Donald Hamel:
I also noticed that message SNAPSHOT_CALL_CONF has one 32 bits fixed field just after CalledPartyDisposition. This field is not documented.
I noticed that "surprise" field too (as it obviously messes up trying to parse the subsequent floating fields). It seems to be the PeripheralID based on the values I've seen in it. Why it is here I have no idea. Have not seen it in any other _CONF message. Also happens in Protocol V13.