A method for subscriber tracing comprises capturing user plane packets in a network apparatus implementing a 3GPP policy and charging enforcement functionality PCEF. Packet-specific metadata is added to a captured user plane packet. The packet-specific metadata may be used for facilitating subscriber-specific troubleshooting of core network elements.