drop 5g amf access log export · parse registration + deregistration + pdu session requests · runs locally
drop 5g amf access log export · local only
heuristic screener · vendor schema varies · not definitive proof