1)In intialUEmessage(Attach request,PDN Connectivity request) we have 5 main IE's they are
"eNB UES1 AP ID,TAI, ECGI, NAS PDU,RRC -Establishment Cause".
2)in that The NAS PDU contains 4 more parameters like "EPS mobile id,ue network capability,ESM message container and TMSI status"
3)here from "EPS mobile ID" the MME can know the IMSI value(15bits)