Access rights request between Sinus 501 and FRITZ!Box 7240¶
- Table of contents
- Access rights request between Sinus 501 and FRITZ!Box 7240
The entire trace contains the initial access rights request and key allocation, location registration of the PP including temporary
identity assignment, a test call from the FP and exchange of some proprietary configuration options in CISS-FACILITY messages.
For better readability, the independent procedures have been seperated in the trace. The raw dump is attached to this page.
Access rights request¶
{ACCESS-RIGHTS-REQUEST} message (PP->FP)¶
NWK: 05 44 05 07 80 a8 00 ba 8a 78 2a 0a 03 01 48 00 |.D.......x*...H.| NWK: 63 0f 25 15 0a 00 30 03 90 02 00 00 00 00 00 82 |c.%...0.........| NWK: 82 7b 13 81 00 02 06 01 10 29 0b 6f 7d fe 7f 00 |.{.......).o}...| NWK: ff 9c 80 2b c2 14 7c 07 90 03 00 01 02 00 84 |...+..|........| {MM-ACCESS-RIGHTS-REQUEST} message: IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfcf150 type: IPUI (0) PUT: N (IPEI) EMC: 0ba8 PSN: a782a IE: <<AUTH-TYPE>> id: a len: 5 dst: 0xfcf190 authentication algorithm: DSAA (1) authentication key type: Authentication code (4) authentication key number: 8 cipher key number: 0 INC: 0 DEF: 0 TXC: 0 UPC: 0 IE: <<TERMINAL-CAPABILITY>> id: 63 len: 17 dst: 0xfcf1b0 display capability: full display (5) tone capability: dial tone only (2) echo parameters: TCL > 34 dB (1) noise rejection capability: none (1) adaptive volume control provision: no PP adaptive volume control (1) slot capabilities: long slot 640,full slot (a) display memory: 48 display lines: 3 display columns: 16 scrolling behaviour: not specified (0) profile indicator: GAP,DECT-NG part 1 (200000000000200) display control: 2 display charsets: 0 IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 21 dst: 0xfcf200 EMC: 2 Content: 06 01 10 29 0b 6f 7d fe 7f 00 ff 9c 80 2b c2 14 IE: <<CODEC-LIST>> id: 7c len: 9 dst: 0xfcf260 Negotiation Indicator: codec negotiation (1) Codec 1: Codec: G.722 (64kbit) (3) MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0) Slot size: long slot j=640 (1) C-Plane routing: C_S only (0) Codec 2: Codec: G.726 (32kbit) (2) MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0) Slot size: full slot (4) C-Plane routing: C_S only (0)
{KEY-ALLOCATE} message (FP->PP)¶
NWK: 05 42 0b 02 01 88 0c 08 1b 42 27 01 4c 5c 44 84 |.B.......B'.L\D.| NWK: 0e 08 9e 01 7e 0c 42 ae ec ff |....~.B...| {MM-KEY-ALLOCATE} message: IE: <<ALLOCATION-TYPE>> id: b len: 4 dst: 0xfcf440 authentication algorithm: DSAA (1) authentication key number: 8 authentication code number: 8 IE: <<RAND>> id: c len: 10 dst: 0xfcf460 value: 84445c4c0127421b IE: <<RS>> id: e len: 10 dst: 0xfcf480 value: ffecae420c7e019e
{AUTHENTICATION-REQUEST} message (PP->FP)¶
NWK: 85 40 0a 03 01 48 00 0c 08 de a7 66 4d 34 fb c2 |.@...H.....fM4..| NWK: 7f 0d 04 85 6a 5f 9e |....j_.| {MM-AUTHENTICATION-REQUEST} message: IE: <<AUTH-TYPE>> id: a len: 5 dst: 0xfcf5e0 authentication algorithm: DSAA (1) authentication key type: Authentication code (4) authentication key number: 8 cipher key number: 0 INC: 0 DEF: 0 TXC: 0 UPC: 0 IE: <<RAND>> id: c len: 10 dst: 0xfcf600 value: 7fc2fb344d66a7de IE: <<RES>> id: d len: 6 dst: 0xfcf620 value: 9e5f6a85
{AUTHENTICATION-REPLY} message (FP->PP)¶
NWK: 05 41 0d 04 b4 30 43 48 |.A...0CH| {MM-AUTHENTICATION-REPLY} message: IE: <<RES>> id: d len: 6 dst: 0xfcf780 value: 484330b4
{ACCESS-RIGHTS-ACCEPT} message (FP->PP)¶
NWK: 85 45 05 07 80 a8 00 ba 8a 78 2a 06 07 a0 a5 01 |.E.......x*.....| NWK: 2f 55 f4 f8 7c 07 90 03 00 01 02 00 84 |/U..|........| {MM-ACCESS-RIGHTS-ACCEPT} message: IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfcf8e0 type: IPUI (0) PUT: N (IPEI) EMC: 0ba8 PSN: a782a IE: <<FIXED-IDENTITY>> id: 6 len: 9 dst: 0xfcf920 type: PARK (20) class: A EMC: 12f5 FPN: 0be9f IE: <<CODEC-LIST>> id: 7c len: 9 dst: 0xfcf950 Negotiation Indicator: codec negotiation (1) Codec 1: Codec: G.722 (64kbit) (3) MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0) Slot size: long slot j=640 (1) C-Plane routing: C_S only (0) Codec 2: Codec: G.726 (32kbit) (2) MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0) Slot size: full slot (4) C-Plane routing: C_S only (0)
Location registration¶
{LOCATE-REQUEST} message (PP->FP)¶
NWK: 05 54 05 07 80 a8 00 ba 8a 78 2a 06 07 81 a8 01 |.T.......x*.....| NWK: 2f 55 f4 f8 07 01 64 63 0f 25 15 0a 00 30 03 90 |/U....dc.%...0..| NWK: 02 00 00 00 00 00 82 82 7c 07 90 03 00 01 02 00 |........|.......| NWK: 84 |.| {MM-LOCATE-REQUEST} message: IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfcfd20 type: IPUI (0) PUT: N (IPEI) EMC: 0ba8 PSN: a782a IE: <<FIXED-IDENTITY>> id: 6 len: 9 dst: 0xfcfd60 type: ARI/RPN (1) class: A EMC: 12f5 FPN: 0be9f RPN: 0 IE: <<LOCATION-AREA>> id: 7 len: 3 dst: 0xfcfd90 type: 1 level: 36 IE: <<TERMINAL-CAPABILITY>> id: 63 len: 17 dst: 0xfcfdb0 display capability: full display (5) tone capability: dial tone only (2) echo parameters: TCL > 34 dB (1) noise rejection capability: none (1) adaptive volume control provision: no PP adaptive volume control (1) slot capabilities: long slot 640,full slot (a) display memory: 48 display lines: 3 display columns: 16 scrolling behaviour: not specified (0) profile indicator: GAP,DECT-NG part 1 (200000000000200) display control: 2 display charsets: 0 IE: <<CODEC-LIST>> id: 7c len: 9 dst: 0xfcfe00 Negotiation Indicator: codec negotiation (1) Codec 1: Codec: G.722 (64kbit) (3) MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0) Slot size: long slot j=640 (1) C-Plane routing: C_S only (0) Codec 2: Codec: G.726 (32kbit) (2) MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0) Slot size: full slot (4) C-Plane routing: C_S only (0)
{AUTHENTICATION-REQUEST} message (FP->PP)¶
NWK: 05 40 0a 03 01 18 18 0c 08 4e cc 38 f5 13 34 dd |.@.......N.8..4.| NWK: 23 0e 08 31 76 76 d3 12 15 97 20 |#..1vv.... | {MM-AUTHENTICATION-REQUEST} message: IE: <<AUTH-TYPE>> id: a len: 5 dst: 0xfd0500 authentication algorithm: DSAA (1) authentication key type: User authentication key (1) authentication key number: 8 cipher key number: 8 INC: 0 DEF: 0 TXC: 0 UPC: 1 IE: <<RAND>> id: c len: 10 dst: 0xfd0520 value: 23dd3413f538cc4e IE: <<RS>> id: e len: 10 dst: 0xfd0540 value: 20971512d3767631
{AUTHENTICATION-REPLY} message (PP->FP)¶
NWK: 85 41 0d 04 88 9b 49 e0 |.A....I.| {MM-AUTHENTICATION-REPLY} message: IE: <<RES>> id: d len: 6 dst: 0xfd0980 value: e0499b88
{LOCATE-ACCEPT} message (FP->PP)¶
NWK: 85 55 05 05 a0 94 00 11 01 07 01 64 77 07 c0 81 |.U.........dw...| NWK: 00 00 0c c0 00 7c 07 90 03 00 01 02 00 84 |.....|........| {MM-LOCATE-ACCEPT} message: IE: <<PORTABLE-IDENTITY>> id: 5 len: 7 dst: 0xfd0ec0 type: TPUI (20) type: individual assigned digits: 00000 IE: <<LOCATION-AREA>> id: 7 len: 3 dst: 0xfd0f00 type: 1 level: 36 IE: <<IWU-TO-IWU>> id: 77 len: 9 dst: 0xfd0f20 Send/Reject (S/R) bit: Transmission of message (1) Protocol Discriminator: User Specific (0) IE: <<CODEC-LIST>> id: 7c len: 9 dst: 0xfd1040 Negotiation Indicator: codec negotiation (1) Codec 1: Codec: G.722 (64kbit) (3) MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0) Slot size: long slot j=640 (1) C-Plane routing: C_S only (0) Codec 2: Codec: G.726 (32kbit) (2) MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0) Slot size: full slot (4) C-Plane routing: C_S only (0)
{TEMPORARY-IDENTITY-ASSIGN-ACK} message (PP->FP)¶
NWK: 05 5d |.]| {MM-TEMPORARY-IDENTITY-ASSIGN-ACK} message:
Test call¶
{CC-SETUP} message (FP->PP)¶
NWK: 03 05 05 07 80 a8 00 ba 8a 78 2a 06 07 a0 a5 01 |.........x*.....| NWK: 2f 55 f4 f8 e0 80 e4 4f 7c 04 90 02 00 84 |/U.....O|.....| {CC-SETUP} message: IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfcfbd0 type: IPUI (0) PUT: N (IPEI) EMC: 0ba8 PSN: a782a IE: <<FIXED-IDENTITY>> id: 6 len: 9 dst: 0xfcfc10 type: PARK (20) class: A EMC: 12f5 FPN: 0be9f IE: <<BASIC-SERVICE>> id: e0 len: 2 dst: 0xfcfc40 call class: normal call (8) service: basic speech default attributes (0) IE: <<SIGNAL>> id: e4 len: 2 dst: 0xfcfc60 signal: ring off (4f) IE: <<CODEC-LIST>> id: 7c len: 6 dst: 0xfcfc80 Negotiation Indicator: codec negotiation (1) Codec 1: Codec: G.726 (32kbit) (2) MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0) Slot size: full slot (4) C-Plane routing: C_S only (0)
{CC-ALERTING} message (PP->FP)
NWK: 83 01 7b 06 81 00 02 18 01 02 |..{.......|
{CC-ALERTING} message:
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd0120
EMC: 2
Content: 18 01 02
{CC-INFO} message (FP->PP)¶
NWK: 03 7b 7b 06 81 00 02 3c 01 07 |.{{....<..| {CC-INFO} message: IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd07e0 EMC: 2 Content: 3c 01 07
{CC-INFO} message (PP->FP)¶
NWK: 83 7b 7b 06 81 00 02 3d 01 07 |.{{....=..| {CC-INFO} message: IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd0c20 EMC: 2 Content: 3d 01 07
{CC-INFO} message (FP->PP)¶
NWK: 03 7b 7b 0b 81 00 02 1c 06 0c 10 0f 0b 01 0d |.{{............| {CC-INFO} message: IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 13 dst: 0xfd0c80 EMC: 2 Content: 1c 06 0c 10 0f 0b 01 0d
{CC-RELEASE} message (FP->PP)¶
NWK: 03 4d e2 00 |.M..| {CC-RELEASE} message: IE: <<RELEASE-REASON>> id: e2 len: 2 dst: 0xfd15a0 release reason: normal (0)
{CC-RELEASE-COM} message (PP->FP)¶
NWK: 83 5a e2 00 |.Z..| {CC-RELEASE-COM} message: IE: <<RELEASE-REASON>> id: e2 len: 2 dst: 0xfd1b20 release reason: normal (0)
CISS information exchange¶
The last proprietary IE (last 3 bytes) contains a sequence number that must be acknowledged. If no answer is sent back (not visible in this
trace), the message is resent.
The coding is:
<CISS-REQUEST-SEQ>: 0x5bBR
<CISS-ACKNOWLEDGEMENT-SEQ>: 0x59BR
CISS information exchange 1¶
This exchange supplies the date (12.10.10) and time (23:45:01)
to the PP. For some reason the hex values contain the decimal
representation. The first byte (03) has unknown meaning, as do
the 2 bytes following the date (00 04).
<TIME-DATE>: 0x3bBR
{CISS-FACILITY} message (FP->PP)¶
{CISS-FACILITY} message: IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 19 dst: 0xfd0180 EMC: 2 Content: 3b 09 03 12 10 10 00 04 23 45 01 5b 01 a8
{CISS-REGISTER}/{CISS-RELEASE-COM} messages (PP->FP)¶
NWK: 64 64 05 07 90 a8 00 ba 8a 78 2a 7b 06 81 00 02 |dd.......x*{....| NWK: 59 01 a8 |Y..| {CISS-REGISTER} message: IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfd0460 type: IPEI (10) PUT: N (IPEI) EMC: 0ba8 PSN: a782a IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd04a0 EMC: 2 Content: 59 01 a8 NWK: 64 5a |dZ| {CC-RELEASE-COM} message:
CISS information exchange 2¶
This exchange supplies the PP name (Mobiltei..) to the PP.
The meaning of the first byte (01) is unknown.
<PP-NAME>: 0x54BR
{CISS-FACILITY} message (FP->PP)¶
NWK: 63 62 7b 13 81 00 02 54 0b 01 4d 6f 62 69 6c 74 |cb{....T..Mobilt| NWK: 65 69 2e 2e 5b 01 a9 |ei..[..| {CISS-FACILITY} message: IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 21 dst: 0xfd1360 EMC: 2 Content: 54 0b 01 4d 6f 62 69 6c 74 65 69 2e 2e 5b 01 a9
{CISS-REGISTER}/{CISS-RELEASE-COM} messages (PP->FP)¶
NWK: 64 64 05 07 90 a8 00 ba 8a 78 2a 7b 06 81 00 02 |dd.......x*{....| NWK: 59 01 a9 |Y..| {CISS-REGISTER} message: IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfd15c0 type: IPEI (10) PUT: N (IPEI) EMC: 0ba8 PSN: a782a IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd1600 EMC: 2 Content: 59 01 a9 NWK: 64 5a |dZ| {CISS-RELEASE-COM} message:
CISS information exchange 3¶
{CISS-FACILITY} message (FP->PP)¶
NWK: 63 62 7b 12 81 00 02 58 0a 02 08 01 00 02 00 03 |cb{....X........| NWK: 00 05 00 5b 01 aa |...[..| {CISS-FACILITY} message: IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 20 dst: 0xfd18e0 EMC: 2 Content: 58 0a 02 08 01 00 02 00 03 00 05 00 5b 01 aa
{CISS-REGISTER}/{CISS-RELEASE-COM} messages (PP->FP)¶
NWK: 64 64 05 07 90 a8 00 ba 8a 78 2a 7b 06 81 00 02 |dd.......x*{....| NWK: 59 01 aa |Y..| {CISS-REGISTER} message: IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfd1c80 type: IPEI (10) PUT: N (IPEI) EMC: 0ba8 PSN: a782a IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd1cc0 EMC: 2 Content: 59 01 aa NWK: 64 5a |dZ| {CISS-RELEASE-COM} message:
CISS information exchange 4¶
This exchange supplies the time and date again, similar to 2.
{CISS-FACILITY} message (FP->PP)¶
NWK: 63 62 7b 11 81 00 02 3b 09 03 12 10 10 00 04 23 |cb{....;.......#| NWK: 45 01 5b 01 ab |E.[..| {CISS-FACILITY} message: IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 19 dst: 0xfd1f00 EMC: 2 Content: 3b 09 03 12 10 10 00 04 23 45 01 5b 01 ab
{CISS-REGISTER}/{CISS-RELEASE-COM} messages (PP->FP)¶
NWK: 64 64 05 07 90 a8 00 ba 8a 78 2a 7b 06 81 00 02 |dd.......x*{....| NWK: 59 01 ab |Y..| {CISS-REGISTER} message: IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfd2140 type: IPEI (10) PUT: N (IPEI) EMC: 0ba8 PSN: a782a IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd2180 EMC: 2 Content: 59 01 ab NWK: 64 5a |dZ| {CISS-RELEASE-COM} message:
Updated by laforge over 2 years ago · 1 revisions