Guide for Signaling Trace (Version 6.20.

712)
Huanglisheng-2013-5-8
About this document: Include 5 parts.

Part 1: Activating the OMCR Server; (Most of time OMCR team already help us to
activate, if not, then you can do it as guideline, otherwise we can pass part 1)
Part 2: Login Sigtrace Tools and Finish Basic Setting;
Part 3: Start Signaling Trace;
Part 4: Analyze Signaling
Part 5: GSM Basic Signaling Flow.

Part 1: Activating the OMCR server.

(1).Start->Run->cmd.

(2).Telnet BSC IP which you want to record signaling trace, so you need to know the BSC IP .

(3).User name gomcr , Passwordgomcr123

Use pwd to show you the path, and then use cd to login the server
pwd
cd zxgomcr/ums-svr/tools/zxgomcr-sigtrace/server
./server.sh (means activate one time only, it will be deactivate when you logout)
nohup ./server.sh & (means once you activate it will be activated forever until you deactivate it)
ps ef|grep sig (check the server activate or not ,if showing sigtrc_s.jar, means activated)

<> 1
All Rights reserved, No Spreading abroad without Permission of ZTE
Now step 1 finished, you have already activated the server, you can go to step 2.

<> 2
All Rights reserved, No Spreading abroad without Permission of ZTE
Part 2: Login sigtrace tools and finish basic setting.
(1).Install ISMG and find the path : IOMCRV6.20.712C\ums-clnt\tools\zxgomcr-sigtrace\client\
sigtrcw.exe

(2).Login: use default--Username: omcr, Password: omcr, Port:7777, only need to set the BSC IP.

(3).Setting tools

A. Select the version (English or Chinese).

<> 3
All Rights reserved, No Spreading abroad without Permission of ZTE
B. Setting the items(recommend to configure 500000)

Now step 2 finished.

Part 3: Start to signaling trace

(1).Select the BSC, and click Update Config , most of time the BSC value only show 1
eventhough you login BSC 7, no issue , just select.

<> 4
All Rights reserved, No Spreading abroad without Permission of ZTE
(2).Select CS or cell or other.

(3).Select the cell you want to trace signal.

(4).Start to trace signal.(You can pause showing)

<> 5
All Rights reserved, No Spreading abroad without Permission of ZTE
(5).You can also trace the IMSI/TMSI signal.
A. Select the MS.

<> 6
All Rights reserved, No Spreading abroad without Permission of ZTE
B. Select the IMSI/TMSI

<> 7
All Rights reserved, No Spreading abroad without Permission of ZTE
Part 4: Analyze signaling
(Most of time we use RMA or MA10 to analysis the signaling)
(1).RMA.V2.20.010---Product of ZTE, you can filter the signaling which you want to check(We
have document about how to use this tools, here just introduce to you, you can apply the license
from UniPOS@zte.com.cn)

(2).MA10--- Produce by another company, also a good tool to analysis the signaling.
(You can filter the signaling which you want to check ,we also have document about how to use
this tools, here just introduce to you)

<> 8
All Rights reserved, No Spreading abroad without Permission of ZTE
<> 9
All Rights reserved, No Spreading abroad without Permission of ZTE
 Part 5: GSM Basic signaling flow.
1. MS-originated flow(1)

MSC BSC BTS MS

2 Channel Required 1 Channel Request(RACH)

3 Channel Activation
4 Channel Activation Ack
Immediate Assigment
5
Command 6 Immediate Assigment (AGCH)

8 CM Service Request 7 CM Service Request(SDCCH)

9 CM Service Request
Estableish Indication 10 UA(SDCCH)
11 Authentication Request 12 Authentication Request(SDCCH)
13 Authentication Reponse(SDCCH)
14 Authentication Reponse
15 Ciphering Mode Command
16 Ciphering Mode Command 17 Ciphering Mode Command(SDCCH)

18 Ciphering Mode Complete(SDCCH)

19 Ciphering Mode Complete
20 TMSI Reallocation Command 21 TMSI Reallocation Command(SDCCH)
22 TMSI Reallocation Complete(SDCCH)
23 TMSI Reallocation Complete
24 Setup(SDCCH)
25 Setup
26 Call Proceeding
27 Call Proceeding(SDCCH)
28 Assignment Request
29 Channel Activation
30 Channel Activation Ack
31 Assignment Command(SDCCH)

<> 10
All Rights reserved, No Spreading abroad without Permission of ZTE
 1.MS-originated flow(2)

MSC BSC BTS MS

31 Assignment Command(SDCCH)
32 SABM(FACCH)
33 Establish Indication
34 UA(FACCH)
35 Assignment Complete(FACCH)
36 Assignment Complete
37 RF Channel Release
38 RF Channel Release Ack
39 Alerting
40 Alerting(SDCCH)
41 Connect
42 Connect(SDCCH)
43 Connect Ack(FACCH)
44 Connect Ack
45 Measurement Report(SACCH)
46 Measurement Report
47 Disconnect(FACCH)
48 Disconnect
49 Release
50 Release(FACCH)
51 Release Complete(FACCH)
52 Release Complete
53 Clear Command
54 Channel Release(FACCH)
55 Deactivate SACCH
56 DISC(FACCH)
57 UA(SACCH)
58 Release Indication
59 RF Channel Release

61 Clear Complete 60 RF Channel Release Ack

<> 11
All Rights reserved, No Spreading abroad without Permission of ZTE
 2. MS-terminated flow (1)

MSC BSC BTS MS

1 Paging
2 Paging Command
3 Paging Request

5 Channel Required 4 Channel Request(RACH)

6 Channel Activation
7 Channel Activation Ack
Immediate Assigment
8
Command 9 Immediate Assigment (AGCH)
10 SABM Paging Response(SDCCH)
12 Paging Response 11 Paging Response(SDCCH)
Establish Indication 13 UA(SDCCH)
14 Authentication Request 15 Authentication Request(SDCCH)
16 Authentication Reponse(SDCCH)
17 Authentication Reponse
18 Ciphering Mode Command
19 Ciphering Mode Command 20 Ciphering Mode Command(SDCCH)

21 Ciphering Mode Complete(SDCCH)

22 Ciphering Mode Complete
23 TMSI Reallocation Command 24 TMSI Reallocation Command(SDCCH)
25 TMSI Reallocation Complete(SDCCH)
26 TMSI Reallocation Complete
27 Setup
28 Setup(SDCCH)
30 Call Comfirm 29 Call Comfirm(SDCCH)

31 Assignment Request
32 Channel Activation
33 Channel Activation Ack
34 Assignment Command(SDCCH)

<> 12
All Rights reserved, No Spreading abroad without Permission of ZTE
 2. MS-terminated flow (2)

MSC BSC BTS MS

35 SABM(FACCH)
36 Establish Indication
37 UA(FACCH)
38 Assignment Complete(FACCH)
39 Assignment Complete
40 RF Channel Release
41 RF Channel Release Ack
43 Alerting 42 Alerting(SDCCH)

45 Connect 44 Connect(SDCCH)
46 Connect Ack 47 Connect Ack(FACCH)
48 Measurement Report(SACCH)
49 Measurement Report
50 Disconnect(FACCH)
51 Disconnect
52 Release
53 Release(FACCH)
54 Release Complete(FACCH)
55 Release Complete
56 Clear Command
57 Channel Release(FACCH)
58 Deactivate SACCH
59 DISC(FACCH)
60 UA(SACCH)
61 Release Indication
62 RF Channel Release

64 Clear Complete 63 RF Channel Release Ack

65 SCCP Release
66 SCCP Release Ack

<> 13
All Rights reserved, No Spreading abroad without Permission of ZTE
3.Intra-cell Handover flow

4.Intra-BSC Inter-cell Handover flow

5.Intra-MSC Inter-BSC Handover flow

<> 14
All Rights reserved, No Spreading abroad without Permission of ZTE
6.Location update flow

<> 15
All Rights reserved, No Spreading abroad without Permission of ZTE