TSP Lab	GPRS Monitoring System	Sga-GPRS

System Overview - The Monitors

module description version configuration files
GPRSMonitor.exe Main monitoring software v2.30 entries of GPRSMonitor.ini
GPRS_R02.obj SGA47 card GPRS firmware v1.30 <none>
Sga-G_M-04.bin SGA47P16 card GPRS firmware SGA-G_M-04 <none>
SGA47PDriver-1.03.sys Windows driver for SGA47P16 card v1.03 <none>
StorageCreator.exe GPRS buffer file creator v1.04 example of usage

module	description	version	configuration files
GPRSMonitor.exe	Main monitoring software	v2.30	entries of `GPRSMonitor.ini`
GPRS_R02.obj	SGA47 card GPRS firmware	v1.30	<none>
Sga-G_M-04.bin	SGA47P16 card GPRS firmware	SGA-G_M-04	<none>
SGA47PDriver-1.03.sys	Windows driver for SGA47P16 card	v1.03	<none>
StorageCreator.exe	GPRS buffer file creator	v1.04	example of usage

The Monitor program

Features

Collects and assembles GPRS messages from the Sga cards
Stores GPRS messages in circular buffers
Calculates traffic statistics from GPRS messages and sends them in every time defined by the value of GPRSMonitor.ini/[General]/StatIntervalSecs. This sending is delayed a few minutes (based on the IP-address) to avoid burst traffic on the Ethernet network.
Automatically connects to the server. If the server is not available, it tries to connect to it periodically.
The Monitor synchronizes time with a dedicated time server NTP protocol. This synchronization is repeated periodically defined by the value of GPRSMonitor.ini/[General]/NTPSynchronIntervalSecs.
Provides the log (http://Monitor_IPaddress/), the ini (http://Monitor_IPaddress/monitor.cfg) and status information (http://Monitor_IPaddress/?status and/or http://Monitor_IPaddress/?summary) as a Web content
Sends Monitor unit and PCM trunk events to the server
Provides remote restart feature
Handles call trace and remote capture requests from client
Connects to a Cipher Server where to sends requests for deciphering and receives the corresponding information

User interface

The main menu

Button	Meaning
	Shows the status of the cards working in the monitor
	Shows the status of the circular buffer
	Shows the status of the network connections
	Shows the TLLI and Kc lists used for deciphering
Record (Checkbox)	If checked the program saves GPRS messages in PKT files (For debug purposes!)

Configuration (`GPRSmonitor.ini`) file settings

Section	Entry	Example	Meaning
[General]
	LogDir	d:\LogFiles	Path for the logs
	RecordDir	d:\Recordings	Path for the PKT files
	Sga47PSysPath	SGA47PDriver-1.03.sys	Path and name of the file Windows driver file for Sga47P16 card. If this is not set the monitor uses the default value: Sga47PDriver.sys.
	LogCardEvents	1	Enable or disable logging events about cards and links. If it is disabled events can be followed on the Card screen.
	LogTimeOnScreen	1	Enable or disable logging timestamp of log entries.
	GPRSCipherServerAddress	11.22.33.44	IP address of the KeyServer from where the monitor receives the deciphering data
	GPRSCipherServerPort	8001	Port, where the KeyServer waits for the connection
	CipherPacketPoolSize	10240	Size of the buffer for data to be sent
	CipherPacketPoolTimeoutMSecs	5000	For this interval the monitor keeps the requests
	CipherInfoCacheSize	10240	Buffer for received data
	CipherInfoCacheTimeoutMSecs	30000	Timeout for received data
	SaveCipherDebugInfo	1	If it is not disabled, the information used for deciphering messages is written on the disk. 0: disable logging 1: only UsedInfo is saved >1: all information saved
	LTE23GCipherServerAddress	172.220.3.4	IP address of the KeyServer23G to provide info for deciphering of 4G signalling
	LTE23GCipherServerPort	8001	Port, where the KeyServer23G waits for the connection
	LTE23GCipherServerAddress2	172.220.3.140	IP address of the secondary KeyServer23G for testing purposes
	LTE23GCipherServerPort2	8001	Port of the secondary KeyServer23G for testing purposes
	SortingPoolMaxSize	10240	Defines a sorting buffer for messages; default is 514244
	SortingPoolTimeoutMSecs	1000	Messages from cards are in the sorting queue for this interval
	PollerAddress	111.222.33.44	IP-address of the server running the Poller module.
	PollerPort	8000	UDP port, where the Poller waits for the connection
	LocalAddress	111.222.33.55	Optional local IP address for HTTP connection and all input connections
	LocalAddressTowardsGPRSCipherServer	111.222.33.55	Optional local IP address towards GPRS KeyServer (KS).
	LocalAddressTowardsLTE23GCipherServer	111.222.33.55	Optional local IP address towards LTE KeyServer (KS23G).
	LocalAddressTowardsLTE23GCipherServer2	111.222.33.55	Optional local IP address towards secondary LTE KeyServer (KS23G).
	LocalAddressTowardsPoller	111.222.33.55	Optional local IP address towards Poller Server.
	LocalAddressForRemoteCapture	111.222.33.55	Optional local IP address for Remote Capture function.
	KeepAlive	1	Defines that the monitor uses KeepAlive feature for network connections
	StatIntervalSecs	900	Statistics sending interval in seconds. The default value is 900 second.
	CounterLogIntervalSecs	900	This value set how often the deciphering counters are logged. Default value is 900 second
	NTPServerAddress	172.16.4.93	NTP server IP address
	NTPSynchronIntervalSecs	900	Time synchronization interval in seconds. The default value is 900 second.
	NTPMinAdjustmentMSecs	3	If the different between the local and the NTP times is smaller then this value time adjusting will be skipped.
	NTPNotifyAdjustmentMSecs	5	When the needed adjustment is greater than this value an event will be sent to the server.
	NTPMaxAdjustmentMSecs	7200000	If the different between the local and the NTP times is greater than this value time adjusting will be skipped.
	NTPRoundtripTimeoutMSecs	10	Maximum roundtrip time for NTP answers. Answers received later than this roundtrip time will be skipped.
	NTPStartSynchronized	0	This setting occurs that the monitor waits for the first NTP synchronization to process data. It provides precise timestamps. (0: disabled, other: the monitor does not need NTP synchronization to process data, default: 0)
	IMSILists	1	Turns on or off the creation of IMSI lists for successfully and unsuccessfully deciphered messages 0: disable other: enable default: 0
	EnableWatchdog	0	It starts a service which restarts the monitor when it is halted. (For further information please see Sga-Dog page!) (0: disable watchdog, other: enable, default: 0)
	WatchdogIntervalSecs	5	Reset period for watchdog timer. (default: 5, minimum value: 1)
	WatchdogPort	7474	Network port when the monitor can connect to the `Sga-Dog`. (default: 7474)
	EnableCapabilityCollecting	0	Enables collecting and sending MS Capability parameters to the server (0: disable, other: enable, default: 1)
	GPRSCipherServerReadOnly	0	0: normal operation other: only RequestInfo messages are sent to the server default: 0
	DecipherSNDC	1	0: SNDC deciphering is disabled 1: SNDC deciphering is enabled default: 1
	Caption	BSC2E	Alternative caption text for easy distinguishing amongst multiple instances of this module
[UserPrivileges]			In this section the user groups can be defined with different privileges. See detailed information about privileges here.
	GPRSPrivilegeA	A_user	Defines the group of users who has privilege to see L1, NS, BSSGP, LLC: GMM/SM and LLC: SNDCP (without IP header) protocol layers.
	GPRSPrivilegeB	B_user	Defines the group of users who has privilege to see L1, NS, BSSGP, LLC: GMM/SM and LLC: SNDCP (without IP header) protocol layers and who can see the SNDCP: PDP content activation username/password
	GPRSPrivilegeC	C_user	Defines the group of users who has privilege to see L1, NS, BSSGP, LLC: GMM/SM and LLC: SNDCP (without IP header) protocol layers and the LLC: SAPI 7 information.
	GPRSPrivilegeD	D_user	Defines the group of users who has privilege to see L1, NS, BSSGP, LLC: GMM/SM and LLC: SNDCP protocol layers with IP header.
	GPRSPrivilegeE	E_user	Defines the group of users who has privilege to see all information in the messages except PDP content activation username/password and LLC: SAPI 7 information.
[Storage]			In this section the storage buffer files used by the `GPRSMonitor` are defined
	StorageBufferPathN	d:\GPRS-Monitor-00.dat	The storage files have to be defined here in order to the `GPRSMonitor` can use them. N must be the sequential number of the circular buffer from 0 to 31
[Stat]
	StatIPAddressX	10.1.1.100	The statistics generated from `gprs` messages in connection with these IP addresses will be done (how many messages were sent to and from these IP addresses). The X is from 0 to 9.
	StatAPNX	internet	These values define APNs for counting APRQ messages sent through them. The X number is from 0 to 9.
	ProtocolGroupY	T80,U123	These keys define protocols (ports) for IP protocol level statistics. They can be TCP and/or UDP port number. The Y number is from 0 to 9. For example: - T80 means TCP port 80 what is the HTTP protocol - U123 means UDP port 123 what is the NTP protocol For the list of ports and their services, see the Port List document.
[StatGroups]			There can be more statistical groups. For example links what are in connection with the same BSC can be aggregated into the same statistical group.
	IdM	“Link Group 0”	The ID of the M’th statistical group
[CardN]			For every card in the Monitor unit belongs a [CardN] section containing its setting. (N must be replaced with the sequential number of the card, e.g. [Card0] for the 0th, [Card1] for the 1st card, etc.)
	ID	0	The ID set on the N'th card. This can be adjusted with switches on the cards. All IDs must be unique within a Monitor unit.
	Type	Sga47GPRS	This defines what kinds of links are connected to the card. Type can be: Sga47GPRS - Sga47 card for Gb links Sga47P16GPRS - Sga47P16 card, monitoring Gb links GPlanar - GPlanar card, monitoring GboverIP links
	SatelliteDriverPath	c:\7N-Monitor\02e10000.sys	Driver path for the SgaGPlanar card.
	TMSObjectPath	gprs_r02.obj	DSP code filename (and its path if needed). It can be the followings for the differrent card types: gprs_r02.obj - for Sga47GPRS card type Sga-G_M-01.bin - for Sga47P16GPRS card type
	AM186CodePath	AM186.bin	This value is needed for card type Sga47GPRS and Sga47SS7. This defines the path and file name of the AM186 processor code. If it is not set card does not use AM186 processor (what provide a "messages buffer" between DSP processors and host PC).
	AmplifyX	1	Sga47 cards can amplify connected PCM trunks if its voltage level is too low to work correct. (X must be 0 or 3.) If it is 1, it turns on the amplification feature for the Xth processor of Sga47SS7 and Sag47GPRS cards. If it is 0, it turns the amplification off.
	TerminationInN	300	For Sga47P16 cards the line termination can be set by the software (both of Sga47P16GPRS and Sga47P16SS7 types). (On Sga47 cards this setting can be set by jumpers.) The given value sets the termination (in Ohm) for processor N (N can be 0, 1, 2 and 3). Value can be 75 or 120 or 300. Optional parameter. The default is 300 Ohm.
	TerminatinOutN	120	The transmission termination can be set with this parameter on Sga47P16 cards. It sets termination of the Nth processor. The two possible values are 75 and 120 Ohm. Optional parameter. The default is 120 Ohm.
	GainN	0	This parameter is for Sga47P16 card type. Amplification for Nth processor can be adjusted by this value. Possible values are 0 and 12 and 30 dB. They are in dB. Optional parameter. Default value is 0 dB.
[Links]
	GB0/0 C=0 TS=1/31 P=GPRS StatGroup=0		This format can be used for Sga47GPRS and Sga47P16GPRS card types, as well. SS0/0: The symbolic name of the link and the ID of the card to which the link belongs. The link ID has to consist of three alphanumeric characters and be unique in the whole monitoring system. C=0: Channel id of the given card where the trunk cable containing this link is connected to. TS=1/31: start timeslot and the number of joined timeslots (more groups of timeslots can be defined as a single Gb signaling link: "1/15,17/15" - the signaling link contains two 15-timeslot groups from 1 to 15 and from 17 to 31.) P=GPRS: used protocol (GPRS) StatGroup=0: ordinal number of the group this link belongs to
	S00>/0 GboverIP IPProtocol=TCP SrcIP=1.2.3.4 SrcPort=53 DstIP=5.6.7.8 DstPort=53 Truncate=242 StatGroup=1		This format can be used for SgaGPlanar card type. S00: The symbolic name of the link what has to consist of three alphanumeric characters. It must be unique in the whole monitoring system >: Define which direction to be captured. Other possible value:< (If only one of the directions is important) *Optional* /0: The ID of the card where the link belongs to, points to the [CardN] section GboverIP: Used protocol on Gplanar card. IPProtocol: The GPlanar card can filter either to TCP or to UDP packets. If not specified, the port filter will be ignored.*Optional* SrcIP: Filter to this source address.*Optional* SrcPort: Filter to this port of the source address.*Optional* DstIP: Filter to this destination address.*Optional* DstPort: Filter to this port of the destination address.*Optional* Truncate: If the message is bigger than the configured size (in bytes) the end of the message will be cut off. Must be divisible by 8.*Optional* StatGroup: Messages seen on this link will be counted in statistics with this ID.

The user privileges

Five groups of users are defined to handle different privileges. These are the following:

GPRSPrivilegeA: users who have privilege to see L1, NS, BSSGP, LLC: GMM/SM and LLC: SNDCP (without IP header) protocol layers.
GPRSPrivilegeB: users who have privilege to see L1, NS, BSSGP, LLC: GMM/SM and LLC: SNDCP (without IP header) protocol layers and who can see the SNDCP: PDP content activation username/password
GPRSPrivilegeC: users who have privilege to see L1, NS, BSSGP, LLC: GMM/SM and LLC: SNDCP (without IP header) protocol layers and the LLC: SAPI 7 information.
GPRSPrivilegeD: users who have privilege to see L1, NS, BSSGP, LLC: GMM/SM and LLC: SNDCP protocol layers with IP header.
GPRSPrivilegeE: users who have privilege to see all information in the messages except PDP content activation username/password and LLC: SAPI 7 information.

Steps of the authentication process:

The user starts a client module. To log in this client he needs to type a username and a password into the fields of the login screen.
The typed username and password are checked by the SgaAutho module, which either accepts or rejects the login.
In case of successful login a groupname will be assigned to this user based on the SgaAutho.pwd and the [Oracle User Groups] section of the SgaAutho.ini. The groupname will be sent to the client.
When the client module queries the monitors it sends this groupname (value of the sUserName_X in the Oracle User Group section) to the monitor.
The monitor compares the received groupname with the groupnames defined by the GPRSPrivilege keys in the GPRSMonitor.ini and decides which layers need to be hidden and which are to be shown.
When a user without privilege is logged in, he only can see the BSSGP (and the lower) layer(s). The data of the other layers will be filled with zeros.

To use this feature users have to be aggregated into several groups. This can be done in the SgaAutho.pwd by setting the "Oracle user group identification" parameters. Every user who belongs to the same group needs to have the same "Oracle user group identification" parameter.
This parameter refers to the X of the sUserName_X key. (A user belongs to that Oracle group whose X is equal to the "Oracle user group identification" parameter.) The name of the groups can be defined by creating new keys in the [Oracle User Groups] section of the SgaAutho.ini. Every group needs to have a sUserName_X key and groupnames (usernames) need to be set for these keys.
These groupnames also need to be assigned to the GPRSPrivilege keys in the [UserPrivileges] section of GPRSMonitor.ini.

A simple example:

There are ten users (User1, User2, User3, User4, User5, User6, User7, User8, User9, User10). These client usernames will be used during the logging into the clients.
They are in six groups:

Two users (User1, User2) have no right to see detailed information in the GPRS messages, so they do not belong to any privileged groups. (Oracle group 1)
Three of them (User3, User4, User5) have 1 right, they can see the LLC. (Oracle group 2)
One user (User6) has the right to see PDP username and password. (Oracle group 3)
Two users (User7, User8) have the right to see LLC: SAPI 7. (Oracle group 4)
One user (User9) has the right to see the content of the IP header. (Oracle group 5)
One user (User10) has the right to see all of the information. (Oracle group 6)

The SgaAutho.pwd will be the next:

The [Oracle User Groups] section of the SgaAutho.ini: (the sPassword_X keys are not needed!)

Note, that User1 and User2 has no rights, so they do not need to have Oracle group name (sUserName)

Finally, the [UserPrivileges] section of GPRSMonitor.ini:

Note: Users do only know the client usernames!!! The (Oracle) group names are hidden from users, only the administrator(s) can see them.

Warnings and errors in the log file

Sga47 card handling

ERROR level (red lines)

<message> "Taking processor x on Sga47-card y out of service."
"Processor x on card y is taken out of service."
"Tried to take non-working processor x out of service on card y"

Troubleshooting

For example:
2003.06.20 16:52:39.523 Sga47Processor::readMessageQueue( card 0, proc 1 )/Assertion #2 failed reading from message queue.
2003.06.20 16:52:39.543 Processor 1 on card 0 is taken out of service.
2003.02.12 12:08:44.775 Sga47Processor::readMessageQueue( card 0, proc 0 )/No response from Sga47-card 0, proc 0 during wait.
2003.02.12 12:08:44.775 Processor 0 on card 0 is taken out of service.

Probably, there was a temporary error with the Sga47 card. The solution is to restart the program and check if the problem is persisting. If it is, tell this to the supporter.

Sga47P16 card handling

ERROR level (red lines)

<message> "Taking processor x on Sga47P16-card y out of service."
"Processor x on Sga46P16-card y is taken out of service."
"Tried to take non-working processor x out of service on Sga47P16-card x."

Troubleshooting

For example:
2005.01.18 14:47:00.556 Sga47P16SS7Processor::readMessageQueue( card 0, proc 0 )/Invalid message length. (5073)
2005.01.18 14:47:00.566 Processor 0 on Sga46P16-card 0 is taken out of service.
2005.01.18 14:47:00.586 Sga47P16SS7Processor::readMessageQueue( card 0, proc 1 )/Invalid link in message. (3)
2005.01.18 14:47:00.586 Processor 1 on Sga46P16-card 0 is taken out of service.

The monitor program received a message with invalid content from the SgaP16 card. In order to avoid additional problems, given processors is taken out of service. To induce the processor to operate restart the monitor program.

WARNING level (yellow lines)

"Sga47P16_DriverInit(): <message> "
Sga47P_DriverDone(): <message> "

For example:
2004.09.02 14:26:47.975 Sga47P16_DriverInit(): Cannot find "..\Sga47PDriver.sys".

Given file could not be found. Check if the path in the configuration file is correct.
2004.09.02 14:27:10.938 Sga47P16_DriverInit(): Could not install driver.

Probably, there is not Sga47P16 card in the system or not working properly. Check the card and the driver software.

GPRS Sga card module

WARNING level (yellow lines)

"GPRSCard::initProcessors()/ <message> ("parameter"...)"

Troubleshooting

For example:
2005.01.18 12:34:17.241 SGA47P16GPRSCard::initProcessors()/Invalid format. ("Link=PC0 0/0 1"...)

Format of the definition is invalid, because the parameter for number of timeslot is missing. Check and fix the configuration setting.

GPRS Sga card processor module

WARNING level (yellow lines)

"Lost messages on link x."

Troubleshooting

For example:
2005.01.18 21:06:55.969 Lost messages on link GB0>.

Cipher module

WARNING level (yellow lines)

"Received CipherInfo with illegal length (x instead of y)."

To do:

GPRS decoder module

WARNING level (yellow lines)

"GPRSDecoder::decodeBSSGPOptional(): Too short IMSI IE-length. (x)"
"GPRSDecoder::decodeBSSGPOptional(): Invalid Type of Identity. (x instead of y)"
"GPRSDecoder::decodeBSSGPOptional(): Illegal TLLI length. (x)"
"decodeGPRSMessage()/ <message> "

Monitor module

ERROR level (red lines)

"Monitor::getTime():<message> "
"Error x during OpenProcessToken()."
"Error during AdjustTokenPrivileges()."

Troubleshooting:

<message> "Skipping section [x] of Ini file."

Troubleshooting

For example:
2004.07.01 23:21:35.281 Error during loading embedded kernel to Sga47-card 1 proc 0.
2004.07.01 23:21:35.281 Skipping section [Card1] of Ini file.

Given Sga47 (Id=1) card is missing or not set up correctly. Check the card and it DIP switch, and check the configuration.
2004.07.28 15:44:19.363 Sga47P16Card() Error in section [Card1]: Could not open device "\\.\SGA47P1". (2)
2004.07.28 15:44:19.363 Skipping section [Card1] of Ini file.

The monitor tries to set up Sga47P16 card for Id=1 but the card for this Id is missing.
2004.09.29 14:03:59.454 Sga47P16Processor(0)::loadDspCode(): Could not open file "Sga47P16SS7-M16-A5.bin". (2)
2004.09.29 14:03:59.454 Skipping section [Card0] of Ini file.

Given DSP code is missing or the path is not set correctly in the configuration file.
2004.08.26 14:02:21.506 Cannot find TMSObjectPath key in section [Card0].
2004.08.26 14:02:21.506 Skipping section [Card0] of Ini file.

TMSObjectPath key is missing for [Card0] section.
2003.02.04 14:28:38.276 Card-Id is too great. (8)
2003.02.04 14:28:38.276 Skipping section [Card0] of Ini file.

Card-Id in the [Card0] section is greater than the maximum (7).
2003.07.29 08:41:44.203 Sga47Card::loadAM186Code()/Could not open "c:\GPRS-Monitor\AM186.bin". (3)
2003.07.29 08:41:44.203 Skipping section [Card0] of Ini file.

Given AM186 code is missing or the path is not set correctly in the configuration file.

"Monitor::processCards(): <message> "
"Card x is taken out of service."
"Too many messages in the same time. (counter x)"
"Could not create file x. (error code y)"
"Error writing file x. (error code y)"
"Monitor::processNTP(): Illegal number of bytes sent. (x)"
"Error x during InitiateSystemShutdown()."

WARNING level (yellow lines)

"GPRSMonitor::processMessage()/ <message> "
"Too many GPRS links. Could not add info for link x."
"Too many SS7 links. Could not add info for link x."
"Failed to bind NTP socket to port x of y. Error code is z."
"Could not set non-blocking mode for NTP socket. (error x)"
"Monitor::processNTP(): Too much incoming garbage."
"Monitor::processNTP(): Dropped x bytes of garbage from input."
"Monitor::processNTP(): Receiving NTP answer is timed out in cycle x."
Troubleshooting: Check if the network connection is up.
Then check that the NTPServerIPAddress is correct in the configuration file or the NTP server is alive.
"Monitor::processNTP(): Round-trip time is out of limit in cycle x. (y)"
Troubleshooting: When this messages is continually appears try to set another NTP server in the configuration file (NTPServerIPAddress).
"Time is not adjusted. Retrying in x seconds."
Troubleshooting: Check if the NTPServerIPAddress is correct in the configuration file or the NTP server is alive or try to set another NTP server.
"MonitorThread "x" had to be stopped brutally. (cause: y)"

GPRS statistical module

ERROR level (red lines)

"Skipping section "s" of Ini file."

WARNING level (yellow lines)

"Cell identifier in group g changed for BVCI bvci. (x->y)"
"Stat_AddPacket()/ <message> "

For example:
2005.01.19 12:38:06.588 Stat_AddPacket()/statCount_SNDC(): Unknown IP version. (0x0b)
2005.01.19 12:38:06.598 GPRSMessage: [ Link GB2>, Timestamp 2005.01.19 12:38:01.508 Body d0 91 .. .. .. 79 d1 82 ]

Unknown IP version was found in the given message. This could be occur when the program tries to fit the decoder for an undeciphered message and it finds some pattern, but with incorrect data.
2005.01.19 12:38:08.832 Stat_AddPacket()/statCount_SNDC(): Illegal IP Header Length. (0x03)

Length of the IP header in the messages is invalid. This could be occur when the program tries to fit the decoder for an undeciphered message and it finds some pattern, but with incorrect data.

"Unknown link in x. ("y")"
"Could not allocate x bytes of memory for TLLIRecords table. "
Troubleshooting: Check what value is set for INI/[General]/TLLIRecordCount and decrease its value. (Its default value is 10000.)
Or increase the memory of the host machine. (Change the RAM or increase the size of the swap file.)
"StatThread::process(): Sending previous data is not finished yet."
"StatThread::process(): Stat counters for current interval are reset. New sending time is x."

IP connection

ERROR level (red lines)

"<socket name>: Invalid magic code. (dropped x)"
"<socket name>: Invalid length. (dropped x)"
"<socket name>: Could not set keep-alive value. (errorcode)"
"ConnectedSocket::processCycle()/ <message> "
"ListenSocket::processCycle(): <socket name>: Could not set non-blocking mode. (error x)"
"ListenSocket::processCycle(): <socket name>: Could not set non-blocking mode for peer. (error x)"
"ConnectSocket::processCycle(): <socket name>: Could not set non-blocking mode. (error x)"
"SocketConnection::processCycle(): Invalid state on <socket name>. (s)"

WARNING level (yellow lines)

"Could not accept connections on <socket name>. Error code is x."
"No available connection on <socket name> to serve new connection request."
"<socket name>: Failed to connect to port x of y. Connection timed out."
"<socket name>: Failed to connect to port x of y. Error code is z."
Troubleshooting: Depending on the <socket name> check the configuration keys for IP addresses and check if the other side is working properly and the connecting is enabled.
"Could not resolve host "domain name"."
Troubleshooting: Check if the given domain name is correct or the DNS is set up correctly in the operating system (Network and Dial-up Connections), or check the DNS server.
"TCP/IP connection is not available."

HTTP module

ERROR level (red lines)

"HTTPPeerSocket::processCycle()/ <message> "

WARNING level (yellow lines)

"HTTPPeerSocket::processHTTPSession(): Could not open file "x" on y"

Storage system

ERROR level (red lines)

"Storage_InitBasicParameters(): <message> "
"Storage_Init(): <message> "
"Beginning of block: [xx]"
"ReadProcess: [ dwBlockNo x, Start y, Stop z, dwCurrBlockNo v, wCurrBlockPos w, bActive i ]"
"Storage_StopReadProcess(): Trying to stop an inactive read process."

For example:
2004.07.14 16:58:26.555 Storage_InitBasicParameters(): Could not open buffer file "d:\GPRS-Monitor-01.dat".

Given file is missing or the path is not set correctly in the configuration file.
2004.07.14 16:58:26.555 Storage_Init(): Could not set up storage subsystem.

Because of the previous problem the storage subsystem will not work.

Poller module

WARNING level (yellow lines)

"Could not send link event. (link x, event y)"
"Invalid magic code (x) on poller connection. 1 byte (y) discarded."
"Invalid length (x) on poller connection. 1 byte (y) discarded."
"PollerConnection::ProcessCycle(): Unrecognized message from poller. (task x, length y)"
"WMPollerConnection::processMessage(): Invalid length of <version> request. (x)"
"WMPollerConnection::processMessage(): Invalid length of <disconnect server> request. (x)"
"WMPollerConnection::processMessage(): Invalid length of <disconnect HTTP> request. (x)"
"WMPollerConnection::processMessage(): Invalid length of <restart> request. (x)"

Call Trace module

ERROR level (red lines)

"Trace_Process()/<message> "
"Trace_InvalidateStorageBlock()/<message> "
"TraceThread::process()/<message> "

WARNING level (yellow lines)

"Trace_AddTrace( #x ): Trace table is full. Request dropped."
"Trace_ProcessServerMessage(): Message is too short. (0) (length x)"
"Trace_ProcessServerMessage()/ <message> "

Remote Capture module

ERROR level (red lines)

"RemoteCapturePeerSocket::processCycle()/ <message> "

Version history

v2.30

(c) File access denied through HTTP connection except ini (with 'monitor.cfg' string) and log (with empty string).

v2.29

(c) Statistics table size (STAT_TABLE_SIZE) increased to 16384 (from 2000) for BVCI-CI pairs.
(c) Message queue size for KeyServer messages (notifications, updates, request) is increased to 64MB (from 4MB).
(n) LARGEADDRESSAWARE added for handling addresses larger than 2 gigabytes.
(n) General/LocalAddressTowardsGPRSCipherServer entry added for local IP address towards GPRS KeyServer (KS).
(n) General/LocalAddressTowardsLTE23GCipherServer entry added for local IP address towards LTE KeyServer (KS23G).
(n) General/LocalAddressTowardsLTE23GCipherServer2 entry added for local IP address towards secondary LTE KeyServer (optional KS23G) - only test purposes.
(n) General/LocalAddressTowardsPoller entry added for local IP address towards Poller Server.
(n) General/LocalAddressForRemoteCapture entry added for local IP address for Remote Capture function.
(c) General/LocalAddress entry is now used for HTTP connection and all input connections.

v2.28

(f) Cipher sockets sending buffer could be filled fully at startup. It resulted no data sending to KeyServer.
(c) LTE23GCipherServerAddress2 entry (which is designed for testKS23G) now can be used safely for main KS23G (but checking and warning message is created only for LTE23GCipherServerAddress as earlier).
(c) Message queue size for KeyServer messages (notifications, updates, request) is increased to 4MB (from 1MB).
(c) Sending buffer size is increased to 4MB for Cipher sockets (from 1MB).
(c) Receiving buffer size is increased to 1MB for Cipher sockets (from 32kB).
(n) Warning for KeyServer messages with unknown magic code.

v2.27

(f) Extended Transaction ID decoding fixed for DTAP-SM messages.
(f) UpdateFC message (which reset all the counters) is sent only if LLC-FCS check was successful.
(f) UpdateFC DebugInfo changed to "ALL SAPI" from "SAPI11".

v2.26

(f) SaveCipherDebugInfo value is used for "CipherInfo invalidated" and "CipherInfo re-validated" debuginfo as well.

v2.25

(f) For first IP fragment and for truncated messages the deciphered bytes were greater than the available bytes.
(f) For first IP fragment and for truncated messages is GEA3 is used the deciphered bytes were filled with zeros.

v2.24

(c) Merged v2.23-LB-edition and v2.23-SG-edition.

v2.23-LB

(n) TcpStream card accepts truncated Tapper packets.

v2.23-SG

(c) Ethernet layer is not mandatory from now for incoming packets (pure IP layer enabled as well).

v2.22

(f) 'UpdateGUTI4G' commands containd local time instead of GMT.

v2.21

(n) Secondary KS23G connection added for test purposes (use 'LTE23GCipherServerAddress2' and 'LTE23GCipherServerPort2' entries).

v2.20

(n) Main caption can be customized via the INI/[General]/Caption entry.
(c) Local IP address can be set for all connections with the new INI/[General]/'LocalAddress' entry; replaces the old 'PollerLocalAddress' entry.
(c) Summary status window: 'Last NTP Synchron' text changed to 'Last NTP synchron (GMT)'.
(c) Message recording is not logged.
(f) HTTP Server and Task #3: bug fixed which caused the messages "Error during processing an event. (10038)" and "Could not receive data. (10038)".
(f) SaveCipherDebugInfo value is used for every kind of debuginfo.
(c) "CipherServerAddress" INI entry is moved into "GPRSCipherServerAddress".
(c) "CipherServerPort" INI entry is moved into "GPRSCipherServerPort".
(c) "CipherServerReadOnly" INI entry is moved into "GPRSCipherServerReadOnly".
(n) New INI entries added: "LTE23GCipherServerAddress", "LTE23GCipherServerPort" for 4G deciphering.
(n) New 'UpdateGUTI4G' command and counter used in 4G deciphering.
(f) DTAP/PTMSI Reallocation Command message handling added.

v2.10

(f) Executable used SSE2 instruction set which was not available on older processors.
(f) Program crashed when an Sga47Card was configured but was not present physically.
(c) Sga47P card driver is loaded only if needed. (INI/[General]/Sga47PSysPath entry can be omitted when the driver is not used.)
(n) Trace search expression can now contain backslash for quoting wildcard characters.
(c) TcpStream card's TCP receive buffer size raised to 1MB.
(n) Task3: new request with enhanced IP address filtering also accepted.
(c) Task3 and Task5: End time is not included in the search range.
(c) Poller connections: "Write buffer is full" log warning message is displayed again.

v2.08

(c) INI/[General]/SortingPoolLengthLimit entry renamed as SortingPoolMaxSize, default value raised to 514244.
(c) Maximum data packet size is now 2008 bytes (old maximum: 4056).

v2.07

(n) New icon for the main window.
(n) Main window position is saved to INI.
(n) KeyServer and Poller IP-address are shown on 'Network status' window.
(f) Sporadic error of time bias calculation fixed.
(n) Local IP address can be set for the Poller connection.
(n) PacketStream card: both the old and the new C-Board headers are accepted.
(n) Wildcarded searches made faster.
(f) Task3: "Omit sub-M3UA layers" did not work correctly.
(f) Task3: Conversion of start and stop times from local to GMT was bogus.
(f) Invalid socket during application closing.
(f) Overloaded Tapper and PacketStream cards could block the watchdog packets.
(f) Tapper and PacketStream cards could lose packets at small incoming traffic rates as well.
(c) Tapper and PacketStream cards are replaced by the new TcpStream card.
(c) Poller connection: "Write buffer is full" log warning message is not displayed any more.

v2.04b

(f) Ciphered messages look like APRQ were totally filled with zero in sga files (after Remote Capture).

v2.04

(f) Bugs fixed in deciphering ratio sending.

v2.03

(n) GPRSMonitor now sends ciphering counters and ratio to statistics module.

v2.02-a1

(n) AVL errors are reported in log file. [for bug tracking.]

v2.01-a0

(f) Ciphered messages look like ACRQ caused invalid NotifyGEA commands.
(c) Unused variables removed.
(f) SgaEthCard incoming packet processing error has fixed.

v2.00

(f) Fix for statistic status display problem.

v1.200

(f) Misspelling fix in status text.

v1.101-a7

(n) New CBoard header.
(f) Final fix for app termination crash.
(f) Textual modifications.

v1.101-a6

(f) Ciphering ratio counting.

v1.101-a5

(n) Current ciphering ratio is shown on Misc window. (Ratio is counted from the beginning of the current interval.)
(n) Current ciphering ratio is shown in log (in Standard counters).

v1.101-a4

(c) Renaming from 'NotifyGEA3' to 'NotifyGEA'.

v1.101-a3

(f) Truncation (last 4 bytes) resulted invalid short encrypted messages.
(n) Cut bytes beyond IP datagram to avoid bad decoding.

v1.101-a2

(f) Fixed program exit crash (temporary solution).
(n) GEA3 algorithm handling added.

v1.101-a1

(n) Identical log line collapsing.
(n) ATRQ, IDRS IMSI decoding added.
(n) 3 sec and 5 minutes average traffic display in misc status.
(n) Displaying the ip addresses of packet stream card peers.
(f) Fixed decoding problems.

v1.100-a0

(f) Traffic of SgaReaderCard links is counted.
(c) NTP error events are timestamped with PC time.
(n) GbOIP messages with VLAN tags are decoded.

v1.99

(c) Minor changes in general monitor features (logging, termination message, etc.)
(n) GEARuns, GEABytes deciphering counters.
(f) Trace could crash if a message from a non-configured is retrieved.
(f) Decoding of LLC layer could crash.
(f) User privileges now work as intended.

v1.99-a7

(f) LLC decoding could run out from the decoded message.
(f) Packets in decipher packet pool could become unordered after sending re-requests.
(n) Number of lost packets in decipher packet pool is logged every 15 minutes.

v1.99-a6

(n) More detailed logging of checksum errors on packet-stream sockets.
(c) Message sorting is done in its own thread to improve performance. (It was done in the card thread earlier.)
(c) Sorting pool is extended dynamically on demand.
(c) .ini/[General]/SortingPoolSize is no longer used.
(c) Number of lost messages is no longer shown in misc status.

v1.99-a5

(c) Number of lost messages in counters' log is reset each time after logging.

v1.99-a4

(c) Sending/receiving trace info messages are no longer logged.
(n) Number of lost messages on cards is added to the 15-minute counter-dump.

v1.99-a3

(c) Following changes in SgaDecoder.
(c) CipherManager: Key-server frame counters are updated more frequently. (after every 50 message)
(c) CipherManager: Key-server frame counters are only updated upwards.
(n) Cards: SgaReader card.

v1.99-a2

(c) Default value of [general]/DecipherSNDC is changed to 1. (was 0)

v1.99-a1

(n) SgaReader-Card.
(f) No time-outing of SNDC packets when SNDC deciphering is off.
(f) Frame-counter logging of CipherInfo messages could crash.
(c) UsedInfo of skipped SNDC packets is debug-logged only when SNDC deciphering is on.

v1.99-a0

(f) Message sorter now uses 100ns resolution timestamps.
(n) [general]/DecipherSNDC
(c) All frame counters of received CipherInfo messages are included in the debug-log.
(f) Re-validation of cipher cache entries did not always worked correctly.

v1.98

(c) General: INI/[General]/NTPMinAdjustmentMSecs, NTPNotifyAdjustmentMSecs, NTPMaxAdjustmentMSecs now have 100ns resolution internally.
(f) General: Division by zero could happen at very high loads during traffic counting.
(n) Cards: Per packet-source packet counters on PacketStream cards.
(c) Cards: ClockCard* settings in SgaEth card configuration.
(f) Cards: PacketStream & Tapper cards no longer use lag for determining processing urgency. (this could have caused problems when there was no traffic on the card)

v1.97

(c) General: Compiled with VC++2010.
(c) General: Several maintainability improvements throughout the code.
(n) Cards: GbOverIP option in link settings.
(n) Cards: GPlanar card.
(n) Cards: PacketStream card.
(n) Decoder: Gb over IP decoding.
(n) Remote capture: Produces .sga compatible result messages.
(n) Call trace: Produces .sga compatible result messages.

v1.96

(f) Trace: Possible deadlock at storage block invalidation eliminated.

v1.95

(n) General: Storage recreation indicator file is created by the monitor on shutting down.
(c) General: Overloading detection is sensitive to system component responsiveness.
(f) General: Poller sockets could not connect back to the server after ~25 days of continous connection.
(f) General: Restart timings were off by the local time bias.
(f) General: Sending data on sockets is allowed only when the socket is connected.
(f) Card: Sga47SS7 cards counted double card traffic.
(c) Storage: Refactored block invalidation process.
(f) Network: Sending buffer could become stuck at high traffic.
(c) Network: Cipher socket receive buffer size decreased to 32kB.
(c) Network: Receiving on data packet sockets (eg. Cipher socket) is sensitive to system overload.
(c) Decoder: Uses SgaDecoder v1.09

v1.94

(n) General: Extended logging of connection state of outgoing sockets.
(n) General: Details of network process are displayed in status.
(n) General: More detailed logging of socket errors during sending or receiving.
(n) General: Number of timestamp disorders in the message sorter are shown in the status.
(c) General: More uniform way of logging poller-related information.
(c) General: Slight optimization of data sending code of sockets.
(c) General: Slight changes in socket error handling.
(c) General: Poller connection will keep trying to empty sending buffer when it becomes full.
(c) General: Adding messages to the sorting pool never results in direct writing of messages to disk. (unless it becomes full)
(f) General: Network connection failure cases of outgoing sockets are handled properly.
(c) Decoder: Uses SgaDecoder v1.08.
(c) NTP: Timer interval changed to 1103msecs (from 1000).
(f) NTP: Syncronization does not allow messages to be recorded if the required time adjustment is over [General]/NTPMaxAdjustmentMSecs.
(n) Watchdog: Process alive flags are displayed in status.
(n) Card: Added M3UA protocol type for links.
(f) Card: Sockets are closed after unsuccesful connection attempts. (could cause memory leaks)
(f) Card: Card-error events are generated for each affected links in case of a processor error on Sga47 and Sga47P16 cards.
(f) Card: General errors on cards generate card-error events.
(f) Card: Link-count checking works properly. (Allowed max+1 links earlier.)
(c) Task3: Decreased number of processed messages processed in one cycle.
(f) Task3: Messages are tested against the end of the request interval's last second instead of the beginning.
(f) Task3, 5: Daylight Saving Time bias is calculated by the timestamp of the message instead of the current time.

v1.93

(c) Stat: DLCI is no longer part of of statistics record keys.
(f) Card: Sockets are closed after unsuccesful connection attempts. (could cause memory leaks)
(c) NTP: Timer interval changed to 1103msecs. (from 1000)
(f) NTP: Syncronization does not allow messages to be recorded if the required time adjustment is over [General]/NTPMaxAdjustmentMSecs.

v1.92

(c) General: Overhauled network connections that speeds up sending and receiving data through the network.
(c) General: [StatGroupN] sections are obsoleted.
(n) General: [StatGoup]/IdN for defining Id's of statistics groups.
(n) General: StatGroup=N link option for GPRS links.
(c) General: Works with Sga8NKeyServer v1.21 and higher.
(f) General: A possible failure point at program shutdown is eliminated.
(f) NTP: Time resolutions are always matched properly. (Could cause fake NTP error events after ntp synchrons.)
(f) Card: Multi-digit [CardN] sections are parsed correctly.
(f) Card: Original length of messages received by Sga47P16 cards are filled in correctly.
(n) Card: Number of of allowed card is increased from 8 to 16.
(n) CipherManager: Stores multiple Kc's for an IMSI and able to find the correct one among them.
(n) CipherManager: New counters in Misc window and log:
- Deciphered: the number of messages modified by the GEA/1 algorithm
- KcUpdate: the number of KcUpdate notifications sent to the key-server
(c) CipherManager: Kc-source fail statistics are always zero.
(c) CipherManager: TLLI changes indicated by the BSSGP layer are ignored.
(n) CipherManager: XRES parameters are handled.
(f) Stat: Timestamps of statistics messages are in local time.

v1.90

(n) General: New format to store messages. (This involves massive changes to almost all part of the program.)
(n) General: Stored timestamps are now in GMT (+local time difference), and have a 100ns resolution.
(n) General: Handling and configuration of links is overhauled. (This involves massive changes in almost all parts of the program)
(c) General: INI/[GPRSLinks] section is obsoleted.
(n) General: INI/[Links] section for configuration of all links in format:
where the available options are:
(c) General: Scheduling is moved to message handling. (thus schedule thread is eliminated)
(n) Card: DiskReader card converts messages to new format before submitting them.
(c) Card: Uniform event handling.
(c) Card: Enhanced resolution of timestamps for Sga47 and Sga47P16 based cards (from 1ms to 125us).
(n) Card: Colorful status window!
(n) Task5: Messages are converted to new format on reading.
(n) Task3: Messages are converted to new format on reading.
(c) NTP: Less CPU-intensive and faster NTP query.
(c) NTP: More accurate measurement of NTP roundtrip times.
(c) HTTP: HTTP status is the exact same as the on-screen status.
(f) HTTP: Return buffer was too small; increased to 256kB from 64kB.
(n) CipherManager: Attempts to decode ciphered messages before inserting them to the PacketPool.
(n) CipherManager: No requests are sent to pre-deciphered or non-ciphered messages.

v1.43

(n) INI/[General]/CipherServerReadOnly (0: normal operation, other: only RequestInfo messages are sent to the server, default: 0)

v1.42

(n) General: Transparency on button bitmaps.
(n) General: A ring-buffer is implemented for received data of sockets.
(n) General: Buffer data for sockets is displayed in status.
(c) General: Receive-buffer size is increased to 128kB. (was 64kB before)
(c) General: Reduced stress on system when logging to screen.
(n) Task4: Sends MS-Capability related data to poller.
(n) Task4: INI/[General]/EnableCapabilityCollecting (0: disable, other: enable, default: 1)
(n) Task1: Link-group (stat2) Statistics are sent to the server:
- 0: PAGING-PS, BVCI != 0
- 1: PAGING-PS, BVCI == 0
- 2: PAGING-CS, BVCI != 0
- 3: PAGING-CS, BVCI == 0
(f) Watchdog: Watchdog is now always notified when the monitor is closed.

v1.41

(f) NTP: Daylight-saving period is calculated correctly when the last sunday of the month is on the 25th.

v1.40

(c) General: Removed double overload checking from DataPacket sockets.
(c) General: Sockets process some of the traffic even if overloaded.
(c) CipherManager: Key-server socket is not sensitive to overload.
(c) CipherManager: No FC checking for messages with NoCipherInfo answer from key-server.
(c) CipherManager: Requests are not sent to the key-server for messages with no LLC part.
(c) Ciphermanager: Length of KeyServer Message Queue is icreased from 128kB to 1MB.
(f) CipherManager: More precise checking of existence of deciphering parameters.
(f) Decoder: BSSGP decoder can decode messages with parameters located at the very end of a (truncated) message.
(f) Decoder: LLC-FCS of non-protected messages are calculated correctly.
(f) Trace: IMSI trace doesn't find Messages with no IMSI.

v1.39

(n) General: INI/[General]/NTPStartSynchronized (0: disabled, other: the monitor don't need NTP synchronization to process data, default: 0)
(n) CipherManager: Mutexes in AVL-trees replaced to more efficient Critical Sections.
(c) CipherManager: All 8 octets of Kc's are logged and displayed.
(c) CipherManager: Changed algorythm of FC-overflow detection to allow more flexibility.
(n) CipherManager: Direction of FC-overflow changes are included in debug info for UpdateSingleFC messages.
(n) CipherManager: Checksum of cache-entries are recalculated after FC-change.
(f) CipherManager: Only unciphered messages are checked for ATRJ and RARJ.
(c) CipherManager: NotifyDetach counter replaced by Forget[ATRJ|RARJ|DTAC|Other] counters.

v1.38

(f) Fixed checking of overlapping links on Sga47P16GPRS cards.

v1.37

(n) General: File upload feature.
(c) General: Message Sorting now works by a simpler, usually more efficient algorythm.
(n) Ciphering: NotifyDetach is triggered by DTAC, ATRJ and RARJ instead of DTRQ messages.
(n) Ciphering: Result of LLC-FCS and IP-CS checks are included in saved debug info.
(n) Ciphering: Kc-source counters in log and status.
(n) Ciphering: Original contents of unsuccessfully deciphered messages are preserved.
(c) Ciphering: Counters are listed in CSV format in the log.

v1.36

(c) Ciphering: GEA1 algorythm is tuned to be more CPU-efficient.
(f) Ciphering: Non-GPRS messages are finalized without waiting for answer from key-server.
(f) Ciphering: More secure locking of pool areas on adding new packet.

v1.35

(f) Condition of sending an IMSIUpdate to the key-server is the same as in 1.32.

v1.34

(c) Ciphering: UpdateRand messages are obsoleted by UpdateSRes.
(c) Ciphering: Format of CipherInfo message has been chaged: o Current Rand parameter is removed. o Authentication Triplets are removed. o Current Kc is added. o IMSI is stored in 'f'-padded inverse BCD packed format.
(c) Ciphering: IMSI parameter of UpdateIMSI message is stored in 'f'-padded inverse BCD packed format.
(c) Ciphering: Finding the correct Kc is now done by the key-server.
(n) Trace: Wildcards ('*', '?') are allowed in IMSI-trace.

v1.33

(n) Stat: New ciphering counters:
- 122: number of LLC-FCS checks performed
- 123: number of LLC-FCS matches
- 124: number of IP-header checksum check performed
- 125: number of IP-header checksum matches
(n) General: Operating "Record" checkbox is logged.
(n) Card: GPRS links can be attached to DiskReader cards.
(f) LinkId's of stored debug comments are always the same as the related PDU's.
(f) Ciphering: Detach updates are sent for unciphered messages only.

v1.32

(n) General: Monitor version number is sent to the server on startup.
(n) Watchdog: Connection to external watchdog module. (Sga-Dog)
(n) Watchdog: INI/[General]/EnableWatchdog (0: disable watchdog, other: enable, default: 0)
(n) Watchdog: INI/[General]/WatchdogIntervalSecs
(n) Watchdog: INI/[General]/WatchdogPort (default: 7474)
(n) Ciphering: Sending Detach notification to the key-server.
(c) Ciphering: The existance of the Attach entry is not checked anymore.
(f) Card: AM186 counters are not checked if the AM186 is not used.
(n) NTP: Applied time adjustment is logged at time synchronizations.

v1.31

(n) NTP: Time synchronizations can be initiated from poller.
(f) Trace: IP-address of monitor unit is filled correctly in reply messages.
(f) Trace: Reorganised scheduling to avoid unprotected resource usage by threads.
(n) Trace: CI/BVCI search.

v1.30

(n) Stat: MS-categories statistics.
- 114: HSCSD (1 <= class)
- 115: GPRS (1 <= class <= 8)
- 116: GPRS (9 <= class)
- 117: EGPRS (1 <= class <= 8)
- 118: EGPRS (9 <= class)
- 119: Release99
- 120: Release4
- 121: UMTS FDD
(c) Stat: Statistics scheduling is sensitive to overload.
(n) Storage: Storage blocks are ciphered on disk.
(n) NTP: Time settings are logged for all processors on Sga47GPRS and Sga47P16GPRS cards.
(n) NTP: Only time adjustments above threshold are applied on Sga47GPRS and Sga47P16GPRS cards.
(n) NTP: Event is sent when a processor's clock had to be adjusted on Sga47GPRS and Sga47P16GPRS cards. (code 21)
(n) NTP: INI/[General]/NTPMinAdjustmentMSecs. (default: 3)
(n) NTP: INI/[General]/NTPNotifyAdjustmentMSecs. (default: 5)
(n) NTP: INI/[General]/NTPMaxAdjustmentMSecs. (default: 7200000)
(n) NTP: INI/[General]/NTPRoundtripTimeoutMSecs. (default: 10)
(n) Card: new setting MaxPacketCount for DiskReaderCard. (default: 1000)
(n) Card: DiskReaderCard starts work only after successful time synchronization.
(n) Card: Packets are sorted by by filename on DiskReaderCard.
(c) Card: Inter-packet delays of DiskReaderCard are more accurate.
(f) Card: Frame counters in card status are fixed for Sga47P16GPRS cards.
(c) Works with GPRS-Poller v1.08.
(c) CT & RC scheduling is more sensitive to overload.
(n) INI/[General]/LogTimeOnScreen (0: don't show time, other: show time, default: 1)
(n) HTTP: Requests for monitor.cfg are translated to the approriate .ini.
(c) HTTP: All non-log files are treated as plain text files.

v1.29

(c) Remote capture speed optimization.
(c) Call trace speed optimization.
(c) SS7 monitoring capability is removed from code.
(n) Interpretation of INI/[General]/SaveCipherDebugInfo has changed: (0: disable logging, 1: only UsedInfo is saved, >1: all information saved).
(c) Line-terminating character in IMSI lists is changed from '\0' to '\n'.
(c) Sga47P16GPRS cards work with TMS code Sga-G_M-01.bin.
(n) Storage can now handle files larger than 2GB.
(c) Message queue is removed. (obsoleted by message sorting pool)
(c) Works with Sga47PDriver v1.03.
(c) Sga47P16GPRS cards work with DSP code SGA-G_M-01.

v1.28

(n) INI/[General]/IMSILists. (0: disable, other: enable, default: 0)
Creates quarter-hourly lists if IMSI's of decoded messages.
(<LogDir>\SuccessList<hour><min>.txt, <LogDir>\FailureList<hour><min>.txt)
(c) Frame-counter overflow is a bit more sensitive to changes.
(n) New message type to Key-Server (UpdateSingleFC).

v1.27

(c) Less sensitive frame counter overflow checking.

v1.26

(n) P-TMSI of RAAC message is treated as new TLLI.

v1.25

(n) Extended ciphering debug information on disk.

v1.24

(c) Request-register is removed, related settings are obsolete.
(c) Reworked communication to KeyServer.
(c) Works with KeyServer 1.01 and greater.

v1.23

(c) New TLLI is associated to messages with TLLI-change instead of the old one.
(c) TLLI-change is sent to the KeyServer before any other update for a message.
(f) TLLI byte order is fixed in ciphering debug info on disk.

v1.22

(c) AttachNotify is sent only for non-ciphered messages.
(f) FC-Update cease counter is initialised on new CipherInfo records.
(f) Safer decoder range-checks.

v1.21

(n) Ciphering information can be attached to each GPRS message.
(n) INI/[General]/SaveCipherDebugInfo (default: 0)
(n) Validity of IP-header length is checked before counting stats.

v1.20

(f) Dropping old request-register items fixed.
(c) Frame-counters are cleared at XID/Reset message.
(c) Timestamp of old TLLI's CipherInfo is refreshed at TLLI change.
(c) P-TMSI of ATAC message is treated as new TLLI.

v1.19

(n) INI/[General]/RequestRegisterSize (default: 10240).
(n) INI/[General]/RequestRegisterTimeoutMSecs (default: 500).
(n) Request Register information in Misc window and in HTTP status.
(c) INI/[UserPrivileges]/EnableGPRSLLC is obsolete.
(n) INI/[UserPrivileges]/GPRSPrivilegeA (default: "" )
(n) INI/[UserPrivileges]/GPRSPrivilegeB (default: "" )
(n) INI/[UserPrivileges]/GPRSPrivilegeC (default: "" )
(n) INI/[UserPrivileges]/GPRSPrivilegeD (default: "" )
(n) INI/[UserPrivileges]/GPRSPrivilegeE (default: "" )

v1.18

(n) INI/[UserPrivileges]/EnableGPRSLLC (default "").
(n) Remote capture fills LLC part of GPRS messages with zeroes for non-privileged users.
(n) Call trace fills LLC part of GPRS messages with zeroes for non-privileged users.
(c) Works with Sga8N-3 v1.01 and higher.
(c) Works with Sga8N-5 v1.03 and higher.
(c) Works with Sga7N-3 v1.16 and higher.
(c) Messages are always dumped on decoding errors.
(c) Link direction signs ("<" and ">") are replaced with HTML entities in log files.
(c) Extended HTTP status for Sga47GPRS processors (now it's same as in 'Cards' window).
(f) Sga47GPRS cards recognise configured links correctly.
(f) Cell traffic congestion counter is fixed.
(f) Fixed stat counting for encripted messages.
(f) Decoder doesn't try to interpret LLC-FCS.

v1.17

(n) Triplet count in status is negative if Rand can not be found.
(f) Deciphering stat counter is fixed.
(n) Messages from cards are sorted before processing.
(n) INI/[General]/SortingPoolSize (default: 10240).
(n) INI/[General]/SortingPoolTimeoutMSecs (default: 1000).
(n) MessageSortingPool status in Misc window and HTML status.
(f) Message counters for Sga47P19GPRS cards are displayed in HTML status too.
(f) Frame counters are updated correctly.
(c) Timestamps of statistic counters are set to the beginning of the measured period.
(n) Stat #113: number of STATUS/cell traffic congestion.

v1.16

(c) INI/[SS7Linkxxx] is obsolete.
(n) INI/[SS7Links]/Link keys for SS7 link configuration. (format: Link=LinkId Card/Channel Timeslot)
(c) INI/[GPRSLinkxxx] is obsolete.
(n) INI/[GPRSLinks]/Link keys for GPRS7 link configuration. (format: Link=LinkId Card/Channel StartingTimeslot/TimeslotCount)
(n) HTTP: Any file can be retrieved. (only current log was possible before)
(n) General: Previous/Next links at the beginning of logfiles.
(c) More unified card status reporting.
(n) Link status display for NI links.
(n) INI/[General]/LogCardEvents (0: logging disabled, all other values: enabled, default: 0)
(n) INI/[General]/CipherServerAddress. (mandatory)
(n) INI/[General]/CipherServerPort. (default: 8001)
(n) New key DelayMSecs in ini for disk-reader cards (default: 100).
(n) New key Multiplier in ini for disk-reader cards (default: 1).
(n) SS7 links can be definied for disk-reader cards.
(n) INI/[General]/CipherPacketPoolSize. (default: 10240)
(n) INI/[General]/CipherPacketPoolTimeoutMSecs. (default: 1000)
(n) INI/[General]/CipherInfoCacheSize. (default: 10240)
(n) INI/[General]/CipherInfoCacheTimeoutMSecs. (default 10000)
(c) obsolete Kc/TLLICollector settings
(n) Traffic of SS7 links is displayed in Cards window and HTML status.
(n) Per-processor traffic of Sga47P16GPRS, Sga47SS7, Sga47P16SS7 and NISS7 cards is displayed in Cards window and HTML status.
(f) Link statistics with high values are counted correctly on Sga47P16SS7 cards.
(c) Status of cipher message queue, cipher-info cache and packet pool are displayed in Misc window instead of Kc/TLLI records.

v1.15

(f) Trace debugging code removed.
(c) Messages with bad CRC are now counted for each link of SGA47P16 cards.
(n) Message is logged on statistics decoding warning.
(f) Minor stat/CI decoding problem is fixed. (bug didn't make any harm)
(f) Timeouts work for Kc records inserted via Gb messages.
(c) Gb messages generate new Kc record only when IOV/RAND is also available.
(c) Message processing doesn't stop on error.

v1.14

(n) INI/[General]/KeepAlive. (0: disable, other: enable, default: 0)
(f) TCAP message pairing ignores Gt of HLR.

v1.13

(f) TLLI and Ciphering counters work for all stat groups.
(f) Rare trace hangup problem eliminated.
(c) Message truncate length is increased to 200 (it was 100 in earlier versions) on Sga47GPRS and Sga47P16GPRS cards.
(c) Allow only 0 and 1 values for INI/[CardN]/AmplifyM key.

v1.12

(n)NFRA count for Sga47GPRS and Sga46P16GPRS cards.
(n)CRC, MTP and PCM error counters for Sga47SS7 and Sga47P16SS7 cards.
(n)MTP status events on Sga47SS7 cards.
(n)LSSU messages on Sga47SS7 cards.
(f)NTP Daylight savings calculation is now correct.
(n)MTP status events on Sga47SS7 cards.
(n)FISU and LSSU messages on Sga47SS7 cards.
(f)CRC events on Sga47SS7 cards is now correct.
(n)INI/[CardN]/GainM for Sga47P16SS7 and Sga47P16GPRS cards (0 <= M <= 3, possible values: 0, 12, 30, default: 0)
(n)INI/[CardN]/TerminationInM for Sga47P16SS7 and Sga47P16GPRS cards (0 <= M <= 3, possible values: 75, 120, 300, default: 300)
(n)INI/[CardN]/TerminationOutM for Sga47P16SS7 and Sga47P16GPRS cards (0 <= M <= 3, possible values: 75, 120, default: 120)
(n)INI/[CardN]/AmplifyM for Sga47SS7 and SGA47GPRS cards. (0 <= M <= 3, 0 <= value <= 1, default: 0)
(c)INI/[GPRSLinkN]/AmplifyM is obsolete for Sga47GPRS cards.
(n)Recognises sendAuthentocationInfoArg-v1, sendAuthenticationInfoRes-v2 MSU's.
(n)Stat #109: sum of TLLI counts.
(n)Stat #110: number of TLLI count samples.
(n)Stat #111: number of ciphered messages.
(n)Stat #112: number of successfully deciphered messages.

v1.11

(f)Recognises sendAuthenticationInfo-v2,v3 messages.

v1.10

(f)OriginalLength field in GPRS messages from Sga47P16 cards is filled correctly.
(f)NUMNSUDTBYTES stat counter fixed.
(c)Slight improvement in decipher algorythm.

v1.09

(n)Sga47P16 cards. (CardType Sga47P16SS7, Sga47P16GPRS )
(c)Stored triplets per IMSI is reduced to 10 from 20.
(f)TLLI's of trace requests are masked by 0x3fffffff.
(n)NI/SS7 card. (CardType NISS7)
(n)INI/[StatGroupN]/LinkList.
(c)INI/[GPRSLinkN]/StatGroup is obsolete.
(f)TLLI's in FLISH-LL PDU's are decoded correctly.
(n)Sends PCM OK/NFRA events to server.
(c)INI/[General]/SS7TMSObjectPath is obsolete.
(c)INI/[General]/TMSObjectPath is obsolete.
(n)Ciphering information loading/saving at startup/shutdown.
(n)INI/[General]/CipherInfoPath

v1.08

(n)Cell-change statistics. (94)
(n)TLLI-count statistics. (95: maximum, 96: minimum, 97: average)
(n)Protocol-statistics. (98: other, 99: group #0)
(c)Uses R02 dsp code on Sga47/GPRS cards which allows different number of timeslots per link than 3.
(n)new INI/[GPRSLinkXX]/TimeslotCount (mandatory, legal values: 1..8)
(c)Maximum number of simultaneous exceptions increased from 32 to 256.

v1.07

(f)SS7 remote-capture gives correct message directions.
(n)KcCollector now handles sendAuthenticationInfo messages.

v1.06

(c)INI/[General]/TimeSynchronIntervalSecs is no longer wanted by the program.
(f)KcRecords are processed correctly.
(f)No more "SAM" messages in log.

v1.05

(c)Delay after unsuccessful network connection attempts. (e.g. Poller connection)
(c)Direct time synchronization via NTP.
(c)INI/[General]/TimeSynchronIntervalSecs is now obsolete.
(n)New INI/[General]/NTPServerAddress (mandatory).
(n)New INI/[General]/NTPSynchronIntervalSecs (default: 900).
(n)New INI/[General]/TLLICompleteTimeoutSecs (default: 86400).
(n)New INI/[General]/TLLIIncompleteTimeoutSecs (default: 900).
(n)New INI/[General]/KcCompleteTimeoutSecs (default: 86400).
(n)New INI/[General]/KcIncompleteTimeoutSecs (default: 900).
(n)Can handle Sga47P16 cards for monitoring SS7 links. (EXPERIMENTAL)
(n)New INI/[General]/Sga47PSysPath key. (default: Sga47PDriver.sys)

v1.04

(c)Fixed stat-record length.
(f)No more "No free record" messages in log.
(n)New key [General]/KcRecordCound (default value 10000)
(n)New key [General]/TLLIRecordCound (default value 10000)
(c)[LinkXX]->[GPRSLinkXX] in .ini

v1.03

(c)Process priority is set to ABOVE_NORMAL.
(c)Major card-handling reorganisation.
(c)Storage speed-up.
(n)Log block params/packet header on storage error from Storage_ReadPacket.
(c)Smoother log extending.
(c)Debug log color changed from blue to gray.
(c)[General]/DataDir renamed to RecordDir
(n)Added Type key to Card? sections (recognised values: Sga47SS7, Sga47GPRS, DiskReader)
(c)DiskReaderCard doesn't change the link-id.
(c)DiskReaderCard doesn't count statistics.
(c)[General]/ServerIPAddress -> PollerAddress.
(n)New key: [General]/PollerPort.
(n)"Misc" window.
(c)DiskReaderCard: DataDir->PacketDir in ini.
(n)New key CycleCount in ini for disk-reader cards.
(n)Can disconnect from server by operator instruction.
(c)Clear net buffer only on disconnect (and not on connect)
(n)Forget PDUs feature.
(n)Restart feature.
(c)New gprsmon.bat (v1.01)
(n)Message queue status in cards' window.
(c)Bigger http-buffer.
(c)Longer status-lists.
(c)Improved card-interupt handling.
(n)Check datagram length on reading from poller.
(c)Auto-find magic-codes from poller-stream.

v1.02

(f)ioctlsocket/FIONBIO calls are now parametered correctly
(f)Date/time values in log are fixed (was -1 days in 2003).

v1.01

(f)Fixed IP_UPLINK stat counter.
(f)Fixed rare crashes on exit.
(f)Fixed socket blocking-mode settings.

v1.00

Initial version.
Works with StorageCreator v1.01.
Works with GPRSMon.bat v1.00

The StorageCreator module

The SgaGPRS monitoring system uses one or more circular buffers to store collected messages on the monitor machine. With this simple MS-DOS based utility this circular buffer can be created. Its size is adjustable between 16384 byte (16kbyte) and 2,147,467,264 byte (2Gbyte) at the creation.

Usage:

StorageCreator

buffer file path

max file size

The storage files can be anywhere on the monitor machine with any filenames and can be defined for the monitor program by the [Storage]/StorageBufferPathN entry of the GPRSMonitor.ini file, where N can be from 0 to 31 so maximum 32 storage buffers can be created.

An example how to use StorageCreator utility

To create a circular buffer which name is for example GPRS-Monitor-01.dat and size is 100 Mbyte in the d:\ path on the monitor machine the next line has to be placed in a command prompt:

StorageCreator.exe d:\GPRS-Monitor-01.dat 104857600

Version history

v1.04

(f) Works for file sizes above 2GB.

v1.03

(f) Run-count is filled correctly for empty blocks.

v1.02

(n) Filler .dsp file can be specified.
(n) File name being created is displayed.
(f) Displayed block-number is now correct on exit.

v1.01

(n) Size of created file can be specified

v1.00

Initial release

System Overview - The Monitors

The Monitor program

Features

User interface

The main menu

Configuration (GPRSmonitor.ini) file settings

The user privileges

Steps of the authentication process:

A simple example:

Warnings and errors in the log file

Sga47 card handling

ERROR level (red lines)

Sga47P16 card handling

ERROR level (red lines)

WARNING level (yellow lines)

GPRS Sga card module

WARNING level (yellow lines)

GPRS Sga card processor module

WARNING level (yellow lines)

Cipher module

WARNING level (yellow lines)

GPRS decoder module

WARNING level (yellow lines)

Monitor module

ERROR level (red lines)

WARNING level (yellow lines)

GPRS statistical module

ERROR level (red lines)

WARNING level (yellow lines)

IP connection

ERROR level (red lines)

WARNING level (yellow lines)

HTTP module

ERROR level (red lines)

WARNING level (yellow lines)

Storage system

ERROR level (red lines)

Poller module

WARNING level (yellow lines)

Call Trace module

ERROR level (red lines)

WARNING level (yellow lines)

Remote Capture module

ERROR level (red lines)

Version history

The StorageCreator module

An example how to use StorageCreator utility

Version history

Configuration (`GPRSmonitor.ini`) file settings