# Bad length encoded on grouped Subscription-Id length field (not multiple of 4). # Send malformed AAR to the server: SENDHEX2E aar-bad.hex # Wait for message: WAIT4MESSAGE # Check Failed-AVP & Subscription-Id within: CHECKPATTERN CHECKPATTERN ( *)