NEW NETWORKS, NEW WAYS

In commercial confidence

LTEE2ES

Monitoring System

July 2009

LTE E2ES Monitoring System - Concept

Air SnifferXCAL-

LTE

UE

UuS1

eNodeBEPC

InternetApplication Server

Network Probe

E2ESAnalyzer

RF Cable or RF Ant

SGSN

S2 S3

S6, S7, SGiS6, S7, SGi

WCDMA Core Network

Other Network

XCAL-LTELTE UE trace tool (s/w)

• LG, Samsung UE : implemented• Qualcomm, Nokia UE : Nov.09• Scanner (PCTEL, DRT) : implemented

LTE E2ES Monitoring System - Components

Network ProbesInterface node probe

• S1-MME,S1-U,SGi : implemented• X2,S3,S4 : 4Q.2009•S2,S5,S6,S6,S10,S11,S12 : 2Q.2010

LTE Air SnifferUu air interface capturing

• Real time L1/L2/L3 Protocol Message monitoring•UE/network system independent

LTE E2ES AnalyserPost processing tool (s/w)

• Imports UE, Air Sniffer and network probes data•Synchronise all information•Define and debug problematic interfaces

LTE Network Probe

All Packet Dump mode•All data packets are captured through each port•Captured data will be saved on the hard disk in the probe device•Data will be captured and saved for each interface, i.e. S1 ~

Trace mode• Interface with the administrator module to register/remove the user keys to capture specific user traffic•Event based process (Call Start -End Time, User IP, Throughput ,etc)

Packet Filter mode•Configurable packet capture filtering condition . The condition can be configured based on each protocol Layer• IP Address also can be used as the packet capture filtering condition

Supplementary feature•Statistic report for line Throughputs, Signaling messages, etc)

Network Node probe

• S1-MME,S1-U,SGi : implemented

• X2,S3,S4 : 4Q.2009

•S2,S5,S6,S6,S10,S11,S12 : 2Q.2010

Reference Point

Physical Interface Cabling Type

E1 Copper CAT5/5E, RJ 48Power TAB

Direct

S1 (Option) STM-1/OC3 (ATM) Single mode Fiber

S1 ~ S12 FE or GE (UTP) UTP Tap

S1 ~ S12 Gigabit Ethernet (Fiber) Multimode Fiber

XCAL-LTE

5

LTEUE

LTE Scanner• DRT 4301A+• PCTEL SeeGull EX LTE

E-UTRA Carrier RSSI Reference Signal Received Power (RSRP), Reference Signal Received Quality (RSRQ) Spectral Display, Channel Response, Delay Spread, Multipath Count, Carrier Frequency Offset PSCH Detection, Physical Layer Cell Identity, PSCH Power, PSCH Quality, SSCH Detection, Physical Layer Cell Identity Group, SSCH Power, SSCH Quality

E-UTRA Decoding: BCCH : MIB, Downlink System Bandwidth, Number Tx Antennas, Reference-Signal Tx Power, - System Frame Number, SU-1 Scheduling Information Downlink Shared Channel (DL-SCH) : SIBs, PLMN Identities, Tracking Area Code, Cell Identity, - Cell Barring, Cell Reserved, Cell Reservation Extension, Value Tag, SU Scheduling Info, SIB Mapping Information

Frequency Band 400-500 MHz, 925-960 MHz, 1805-1880 MHz, 2110-2170 MHz 690-800 MHz, 869-894 MHz, 1930-1990 MHz, 2110-2170 MHz

LTE UE trace tool (s/w)

• LG, Samsung UE : implemented

• Qualcomm, Nokia UE : Nov.09

• Scanner (PCTEL, DRT) : implemented

LTE UE• Samsung, LG : implemented• Qualcomm, Nokia (Nov.09)

LTE Layer1 Information RF Info – RSSI avr1, RSSI avr2, ERP, Tx Pwr Sync & PCCH Info – P-SCH energy, S-SCH energy FER Info Measurement config – s-mesaurement, Gap pattern/start SFN/start subframe, Measurement Info – Cell ID, Freq, Q offset, RSRP, Tx, Intra/Inter cell…etc Handover Info – Intra/Inter/Serving/Target cell ids, freq, RSRP DRX Info - Reacq cell id, Reacq cell freq, Reacq cell rsrp. Reacq cell rsrq, Short drx count, DRX ConfigurationLTE Layer 2 Info. UL Specific Parameters, DL/UL SCH Config, Time Alignment Timer PHR Configuration, Preamble Information, Power Ramping Parameters RA Supervision, Max HARQ Msg3Tx, RACH Info RNTI Info, RA Info, UL Sync Status, D-SR Status Buffer Status, MAC Throughput, Local NACK Info RB, RLC Statistics, PDCP InfoLTE RRC Info Serving Cell State Variables – RRC state, RCM state, CSP state, ASM state, RR state, SIB state, Peer messageLTE NAS Info SIM Info, L3 Message, PLMN Selection Info, PDP InfoApplication / Quality of Service infoLatency, throughput, KPI statistics, VoIP voice quality, video quality, etc.

Air Sniffer

Uu air interface capturing

• Real time L1/L2/L3 Protocol Message monitoring

•UE/network system independent

6

• Monitor and Capture LTE Radio Access Signals over the air• LTE bands up to 6GHz• Fully compliant with 3GPP R8• Real time L1/L2/L3 Protocol Message monitoring• Real time vector signal analysis and RF Signal analysis• Post process analysis feature (Off-line) with which the user can correlate, synchronize all the information elements,

i.e. L1/L2/L3 Protocol messages, vector signal Analysis, Graphs and table, etc.• Protocol information to be saved on the HDD of the laptop directly (almost no limit on the logging time) while Raw

data to be saved through the 4GB RAM on the AS (16 second of time limit)• Event Triggered Capture is possible – efficient log file size.• Values in identifying the problems of either UE or eNB, LTE L1/L2/L3 Protocol, MIMO, LTE Handover, IOT,

Protocol conformance test, etc

eNodeB

UEeNodeB

LTE Air Sniffer HW

LTE Air Sniffer SW (PC)

eNodeB

RF inputDL x2, UL x2

Uplink Downlink

LTE E2ES AnalyserPost Processing tool (s/w)

• Imports UE, Air Sniffer and network probes data

•Synchronise all information

•Define and debug problematic interfaces

7

Import variable trace data• XCAL-LTE log file (UE data)• Network Probe Data• Air Sniffer Data (Uu data)

L1/L2/L3/NAS/TCP/UDP/IP/APP Protocol Message analysis

• Filtering, search and Bookmark• Node selection and analysis(UE, Air Sniffer, S1, SGi… )

Synchronised analysis• All the imported data will be able to be synchronised – UE, Uu,

S1, S2, ....etc.

Packet View (higher layer protocol)• Ethernet, IP, SCTP/UDP, GTP, HTTP, FTP• Packet Delay, latency, packet loss, etc.

Call Flow Analysis• The message flow for each node will be displayed in each

column so that the user can debug message loss or protocol mismatch, i.e. the protocol message flow for each node of UE–Air Sniffer(Uu) - eNB– MME can be monitored separately.

Data Flow ( Packet ) Analysis• FTP, UDP packets in each node can be displayed, analysed,

i.e. we can visualise and display where specific packets were lost.