Security Level:

DT Analysis

www.huawei.com

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

Contents

• What & Effect & Event

• Question 5
• Appendix
What

Serving cell Neighbor cell

• DL Rxlev DL Rxqual • DL Rxlev DL Rxqual

• TxPw • TxPw
• BSIC BCCH CGI • BSIC BCCH CGI
• CA MA BA • CA MA BA
• TA • TA
• Parameter • Parameter
• Signaling • Signaling

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

Effect

• Good Rxlev / Good Rxqual / Nomal TA

• Good Rxlev / bad Rxqual / Normal TA Interference

• Bad Rxlev / Good Rxqual / Normal TA Impossible

• Bad Rxlev / Bad Rxqual / Normal TA Hole

Environment
Fault
• Bad Rxlev / Bad Rxqual / Big TA Island

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

Event
Serving Rxlev
• Call drop Serving Rxqual
Neighbor Rxlev

• Call establish failure

signaling
• Handover No HO
Dragged HO
Frequent HO
• Swap feeder HO failure

Crossed transmit feeders

Crossed receive feeders

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

Q1:What HO

EDGE Handover ?

PBGT Handover ?

Quality Handover ?

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

Q2: NO HO?

Normal or abnormal ?

Dragged HO or due to PC ?

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

 Q3: missing or fake

Missing Neighbor or Fake Neighbor ?

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

 Q4: Which is

Sudden Decrease due to obstruction ?

Lack of Dominant Server ?
Coverage hole ?

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

 Q5: Why frequent

Why in these two area

Frequent HO
happened?

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

Appendix
• L3 message in DT
MS1
Paging Request Type 1

Time: 15:40:11.07

BSIC : 0-6
Channel number : 75
L2 Length field
Length : 9
Skip indicator : 0
Protocol discriminator : (6) Radio resources management messages
Message type : 33
Channels needed
Second channel : (0) Any channel
First channel : (0) Any channel
Page mode : (0) Normal paging
Mobile identity 1
Odd/even indication : (0) Even number of digits
Type of identity : (4) TMSI/P-TMSI
TMSI/P-TMSI : Hex 0x40002630
Rest octets
Packet page indication 1: Paging procedure for RR connection establishment
Packet page indication 2: Paging procedure for RR connection establishment

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

 MS1
Paging Request Type 2

Time: 15:40:11.09

BSIC : 0-6
Channel number : 75
L2 Length field
Length : 11
Skip indicator : 0
Protocol discriminator : (6) Radio resources management messages
Message type : 34
Channels needed
Second channel : (0) Any channel
First channel : (0) Any channel
Page mode : (0) Normal paging
Mobile identity 1
TMSI/P-TMSI : Hex 0x23012B6D
Mobile identity 2
TMSI/P-TMSI : Hex 0x41023E61
Rest octets
Packet page indication 3: Paging procedure for RR connection establishment

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

MS1
Channel Request

Time: 15:40:11.23

FrameNumber : 2334497
Random Access Information
Establishment cause : (7) Originating speech call from dual-rate MS when TCH/H is
sufficient and supported by the MS for speech calls and the network sets NECI bit to 1
Random reference : 1

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

MS1
Immediate Assignment

Time: 15:40:11.39

BSIC : 0-6
Channel number : 75
````````````````````````````````````````````````````````````````````````````````````````````````````````````````````
`````````````````````````````````````````````````````````````````````````````````````````````````````````````````````
Channel description
Channel type : (8) SDCCH/8 + SACCH/C8 or CBCH (SDCCH/8)
Subchannel : 7
Timeslot number (TN) : 1
Training sequence code (TSC) : 6
Hopping RF channel : (0) NO
Absolute radio frequency channel number (ARFCN) : 75
Request reference
Establishment cause : (7) Originating speech call from dual-rate MS when TCH/H is
sufficient and supported by the MS for speech calls and the network sets NECI bit to 1
Random reference : 2
FN modulo 42432 : 701
Representation : T1' = 0, T2 = 25, T3 = 38
Timing advance
Timing advance value : 2
Mobile allocation
Length : 0
`````````````````````````````````````````````

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

MS1
CM Service Request

Time: 15:40:11.53
Frame number: not valid

Skip indicator : 0
Protocol discriminator : (5) Mobility management messages
Message type : 36
Ciphering key sequence number
Key sequence : (1) 1
CM service type
Service type : (1) Mobile originating call establishment or packet mode connection establishment
Mobile station classmark
Revision level : (1) Phase 2 mobile station
ES IND : (1) "Controlled Early Classmark Sending" option is implemented in the MS
A5/1 : (0) Encryption algorithm A5/1 available
RF Power Capability : (3) class 4
PS capability (pseudo-synchronization capability) : (0) PS capability not present
FC Frequency Capability : (1) (GSM900 only:) The MS supports E-GSM or R-GSM
CM3 : (1) The MS supports options that are indicated in classmark 3 IE
A5/3 : (0) Encryption algorithm A5/3 not available
A5/2 : (1) Encryption algorithm A5/2 available
`````````````````````````````````````````````````````````````````
Mobile identity
Odd/even indication : (0) Even number of digits
Type of identity : (4) TMSI/P-TMSI
TMSI/P-TMSI : Hex 0x230250FC

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

MS1
Setup

Time: 15:40:12.71
Frame number: not valid

Transaction identifier : 0
Protocol discriminator : (3) Call control; call related SS messages
Message type : 5
Bearer capability 1
Radio channel requirement : (3) The MS supports at least full rate speech version 1 and half rate speech
version 1. The MS has a greater preference for full rate speech version 1.
Coding standard : (0) GSM standardized coding as described below
Transfer mode : (0) circuit mode
Information transfer capability : (0) speech
Speech version indication : (4) GSM full rate speech version 3
Octet(s) 3b etc :
[0 ] : Coding : (0) octet used for extension of information transfer capability
Speech version indication : (2) GSM full rate speech version 2
[1 ] : Coding : (0) octet used for extension of information transfer capability
Speech version indication : (0) GSM full rate speech version 1
[2 ] : Coding : (0) octet used for extension of information transfer capability
Speech version indication : (5) GSM half rate speech version 3
[3 ] : Coding : (0) octet used for extension of information transfer capability
Speech version indication : (1) GSM half rate speech version 1
Called party BCD number
Type of number : (0) Unknown
Numbering plan identification : (1) ISDN/telephony numbering plan (Rec. E.164/E.163)
Number : 01815389681
CLIR suppression
CC Capabilities
Maximum number of supported bearers : 1 bearer supported
PCP : (0) The mobile station does not support the Prolonged Clearing Procedure.
DTMF : (1) The mobile station supports DTMF.
Maximum number of speech bearers : 1

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

MS1
Call Proceeding

Time: 15:40:14.43
Frame number: not valid

Transaction identifier : 8
Protocol discriminator : (3) Call control; call related SS messages
Message type : 2
Bearer Capability 1
Radio channel requirement : (3) Sparebits
Coding standard : (0) GSM standardized coding as described below
Transfer mode : (0) circuit mode
Information transfer capability : (0) speech
Coding : (0) octet used for extension of information transfer capability
CTM : (0) CTM text telephony is not supported
Speech version indication : (4) GSM full rate speech version 3
Octet(s) 3b etc :
[0 ] :
Coding : (0) octet used for extension of information transfer capability
Speech version indication : (2) GSM full rate speech version 2
[1 ] :
Coding : (0) octet used for extension of information transfer capability
Speech version indication : (0) GSM full rate speech version 1
[2 ] :
Coding : (0) octet used for extension of information transfer capability
Speech version indication : (5) GSM half rate speech version 3
[3 ] :
Coding : (0) octet used for extension of information transfer capability
Speech version indication : (1) GSM half rate speech version 1

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

 MS1
Assignment Command

Time: 15:40:18.55
Frame number: not valid

Skip indicator : 0
Protocol discriminator : (6) Radio resources management messages
Message type : 46
Description of the first channel, after time
Channel type : (2) TCH/H + ACCHs
Subchannel : 0
Timeslot number (TN) : 4
Training sequence code (TSC) : 6
Hopping RF channel : (0) NO
Absolute radio frequency channel number (ARFCN) : 63
Power command
Fast Measurement Reporting and Power Control : (0) FPC not in use
Power level : 5
Mode of the first channel (channel set 1)
Mode : (1) Speech full rate or half rate version 1

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

 MS1
Connect

Time: 15:40:22.31
Frame number: not valid

Transaction identifier : 8
Protocol discriminator : (3) Call control; call related SS messages
Message type : 7
Connected number
Type of number : (2) National number
Numbering plan identification : (1) ISDN/telephony numbering plan (Rec. E.164/E.163)
Presentation indicator : (0) Presentation allowed
Screening indicator : (3) Network provided
Number : 1815389681

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

 MS1
Measurement Report

Time: 15:40:12.60

L2 Address field
LPD : 0
SAPI : 0
C/R : (0) Command
L2 Control field
U-Frame
P (Poll) : 0
L2 Length field
Length : 18
Skip indicator : 0
Protocol discriminator : (6) Radio resources management messages
Message type : 21
BA USED : 0
DTX USED : (0) DTX is not used
RxLev Full Serving Cell : 11
3G BA USED : 0
MEAS VALID : (0) The measurement results are valid
RxLev Sub Serving Cell : 11
RxQual Full Serving Cell : 5
RxQual Sub Serving Cell : 5
Neighbour cell measurements
RxLev BSIC BCCH-INDEX :
[0 ] : 11 0-0 08
[1 ] : 10 2-0 07

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

MS1
Handover Command

Time: 15:40:28.93
Frame number: not valid

Skip indicator : 0
Protocol discriminator : (6) Radio resources management messages
Message type : 43
Cell description
BSIC : 0-0
BCCH ARFCN : 85
Description of the first channel, after time
Channel type : (2) TCH/H + ACCHs
Subchannel : 1
Timeslot number (TN) : 3
Training sequence code (TSC) : 0
Hopping RF channel : (0) NO
Absolute radio frequency channel number (ARFCN) : 54
Handover reference
Handover reference value : 194
Power command and access type
Access type control : (0) Sending of Handover Access is mandatory
Fast Measurement Reporting and Power Control : (0) FPC not in use
Power level : 5
Synchronization indication
Normal cell indication : (1) Out of range timing advance shall trigger a handover failure procedure
Report observed time difference : (0) 'Mobile Time Difference' IE shall not be included in the Handover Complete message
Synchronization indication : (0) Non-synchronized
Mode of the first channel (channel set 1)
Mode : (1) Speech full rate or half rate version 1

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

 MS1
Physical Information

Time: 15:40:29.14
Frame number: not valid

Skip indicator : 0
Protocol discriminator : (6) Radio resources management messages
Message type : 45
Timing Advance
Timing advance value : 14

MS1
Disconnect

Time: 15:40:47.64
Frame number: not valid

Transaction identifier : 0
Protocol discriminator : (3) Call control; call related SS messages
Message type : 37
Cause
Coding standard : (3) Standard defined for the GSM PLMNS
Location : (0) user
cause value : (16) Normal call clearing

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential

Thank you
www.huawei.com