Author Topic: No GPRS connection with some devices  (Read 828 times)

John

  • Newbie
  • *
  • Posts: 7
    • View Profile
No GPRS connection with some devices
« on: October 12, 2018, 09:33:46 AM »
Hi,

I installed yate and yateBTS on Debian sistem with a Bladerf x115 and i can easily call and send sms, with bot and with 2 device in the same network (I'm in NiPC MODE).
I can connect with no problem iphone 5s (apple SOC) and Huawei (Qualcomm SOC) in GPRS but i cannot get any connection with my Honor (Kirin Soc) smartphone, i thing that is something related to the different modem because similar post
here : https://forum.yate.ro/index.php?topic=1927.0
and here : https://forum.yate.ro/index.php?topic=1843.msg5990#msg5990
but i have no responce to my questions.

On attachment you can find the GGSN and SGSN log and a wireshark pcap, both related to honor smartphone connection.

Versions:
Code: [Select]
Yate 6.0.1 devel1 r6313
Code: [Select]
bladeRF-cli version:        1.6.1-2018.08-release-1-ppabionic
libbladeRF version:         2.0.2-2018.08-release-1-ppabionic

Firmware version:           2.2.0-git-3d38fac2
FPGA version:               0.1.2

John

  • Newbie
  • *
  • Posts: 7
    • View Profile
Re: No GPRS connection with some devices
« Reply #1 on: October 15, 2018, 10:10:22 AM »
I'm trying to go deep into the problem, i fond some difference in my devices and i wanna show to you.

In the GGSN log for the honor device i got a persistent loop blocked into "RAU"

Code: [Select]
10:31:51.9:ip link set sgsntun0 up
 10:31:52.2:ip route add to 192.168.99.0/24 dev sgsntun0
 10:34:50.9:SGSN: Received GPRS SuspensionRequest for tlli=0xeb28e958
 10:34:54.6:SGSN: Created SgsnInfo: MS#1,TLLI=ab28e958 (TLLI=0xab28e958) ConnID=-1 (-1) [0x7f13a4031230]
 10:34:54.6:LLC: llcWriteLowSide sapi=1
 10:34:54.6:LLC: UI::llcProcess
 10:34:54.6:LLC: LlcEntityGmm lleUplinkData
 10:34:54.6:SGSN: Received RoutingAreaUpdateRequest mUpdateType=0 mFollowOnRequestPending=0 mobileId=not present addtionalMobileId=not present drx=8192 tmsiStatus=0 pdpContextStatus=PdpContextStatus=0,0 mCypheringKeySequenceNumber=1 oldRaId=MCC=222 MNC=88f LAC=14506 RAC=0 mOldPtmsiSignature=10620458 mRequestedReadyTimerValue=22 mMsNetworkCapability=ByteVector(size=3 data: e5 60 0c)
  MsRaCapability[GSM_E]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_1800]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_850]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
 MS#1,TLLI=ab28e958 (TLLI=0xab28e958) ConnID=-1 (-1) [0x7f13a4031230]
 10:34:54.6:SGSN: Received RA Update Req on  MS#1,TLLI=ab28e958 (TLLI=0xab28e958) ConnID=-1 (-1) [0x7f13a4031230]
 10:34:54.6:SGSN: Connection allocated to MS#1,TLLI=ab28e958 (TLLI=0xab28e958) ConnID=8193 (8193) [0x7f13a4031230]
 10:34:54.6:SGSN: Sending IdentityRequest mIdentityType=1 mForceToStandby=0 MS#1,TLLI=ab28e958 (TLLI=0xab28e958) ConnID=-2 (-2) [0x7f13a4031230] frame(first20)=ByteVector(size=3 data: 08 15 01)
 10:34:54.6:SGSN: Creating 'IdentityRequest' PDU with TLLI=0xab28e958,0x0 for  MS#1,TLLI=ab28e958
 10:34:55.1:LLC: llcWriteLowSide sapi=1
 10:34:55.1:LLC: UI::llcProcess
 10:34:55.1:LLC: LlcEntityGmm lleUplinkData
 10:34:55.1:SGSN: Received IdentityResponse mobileId= IMSI=xxxxxxxxxxxxx MS#1,TLLI=ab28e958 (TLLI=0xab28e958) ConnID=-2 (-2) [0x7f13a4031230]
 10:34:55.1:SGSN: Allocated new GMM info for MS#1,TLLI=ab28e958 (TLLI=0xab28e958) imsi=xxxxxxxxxxxxx ConnID=-2 (-2) [0x7f13a4031230]
 10:34:55.1:SGSN: Created SgsnInfo: (TLLI=0xc00af001) ConnID=-1 (-1) [0x7f13a4033f90]
 10:34:55.1:SGSN: Changing TLLI to MS#1,TLLI=ab28e958,c00af001 (TLLI=0xc00af001) imsi=xxxxxxxxxxxxx ConnID=-2 (-2) [0x7f13a4033f90]
 10:34:55.1:SGSN: adjusting connection MS#1,TLLI=ab28e958,c00af001 (TLLI=0xab28e958) imsi=xxxxxxxxxxxxx ConnID=-2 (-2) [0x7f13a4031230]
 10:34:55.1:SGSN: Sending RoutingAreaUpdateAccept mUpdateResult=0 mForceToStandby=0 ptmsi=0xaf001 MSIdentity(mTmsi)=0x0 RAUpdateTimer=5400 RAUpdateIE=0x49 PdpContextStatusCurrent=PdpContextStatus=0,0 MS#1,TLLI=ab28e958,c00af001 (TLLI=0xab28e958) imsi=xxxxxxxxxxxxx ConnID=-2 (-2) [0x7f13a4031230] frame(first20)=ByteVector(size=14 data: 08 09 00 49 17 22 17 03 e8 00 18 05 f4 00 0a f0 01 32 02 00)
 10:34:55.1:SGSN: Creating 'RoutingAreaUpdateAccept' PDU with TLLI=0xab28e958,0xc00af001 for  MS#1,TLLI=ab28e958,c00af001
 10:35:09.7:LLC: llcWriteLowSide sapi=1
 10:35:09.7:LLC: UI::llcProcess
 10:35:09.7:LLC: LlcEntityGmm lleUplinkData
 10:35:09.7:SGSN: Received RoutingAreaUpdateRequest mUpdateType=0 mFollowOnRequestPending=0 mobileId=not present addtionalMobileId=not present drx=8192 tmsiStatus=0 pdpContextStatus=PdpContextStatus=0,0 mCypheringKeySequenceNumber=1 oldRaId=MCC=222 MNC=88f LAC=14506 RAC=0 mOldPtmsiSignature=10620458 mRequestedReadyTimerValue=22 mMsNetworkCapability=ByteVector(size=3 data: e5 60 0c)
  MsRaCapability[GSM_E]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_1800]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_850]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
 MS#1,TLLI=ab28e958,c00af001 (TLLI=0xab28e958) imsi=xxxxxxxxxxxxx ConnID=-2 (-2) [0x7f13a4031230]
 10:35:09.7:SGSN: Received RA Update Req on  MS#1,TLLI=ab28e958,c00af001 (TLLI=0xab28e958) imsi=xxxxxxxxxxxxx ConnID=-2 (-2) [0x7f13a4031230]
 10:35:09.7:SGSN: Sending RoutingAreaUpdateAccept mUpdateResult=0 mForceToStandby=0 ptmsi=0xaf001 MSIdentity(mTmsi)=0x0 RAUpdateTimer=5400 RAUpdateIE=0x49 PdpContextStatusCurrent=PdpContextStatus=0,0 MS#1,TLLI=ab28e958,c00af001 (TLLI=0xab28e958) imsi=xxxxxxxxxxxxx ConnID=-2 (-2) [0x7f13a4031230] frame(first20)=ByteVector(size=14 data: 08 09 00 49 17 22 17 03 e8 00 18 05 f4 00 0a f0 01 32 02 00)
 10:35:09.7:SGSN: Creating 'RoutingAreaUpdateAccept' PDU with TLLI=0xab28e958,0xc00af001 for  MS#1,TLLI=ab28e958,c00af001
 10:35:24.5:LLC: llcWriteLowSide sapi=1
 10:35:24.5:LLC: UI::llcProcess
 10:35:24.5:LLC: LlcEntityGmm lleUplinkData
 10:35:24.5:SGSN: Received RoutingAreaUpdateRequest mUpdateType=0 mFollowOnRequestPending=0 mobileId=not present addtionalMobileId=not present drx=8192 tmsiStatus=0 pdpContextStatus=PdpContextStatus=0,0 mCypheringKeySequenceNumber=1 oldRaId=MCC=222 MNC=88f LAC=14506 RAC=0 mOldPtmsiSignature=10620458 mRequestedReadyTimerValue=22 mMsNetworkCapability=ByteVector(size=3 data: e5 60 0c)
  MsRaCapability[GSM_E]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_1800]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_850]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
 MS#1,TLLI=ab28e958,c00af001 (TLLI=0xab28e958) imsi=xxxxxxxxxxxxx ConnID=-2 (-2) [0x7f13a4031230]
 10:35:24.5:SGSN: Received RA Update Req on ....
and it goes for ever, so the sgsn dosn't get the ROUTINGAREACOMPLETE.

I can see the same on wireshark :

Code: [Select]
No.     Time           Source                Destination           Protocol Length Info
 217200 157.586892     192.168.100.4         192.168.100.121       GPRS-LLC 120    SAPI: LLGMM, UI, protected, non-ciphered information, N(U) = 3(DTAP) (GMM) Routing Area Update Request

Frame 217200: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) on interface 0
Ethernet II, Src: Dell_68:2d:ec (64:00:6a:68:2d:ec), Dst: Pegatron_69:33:65 (4c:72:b9:69:33:65)
Internet Protocol Version 4, Src: 192.168.100.4, Dst: 192.168.100.121
User Datagram Protocol, Src Port: 51771, Dst Port: 4729
GSM TAP Header, ARFCN: 0 (Uplink), TS: 255, Channel: UNKNOWN (255)
MS-SGSN LLC (Mobile Station - Serving GPRS Support Node Logical Link Control)  SAPI: GPRS Mobility Management
GSM A-I/F DTAP - Routing Area Update Request

No.     Time           Source                Destination           Protocol Length Info
 217202 157.589253     192.168.100.4         192.168.100.121       GPRS-LLC 67     SAPI: LLGMM, UI, protected, non-ciphered information, N(U) = 0(DTAP) (GMM) Identity Request

Frame 217202: 67 bytes on wire (536 bits), 67 bytes captured (536 bits) on interface 0
Ethernet II, Src: Dell_68:2d:ec (64:00:6a:68:2d:ec), Dst: Pegatron_69:33:65 (4c:72:b9:69:33:65)
Internet Protocol Version 4, Src: 192.168.100.4, Dst: 192.168.100.121
User Datagram Protocol, Src Port: 51771, Dst Port: 4729
GSM TAP Header, ARFCN: 0 (Downlink), TS: 255, Channel: UNKNOWN (255)
MS-SGSN LLC (Mobile Station - Serving GPRS Support Node Logical Link Control)  SAPI: GPRS Mobility Management
GSM A-I/F DTAP - Identity Request

No.     Time           Source                Destination           Protocol Length Info
 217244 158.048129     192.168.100.4         192.168.100.121       GPRS-LLC 75     SAPI: LLGMM, UI, protected, non-ciphered information, N(U) = 4(DTAP) (GMM) Identity Response

Frame 217244: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0
Ethernet II, Src: Dell_68:2d:ec (64:00:6a:68:2d:ec), Dst: Pegatron_69:33:65 (4c:72:b9:69:33:65)
Internet Protocol Version 4, Src: 192.168.100.4, Dst: 192.168.100.121
User Datagram Protocol, Src Port: 51771, Dst Port: 4729
GSM TAP Header, ARFCN: 0 (Uplink), TS: 255, Channel: UNKNOWN (255)
MS-SGSN LLC (Mobile Station - Serving GPRS Support Node Logical Link Control)  SAPI: GPRS Mobility Management
GSM A-I/F DTAP - Identity Response

No.     Time           Source                Destination           Protocol Length Info
 217245 158.048434     192.168.100.4         192.168.100.121       GPRS-LLC 85     SAPI: LLGMM, UI, protected, non-ciphered information, N(U) = 1(DTAP) (GMM) Routing Area Update Accept

Frame 217245: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface 0
Ethernet II, Src: Dell_68:2d:ec (64:00:6a:68:2d:ec), Dst: Pegatron_69:33:65 (4c:72:b9:69:33:65)
Internet Protocol Version 4, Src: 192.168.100.4, Dst: 192.168.100.121
User Datagram Protocol, Src Port: 51771, Dst Port: 4729
GSM TAP Header, ARFCN: 0 (Downlink), TS: 255, Channel: UNKNOWN (255)
MS-SGSN LLC (Mobile Station - Serving GPRS Support Node Logical Link Control)  SAPI: GPRS Mobility Management
GSM A-I/F DTAP - Routing Area Update Accept

No.     Time           Source                Destination           Protocol Length Info
 217496 172.623109     192.168.100.4         192.168.100.121       GPRS-LLC 120    SAPI: LLGMM, UI, protected, non-ciphered information, N(U) = 5(DTAP) (GMM) Routing Area Update Request

Frame 217496: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) on interface 0
Ethernet II, Src: Dell_68:2d:ec (64:00:6a:68:2d:ec), Dst: Pegatron_69:33:65 (4c:72:b9:69:33:65)
Internet Protocol Version 4, Src: 192.168.100.4, Dst: 192.168.100.121
User Datagram Protocol, Src Port: 51771, Dst Port: 4729
GSM TAP Header, ARFCN: 0 (Uplink), TS: 255, Channel: UNKNOWN (255)
MS-SGSN LLC (Mobile Station - Serving GPRS Support Node Logical Link Control)  SAPI: GPRS Mobility Management
GSM A-I/F DTAP - Routing Area Update Request

No.     Time           Source                Destination           Protocol Length Info
 217497 172.623412     192.168.100.4         192.168.100.121       GPRS-LLC 85     SAPI: LLGMM, UI, protected, non-ciphered information, N(U) = 2(DTAP) (GMM) Routing Area Update Accept

Frame 217497: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface 0
Ethernet II, Src: Dell_68:2d:ec (64:00:6a:68:2d:ec), Dst: Pegatron_69:33:65 (4c:72:b9:69:33:65)
Internet Protocol Version 4, Src: 192.168.100.4, Dst: 192.168.100.121
User Datagram Protocol, Src Port: 51771, Dst Port: 4729
GSM TAP Header, ARFCN: 0 (Downlink), TS: 255, Channel: UNKNOWN (255)
MS-SGSN LLC (Mobile Station - Serving GPRS Support Node Logical Link Control)  SAPI: GPRS Mobility Management
GSM A-I/F DTAP - Routing Area Update Accept

No.     Time           Source                Destination           Protocol Length Info
 217784 187.462624     192.168.100.4         192.168.100.121       GPRS-LLC 120    SAPI: LLGMM, UI, protected, non-ciphered information, N(U) = 6(DTAP) (GMM) Routing Area Update Request

Frame 217784: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) on interface 0
Ethernet II, Src: Dell_68:2d:ec (64:00:6a:68:2d:ec), Dst: Pegatron_69:33:65 (4c:72:b9:69:33:65)
Internet Protocol Version 4, Src: 192.168.100.4, Dst: 192.168.100.121
User Datagram Protocol, Src Port: 51771, Dst Port: 4729
GSM TAP Header, ARFCN: 0 (Uplink), TS: 255, Channel: UNKNOWN (255)
MS-SGSN LLC (Mobile Station - Serving GPRS Support Node Logical Link Control)  SAPI: GPRS Mobility Management
GSM A-I/F DTAP - Routing Area Update Request

No.     Time           Source                Destination           Protocol Length Info
 217785 187.462911     192.168.100.4         192.168.100.121       GPRS-LLC 85     SAPI: LLGMM, UI, protected, non-ciphered information, N(U) = 3(DTAP) (GMM) Routing Area Update Accept

Frame 217785: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface 0
Ethernet II, Src: Dell_68:2d:ec (64:00:6a:68:2d:ec), Dst: Pegatron_69:33:65 (4c:72:b9:69:33:65)
Internet Protocol Version 4, Src: 192.168.100.4, Dst: 192.168.100.121
User Datagram Protocol, Src Port: 51771, Dst Port: 4729
GSM TAP Header, ARFCN: 0 (Downlink), TS: 255, Channel: UNKNOWN (255)
MS-SGSN LLC (Mobile Station - Serving GPRS Support Node Logical Link Control)  SAPI: GPRS Mobility Management
GSM A-I/F DTAP - Routing Area Update Accept

The only differences i can see are :
Code: [Select]
MsRaCapability[GSM_E]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
 MsRaCapability[GSM_1800]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
 MsRaCapability[GSM_850]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
for the HONOR device and

Code: [Select]
MsRaCapability[GSM_E]=( GPRSMultislotClass=10 GPRSExtendedDynamicAllocationCapability=1)
 MsRaCapability[GSM_850]=( GPRSMultislotClass=10 GPRSExtendedDynamicAllocationCapability=1)
 MsRaCapability[GSM_1800]=( GPRSMultislotClass=10 GPRSExtendedDynamicAllocationCapability=1)
for the huawei device.

I thing that GPRSMultislotClass is not a problem but GERANFeaturePackage1 may be a problem cause searching in the source code i found only this:
Code: [Select]
// Extended dynamic mode means # channels up > # channels down.
bool MSInfo::msCanUseExtendedUplink()
{
// The Blackberry and iphone set the GeranFeaturePackI bit, but
// the danged Multitech modems truncate the MS capabilities before
// the GeranFeaturePackI bit, even though they do support extended uplink TBF
// They are multislot class 12, so if the MS multislot class > 10, assume ok.
return gL2MAC.macUplinkPersist > 0 && this->msIsRegistered()
&& (this->sgsnGetGeranFeaturePackI(this->msTlli) ||
    this->sgsnGetMultislotClass(this->msTlli) > 10);
}
here https://github.com/ctxis/yate-bts/blob/7386c0e28867304a76e1bc101b0fcc61aefc5c38/mbts/GPRS/MSInfo.cpp.


I have an embedded device and this doesn't work, like honor, the error is quite similar, no gprs connection but the loop is on AttachRequest :
Code: [Select]
16:56:05.8:GGSN logging to file /tmp/ggsn.log
 16:56:05.8:ip link set sgsntun0 up
 16:56:06.1:ip route add to 192.168.99.0/24 dev sgsntun0
 16:56:48.0:SGSN: Created SgsnInfo: MS#1,TLLI=7dbcf269 (TLLI=0x7dbcf269) ConnID=-1 (-1) [0x7f1f44030a90]
 16:56:48.0:LLC: llcWriteLowSide sapi=1
 16:56:48.0:LLC: XID frame received size=0 llcsapi=1
 16:56:48.0:LLC: Sending XID command:01FB
 16:56:48.0:SGSN: Creating 'xid cmd' PDU with TLLI=0x7dbcf269,0x0 for  MS#1,TLLI=7dbcf269
 16:56:48.0:LLC: llcWriteLowSide sapi=1
 16:56:48.0:LLC: UI::llcProcess
 16:56:48.0:LLC: LlcEntityGmm lleUplinkData
 16:56:48.0:SGSN: Received AttachRequest mAttachType=1 mobileId= IMSI=xxxxxxxxxxxxx addtionalMobileId=not present drx=8192 tmsiStatus=0 pdpContextStatus=PdpContextStatus=ff,ff mCypheringKeySequenceNumber=1 oldRaId=MCC=222 MNC=99f LAC=65534 RAC=0 mOldPtmsiSignature=0 mRequestedReadyTimerValue=22 mMsNetworkCapability=ByteVector(size=3 data: e5 60 0c)
  MsRaCapability[GSM_E]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_1800]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_850]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
 MS#1,TLLI=7dbcf269 (TLLI=0x7dbcf269) ConnID=-1 (-1) [0x7f1f44030a90]
 received buffer 080103E5600C11200008292299227016441922F299FFFE001B1953432B2596420040000CD89632100200006EC6319080100002001716
 16:56:48.0:SGSN: Allocated new GMM info for MS#1,TLLI=7dbcf269 (TLLI=0x7dbcf269) imsi=xxxxxxxxxxxxx ConnID=-1 (-1) [0x7f1f44030a90]
 16:56:48.0:SGSN: Created SgsnInfo: (TLLI=0xc0030001) ConnID=-1 (-1) [0x7f1f44032080]
 16:56:48.0:SGSN: Changing TLLI to MS#1,TLLI=7dbcf269,c0030001 (TLLI=0xc0030001) imsi=xxxxxxxxxxxxx ConnID=-1 (-1) [0x7f1f44032080]
 16:56:48.0:SGSN: Connection allocated to MS#1,TLLI=7dbcf269,c0030001 (TLLI=0x7dbcf269) imsi=xxxxxxxxxxxxx ConnID=8193 (8193) [0x7f1f44030a90]
 16:56:48.0:SGSN:
 16:56:48.0:SGSN: Sending AttachAccept mAttachResult=1 mPTmsi=0x30001 mForceToStandby=0 RAUpdateTimer=5400 RAUpdateIE=0x49 mobileId=not present MCC=nwy MNC=nwy LAC=1000 RAC=0 MS#1,TLLI=7dbcf269,c0030001 (TLLI=0x7dbcf269) imsi=xxxxxxxxxxxxx ConnID=-2 (-2) [0x7f1f44030a90] frame(first20)=ByteVector(size=12 data: 08 02 01 49 44 17 22 17 03 e8 00 18 05 f4 00 03 00 01)
 16:56:48.0:SGSN: Creating 'AttachAccept' PDU with TLLI=0x7dbcf269,0xc0030001 for  MS#1,TLLI=7dbcf269,c0030001
 16:57:02.8:LLC: llcWriteLowSide sapi=1
 16:57:02.8:LLC: UI::llcProcess
 16:57:02.8:LLC: LlcEntityGmm lleUplinkData
 16:57:02.8:SGSN: Received AttachRequest mAttachType=1 mobileId= IMSI=xxxxxxxxxxxxx addtionalMobileId=not present drx=8192 tmsiStatus=0 pdpContextStatus=PdpContextStatus=ff,ff mCypheringKeySequenceNumber=1 oldRaId=MCC=222 MNC=99f LAC=65534 RAC=0 mOldPtmsiSignature=0 mRequestedReadyTimerValue=22 mMsNetworkCapability=ByteVector(size=3 data: e5 60 0c)
  MsRaCapability[GSM_E]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_1800]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_850]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
 MS#1,TLLI=7dbcf269,c0030001 (TLLI=0x7dbcf269) imsi=xxxxxxxxxxxxx ConnID=-2 (-2) [0x7f1f44030a90]
 received buffer 080103E5600C11200008292299227016441922F299FFFE001B1953432B2596420040000CD89632100200006EC6319080100002001716
 16:57:02.8:SGSN: Sending AttachAccept mAttachResult=1 mPTmsi=0x30001 mForceToStandby=0 RAUpdateTimer=5400 RAUpdateIE=0x49 mobileId=not present MCC=nwy MNC=nwy LAC=1000 RAC=0 MS#1,TLLI=7dbcf269,c0030001 (TLLI=0x7dbcf269) imsi=xxxxxxxxxxxxx ConnID=-2 (-2) [0x7f1f44030a90] frame(first20)=ByteVector(size=12 data: 08 02 01 49 44 17 22 17 03 e8 00 18 05 f4 00 03 00 01)
 16:57:02.8:SGSN: Creating 'AttachAccept' PDU with TLLI=0x7dbcf269,0xc0030001 for  MS#1,TLLI=7dbcf269,c0030001
 16:57:02.8:SGSN:
 16:57:17.9:LLC: llcWriteLowSide sapi=1
 16:57:17.9:LLC: UI::llcProcess
 16:57:17.9:LLC: LlcEntityGmm lleUplinkData
 16:57:17.9:SGSN: Received AttachRequest mAttachType=1

and here i have the same class and GERAN feature of the honor
Code: [Select]
MsRaCapability[GSM_E]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_1800]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)
  MsRaCapability[GSM_850]=( GPRSMultislotClass=12 GPRSExtendedDynamicAllocationCapability=1 GERANFeaturePackage1=1)

I wanna get GPRS connection, so Stay tuned! :)


John

  • Newbie
  • *
  • Posts: 7
    • View Profile
Re: No GPRS connection with some devices
« Reply #2 on: October 25, 2018, 05:23:52 AM »
Attached yate -vvvv log of telit modem

with command:
Code: [Select]
"debug mbts level 10"
"debug transceiver level 10"
"sniffer on"
"debug on"
"color on"
"output on"

John

  • Newbie
  • *
  • Posts: 7
    • View Profile
Re: No GPRS connection with some devices
« Reply #3 on: November 06, 2018, 11:20:43 AM »
UP!
Telit logs.  ;D ;D

nour

  • Newbie
  • *
  • Posts: 4
    • View Profile
Re: No GPRS connection with some devices
« Reply #4 on: November 07, 2018, 07:03:47 AM »


Thank you for the outputs John

To establish the GPRS connection the UE needs to send GPRS attach request.
In the traces , the UE is not sending this message when its expected to see

Please see this picture for working GPRS in NiPC lenovo mobile
https://imgur.com/a/MA6ea6h

You can use the wireshark filter: gsm_a.dtap.msg_gmm_type  in the traces
This picture from working mobile with the filter
https://imgur.com/a/yvj83SW

I was wondering if you can share with me datasheet for the modem you are using ?

John

  • Newbie
  • *
  • Posts: 7
    • View Profile
Re: No GPRS connection with some devices
« Reply #5 on: November 07, 2018, 08:13:35 AM »
Let's split the problem:

(1) for telit we have this kind of behavior

Device:
GT864_QUAD with modem GE865_QUAD with virmware revision 10.xxxx.03

Code: [Select]
https://www.telic.de/en/downloads/downloads-m2m-terminals
https://www.telic.de/Load/Telemetry/M2M_Terminals/GT864_QUAD/EN_UserManual_GT864-QUAD-PY.pdf
https://www.telic.de/Load/Telemetry/M2M_Terminals/GT864_QUAD/EN_Datasheet_GT864-Quad.pdf

the problem is when i try to activate context i got error.

Code: [Select]
AT+CGACT?
ERROR

and when i try to use it in a "normal" network i got full working gprs.
But now i'm going to retry and got more log with error reporting and many try of context activation.

(2) With that filter in wireshark i see that honor device sent a GPRS suspension and then go to RAU loop, see attach

EDIT:
added telit at command log + wireshark log + yate-vvvvv log, note that every time i try to activate gprs with at command i have about a mitues of lag on putty and i got 3101 error on terminal and :GSM RLC/MAC: PACKET_DOWNLINK_DUMMY_CONTROL_BLOCK (37) (Downlink)
« Last Edit: November 07, 2018, 08:57:20 AM by John »

nour

  • Newbie
  • *
  • Posts: 4
    • View Profile
Re: No GPRS connection with some devices
« Reply #6 on: December 05, 2018, 04:01:03 AM »
Hello John

For the problem with Honor mobile:
It has been isolated to be MS issue


For the problem with telit

I wish to have more outputs that is organized differently  , please

1. from the telnet session to BTS
mbts config Control.GSMTAP.GSM on
mbts config Control.GSMTAP.GPRS on
sniffer on

2. Make TCP dump
tcpdump -i any udp -w <file_name>.pcap

3. From telit , the following at commands
- Prepare and register outouts
AT+CPIN?
AT+CGREG?
AT+COPS?
AT+CSQ
- Attach to the network
AT+cgatt=1
AT+CGDCONT=1,”IP”,”internet”
at+cgdcont?
AT+CGACT=1,1

4. The file
 ggsn.log


Wish you a nice day