GTP

[lance...@gmail.com]

Hi,

As I understand from the specs from 3GPP, there are 2 versions of GTP
messages - Version 0 and 1, where the version field in the header is 0
or 1 respectively, and the Protocol Type field is 1. Version 0 packets
usually use TCP/UDP port 3386, and Version 1 packets usually use UDP
ports 2123 and 2152 for control and data messages respectively. In
addition, GTP' packets use TCP/UDP ports 3386, have version field
values 1 or 2, and Protocol Type field is 0.

I guess that the ports used for the different packets may not always
be the registered ones mentioned in the specs, but since the Version
field has 3 bits, what about the values 3 to 7? Under what
circumstances would I get, say, packets that have the version value 7,
protocol type value 0 and uses the TCP source port 2152?

Thank you.

[lance...@gmail.com]

What about packets that have version value 7, protocol type 1 and used
the TCP destination port 3386?