Thanks for reply I already know how to detect if it is a new register or re-register. As you know during registration UE first sends a register request which automatically fails the authentication (which is exactly what I want to count) and then the next request with response to that authentication challenge. In scripts I just want to count the first request, but when it is a re-register, sometimes the first request has the authentication header and response value is not empty.