Fortinet black logo

New Features

Multiple identities from the ULI field in GTP logs 6.4.2

Multiple identities from the ULI field in GTP logs 6.4.2

In GTP, User Location Information (ULI) can contain multiple identities of different types.

All identity information is included in GTP logs in the following format:

uli="<type1>:<value1>|<type2>:<value2>|...|<typen>:<valuen>"

GTP log with one ULI field:

date=2020-07-16 time=14:33:21 logid="1400041223" type="gtp" subtype="gtp-all" level="information" vd="root" eventtime=1594449111699047715 tz="-0700" profile="default" status="forwarded" version=2 msg-type=32 from=9.8.3.19 to=9.8.8.19 srcport=2123 dstport=2123 seqnum=6408905 tunnel-idx=9924610 imsi="240011334567000" msisdn="140541334560000" apn="internet" selection= "apns-vrf" imei-sv="35911300.0.0" end-usr-address=192.168.4.1 headerteid=0 snetwork="310.13" cpaddr=9.8.3.19 cpteid=1 uli="LAI:813.1.2112" ulimcc=813 ulimnc=1

GTP log with two ULI fields:

date=2020-07-16 time=14:41:18 logid="1400041223" type="gtp" subtype="gtp-all" level="information" vd="root" eventtime=1594449138757040276 tz="-0700" profile="default" status="forwarded" version=2 msg-type=32 from=9.8.3.19 to=9.8.8.19 srcport=2123 dstport=2123 seqnum=6408906 tunnel-idx=9924611 imsi="240011334567001" msisdn="140541334560001" apn="internet" selection="apns-vrf" imei-sv="35911300.1.0" rat-type="eutran" end-usr-address=192.168.4.2 headerteid=0 snetwork="310.13" cpaddr=9.8.3.19 cpteid=2 uli="RAI:180.203.1124.61|LAI:311.289.3792" ulimcc=180 ulimnc=203

GTP log with six ULI fields:

date=2020-07-16 time=15:35:59 logid="1400041223" type="gtp" subtype="gtp-all" level="information" vd="root" eventtime=1594449119716113782 tz="-0700" profile="default" status="forwarded" version=2 msg-type=32 from=9.8.3.19 to=9.8.8.19 srcport=2123 dstport=2123 seqnum=6408905 tunnel-idx=9924610 imsi="240011334567000" msisdn="140541334560000" apn="internet" selection="apns-vrf" imei-sv="35911300.0.0" end-usr-address=192.168.4.1 headerteid=0 snetwork="310.13 " cpaddr=9.8.3.19 cpteid=1 uli="CGI:813.1.2112.4613|SAI:1.252.4253.E331|RAI:180.203.1124.61|TAI:205.421.253E|ECGI:338.311.211246|LAI:310.120.5242" ulimcc=813 ulimnc=1

Multiple identities from the ULI field in GTP logs 6.4.2

In GTP, User Location Information (ULI) can contain multiple identities of different types.

All identity information is included in GTP logs in the following format:

uli="<type1>:<value1>|<type2>:<value2>|...|<typen>:<valuen>"

GTP log with one ULI field:

date=2020-07-16 time=14:33:21 logid="1400041223" type="gtp" subtype="gtp-all" level="information" vd="root" eventtime=1594449111699047715 tz="-0700" profile="default" status="forwarded" version=2 msg-type=32 from=9.8.3.19 to=9.8.8.19 srcport=2123 dstport=2123 seqnum=6408905 tunnel-idx=9924610 imsi="240011334567000" msisdn="140541334560000" apn="internet" selection= "apns-vrf" imei-sv="35911300.0.0" end-usr-address=192.168.4.1 headerteid=0 snetwork="310.13" cpaddr=9.8.3.19 cpteid=1 uli="LAI:813.1.2112" ulimcc=813 ulimnc=1

GTP log with two ULI fields:

date=2020-07-16 time=14:41:18 logid="1400041223" type="gtp" subtype="gtp-all" level="information" vd="root" eventtime=1594449138757040276 tz="-0700" profile="default" status="forwarded" version=2 msg-type=32 from=9.8.3.19 to=9.8.8.19 srcport=2123 dstport=2123 seqnum=6408906 tunnel-idx=9924611 imsi="240011334567001" msisdn="140541334560001" apn="internet" selection="apns-vrf" imei-sv="35911300.1.0" rat-type="eutran" end-usr-address=192.168.4.2 headerteid=0 snetwork="310.13" cpaddr=9.8.3.19 cpteid=2 uli="RAI:180.203.1124.61|LAI:311.289.3792" ulimcc=180 ulimnc=203

GTP log with six ULI fields:

date=2020-07-16 time=15:35:59 logid="1400041223" type="gtp" subtype="gtp-all" level="information" vd="root" eventtime=1594449119716113782 tz="-0700" profile="default" status="forwarded" version=2 msg-type=32 from=9.8.3.19 to=9.8.8.19 srcport=2123 dstport=2123 seqnum=6408905 tunnel-idx=9924610 imsi="240011334567000" msisdn="140541334560000" apn="internet" selection="apns-vrf" imei-sv="35911300.0.0" end-usr-address=192.168.4.1 headerteid=0 snetwork="310.13 " cpaddr=9.8.3.19 cpteid=1 uli="CGI:813.1.2112.4613|SAI:1.252.4253.E331|RAI:180.203.1124.61|TAI:205.421.253E|ECGI:338.311.211246|LAI:310.120.5242" ulimcc=813 ulimnc=1