-NACK	resume nack
RESUME-NACK	resume nack
PAGING-PS-REJECT	paging ps rej
DUMMY-PAGING-PS	dummy paging ps
DUMMY-PAGING-PS-RESPONSE	dummy paging ps resp
MS-REGISTRATION-ENQUIRY	ms reg enq
MS-REGISTRATION-ENQUIRY-RESPONSE	ms reg enq resp
BVC-BLOCK	bvc block
BVC-BLOCK-ACK	bvc block ack
BVC-RESET	bvc reset
BVC-RESET-ACK	bvc reset ack
BVC-UNBLOCK	bvc unblock
BVC-UNBLOCK-ACK	bvc unblock ack
FLOW-CONTROL-BVC	flctrl bvc
FLOW-CONTROL-BVC-ACK	flctrl bvc ack
FLOW-CONTROL-MS	flctrl ms
FLOW-CONTROL-MS-ACK	flctrl ms ack
FLUSH-LL	flush ll
FLUSH-LL-ACK	flush ll ack
LLC-DISCARDED	llc discarded
FLOW-CONTROL-PFC	flctrl pfc
FLOW-CONTROL-PFC-ACK	flctrl pfc ack
SGSN-INVOKE-TRACE	sgsn invoke trace
STATUS	status
OVERLOAD	overload
DOWNLOAD-BSS-PFC	download bss pfc
CREATE-BSS-PFC	cr bss pfc
CREATE-BSS-PFC-ACK	cr bss pfc ack
CREATE-BSS-PFC-NACK	cr bss pfc nack
MODIFY-BSS-PFC	mod bss pfc
MODIFY-BSS-PFC-ACK	mod bss pfc ack
DELETE-BSS-PFC	del bss pfc
DELETE-BSS-PFC-ACK	del bss pfc ack
DELETE-BSS-PFC-REQ	del bss pfc req
PS-HANDOVER-REQUIRED	ps ho reqd
PS-HANDOVER-REQUIRED-ACK	ps ho reqd ack
PS-HANDOVER-REQUIRED-NACK	ps ho reqd nack
PS-HANDOVER-REQUEST	ps ho req
PS-HANDOVER-REQUEST-ACK	ps ho req ack
PS-HANDOVER-REQUEST-NACK	ps ho req nack
PS-HANDOVER-COMPLETE	ps ho complete
PS-HANDOVER-CANCEL	ps ho cancel
PS-HANDOVER-COMPLETE-ACK	ps ho complete ack
PERFORM-LOCATION-REQUEST	perform loc req
PERFORM-LOCATION-RESPONSE	perform loc resp
PERFORM-LOCATION-ABORT	perform loc abort
POSITION-COMMAND	pos cmd
POSITION-RESPONSE	pos resp
RAN-INFORMATION	ran info
RAN-INFORMATION-REQUEST	ran info req
RAN-INFORMATION-ACK	ran info ack
RAN-INFORMATION-ERROR	ran info err
RAN-INFORMATION-APPLICATION-ERROR	ran info app err
MBMS-SESSION-START-REQUEST	mbms sess start req
MBMS-SESSION-START-RESPONSE	mbms sess start resp
MBMS-SESSION-STOP-REQUEST	mbms sess stop req
MBMS-SESSION-STOP-RESPONSE	mbms sess stop resp
MBMS-SESSION-UPDATE-REQUEST	mbms sess upd req
MBMS-SESSION-UPDATE-RESPONSE	mbms sess upd resp

DTAP-GMM

DTAP-GMM message type	Abbreviation
Attach request	atrq
Attach accept	atac
Attach complete	atct
Attach reject	atrj
Detach request	dtrq
Detach accept	dtac
Routing area update request	rarq
Routing area update accept	raac
Routing area update complete	ract
Routing area update reject	rarj
Service request	svrq
Service accept	svac
Service reject	svrj
P-TMSI reallocation command	prcd
P-TMSI reallocation complete	prct
Authentication and ciphering request	acrq
Authentication and ciphering response	acrs
Authentication and ciphering reject	acrj
Authentication and ciphering failure	acfr
Identity request	idrq
Identity response	idrs
GMM status	gmms
GMM information	gmmi

DTAP-SM

DTAP-SM message type	Abbreviation
Activate PDP context request	aprq
Activate PDP context accept	apac
Activate PDP context reject	aprj
Request PDP context activation	rpac
Request PDP context activation reject	rprj
Deactivate PDP context request	dprq
Deactivate PDP context accept	dpac
Modify PDP context request (N to MS)	mprq
Modify PDP context accept (MS to N)	mpac
Modify PDP context request (MS to N)	mprq
Modify PDP context accept (N to MS)	mpac
Modify PDP context reject	mprj
Activate secondary PDP context request	a2rq
Activate secondary PDP context accept	a2ac
Activate secondary PDP context reject	a2rj
Activate AA PDP context request	aarq
Activate AA PDP context accept	aaac
Activate AA PDP context reject	aarj
Deactivate AA PDP context request	aarq
Deactivate AA PDP context accept	darq
SM Status	smst
Activate MBMS context request	amrq
Activate MBMS context accept	amac
Activate MBMS context reject	amrj
Request MBMS context activation	rmac
Request MBMS context activation reject	rmrj

DTAP-EMM

DTAP-EMM message type	Abbreviation
Attach request	attach req
Attach accept	attach accpt
Attach complete	attach compl
Attach reject	attach rej
Detach request	detach req
Detach accept	detach accpt
Tracking area update request	ta upd req
Tracking area update accept	ta upd accpt
Tracking area update complete	ta upd compl
Tracking area update reject	ta upd rej
Extended service request	ext serv req
Service reject	serv rej
GUTI reallocation command	guti realloc cmd
GUTI reallocation complete	guti realloc compl
Authentication request	auth req
Authentication response	auth resp
Authentication reject	auth rej
Authentication failure	auth fail
Identity request	ident req
Identity response	ident resp
Security mode command	secu mode cmd
Security mode complete	secu mode compl
Security mode reject	secu mode rej
EMM status	emm status
EMM information	emm info
Downlink NAS transport	dl nas transp
Uplink NAS transport	ul nas transp
CS Service notification	cs serv notif
Downlink generic NAS transport	dl gen nas transp
Uplink generic NAS transport	ul gen nas transp
Service request	serv req
Security protected NAS message	protected msg

DTAP-ESM

DTAP-ESM message type	Abbreviation
Activate default EPS bearer context request	act def ctxt req
Activate default EPS bearer context accept	act def ctxt acc
Activate default EPS bearer context reject	act def ctxt rej
Activate dedicated EPS bearer context request	act ded ctxt req
Activate dedicated EPS bearer context accept	act ded ctxt acc
Activate dedicated EPS bearer context reject	act ded ctxt rej
Modify EPS bearer context request	modify ctxt req
Modify EPS bearer context accept	modify ctxt acc
Modify EPS bearer context reject	modify ctxt rej
Deactivate EPS bearer context request	deact ctxt req
Deactivate EPS bearer context accept	deact ctxt acc
PDN connectivity request	pdn conn req
PDN connectivity reject	pdn conn rej
PDN disconnect request	pdn disconn req
PDN disconnect reject	pdn disconn rej
Bearer resource allocation request	res alloc req
Bearer resource allocation reject	res alloc rej
Bearer resource modification request	res modif req
Bearer resource modification reject	res modif rej
ESM information request	esm info req
ESM information response	esm info resp
Notification	notif
ESM status	esm status

BSSAP+

BSSAP+ message type	Abbreviation
Paging request	paging req
Paging reject	paging rej
Downlink tunnel request	downlink tunnel req
Uplink tunnel request	uplink tunnel req
Location update request	loc update req
Location update accept	loc update acc
Location update reject	loc update rej
TMSI reallocation complete	tmsi realloc compl
Alert request	alert req
Alert ack	alert ack
Alert reject	alert rej
MS activity indication	ms activity ind
GPRS detach indication	gprs detach ind
GPRS detach ack	gprs detach ack
IMSI detach indication	imsi detach ind
IMSI detach ack	imsi detach ack
Reset indication	reset ind
Reset ack	reset ack
MS information request	ms info req
MS information response	ms info resp
MM information request	mm info req
Mobile status	mobile status
MS unreachable	ms unreachable

SGSAP

SGsAP message type	Abbreviation
Paging request	paging req
Paging reject	paging rej
Service request	service req
Downlink unitdata	downlink udata
Uplink unitdata	uplink udata
Location update request	loc update req
Location update accept	loc update acc
Location update reject	loc update rej
TMSI reallocation complete	tmsi realloc compl
Alert request	alert req
Alert ack	alert ack
Alert reject	alert rej
UE activity indication	ue activity ind
EPS detach indication	eps detach ind
EPS detach ack	eps detach ack
IMSI detach indication	imsi detach ind
IMSI detach ack	imsi detach ack
Reset indication	reset ind
Reset ack	reset ack
Service abort request	service abort req
Mo csfb indication	mo csfb ind
MM information request	mm info req
Release request	release req
Status	status
UE unreachable	ue unreachable

GTP-prime (GTP')

GTP-prime message type	Abbreviation
echo request	echo req
echo response	echo resp
version not supported	ver not supp
node alive request	node alive req
node alive response	node alive resp
redirection request	redir req
redirection response	redir resp
data record transfer request	data rec transf req
data record transfer response	data rec transf resp

GTPv0

GTPv0 message type	Abbreviation
echo request	echo req
echo response	echo resp
version not supported	ver not supp
node alive request	node alive req
node alive response	node alive resp
redirection request	redir req
redirection response	redir resp
create PDP context request	creat pdp ctxt req
create PDP context response	creat pdp ctxt resp
update PDP context request	upd pdp ctxt req
update PDP context response	upd pdp ctxt resp
delete PDP context request	del pdp ctxt req
delete PDP context response	del pdp ctxt resp
create AA PDP context request	creat aa pdp ctxt req
create AA PDP context response	creat aa pdp ctxt resp
delete AA PDP context request	del aa pdp ctxt req
delete AA PDP context response	del aa pdp ctxt resp
error indication	error ind
PDU notification request	pdu notif req
PDU notification response	pdu notif resp
PDU notification reject request	pdu notif rej req
PDU notification reject response	pdu notif rej resp
send routeing information for GPRS request	send rout info for gprs req
send routeing information for GPRS response	send rout info for gprs resp
failure report request	failure report req
failure report response	failure report resp
note MS GPRS present request	note ms gprs pres req
note MS GPRS present response	note ms gprs pres resp
identification request	ident req
identification response	ident resp
SGSN context request	sgsn ctxt req
SGSN context response	sgsn ctxt resp
SGSN context acknowledge	sgsn ctxt ack
data record transfer request	data rec transf req
data record transfer response	data rec transf resp
T-PDU	t-pdu

GTPv1-C

GTPv1-C message type	Abbreviation
Echo request	echo req
Echo response	echo resp
Version not supported	ver not supp
Create PDP context request	creat pdp ctxt req
Create PDP context response	creat pdp ctxt resp
Update PDP context request	upd pdp ctxt req
Update PDP context response	upd pdp ctxt resp
Delete PDP context request	del pdp ctxt req
Delete PDP context response	del pdp ctxt resp
Initiate PDP context activation request	init pdp ctxt activ req
Initiate PDP context activation response	init pdp ctxt activ resp
PDU notification request	pdu notif req
PDU notification response	pdu notif resp
PDU notification reject request	pdu notif rej req
PDU notification reject response	pdu notif rej resp
Supported extension headers notification	supp ext hdrs notif
Send routeing information for GPRS request	send rout info for gprs req
Send routeing information for GPRS response	send rout info for gprs resp
Failure report request	failure report req
Failure report response	failure report resp
Note MS GPRS present request	note ms gprs pres req
Note MS GPRS present response	note ms gprs pres resp
Identification request	ident req
Identification response	ident resp
SGSN context request	sgsn ctxt req
SGSN context response	sgsn ctxt resp
SGSN context acknowledge	sgsn ctxt ack
Forward relocation request	fwd reloc req
Forward relocation response	fwd reloc resp
Forward relocation complete	fwd reloc compl
Relocation cancel request	reloc cancel req
Relocation cancel response	reloc cancel resp
Forward SRNS context	fwd srns ctxt
Forward relocation complete acknowledge	fwd reloc compl ack
Forward SRNS context acknowledge	fwd srns ctxt ack
UE Registration Query Request	ue reg query req
UE Registration Query Response	ue reg query resp
RAN information relay	ran info relay
MBMS notification request	mbms notif req
MBMS notification response	mbms notif resp
MBMS notification reject request	mbms notif rej req
MBMS notification reject response	mbms notif rej resp
Create MBMS context request	creat mbms ctxt req
Create MBMS context response	creat mbms ctxt resp
Update MBMS context request	updat mbms ctxt req
Update MBMS context response	updat mbms ctxt resp
Delete MBMS context request	del mbms ctxt req
Delete MBMS context response	del mbms ctxt resp
MBMS registration request	mbms reg req
MBMS registration response	mbms reg resp
MBMS de-registration request	mbms de-reg req
MBMS de-registration response	mbms de-reg resp
MBMS session start request	mbms session start req
MBMS session start response	mbms session start resp
MBMS session stop request	mbms session stop req
MBMS session stop response	mbms session stop resp
MBMS session update request	mbms session updat req
MBMS session update response	mbms session updat resp
MS info change notification request	ms info change notif req
MS info change notification response	ms info change notif resp

GTPv1-U

GTPv1-U message type	Abbreviation
Echo request	echo req
Echo response	echo resp
Version not supported	ver not supp
Supported extension headers notification	supp ext hdrs notif
Error indication	error ind
End marker	end marker
G-PDU	g-pdu

GTPv2-C

GTPv2-C message type	Abbreviation
Echo request	echo req
Echo response	echo resp
Version not supported indication	ver not supp
SRVCC PS to CS Request	srvcc ps2cs req
SRVCC PS to CS Response	srvcc ps2cs resp
SRVCC PS to CS Complete Notification	srvcc ps2cs compl notif
SRVCC PS to CS Complete Acknowledge	srvcc ps2cs compl ack
SRVCC PS to CS Cancel Notification	srvcc ps2cs cancel notif
SRVCC PS to CS Cancel Acknowledge	srvcc ps2cs cancel ack
SRVCC CS to PS Request	srvcc cs2ps req
Create session request	creat session req
Create session response	creat session resp
Modify bearer request	modify bearer req
Modify bearer response	modify bearer resp
Delete session request	del session req
Delete session response	del session resp
Change notification request	change notif req
Change notification response	change notif resp
Remote UE Report Notification	rem ue rep notif
Remote UE Report Acknowledge	rem ue rep ack
Modify bearer command	modify bearer cmd
Modify bearer failure indication	modify bearer fail
Delete bearer command	del bearer cmd
Delete bearer failure indication	del bearer fail
Bearer resource command	bearer res cmd
Bearer resource failure indication	bearer res fail
Downlink data notification failure indication	dl data notif fail
Trace session activation	trace session act
Trace session deactivation	trace session deact
Stop paging indication	stop paging
Create bearer request	creat bearer req
Create bearer response	creat bearer resp
Update bearer request	upd bearer req
Update bearer response	upd bearer resp
Delete bearer request	del bearer req
Delete bearer response	del bearer resp
Delete pdn connection set request	del pdn conn set req
Delete pdn connection set response	del pdn conn set resp
PGW downlink triggering notification	pgw dl trig notif
PGW downlink triggering acknowledge	pgw dl trig ack
Identification request	identification req
Identification response	identification resp
Context request	ctxt req
Context response	ctxt resp
Context acknowledge	ctxt ack
Forward relocation request	fwd reloc req
Forward relocation response	fwd reloc resp
Forward relocation complete notification	fwd reloc compl notif
Forward relocation complete acknowledge	fwd reloc compl ack
Forward access context notification	fwd access ctxt notif
Forward access context acknowledge	fwd access ctxt ack
Relocation cancel request	reloc cancel req
Relocation cancel response	reloc cancel resp
Configuration transfer tunnel	config transfer tunnel
Detach notification	detach notif
Detach acknowledge	detach ack
CS paging indication	cs paging
RAN information relay	ran info relay
Alert MME notification	alert mme notif
Alert MME acknowledge	alert mme ack
UE activity notification	ue activity notif
UE activity acknowledge	ue activity ack
ISR status indication	isr status ind
UE Registration Query Request	ue reg query req
UE Registration Query Response	ue reg query resp
Create forwarding tunnel request	creat fwding tunnel req
Create forwarding tunnel response	creat fwding tunnel resp
Suspend notification	suspend notif
Suspend acknowledge	suspend ack
Resume notification	resume notif
Resume acknowledge	resume ack
Create indirect data forwarding tunnel request	creat indir data fwding tunnel req
Create indirect data forwarding tunnel response	creat indir data fwding tunnel resp
Delete indirect data forwarding tunnel request	del indir data fwding tunnel req
Delete indirect data forwarding tunnel response	del indir data fwding tunnel resp
Release access bearers request	rel access bearers req
Release access bearers response	rel access bearers resp
Downlink data notification	dl data notif
Downlink data notification acknowledge	dl data notif ack
PGW restart notification	pgw restart notif
PGW restart notification acknowledge	pgw restart notif ack
Update PDN connection set request	upd pdn conn set req
Update PDN connection set response	upd pdn conn set req
Modify access bearers request	modify access bearers req
Modify access bearers response	modify access bearers resp
MBMS session start request	mbms session start req
MBMS session start response	mbms session start resp
MBMS session update request	mbms session updat req
MBMS session update response	mbms session updat resp
MBMS session stop request	mbms session stop req
MBMS session stop response	mbms session stop resp
SRVCC CS to PS Response	srvcc cs2ps resp
SRVCC CS to PS Complete Notification	srvcc cs2ps compl notif
SRVCC CS to PS Complete Acknowledge	srvcc cs2ps compl ack
SRVCC CS to PS Cancel Notification	srvcc cs2ps cancel notif
SRVCC CS to PS Cancel Acknowledge	srvcc cs2ps cancel ack

PFCP

PFCP message type	Abbreviation
Heartbeat Request	heart req
Heartbeat Response	heart resp
PFD Management Request	pfd mgmt req
PFD Management Response	pfd mgmt resp
Association Setup Request	assoc set req
Association Setup Response	assoc set resp
Association Update Request	assoc upd req
Association Update Response	assoc upd resp
Association Release Request	assoc rel req
Association Release Response	assoc rel resp
Version Not Supported Response	ver not supp
Node Report Request	node rep req
Node Report Response	node rep resp
Session Set Deletion Request	sess set del req
Session Set Deletion Response	sess set del resp
Session Set Modification Request	sess set mod req
Session Set Modification Response	sess set mod resp
Session Establishment Request	sess est req
Session Establishment Response	sess est resp
Session Modification Request	sess mod req
Session Modification Response	sess mod resp
Session Deletion Request	sess del req
Session Deletion Response	sess del resp
Session Report Request	sess rep req
Session Report Response	sess rep resp

PFCP Cisco

PFCP message type	Abbreviation
Heartbeat Request	heart req
Heartbeat Response	heart resp
PFD Management Request	pfd mgmt req
PFD Management Response	pfd mgmt resp
Association Setup Request	assoc set req
Association Setup Response	assoc set resp
Association Update Request	assoc upd req
Association Update Response	assoc upd resp
Association Release Request	assoc rel req
Association Release Response	assoc rel resp
Version Not Supported Response	ver not supp
Node Report Request	node rep req
Node Report Response	node rep resp
Session Set Deletion Request	sess set del req
Session Set Deletion Response	sess set del resp
PRIME Stats Query Request	pr sta que req
PRIME Stats Query Response	pr sta que resp
PRIME Stats Query Ack	pr sta que ack
PRIME PFD Management Request	pr pfd mgmt req
PRIME PFD Management Response	pr pfd mgmt resp
Session Establishment Request	sess est req
Session Establishment Response	sess est resp
Session Modification Request	sess mod req
Session Modification Response	sess mod resp
Session Deletion Request	sess del req
Session Deletion Response	sess del resp
Session Report Request	sess rep req
Session Report Response	sess rep resp
PRIME Max Session Related Message	pr max sess rel

ALCAP

ALCAP message type	Abbreviation
Block confirm	blc
Block request	blo
Confusion	cfn
Establish confirm	ecf
Establish request	erq
Release confirm	rlc
Release request	rel
Reset confirm	rsc
Reset request	res
Unblock confirm	ubc
Unblock request	ubl
Modify acknowledge	moa
Modify reject	mor
Modify request	mod

FP

FP1 control frame type	Abbreviation
Outer loop power control	power ctrl
timing adjustment	timing adj
DL synchronisation	dl sync
UL synchronisation	ul sync
DL node synchronisation	dl node sync
UL node synchronisation	ul node sync
Rx timing deviation	rx timing dev
Radio interface parameter update	radio param upd
Timing advance	timing adv
TNL congestion indication	tnl cong ind

Diameter

Diameter message type	Abbreviation
Capabilities-Exchange-Request	cer
Capabilities-Exchange-Answer	cea
Re-auth-Request	rar
Re-auth-Answer	raa
AA-Mobile-Node-Request	amr
AA-Mobile-Node-Answer	ama
Home-Agent-MIP-Request	har
Home-Agent-MIP-Answer	haa
Accounting-Request	acr
Accounting-Answer	aca
Credit-Control-Request	ccr
Credit-Control-Answer	cca
Abort-Session-Request	asr
Abort-Session-Answer	asa
Session-Termination-Request	str
Session-Termination-Answer	sta
Device-Watchdog-Request	dwr
Device-Watchdog-Answer	dwa
Disconnect-Peer-Request	dpr
Disconnect-Peer-Answer	dpa
User-Authorization-Request	uar
User-Authorization-Answer	uaa
Server-Assignment-Request	sar
Server-Assignment-Answer	saa
Location-Info-Request	lir
Location-Info-Answer	lia
Multimedia-Auth-Request	mar
Multimedia-Auth-Answer	maa
Registration-Termination-Request	rtr
Registration-Termination-Answer	rta
Push-Profile-Request	ppr
Push-Profile-Answer	ppa
User-Data-Request	udr
User-Data-Answer	uda
Profile-Update-Request	pur
Profile-Update-Answer	pua
Subscribe-Notifications-Request	snr
Subscribe-Notifications-Answer	sna
Push-Notification-Request	pnr
Push-Notification-Answer	pna
Boostrapping-Info-Reques	bir
Boostrapping-Info-Answer	bia
Message-Process-Reques	mpr
Message-Process-Answer	mpa
GBAPush-Info-Reques	gpr
GBAPush-Info-Answer	gpi
Update-Location-Request	ulr
Update-Location-Answer	ula
Cancel-Location-Request	clr
Cancel-Location-Answer	cla
Authentication-Information-Request	air
Authentication-Information-Answer	aia
Insert-Subscriber-Data-Request	idr
Insert-Subscriber-Data-Answer	ida
Delete-Subscriber-Data-Request	dsr
Delete-Subscriber-Data-Answer	dsa
Purge-UE-Request	pur
Purge-UE-Answer	pua
Reset-Request	rsr
Reset-Answer	rsa
Notify-Request	nor
Notify-Answer	noa
ME-Identity-Check-Request	ecr
ME-Identity-Check-Answer	eca
Provide-Location-Request	plr
Provide-Location-Answer	pla
Location-Report-Request	lrr
Location-Report-Answer	lra
LCS-Routing-Info-Request	rir
LCS-Routing-Info-Answer	ria

Version history

v5.01
• (f) HTTP2: gzip decompression fix in E// packets
• (f) MsgViewer: file handling fix for shared access

v5.00
• (n) TCP assembler: algorithm reworked to support forward "jumps" (holes) in the stream, when assembly can be continued from the next segment
• (n) TCP assembler: when new "CDR#" tag is detected, the TCP assembly is restarted for all streams (handled as new streams)
• (n) SGAv3: Loading from, and saving to SGAv3 format support added
• (f) AVRO: Transport layer proto, App layer proto values updated
• (f) GRE/Ericsson: PCT enum updated
• (f) HTTP2: Ericsson specific tag added
• (f) HTTP2: lookup table for HPACK (huffman coding) length fixed
• (f) HTTP2: deflate content if content-encoding matches "gzip"
• (f) NAS: extended PD decoding fix for undecoded NAS messages
• (f) NGAP: RRC container decoded, unnecessary displayed undecoded bytes removed
• (f) S1AP: Masked-IMEISV display fixed
• (f) Decode as bug fix when loading values from ini file
• (f) MsgViewer: NRCI display in detailed view fixed
• (f) MsgViewer: missing fields added to 'All' view

v4.89
• (f) HTTP2: decoding fix for content using "content length" info
• (f) JSON: Empty struct ending diplay fix (#1345)
• (f) NGAP: SourceToTarget/TargetToSource container display fixes
• (f) NGAP: NAS-PDU in HandoverRequest decoding fixed (#1333)
• (f) DTAP: Packet filter -> IPv6 display fix, UE status decoded (#1341)
• (f) LTE-RRC: UECapabilityRAT-Container decoded
• (f) SIP: URI nonstandard # digit displayed (#1333)
• (f) S1AP: NR Cell id over S1AP fix (#1367)
• (f) PFCP: Mavenir IE (36010) crash fix (#1324)
• (n) MsgViewer: ASN.1/PER decoding: can limit items decoded, and displayed (Options -> Message detail options -> ASN.1 PER Max)
• (f) MsgViewer: jump to protocol offset fix
• (f) MsgViewer: if compact column size is set, viewer starts with that
• (f) MsgViewer: UnixTimestamp display fix (#1180)
• (f) debuginfo: 5G specific modifications
• (f) status bar thousand decimal separated printout
• (f) URI encoding scheme on :path in HTTP2, and Aitia Datagram decoder, and column view too
• (n) Diameter: added Nokia-Siemens and Lucent specific AVP-s (redmine: #1295)
• (n) JSON-5G: SupiOrSuci expanded decoding added
• (n) JSON decoding: intendation added according to hierarchy

v4.88
• (n) NG-RRC decoder added, release 17.10
• (f) decoder: PER decoding ported to dynamic memory allocation (limit increased to: 100.000 items per tree from 10.000)
• (f) MsgViewer: Message detail view rendering ported to RTF (approx. 3x faster on large S1AP/NGAP messages)
• (n) MsgViewer: Message detail view performance mode added (monochrome rendering, approx. 3x8 = 18x faster on large S1AP/NGAP messages)
• (f) MsgViewer: PCAPNG save now works on all types of messages
• (f) MsgViewer: TMSI in NAS-MM added to column view
• (f) Debuginfo decoder: updated
• (f) GRE-Ericsson: updated according to latest docs/samples ( 0x09 - HTTP2 messages decoded)
• (n) NGAP: UeRadioCapability -> NG-RRC decoding added
• (n) NGAP: SourceToTargetTransparentContainer/TargetToSource... decoding added
• (n) S1AP: SourceToTargetTransparentContainer/TargetToSource... expanded with NG-RAN containers
• (n) HTTP2/5G: service specific :path parsing for AMF interfaces added to column view
• (f) S1AP: GNB-Id decoding fixed
• (f) PFCP: Mavenir specific IE decoding fixes according to latest doc

v4.87
• (f) Aitia metadata decoding fix for unimplemented TLV types
• (f) MsgViewer: display Sga files containing zero length items

v4.86
• (f) Aitia metadata headers updated to latest changes
• (n) GRE-Ericsson: disabled IP/TCP reassembly inside PCAPNG data
• (n) PFCP: added piggybacked message handling (follow on flag)
• (n) PFCP: bug fixes: PDN type, Mavenir specific fixes
• (f) MsgViewer: PCAPNG export: added NULL DLT user type for packets without payload
• (f) MsgViewer: Local time is calculated when "bias" info = 0 in SGA message
• (f) MsgViewer: 5G cellname lookup implemented: MCC, MNC, NRCI
• (f) MsgViewer: current view name update in menu bug fix

v4.85
• (n) NAS decoder added, release 16.10
• (n) NGAP decoder added, release 16.8
• (n) PFCP: updated to release 17.8
• (n) PFCP Cisco added: from PFCP release 15 with Cisco extensions
• (n) trace PFCP by SEID and seqnum
• (n) trace HTTP2 stream
• (n) trace NGAP connection with successful Path switch
• (n) SCTP reassembly moved after file loading to fix out of order TSN-s
• (f) Aitia metadata headers updated to latest changes
• (f) Mavenir AVRO IE updates
• (f) Ericsson specific GRE-PCAPNG fixes added
• (f) HTTP2 content type decoding for: avro, xml, json, mime added; Mavenir heuristics updated
• (f) MsgViewer: options -> Decode PFCP withc Cisco extensions option added
• (f) MsgViewer: TLV data values added: 5g: [clusterid, session, pod. source, dest, creator, transaction, direction], flowid
• (f) MsgViewer: JSON(5g) values added: IMSI, IMEI, MSISDN, pduSessionId, dnn, nrCellId
• (f) MsgViewer: NAS added specific IE-s to colum view
• (f) MsgViewer: NGAP added specific IE-s to colum view

v4.84
• (n) GRE protocol decoder added (with Ericsson specific PCAPNG extensions)
• (n) AVRO/Mavenir protocol decoder added
• (n) basic JSON decoder added
• (n) Aitia metadata headers added (Datagram decoder, contains 5G, VTAP specific TLVs)
• (f) SCTP: Forward and Cumulative TSN added
• (f) DTAP: TFT parameters decoding fixes
• (f) SMS: IE70 decoding added
• (f) MsgViewer: added save as PCAPNG option (with Aitia specific metadata)
• (f) MsgViewer: added decode as: JSON (for TCP content) [INI setting added: sJSON=]

v4.83
• (n) HTTP2 protocol decoder added (header not decoded yet)
• (n) HTTP2: basic JSON formatter added
• (f) SCTP: parameter type list updated
• (f) SCTP: padded parameters fixed
• (f) Diameter: Siemens specific AVP-s added (1106, 1107, 1110)
• (f) S1AP: UERadioCapabilityForPaging conditional decoding added (Redmine #1203)
• (f) SMS: conditional decoding of SMS-DELIVER-REPORT (Redmine #1209)
• (f) MsgViewer: added HTTP2 basic fileds to column view (& search)
• (f) MsgViewer: added decode as: Diameter (for unknown SCTP packets) [INI setting added: sDiameter=]
• (f) MsgViewer: added decode as: SGsAP (for unknown SCTP packets) [INI setting added: sSGSAP=]
• (f) MsgViewer: S1AP Bitrate INTEGER type AVP-s displayed in units of bps, Kbps, Mbps, Gbps as needed

v4.82
• (n) MsgViewer: Find expression dialog: implemented "contains" and "not contains" search conditions for text matching
• (n) MsgViewer: Goto message implemented
• (n) MsgViewer: IPv4/6, TCP, SCTP reassembly from message number display implemented
• (f) MsgViewer: SCTP data fragment displayed instead of unknown protocol
• (f) MsgViewer: Progress dialog message added: Save Text: "Processing steps", others: "Messages"
• (f) MsgViewer: added S1AP Cause to column view (& search)
• (f) MsgViewer: added DTAP-EMM/ESM Cause to column view (& search)
• (f) MsgViewer: added TCP flags to column view (& search)
• (f) MsgViewer: added HTTP request/response fields: method, code, reason to column view (& search)
• (f) MsgViewer: added important HTTP fields to column view (& search)
• (f) MsgViewer: DNS header fields added to column view (& search)
• (f) DNS Query and Answer "Type, Name, IP Address" fields added to column view (& search)
• (f) PFCP cisco: Cisco peer version (245), Enterprise specific (32769, 33269) implemented
• (f) PFCP cisco: message types modified to 'PRIME ...'
• (f) PFCP: cisco specific timestamp decoding when header contains compression or Sx interface bits are /= 0
• (f) PFCP: UPI timer in seconds
• (f) LTE-RRC: full LTE-RRC ASN decoding added (36.331 Rel. 15)
• (f) RANAP/S1AP: Source to Target/Target to Source Transparentcontainer fix
• (f) Diameter: byte order fixed for various types (Charging-IDs, Secondary RAT Type, PC5-Radio-Technology, API-Direction, RDS-Indicator, Interworking-5GS-Indicator, Default-beader-indication, PS-data-off-status, PLMN-ID-requested, ROHC-full-header-periodicity, Charging-Per-IP-CAN-Session-Indicator)
• (f) RANAP: updated to release 15

v4.81
• (n) MsgViewer: Added PFCP uncompressed saving option to PCAP export
• (f) MsgViewer: INI: modified "sSaveAsMsg_TCPData" to "bSaveAsMsg_TCPData" (bool)
• (f) MsgViewer: INI: added "bSaveAsPCAP_PFCPDecompress" bool option
• (f) MsgViewer: Progress dialog message added: Save Text: "Processing steps", others: "Messages"
• (f) PFCP: header length check fix for zero sized messages

v4.80
• (f) SCCP: Encoding scheme odd/even fixed
• (f) HTTP: Response field display fixed
• (f) S1AP: Extension container ID values are equal to Protocol-IE ID field values
• (f) S1AP: Extended bit-rate fixed
• (f) Diameter: Command E flag fixed
• (f) MsgViewer: Split view SCTP display in fragmented IP packets fixed
• (f) MsgViewer: added missing field values to 'All' view
• (f) MsgViewer: DTAP EMM/ESM: Cause added to column view

v4.79
• (f) PFCP/Cups Cisco updates according to latest documentation and traffic samples
• (f) PFCP/Cups IMSI,MSISDN,IMEI in Sub info and NSH-Info decoded as text
• (f) PFCP/Cups Sub Params fixes
• (f) PFCP/Cups Sub params/Session Id decoded as decimal
• (f) MsgViewer: MsgDetails jump to protocol: added PFCP, RTP, RTCP
• (f) MsgViewer: PFCP: added "Network Instance" field as "apn" to column-view
• (f) Diameter: Access-Restriction-Data decoded
• (n) MsgViewer: Application signed with "Aitia International ZRt's certification key issued by Digicert

v4.78
• (f) MsgViewer: "Save item content to a text file..." context sensitive menu initialization bug fixed

v4.77
• (f) S1AP updated to rel. 15.10
• (f) PFCP/Cups Cisco updates according to latest documentation received
• (n) Decode ALL As... added: try to decode all packets as given
• (f) Decode as RTCP removed, RTP/RTCP heuristics added according to 2nd octet (packet type)
• (f) INI: sRTCP removed, merged with sRTP (see above)
• (f) RTCP Receiver Summary Information decoded (RFC 5760)
• (f) RTCP sub-report data decoded
• (f) REDMINE #1064 : Include all fragments when saving reassembled IPv4/IPv6, and SCTP packets; save reassembled data when saving "Split SCTP" packets
• (f) REDMINE #1082 : Tuple trace now works on pseudo-header packets too
• (f) RTP NTP timestamp 64 bit display
• (f) NTP fraction lost: value/256
• (f) MsgViewer: Decode * as moved to sub-menus
• (b) MsgViewer: RTP/RTCP parameters added to column view
• (n) MsgViewer: SIP text line split on ',' character for: History info, Diversion
• (n) MsgViewer: "Save item content to a text file..." added, save text into file for: SIP, SDP, XML, HTTP

v4.76
• (f) SMS decoder updated to Release 15, TP-User-Data decoding fixed
• (f) SGsAP updated to Release 16
• (f) PFCP/Cups Cisco updates (in progress...)
• (f) DTAP-SMS/SMRP decoder: RP-ACK, RP-ERROR user data field decoding fixed; SMS-DELIVER-REPORT in RP-ACK and RP-ERROR fix
• (n) MsgViewer: Shift + Mouse1 for range-select (Ctrl + Mouse1 for single select add as usual)
• (f) DNS decoder updated: type 28, 33, 35 added
• (f) TCP trace: fragmented IP packets are added too
• (f) Tuple trace: fragmented IP packets are added too (address bug fix)
• (n) Save TCP content with pseudo-header added
• (n) TCP trace: heuristics added to trace from TCP packets not containing data
• (f) TCP data-protocol discovery fix after SYN packet
• (n) VLAN Id support added to IPAddrNames list (port number: VLANId*1000000 + PortNumber)
• (f) LTE_cellnames.csv renamed to LTEcellnames.csv (conform with CDRViewer)
• (n) MsgViewer: VLAN Id field added to column-view
• (b) MsgViewer: Added delta time "Elapsed first", "Elapsed last" fields to column-view
• (n) MsgViewer: SGSAP E-CGI added to main window column-view
• (n) MsgViewer: SCCP/SLR DLR added to BSSAP view
• (f) MsgViewer: GTP-1C,GTP-2C - ULI: CGI/ECGI added to main window column-view
• (f) MsgViewer: S1AP ECGI printout fixed
• (f) MsgViewer: Diameter CGI/ECGI added to main window column-view
• (f) MsgViewer: BSSMAP CGI added to main window column-view
• (f) MsgViewer: BSSGP ECGI added to main window column-view
• (f) MsgViewer: RANAP CGI added to main window column-view
• (f) MsgViewer: LCSAP ECGI added to main window column-view
• (f) MsgViewer: LPPA ECGI added to main window column-view
• (f) MsgViewer: MAP13 CGI/ECGI added to main window column-view
• (f) MsgViewer: BSSMAP/ Cell Identifier List IE added to ECGI main window column-view
• (f) MsgViewer: main window column-view ECGI printout leading 0-s eliminated
• (f) MsgViewer: GTP1-C/U seqnum, TEID main window column-view fixes
• (f) GTP1C End user address -> IP user address extracted
• (f) GTP2C PDN Address Allocation -> IP user address extracted
• (f) SIP CI-trace: only works for first CI found
• (f) GTP2-C: SNTP_TIME type fixed to 4 bytes length (fe. in Secondary RAT type)
• (f) BAT-ASE: Codec-list end-separator text, and selected codec text added

v4.75
• (n) DTAP: UE network capability bitfield fix
• (n) new TCP assembler algorithm added: out of order segments are now handled, overlapping segments are now handled
• (n) PFCP: Cisco CUPS compressed messages: on the fly gzip decompression added
• (f) PFCP: Cisco fixes, grouped IE-s handled
• (f) Diameter/XML: CDATA section decoding added, comments are not tabbed in
• (f) Diameter: RAI MCC/MNC/LAC/RAC text-mode printout
• (f) Diameter: RAT-Type, Bandwith parameter, Feature-List (S6a/S6d-type2) bitfield fix (see. #1004)
• (f) CGF-CDR: DataVolume, bitrate types fix
• (f) GTP: v1-C Cause fix, v1-U: SCI fix
• (f) RANAP: information-nonce fixes, macroENB-Id fix
• (f) PCAP file writer: "No frames could be written to PCAP file!", and "Some frames could not be written to PCAP file!" warning messages added
• (f) PCAP writer: SCTP sub-messages are accounted in "Some frames could not be written to PCAP file"
• (n) MsgViewer: SIP decoding errors are shown on main window with purple coloring (+new ini option: bColorSIPMsgErrors)
• (n) MsgViewer: SIP ICID with CID trace function added
• (n) MsgViewer: GTP NSAPI added to column view
• (n) MsgViewer: Diameter command flags added to column view
• (f) MsgViewer: GTP NSAPI, 20bit MCC/MNC displayed numerically, EPS Bearer Id added to column view
• (n) MsgViewer: PFCP protocol values added to column view (msgtype, sn, seid(s), IP(s), cause, IMSI, IMEI, MSISDN, NAI)
• (n) MsgViewer: S1AP EUTRAN-CGI, E-RAB-ID values added to column view
• (n) MsgViewer: original TMSI values added for 3G/4G to column view
• (n) MsgViewer: SIP CID and ICID with CID trace now works for selected, marked packets too

v4.74
• (n) GTP prime (GTP') protocol decoder added
• (n) CGF-CDR: update to release 15
• (f) IP reassembler: duplicated packet handling fixes
• (f) SCTP reassembler reworked: reassembly from unordered packets implemented
• (f) Diameter: Extended-...-BW-... metric is [kbps]
• (f) Fixes for #993, #996
• (f) SNTP (NTP) Time displays null point is now the epoch (1970.01.01) [#998 Gx CDR Revalidation-Time]
• (f) DecodeAs UDP: GTP-prime protocol added (no dedicated port for service)
• (f) DecodeAs TCP: HTTP reassembled packets display fix
• (n) MsgViewer: Custom column width added to view menu, and ini file (toggle with Alt+C, dialog with Alt+Shift+C)
• (f) m2pa protocol added to SgaFile protocols (split save msg fix)
• (f) MsgViewer: CGF-CDR IMSI, IMEI, MSISDN added to the corresponding GTP fileds in main window colum view
• (f) MsgViewer: GTP' Sequence number, MessageType, Cause, Packet Transfer command added to the corresponding GTP fileds in main window colum view

v4.73
• (n) IPv4/IPv6 packet reassembler function added
• (n) SCCP: DT1 and DT2 message reassembly implemented similar to XUDT
• (f) TCP reassembler: reassembly restarted after RST - SYN
• (f) TCAP OOID check fixed (INAP/MAP heuristics)
• (f) XML decoding fix: added support for <.../> tag
• (f) Diameter: User-Equipment-Info-Value (MAC) : decoded as ASCII text (RFC 4006)
• (f) DTAP: EPS network feature support fix (bug #989)
• (f) CAP4: tPValidityPeriod fixed
• (f) RANAP: UP-ModeVersions decoded
• (f) RRC: start-CS decoded
• (f) MsgViewer: details + search window position override when window is out of screen
• (f) MsgViewer: IMEI added to main window view for INAP
• (f) MsgViewer: "Reassemble SCCP/XUDT user data" option name change
• (f) MsgViewer: bReassSCCP_XUDT flag added to ini file (bReassXUDT flag deprecated)

v4.72
• (n) M2PA protocol added: RFC 4165
• (n) PFCP Rel 15. protocol added
• (n) Diameter: Huawei + Comcast new AVP-s added
• (n) Case sensitive/Non-sensitive text-search dialog option added
• (n) LTE-RRC message updates (partial Release 15 upd.)
• (f) GTPv2-C: Cause decoding non-standard modification to display offending IE content
• (f) GTPv2-C: Complete Request Message: message data decoded as DTAP
• (f) GTPv1-C: added IPv4v6 type (IPv4 + IPv6 addresses)
• (f) SIP: changed XML decoding to reconstruct new-line and tab intends
• (f) DTAP: Traffic Flow Template implemented (introduced new [SCNT] type for counted REP ... ENDREP)
• (f) DTAP-CC, DTAP-SM: extended Transaction ID implemented in header
• (f) GTPv1-C: End user address, Extended RANAP cause, PDP context fixes
• (f) GTPv2-C: FQ-CSID, CIoT Optimizations Support Indication fixes
• (f) MAP1e: Absentsubscriber mwd-Set type fix
• (n) MsgViewer: 'TCP Sequence Number', 'TCP Acknowledged Number', and 'TCP Payload Length' new field values added
• (f) BSSGP updated to Rel. 15.0.0
• (f) DTAP Rel 15. update
• (f) BSSMAP Rel 15. update
• (f) GTP2-c Rel 15. update
• (f) S1AP Rel 15. update
• (f) LLC Rel 15. update
• (f) Diameter Rel 15. update
• (f) Diameter: Experimental-Result-Code (3GPP) enum values added to Experimental-Result-Code AVP
• (f) ISUP: added Generic number IE to display in columns view
• (f) SCTP: pad CHUNK-type added
• (f) INAP/NAP heuristics added
• (f) MsgViewer: Diameter: hop-by-hop-id added to custom column display
• (f) MsgViewer: invisible long-line ending bug fixed in detailed view
• (f) Port-based heuristics added to fill out pseudo-header with unknown protocol-id (0) for SCTP, TCP and UDP protocols

v4.71
• (n) RTP protocol added: RFC 1889
• (n) RTCP protocol added: RFC 2550
• (n) HTTP protocol added: RFC 2616
• (n) RTP/RTCP decoding if Link Id contains the string "RTP" (even port number = RTP, otherwise RTCP)
• (n) Decode as.. selectable function for unknown UDP, TCP service ports
• (n) binary Debuginfo, DebuginfoExt protocols added
• (n) LCS-AP: updated to Release 13 (TS 29.171: 13.3.0)
• (n) New trace type: by tuple (IP flow)
• (n) NAS Security info SGA-TAG added (flagword)
• (n) LTE_CellNames.csv lookup implemented, and ECI type added
• (n) Coloring by column implemented
• (n) Coloring by selection implemented
• (f) CellNames.csv (table): last 'Name' filed loaded as-is (all columns in one)
• (f) PCAP file export: ethernet fake header for IPv6 fixed
• (n) PCAP file export: recounstruct Eth/IPv4/IPv6, and Layer4 headers from SGA pseudo header
• (f) GTP-2C missing column fields added for TEID processing
• (f) TSN column writeout fix when not last fragment
• (f) MAP/TCAP: originationreference MSISDN removed from column view
• (f) Message details: GTP2-C: Target Identification optional Home eNodeB ID added, F-Container fixed
• (n) Message details: BSSMAP: multiple missing field's decoding added (LCS fields)
• (f) Message details: BSSAP-LE: added missing GANSS fields
• (f) Message details: Diameter: Charging rule name decoded as UTF8 Text
• (f) Message details: S1AP: NASSecurityParameters(fromE-UTRAN, toE-UTRAN) decoding added
• (n) Message values and details: SIP: SMS application type and decoding added

v4.70
• (n) GTP2-C: updated to Release 13 (TS 29.274: 13.12.0, TS 29.280: 13.0.0)
• (n) GTP1-C: updated to Release 13 (13.7.0)
• (n) GTP1-U: updated to Release 13 (13.3.0)
• (n) DIAMETER missing messages added from: RFC 5580, RFC 5778, RFC 7683, RFC 7944 (DRP)
• (n) DIAMETER/EAP messages implemented: RFC 4072, RFC 3748, RFC 4187 (EAP-AKA)
• (f) PCAP export: IPv4/IPv6 packet export fixed
• (f) MAP3E: APNDataList APN's are decoded as Text
• (n) GTP1-C/GTP2-C: 'version not supported' added to messages
• (f) Message details: DTAP: Extended DRX parameters fixed
• (n) Message details: DTAP: UE Network capability structure additions
• (f) Message details: DTAP (LB): PDN Address IP6 prefix decoding changed to IP6 ifid
• (f) Message details: DIAMETER (LB): Framed-IPv6-Prefix value fixed
• (f) Message details: DIAMETER: MIP6-Feature-Vector 64 bit enum values added
• (n) Message values and details: S1AP: multiple missing field's decoding added
• (n) Message values and details: S1AP: RIM information PDU displayed according to BSSGP decoder
• (n) Message values and details: BSSGP: RIM routing information decoding added (according to Rel.13)

v4.68
• (n) BSSMAP, DTAP decoders: updated to Release 13 (13.11.0)
• (n) DIAMETER decoder: partially updated to Release 13 (13.9.0)
• (n) S1AP decoder: partially updated to Release 13 (13.6.0)
• (n) Partial L2TP protocol support added (only data packets are decoded for now)
• (n) PPP protocol fix: HDLC pseudo hdr
• (f) Message details: GTP1-C decoder: added MS Info Change Reporting Action, and Bearer Control Mode
• (f) ICMP decoding expanded, IPv4/IPv6 is decoded inside ICMP4.type=3 and ICMPv6.type=1 messages
• (n) Message values: new values: Physical Layer / 'Signal Unit Date & Time (hi-res)' and 'Signal Unit Date & Time (hi-res, UTC)'
• (n) Message values and details: IPv6 addresses are displayed in canonical form.
• (n) Message values and details: Diameter / 'Framed-IPv6-Prefix' and GTP2-C / 'PDN Address' are displayed using the standard 'ipv6-address/prefix-length' notation.
• (c) Message details: GTP2-C and DTAP-ESM PDN address field names more verbose.
• (f) Message details: GTP decoders: 'Private Extension' parameter was not decoded.
• (f) Message details: Diameter decoder: Most of the Vendor ID values were not interpreted.

v4.66
• (c) SIP and MIME decoder: contents with type 'message/sip' and 'message/sipfrag' are also decoded.
• (n) SIPFRAG decoder added.
• (n) Handling of special SGA file tags updated (PseudoIP6Header tag displayed, PseudoIPXHeader tags / PayloadLength field displayed, expanded SCTPMsgInfo tag displayed).
• (n) A simple SCTP reassembler added.
• (n) SCTP decoder: Messages with unknown protocols are also displayed.
• (n) Save as binary: Saved SCTP split parts contain info about IP addresses and SCTP ports.
• (n) Save as binary: SCTP split parts can also be saved from a non-SGA message file.
• (n) Save as text: value lines point to the corresponding message details when 'Save as type' is 'Web page' and 'Detail level' is 'First message values then details'.
• (f) Save as text: Some of the HTML tags were closed incorrectly when 'Save as type' was set to 'Web page'.
• (n) TCP decoder: Invalid carried SIP messages are recognized more robustly.
• (n) TCP and STCP decoders: Invalid carried Diameter messages are recognized more robustly.
• (n) Message values: GTP / 'IP-C Address Name' and 'IP-U Address Name' added.
• (f) Message values: GTP / 'IP-C' and 'TEI-C Misc' were not set for SRVCC messages.
• (f) Message values: SIP / 'Request URI', 'Request URI User', 'Request URI Host', 'From URI', 'From Tag', 'To URI', 'To Tag', 'Route URI', 'Contact URI', 'Contact URI SIPAppSessionID', 'Call-ID' and 'IMS Charging ID' were displayed in lowercase.
• (f) Message values: SCTP / TSN, SI, SSN values were not displayed for non-first data fragments.
• (c) Message values: 'Protocol Hierarchy': protocol name is omitted when decoding a protocol parameter only.
• (c) Message details: 'XXX PARAMETER' text appears instead of 'XXX DECODER' when decoding a protocol parameter only.
• (f) Message details: DTAP decoder: Erroneous warning message for older releases of the 'Mobile station classmark 3' parameter.
• (f) Message details: GTP1-C decoder: The first extension header was decoded only.
• (f) Message details: GTP1-C decoder: 'STN-SR' and 'C-MSISDN' parameters were not decoded.
• (f) Message details: GTP2-C decoder: 'MM Context for E-UTRAN (v)SRVCC' parameter was not decoded fully.
• (f) Message details: GTP2-C decoder: 'Target Identification' parameter was not decoded when 'Target type' was 'RNC ID'.
• (f) Message details: Diameter decoder: 'STN-SR' and 'EUTRAN-Positioning-Data' AVPs were not decoded.
• (f) Message details: Diameter decoder: 'LCS-Priority', 'Horizontal-Accuracy' and 'Vertical-Accuracy' AVPs were not interpreted in detail.
• (f) Message details: Diameter decoder: 'Supported-GAD-Shapes' AVP was decoded incorrectly.
• (f) Message details: LCS-AP decoder: 'horizontal-Accuracy' and 'vertical-Accuracy' values were not interpreted.
• (f) Message details: ISUP decoder: 'Redirect capability' parameter was not decoded.
• (f) Message details: SCCP decoder: 'Importance' parameter was not decoded.
• (f) Message details: SCTP decoder: 'Payload protocol identifier' field values 46 and 47 were not interpreted.
• (f) Message details: MAP decoder: 'PermittedIntegrityProtectionAlgorithms', 'PermittedEncryptionAlgorithms', 'IntegrityProtectionInformation' and 'EncryptionInformation' types were not decoded.
• (f) Message details: SIP decoder: No error message was displayed when the 'Content-Type' message-header field was missing.
• (f) Message details: Value octets were not displayed at the bit-by-bit details for undecoded parameters.
• (n) Message details: Value octets are not displayed at the bit-by-bit details if there is no bit-wise information available and the 'Show parameter/ASN.1 value octets' option is turned on.
• (f) Message details: Unknown SGA file tags were displayed in one line.
• (c) Message sequence chart: SGA items are transferred sorted to the drawer.
• (c) Message sequence chart: Message details are also passed to the drawer.
• (c) Message sequence chart: 10 sequence charts can be created concurrently.
• (c) Command line options /S and /s do not hinder the program from exiting when a load error has occurred.
• (n) IPv6 addresses can be specified using dots instead of colons (e.g. "..1") in the IPAddrNames2.csv file.

v4.63
• (n) Message details: Diameter decoder: 'Cause-Code' AVP interpreted.
• (n) Message details: Diameter decoder: 'SIP-Request-Timestamp' and 'SIP-Response-Timestamp' AVPs: both old and new formats are decoded.
• (n) Message detail options: New option: 'Show ASN.1 tag extra type info'.
• (c) SCTP decoder: Payloads with unknown ports and PayloadProtID >= 100 are also considered to be decoded as Diameter.
• (c) SCTP decoder: port numbers 3869 and 3870 are no longer interpreted as Diameter.
• (f) Diameter decoder: 3GPP Experimental-Result-Code enum values were not updated to Release 11.
• (n) Diameter decoder: Time values are displayed with their full AVP names.
• (f) Message details: GTP2-C decoder: 'ULI Timestamp' parameter was not decoded.

v4.61
• (n) Diameter decoder extended with 3GPP TS 29.229, 29.329, 29.214 and 29.273.
• (n) Diameter decoder updated to Release 11.
• (n) Timestamp item is handled.
• (n) Handling of special SGA file tags updated (IP4AddrAndPorts tag / bySCTPDataOrd field removed, IP6AddrAndPorts and SCTPMsgInfo tag displayed, MsgFragmentsInfo2 tag depricated).
• (n) Search process can be stopped without losing the results; Number of items found are also displayed during the search.
• (c) XUDT Reassembler: Length of reassembled data can be larger than that allowed by the standard.
• (n) SCTP decoder: Payloads with unknown protocol are decoded as Diameter.
• (n) Message details: "field bits continue on next line" notificiation added.
• (n) Message details: TCP decoder: NS, CWR and ECE header fields added.
• (f) Message details: GTP2-C decoder: the last 2 octets of the 'Indication Flags' parameter were not decoded.
• (f) Message details: Diameter decoder: 'MIP-Home-Agent-Host', 'Content-Length', 'SIP-Request-Timestamp', 'SIP-Response-Timestamp' AVPs were decoded incorrectly.
• (f) Message details: Too many octets were displayed for SIP and Diameter messages carried by TCP when the segment contained multiple messages.
• (c) Message details: DTAP-SM 'Message type' interpretation: comma characters replaced.
• (c) Message details: Cause interpretations: comma characters replaced.

v4.60
• (n) BSSMAP, DTAP decoders: updated to Release 11.
• (n) GTPv0, GTPv1-C, GTPv2-C decoders: updated to the latest versions of Release 11.
• (n) Diameter decoder: AVP's from ETSI and Huawei vendors added.
• (f) Diameter decoder: 'User-Equipment-Info-Value' parameter was not decoded.
• (f) IPv6 decoder: not all extension headers were handled correctly.
• (n) IPv4 and IPv6 decoders: not encrypted ESP content is decoded.
• (n) IP-tunneled IP messages decoded.
• (n) Partial ICMPv6, PPPoE and PPP decoders added.
• (n) New item 'Create message sequence chart' added to the 'Tools' menu.
• (n) The new IPAddrNames2.csv file format is handled.
• (c) IPAddrNames2.csv, SigPointNames.csv, CellNames.csv, SANames.csv: the name string must be enclosed in quotes if it contains comma.
• (n) IPv6 addresses can be specified in short form (e.g. "::1") in the IPAddrNames2.csv file.
• (c) INI file: sDATFileIPAddrNames2 entry name used instead of sDATFileIPAddrNames in the [Advanced] section.
• (f) MAP,INAP decoders: operationCode was displayed as a negative number in certain cases.
• (c) IPv6 decoder: IP address is now displayed in lower case.
• (f) Message details: ASN.1 BER decoder did not indicate if the length of an item could not be determined.
• (f) Message details: ASN.1 BER decoder did not display the End-of-contents tag in some cases if its length was missing.
• (f) Message details: 'Supported Codec List' fields in the DTAP MM Context parameters were decoded in the wrong bit-order.
• (f) Message details: GTP1-C decoder: the 'Target Identification' parameter was not decoded.
• (f) Message details: TCP decoder: 'time stamp' and 'window scale' options were not decoded.
• (c) Message details: IP/'Protocol' and TCP/'Option kind' field interpretations simplified.
• (n) Message details: IP and TCP decoders: Certain fields are grouped for better readability.
• (n) Message details: TCP decoder: Informational line appears when decoding carried protocol from reassembled data.
• (f) Message details: Diameter decoder: 'Framed-IPv6-Prefix' parameter was decoded incorrectly.

v4.58
• (n) GTPv2-C decoder: Sv interface messages added
• (f) Diameter decoder: Application ID 16777238 was not recognized as Gx when decoding the Feature-List AVP
• (f) Message details: MAP,SS decoders: USSD hiding produced strange characters for string encoded in UCS2
• (n) Handling of special SGA file tags updated (IP4AddrAndPorts tag / bySCTPDataOrd field displayed)
• (f) Message details: GTP decoders: Undecoded octets were not displayed when the message type was unknown
• (f) Message details: GTP decoders: TS and version numbers were incorrect
• (f) Message details: DTAP-ESM decoder: PDN address / Interface identifier field was not decoded
• (f) Message details: MAP decoder: Accuracy parameters were decoded incorrectly
• (n) Message values: GTP / 'Message Type': GTP version number is prepended to the message type string
• (n) Message values: GTP / 'Cause' and 'SRVCC Cause' added
• (f) Executable used SSE2 instruction set which was not available on older processors

v4.57
• (c) Handling of special SGA file tags updated (MsgFragmentsInfo3 tag accepted)

v4.56
• (f) Message details: Diameter decoder: RFC 7155 AVP's were not decoded
• (f) Message details: Diameter decoder: Feature-List AVP was not decoded correctly
• (c) Message details: MAP decoder: 'SS-Code' value interpretations more legible
• (n) Message values: The last view (#12) now contains all possible protocol values in the default views
• (n) Message values: New menu option: View/'Reset current view'

v4.55
• (n) LCS-AP and LPPa decoders added
• (n) MAP decoder: updated to Release 10
• (n) Diameter decoder extended with 3GPP TS 29.172 and 29.173
• (n) Message details: Diameter decoder: 3GPP-Session-Stop-Indicator and 3GPP-Teardown-Indicator AVP's added
• (n) Message details: Diameter decoder: More OctetsString AVP's decoded
• (n) Message details: More information in the text above the buttons
• (f) Message details: ASN.1 BER tag tab position was not always correct
• (f) Message details: ASN.1 error messages are indented at the first tab position
• (n) Message detail options: New option: 'Show ASN.1 value octets'
• (f) Message details: MAP,SS decoders: filler bits were also overwritten when hiding ussd-string
• (c) Message details: S1AP decoder: 'Correlation-ID' field 'TEID/GRE key' is now displayed in big-endian byte order
• (c) Message details: S1AP decoder: 'CellIdentity' field renamed as 'ECI'
• (c) Message details: S1AP decoder: 'e-RABlevelQoSParameters' tag case unified with 'e-RABLevelQoSParameters'
• (c) Message details: DTAP-RR decoder: 'Cell Identity' field 'CI value' renamed as 'CI' and is displayed in decimal as well
• (n) Message details: RANAP decoder: geographical shape values are interpreted
• (f) Message details: M2UA decoder: the case of message type value interpretations unified
• (n) Message details: LLC and DTAP-EMM decoders: decrypted messages are decoded without a WARNING message
• (n) Message details: SCTP decoder: Chunk flags are shown for all parameter types

v4.54
• (n) Diameter decoder: 3GPP TS 29.230 is used
• (c) Diameter decoder: Release 8 AVP 'Requesting-Node-Type' is decoded again
• (n) S1AP decoder: updated to Release 10
• (n) DTAP-EMM,ESM decoders: updated to Release 10
• (f) Message details: syntax error corrected: the word 'mesage' appeared in some error messages
• (n) Message details: Diameter decoder: Vendor ID is also shown when the AVP type is unknown
• (n) Message values: new value for Diameter: Experimental-Result-Code

v4.52
• (n) Deciphered messages are always decoded
• (c) Handling of special SGA file tags updated
• (n) TCP and UDP checksums are verified if IP address info is stored with the message
• (f) Message details: TCP and UDP checksum verification was incorrect in some cases

v4.50
• (n) The program can use more memory on 64-bit platforms (Large Address Aware option enabled)
• (n) SGA files containing bare SIP messages are handled
• (n) SGA files containing special tags for IP and TCP reassembled messages are handled
• (n) Message values: new values for SIP: From Tag, To Tag, IMS Charging ID
• (n) Search expression can contain backslash for quoting wildcard characters
• (f) Main window: Scrolling with the mouse wheel did no move the vertical scroll bar
• (c) TCP reassembly: Diameter messages are validated more rigorously when carried over unknown ports
• (n) CAP,INAP decoders: ExtensionField value decoded as IMSI if type = 26
• (n) MAP decoder: Ericsson private extension UpdateDeviceConfigurationData decoded
• (c) SCCP decoder: CadPN/SSN == 12 is interpreted as INAP by default
• (c) SCTP decoder: port numbers 3869 and 3870 are interpreted as Diameter
• (f) Message details: SCTP decoder: warning text if message length is not a multiple of 4 bytes
• (n) Diameter decoder: updated to Release 10
• (n) Message details: Diameter decoder: Experimental-Result-Code value is interpreted
• (n) Message details: Diameter decoder: Feature-List bits are interpreted
• (n) Diameter decoder: AITIA vendor specific AVP's are decoded
• (f) Message details: IP decoder: undecoded bytes after the payload were not displayed
• (c) Message details: Parameter type and length values are displayed in decimal base

v4.45
• (n) M2UA decoder added
• (n) Context menu for the main window: new menu item for saving current item into a message file
• (n) Context menu for the main window: the menu can be activated via the menu key as well
• (n) Message values: new value for ISUP: Connected Number
• (n) Message values: new value: Physical Layer / File Position
• (f) Message values: DTAP-SM / QoS Max/Guaranteed Bit Rates: displayed values were incorrect above 16 Mbps
• (c) Message values: BSSLAP, BSSMAP, DTAP, SMS / Message Type: no text is displayed for reserved values
• (c) Message values: TCAP / originationReference and MAP / storedMSISDN parameters are displayed as MAP / MSISDN
• (f) Message details: Diameter decoder: the 'DSR-Flags' parameter was decoded incorrectly
• (f) Message details: Diameter decoder: the 'Re-Synchronization-Info' was not decoded
• (f) Message details: Diameter decoder: an extra error message was displayed when the next AVP was longer than the available space
• (n) Message details: MAP, DTAP, GTP, Diameter decoders: AUTN, AUTS parameters are detailed
• (f) Message details: DTAP decoder: spelling corrected in the interpretation of the 'Mobile station classmark 2' parameter ('extention band' -> 'extension band')
• (f) Message details: IUA decoder: the 'Status' and 'Error Code' parameters were decoded incorrectly
• (f) Message details: ICMP, IPCP, GTPv0, IUA, M3UA, BSSLAP, BSSMAP, DTAP, SMRP decoders: the case of message type value interpretations unified
• (c) Message details: DTAP-GMM,DTAP-SM decoders: the acronyms of the message types are not displayed
• (c) Message details: S1AP decoder: e-UTRAN-Trace-ID could not be decoded
• (f) Message details: some non-acronym value interpretations began with uppercase letters
• (f) XUDT reassembly did not work when M3UA+SCCP was carried by SCTP
• (f) ASN.1 PER decoder crashed when decoding certain irregular messages
• (f) Main window: first item became not invisible when a second item was loaded later if AutoScroll was on

v4.43
• (n) Message values: new values for INAP: Event Type BCSM, Called Party BCD Number
• (n) Message values: new value for IPv4: Identification
• (n) Message values: new value for GTPv2: M-TMSI
• (n) Message values: GTPv0 / Tunnel ID / IMSI is displayed as GTP / IMSI
• (n) Message values: GTPv0 / header Flow Label is displayed only for the messages where it is used
• (n) Message values: GTPv1 / header TEID is displayed only if it is non-zero
• (n) Message values: INAP / destinationRoutingAddress parameter is displayed as INAP / Called Party Number
• (n) Message values: TCAP / destinationReference parameter is displayed as MAP / IMSI or MSISDN
• (c) Message values: ISUP, INAP: the "[noa]" prefix removed from the short names of values with NoA
• (c) Message values: DTAP-ESM / APN added as DTAP-SM / APN
• (c) Message values: S1AP / ENB-UE-S1AP-ID, MME-UE-S1AP-ID column names made shorter
• (f) Message values: GTP / 'Message Type' value was displayed when it was not displayed in the message details
• (n) Message details: An error message is displayed if the indicated length of an IE or a data structure is longer than the available space
• (f) Message details: INAP decoder: not all EventTypeBCSM values were interpreted
• (c) Message details: GTP0 decoder: the IMSI and the NSAP in the Tunnel ID are displayed more verbosely
• (c) Message details: ISUP decoder: Cause value 14 is interpreted
• (c) Message details: Length error messages made more uniform
• (f) Program hung when decoding certain SDP messages
• (f) SIP decoder: when the Content-Length was greater than the available data length then false protocols appeared in the main window

v4.39
• (n) Message details: DTAP-GMM and EMM decoders: original GUTI, RAI, P-TMSI are displayed for mapped values
• (c) SCTP decoder: method for determining the carried protocol changed
• (f) Message values and details: BSSGP decoder: the message direction indication was incorrect for RAN-INFORMATION messages

v4.36
• (f) Message details: MAP decoder: some tags and enums were not fully decoded
• (c) Message values: DTAP-ESM, GTP decoders: changed the 'ctxt' abbreviation to 'ctx'

v4.35
• (n) Large message files are loaded in the background
• (n) Save and trace operations are interruptible
• (f) While a text or expression search was running other operations could be started as well which could result in malfunction
• (n) E2e thruput plot window position is saved in absolute desktop coordinates supporting multiple-display environment as well
• (n) The Message details and the E2e thruput plot windows can be minimized
• (n) Save messages into a message file: file path and user selections are saved to INI
• (n) Save decoded messages into a text file: file path and user selections are saved to INI
• (n) Save as text: message details can be saved without values
• (n) Save as text: the value of the 'Detail level' is also saved to INI
• (f) Save as text: a word was misspelled in the 'Save as type' list
• (c) Save as text: more compact phrases in the 'Detail level' list
• (c) Save dialogs: 'Range' is always 'All the messages' when no items are selected or marked
• (c) Save as text: long value names are written into the header line when the file type is CSV or Plain text with tabs
• (f) Save as text: CSV output had an extra comma at the end of each line
• (c) MAP decoder: Signaling info is decoded as DSS1 if ProtocolId == 4
• (c) Command line: the detail level character in the /s switch is now case sensitive
• (f) ASN.1 BER decoder: tag number was decoded erroneously in tags with more than 2 identifier octets
• (f) Message values: fake BSSMAP IMSI value could appear in certain DTAP-ESM messages
• (f) Message values: DTAP-EMM 'Mobile identity' parameter was not decoded
• (f) Message details: DTAP-EMM decoder: the 'Number of elements' field in the 'Tracking area identity list' parameter was decoded erroneously
• (f) Message details: GTP2-C decoder: the 'Number of quadruplets' field in the 'MM Context 6' parameter was decoded as 'Spare'
• (f) Message details: GTP1-C decoder: the 'Used cipher' field in the 'MM Context' parameter was decoded as 'Spare' in one case and vice versa in another

v4.30
• (n) Save IP contents as PCAP file: new option: 'Clear LLC Encryption flag in saved message'
• (n) Multiple-display environment supported
• (c) Save dialog windows: a newer and larger common dialog type is used now
• (n) Save as text: CSV formats added
• (c) INI file: INI file base name is now the same as the EXE file base name
• (n) File history: does not save files with TMP extension to history
• (n) LLC and DTAP-EMM decoders: encrypted messages are decoded only if the corresponding option is set
• (n) MPLS decoder added
• (n) GTP1-C decoder: upgraded to V11.8.0
• (n) GTP1-U decoder: upgraded to V11.6.0
• (n) GTP2-C decoder: upgraded to V11.8.0
• (f) Message values: IP address names did not show the IP address when it was not present in the IP address names CSV file
• (n) Message values: new value for LLC: Unconfirmed Sequence Number
• (n) Message values: new value for SNDCP: N-PDU Number
• (n) Message values: new values for Diameter: IMSI, Result-Code, Session-Id, Origin-Host, Origin-Realm, Destination-Host, Destination-Realm, Auth-Application-Id, Service-Context-Id, CC-Request-Type, CC-Request-Number
• (f) Message values: GTP TEI-U, TEI-C Misc and IP-C values were not consistent for all GTP2-C F-TEID interface types
• (f) Message values: GTP IP-C and IP-U values were not filled for the right GTP2-C parameter set
• (f) Message values: GTP TEI-U and IP-U values were not filled for GTP1-U 'Error Indication' messages
• (f) Message values: GTP TEI-U value was not filled for the GTP2C/'Tunnel Endpoint Identifier Data II' parameter
• (f) Message values: GTP TEI-C Misc, TEI-U, IP-C, IP-U, APN values were not filled for the GTP1C/'PDP Context' parameter
• (n) Message values: S1AP/M-TMSI value is now also filled with the M-TMSI in DTAP-EMM/'EPS mobile identity'/GUTI
• (c) Message details: some value interpretations changed slightly
• (n) Message details: DTAP decoder: parameters 'MS network capability' and 'MS Radio Access capability' updated according to 3GPP TS 24.008 V11.6.0
• (f) Message details: DTAP-GMM decoder: the 'Follow-on request' field in the 'Attach type' parameter in the 'Attach request' message was not decoded
• (f) Message details: GTP1-U decoder: Non-G-PDU message parameters were not decoded
• (f) Message details: GTP1-C decoder: 'Tunnel Endpoint Identifier Data II' parameter: 'SAPI' field name corrected to 'NSAPI'
• (f) Message details: GTP1-C decoder: 'MBMS UE Context' parameter: 'Linked SAPI' field name corrected to 'Linked NSAPI'
• (c) Message details: GTP1-C decoder: 'TEI' parameter renamed to 'TEID'
• (c) Message details: GTP1-C decoder: 2nd octet of 'MS Time Zone' parameter was decoded erroneously
• (c) Message details: X2AP decoder: 'GTP-TEI' parameter renamed to 'GTP TEID'
• (c) Message details: RANAP decoder: 'GTP tunnel endpoint identifier' parameter renamed to 'GTP TEID'
• (c) Message details: GTP1-C, S1AP, MAP decoders: TEID's are only displayed in hexadecimal format
• (n) Message details: GTP2-C decoder: 'MM Context', 'GUTI' and other parameters are now decoded; other minor changes
• (f) Message details: GTP decoder: message type name capitalization unified
• (f) Message details: MAP decoder: 'FQDN' OCTET STRING was decoded erroneously
• (n) Message details: TCAP, MAP, SS, CAP, ISUP decoders: degree and uncertanty values in geodetic location information are now interpreted
• (f) Message details: Diameter decoder: Unsigned64 parameters produced an INTERNAL ERROR message
• (f) Message details: Diameter decoder: 'Event-Timestamp' parameter was not detailed
• (n) Message details: Diameter decoder: Vendor ID 39991 (Aitia International Inc.) added
• (c) Message details: Unknown parameter type values are now displayed in hexadecimal format
• (f) GTP1 decoder: invalid extension header length could cause the program to hang
• (f) TCP decoder: carried messages sent from/to a well-known port are not decoded as SIP or Diameter any more
• (n) New hotkey: Shift+Esc minimizes the main window

v4.22
• (n) Security feature 'blank-on-idle' added
• (f) DTAP-EMM decoder: ciphered messages are not decoded any more
• (f) BSSGP decoder: empty 'LLC-PDU' parameter is not decoded any more
• (f) GTP1-C decoder: IE name was not decoded in some cases
• (f) Message details: GTP1-C decoder: the 'Charging Characteristics' parameter name was misspelled in the 'SGSN Context Response' message
• (f) Save as binary: the 'Whole message or split parts' saving mode did not always work correctly.

v4.20
• (n) SGsAP decoder added
• (n) MAP decoder: 3GPP TS 29.002 V9.8.0 (MAP V12) added
• (n) SS decoder: updated to 3GPP TS 24.080 V9.2.0 (SS V12)
• (c) IUA decoder: updated according to RFC 5133
• (n) Diameter decoder: also decoded when carried by TCP
• (n) Message values: new values for Diameter: User-Name, MSISDN, IMEI
• (n) Message values: new values for S1AP: ENB-UE-S1AP-ID, MME-UE-S1AP-ID
• (f) Message values: some values did not appear when the message was truncated
• (f) Message values: GTP/IMEI(SV) value was decoded incorrectly for GTPv2-C
• (f) Message values: GTP values was not decoded for GTPv0
• (c) Message values: incomplete message parameters are not decoded any more
• (c) Save as message file: option 'SCTP parts': first option removed, second option changed in meaning
• (n) Save as message file: only the necessary link names are stored in the output SGA file
• (f) Main window's item list: MTP messages with correct CRC were colored as if they were incorrect
• (f) Message details dialog window: default button was not always set correctly
• (c) Message details dialog window title: there is now a text "BSSGP/MsgDir:" before the BSSGP message direction
• (f) Message details: very long lines in the text window were wrapped and the hilight in the binary window was not according to the selection in the text window
• (c) Message details: non-printable CR, LF and TAB characters are now displayed as "\r", "\n" and "\t" in character strings
• (f) Message details: USSD text was displayed incorrectly
• (f) Message details: SMS decoder: TP-Address parameters were displayed incorrectly in some cases
• (f) Message details: DTAP-MM decoder: network name parameters: 'Spare' field name corrected to 'Filler'
• (c) Message details: DTAP-GMM decoder: the parameter 'Authentication parameter Response' is renamed as 'Authentication Response parameter' in the 'Authentication and Ciphering Response' message
• (f) Message details: Diameter decoder: AVP's of 'Address' type were decoded incorrectly
• (f) Message details: Diameter decoder: the 'End-to-end ID' header field was misspelled
• (f) Message details: GTP0 decoder: the 'Flow label' header field is now displayed in hexadecimal format as well
• (f) Message details: GTP2-C decoder: the 'User Location Information' parameter was decoded incorrectly in some cases
• (n) Message details: IP decoder: the 'Fragment offset' field value is now interpreted when the value is non-zero
• (c) Message details: SCTP decoder: the 'Initiate tag' field in INIT and INIT ACK parameters is now displayed in the same format as the 'Verification tag' field in the message header
• (c) Message details: M3UA and IUA decoders: Message Class is now displayed separately from Message Type
• (f) Message details: other minor text cosmetics
• (f) Message details: hides DTMF code in BAT-ASE messages (when required)
• (c) Message detail options: SMS protocol added to the list of 'Auto jump to protocol'
• (n) Find text dialog window: shortcut key assigned for the 'Find what' edit text
• (f) Message file loading: long TCP streams could make loading very slow when the 'Reassemble TCP stream' option was checked
• (c) Menu 'Edit/Copy': added 'Copy marked/selected/current line(s)' item and assigned the 'Ctrl+C' and 'Ctrl+Ins' hot key combinations for this new item

v4.18
• (n) Save IP contents as PCAP file: can save from various IP layers; message range can be selected

v4.16
• (f) Message values: the GTP/IMEISV value was decoded incorrectly for GTPv1-C

v4.15
• (f) Message details: GCP decoder: the property value containing the PLMN Bearer Capability in the 'Circuit Switched Data' package was not decoded correctly
• (n) Message details: GCP decoder: packages 'IP transport' and 'Flexible Tone Generator' added
• (f) Message details: RANAP decoder: the transportLayerAddress value was not interpreted
• (n) Message details: RANAP decoder: the lower part of the BindingID value is now decoded separately as well

v4.13
• (n) Main window's item list: block of values can be selected and copied
• (n) Message details: the ListBox control has been replaced by a RichEdit control to enable precise text selection and copy operations
• (f) Message details: BSSMAP decoder: the 'Layer 3 Message Contents' parameter was not decoded correctly

v4.12
• (f) Message details: certain types of undecoded fields could cause the program to crash

v4.11
• (n) GTPv0 decoder completed
• (n) The File/'Associate program with message files' function now displays a warning message box if the registry could not be written
• (n) Message details: DTAP decoder: 'Mobile station classmark 3' parameter updated to Release 9
• (f) Message details: SCCP decoder: if Called/Calling Party Address GT Indicator was 3 (GT=TT+NP+ES) then the GT was not decoded correctly
• (f) Message details: M3UA decoder: the 'Status' parameter was not decoded correctly
• (f) Message details: M3UA decoder: 'Routing Key', 'Registration Result', 'Deregistration Result' parameters was not decoded
• (f) Message details: GTP1-C decoder: 'PDP Context' parameter: the field 'Sequence number up' was written as 'Sequence number down'
• (f) Message details: GTP1-C decoder: 'MM Context' parameter: the 'Used cipher' field was not interpreted; the mobile identity was decoded incorrectly
• (f) Message details: GTP2-C decoder: 'Aggregate Maximum Bit Rate' parameter: the field values were decoded incorrectly
• (f) UDP decoder: If the message was from a GbOverIP link then the data of the second UDP layer was also decoded as GPRS-NS

v4.10
• (n) Ethernet decoder: VLAN tags are now decoded
• (n) DTAP-SM, GTP1-C, GTP2-C decoders: 'Protocol configuration options' parameter: IPCP protocol data is now decoded
• (f) DTAP-ESM decoder: 'Protocol configuration options' parameter: IPCP protocol data was not always decoded
• (n) DTAP-SM decoder: 'Protocol configuration options' parameter: IPCP protocol data was not always decoded
• (n) Message values: DTAP-SM / 'QoS Max Bit Rate (UL)' and 'QoS Guaranteed Bit Rate (UL)' values: the extended bit rate values are also decoded
• (n) Message values: new values for SCCP: Called Party Address Point Code, Calling Party Address Point Code
• (n) Message details: ASN.1 decoder: the text 'END OF' is prepended to the tag name for [End-of-contents] tags if 'Message detail options'/'Show ASN.1 BER tag' is unchecked
• (n) Message details: RANAP, NBAP, S1AP, X2AP decoders: the "message type" is written in bold
• (c) Message details: BSSMAP, DTAP, BAT-ASE decoders: minor improvements in the value interpretations
• (c) Message details: BAT-ASE decoder: compatibility information is now separated from the rest of the parameter fields and can be hidden via 'Message detail options'/'Show parameter header flags'
• (f) Message details: BAT-ASE decoder: the parameters 'Codec List' and 'Signal' were not decoded correctly
• (f) Message details: BSSMAP decoder: the parameter 'Codec List' was not decoded correctly
• (n) Message details: Diameter decoder: the 'Service-Selection' AVP (code 493) is now decoded
• (n) Save messages into a message file: new option in 'SCTP parts': 'Whole message and split parts'
• (f) SCCP connection trace did not work correctly if SCCP was carried by SCTP/M3UA and the 'Split SCTP user data' option was on
• (f) MIME decoder: program hung for certain messages

v4.08
• (n) Message values: longer value strings allowed
• (c) Message values: the meaning of a SIP values changed: the 'Request URI' now contains the URI parameters as well
• (n) Message values: new values for SIP: Request URI User, Request URI Host, From URI, To URI, Route URI, Contact URI, Contact URI SIPAppSessionID, Call-ID, CSeq Number, CSeq Method
• (n) Message values: new values for XML: First Tag, All Tags, CAP4 Service Key, CAP4 IMSI, CAP4 Called Party Number, CAP4 Calling Party Number, CAP4 Original Called Number
• (n) Find expression: longer value strings allowed
• (c) Find expression: protocols are now listed in alphabetic order
• (f) SCTP decoder: carried protocols were recognized by port numbers only if the ports values were equal
• (f) Message details: DTAP decoders: for some messages the error text "At least one mandatory parameter missing!" appeared falsely
• (c) Message details: DTAP-CC decoder: for certain 'Setup' messages the message direction is now indicated
• (f) Message details: DSS1 decoder: the parameters 'Connected number' and 'Connected subaddress' were not decoded
• (f) Message details: NS decoder: the UDP port field in the 'List of IP4 Elements' and 'List of IP6 Elements' parameters was decoded incorrectly
• (f) Message details: in bad messages the indentation was wrong in certain cases (this bug appeared in v4.07)
• (f) Save messages as text: in the message details two extra space characters appear at the end of the lines which contain a decoded point code (this bug appeared in v4.05)

v4.07
• (n) BSSMAP decoder: partially updated to Release 9
• (f) Message details: for certain incorrect messages the program hung
• (f) INI file: entry sDATFileIPAddrtNames was read instead of sDATFileIPAddrNames from the [Advanced] section

v4.05
• (n) Service area name is displayed if MCC,MNC,LAC,SAC are found in the SANames CSV file
• (n) Message details: BSSMAP decoder: the interpretations for the cause values 86..125 now include the Ericsson-specific ones as well
• (f) Message details: DTAP-MM decoder: 'Identity type' parameter: values 3 and 4 were not interpreted
• (f) Message details: DTAP-SMS decoder: 'TP-Failure-Cause' parameter: some values were not interpreted precisely
• (f) Message details: NS decoder: messages with TV or TLV parameters were not decoded correctly
• (f) DAT files: program hung when the last line was not closed by a CR/LF

v4.01
• (n) SGA files containing GbOverIP messages are handled

v4.00
• (n) Diameter decoder added
• (n) S1AP, X2AP, LTE NAS decoders added
• (n) Partial GTPv0 decoder added
• (n) GTPv2-C decoder added
• (n) AAL2, ALCAP decoders added
• (n) Partial IPCP decoder added
• (n) DNS decoder added
• (n) Larger files can be loaded
• (n) Message details window can be maximized
• (n) Both the text and the expression searches can be canceled
• (n) Context menu for the main window for finding values at the mouse cursor
• (n) Context menu for the main window for starting available traces
• (c) Save IP contents as PCAP file: can save non-GPRS IP contents as well
• (n) TCP decoder: SIP data segments can be reassembled
• (n) MAP decoder: undocumented operation 'sendRoutingInfoForLCS' added with code 244
• (n) Message values: new value for AAL5: Correctness of CRC
• (n) Message values: new values for SSCOP: PDU Type, N(S), N(R), N(PS), N(MR), N(SQ)
• (n) Message values: new value for GTP-C: Access Point Name
• (n) Message details: IP4/IP6 address names are displayed as stored in the IPAddrNames CSV file
• (n) Message details: MCC/MNC/LAC/CI names are displayed next to their corresponding values
• (n) Message details: AAL5 decoder: CRC is now verified
• (f) Message details: NBAP decoder: values of type ProtocolIE-ID were not interpreted
• (n) Message details: ASN.1 decoder: new OBJECT IDENTIFIER interpretations added
• (c) Message details and values: MTP, LSSU, SLT, SNM decoder: slight text changes/improvements
• (n) Message details: new detail options added: show parameter header flags, show parameter value octets
• (n) Message details: the NRI part of the TMSI is also displayed
• (f) Message details: DTAP decoder: the 'TMSI/P-TMSI' field of the 'Mobile Identity' type was displayed incorrectly as 'TMSI'
• (f) Message details: DTAP-MM decoder: the contents of the 'Auth. Failure parameter' type was displayed incorrectly as 'UMTS/RES' instead of 'AUTS'
• (f) Message filter dialog: 'Internetworking function user part (IWUP)' changed to 'AAL type 2 signaling (ALCAP)'
• (f) SCTP decoder: 'DATA' parameter: user data is not decoded if not the first fragment
• (f) Message values and details: IP4 decoder: a correct header checksum was indicated as bad when it had the value of 0xFFFF
• (f) Message values and details: GTP1-C and GTP2-C decoders: IMEI(SV) was decoded incorrectly
• (n) Message values and details: GTP1-U decoder: Message type 'End marker' is now also decoded
• (n) Message details: RANAP decoder: the XOR value of IntegrityProtectionKey and EncryptionKey is displayed for finding the corresponding BSSMAP/EncryptionKey value
• (f) Message details: GTP1 decoder: the IP address in the 'End User Address' parameter was not decoded
• (c) Message details: GTP1 decoder: the field bits in 'End User Address', 'PDP Context' and 'MBMS UE Context' parameters are now decoded right to left as in DTAP-SM/'Packet data protocol address'
• (c) Message details: GTP1 decoder: the 'Transaction identifier' field in 'PDP Context' and 'MBMS UE Context' parameters are now decoded in more detail
• (f) Message details: DTAP-SM decoder: the 'PDP type organisation' field is changed to 'PDP type organization'
• (f) Message details: DTAP-SM decoder: the 'Spare' field is corrected to 'Transaction ID'
• (f) Message details: DTAP-GMM decoder: the 'Spare' field is corrected to 'Skip indicator'
• (c) Message details: ISUP decoder: field names changed: 'CCITT' -> 'ITU-T' and 'Propagation delay value' -> 'Propagation delay'
• (c) Message details: SCCP decoder: field name 'Hop counter value' changed to 'Hop counter'
• (c) Message details: MAP, INAP decoders: the text 'best fit:' is prepended to the protocol specification
• (f) Message details: MAP decoder: Ericsson private extensions were not always decoded
• (n) Message details: MAP decoder: insertSubscriberData: ext3-QoS-Subscribed added to PDP-Context as in UMTS Release 7
• (f) Message details: ISUP decoder: 'Cause Indicators' parameter: the 'Coding standard' field is checked now if it is 'ITU-T standardized coding'
• (f) Message details: very long lines were not displayed (lines longer than about 4800 chars)
• (f) The operating system version is now checked at start-up to exlude Pre-Windows 2000 operating systems
• (c) The protocols are now ordered alphabetically in the 'Customize current view' and the 'Message detail options' dialog boxes
• (c) 'Customize current view' dialog box: dialog items moved/resized for easier usage
• (c) Message traces: message traces can now be invoked from the Tools menu; a dialog window is displayed for choosing the trace type
• (f) SCCP connection trace: only messages on the same link were considered as belonging to the SCCP connection; messages belonging to different connections were also selected
• (c) Status window: The time-stamp is now displayed in hi-res time format
• (c) Message details: Diameter, RANAP, BSSMAP, BSSGP, GTP1 decoders: OMC Identity parameter is now decoded the same way in all the protocols
• (c) Message details: Some value interpretations changed slightly
• (f) Message details: BSSAP, MAP decoders: Quality of service/Maximum SDU size: value 0x93 was decoded erronously
• (f) Message details: BSSAP, MAP decoders: Quality of service/SDU error ratio: values were not interpreted
• (n) Command line: new option: /Format