Skip to content

Instantly share code, notes, and snippets.

@zaxbux
Last active April 17, 2022 23:19
Show Gist options
  • Save zaxbux/1b9a5b21f450e5da877378fa4aa644d1 to your computer and use it in GitHub Desktop.
Save zaxbux/1b9a5b21f450e5da877378fa4aa644d1 to your computer and use it in GitHub Desktop.
TELUS Communications VoWiFi (Voice-over-WiFi) / WiFi Calling

Canada Mobile Country Code (MCC): 302

TELUS Mobile Network Code (MNC): 220

Operator ePDG FQDN: epdg.epc.mnc220.mcc302.pub.3gppnetwork.org

Telus uses IKE for authentication (UDP port 500), and IPsec NAT traversal (UDP port 4500).

Sample packet capture:

No.     Time           Source                Destination           UDP Port   TCP Port   Protocol Length Info
      1 0.000000       Android.local         pfSense.local         domain (53)            DNS      102    Standard query 0x1707 A epdg.epc.mnc220.mcc302.pub.3gppnetwork.org

Frame 1: 102 bytes on wire (816 bits), 102 bytes captured (816 bits)
Ethernet II, Src: Google_d3:00:7f (3c:28:6d:00:00:00), Dst: ADIEngin_0d:f7:5e (00:08:a2:00:00:00)
Internet Protocol Version 4, Src: Android.local (192.168.1.2), Dst: pfSense.local (192.168.1.1)
User Datagram Protocol, Src Port: 42492 (42492), Dst Port: domain (53)
Domain Name System (query)
    Transaction ID: 0x1707
    Flags: 0x0100 Standard query
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        epdg.epc.mnc220.mcc302.pub.3gppnetwork.org: type A, class IN
            Name: epdg.epc.mnc220.mcc302.pub.3gppnetwork.org
            [Name Length: 42]
            [Label Count: 7]
            Type: A (Host Address) (1)
            Class: IN (0x0001)
    [Response In: 2]

No.     Time           Source                Destination           UDP Port   TCP Port   Protocol Length Info
      2 0.205622       pfSense.local         Android.local         42492 (42492)            DNS      143    Standard query response 0x1707 A epdg.epc.mnc220.mcc302.pub.3gppnetwork.org CNAME epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org A 205.206.160.112

Frame 2: 143 bytes on wire (1144 bits), 143 bytes captured (1144 bits)
Ethernet II, Src: ADIEngin_0d:f7:5e (00:08:a2:00:00:00), Dst: Google_d3:00:7f (3c:28:6d:00:00:00)
Internet Protocol Version 4, Src: pfSense.local (192.168.1.1), Dst: Android.local (192.168.1.2)
User Datagram Protocol, Src Port: domain (53), Dst Port: 42492 (42492)
Domain Name System (response)
    Transaction ID: 0x1707
    Flags: 0x8180 Standard query response, No error
    Questions: 1
    Answer RRs: 2
    Authority RRs: 0
    Additional RRs: 0
    Queries
        epdg.epc.mnc220.mcc302.pub.3gppnetwork.org: type A, class IN
            Name: epdg.epc.mnc220.mcc302.pub.3gppnetwork.org
            [Name Length: 42]
            [Label Count: 7]
            Type: A (Host Address) (1)
            Class: IN (0x0001)
    Answers
        epdg.epc.mnc220.mcc302.pub.3gppnetwork.org: type CNAME, class IN, cname epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org
            Name: epdg.epc.mnc220.mcc302.pub.3gppnetwork.org
            Type: CNAME (Canonical NAME for an alias) (5)
            Class: IN (0x0001)
            Time to live: 16021 (4 hours, 27 minutes, 1 second)
            Data length: 13
            CNAME: epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org
        epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org: type A, class IN, addr 205.206.160.112
            Name: epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org
            Type: A (Host Address) (1)
            Class: IN (0x0001)
            Time to live: 27 (27 seconds)
            Data length: 4
            Address: epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org (205.206.160.112)
    [Request In: 1]
    [Time: 0.205622000 seconds]

No.     Time           Source                Destination           UDP Port   TCP Port   Protocol Length Info
      3 0.308331       Android.local         epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org isakmp (500)            ISAKMP   462    IKE_SA_INIT MID=00 Initiator Request

Frame 3: 462 bytes on wire (3696 bits), 462 bytes captured (3696 bits)
Ethernet II, Src: Google_d3:00:7f (3c:28:6d:00:00:00), Dst: ADIEngin_0d:f7:5e (00:08:a2:00:00:00)
Internet Protocol Version 4, Src: Android.local (192.168.1.2), Dst: epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org (205.206.160.112)
User Datagram Protocol, Src Port: 41908 (41908), Dst Port: isakmp (500)
Internet Security Association and Key Management Protocol

No.     Time           Source                Destination           UDP Port   TCP Port   Protocol Length Info
      4 0.349470       epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org Android.local         41908 (41908)            ISAKMP   458    IKE_SA_INIT MID=00 Responder Response

Frame 4: 458 bytes on wire (3664 bits), 458 bytes captured (3664 bits)
Ethernet II, Src: ADIEngin_0d:f7:5e (00:08:a2:00:00:00), Dst: Google_d3:00:7f (3c:28:6d:00:00:00)
Internet Protocol Version 4, Src: epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org (205.206.160.112), Dst: Android.local (192.168.1.2)
User Datagram Protocol, Src Port: isakmp (500), Dst Port: 41908 (41908)
Internet Security Association and Key Management Protocol


[...]


No.     Time           Source                Destination           UDP Port   TCP Port   Protocol Length Info
     11 2.126186       epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org Android.local         41908 (41908)            ESP      174    ESP (SPI=0x9b9de899)

Frame 11: 174 bytes on wire (1392 bits), 174 bytes captured (1392 bits)
Ethernet II, Src: ADIEngin_0d:f7:5e (00:08:a2:00:00:00), Dst: Google_d3:00:7f (3c:28:6d:00:00:00)
Internet Protocol Version 4, Src: epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org (205.206.160.112), Dst: Android.local (192.168.1.2)
User Datagram Protocol, Src Port: ipsec-nat-t (4500), Dst Port: 41908 (41908)
UDP Encapsulation of IPsec Packets
Encapsulating Security Payload

No.     Time           Source                Destination           UDP Port   TCP Port   Protocol Length Info
     12 4.239555       Android.local         epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org ipsec-nat-t (4500)            ESP      158    ESP (SPI=0xba0c5046)

Frame 12: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits)
Ethernet II, Src: Google_d3:00:7f (3c:28:6d:00:00:00), Dst: ADIEngin_0d:f7:5e (00:08:a2:00:00:00)
Internet Protocol Version 4, Src: Android.local (192.168.1.2), Dst: epdg.glbpr.mnc220.mcc302.pub.3gppnetwork.org (205.206.160.112)
User Datagram Protocol, Src Port: 41908 (41908), Dst Port: ipsec-nat-t (4500)
UDP Encapsulation of IPsec Packets
Encapsulating Security Payload
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment