AITIA	Sga-WM - The Diameter monitor	CIMDSMS

The Diameter monitor program
`("Sga_WMmon4G")`

Features
User interface
Logging
Configuration
Version history

Features

Accepts connections receives signaling messages from one or more Packet Capture module(s)
Handles SCTP fragmentation, SCTP retransmission and TSN jump
Filters for Update Location related messages and drops unnecessary traffic
Appends names for IMSI's ("subscriber group") and MME's ("operator")
Connects to the Monitor Poller module and forwards Update Location related messages

User interface

The main menu

Menu	Menuitem	Shortcut(s)	Meaning
[Log]
	Find line containing...	(Ctrl-F)	Find text in log window
	Find next matching line	(F3)	Find next occurrence of text in log window
	Details		Detail level of logging (Off, Normal, Detailed, or Debug)
	Flush statisctics counters into log		Write statistics to Log
	Flush and zero statistics counters		Write statistics to Log and zero counters
	List all IP/SCTP pairs seen so far		List IP/SCTP pairs to the log
[Prefix names]
	Reload IMSI prefix names		Reload the content of the IMSI prefix list file
	Reload MCC\|MNC list		Reload the content of the MCC\|MNC list file (operator definition)
[WM-Poller]
	Allow auto-connect to Poller	(Ctrl-A or )	Enables automatic connection to the server
	Reload forwarding filters		Reloads IP based filters
	Disconnect now!		Tears down Poller connection
[Options]
	Auto scroll	(ScrollLock, or )	Allow automatic scrolling of the log screen
	Show log	(Ctrl-Tab)	Show log screen
	Show SMSC queues	(Ctrl-Tab)	Show SMSC waiting queue and SMSC connection status window
	Save settings		Save actual settings into the configuration (INI) file

The bottom status-line

Uptime: Time elapsed since module has been started up;
- Hovering over: Start date and time
- left-click: Kernel and user time
Capture counters
- Captured N Ethernet bytes: Amount of bytes received from the Tapper module
- in N packets: Number of received IP packets
- from N GyTapper: Number of connected Tapper modules
IP level counters
- IP: Number of IP packets
  - frag: Number of fragmented IP packets
- SCTP: Number of SCTP packets
  - frag: Number of fragmented SCTP packets
- Diameter: Number of Diameter messages
- Unexpected: Number of non-SCTP/Diameter messages
SCTP related counters
- SCTP/
  - INIT: Number of INIT chunks
  - DATA: Number of DATA chunks
  - SACK: Number of SACK chunks
- DATA: Number of data chunks
- TSN(retx/jump): Number of TSN issues, retransmission or TSN jumping
- on N IPSCTP pairs: Number of observed IP/SCTP pairs
- o.f.: Number of overflown packets
SCTP DATA reassembly Counters for SCTP reassembly
- fragments: Number of fragmented SCTP DATA chunks (first+mid+last)
- overrun: Number of packets which exceeds the limit of active DATA chunks
- overfill: Number of packets whose DATA chunk length exceeds the limit
- mismatch: Number of packets which do not fit
- lengtherror: Number of packets with length error
Counters of forwarded messages
- Fwd'ed N+M: Number of messages forwarded to the Poller module
- dissipated N+M: Number of messages dropped due to the modules is not connected to the Poller module
- of Ntotal+Mtotal MSUs: Total number of messages
- Filtered out by IP: Number of messages filtered out based on the IP filter
WM: status of the Poller connection; possible value/colors:
- not connected (red): Connection not yet established
- connecting (yellow): During connection establishment process
- connected (green):: Connection established0

Logging

The module creates daily logfiles about its working. The name of the logfile is "Modulename_YYYYMMDD.log" reflecting the day when it is created.
The module can write information into the logfile and onto the screen with several detail levels set by the [Log]/Details menu item. The logging level can be:

Off (0) - warnings/errors are only reported (minimal logfile size and CPU usage)
Normal (1) - information about normal operation are also written into the logfile/screen
Detailed (2) - every received and sent signaling messages are logged
Debug (3) - hexadecimal information of messages is recorded (largest logfile and CPU usage)

Status line counters are logged in every fifteen minutes irrespectively of logging level actually set.

The different colors of log entries have different meanings:

Code Color Usage
0 Black Compact data record
1 Red Errors
2 Green Open/close output file/stream
3 Blue Open/close input file/stream
4 Yellow Warnings
5 Light Gray Detailed data (debug info)
6 Dark Grey Detailed data (user info)
7 Purple Operator intervention;
Errors with emphasis

Code	Color	Usage
0	Black	Compact data record
1	Red	Errors
2	Green	Open/close output file/stream
3	Blue	Open/close input file/stream
4	Yellow	Warnings
5	Light Gray	Detailed data (debug info)
6	Dark Grey	Detailed data (user info)
7	Purple	Operator intervention; Errors with emphasis

Configuration (Sga_WMmon4G.ini) file settings

Section	Entry	Example	Meaning
[Position]
	iLeft	140	Position of the program module on the display screen
	iTop	72	Position of the program module on the display screen
	iWidth	995	Position of the program module on the display screen
	iHeight	694	Position of the program module on the display screen
[Options]
	bAutoScroll	True	(Refer to the corresponding menuitem!)
[GyTapper]
	wLocalPort	7777	TCP port where GyTapper can connect to
	10.117.144.111	GyTapper machine	IP address and a name of allowed machines to connect (many IP addresses can be listed in this section)
[WM-Poller]
	bAllowAutoConnect	False	(Refers to the `[WM-Poller]/Allow auto-connect` menu item!)
	sIPAddress	127.0.0.2	IP address of WM-Poller
	wTCPPort	7002	Port on which WM-Poller is listening
	sSendThisName	WM4	Monitor program identifier in case when more than one monitor program run connects to the Poller from the same IP address
[Filters]
	sAllowIPAddress#{0..31}	172.28.248.1	Messages having their Source or Destination IP address on this list will only be forwarded to the Poller "N" can run from 0 to 31.
[Advanced]
	wLogDetailLevel	3	(Equals to the listed order; refer to the corresponding menuitem!)
	dwMaxLinesInLogWindow	1000	Number of lines in the log window on screen
	sIMSIPrefFile	IMSIPref.cfg	Path and filename for the IMSI prefix file
	sMCCMNClistFile	MCCMNC_list.lst	Path and filename for the MCC\|MNC file
	sLogFilesPath	c:\Sga-CIMD\LogFiles	Path for the LOG files

Version history

v0.90

Initial release

The Diameter monitor program("Sga_WMmon4G")

Table of Contents