Internet-Security raven logo internet-security.com

UDP 3386

ProtocolUDP
Port3386
LabelsGTP 3GPP GSM/UMTS CDR logging protocol

Synopsis

  • UDP port 3386 is assigned to GTP' (GTP prime), the 3GPP protocol for transferring charging data records (CDRs) in mobile networks.
  • In practice, SGSN/GGSN (2G/3G) and SGW/PGW (4G) nodes send CDRs to a Charging Gateway Function (CGF) over GTP' on UDP 3386.
  • Vendors such as Ericsson use this in their Charging Gateway (CGF/CGw) and in Ericsson SGSN/GGSN/EPC nodes configured to export CDRs via GTP' on 3386/UDP.
  • Huawei’s core network products (e.g., SGSN/GGSN/PGW) communicate with the Huawei CGF using GTP' on UDP 3386 for offline charging.
  • Nokia (formerly Alcatel‑Lucent) CGF and packet core elements likewise support GTP' over UDP 3386 for CDR transport.
  • Mediation/charging platforms like Oracle Communications Offline Mediation Controller and Amdocs/Openet mediation systems implement GTP' on UDP 3386 to ingest CDRs from network elements.
  • Wireshark’s dissector recognizes GTP' on port 3386, and 3GPP TS 32.295 specifies UDP/TCP 3386 for this protocol.
  • Exposed GTP' services on UDP 3386 can be a security risk (CDR leakage or disruption), so operators typically restrict it to internal core networks.

Observed activity

Last 30 days Detailed chart

More information