HiCellTek HiCellTek

Decode & Understand 3GPP Protocol Messages

Paste any RRC or NAS hex dump, get instant decoding with human-readable explanations of what the network is doing and why.

Free No signup 2G/3G/4G/5G Release 17

Human explanations hand-crafted by telecom protocol engineers. References exact 3GPP TS sections for every message type.

Try an Example

Click a card to pre-fill the decoder below and see the explanation panel in action.

Hex, with or without spaces. 0x prefix accepted.

Optional. Leave empty for automatic channel detection.

Frequently asked questions

Which protocols are supported?
RRC (Radio Resource Control) and NAS (Non-Access Stratum) for 2G GSM, 3G UMTS, 4G LTE, and 5G NR. The only online tool combining RRC + NAS multi-RAT.
What is channel auto-detection?
For RRC, if no channel is specified, the decoder tries all candidate channels in priority order and returns the first successful decode.
Is NAS decoding free?
Basic RRC decoding is free (20/day). NAS and advanced features require a Pro subscription.
Is my data stored?
No. Hex frames are processed in memory and never stored on our servers. No session data is retained.

Common Messages Explained

Select any message below to load it as an example and see the full explanation. Each entry references the exact 3GPP TS section.

RRC Connection Setup (4G)

TS 36.331 Β§6.2.2

Grants the UE a dedicated connection and configures SRB1.

RRC Reconfiguration (4G)

TS 36.331 Β§6.2.2

Modifies bearers, triggers handover, or activates EN-DC.

RRC Release (4G)

TS 36.331 Β§6.2.2

Moves the UE to RRC_IDLE with optional redirection.

Measurement Report (4G)

TS 36.331 Β§6.2.2

UE reports serving and neighbor cell RSRP/RSRQ.

UE Capability Information (4G)

TS 36.331 Β§6.2.2

Reports supported bands, CA combos, and NR capability.

Security Mode Command (4G)

TS 36.331 Β§6.2.2

Activates RRC integrity protection and ciphering.

RRC Setup (5G NR)

TS 38.331 Β§6.2.2

NR equivalent of RRC Connection Setup, establishes SRB1.

RRC Reconfiguration (5G NR)

TS 38.331 Β§6.2.2

Modifies bearers, switches BWPs, or adds secondary cells.

RRC Release (5G NR)

TS 38.331 Β§6.2.2

Releases or suspends the NR connection (RRC_INACTIVE).

Measurement Report (5G NR)

TS 38.331 Β§6.2.2

UE reports NR cell measurements including RSRP and RSRQ.

UE Capability Information (5G NR)

TS 38.331 Β§6.2.2

Reports NR band support, MIMO, FR2, and feature sets.

Security Mode Command (5G NR)

TS 38.331 Β§6.2.2

Activates 5G NR AS security with 5G algorithms.

Attach Request (NAS)

TS 24.301 Β§8.2.4

UE requests EPS attach with identity and capabilities.

Attach Accept (NAS)

TS 24.301 Β§8.2.1

MME confirms attach with GUTI, TAI list, and default bearer.

Authentication Request (NAS)

TS 24.301 Β§8.2.7

MME sends RAND/AUTN to authenticate the UE via EPS AKA.

PDN Connectivity Request (NAS)

TS 24.301 Β§8.3.18

UE requests a PDN connection to a specific APN.

Registration Request (5G NAS)

TS 24.501 Β§8.2.6

UE registers with 5GC using SUCI or 5G-GUTI.

PDU Session Establishment (5G NAS)

TS 24.501 Β§8.3.2

UE requests a PDU session with DNN, slice, and SSC mode.

Frequently Asked Questions. Protocol Explainer

What does the Protocol Explainer do?

It decodes raw 3GPP protocol messages (RRC, NAS) and adds human-readable explanations of what each message means, which IEs are critical, and what the network is doing.

Which protocols are supported?

RRC for 2G GSM, 3G UMTS, 4G LTE (TS 36.331) and 5G NR (TS 38.331). NAS for 4G LTE (TS 24.301) and 5G NR (TS 24.501). Decoding engine uses ASN.1 UPER/APER up to Release 17.

How is this different from the L3 Decoder?

The L3 Decoder shows the raw decoded tree. The Protocol Explainer adds a human-readable explanation layer: what the message means in plain language, which IEs matter, and practical field implications.

Are the explanations generated by AI?

No. Each explanation is hand-crafted by telecom protocol engineers based on 3GPP specifications. We reference the exact TS section for every message type.

Is the Protocol Explainer free?

Yes. You get 20 free decodes per day and 5 free explanations per day with no signup required. Pro subscribers get unlimited access.

Where do hex frames come from?

Hex frames come from QMDL captures, DIAG logs, PCAP exports, Wireshark, QCAT, TEMS, Nemo, or the HiCellTek Android app.

Can I decode NAS messages?

NAS decoding (EMM, ESM for 4G; 5GMM, 5GSM for 5G) is available with a Pro subscription.

What if my message type has no explanation?

The decoder will still decode the message and show the full tree. A notice will indicate that the human explanation is coming soon for that message type.

πŸ’‘ Need more?

⚑
Unlimited decoding From €29/mo Upgrade to Pro, unlimited RRC + NAS, batch mode, JSON export
πŸ”Œ
Decode via API 50 free/mo Integrate decoding in your pipeline. REST API, batch, webhooks.
πŸ“±
Real-time on your phone Decode L3 live on Android, the same data as QCAT in your pocket.

Get protocol analysis tips & decoder updates

Unsubscribe in one click. Data processed in the EU.

Unlimited Decoding + Explanations with Pro

Pro gives you unlimited RRC + NAS decoding, full explanations for all message types, batch mode, JSON export and priority support. 29 EUR/month, cancel anytime.

Upgrade to Pro