Log分析基础

目录
一、 相关协议层/子层及模块的介绍 4
.1 AMSS WCDMA物理层（Layer1） 4
.1.1 层一(L1)管理器的主要功能包括： 4
.1.2 序列器的主要功能包括： 6
.2 AMSS NAS(非接入层)介绍 7
.2.1 REG模块介绍 8
.2.2 MM模块介绍 9
.2.3 GMM模块介绍 10
.2.4 CC模块介绍 12
.2.5 MMGSDI（Multiple Mode Generic SIM Drive Interface）模块介绍 13
二、 小区选择与注册 15
.1 小区选择的相关定义与原则 15
.1.1 专用名词定义 15
.1.2 空闲模式下的小区选择过程可分为如下三步： 16
.2 SIM卡中存储的EFs文件 17
.3 PLMN选择过程 18
.4 小区占用过程 19
.4.1 SIM<–>REG<–>MM<–>RRC的信令流程 20
.4.2 频段与频率的扫描 21
.4.3 小区搜索（捕获）过程 25
.4.4 PLMN的检查 29
.4.5 小区占用 30
.5 用户注册 32
三、 小区重选 35
.1 小区重选概述 35
.1.1 小区重选的相关概念 35
.1.2 小区重选所需的必要操作 36
.1.3 小区重选准则 36
.2 WCDMA小区到WCDMA小区的重选 39
.2.1 系统信息3 39
.2.2 系统信息11 40
.2.3 W到W小区重选过程示例 41
.3 WCDMA小区到GSM小区的重选 46
.3.1 系统间小区重选介绍 46
.3.2 W到G小区重选过程示例 49
.4 GSM小区到WCDMA小区的重选 54
.4.1 GSM到WCDMA小区重选的相关概念与准则 54
.4.2 GSM到WCDMA小区重选过程示例 57
四、 CS与PS域呼叫流程 63
.5 CS域呼叫流程 63
.5.1 CS域呼叫建立 63
.5.2 CS域呼叫释放 69
.6 PS域呼叫流程 71
.6.1 PS域呼叫建立 71
.6.2 PS域呼叫释放 75
.7 掉话 77
五、 系统间切换（Inter RAT Handover） 79
.1 压缩模式介绍 79
.1.1 压缩模式的激活 79
.1.2 压缩模式的结构与配置 80
.1.3 压缩模式配置示例 82
.1.4 传输间隙的位置 83
.1.5 下行压缩模式的帧结构 84
.1.6 压缩模式的触发 85
.2 测量报告 86
.2.1 频内测量（intra frequency measurement） 86
.2.2 频间测量（inter frequency measurement） 86
.2.3 系统间测量（Inter-RAT measurement） 87
.3 系统间切换（Inter-RAT HO）过程示例 87
.3.1 系统间切换步骤 87
.3.2 系统间切换示例Log 88

一、 相关协议层/子层及模块的介绍
这里只是简要介绍一下与Log分析比较紧密的协议层/子层及其模块实现的功能，以便于我们后面对Log的分析理解。详细的各个协议层的介绍请参阅3GPP标准。
.1 AMSS WCDMA物理层（Layer1）
物理层模块结构

高通的AMSS WCDMA物理层主要包括层一(L1)管理器、层一(L1)序列器等模块。
.1.1 层一(L1)管理器的主要功能包括：
 为L1提供任务环境
 在各个协议层中具有最高优先级
 执行任务初始化
 执行设备的初始化与清除
 提供与高层（RRC和MAC）的接口
 提供L1各个模块间的联系机制
 提供外部命令序列
 提供内部命令序列
 提供L1到mDSP的命令序列
 外部命令具有较高的优先级
 执行状态确认
 执行命令确认
 系列命令的执行
示例：下图是L1响应RRC的CPHY_SETUP_REQ命令建立一个PCCPCH的流程示意图

.1.2 序列器的主要功能包括：
 为三个系统定时器（system timer ）提供可设计的程序事件（timelines）的中断接口
–普通timeline 支持16个事件（最高优先级）。
–Rx timeline 支持8个事件（低优先级）。包括解码、解调、搜索等事件。
–Tx timeline 支持8个事件（中等优先级）。包括等事件。
 可设计的中断将服从于帧参考记数器
 事件可以被激活或去活，事件开始的时间可以被动态的改变。
.2 AMSS NAS(非接入层)介绍
NAS协议结构图：

NAS层的任务：
 注册（REG） 提供PLMN选择支持（自动/手动），位置更新、IMSI附着/分离。
 提供CC（call control）服务
–正常的主被叫呼叫建立
–紧急呼叫的主叫建立
–呼叫保持
–呼叫相关的增补服务
 提供SS（增补服务）
 提供SMS（短信息）服务，在MS和MSC间传送短信息。
 SM（Session Management）， 提供PDP（packet data protocol）上下文的激活、去活和修改。
 RABM（无线接入承载管理）
 MM（移动性管理），提供为CC、SS、SMS、REG的服务和执行连接管理等。
 GMM（GPRS移动性管理）
 接口
REG<–>MM
CNM/MN(mobile network)<–>MM
MM<–>RRC
.2.1 REG模块介绍
.2.1.1 REG模块的主要功能如下：
 REG状态机制
 自动和手动PLMN选择
 受限服务支持
 注册逻辑和禁止PLMN列表
 提供与CM（呼叫管理的接口）
.2.2 MM模块介绍
.2.2.1 MM模块主要支持下列功能：
 MM状态机制
 正常的和周期的位置更新
 IMSI的附着与分离
 身份验证
 RR连接管理
 MM信息过程
 安全管理
 系统间的切换与重选
.2.2.2 MM信息主要包括：
 MS到网络的
–鉴权响应
–CM重建请求
–CM服务终止
–CM服务请求
–身份响应
–IMSI分离指示
–位置更新请求
–MM状态
–TMSI重新分配完成
 网络到MS的
–鉴权拒绝
–鉴权请求
–CM服务接受
–CM服务拒绝
–身份验证请求
–位置更新接受
–位置更新拒绝
–MM状态
.2.2.3 MM的定时器
 注册定时器
–T3210 T3211 T3212 T3213 TIMER_MM_FORBIDDEN_LAI_CLEAR
 鉴权定时器
–T3214 T3216 T3220
 连接管理定时器
–T3230 T3240 TIMER_MM_REL
.2.3 GMM模块介绍
GMM主要是基于GPRS的MM管理，基本功能与MM类似。
.2.3.1 GMM信息主要包括：
 MS到网络的
–附着请求
–附着完成
–分离请求
–分离接受
–P-TMSI重新分配完成
–鉴权加密响应
–路由更新请求
–路由更新完成
–GMM状态
–服务请求
 网络到MS的
–附着接受
–附着拒绝
–分离请求
–分离接受
–P-TMSI重新分配命令
–鉴权加密请求
–鉴权加密拒绝
–身份验证请求
–路由更新接受
–路由更新拒绝
–GMM状态
–GMM信息
–服务接受
–服务拒绝
.2.3.2 GMM的定时器
 注册定时器
–T3302 T3310 T3311 T3312 T3321 T3330 TIMER_POWERDOWN
 连接管理定时器
–T3314 T3317
 安全管理定时器
–T3318 T3320
.2.4 CC模块介绍
.2.4.1 CC子层概述：
 CC子层可支持多个独立的CC实体。每个CC实体通过各自的MM连接与网络通信。
 每个CC实体是一个有限的状态机制，并通过消息与其它层三的实体通信。
 CC主要提供下列服务
–正常的主被叫建立。
–紧急呼叫的主叫建立
–呼叫保持
–呼叫相关的增补服务
.2.4.2 CC接口图：

.2.5 MMGSDI（Multiple Mode Generic SIM Drive Interface）模块介绍
 提供一套适合于SIM、USIM的类似图书馆的功能。
 这个图书馆功能用于进入SIM/USIM获取或修改数据，并应用于鉴权和PIN码的核实过程。
 这样我们仅用一个图书馆功能就可以实现对SIM/USIM的操作，从而可以忽略插入手机的是什么卡。
–例如：gsdi_sim_read 可以用于读取SIM卡和USIM卡的数据。

二、 小区选择与注册
.1 小区选择的相关定义与原则
.1.1 专用名词定义
 小区选择：手机选择一个PLMN中合适小区的过程。
 占用小区：手机寻找一个指定的PLMN（NAS提供）中的合适小区并且选择该小区提供可得的服务，并调谐到它的控制信道。这个选择过程叫做“占用小区”。
 合适小区：手机根据NAS层提供的信息占用一个选定的PLMN（或等效PLMN）中的小区并获得了正常的服务。这样的小区将符合下列要求：
–不是禁止小区
–满足下列小区选择标准
在FDD小区中： Srxlev>0 和 Squal>0
–不在禁止的位置区内
 可接受小区：手机占用一个不属于可选的PLMN的小区并获得了受限服务（紧急呼叫）。这样的小区将符合下列要求：
–不是禁止小区
–满足下列小区选择标准
在FDD小区中： Srxlev>0 和 Squal>0
–不在禁止的位置区内
 PLMN：由管理者或被认可的代理者建设并运行的提供公共陆地移动通信服务的网络。
–PLMN ID MCC+MNC
 本地PLMN（HPLMN）：与IMSI中的MCC+MNC完全相同的PLMN。
 已注册PLMN（RPLMN）：手机最后占用过的PLMN。
 等效PLMN（EHPLMN）：任何包含在等效PLMN（EHPLMN）列表中的PLMN。
 等效PLMN（EHPLMN）列表：出现在这个列表中的PLMN可以替代源于IMSI中的HPLMN用于PLMN的选择。该列表存储于USIM卡中。
 访问PLMN（VPLMN）：不同于HPLMN和EHPLMN的PLMN。
.1.2 空闲模式下的小区选择过程可分为如下三步：
 PLMN选择
 小区选择和重选
 位置区登记
过程图如下：

.2 SIM卡中存储的EFs文件
 手机将利用SIM卡中存储的所有与PLMN选择相关的EFs（Elementary Files）信息。
–EFRPLMNACT 最后用于RPLMN的接入技术。
–EFHPLMNwACT 带接入技术的HPLMN选择器。
–EFOPLMNwACT 运营商控制的带接入技术的PLMN选择器。
–EFPLMNwACT 用户控制的带接入技术的PLMN选择器。
–EFFPLMN 禁止PLMN列表。
 PLMN和接入技术的组合及优先级描述如下：

如果一个登录（PLMN）指示了一个以上的接入技术，但没有定义接入技术的优先级将会带来执行问题。
.3 PLMN选择过程
当开机或重新获得网络覆盖时，手机将利用它自身所具有的所有接入技术选择之前已注册的PLMN或它的等效PLMN（如果可得）并进行位置登记。
如果没有已注册的PLMN信息，或注册失败，手机将根据自身的PLMN选择模式执行下一步的PLMN选择。
在自动选择模式下，手机将按下列顺序尝试选择并注册到可用的PLMN
i) HPLMN（如果EPLMN列表为空）或最高优先级的EPLMN（如果EPLMN列表存在）；
ii) 按优先级次序选择SIM卡中“用户控制的PLMN/接入技术选择器”文件中的PLMN及对应的接入技术；
iii) 按优先级次序选择SIM卡中“运营商控制的PLMN/接入技术选择器”文件中的PLMN及对应的接入技术；
iv) 接收到的其它的高质量的PLMN及对应的接入技术；
v) 其它的按信号质量递减的PLMN及对应的接入技术；
手动选择模式下，手机将运用所有支持的接入技术指示是否有可得的PLM。这些PLMN包括“禁止PLMN”列表中的PLMN和仅提供手机不支持的服务的PLMN。
.4 小区占用过程

.4.1 SIM<–>REG<–>MM<–>RRC的信令流程
 REG查询SIM
Day 0 22:37:21.390 [00] 0x1FEB Extended Debug Message
reg_sim.c 1093 H SIM card mode (GSM)
Day 0 22:37:21.394 [00] 0x1FEB Extended Debug Message
reg_nv.c 320 H Read GPRS_ANITE_GCF - 0
Day 0 22:37:21.466 [00] 0x1FEB Extended Debug Message
reg_sim.c 1634 H HPLMN(704-020)
 REG–>MM SIM卡有效性
Day 0 22:37:21.417 [00] 0x1FEB Extended Debug Message
reg_send.c 871 H MMR_SIM_AVAILABLE_REQ
Day 0 22:37:21.417 [00] 0x1FEB Extended Debug Message
mmcoord.c 466 H MM received MMR_SIM_AVAILABLE_REQ
Day 0 22:37:21.425 [00] 0x1FEB Extended Debug Message
reg_send.c 446 H CM_SIM_AVAILABLE_CNF
 REG从SIM中读取PLMN信息
Day 0 22:37:21.467 [00] 0x1FEB Extended Debug Message
reg_sim.c 1894 H CS RPLMN(704-2)
Day 0 22:37:26.140 [00] 0x1FEB Extended Debug Message
reg_sim.c 1634 H HPLMN(704-020)
Day 0 22:37:26.141 [00] 0x1FEB Extended Debug Message
reg_sim.c 2467 H Forbidden PLMN list (length = 4)
Day 0 22:37:26.141 [00] 0x1FEB Extended Debug Message
reg_sim.c 2471 H # MCC-MNC
Day 0 22:37:26.141 [00] 0x1FEB Extended Debug Message
reg_sim.c 2484 H 0 704-001
Day 0 22:37:26.141 [00] 0x1FEB Extended Debug Message
reg_sim.c 2484 H 1 000-000
Day 0 22:37:26.141 [00] 0x1FEB Extended Debug Message
reg_sim.c 2484 H 2 000-000
Day 0 22:37:26.141 [00] 0x1FEB Extended Debug Message
reg_sim.c 2484 H 3 704-003
Day 0 22:38:12.258 [00] 0x1FEB Extended Debug Message
reg_sim.c 1756 H HPLMN RAT Search Order (GSM-UMTS)
Day 0 22:38:12.273 [00] 0x1FEB Extended Debug Message
reg_sim.c 2087 H RPLMN RAT Search Order (GSM-UMTS)
 REG–>MM
Day 0 22:38:12.273 [00] 0x1FEB Extended Debug Message
reg_send.c 833 H MMR_REG_REQ PLMN(704-2) RAT(GSM)
Day 0 22:38:12.274 [00] 0x1FEB Extended Debug Message
mmcoord.c 929 H MM received MMR_REG_REQ [7 f4 20]
 MM–>RRC
Day 0 22:38:38.919 [00] 0x1FEB Extended Debug Message
mmrrcconn.c 319 H MM sent RRC_SERVICE_REQ to RRC
Day 0 22:38:38.919 [00] 0x1FEB Extended Debug Message
rrcdispatcher.c 3522 H Recd: RRC_SERVICE_REQ
.4.2 频段与频率的扫描
.4.2.1 由系统检测配置（System Determination configures）定义的基于mode_pref的频率扫描控制信息
Day 0 22:37:19.659 [00] 0x1FEB Extended Debug Message
sd.c 8957 H =SD= UOOSI: total time: 50000 wcdma: 3000 gsm: 2000
Day 0 22:38:38.942 [00] 0x1FEB Extended Debug Message
rrccsputil.c 9807 H UOOSI: uoos_use_tmr 1, new_svc_req 1. Init freq scan
Day 0 22:38:38.943 [01] 0x1FEB Extended Debug Message
rrccsputil.c 9911 H UOOSI: Start Uniform OOS timer 50000ms based on the value in Svc Req
Day 0 22:38:38.943 [01] 0x1FEB Extended Debug Message
rrctmr.c 1196 H Started timer:35 val:5000 ms
Day 0 22:38:38.943 [01] 0x1FEB Extended Debug Message
rrccsputil.c 9928 H UOOSI: It is a new type of service request
Day 0 22:38:38.943 [01] 0x1FEB Extended Debug Message
rrccsputil.c 10178 H UOOSI: uoos_use_tmr 1, new_svc_req 1
.4.2.2 全频段频率扫描将在对ACQ DB（acquaintance data base）中的频点扫描后进行。
Day 0 22:38:38.943 [01] 0x1FEB Extended Debug Message
rrccsputil.c 4364 H UOOS: INIT freq scan data
Day 0 22:38:38.944 [01] 0x1FEB Extended Debug Message
rrccsputil.c 4435 H Acquisition Type: RRC_CSP_SPEC_PLMN
Day 0 22:38:51.921 [05] 0x1FEB Extended Debug Message
rrccspdb.c 1707 H Acq DB Search. Looping = 0 and ue_in_deep_sleep = 1
Day 0 22:38:51.921 [05] 0x1FEB Extended Debug Message
rrccspdb.c 1252 H Acq DB Freq 10687 NOT scanned. Scan
.4.2.3 ACQ DB中频点的扫描结果。
Day 0 22:38:51.041 [00] 0x1FEB Extended Debug Message
srchacq.c 626 H service req search requested
Day 0 22:38:51.045 [01] 0x1FEB Extended Debug Message
l1msetup.c 4044 E L1 state now ACQ
Day 0 22:38:39.024 [01] 0x1FEB Extended Debug Message
srchacq.c 1308 H ACQ REQ:Rx AGC -103 Chan 10687
.4.2.4 全频段频率的扫描（以下简称频率扫描）
频率扫描的过程是指在一个指定的频率范围内寻找足够强的有可能被解调的频点的过程。
频率扫描可以分为三种模式：
–初始扫描（coarse scan）
–细致扫描（fine scan）
–附加信道扫描（additional channel scan）
细致扫描将总是在初始扫描成功后执行。附加信道扫描用于扫描800、850和PCS频段并且在初始扫描和细致扫描之后进行。
 初始扫描
在初始扫描中扫描某个频率范围时只是扫描该范围内起始和结束频点，跨度很大。然后会将接受电平（AGC RSSI）满足预先设定门限的频点存入报告模版中（该报告摸版中的信息最终将报告给RRC），被存入报告模版中频点的顺序是按照测得它们的RSSI的值大小的降序排列的。
 细致扫描
细致扫描将在初始扫描后已经经过初步筛选的基础上，在相应的频率范围内以较小的跨度进行扫描。同样，也会将扫描结果按RSSI降序的排列存入报告模版中。
 附加信道扫描
附加信道扫描中的频段分别对应的是：
PCS—12 850— 6 800— 2
.4.2.5 全频段频率扫描的Log示例：
 L1进入频率扫描状态
Day 0 22:38:38.950 [00] 0x1FEB Extended Debug Message
l1msetup.c 4036 E L1 state now FS
Day 0 22:38:38.950 [00] 0x1FEB Extended Debug Message
srchfs.c 1453 H Service search requested
Day 0 22:38:38.950 [00] 0x1FEB Extended Debug Message
srchfs.c 1459 H The raw and fine scan thresholds are -103 and -476
 初始扫描过程
Day 26 00:51:05.452 [00] 0x1FEB Extended Debug Message
srchfs.c 1980 H RAW FS: Start 10562, End 10838
Day 26 00:51:05.454 [00] 0x1FEB Extended Debug Message
srchfs.c 2166 H The rx_agc value mesaured for 10562 frequecny is -99
Day 26 00:51:05.456 [01] 0x1FEB Extended Debug Message
srchfs.c 2166 H The rx_agc value mesaured for 10572 frequecny is -99
Day 26 00:51:05.458 [01] 0x1FEB Extended Debug Message
srchfs.c 2166 H The rx_agc value mesaured for 10582 frequecny is -97
Day 26 00:51:05.460 [01] 0x1FEB Extended Debug Message
srchfs.c 2166 H The rx_agc value mesaured for 10592 frequecny is -98
。
。
。
Day 26 00:51:05.506 [06] 0x1FEB Extended Debug Message
srchfs.c 2166 H The rx_agc value mesaured for 10812 frequecny is -79
Day 26 00:51:05.508 [06] 0x1FEB Extended Debug Message
srchfs.c 2166 H The rx_agc value mesaured for 10822 frequecny is -78
Day 26 00:51:05.510 [06] 0x1FEB Extended Debug Message
srchfs.c 2166 H The rx_agc value mesaured for 10838frequecny is -86
Day 26 00:51:05.513 [06] 0x1FEB Extended Debug Message
rrcllc.c 32328 H Rcv’d RRC_CPHY_FREQ_SCAN_CNF from L1
Day 26 00:51:05.513 [06] 0x1FEB Extended Debug Message
rrccspfscan.c 1844 H Num freq in RScanCnf 16
 初始排序
Day 26 00:51:05.513 [06] 0x1FEB Extended Debug Message
rrccspfscan.c 1887 H RAW [0], freq = 10642, rssi = -74
Day 26 00:51:05.513 [06] 0x1FEB Extended Debug Message
rrccspfscan.c 1887 H RAW [1], freq = 10632, rssi = -76
Day 26 00:51:05.513 [06] 0x1FEB Extended Debug Message
rrccspfscan.c 1887 H RAW [2], freq = 10652, rssi = -77
Day 26 00:51:05.513 [06] 0x1FEB Extended Debug Message
rrccspfscan.c 1887 H RAW [3], freq = 10822, rssi = -78
。
Day 26 00:51:05.514 [06] 0x1FEB Extended Debug Message
rrccspfscan.c 1887 H RAW [13], freq = 10572, rssi = -99
Day 26 00:51:05.514 [06] 0x1FEB Extended Debug Message
rrccspfscan.c 1887 H RAW [14], freq = 10602, rssi = -99
Day 26 00:51:05.514 [06] 0x1FEB Extended Debug Message
rrccspfscan.c 1887 H RAW [15], freq = 10772, rssi = -99
 开始进行细致扫描
Day 26 00:51:05.514 [06] 0x1FEB Extended Debug Message
rrccspfscan.c 1266 H Starting fine scan on UARFCN 10642
Day 26 00:51:05.559 [05] 0x1FEB Extended Debug Message
rrccspfscan.c 1899 H Num freq in FnScanCnf 6
Day 26 00:51:05.559 [05] 0x1FEB Extended Debug Message
rrccspfscan.c 1903 H Num_freq 6 in FnScan Cnf
Day 26 00:51:05.559 [05] 0x1FEB Extended Debug Message
rrccspfscan.c 1972 H Fine [0], freq = 10640, rssi = -104
Day 26 00:51:05.559 [05] 0x1FEB Extended Debug Message
rrccspfscan.c 1972 H Fine [1], freq = 10642, rssi = -105
Day 26 00:51:05.559 [05] 0x1FEB Extended Debug Message
rrccspfscan.c 1972 H Fine [2], freq = 10641, rssi = -108
。
Day 26 00:51:05.559 [05] 0x1FEB Extended Debug Message
rrccspfscan.c 1972 H Fine [4], freq = 10637, rssi = -116
Day 26 00:51:05.559 [05] 0x1FEB Extended Debug Message
rrccspfscan.c 1972 H Fine [5], freq = 10639, rssi = -116
 然后尝试在最好的频点上进行小区的捕获——小区搜索
Day 26 00:51:05.514 [06] 0x1FEB Extended Debug Message
rrccspfscan.c 1266 H Starting fine scan on UARFCN 10642
Day 26 00:51:05.514 [06] 0x1FEB Extended Debug Message
rrccsputil.c 4429 H Freq 10642 scan type 2
Day 26 00:51:05.514 [06] 0x1FEB Extended Debug Message
rrcllc.c 6080 H Sending CPHY_IDLE_REQ primitive
.4.3 小区搜索（捕获）过程
在小区搜索中，手机将寻找并确定小区的下行主扰码并与小区进行帧同步，搜索过程可分为三步：
I ) 时隙同步
手机利用SCH的主同步码获得与一个小区的时隙同步。因为在系统内所有小区的主同步码是完全相同的，时隙同步可以通过检测匹配滤波器的峰值输出获得。

II） 帧同步和码组确认
第二步手机将在第一步发现的小区中利用SCH的辅同步码来获得帧同步并确定该小区的辅同步码的码组号。通过将接收到的信号与所有可能的64组辅同步码序列进行互相关，并确定具有最大相关值的码组。因为每个辅同步码码组的（小于15位的）自循环都是唯一的，所以通过这样的互相关可以获得帧同步和辅助同步码的码组号。
III） 主扰码的确认
第三步中手机将确定被选定小区的下行主扰码。因第二步获得的辅同步码的码组号与下行主扰码的码组号相同，所以可确定8个可能的主扰码，且由于CPICH的信道化码在系统中是已知的（Cch.256.0）并用主扰码加扰，因此可以通过逐符号的互相关计算得出该小区的下行主扰码。确定了主扰码后主CCPCH就可以被读取进而可以读取系统消息。
Log示例如下：
Day 26 00:51:04.487 [00] 0x1FEB Extended Debug Message
srchacq.c 1368 H ACQ REQ:Rx AGC -73 Chan 10813
 第一步：时隙的同步
Day 26 00:51:04.518 [03] 0x4018 WCDMA Step 1 Search Ver2
Antenna ID = 0 (primary)
Noncoherent Integration Length = 45
Number of Peaks Returned = 23
Peak[ 0]: Position(Cx8) = 11383, Ec/Io = -9.38 dB
Peak[ 1]: Position(Cx8) = 11363, Ec/Io = -16.69 dB
Peak[ 2]: Position(Cx8) = 11335, Ec/Io = -19.33 dB
Peak[ 3]: Position(Cx8) = 11323, Ec/Io = -19.42 dB
Peak[ 4]: Position(Cx8) = 11519, Ec/Io = -20.49 dB
Peak[ 5]: Position(Cx8) = 11371, Ec/Io = -20.65 dB
Peak[ 6]: Position(Cx8) = 11439, Ec/Io = -20.80 dB
Peak[ 7]: Position(Cx8) = 11427, Ec/Io = -20.81 dB
Peak[ 8]: Position(Cx8) = 11399, Ec/Io = -21.13 dB
Peak[ 9]: Position(Cx8) = 11451, Ec/Io = -21.22 dB
Peak[10]: Position(Cx8) = 11903, Ec/Io = -21.74 dB
Peak[11]: Position(Cx8) = 11055, Ec/Io = -21.88 dB
Peak[12]: Position(Cx8) = 11007, Ec/Io = -21.98 dB
Peak[13]: Position(Cx8) = 11775, Ec/Io = -22.23 dB
Peak[14]: Position(Cx8) = 11315, Ec/Io = -22.80 dB
Peak[15]: Position(Cx8) = 12151, Ec/Io = -22.85 dB
Peak[16]: Position(Cx8) = 10751, Ec/Io = -22.87 dB
Peak[17]: Position(Cx8) = 11199, Ec/Io = -22.92 dB
Peak[18]: Position(Cx8) = 11867, Ec/Io = -22.94 dB
Peak[19]: Position(Cx8) = 12135, Ec/Io = -22.96 dB
Peak[20]: Position(Cx8) = 10879, Ec/Io = -22.98 dB
Peak[21]: Position(Cx8) = 11999, Ec/Io = -23.00 dB
Peak[22]: Position(Cx8) = 12791, Ec/Io = -23.14 dB
Day 26 00:51:04.518 [03] 0x1FEB Extended Debug Message
srchacq.c 3484 H Step1: 23Pks, POS1 11383, ENG1 49472
Day 26 00:51:04.518 [03] 0x1FEB Extended Debug Message
srchacq.c 3258 H power-up acquisition: pick top 2 peaks from Step1
 第二步：帧同步和码组确认
Day 26 00:51:04.551 [06] 0x4019 WCDMA Step 2 Search Ver2
Antenna ID = 0 (primary)
Noncoherent Integration Length = 3
Number of Peaks Reported = 6
Peak[ 0]: Code Group = 20, Position(Cx8) = 298103, Ec/Io = -11.24 dB
Peak[ 1]: Code Group = 20, Position(Cx8) = 298099, Ec/Io = -13.16 dB
Peak[ 2]: Code Group = 20, Position(Cx8) = 298107, Ec/Io = -11.97 dB
Peak[ 3]: Code Group = 20, Position(Cx8) = 298083, Ec/Io = -20.47 dB
Peak[ 4]: Code Group = 50, Position(Cx8) = 277599, Ec/Io = -20.38 dB
Peak[ 5]: Code Group = 55, Position(Cx8) = 298087, Ec/Io = -19.48 dB
Day 26 00:51:04.551 [06] 0x1FEB Extended Debug Message
srchacq.c 3638 H ACQ:step2 peak count 6
Day 26 00:51:04.551 [06] 0x1FEB Extended Debug Message
srchacq.c 3641 H Step2:cd_grp 20,POS 298103,ENG 4095
Day 26 00:51:04.551 [06] 0x1FEB Extended Debug Message
srchacq.c 3641 H Step2:cd_grp 20,POS 298099,ENG 2707
Day 26 00:51:04.551 [06] 0x1FEB Extended Debug Message
srchacq.c 3641 H Step2:cd_grp 20,POS 298107,ENG 3497
Day 26 00:51:04.551 [06] 0x1FEB Extended Debug Message
srchacq.c 3641 H Step2:cd_grp 20,POS 298083,ENG 667
Day 26 00:51:04.551 [06] 0x1FEB Extended Debug Message
srchacq.c 3641 H Step2:cd_grp 50,POS 277599,ENG 677
Day 26 00:51:04.551 [06] 0x1FEB Extended Debug Message
srchacq.c 3641 H Step2:cd_grp 55,POS 298087,ENG 786
 第三步：主扰码的确认
Day 26 00:51:04.558 [07] 0x401A WCDMA Step 3 Search Ver2
Antenna ID = 0 (primary)
Window Size = 512
Coherent Integration Duration = 256 chips
Noncoherent Integration Length = 12
Number of Tasks Finished = 4
Task[ 0]:
Code Index = 2656 (PSC: 166)
Peak[ 0]: Position(Cx8) = 298103, Ec/Io = -2.96 dB
Peak[ 1]: Position(Cx8) = 298019, Ec/Io = -23.38 dB
Peak[ 2]: Position(Cx8) = 298183, Ec/Io = -24.78 dB
Peak[ 3]: Position(Cx8) = 298275, Ec/Io = -24.78 dB
Task[ 1]:
Code Index = 2656 (PSC: 166)
Peak[ 0]: Position(Cx8) = 298103, Ec/Io = -2.95 dB
Peak[ 1]: Position(Cx8) = 298115, Ec/Io = -19.75 dB
Peak[ 2]: Position(Cx8) = 298079, Ec/Io = -20.84 dB
Peak[ 3]: Position(Cx8) = 298123, Ec/Io = -20.93 dB
Task[ 2]:
Code Index = 6400 (PSC: 400)
Peak[ 0]: Position(Cx8) = 277367, Ec/Io = -20.87 dB
Peak[ 1]: Position(Cx8) = 277775, Ec/Io = -24.00 dB
Peak[ 2]: Position(Cx8) = 277355, Ec/Io = -24.29 dB
Peak[ 3]: Position(Cx8) = 277699, Ec/Io = -24.55 dB
Task[ 3]:
Code Index = 7072 (PSC: 442)
Peak[ 0]: Position(Cx8) = 297875, Ec/Io = -22.16 dB
Peak[ 1]: Position(Cx8) = 298115, Ec/Io = -24.33 dB
Peak[ 2]: Position(Cx8) = 298139, Ec/Io = -24.59 dB
Peak[ 3]: Position(Cx8) = 298159, Ec/Io = -25.72 dB
Day 26 00:51:04.558 [07] 0x1FEB Extended Debug Message
srchacq.c 3837 H ACQ:step3 pilot count 4
Day 26 00:51:04.558 [07] 0x1FEB Extended Debug Message
srchacq.c 3840 H Step3:psc 166,Pos 298103,Eng 56300
Day 26 00:51:04.558 [07] 0x1FEB Extended Debug Message
srchacq.c 3840 H Step3:psc 166,Pos 298103,Eng 56532
Day 26 00:51:04.558 [07] 0x1FEB Extended Debug Message
srchacq.c 3840 H Step3:psc 400,Pos 277367,Eng 1336
Day 26 00:51:04.558 [07] 0x1FEB Extended Debug Message
srchacq.c 3840 H Step3:psc 442,Pos 297875,Eng 1104
Day 26 00:51:04.558 [07] 0x1FEB Extended Debug Message
srchacq.c 4031 H duplicate cell: scr code 2656, ignore it
 选择最强的路径（finger）
Day 26 00:51:04.558 [07] 0x1FEB Extended Debug Message
srchacq.c 4059 H ACQ:Pullin set: psc 166
Day 26 00:51:04.558 [07] 0x1FEB Extended Debug Message
srchacq.c 4064 H Pos 298103, Eng 56532
Day 26 00:51:04.558 [07] 0x1FEB Extended Debug Message
srchacq.c 4064 H Pos 298115, Eng 1604
Day 26 00:51:04.558 [07] 0x1FEB Extended Debug Message
srchacq.c 4064 H Pos 298079, Eng 1344
Day 26 00:51:04.558 [07] 0x1FEB Extended Debug Message
srchacq.c 4064 H Pos 298123, Eng 1324
Day 26 00:51:04.610 [0C] 0x1FEB Extended Debug Message
srchacq.c 4528 H Pull-in Status 1, psc 166 pullin_fing 0
Day 26 00:51:04.662 [13] 0x1FEB Extended Debug Message
srchacq.c 4944 H ACQ SUCCEED! FREQ:10813,PSC:166,STTD:1
这时手机已经得到了最好小区的PSC（主扰码），下一步就可以读取该小区的BCH进而可以获得该小区的PLMN。这样可以和NAS层提供的PLMN进行对比，以确定是否是合适的PLMN。
.4.4 PLMN的检查
建立BCH（PCCPCH）以读取系统信息
Day 26 00:51:04.662 [13] 0x1FEB Extended Debug Message
rrcsibproc.c 8407 H RRC_GET_SPECIFIC_SIBS_REQ cmd received
Day 26 00:51:04.663 [13] 0x1FEB Extended Debug Message
rrcllc.c 5492 H Sending CPHY_SETUP_REQ to L1（PCCPCH）
Day 26 00:51:04.715 [18] 0x1FEB Extended Debug Message
rrcllc.c 29517 H Rcv’d RRC_CPHY_SETUP_CNF from L1: 1
Day 26 00:51:04.741 [1B] 0x1FEB Extended Debug Message
rrcsibproc.c 7393 H Sending GET_SPECIFIC_SIBS_CNF cmd
检查PLMN和小区是否许可接入，RRC利用从BCH系统信息中获得的MCC+MNC与NAS层提供的PLMN（MCC+MNC）进行匹配对比。
Day 26 00:51:23.571 [46] 0x1FEB Extended Debug Message
rrcdata.c 4110 H NAS MCC 222 MNC 1
Day 26 00:51:23.571 [46] 0x1FEB Extended Debug Message
rrcdata.c 4113 H BCCH MCC 222 MNC 1
Day 26 00:51:23.571 [46] 0x1FEB Extended Debug Message
rrcdata.c 4121 H NAS and BCCH MCC-MNC same
Day 26 00:51:23.571 [46] 0x1FEB Extended Debug Message
rrccsputil.c 14366 H PLMN is the requested PLMN
Day 26 00:51:23.571 [46] 0x1FEB Extended Debug Message
rrcdata.c 4110 H NAS MCC 222 MNC 1
Day 26 00:51:23.571 [46] 0x1FEB Extended Debug Message
rrcdata.c 4113 H BCCH MCC 222 MNC 1
Day 26 00:51:23.571 [46] 0x1FEB Extended Debug Message
rrcdata.c 4121 H NAS and BCCH MCC-MNC same
Day 26 00:51:23.571 [46] 0x1FEB Extended Debug Message
rrccsputil.c 17930 H PLMN is the same as requested BCCH and NAS PLMN match
.4.5 小区占用
在确定该小区的PLMN与NAS匹配后，将利用小区选择准则S判断是否可以占用该小区。当然还有一个前提是该小区未被禁止（not barred）。
小区选择标准S定义如下：
在FDD小区中需满足： Srxlev>0 和 Squal>0
其中：Squal=Qqualmeas-Qqualmin
Srxlev= Qrxlevmeas-Qrxlevmin-Pcompensation
Squal —— 小区选择质量值（dB）仅用于FDD小区。
Srxlev —— 小区选择接收电平值（dB）。
Qqualmeas —— 测得的小区质量值。接收信号的质量（在FDD小区）用CPICH的Ec/No(dB)表示。
Qrxlevmeas —— 测得的小区接收电平值。在FDD小区为CPICH的RSCP值（dBm），在TDD小区为P-CCPCH的RSCP值（dBm）。
Qqualmin —— 小区要求的最小质量门限（dB），仅用于FDD小区。
Qrxlevmin —— 小区要求的最小接收电平门限（dBm）。
Pcompensation ---- max(UE_TXPWR_MAX_RACH – P_MAX, 0) (dB)
UE_TXPWR_MAX_RACH —— 手机在RACH上的最大允许发射功率（从系统消息中读取）（dBm）。
P_MAX —— 手机的最大发射功率（dBm）。
Qqualmin、Qrxlevmin、UE_TXPWR_MAX_RACH的值都可以从系统信息3中获得。
 用S准则评估该小区是否可以占用
Day 26 00:51:23.572 [47] 0x1FEB Extended Debug Message
l1mcmd.c 1287 H Received CELL_SELECTION_REQ
Day 26 00:51:23.586 [48] 0x1FEB Extended Debug Message
srchbch.c 1404 H Qqualmin -16 Qrxlevmin -115
Day 26 00:51:23.586 [48] 0x1FEB Extended Debug Message
wsrch.c 5702 H Rx AGC = -77
Day 26 00:51:23.586 [48] 0x1FEB Extended Debug Message
srchbch.c 1450 H 2ecio=-7 2squal=25 srxlv=35
Day 26 00:51:23.587 [48] 0x1FEB Extended Debug Message
rrcllc.c 32473 H Rcv’d RRC_CPHY_CELL_SELECTION_CNF
Day 26 00:51:23.586 [48] 0x1FEB Extended Debug Message
srchbch.c 1314 H CELL_SEL_CNF 2*sq 25,rxlv 35
Day 26 00:51:23.586 [48] 0x1FEB Extended Debug Message
srchbch.c 1499 H Cell Selection Succeed
 满足小区选择准则后，建立SCCPCH用于发起呼叫和监听寻呼消息
Day 26 00:51:23.588 [48] 0x1FEB Extended Debug Message
l1msetup.c 6222 H Recd CPHY_CELL_TRANSITION_REQ
Day 26 00:51:23.590 [48] 0x1FEB Extended Debug Message
rrcllc.c 32534 H Rcv’d RRC_CPHY_CELL_TRANSITION_CNF
Day 26 00:51:23.592 [49] 0x1FEB Extended Debug Message
rrcllc.c 24298 H DROP SERVING BCCH
Day 26 00:51:23.592 [49] 0x1FEB Extended Debug Message
rrcllc.c 8548 H DROP BCCH SERVING
Day 26 00:51:23.593 [49] 0x1FEB Extended Debug Message
rrcllc.c 5492 H Sending CPHY_SETUP_REQ to L1（SCCPCH）
Day 26 00:51:23.630 [4C] 0x1FEB Extended Debug Message
rrcllc.c 29517 H Rcv’d RRC_CPHY_SETUP_CNF from L1: 1
 RRC小区选择过程宣布“小区占用”成功
Day 26 00:51:23.220 [BC] 0x1FEB Extended Debug Message
mmsend.c 1346 H MM sent MMR_SERVICE_IND
Day 26 00:51:23.634 [4D] 0x1FEB Extended Debug Message
rrccsp.c 10880 H Camped on suitable cellID 86008290
Day 26 00:51:23.639 [4D] 0x1FEB Extended Debug Message
mmcoord.c 2602 H Revd RRC_SERVICE_IND w/ SRV-AC = 3
Day 26 00:51:23.717 [ED] 0x1FEB Extended Debug Message
reg_state.c 3186 H MMR_CAMPED_IND
Day 26 00:51:23.717 [ED] 0x1FEB Extended Debug Message
reg_send.c 200 H CM_CAMPED_IND
.5 用户注册
成功占用小区后，手机将发起RRC连接进行注册登记。
 手机通过上行RACH发送RRC连接请求
Day 10467 10:58:05.634 [CB] 0x412F WCDMA Signaling Messages – UL_CCCH
Channel Type = UL_CCCH, Radio Bearer ID = 0, Message Length = 13
Interpreted PDU:
value UL-CCCH-Message ::=
message rrcConnectionRequest :
initialUE-Identity tmsi-and-LAI :
tmsi '00101100 00111110 10001011 11111001’B,
lai plmn-Identity
mcc
{
2,
2,
2
},
mnc
{
0,
1
}
},
lac '00000001 01010001’B
}
},
establishmentCause registration,
。
。
 RACH的前导初始功率（Preamble_Initial_Power）=PCPICH TX POWER(SIB5)-CPICH_RSCP(UE测量值)+UL interference(SIB7)+Constant Value(SIB5)=-51
Day 10467 10:58:05.656 [CD] 0x1FEB Extended Debug Message
wenc.c 5235 E Calc RACH Preamble Power: -51 Min: -35 OPT 0
Day 10467 10:58:05.656 [CD] 0x1FEB Extended Debug Message
wenc.c 5260 H PrCPICH_P 35, CPICH_RSCP -46, UL_IF -105
Day 10467 10:58:05.656 [CD] 0x1FEB Extended Debug Message
wenc.c 5262 H const_val -27, Preambl_P -51, TFCI 0
Day 10467 10:58:05.710 [D3] 0x1FEB Extended Debug Message
wenc.c 6688 H RACH Tx successful, TxAgc -43, ai_Sum e7b09
 从AICH（捕获指示信道）接收RACH捕获确认信息ACK
Day 10467 10:58:05.710 [D3] 0x1FEB Extended Debug Message
macrach.c 818 H rcvd L1_PRACH_ACK from L1
 通过下行CCH（DL CCH）将RRC连接建立映射到FACH
Day 10467 10:58:05.805 [DC] 0x1FEB Extended Debug Message
rlcdlum.c 646 H UM Rx’d SN 6e, LC 8
Day 10467 10:58:05.805 [DC] 0x1FEB Extended Debug Message
rlcdlum.c 646 H UM Rx’d SN 6f, LC 8

。
。
。
Day 10497 10:58:25.790 [A0] 0x1FEB Extended Debug Message
rlcdlum.c 646 H UM Rx’d SN 0, LC 9
 RRC建立完成
Day 10497 10:58:24.109 [FF] 0x1FEB Extended Debug Message
rrcrce.c 5364 H RRC Connection Setup Msg is received
Day 10497 10:58:24.202 [01] 0x1FEB Extended Debug Message
rrcrce.c 7787 H RRC Conn Setup Compl Msg is sent
Day 10497 10:58:24.383 [13] 0x1FEB Extended Debug Message
rrcrce.c 9759 H L2 ack for RRC ConnSetCompl rcvd
Day 26 10:58:24.384[13] 0x1FEB Extended Debug Message
mmrrcconn.c 452 H RR Connection Established
这时手机已经和网络之间建立了一条信令链路，可以与网络通过信令的交互完成注册了。主要注册过程如下：
Day 26 00:50:47.406 [ED] 0x7001 UMTS Call Flow Analysis
Type # Dir SRC/DST MESSAGE
---- — --- ------------ -------
CFA 10 Rx GL2<-GL1: PH_DATA_IND/MM_AUTHENTICATION_REQUEST
Day 26 00:50:47.455 [ED] 0x7001 UMTS Call Flow Analysis
Type # Dir SRC/DST MESSAGE
---- — --- ------------ -------
CFA 20 Tx (G)RR->GL2: DL_DATA_REQ/MM_AUTHENTICATION_RESPONSE
Day 26 00:50:47.877 [ED] 0x7001 UMTS Call Flow Analysis
Type # Dir SRC/DST MESSAGE
---- — --- ------------ -------
CFA 36 Rx GL2<-GL1: PH_DATA_IND/RR_CIPHERING_MODE_COMMAND
Day 26 00:50:47.882 [ED] 0x7001 UMTS Call Flow Analysis
Type # Dir SRC/DST MESSAGE
---- — --- ------------ -------
CFA 42 Tx (G)RR->GL2: DL_DATA_REQ/RR_CIPHERING_MODE_COMPLETE
Day 26 00:50:48.113 [ED] 0x7001 UMTS Call Flow Analysis
Type # Dir SRC/DST MESSAGE
---- — --- ------------ -------
FA54Rx(G)RR<-GL2:D L_DATA_IND/MM_TMSI_REALLOCATION_COMMAND
Day 26 00:50:48.114 [ED] 0x7001 UMTS Call Flow Analysis
Type # Dir SRC/DST MESSAGE
---- — --- ------------ -------
FA60Tx(G)RR->GL2:D L_DATA_REQ/MM_TMSI_REALLOCATION_COMPLETE
Day 26 00:50:49.054 [ED] 0x7001 UMTS Call Flow Analysis
Type # Dir SRC/DST MESSAGE
---- — --- ------------ -------
CFA88 Rx GL2<-GL1: PH_DATA_IND/MM_LOCATION_UPDATING_ACCEPT
Day 26 00:50:49.525 [ED] 0x7001 UMTS Call Flow Analysis
Type # Dir SRC/DST MESSAGE
---- — --- ------------ -------
CFA 113 Rx (G)RR<-GL2: DL_RELEASE_CNF/NORMAL_RELEASE
至此，手机完成了PLMN选择、频率扫描、小区搜索、小区占用与注册等过程，手机进入空闲模式，可随时获得网络提供的各种服务。

三、 小区重选
.1 小区重选概述
小区重选是指手机在已经占用一个小区的情况下，通过测量、评估占用一个更好的小区的过程。相关详细标准可参阅3GPP TS 25.133/25.304/25.331。
.1.1 小区重选的相关概念
小区重选的目的是手机在给定的PLMN内选择一个比当前服务小区更好的服务小区，当然这个更好的小区必须是当前服务小区的邻区。
小区重选的概念只限定在手机的空闲模式（Idle Mode）和Cell_FACH、Cell_PCH、URA_PCH。
手机在空闲模式下的主要任务有：
 执行测量任务
 从系统信息3中读取小区重选参数
 从系统信息11中读取邻区列表和FACH的测量时刻
 NAS层可以发起位置或路由更新
手机在连接模式（Connected Mode）的主要任务有：
（注：这里所说的连接模式是指Cell_FACH、Cell_PCH、URA_PCH状态下的RRC连接，并没有专用业务信道）
 Cell_PCH、URA_PCH状态下的测量(DRX唤醒时)
 Cell_FACH状态下的频间和系统间测量(FACH Measurement occasion)
 读取系统信息4、12（如果有），否则还是读取系统信息3、11
 小区更新
.1.2 小区重选所需的必要操作
当手机占用一个小区后，手机将在空闲模式（Idle Mode）和Cell_FACH、Cell_PCH、URA_PCH模式下执行如下操作：
 选择并监听该小区的PICH和PCH
 监听相关系统信息
 执行小区重选评估过程所需的测量
 执行小区重选评估过程（on the following occasions/triggers）

1. UE 内部触发
2. BCCH上的关于小区重选评估的信息改变了
   .1.3 小区重选准则
   .1.3.1 系统信息3（SIB3）中的相关参数
    Sintrasearch 定义了频内测量门限（dB）。
   –当Squal≤Sintrasearch时执行频内邻区的测量
   –如果没有定义具体值则总是执行频内邻区的测量
    Sintersearch 定义了频间测量门限（dB）。
   –当Squal≤Sintersearch时执行频间邻区的测量
   –如果没有定义具体值则总是执行频内邻区的测量
    SsearchRAT 定义了当前小区用于RAT间测量准则的门限。
   –当Squal≤SsearchRAT时执行频间邻区的测量
   –如果没有定义具体值则总是执行频内邻区的测量
    Qhyst1s 定义了用于当前服务小区等级排列的滞后值(Qhyst)。小区选择与重选测量量设置为CPICH RSCP的FDD小区。
    Qhyst2s 定义了用于当前服务小区等级排列的滞后值(Qhyst)。小区选择与重选测量量设置为CPICH Ec/No的FDD小区。
    Qqualmin 定义了当前小区基于CPICH Ec/No的最小要求的质量门限（单位dB）。仅用于FDD小区。
    Qrxlevmin 定义了当前小区基于CPICH RSCP的最小要求的接收电平（dBm）。
    UE_TXPWR_MAX_RACH 定义了手机在RACH上的最大允许发射功率（从系统消息中读取）（dBm）。
    Treselections 定义了相邻小区需满足重选准则的时长，然后才能用于小区重选的目的小区。
    小区选择和重选的质量测量可以选择用Ec/No或RSCP的值表示。
   .1.3.2 系统信息11（SIB11）中的相关参数
    相邻小区列表 手机将测量列表中的小区用于小区重选。
    Qoffset1n 定义了用于小区等级排列的当前小区与邻区间的偏置。小区选择与重选测量量设置为CPICH RSCP的FDD小区。
    Qoffset2n 定义了用于小区等级排列的当前小区与邻区间的偏置。用于小区选择与重选测量量设置为CPICH Ec/No的FDD小区。
    Qqualmin 定义了当前小区基于CPICH Ec/No的最小要求的质量门限（单位dB）。仅用于FDD小区。
    Qrxlevmin 定义了当前小区基于CPICH RSCP的最小要求的接收电平（dBm）。
   .1.3.3 小区等级排列准则
    当前服务小区等级（Ranks）
    基于RSCP的等级计算 Ranks=RSCP+ Qhyst1s
    基于Ec/No的等级计算 Ranks=Ec/No+ Qhyst2s
    相邻小区等级（Rankn）
    基于RSCP的等级计算
   –FDD小区的Rankn=RSCP- Qoffset1n
   –GSM小区的Rankn=RSSI- Qoffset1n
    基于Ec/No的等级计算
   –（仅用于FDD小区）Rankn=Ec/No- Qoffset2n
   –总是优先执行基于RSCP的等级排列。如果基于RSCP的等级排列产生的最好小区是FDD小区，这时过测量量设置为Ec/No那么将对这些FDD小区用基于Ec/No的算法重新进行等级排列。
    小区重选准则
   在相邻小区满足S（小区选择）准则的前提下，Rankn＞Ranks的时间满足Treselections所定义的时长。
   .2 WCDMA小区到WCDMA小区的重选
   .2.1 系统信息3
   value SysInfoType3 ::=
   sib4indicator FALSE,
   cellIdentity '01010010 00000110 00011110 0010’B,
   cellSelectReselectInfo
   mappingInfo
   cellSelectQualityMeasure cpich-Ec-N0 :
   q-HYST-2-S 1
   modeSpecificInfo fdd :
   s-Intrasearch 8,
   s-Intersearch 8,
   rat-List
   rat-Identifier gsm,
   s-SearchRAT 1,
   },
   q-QualMin -16,
   q-RxlevMin -58
   },
   q-Hyst-l-S 0,
   t-Reselection-S 2,
   maxAllowedUL-TX-Power 21
   },
   cellAccessRestriction
   {
   cellBarred notBarred : NULL,
   cellReservedForOperatorUse notReserved,
   cellReservationExtension notReserved,
   accessClassBarredList
   {
   .2.2 系统信息11
   value SysInfoType11 ::=
   sib12indicator TRUE,
   fach-MeasurementOccasionInfo
   fACH-meas-occasion-coeff 4,
   inter-freq-FDD-meas-ind TRUE,
   inter-freq-TDD-meas-ind FALSE,
   inter-RAT-meas-ind
   measurementControlSysInfo
   use-of-HCS hcs-not-used :
   cellSelectQualityMeasure cpich-Ec-N0 :
   intraFreqMeasurementSysInfo
   intraFreqCellInfoSI-List
   {
   removedIntraFreqCellList removeNoIntraFreqCells : NULL,
   newIntraFreqCellList
   cellInfo
   modeSpecificInfo fdd :
   {
   primaryCPICH-Info
   {
   primaryScramblingCode 381
   },
   readSFN-Indicator TRUE,
   tx-DiversityIndicator FALSE
   measurementReportingMode
   {
   measurementReportTransferMode acknowledgedModeRLC,
   periodicalOrEventTrigger eventTrigger
   },
   interFreqMeasurementSysInfo
   {
   interFreqCellInfoSI-List
   newInterFreqCellList
   frequencyInfo
   modeSpecificInfo fdd :
   uarfcn-DL 10563
   cellInfo
   modeSpecificInfo fdd :
   primaryCPICH-Info
   primaryScramblingCode 380
   primaryCPICH-TX-Power 28,
   readSFN-Indicator TRUE,
   tx-DiversityIndicator FALSE
   cellSelectionReselectionInfo
   q-Offset2S-N -2,
   modeSpecificInfo fdd :
   q-RxlevMin -58
   interRATMeasurementSysInfo
   v4b0NonCriticalExtensions
   {
   v590NonCriticalExtension
   {
   sysInfoType11-v590ext
   {
   newInterFrequencyCellInfoList-v590ext
   {
   {
   deltaQrxlevmin -2
   .2.3 W到W小区重选过程示例
   小区重选前，当前服务小区信息。
   Day 9 23:23:25.638 [0A] 0x4110 WCDMA Active Set
   Number of cells = 1
   Frequency(MHz) = 2112.6
   Cell[0]:
   Cell is reference cell = TRUE
   Scrambling code(primary) = 380
   Scrambling code (secondary) = 0
   Channelization (OVSF) code = 0
   TPC Combiner ID = 0
   CPICH diversity per cell = STTD
   SPICH present = NO
   Active Cell Position = 73914 (chipx8)
    小区重选评估开始
   Day 9 23:23:26.732 [78] 0x1FEB Extended Debug Message
   srchcr.c 11856 H CR Aset Eval:freq 10563 PSC 380 tot_eng 37566
    小区重选过程开始，先不检验S（小区选择）准则
   Day 9 23:23:26.733 [78] 0x1FEB Extended Debug Message
   srchcr.c 11931 H CR Start:2squal=13,srxlev=48,sintr_int=4,
    一个频内邻小区被发现
   Day 9 23:23:26.733 [78] 0x1FEB Extended Debug Message
   srchcr.c 11933 H CR srch due Intra 1 Inter 1 GSM 0
    服务小区的等级计算Ranks=RSCP+ Qhyst1s=-70
   Day 9 23:23:26.733 [78] 0x1FEB Extended Debug Message
   srchcr.c 19514 H CR RANK:(RSCP) rank_s -70,PSC 380,2rscp -142
    相邻小区的等级计算Rankn=RSCP- Qoffset1n=
   Day 9 23:23:26.882 [86] 0x1FEB Extended Debug Message
   srchcr.c 9122 H CR RANK:(RSCP) 2RSCP -138,PSC 381,qoff1 0
   Day 9 23:23:26.882 [86] 0x1FEB Extended Debug Message
   srchcr.c 9125 H CR RANK:(RSCP) rank_n -69,2sq_n 26,srxlv_n 38

 开始计算Rankn＞Ranks的时间是否满足Treselections所定义的时长
Day 9 23:23:26.887 [87] 0x1FEB Extended Debug Message
srchcr.c 3851 H CR:Start Tresel on PSC=381 t=0 Tresel=100 frms
Day 9 23:23:28.034 [FA] 0x1FEB Extended Debug Message
srchcr.c 10091 H CR EVAL nbr searching done
Day 9 23:23:28.035 [FA] 0x1FEB Extended Debug Message
srchcr.c 5525 H CR RANK:2rank_s -16,best W IF nbr 2rank -14,PSC 381
 小区重选指示
Day 9 23:23:28.035 [FA] 0x4005 WCDMA Search Cell Reselection Rank
WCDMA GSM
------------------------ ------------------------
Num cells searched = 4 Num cells searched = 0
Cell 1:
RF freq = 10563
PSC = 380
ECIO = -12.0
rank_ecio = -16
RSCP = -74
rank_rscp = -70
Cell 2:
RF freq = 10563
PSC = 332
ECIO = -13.0
rank_ecio = -26
RSCP = -74
rank_rscp = -74
Cell 3:
RF freq = 10563
PSC = 316
ECIO = -14.0
rank_ecio = -28
RSCP = -75
rank_rscp = -75
Cell 4:
RF freq = 10613
PSC = 381
ECIO = -5.0
rank_ecio = -14
RSCP = -67
rank_rscp = -67
Day 9 23:23:28.035 [FA] 0x1FEB Extended Debug Message
srchcr.c 14834 H CEL RESEL IND:Inter Freq Cell Fr 10613 psc 381
 L1通知RRC
Day 9 23:23:28.035 [FA] 0x1FEB Extended Debug Message
srchcr.c 14834 H CEL RESEL IND:Inter Freq Cell Fr 10613 psc 381
 RRC通知L1建立新的PCCPCH（N-PCCPCH）以读取新的系统信息
Day 9 23:23:28.037 [FA] 0x1FEB Extended Debug Message
rrcsibproc.c 7827 H RRC_GET_SPECIFIC_SIBS_REQ cmd received
Day 9 23:23:28.037 [FA] 0x1FEB Extended Debug Message
rrcsibproc.c 1271 H Setting up N-BCCH
Day 9 23:23:28.040 [FA] 0x1FEB Extended Debug Message
l1msetup.c 2301 H CPHY_SETUP_REQ: req_mask 0x14
Day 9 23:23:28.098 [00] 0x1FEB Extended Debug Message
l1msetup.c 2694 H Sending CPHY_SETUP_CNF cfn 0
 L1通知RRC物理信道建立
Day 9 23:23:28.098 [00] 0x1FEB Extended Debug Message
rrcllc.c 26620 H Rcv’d RRC_CPHY_SETUP_CNF from L1: 1
 RRC通知RLC（L2）透明传输模式（TM mode）的逻辑信道配置
Day 9 23:23:28.037 [FA] 0x1FEB Extended Debug Message
rrcsibproc.c 7827 H RRC_GET_SPECIFIC_SIBS_REQ cmd received
Day 9 23:23:28.098 [00] 0x1FEB Extended Debug Message
rrcllc.c 4238 H Sending CRLC_DL_TM_CONFIG_REQ
Day 9 23:23:28.098 [00] 0x1FEB Extended Debug Message
rrcllc.c 29828 H Rcv’d RRC_CRLC_DL_TM_CONFIG_CNF〈来自系统信息〉
 RRC收集新小区接入信息，并用S（小区选择）准则评估新小区
Day 9 23:23:28.681 [3A] 0x1FEB Extended Debug Message
rrccsputil.c 1578 H Cell Not Barred, Not reserved
Day 9 23:23:28.682 [3A] 0x1FEB Extended Debug Message
rrcdata.c 3475 H NAS MCC 505 MNC 6
Day 9 23:23:28.682 [3A] 0x1FEB Extended Debug Message
rrcdata.c 3478 H BCCH MCC 505 MNC 6
Day 9 23:23:28.682 [3A] 0x1FEB Extended Debug Message
rrcdata.c 3486 H NAS and BCCH MCC-MNC same
Day 9 23:23:28.682 [3A] 0x1FEB Extended Debug Message
rrccsp.c 3565 H Qualmin -18, Rxlevmin -107, MaxULTxPower 24
Day 9 23:23:28.682 [3A] 0x1FEB Extended Debug Message
l1mcmd.c 2145 H Inter Resel: Compute S criteria with qualmin=-18, rxlevmin=-107, max_tx_pwr=24
Day 9 23:23:28.682 [3A] 0x1FEB Extended Debug Message
srchbch.c 2256 H Inter target ngbr 2ecio=-9 2squal=27 srxlv=40
 从小区改变管理器（cell change manager）发送小区改变请求信息给新小区
Day 9 23:23:28.683 [3A] 0x1FEB Extended Debug Message
rrcllc.c 26247 H Rxed CELL_RESELECTION_REQ from CCM
 RRC从新的BCCH（N-BCCH）系统信息中读取SCCPCH信息
Day 9 23:23:28.686 [3A] 0x1FEB Extended Debug Message
rrcllcpcie.c 6310 H TFCS and FACH_PCH info present in sccpch
 为建立新的SCCPCH（N-SCCPCH）RRC将配置相关较低的协议层
Day 9 23:23:28.686 [3A] 0x1FEB Extended Debug Message
rrcllc.c 7932 H DROP NEIGHBOR BCCH
Day 9 23:23:28.687 [3A] 0x1FEB Extended Debug Message
rrcllc.c 4658 H Sending CMAC_DL_CONFIG_REQ
Day 9 23:23:28.724 [3F] 0x1FEB Extended Debug Message
l1msetup.c 5702 H Recd CPHY_CELL_TRANSITION_REQ
Day 9 23:23:28.724 [3F] 0x1FEB Extended Debug Message
l1msetup.c 6002 H Cell Resel Success: Inter freq Cell Fr 10613 psc 381
Day 9 23:23:28.730 [3F] 0x1FEB Extended Debug Message
l1msetup.c 5492 H Cell Camp update passed
Day 9 23:23:28.730 [3F] 0x1FEB Extended Debug Message
l1msetup.c 6365 H Cell Trans validation passed
Day 9 23:23:28.744 [41] 0x1FEB Extended Debug Message
srchfach.c 1384 H Cell transition in progress
Day 9 23:23:28.798 [46] 0x1FEB Extended Debug Message
l1msetup.c 5215 H Sending RRC_CPHY_CELL_TRANSITION_CNF
Day 9 23:23:28.799 [46] 0x1FEB Extended Debug Message
rrcllc.c 29915 H Sending RRC_CELL_RESELECTION_CNF (Success)to procedure 86
 CCM（cell change manager）发布新小区指示
Day 9 23:23:28.800 [46] 0x1FEB Extended Debug Message
rrcccm.c 2316 H Post NEW_CELL_IND 0, 0, 0
 L1接收DRX（不连续接收）、寻呼参数
Day 9 23:23:28.801 [46] 0x1FEB Extended Debug Message
wsrch.c 3334 H L1 received CPHY_CELL_PARM_REQ FMO-valid 1, K-valid 1
Day 9 23:23:28.809 [47] 0x1FEB Extended Debug Message
rrccsp.c 13874 H Camped on suitable cellID 13524522
Day 9 23:23:28.811 [47] 0x1FEB Extended Debug Message
rrccsp.c 13972 H Reselected to the new cell successfully
Day 9 23:23:28.812 [47] 0x1FEB Extended Debug Message
rrcllc.c 31557 H Rcv’d RRC_NEW_CELL_IND from CCM
Day 9 23:23:28.831 [49] 0x1FEB Extended Debug Message
rrcllc.c 28257 H Rcv’d CPHY_DRX_CNF from L1
 RRC向MM发送“已占用”服务指示
Day 9 23:23:28.831 [49] 0x1FEB Extended Debug Message
mmcoord.c 2411 H Revd RRC_SERVICE_IND w/ SRV-AC = 0
Day 9 23:23:28.831 [49] 0x1FEB Extended Debug Message
mmcoord.c 2460 H GMM sys info: NMO=1, RAC=1
这样小区重选过程完成。我们可以看到频点为10613、PSC为381的小区已经成为服务小区。
Day 9 23:23:28.730 [3F] 0x4110 WCDMA Active Set
Number of cells = 1
Frequency(MHz) = 2122.6
Cell[0]:
Cell is reference cell = TRUE
Scrambling code(primary) = 381
Scrambling code (secondary) = 0
Channelization (OVSF) code = 0
TPC Combiner ID = 0
CPICH diversity per cell = None
SPICH present = NO
Active Cell Position = 73907 (chipx8)
Day 9 23:23:30.739 [08] 0x4005 WCDMA Search Cell Reselection Rank
WCDMA GSM
------------------------ ------------------------
Num cells searched = 5 Num cells searched = 0
Cell 1:
RF freq = 10613
PSC = 381
ECIO = -4.5
rank_ecio = NotUsed
RSCP = -69
rank_rscp = -65
Cell 2:
RF freq = 10563
PSC = 380
ECIO = -11.0
rank_ecio = -18
RSCP = -74
rank_rscp = -74
.3 WCDMA小区到GSM小区的重选
.3.1 系统间小区重选介绍
.3.1.1 系统间测量的执行
 当Squal≤SsearchRATm时，执行在该小区的第“m”个RAT的系统间测量。
 如果SsearchRATm没有发送给当前服务小区，则总是执行第“m”个RAT的系统间测量。
 如果Squal≥SsearchRATm时，手机可以选择不执行第“m”个RAT的系统间测量。
 SsearchRATm在系统信息3中发送。
 在系统间的小区等级排列总是基于RSCP测量值的，即使测量量设置为Ec/No时。
 系统间小区等级的计算
Rankn= Qmeas,n – Qoffset,n
Qmeas,n 系统间小区的测得的以RSSI表示的质量值，在FDD小区是接收信号CPICH Ec/No 或CPICH RSC的平均值。
Qoffset,n 在每个系统间小区的系统信息11/12中发送，偏置 Qoffset1s,n被用作Qoffsets,n来计算Rn, Qhyst1s被用作Qhysts来计算Rs。
 如果系统间小区Rankn＞Ranks的时间满足Treselections所定义的时长，那么将触发系统间小区重选。
 如果最好的系统间小区的BSIC没有被验证，那么在触发系统间小区重选前要进行BSIC验证。
 如果该BSIC不属于相邻小区列表，将不触发系统间小区重选。
 如果该BSIC无法被验证，那么将尝试次好的系统间小区是否满足重选条件。
Idle,CELL_PCH,URA_PCH状态下的系统间测量
 在每个30秒的周期内至少要执行4个最强GSM小区的BSIC验证。
 验证出的BSIC如果不在相邻小区列表中，该小区将不被用于小区重选。
 如果手机不能检测到相邻小区的BCCH载波的BSIC，这个小区也不能用于小区重选。
 系统间小区测量的执行是在每一个TmeasureGSM DRX（不连续接收）周期进行。

 手机对每四个GSM相邻小区的BCCH的载波测量值进行一次平均。
.3.1.2 用于系统间小区重选的系统信息
 系统信息3
value SysInfoType3 ::=
sib4indicator FALSE,
cellIdentity '00000111 11100101 01101111 0010’B,
cellSelectReselectInfo
cellSelectQualityMeasure cpich-Ec-N0 :
modeSpecificInfo fdd :
s-SearchHCS -53,
rat-List
rat-Identifier gsm,
s-SearchRAT 3,
s-HCS-RAT 3,
s-Limit-SearchRAT 0
q-QualMin -18,
q-RxlevMin -58
q-Hyst-l-S 2,
t-Reselection-S 2,
maxAllowedUL-TX-Power 24
 系统信息11
value SysInfoType11 ::=
interRATCellInfoList
{
removedInterRATCellList removeAllInterRATCells : NULL,
newInterRATCellList
interRATCellID 0,
technologySpecificInfo gsm :
interRATCellIndividualOffset 0,
bsic
{
ncc 0,
bcc 7
},
frequency-band dcs1800BandUsed,
bcch-ARFCN 83
}
.3.2 W到G小区重选过程示例
 重选前手机占用的WCDMA小区信息
Day 10469 12:38:02.590 [67] 0x4005 WCDMA Search Cell Reselection Rank
WCDMA GSM
------------------------ ------------------------
Num cells searched = 1 Num cells searched = 0
Cell 1:
RF freq = 4436
PSC = 7
ECIO = -15.5
rank_ecio = NotUsed
RSCP = -112
rank_rscp = -108
 计算RSCP RSCP=Rx AGC+Ec/Io/2=-98-17.5=-115.5
Day 10469 12:38:03.219 [A6] 0x1FEB Extended Debug Message
wsrch.c 5105 H For UI:Ecio=35, AGC=-98, Filt_RSCP=227
 小区重选评估开始
Day 10469 12:38:03.220 [A6] 0x1FEB Extended Debug Message
srchcr.c 11394 H Inc num drx=171 last gsm srch=0 TmeasGSM=32 srchcr_gsm_bsic_verif_timer = 171
Day 10469 12:38:03.220 [A6] 0x1FEB Extended Debug Message
srchcr.c 11462 H CR Aset Eval:freq 4436 PSC 7 tot_eng 10120
Day 10469 12:38:03.221 [A6] 0x1FEB Extended Debug Message
srchcr.c 5817 H Reset Tresel gsm cells:2Squal=13 SsrchRAT=0
（注：2Squal=2*（Ec/Io-Qqualmin）=13
 TmeasGSM测量周期（每一个DRX周期的记录）
Day 10469 12:38:03.218 [A6] 0x1FEB Extended Debug Message
srchzz.c 1975 H <---- Reacq: eng(10120)pos(37112)psc(7)----->
Day 10469 12:38:03.220 [A6] 0x1FEB Extended Debug Message
srchcr.c 11394 H Inc num drx=171 last gsm srch=0 TmeasGSM=32 srchcr_gsm_bsic_verif_timer = 171
Day 10469 12:38:03.254 [AA] 0x1FEB Extended Debug Message
wsleep.c 2176 H [8899] enter go_to_sleep() 587 ms
。
。
Day 10469 12:38:03.859 [E6] 0x1FEB Extended Debug Message
srchzz.c 1975 H <---- Reacq: eng(1162)pos(36525)psc(7)----->
Day 10469 12:38:03.859 [E6] 0x1FEB Extended Debug Message
srchcr.c 12653 H Inc num drx=172 last gsm srch=0 TmeasGSM=32 srchcr_gsm_bsic_verif_timer = 172
Day 10469 12:38:04.105 [FF] 0x1FEB Extended Debug Message
wsleep.c 2176 H [13068] enter go_to_sleep() 377 ms
。
。
 BCCH载波测量
Day 10469 12:38:03.982 [F2] 0x1FEB Extended Debug Message
srchcr.c 9616 H Enable GSM clk and UL set mod timing
Day 10469 12:38:03.982 [F2] 0x1FEB Extended Debug Message
l1utils.c 724 H GSM clock enable by 2 bmsk 0 state 1
Day 10469 12:38:03.984 [F3] 0x1FEB Extended Debug Message
srchcr.c 9646 H CR:TmeasGSM xpired, sinterrat 0
Day 10469 12:38:03.984 [F3] 0x1FEB Extended Debug Message
srchcrgsm.c 2492 H GSM StartUp:fn=10 off=625 cur_gfn=5
Day 10469 12:38:03.984 [F3] 0x1FEB Extended Debug Message
srchcrgsm.c 2597 H GSM Monitors:fn=10,bursts=6
Day 10469 12:38:03.984 [F3] 0x1FEB Extended Debug Message
srchcrgsm.c 2597 H GSM Monitors:fn=11,bursts=3
Day 10469 12:38:03.984 [F3] 0x1FEB Extended Debug Message
srchcrgsm.c 2615 H GSM Cleanup cmd:fn=12,off=1168
Day 10469 12:38:04.025 [F7] 0x1FEB Extended Debug Message
srchcr.c 9990 H GSM PScan: idx=0 burst=0 rssi/16=-113
Day 10469 12:38:04.025 [F7] 0x1FEB Extended Debug Message
srchcr.c 9989 H CR Res for ARFCN 18:
Day 10469 12:38:04.025 [F7] 0x1FEB Extended Debug Message
srchcr.c 9990 H GSM PScan: idx=0 burst=1 rssi/16=-113
Day 10469 12:38:04.025 [F7] 0x1FEB Extended Debug Message
srchcr.c 9989 H CR Res for ARFCN 16:
。
。
 载波测量结果
Day 10469 12:38:04.026 [F7] 0x1FEB Extended Debug Message
srchcr.c 9863 H Sorting GSM nset 9 cells
 开始执行系统间小区重选
Day 10469 12:38:04.026 [F7] 0x1FEB Extended Debug Message
srchcr.c 10160 H GSM rank -91, s_rxlev_n 31 arfcn 16
Day 10469 12:38:04.026 [F7] 0x1FEB Extended Debug Message
srchcr.c 10208 H CR:Start Tresel on ARFCN 16 t=0 Tresel=200 frms
Day 10469 12:38:04.026 [F7] 0x1FEB Extended Debug Message
srchcr.c 10160 H GSM rank -118, s_rxlev_n 4 arfcn 8
Day 10469 12:38:04.026 [F7] 0x1FEB Extended Debug Message
srchcr.c 10241 H CR:Reset Tresel on ARFCN 8
。
Day 10469 12:38:04.027 [F7] 0x1FEB Extended Debug Message
srchcr.c 9785 H CR EVAL nbr searching done
 计算当前服务小区的Ranks
Day 10469 12:38:04.027 [F7] 0x1FEB Extended Debug Message
srchcr.c 5239 H 2ECIO_s -63 RXAGC -100
Day 10469 12:38:04.027 [F7] 0x1FEB Extended Debug Message
srchcr.c 5241 H CR RANK:2rank_s -32768,best GSM nbr -91,ARFCN 16
 BSIC验证
Day 10469 12:38:04.027 [F7] 0x4005 WCDMA Search Cell Reselection Rank
WCDMA GSM
------------------------ ------------------------
Num cells searched = 1 Num cells searched = 4
Cell 1: Cell 1:
RF freq = 4436 ARFCN = 16
PSC = 7 BSIC<ncc,bcc> = <0,0>
ECIO = -31.5 RSSI = -84
rank_ecio = NotUsed rank = -91
RSCP = -121 Band = 0 (900/1800)
rank_rscp = -32768
Cell 2:
ARFCN = 8
BSIC<ncc,bcc> = <0,0>
RSSI = -111
rank = -118
Band = 0 (900/1800)
Cell 3:
ARFCN = 534
BSIC<ncc,bcc> = <0,0>
RSSI = -111
rank = -118
Band = 0 (900/1800)
Cell 4:
ARFCN = 523
BSIC<ncc,bcc> = <0,0>
RSSI = -112
rank = -119
Band = 0 (900/1800)
Day 10469 12:38:04.027 [F7] 0x1FEB Extended Debug Message
srchcr.c 14383 H Best GSM cell ARFCN 16, BSIC valid 0 BSIC verified 0
Day 10469 12:38:04.027 [F7] 0x1FEB Extended Debug Message
srchcrgsm.c 2199 H GSM StartUp:cmd_fn=19 off=625 cur_gfn=14
Day 10469 12:38:04.027 [F7] 0x1FEB Extended Debug Message
srchcrgsm.c 2237 H GSM StartAq:ARFCN=16 <bcc,ncc><0,0>
Day 10469 12:38:04.027 [F7] 0x1FEB Extended Debug Message
srchcrgsm.c 2241 H GSM StartAq:cmd_fn=19 off=1875 rssi=-84, freq offset=0
 L1向RRC发送系统间小区重选指示
Day 10469 12:38:04.104 [FF] 0x1FEB Extended Debug Message
srchcr.c 17335 H Cel Resel Ind:GSM BSIC <ncc,bcc>=<0,0> ARFCN 16
 RRC暂停WCDMA模式并通知GSM 的RR层
Day 10469 12:38:04.106 [FF] 0x1FEB Extended Debug Message
rrcmcm.c 1231 H CPHY_SUSPEND_WCDMA_MODE_REQ sent to L1
Day 10469 12:38:04.158 [04] 0x1FEB Extended Debug Message
rrcllc.c 28417 H Rcv’d RRC_CPHY_SUSPEND_WCDMA_MODE_CNF from L1
Day 10469 12:38:04.158 [04] 0x1FEB Extended Debug Message
rrccsp.c 18699 H RR_INTERRAT_RESELECT_REQ sent to GSM RR
 启动GSM模式
Day 10469 12:38:04.159 [04] 0x1FEB Extended Debug Message
rr_gprs_debug.c 206 H OMsg: MPH_START_GSM_MODE_REQ sent to L1
Day 10469 12:38:04.182 [06] 0x1FEB Extended Debug Message
rr_gprs_debug.c 148 H IMsg: MPH_START_GSM_MODE_CNF in state W2G_INTERRAT_RESELECTION_PROG(New)
 RR层将验证该小区是否满足S（小区选择）准则，进一步读取系统信息后发起位置更新请求
Day 10469 12:38:04.182 [06] 0x1FEB Extended Debug Message
rr_w2g_reselection.c 534 H Attempting to camp on 16
Day 10469 12:38:04.183 [06] 0x1FEB Extended Debug Message
rr_w2g_reselection.c 361 M W2GReselSt(W2GRGoingActive,W2GRWaitSpecificChan)
Day 10469 12:38:04.206 [09] 0x5075 GSM L1 Neighbor Cell Acquisition
Mode: START
Rank: 0
ARFCN: 16
Rx PWR: -85.31 (dBm)
Band: 8 (GSM 900)
Day 10469 12:38:04.238 [0C] 0x1FEB Extended Debug Message
rr_w2g_reselection.c 636 H Cell(16): found, wait for SI
Day 10469 12:38:05.289 [75] 0x1FEB Extended Debug Message
rr_w2g_reselection.c 223 H Cell(16): C1 = 168
Day 10469 12:38:05.289 [75] 0x1FEB Extended Debug Message
rr_w2g_reselection.c 752 H Cell(16): Suitable cell acquired
Day 10469 12:38:05.308 [75] 0x1FEB Extended Debug Message
rr_w2g_reselection.c 797 H Cell(16): Camping on cell
Day 10469 12:38:05.999 [75] 0x1FEB Extended Debug Message
rr_mm_send.c 782 H Checking for LAI change and pending RR_EST_REQ
Day 10469 12:38:06.001 [75] 0x1FEB Extended Debug Message
mmlu.c 474 H Serving LAI PLMN 5 F5 10
Day 10469 12:38:06.001 [75] 0x1FEB Extended Debug Message
mmlu.c 477 H Serving LAC 0 65
Day 10469 12:38:06.001 [75] 0x1FEB Extended Debug Message
mmlu.c 653 H LAI has changed
Day 10469 12:38:06.003 [75] 0x1FEB Extended Debug Message
mmconn.c 697 H MM sent LOCATION UPDATE REQUEST
Day 10469 12:38:06.003 [75] 0x1FEB Extended Debug Message
mmconn.c 760 H MM sent RR_EST_REQ
Day 10469 12:38:06.714 [75] 0x1FEB Extended Debug Message
mmconn.c 1799 H MM received RR_EST_CNF
Day 10469 12:38:06.714 [75] 0x1FEB Extended Debug Message
mmstate.c 536 H MM State change from 13 to 3
位置更新完成后，手机就完成了从WCDMA小区到GSM小区的重选过程。
Day 10469 12:38:07.106 [75] 0x513A GSM RR SACCH Measurement Report
Serving BCCH ARFCN = 16 (Band = GSM 900)
RxLev Full Average = GSM RXLEV 26 (-85 dBm to -84 dBm)
RxLev Sub Average = GSM RXLEV 26 (-85 dBm to -84 dBm)
RxQual Full Average = 7
RxQual Sub Average = 7
Number of Entries = 1
Entry:[1]
BCCH ARFCN = 16 (Band = GSM 900)
RxLev Average = GSM RXLEV 25 (-86 dBm to -85 dBm)
BSIC = <0,0>
CELL_FACH状态下的系统间测量
1、 只有当网络在SIB11/12里配置了FACH Measurement Occasion（FMO）且分配了C_RNTI；
2、 FMO时隙通常为FDD帧（10/20/40/80ms）的整数倍，等于在DL SCCPCH上配置的TTI的最大值；
3、 FMO用于频间测量及系统间测量；
4、 当网络配置了FMO才会进行系统间小区测量且邻小区列表存在系统间小区；
5、 FMO重复率取决于k值和最大TTI

6、 在测量周期内每个GSM载频UE至少要测量3个RSSI

value SysInfoType5 ::=
{
sib6indicator TRUE,
pich-PowerOffset -5,
modeSpecificInfo fdd :
:
sCCPCH-SystemInformationList
{
fach-PCH-InformationList
{
{
transportFormatSet commonTransChTFS :
{
tti tti10 :
:
}
}}
}
:
}
value SysInfoType11 ::=
{
sib12indicator TRUE,
fach-MeasurementOccasionInfo
{
fACH-meas-occasion-coeff 3,
:
}

// Initializing FMO paramters from SIBs
12:43:12.367 srchmeas.c 3583 H Inter-RAT Add (2) Cells
12:43:12.368 srchmeas.c 3634 H [CellId=1] <20,0x0105> Add Cell
12:43:12.368 srchmeas.c 3634 H [CellId=2] <40,0x0105> Add Cell
12:43:12.365 srchfach.c 2651 H FACH meas oksn info present, k=3
12:43:12.368 srchfach.c 2405 H Initializing state for FACH interf meas
12:43:12.375 rrcllcoc.c 14091 H Valid C-RNTI in CC. c-rnti: 1
// Allocating FMO
12:43:12.375 srchfach.c 3236 H FACH meas oksn: first oksn 577, curr_sfn 573, t_meas_rep 8
12:43:12.375 srchfach.c 3239 H FACH meas oksn: Ntti 1, M_REP 8, C_RNTI 1
12:43:12.385 srchfach.c 4075 H FACH meas oksn SW due at 574 for GSM to meas at 57
// FMO for Carier RSSI measurementsr
12:43:12.385 srchcrgsm.c 3441 H FACH GSM meas proceed with RSSI
12:43:12.385 srchcrgsm.c 4844 H next oksn SFN 577, GFN 49 off_qs 3981
12:43:12.386 srchcrgsm.c 3513 H GSM StartUpCmd:fn=48, off=3981, curr_gfn 44
12:43:12.386 srchcrgsm.c 3250 H FACH GSM RSSI burst offset 4583, arfcn 20, last_val/16 -70
12:43:12.386 srchcrgsm.c 3250 H FACH GSM RSSI burst offset 5179, arfcn 40, last_val/16 -70
12:43:12.386 srchcrgsm.c 3211 H FACH GSM RSSI:fn=48,bursts=2
12:43:12.386 srchcrgsm.c 3250 H FACH GSM RSSI burst offset 775, arfcn 20, last_val/16 -70
12:43:12.386 srchcrgsm.c 3250 H FACH GSM RSSI burst offset 1371, arfcn 40, last_val/16 -70
12:43:12.386 srchcrgsm.c 3250 H FACH GSM RSSI burst offset 1967, arfcn 20, last_val/16 -70
12:43:12.386 srchcrgsm.c 3250 H FACH GSM RSSI burst offset 2563, arfcn 40, last_val/16 -70
12:43:12.386 srchcrgsm.c 3358 H FACH GSM RSSI:fn=49,bursts=4
12:43:12.386 srchcrgsm.c 3538 H FACH GSM Cleanup cmd:fn=50,off=3982
12:43:12.386 srchcrgsm.c 3549 H FACH GSM RSSI at sfn 577 with 2 cmds 7

//FMO for GSM Carrier BSIC verification
12:43:12.465srchfach.c4075HFACH meas oksn SW due at 582 for GSM to meas at 585
12:43:12.465srchcrgsm.c4174HFACH GSM meas proceed with BSIC Id
12:43:12.466srchcrgsm.c618HCM Startup ending at: gfn 16, offset 1402
12:43:12.466srchcrgsm.c4433HGSM StartUpCmd: fn=15, off=649, msg_gfn 11
12:43:12.46srchcrgsm.c4437HFACH GSM StartToneDetCmd:fn=15, off=1402 rssi=-74, freq offset=06
12:43:12.466srchcrgsm.c4443HFACH GSM StartToneDetCmd:ARFCN=20 acq_width_qs=9248 curr_gfn=11
12:43:12.466srchcrgsm.c4456HFACH GSM StopToneDetCmd: fr=17, off=650
12:43:12.466srchcrgsm.c4461HFACH GSM CmCleanCmd: fr=17, off=650 res_poll fn=17
12:43:12.492srchcrgsm.c1225HFACH GSM toneDet poll 0 at fn=17 SNR 1024
12:43:12.497srchcrgsm.c1225HFACH GSM toneDet poll 1 at fn=18 SNR 25404
12:43:12.497srchcrgsm.c1320HGSM Res:BSIC ID tone bcc(5)ncc(1) ARFCN 20
//FMO for BSIC Conf
12:43:12.545srchfach.c4075HFACH meas oksn SW due at 590 for GSM to meas at 593
12:43:12.746srchcrgsm.c3631HFACH GSM BSIC ID SCH result poll at fn=21
12:43:12.746srchcrgsm.c3683HGSM Res:BSIC ID done bcc(5)ncc(1) ARFCN 20
12:43:12.746srchcrgsm.c3694Hqs_off=3686, Corrected delta=13
12:43:12.746srchcrgsm.c3703Hnbr 51fn 31 gfn 34 cur_gfn 21
12:43:12.746srchcrgsm.c3722HFACH_GSM_MEAS:SCH pos 3686 Terror 24
12:43:12.747srchfach.c4431HMove GSM cell ARFCN 20 from BSIC ID to RECF
12:43:12.747srchfach.c4465HAdd GSM cell ARFCN 20 to srched list, rssi/16 -74, rank -74

// FMO …contd…
12:43:12.785srchfach.c4075HFACH meas oksn SW due at 614 for GSM to meas at 617
12:43:12.820srchcr.c18348HCR RANK:(RSCP) rank_s -57,PSC 100,2rscp -118
12:43:12.821srchcr.c17744HFACH GSM rank -75, s_rxlev_n 4 arfcn 20
12:43:12.821srchcr.c11264HCR Aset Eval:freq 10700 PSC 100 tot_eng 386448
12:43:12.821srchcr.c11340HCR Start:2squal=45,srxlev=20,sintr_int=16,
12:43:12.821srchcr.c1342HCR srch due Intra 1 Inter 0 GSM 01
12:43:12.821srchcr.c18050HFACH GSM srched cell 1 kept, ARFCN 20, rank -75
//example of a W2G Cell Reselection
12:43:16.945srchfach.c4075HFACH meas oksn SW due at 1030 for GSM to meas at 1033
12:43:17.063l1mcmd.c1259HRecd CPHY_CELL_BAR_REQ
12:43:17.064srchcr.c16433HCELL_BAR: T-Bar timer started for 80000 ms
12:43:17.064srchcr.c16658HServing Cell BARRED. Immediate reselection triggered
12:43:17.064srchcr.c1563Hintra-f cell barred3
12:43:17.064srchcr.c5160HCR RANK:2rank_s -32768,best GSM nbr -74,ARFCN 20
// WL1 →RRC
12:43:17.143srchcr.c14218HCEL RESEL IND:GSM BSIC ncc1 bcc 5 ARFCN 20
//RRC →L1
12:43:17.14rrcmcm.c182HCPHY_SUSPEND_WCDMA_MODE_REQ sent to L14 1
12:43:17.163rrcllc.c27456HRcv’d RRC_CPHY_SUSPEND_WCDMA_MODE_CNF from L1
//RRC →RR
12:43:17.164rrccsp.c17695HRR_INTERRAT_RESELECT_REQ sent to GSM RR
12:43:17.164rr_gprs_debug.c206HOMsg: MPH_START_GSM_MODE_REQ sent to L1
12:43:17.198rr_gprs_debug.c148HIMsg: MPH_START_GSM_MODE_CNF in state
W2G_INTERRAT_RESELECTION_PROG(New)
12:43:19.018gmmreg.c6320HServing RAI changed
12:43:19.023gmmmsg.c1954HSending RAU REQUEST message
12:43:19.026gmacnull.c3502MMAC Rcvd RM_UL_EST_TBF_REQ
.4 GSM小区到WCDMA小区的重选
.4.1 GSM到WCDMA小区重选的相关概念与准则
在一个好的、静态的信道状态，手机有N30（N是指定的UTRAN的绝对频点号的个数）秒的时间来鉴别、选择一个新的更好的、合适的UTRAN小区。一个支持多RAT的手机可以监测64个UTRAN小区。对于FDD小区可以同时监测属于3个不同频点下的小区，每个频点下最多可以有32个小区。
手机在GSM状态下如果测得UTRAN小区的RSCP连续超过当前服务小区和其它GSM相邻小区的FDD_Qoffset值5秒，并且该UTRAN小区Ec/No的值大于等于FDD_Qmin那么手机将触发RAT间小区重选。
小区重选可以发生在空闲模式和包交换（Packet Transfer Mode）模式。相邻的WCDMA小区的的描述在系统信息2quater（SI2 quarter）中。
GSM到WCDMA小区重选准则：
 GSM服务小区覆盖功率小于Qsearch_I
Qsearch_I的取值范围从0到15
（0=-98dBm,1=-94dBm,6=-74dBm,7=always,…14=-54dBm,15=never）
 WCDMA小区的CPICH的Ec/Io必须大于FDD_Qmin
FDD_Qmin的取值范围从0到7
(0=-20dB,1=-6dB,2=-18dB,3=-8dB,4=-16dB,5=-10dB,6=-14dB
7=-12dB）
 WCDMA小区的CPICH的RSCP连续超过当前服务小区和其它GSM相邻小区的RSSI’值5秒
RSSI’=RSSI+FDD_Qoffset
FDD_Qoffset的取值范围从0到15
（1=-28dB,2=-24dB,…15=28dB,0=always）
用于GSM到WCDMA小区重选的系统信息2quater
SYSTEM_INFORMATION_2QUATER
si_2quater_rest
BA_IND = 0 (0x0)
3G_BA_IND = 0 (0x0)
MP_CHANGE_MARK = 0 (0x0)
SI2quater_INDEX = 0 (0x0)
SI2quater_COUNT = 3 (0x3)
measurement_parameters_description_present = 1 (0x1)
Measurement_Parameters Description
REPORT_TYPE = 1 (0x1)
SERVING_BAND_REPORTING = 0 (0x0)
gprs_real_time_difference_description_present = 0 (0x0)
gprs_bsic_description_present = 1 (0x1)
GPRS_BSIC Description
ba_index_start_bsic_present = 0 (0x0)
BSIC = 23 (0x17)
Number_Remaining_BSIC = 8 (0x8)
struct0[0]
Frequency_Scrolling = 1 (0x1)
BSIC = 16 (0x10)
struct0[1]
Frequency_Scrolling = 1 (0x1)
BSIC = 16 (0x10)
struct0[2]
Frequency_Scrolling = 1 (0x1)
BSIC = 17 (0x11)
struct0[3]
Frequency_Scrolling = 1 (0x1)
BSIC = 19 (0x13)
struct0[4]
Frequency_Scrolling = 1 (0x1)
BSIC = 17 (0x11)
struct0[5]
Frequency_Scrolling = 1 (0x1)
BSIC = 21 (0x15)
struct0[6]
Frequency_Scrolling = 1 (0x1)
BSIC = 19 (0x13)
struct0[7]
Frequency_Scrolling = 1 (0x1)
BSIC = 22 (0x16)
gprs_report_priority_description_present = 0 (0x0)
gprs_measurement_parameters_description_present = 1 (0x1)
GPRS_MEASUREMENT_Parameters Description
REPORT_TYPE = 1 (0x1)
REPORTING_RATE = 0 (0x0)
INVALID_BSIC_REPORTING = 0 (0x0)
multiband_reporting_present = 1 (0x1)
MULTIBAND_REPORTING = 2 (0x2)
serving_band_reporting_present = 0 (0x0)
SCALE_ORD = 0 (0x0)
_900_reporting_offset_present = 0 (0x0)
_1800_reporting_offset_present = 0 (0x0)
_400_reporting_offset_present = 0 (0x0)
_1900_reporting_offset_present = 0 (0x0)
850_reporting_offset_present = 0 (0x0)
nc_measurement_parameters_present = 1 (0x1)
NC Measurement Parameters
NETWORK_CONTROL_ORDER = 0 (0x0)
nc_non_drx_period_present = 1 (0x1)
NC NON_DRX_PERIOD = 2 (0x2)
NC_REPORTING_PERIOD_I = 7 (0x7)
NC_REPORTING_PERIOD_T = 3 (0x3)
extension_length_present = 0 (0x0)
_3g_neighbour_cell_description_present = 0 (0x0)
_3g_measurement_parameters_description_present = 1 (0x1)
3G Measurement Parameters Description
Qsearch_I = 7 (0x7)
Qsearch_C_Initial = 0 (0x0)
fdd_qoffset_present = 1 (0x1)
FDD_Qoffset = 2 (0x2)
FDD_REP_QUANT = 1 (0x1)
FDD_MULTIRAT_REPORTING = 3 (0x3)
FDD_Qmin = 1 (0x1)
tdd_qoffset_present = 0 (0x0)
gprs_3g_measurement_parameters_description_present = 1 (0x1)
GPRS_3G_MEASUREMENT Parameters Description
Qsearch_P = 15 (0xf)
3G_SEARCH_PRIO = 1 (0x1)
fdd_rep_quant_present = 1 (0x1)
FDD_REP_QUANT = 0 (0x0)
FDD_MULTIRAT_REPORTING = 0 (0x0)
fdd_reporting_offset_present = 1 (0x1)
FDD_REPORTING_OFFSET = 0 (0x0)
FDD_REPORTING_THRESHOLD = 0 (0x0)
tdd_multirat_reporting_present = 0 (0x0)
tdd_reporting_offset_present = 0 (0x0)
padding_bits_H = 1 (H)
_3g_additional_measurement_parameters_description_present = 0 (0x0)
_3g_additional_measurement_parameters_description_2_present = 0 (0x0)
padding_bits_L = 0 (L)
spare_padding0_count = 1 (0x1)
spare_padding0 = 0 (L)
.4.2 GSM到WCDMA小区重选过程示例
小区重选前GSM服务小区
Day 26 00:50:50.376 [ED] 0x51FC GSM RR Cell Reselection Measmnts
Serving Cell
BCCH ARFCN : 10 (Band Class = GSM 900)
PBCCH ARFCN : 0
Priority Class : 0
RXLEV Average : 30 (-80.5 dBm)
C1 Value : 28
C2 Value : 28
C31 Value : 0
C32 Value : 0
5 Sec Timer State : Stopped
Barred for reselection? : No
Cell reselectn in last 15 sec’s? : No
Number of Neighbor Cells : 0
 RR层读取系统信息2quater并发送给L1（层一）
Day 26 00:50:59.843 [ED] 0x1FEB Extended Debug Message
rr_gprs_debug.c 2328 M IMsg: SI2quater in state GRR(New)
Day 26 00:50:59.844 [ED] 0x1FEB Extended Debug Message
rr_decode_ie.c 5762 H Received all instances of SI2quater
Day 26 00:50:59.844 [ED] 0x1FEB Extended Debug Message
rr_sys_info_3g.c 180 M [0]: UARFCN 10638, Scrambling Code: 256
Day 26 00:50:59.844 [ED] 0x1FEB Extended Debug Message
rr_sys_info_3g.c 180 M [1]: UARFCN 10638, Scrambling Code: 480
Day 26 00:50:59.844 [ED] 0x1FEB Extended Debug Message
rr_sys_info_3g.c 180 M [2]: UARFCN 10638, Scrambling Code: 1024
。
。
Day 26 00:50:59.845 [ED] 0x1FEB Extended Debug Message
rr_sys_info.c 2186 H All SI2quater instances received
Day 26 00:51:00.312 [ED] 0x1FEB Extended Debug Message
rr_l1_send.c 1236 H Adding cell on supported UARFCN to L1 3G nlist: 10638, 256
Day 26 00:51:00.312 [ED] 0x1FEB Extended Debug Message
rrccsputil.c 3352 H band_class is 4
Day 26 00:51:00.312 [ED] 0x1FEB Extended Debug Message
rrccsputil.c 3381 H band_class 4 is supported
Day 26 00:51:00.312 [ED] 0x1FEB Extended Debug Message
rr_l1_send.c 1236 H Adding cell on supported UARFCN to L1 3G nlist: 10638, 480
Day 26 00:51:00.312 [ED] 0x1FEB Extended Debug Message
rrccsputil.c 3352 H band_class is 4
Day 26 00:51:00.312 [ED] 0x1FEB Extended Debug Message
rrccsputil.c 3381 H band_class 4 is supported
Day 26 00:51:00.312 [ED] 0x1FEB Extended Debug Message
rr_l1_send.c 1236 H Adding cell on supported UARFCN to L1 3G nlist: 10638, 1024
。
。
Day 26 00:51:00.313 [ED] 0x1FEB Extended Debug Message
rr_gprs_debug.c2391 H OMsg: MPH_WCDMA_CELL_UPDATE_LIST_REQ sent to L1
 L1（层一）开始cell ID的搜索
Day 26 00:51:10.785 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 3795 H WCDMA id on UARFCN:10638 unscheduled
Day 26 00:51:10.803 [01] 0x1FEB Extended Debug Message
gl1_msg_wcdma_meas.c 535 H Cell ID search started on UARFCN 10638
Day 26 00:51:10.804 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 3348 M --------------10---------------------
Day 26 00:51:10.804 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 3349 M In gl1_wcdmadrv_program_id_search()
Day 26 00:51:10.804 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 3350 M -----------------------------------------
Day 26 00:51:10.804 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 3354 M freq 10638 num_cells 0
Day 26 00:51:10.840 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 2179 M Num step1 peaks 6
Day 26 00:51:10.872 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 2327 M Num step2 peaks 6 opti 0
Day 26 00:51:10.883 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 2653 H Num step3 peaks 1 RSSI -82
Day 26 00:51:10.883 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 2659 H scr 5168,pn 33966,Eng 191188
Day 26 00:51:10.883 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 741 H WCDMA RSSI -82 dBm
Day 26 00:51:10.887 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 693 H 1 PILOTS ID’d on UARFCN 10638
ay 26 00:51:11.994 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 1410 H 1) SCR_CODE: 5168 ENG: -4 dB
Day 26 00:51:11.994 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 2696 H STRONGEST WCDMA CELLS
Day 26 00:51:11.994 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 2697 H --------------------------
Day 26 00:51:11.994 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 2713 H UARFCN: 10638 SCR_CODE: 5168 RSCP: -85 dBm
 RR从L1得到cell ID信息
Day 26 00:51:11.995 [01] 0x1FEB Extended Debug Message
rr_g2w.c 1175 M Received 1 surrounding wcdma measurements
Day 26 00:51:11.995 [01] 0x1FEB Extended Debug Message
rr_g2w.c 1276 M Wcdma Cell(10638) (5168): Adding cell to wcdma DB
 L1开始小区重选过程
Day 26 00:51:16.690 [01] 0x1FEB Extended Debug Message
gl1_msg_wcdma_meas.c 616 H Cell reconf started on UARFCN 10638
Day 26 00:51:16.690 [01] 0x1FEB Extended Debug Message
gl1_msg_wcdma_meas.c 1522 H Enabling WCDMA RX front end …
Day 26 00:51:16.690 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 2032 M List search count 1
Day 26 00:51:16.698 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 2877 H Reconf search: RSSI -78
Day 26 00:51:16.699 [01] 0x1FEB Extended Debug Message
g2wsrchdrv.c 2881 H SCR_CODE 5168 POS 33862 ENG 78944
Day 26 00:51:16.703 [01] 0x1FEB Extended Debug Message
gl1_msg_wcdma_meas.c 1468 H Disabling RX front end …
Day 26 00:51:16.703 [01] 0x1FEB Extended Debug Message
l1_cnf1.c 145 M GSM Serving Cell Measure: avg=-78, now=-79, bad_snr=0
Day 26 00:51:16.703 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 1395 H 1 PILOTS RECONF’D on UARFCN 10638
Day 26 00:51:16.703 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 1397 H -----------------------------------
Day 26 00:51:16.703 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 1410 H 1) SCR_CODE: 5168 ENG: -5 dB
Day 26 00:51:16.703 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 2696 H STRONGEST WCDMA CELLS
Day 26 00:51:16.703 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 2697 H --------------------------
Day 26 00:51:16.703 [01] 0x1FEB Extended Debug Message
l1_sc_wcdma.c 2713 H UARFCN: 10638 SCR_CODE: 5168 RSCP: -84 dBm
Day 26 00:51:16.708 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4403 M Cell: 0, RSCP: -84, Ec/No: -5
Day 26 00:51:16.708 [01] 0x1FEB Extended Debug Message
rrccsputil.c 17072 H Informing RR: freq 10638, scr_code 5168 NOT barred
Day 26 00:51:16.708 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4350H Ec/No: -5, FDD Qmin (dB): -6, cell meets criterion
Day 26 00:51:16.708 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4965 H WCDMA cell RSCP:-84, FDD_RSCP_threshold: -103
Day 26 00:51:16.708 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4471 H WCDMA Cell (10638,5168) is better
Day 26 00:51:17.000 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4484 H And has been for 5 seconds
 RR层基于FDD_Qoffset和FDD_Qmin计算是否满足重选准则
Day 26 00:51:17.000 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4403 M Cell: 0, RSCP: -84, Ec/No: -5
Day 26 00:51:17.000 [01] 0x1FEB Extended Debug Message
rrccsputil.c 17072 H Informing RR: freq 10638, scr_code 5168 NOT barred
Day 26 00:51:17.000 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4832 H WCDMA cell RSCP:-84, SCell RxLev: -102, ignore_scell: 0
Day 26 00:51:17.000 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4345 M FDD_Qmin_offset: 0
Day 26 00:51:17.000 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4350 H Ec/No: -5, FDD Qmin (dB): -6, cell meets criterion
Day 26 00:51:17.000 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4471 H WCDMA Cell (10638,5168) is better
 RR层开始5秒的计时
Day 26 00:51:11.999 [01] 0x1FEB Extended Debug Message
rr_g2w.c 619 H Start wcdma 5sec timer=64 for cell(10638, 5168)
Day 26 00:51:15.763 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4471 H WCDMA Cell (10638,5168) is better
Day 26 00:51:16.708 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4471 H WCDMA Cell (10638,5168) is better
Day 26 00:51:17.000 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4471 H WCDMA Cell (10638,5168) is better
Day 26 00:51:17.000 [01] 0x1FEB Extended Debug Message
rr_gprs_debug.c2306H Timer RR_G2WR_FIVE_SEC_TIMER_1 expired in state GRR
Day 26 00:51:17.000 [01] 0x1FEB Extended Debug Message
rr_g2w.c 568 H WCDMA cell(10638,5168): five second timer expired
Day 26 00:51:17.000 [01] 0x1FEB Extended Debug Message
rr_gprs_reselection_calculations.c 4484 H And has been for 5 seconds
 RR层发送小区重选指示给下层
Day 26 00:51:17.001 [01] 0x1FEB Extended Debug Message
rr_gprs_debug.c 2391 H OMsg: GRR_MAC_CELL_RESEL_IND sent to MAC
Day 26 00:51:17.001 [01] 0x1FEB Extended Debug Message
gmacnull.c 2329 M GMAC Rcvd GRR_MAC_CELL_RESEL_IND 0
Day 26 00:51:17.003 [01] 0x1FEB Extended Debug Message
rr_gprs_debug.c 2391 H OMsg: MPH_STOP_GSM_MODE_REQ sent to L1
Day 26 00:51:17.003 [01] 0x1FEB Extended Debug Message
l1_null_if.c 1490 M Deactivating GL1 for RAT Change.
Day 26 00:51:17.017 [01] 0x1FEB Extended Debug Message
rr_gprs_debug.c 2335 H IMsg: MPH_STOP_GSM_MODE_CNF in state GRR(New)
Day 26 00:51:17.017 [01] 0x1FEB Extended Debug Message
rr_gprs_debug.c 2391 H OMsg: RRC_INTERRAT_RESELECTION_REQ sent to RRC
Day 26 00:51:17.017 [01] 0x1FEB Extended Debug Message
rrcmcm.c 2499 H Rvd RRC_INTERRAT_RESELECTION_REQ from RR
Day 26 00:51:17.022 [01] 0x1FEB Extended Debug Message
rrcmcm.c 1159 H CPHY_START_WCDMA_MODE_REQ sent to L1
小区重选后，当前小区：
Day 26 00:51:17.835 [09] 0x401C WCDMA List Search Ver5
Antenna ID = 0 (primary)
Rx AGC Power = -78.00 dBm
Number of Specified Tasks = 1
Task[0]:
Num Coh = 1024, Num NonCoh = 2, Position(Cx8) = 33099
Code Index = 5168 (PSC: 323), Cell Set = 0 = ASet, Chan Code = 0
Number of Finished Tasks = 1
Task[0]:
Code Index = 5168 (PSC: 323)
Peak[ 0]: Position(Cx8) = 33867, Ec/Io = -7.183
Peak[ 1]: Position(Cx8) = 33859, Ec/Io = -7.541
Peak[ 2]: Position(Cx8) = 33879, Ec/Io = -17.457
Peak[ 3]: Position(Cx8) = 33847, Ec/Io = -19.412
Filtered Energy = -4.915

Day 26 00:51:17.835 [09] 0x4110 WCDMA Active Set
Number of cells = 1
Frequency(MHz) = 2127.6
Cell[0]:
Cell is reference cell = TRUE
Scrambling code(primary) = 323
Scrambling code (secondary) = 0
Channelization (OVSF) code = 0
TPC Combiner ID = 0
CPICH diversity per cell = STTD
SPICH present = NO
Active Cell Position = 33867 (chipx8)
.4.3 小区重选Search String
1、 WCDMA cell reselection
Cell reselection|cell_reselection|ASET|CEL RESEL IND|valueSysInfoType3|setup_req|setup_cnf|transition_req|transition_cnf|cell_parm|measurement_req|drx_req|acq succ|rrc conn|0x4005
2、 Inter-RAT cell reselection
Asets|interrat_resel|is better|cel resel ind|0x4005 WCDMA|g2wsrchdrv.c|l1_sc_wcdma.c|gl1_msg_wcdma_meas.c|rrc conn|has been for 5 seconds|Start Cell Reselection|srchcr.c|TmeasGSM

四、 CS与PS域呼叫流程
.5 CS域呼叫流程
.5.1 CS域呼叫建立
.5.1.1 CS域呼叫建立信令流程表：

注释：1. Establishment cause=Originating conversational call
2. 如果安全模式（Security mode）控制过程被采用，网络将启用安全模式控制过程。此时由RRC发出的安全模式控制过程指示完全被当作服务认可指示。这时CM服务接受信息会被安全模式控制过程取代。
.5.1.2 CS域呼叫建立示例
 手机通过CM层发起呼叫
Day 0 21:16:01.739 [78] 0x12C1 CM Call Event
Version = 1
Call Event = 0 (CM_CALL_EVENT_ORIG)
Call Client Id = 12
Call Id = 11
Call State = 1 (CM_CALL_STATE_ORIG)
Call Type = 0 (CM_CALL_TYPE_VOICE)
Day 0 21:16:01.740 [78] 0x1FEB Extended Debug Message
cmcall.c 2951 H =CM= cmcall_orig_proc start
Day 0 21:16:01.749 [78] 0x1FEB Extended Debug Message
mnutils.c 874 H MN -> MNCC_SETUP_REQ -> CNM
 MM层请求RRC连接建立
Day 0 21:16:01.750 [78] 0x1FEB Extended Debug Message
mmrrcconn.c 237 H MM sent RRC_EST_REQ to RRC
Day 0 21:16:01.963 [BB] 0x412F WCDMA Signaling Messages – UL_CCCH
Channel Type = UL_CCCH, Radio Bearer ID = 0, Message Length = 14
Interpreted PDU:
value UL-CCCH-Message ::=
message rrcConnectionRequest :
initialUE-Identity p-TMSI-and-RAI :
p-TMSI '11010101 00100100 00000100 01011110’B,
rai
lai
plmn-Identity
mcc
5,
0,
2
mnc
1,
8
},
lac '00100111 01110101’B
rac '00000001’B
establishmentCause originatingConversationalCall,
protocolErrorIndicator noError,
measuredResultsOnRACH
{
Day 0 21:16:01.963 [BB] 0x1FEB Extended Debug Message
rrcrce.c 3348 H RRC Connection Request is sent: 0
 RACH前导发射初始功率确定
Preamble_Initial_Power=Primary CPICH TX Power(SIB5)-CPICH_RSCP(UE Measured)+UL Interference(SIB7)+Constant Value(SIB5)
Day 0 21:16:01.985 [BD] 0x1FEB Extended Debug Message
wenc.c 5260 H PrCPICH_P 32, CPICH_RSCP -90, UL_IF -102
Day 0 21:16:01.985 [BD] 0x1FEB Extended Debug Message
wenc.c 5262 H const_val -27, Preambl_P -7, TFCI 0
 手机得到AICH的捕获指示（ACK）确认RACH信息发送成功
Day 0 21:16:02.144 [CD] 0x1FEB Extended Debug Message
wenc.c 6688 H RACH Tx successful, TxAgc 14, ai_Sum 7701e
Day 0 21:16:02.144 [CD] 0x4160 WCDMA RACH Parameters, Ver2
Message Length = 20 ms
Num Preambles = 8
AICH Status = 1 (ACK)
Signature = 11
Sub Channel Number = 2
SFN = 3277
AICH Timing = 1 (4 Access Slots)
RF Tx Power = 14 dBm
 在DL_CCCH上发送RRC连接建立，此时DL_CCCH映射到FACH
Day 0 21:16:01.917 [B6] 0x1FEB Extended Debug Message
l1msetup.c 4059 E L1 state now FACH
Day 0 21:16:02.234 [D6] 0x1FEB Extended Debug Message
rlcdlum.c 646 H UM Rx’d SN 65, LC 8
Day 0 21:16:02.234 [D6] 0x1FEB Extended Debug Message
rlcdlum.c 646 H UM Rx’d SN 66, LC 8
Day 0 21:16:02.244 [D7] 0x1FEB Extended Debug Message
rlcdlum.c 646 H UM Rx’d SN 67, LC 8
Day 0 21:16:02.254 [D8] 0x412F WCDMA Signaling Messages – DL_CCCH
Channel Type = DL_CCCH, Radio Bearer ID = 0, Message Length = 97
Interpreted PDU:
value DL-CCCH-Message ::=
message rrcConnectionSetup : r3 :
rrcConnectionSetup-r3
initialUE-Identity p-TMSI-and-RAI :
p-TMSI '11010101 00100100 00000100 01011110’B,
rai
lai
plmn-Identity
mcc
5,
0,
2
mnc
1,
8
lac '00100111 01110101’B
},
Day 0 21:16:02.255 [D8] 0x1FEB Extended Debug Message
rrcdispatcher.c 1013 H UE Identity check passed
Day 0 21:16:02.258 [D9] 0x1FEB Extended Debug Message
rrcrce.c 5364 H RRC Connection Setup Msg is received
 L1进入DCH状态
Day 0 21:16:02.262 [D9] 0x1FEB Extended Debug Message
rrcrce.c 5820 H RRC ConnSetUp msg has been validated
Day 0 21:16:02.270 [DA] 0x1FEB Extended Debug Message
l1msetup.c 4063 E L1 state now DCH 110
Day 0 21:16:02.352 [E0] 0x412F WCDMA Signaling Messages – UL_DCCH
Channel Type = UL_DCCH, Radio Bearer ID = 2, Message Length = 41
Interpreted PDU:
value UL-DCCH-Message ::=
message rrcConnectionSetupComplete :
rrc-TransactionIdentifier 0,
startList
Day 0 21:16:02.417 [E7] 0x413C WCDMA RLC UL AM Signaling PDU
Number of AM UL Entities = 1
Entity[0]:
Data Logical Channel ID = 16
Number of PDUs Logged = 1
PDU Size (in Bits) = 144
PDU Log(s):
Raw: 0x80 0x00 0x4A 0x88
<-DATA PDU:: SN: 0x000 ( 0), P: 0, HE: 0, D: 0x4A, D: 0x88
Day 0 21:16:02.429 [E8] 0x413C WCDMA RLC UL AM Signaling PDU
Number of AM UL Entities = 1
Entity[0]:
Data Logical Channel ID = 16
Number of PDUs Logged = 1
PDU Size (in Bits) = 144
PDU Log(s):
Raw: 0x80 0x08 0x30 0x40
<-DATA PDU:: SN: 0x001 ( 1), P: 0, HE: 0, D: 0x30, D: 0x40
Day 0 21:16:02.511 [F0] 0x4146 WCDMA RLC DL AM Control PDU LOG
Data Logical Channel ID = 16
PDU Size (in Bits) = 144
PDU Log:
0x02 0x00 0x30 0x00 0x00 0x00 0x00 0x00
0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
0x00 0x00 0x50 0x50 0x99 0xA6 0x03 0x00
0x00 0x60 0x79 0x68 0x01 0x00 0x00 0x00
0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
0x00 0xAD 0xDE 0x1C 0x00 0x01
->CONTROL PDU:: Type: STATUS
SUFI[0]: ACK => LSN = 0x003 ( 3)
Day 0 21:16:02.353 [E0] 0x1FEB Extended Debug Message
rrcrce.c 7787 H RRC Conn Setup Compl Msg is sent
 RRC连接建立完成
Day 0 21:16:02.353 [E0] 0x1FEB Extended Debug Message
rrcrce.c 1991 H Sent RRC_EST_CNF to MM
Day 0 21:16:02.377 [E3] 0x1FEB Extended Debug Message
mmrrcconn.c 484 H RRC Connection Established
Day 0 21:16:02.377 [E3] 0x1FEB Extended Debug Message
mmutils.c 1310 H MM sent CM_SERVICE_REQUEST to RRC
 MM通过RRC连接进入CS信令进程
Day 0 21:16:02.783 [0B] 0x1FEB Extended Debug Message
mmmain.c 249 H MM Received AUTHENTICATION_REQUEST
Day 0 21:16:03.011 [22] 0x1FEB Extended Debug Message
mmsecurity.c 492 H MM sent AUTHENTICATION RESPONSE
Day 0 21:16:03.011 [22] 0x1FEB Extended Debug Message
mmutils.c 1294 H MM sent AUTHENTICATION_RESPONSE to RRC
Day 0 21:16:03.132 [2E] 0x1FEB Extended Debug Message
rrcsmc.c 9469 H Received Security Mode Command Message
Day 0 21:16:03.132 [2E] 0x1FEB Extended Debug Message
rrcueci.c 607 H Security Cap. Check Pass
Day 0 21:16:03.133 [2E] 0x1FEB Extended Debug Message
rrcf9driver.c 201 H FRESH value:0xb77e6c83
Day 0 21:16:03.135 [2F] 0x1FEB Extended Debug Message
rrcsmc.c 7383 H SECURITY MODE COMPLETE Message Sent
Day 0 21:16:03.233 [38] 0x1FEB Extended Debug Message
mmcoord.c 1490 H MM rec’d RRC_SYNC_IND sync_reason 3
 CC连接建立完成
Day 0 21:16:03.234 [38] 0x1FEB Extended Debug Message
mmcm.c 279 H MM sent MMCNM_EST_CNF
Day 0 21:16:03.235 [39] 0x1FEB Extended Debug Message
cnmlog.c 296 H CNM <- MMCNM_EST_CNF <- MM
Day 0 21:16:03.235 [39] 0x1FEB Extended Debug Message
cnmlog.c 215 H CNM -> MMCNM_DATA_REQ -> MM
Day 0 21:16:03.235 [39] 0x1FEB Extended Debug Message
cnmlog.c 774 H msg_type=SETUP
Day 0 21:16:03.384 [48] 0x1FEB Extended Debug Message
cnmlog.c 271 H CNM <- MMCNM_DATA_IND <- MM
Day 0 21:16:03.385 [48] 0x1FEB Extended Debug Message
cnmlog.c 749 H msg_type=CALL_PROCEEDING
Day 0 21:16:03.387 [48] 0x1FEB Extended Debug Message
mnutils.c 912 H MN <- MNCC_CALL_PROC_IND <- CNM
Day 0 21:16:03.388 [48] 0x1FEB Extended Debug Message
mnutils.c 591 H MN -> CM_MO_CALL_CONF -> CM
Day 0 21:16:03.395 [49] 0x1FEB Extended Debug Message
ds3gcmif.c 643 M Call Event received for a non-data call: 29
Day 0 21:16:05.642 [29] 0x1FEB Extended Debug Message
rrcrbe.c 4059 H Recvd RB Setup Msg cur_state 0
Day 0 21:16:05.642 [29] 0x1FEB Extended Debug Message
rrcrbe.c 2530 H 1 RABs in an RBSetupMessage
Day 0 21:16:05.652 [2A] 0x1FEB Extended Debug Message
rrcllc.c 9853 H CONFIG DCCH DTCH CALLED
Day 0 21:16:05.652 [2A] 0x1FEB Extended Debug Message
rrclcm.c 1021 H Allocated UL lc_id: 1, rb_id: 5, lc_type:5
Day 0 21:16:05.652 [2A] 0x1FEB Extended Debug Message
rrclcm.c 1021 H Allocated UL lc_id: 2, rb_id: 6, lc_type:5
Day 0 21:16:05.652 [2A] 0x1FEB Extended Debug Message
rrclcm.c 1021 H Allocated UL lc_id: 3, rb_id: 7, lc_type:5
Day 0 21:16:06.091 [56] 0x1FEB Extended Debug Message
rrcrbe.c 1164 H Sending RBS Complete message to send-chain
 振铃信令从CNM发送到MN，再从MN发送到CM
Day 0 21:16:07.073 [B8] 0x1FEB Extended Debug Message
cnmlog.c 739 H msg_type=ALERTING
Day 0 21:16:07.075 [B9] 0x1FEB Extended Debug Message
mnutils.c 900 H MN <- MNCC_ALERT_IND <- CNM
Day 0 21:16:10.076 [E5] 0x1FEB Extended Debug Message
mnutils.c 948 H MN <- MNCC_PROGRESS_IND <- CNM
Day 0 21:16:10.074 [E5] 0x1FEB Extended Debug Message
cnmlog.c 754 H msg_type=CONNECT
Day 0 21:16:10.076 [E5] 0x1FEB Extended Debug Message
mnutils.c 968 H MN <- MNCC_SETUP_CNF <- CNM
Day 0 21:16:10.077 [E5] 0x1FEB Extended Debug Message
mnutils.c 655 H MN -> CM_CALL_CONNECTED_IND -> CM
Day 0 21:16:10.078 [E5] 0x1FEB Extended Debug Message
cnmlog.c 759 H msg_type=CONNECT_ACK
Day 0 21:16:10.083 [E5] 0x1FEB Extended Debug Message
cmwcall.c 7256 M RXD: CALL_CONNECTED_IND
Day 0 21:16:10.592 [18] 0x1FEB Extended Debug Message
dsatetsicall.c 10243 M etsicall_num_active_calls 1
.5.2 CS域呼叫释放
.5.2.1 CS呼叫释放信令流程表：

注释：1.这里的Radio Bearer Release信令将释放所有的用户面的无线承载。
.5.2.2 CS域呼叫释放过程示例
Day 10534 00:58:08.140 [1D] 0x7001 UMTS Call Flow Analysis
Type # Dir SRC/DST MESSAGE
---- — --- ------------ -------
CFA 150 Tx MN->CNM: MNCC_DISC_REQ [03.04.05.00.00.08.02.E0.90]@#
Decoded Message:
MSG_SET: MN_CC (0x03)
MSG_ID: MNCC_DISC_REQ (0x04)
MSG_LEN: 5 bytes
connection_id: 0
data: (4 bytes)
08.02.e0.90.
IEI_CAUSE
Day 10534 00:58:08.140 [1D] 0x1FEB Extended Debug Message
cnmlog.c 380 H CNM <- MNCC_DISC_REQ <- MN
Day 10534 00:58:08.140 [1D] 0x1FEB Extended Debug Message
cnmlog.c 215 H CNM -> MMCNM_DATA_REQ -> MM
Day 10534 00:58:08.141 [1D] 0x1FEB Extended Debug Message
cnmlog.c 836 H msg_type=DISCONNECT
Day 10534 00:58:08.141 [1D] 0x1FEB Extended Debug Message
mmmain.c 423 H MM Received MMCNM_DATA_REQ
Day 10534 00:58:08.333 [31] 0x1FEB Extended Debug Message
cnmlog.c 271 H CNM <- MMCNM_DATA_IND <- MM
Day 10534 00:58:08.334 [31] 0x1FEB Extended Debug Message
cnmlog.c 841 H msg_type=RELEASE
Day 10534 00:58:08.336 [31] 0x1FEB Extended Debug Message
mnutils.c 964 H MN <- MNCC_REL_IND <- CNM
Day 10534 00:58:08.336 [31] 0x1FEB Extended Debug Message
mnutils.c 846 H MN -> MNCC_REL_COMPL_REQ -> CNM
Day 10534 00:58:08.336 [31] 0x7001 UMTS Call Flow Analysis
Type # Dir SRC/DST MESSAGE
CFA 156 Tx MN->CNM: MNCC_REL_COMPL_REQ [03.08.08.00.00.03.00.00.00.00.00.00]@#
Decoded Message:
MSG_SET: MN_CC (0x03)
MSG_ID: MNCC_REL_COMPL_REQ (0x08)
MSG_LEN: 8 bytes
connection_id: 0
pd: 3
cause: 0
Day 10534 00:58:08.336 [31] 0x1FEB Extended Debug Message
mnutils.c 663 H MN -> CM_MT_END_CALL_IND -> CM
Day 10534 00:58:08.337 [31] 0x1FEB Extended Debug Message
cnmlog.c 396 H CNM <- MNCC_REL_COMPL_REQ <- MN
Day 10534 00:58:08.338 [31] 0x1FEB Extended Debug Message
cnmlog.c 846 H msg_type=RELEASE_COMPLETE
Day 10534 00:58:08.340 [31] 0x1FEB Extended Debug Message
mmmain.c 410 H MM Received MMCNM_REL_REQ
Day 10534 00:58:08.351 [32] 0x1FEB Extended Debug Message
cmwcall.c 5214 H =CM= cmcall_end()

Day 10534 00:58:08.683 [01] 0x1FEB Extended Debug Message
mvssup.c 1013 H De-registering old UL AMR channels.
Day 10534 00:58:08.683 [01] 0x1FEB Extended Debug Message
rlcul.c 2870 H LC 1 not config yet
Day 10534 00:58:08.684 [01] 0x1FEB Extended Debug Message
rlcul.c 2870 H LC 2 not config yet
Day 10534 00:58:08.684 [01] 0x1FEB Extended Debug Message
rlcul.c 2870 H LC 3 not config yet
Day 10534 00:58:08.694 [02] 0x1FEB Extended Debug Message
mmcoord.c1452 H MM received RRC_REL_IND - rel_cause = 0（0表示正常释放）
Day 10534 00:58:08.695 [02] 0x1FEB Extended Debug Message
cnmlog.c 320 H CNM <- MMCNM_REL_CNF <- MM
。
。
Day 10534 00:58:09.074 [7F] 0x1FEB Extended Debug Message
rrclcm.c 1631 H Deallocating DL lc_id: 0, rb_id: 40, lc_type: 0
.6 PS域呼叫流程
.6.1 PS域呼叫建立
.6.1.1 PS域呼叫建立流程表：

注释：1.如果安全模式（Security mode）控制过程被采用，网络将启用安全模式控制过程。此时由RRC发出的安全模式控制过程指示完全被当作服务认可指示。这时CM服务接受信息会被安全模式控制过程取代。
.6.1.2 PS域呼叫建立示例
 CM层发送数据呼叫建立请求
Day 10235 02:23:42.076 [17] 0x1FEB Extended Debug Message
cmdbg.c 452 H =CM= >>CM callcmd 0: 14
Day 10235 02:23:42.291 [17] 0x1FEB Extended Debug Message
cmcall.c 2901 H =CM= cmcall_orig_proc start
Day 10235 02:23:42.299 [17] 0x1FEB Extended Debug Message
smcm.c 544 H CM PDP Activate Request for NSAPI = 5
 请求GMM连接建立
Day 10235 02:23:42.299 [17] 0x1FEB Extended Debug Message
smcm.c 1278 H Send GMMSM_ESTABLISH_REQ, REQ CONN
Day 10235 02:23:42.299 [17] 0x1FEB Extended Debug Message
smgmm.c 709 H Sending Establish Req to GMM
Day 10235 02:23:42.300 [17] 0x1FEB Extended Debug Message
gmmconn.c 2057 H Received GMMSM_ESTABLISH_REQ
Day 10235 02:23:42.300 [17] 0x1FEB Extended Debug Message
gmmmsg.c 2310 H Sending SERVICE REQUEST message
Day 10235 02:23:42.300 [17] 0x1FEB Extended Debug Message
mmrrcconn.c 240 H MM sent RRC_EST_REQ to RRC
Day 10235 02:23:42.300 [17] 0x1FEB Extended Debug Message
rrcrce.c 2273 H Rcvd RRC_EST_REQ from MM with cause:14
Day 10235 02:23:42.723 [7A] 0x412F WCDMA Signaling Messages – UL_CCCH
Channel Type = UL_CCCH, Radio Bearer ID = 0, Message Length = 13
Interpreted PDU:
value UL-CCCH-Message ::=
message rrcConnectionRequest :
initialUE-Identity tmsi-and-LAI :
tmsi '01101000 00011010 01000011 00000000’B,
lai
plmn-Identity
mcc
4,
6,
0
mnc
0,
2
lac '00000000 00001010’B
establishmentCause originatingHighPrioritySignalling,
protocolErrorIndicator noError,
measuredResultsOnRACH
Day 10235 02:23:42.723 [7A] 0x1FEB Extended Debug Message
rrcrce.c 3380 H RRC Connection Request is sent: 0
Day 10235 02:23:44.036 [FE] 0x1FEB Extended Debug Message
rrcrce.c 5396 H RRC Connection Setup Msg is received
Day 10235 02:23:44.049 [FF] 0x1FEB Extended Debug Message
l1msetup.c 4121 E L1 state now DCH 11
Day 10235 02:23:44.127 [02] 0x1FEB Extended Debug Message
rrcrce.c 7804 H RRC Conn Setup Compl Msg is sent
Day 10235 02:23:44.139 [03] 0x1FEB Extended Debug Message
mmrrcconn.c 273 H MM sent RRC_OPEN_SESSION_REQ to RRC
 RRC连接建立完成指示
Day 10235 02:23:44.141 [03] 0x1FEB Extended Debug Message
mmcoord.c 1444 H MM received RRC_EST_CNF
Day 10235 02:23:44.141 [03] 0x1FEB Extended Debug Message
rrcdt.c 2814 H Sig Conn for PS Domain is established
Day 10235 02:23:44.391 [1C] 0x1FEB Extended Debug Message
mmrrcconn.c 538 H PS Session Active
Day 10235 02:23:44.391 [1C] 0x1FEB Extended Debug Message
mmcoord.c 3565 H MM received RRC_OPEN_SESSION_CNF
 GMM连接建立指示
Day 10235 02:23:44.419 [1F] 0x1FEB Extended Debug Message
rrcdt.c 7758 H Sent RRC_DATA_IND to the MM
Day 10235 02:23:44.420 [1F] 0x1FEB Extended Debug Message
gmmsecurity.c 665 HRECEIVED AUTH. AND CIPHERING REQUEST MESSAGE
Day 10235 02:23:44.577 [2F] 0x1FEB Extended Debug Message
gmmsecurity.c 28HSendingAUTHENTICATION AND CIPHERING RESPONSE message
Day 10235 02:23:44.769 [42] 0x1FEB Extended Debug Message
rrcsmc.c 9451 H Received Security Mode Command Message
Day 10235 02:23:44.771 [42] 0x1FEB Extended Debug Message
rrcsmc.c 7365 H SECURITY MODE COMPLETE Message Sent
Day 10235 02:23:44.919 [51] 0x1FEB Extended Debug Message
gmmconn.c 465 H Sending GMMSM_ESTABLISH_CNF
 RRC通知GMM服务请求被接受
Day 10235 02:23:44.919 [51] 0x1FEB Extended Debug Message
mmcoord.c 1519 H MM rec’d RRC_SYNC_IND sync_reason 2
 PDP激活
Day 10235 02:23:44.920 [51] 0x1FEB Extended Debug Message
smix.c 358 H Packing L3 msg: PDP ACTIVATE REQUEST
Day 10235 02:23:44.920 [51] 0x1FEB Extended Debug Message
smcm.c 1347 H PDP State changed to ACTIVE_PENDING
Day 10235 02:23:45.449 [86] 0x412F WCDMA Signaling Messages – DL_DCCH
Channel Type = DL_DCCH, Radio Bearer ID = 2, Message Length = 157
Interpreted PDU:
value DL-DCCH-Message ::=
integrityCheckInfo
messageAuthenticationCode '10000110 10011010 11101010 10100011’B,
rrc-MessageSequenceNumber 2
message radioBearerSetup : later-than-r3 :
rrc-TransactionIdentifier 0,
criticalExtensions criticalExtensions : r5 :
radioBearerSetup-r5
activationTime 184,
new-H-RNTI '00000000 00000000’B,
rrc-StateIndicator cell-DCH,
cn-InformationInfo
Day 10235 02:23:45.457 [87] 0x1FEB Extended Debug Message
rrcrbe.c 4160 H Recvd RB Setup Msg cur_state 0
Day 10235 02:23:45.457 [87] 0x1FEB Extended Debug Message
rabmtask.c 824 H RRC query_type = 0, rab_id 5 state : 2
Day 10235 02:23:45.457 [87] 0x1FEB Extended Debug Message
rrcdata.c 4721 H Configured RAB type:2 (0-CS-Voice, 2-PS-Data, other CS-Data)
Day 10235 02:23:45.469 [88] 0x1FEB Extended Debug Message
rrclcm.c 1008 H Allocated UL lc_id: 19, rb_id: 5, lc_type:5
 RAB(radio access bearer) ID 5的上下行
Day 10235 02:23:45.971 [BB] 0x1FEB Extended Debug Message
rlcul.c 2217 H UL AM Establish: Data Id=19,index=4
Day 10235 02:23:45.971 [BB] 0x1FEB Extended Debug Message
rlcul.c 2217 H DL AM Establish: Data Id=19,index=4
 RAB5建立完成
Day 10235 02:23:45.973 [BB] 0x1FEB Extended Debug Message
rrcrbe.c5357H Add RAB 5, RAB type: 2(0:Voice, 2:PS) in EST_RAB, rab_index: 0
Day 10235 02:23:45.973 [BB] 0x1FEB Extended Debug Message
rrcrbe.c 1227 H Sending RBS Complete message to send-chain
Day 10235 02:23:45.976 [BB] 0x1FEB Extended Debug Message
rabmtask.c 580 H Received RAB ESTABLISH IND for RAB id 5
Day 10235 02:23:46.709 [04] 0x1FEB Extended Debug Message
smgmm.c 1455 H Received ACTIVATE_PDP_ACCEPT
Day 10235 02:23:46.710 [04] 0x1FEB Extended Debug Message
smcm.c 1837 H Sending SMREG_PDP_ACTIVATE_CNF to CM 0
 数据呼叫连接建立
Day 10235 02:23:46.715 [05] 0x1FEB Extended Debug Message
ds3gcmif.c 2682 H Rx’ed CM_CALL_CONNECTED_CMD
.6.2 PS域呼叫释放
.6.2.1 PS域呼叫释放流程表：

注释：1.这里的Radio Bearer Release信令将释放所有的用户面的无线承载。
.6.2.2 PS呼叫释放过程示例
Day 10235 02:23:50.380 [73] 0x1FEB Extended Debug Message
smcm.c 744 H PDP De-Activate Req for NSAPI = 5
Day 10235 02:23:50.380 [73] 0x1FEB Extended Debug Message
smcm.c 1494 H Send GMMSM_ESTABLISH_REQ, REQ CONN
Day 10235 02:23:50.381 [73] 0x1FEB Extended Debug Message
smgmm.c 709 H Sending Establish Req to GMM
Day 10235 02:23:50.381 [73] 0x1FEB Extended Debug Message
gmmconn.c 2057 H Received GMMSM_ESTABLISH_REQ
Day 10235 02:23:50.381 [73] 0x1FEB Extended Debug Message
gmmconn.c 2283 H Sending GMMSM_ESTABLISH_CNF
Day 10235 02:23:50.381 [73] 0x1FEB Extended Debug Message
smix.c 368 H Packing L3 msg: PDP DEACTIVATE REQUEST
Day 10235 02:23:50.381 [73] 0x1FEB Extended Debug Message
smcm.c 1542 H PDP State changed to INACTIVE_PENDING
Day 10235 02:23:50.382 [74] 0x1FEB Extended Debug Message
rabmtask.c 931 H RABM Received RABMSM_DEACTIVATE_IND Cmd
Day 10235 02:23:50.384 [74] 0x1FEB Extended Debug Message
cmwcall.c 3568 H =CM= cmcall_end_req()
Day 10235 02:23:50.669 [90] 0x1FEB Extended Debug Message
smgmm.c 1552 H Received DEACTIVATE_PDP_ACCEPT
Day 10235 02:23:50.670 [90] 0x1FEB Extended Debug Message
smgmm.c 2491 H PDP 0 DEACTIVTED, Wait for RABM
Day 10235 02:23:53.510 [AC] 0x1FEB Extended Debug Message
rrcrbr.c 2508 H Number ofRBs tobe released:3
Day 10235 02:23:53.510 [AC] 0x1FEB Extended Debug Message
rrcrbcommon.c 528 H MAC_RAB_STATUS: RB removed rbid:6, rabid:1, domain:0
Day 10235 02:23:53.512 [AD] 0x1FEB Extended Debug Message
rrcllcoc.c 9446 H RB Release updating ORDERED_CONFIG
Day 10235 02:23:53.514 [AD] 0x1FEB Extended Debug Message
rrcllcrbie.c7329 H rb_id 6 is removed from Standalone OC Database at index 0
Day 10235 02:23:54.117 [E9] 0x1FEB Extended Debug Message
rrcdata.c 2288 H RAB remved id:1, index:1, domain:0
Day 10235 02:23:54.118 [E9] 0x1FEB Extended Debug Message
rrcrbr.c 1080 H Sending RBR Complete message to send-chain
Day 10235 02:23:55.876 [02] 0x1FEB Extended Debug Message
rabmtask.c 1592 H Received REL_IND from MM
Day 10235 02:23:55.877 [02] 0x1FEB Extended Debug Message
smcm.c 1903 H Sending SMREG_PDP_DEACTIVATE_CNF to CM
Day 10235 02:23:55.878 [02] 0x1FEB Extended Debug Message
cmwcall.c 9916 M RXD: CM_PS_SIG_CON_REL_IND
Day 10235 02:23:55.878 [02] 0x1FEB Extended Debug Message
cmwcall.c 9101 M RXD: CM_PDP_DEACTIVATE_CNF
Day 10235 02:23:55.878 [02] 0x1FEB Extended Debug Message
cmwcall.c 5235 H =CM= cmcall_end()
Day 10235 02:23:55.891 [03] 0x1FEB Extended Debug Message
ds3gcmif.c 1760 H Rx’ed CM_CALL_END_CMD
.7 掉话
掉话示例Log：
Day 10501 12:14:46.679 [73] 0x1FEB Extended Debug Message
cnmlog.c 759 H msg_type=CONNECT_ACK
Day 10501 12:14:46.682 [73] 0x1FEB Extended Debug Message
cmwcall.c 7256 M RXD: CALL_CONNECTED_IND
 SIR目标值达到门限值，下行开环功控（DL OLPC）退出捕获模式（ACQ mode）进入跟踪模式（TRK mode）
（注：OLPC–open loop power control TRK–track）
Day 10501 12:17:58.165 [EB] 0x1FEB Extended Debug Message
dlolpc.c 1544 H DL_OLPC: ACQ->TRK 167772160 floor 167772160Day
Day 10501 12:17:58.165 [EB] 0x1FEB Extended Debug Message
dlolpc.c 1721 H DL_OLPC:Init SirTgt 352321536 prev log10_q9 -5120
Day 10501 12:17:58.180 [E9] 0x4010 WCDMA Uplink and Downlink Power Control
# samples = 50
Start CFN = 232
Tx Tx Rate Adj
CFN Es/Nt(dB) Accum(dB) + DIP (dBm) DL TPC DHist UL TPC DHist
---- --------- --------- ------------ ---------------- ----------------
232 NaN 0.00 11.00 000000000000000 000000000000000
233 NaN 0.00 -14.33 000000000000000 000000000000000
234 NaN 0.00 -14.33 000000000000000 000000000000000
235 10.39 -65.00 3.33 011110110010100 001011010101010
236 10.02 -65.00 8.00 101111110100001 010100101010101
237 10.90 -65.00 8.00 000110010000010 011010010101010
238 10.26 -155.83 8.00 001111110000100 101101010101010
239 9.68 -155.83 13.00 101111110000101 101011010101010
240 10.07 -160.42 13.00 001111110110001 010101010101010
241 10.49 -160.42 17.58 011110110000101 110101010101010
242 10.38 -160.42 17.58 001100110100101 101101010101010
243 9.42 -160.42 17.58 011111110011100 101011010101010
244 11.12 -160.42 17.58 000100110100000 010101010101010
245 11.29 -160.42 17.58 001110010000000 110101010101010
。
。
Day 10501 12:18:08.040 [C3] 0x1FEB Extended Debug Message
dlolpc.c 950 H Disabled DL_OLPC
Day 10501 12:18:08.044 [C4] 0x1FEB Extended Debug Message
wenc.c 2573 H enc_cleanup: turning PA off
。
。
Day 10501 12:22:46.744 [A5] 0x1FEB Extended Debug Message
dltrchmeas.c 2841 H HLSYNC:OUT_OF_SYNC -4790 0 0
Day 10501 12:22:56.020 [9B] 0x1FEB Extended Debug Message
dltrchmeas.c 862 H DL Tr Id 0 CRC rece 92 err 50
Day 10501 12:23:02.056 [9B] 0x1FEB Extended Debug Message
dltrchmeas.c 862 H DL Tr Id 0 CRC rece 92 err 75
Day 10501 12:25:23.967 [D0] 0x1FEB Extended Debug Message
dltrchmeas.c 2841 H HLSYNC:OUT_OF_SYNC -6370 0 0
Day 10501 12:25:29.967 [28] 0x1FEB Extended Debug Message
dltrchmeas.c 2698 H SYNC_DET_T:RL failure indication
Day 10501 12:25:29.967 [28] 0x1FEB Extended Debug Message
rrccu.c 6124 H Rcvd RRC_CPHY_RL_FAILURE_IND cu_st:0
Day 10501 12:25:29.968 [28] 0x1FEB Extended Debug Message
rrccu.c 5245 H RRC Conn Released since T314=0 & T315=0
Day 10501 12:25:29.970 [28] 0x1FEB Extended Debug Message
dlolpc.c 950 H Disabled DL_OLPC
Day 10501 12:25:29.967 [90] 0x1FFB Event – EVENT_WCDMA_RL_FAILURE
12:25:29.967 Event 0 : EVENT_WCDMA_RL_FAILURE (ID=567) Payload = 0x00
Payload String = Cause: RL_FAILURE_DUE_TO_L1

五、 系统间切换（Inter RAT Handover）
.1 压缩模式介绍
压缩模式（Compressed Mode）使终端不需要具备全双模接收能力也可以在WCDMA系统中对其他频段进行测量。为了执行这样的测量并不丢失数据，压缩模式将数据压缩传送从而在压缩帧中获得几微秒的时间进行频间测量。
压缩模式主要有三种类型：
 采用SF（Spreading Factor）减半的方法，主要用于AMR话音
 由更高层（Higher Layer Scheduling）安排，主要用于PS业务
 “打孔”，这种模式最容易实现，不需改变SF但获得的测量时间有限。目前高通不支持。
.1.1 压缩模式的激活
压缩模式的相关信息来自RRC层，压缩模式可以在下列过程中由网络配置：
 无线承载建立(Radio Bearer Setup)
 无线承载释放（Radio Bearer Release）
 无线承载重配（Radio Bearer Reconfiguration）
 物理信道重配（Physical Channel Reconfiguration）
 传输信道重配（Transport Channel Reconfiguration）
压缩模式由下列过程激活：
 物理信道重配（Physical Channel Reconfiguration）
 传输信道重配（Transport Channel Reconfiguration）
 测量控制信息（Measurement Control Message）
.1.2 压缩模式的结构与配置
压缩模式的传输间隙序列：

 TGSN——传输间隙起始时隙号（Transmission Gap Starting Slot Number）
 TGL1——传输间隙长度1（Transmission Gap Length 1 ）定义第一个传输间隙的持续时长（用时隙个数表示）
 TGL2——传输间隙长度2（Transmission Gap Length 1 ）定义第二个传输间隙的持续时长（用时隙个数表示）。如果高层没有给出TGL2的值，那么TGL2= TGL1
 TGD——传输间隙起始间隔（Transmission Gap Start Distance）定义了两个连续的传输间隙的起始时隙间的时间间隔（用时隙个数表示）
 TGPL1——传输间隙样式长度1（Transmission Gap Pattern Length1）定义了传输间隙样式1的持续时长（用时隙个数表示）
 TGPL2——传输间隙样式长度2（Transmission Gap Pattern Length1）定义了传输间隙样式2的持续时长（用时隙个数表示）。如果高层没有给出TGPL2的值，那么TGPL2= TGPL1
网络通过下列信息配置压缩模式样式序列：
 TGMP——传输间隙样式序列测量目的（Transmission Gap Pattern Sequence Measurement Purpose）用于定义传输间隙样式序列的目的，例如当用于FDD测量时它的值为“FDD measurement”，用于GSM测量时它的值可以是“GSM carrier RSSI measurement”“Initial BSIC identification”等
 TGPSI——传输间隙样式序列标识符（Transmission Gap Pattern Sequence Identifier）用于定义不同的压缩模式样式序列，取值范围1~6
传输间隙样式序列的起始与重复参数：
 TGPRC——传输间隙样式重复数（Transmission Gap Pattern Repetition Count）用于定义在一个传输间隙样式序列中传输间隙样式重复的个数
 TGCFN——传输间隙连接帧号（Transmission Gap Connection Frame Number）是在一个传输间隙样式序列中第一个样式1的第一无线帧的CFN
.1.3 压缩模式配置示例
Day 10489 19:47:48.215 [00] 0x412F WCDMA Signaling Messages – DL_DCCH
Channel Type = DL_DCCH, Radio Bearer ID = 2, Message Length = 52
Interpreted PDU:
value DL-DCCH-Message ::=
integrityCheckInfo
messageAuthenticationCode '00011111 11110000 10011011 10100100’B,
rrc-MessageSequenceNumber 4
message physicalChannelReconfiguration : r3 :
modeSpecificInfo fdd :
dpch-CompressedModeInfo
tgp-SequenceList
tgpsi 1,
tgps-Status deactivate : NULL,
tgps-ConfigurationParams
{
tgmp gsm-CarrierRSSIMeasurement,
tgprc 0,
tgsn 4,
tgl1 7,
tgl2 7,
tgd 270,
tgpl1 8,
tgpl2 8,
rpp mode1,
itp mode0,
ul-DL-Mode ul-and-dl :
ul sf-2,
dl sf-2
dl-FrameType dl-FrameTypeA,
tgpsi 2,
tgps-Status deactivate : NULL,
tgps-ConfigurationParams
tgmp gsm-initialBSICIdentification,
tgprc 0,
tgsn 4,
tgl1 7,
tgl2 7,
tgd 270,
tgpl1 8,
tgpl2 8,
rpp mode1,
itp mode0,
ul-DL-Mode ul-and-dl :
ul sf-2,
dl sf-2
dl-FrameType dl-FrameTypeA,
tgpsi 3,
tgps-Status deactivate : NULL,
tgps-ConfigurationParams
tgmp gsmBSICReconfirmation,
tgprc 0,
tgsn 4,
tgl1 7,
tgl2 7,
tgd 270,
tgpl1 8,
tgpl2 8,
rpp mode1,
itp mode0,
ul-DL-Mode ul-and-dl :
ul sf-2,
dl sf-2
},
dl-FrameType dl-FrameTypeA,
deltaSIR1 10,
deltaSIRAfter1 5,
deltaSIR2 10,
deltaSIRAfter2 5,
treconfirmAbort 11
.1.4 传输间隙的位置

 Nfirst定义了用于传输间隙的连续空闲时隙的起始时隙
 Nfirst=0~14
 Nlast定义了用于传输间隙的连续空闲时隙的结束时隙
 如果Nfirst+TGL≤15，则Nlast=Nfirst+TGL-1（在同一帧中）
 如果Nfirst+TGL≥15，则Nlast=Nfirst+TGL-1取15的模（在下一帧中）
 当传输间隙跨越两个连续的无线帧时，Nfirst和TGL的选择必须保证在每个帧有8个传输时隙
.1.5 下行压缩模式的帧结构
有两种类型的下行压缩模式的帧结构type A和type B。

Type A有最大的传输间隙长度，type B优化了功率控制。Type B一般用于SF（Spreading Factor）减半的压缩模式中，type A则用于其它压缩模式中。
.1.6 压缩模式的触发
.1.6.1 下列事件将触发压缩模式的激活：
 事件2d（event 2d）
 事件1f（event 1f）
 事件3a（event 3a）
 其它周期测量
.1.6.2 下列事件可以触发压缩模式的终止：
 事件2f（event 2f）
 事件1e（event 1e）
 其它周期测量
.2 测量报告
.2.1 频内测量（intra frequency measurement）
 事件1a（event 1a）–P-CPICH的值进入报告门限
 事件1b（event 1b）–P-CPICH的值离开报告门限
 事件1c（event 1c）–未激活的P-CPICH优于当前已激活的P-CPICH
 事件1d（event 1d）–最好小区变更
 事件1e（event 1e）–P-CPICH的值高于某个绝对门限
 事件1f（event 1f）–P-CPICH的值低于某个绝对门限
事件1a和事件1e用于指示一个新的同频小区将被加入激活集，事件1b和事件1f用于指示一个同频小区将被从激活集中去除，事件1c用于指示一个新的同频小区将取代当前激活集中的一个小区，事件1d类似于位置更新对切换并不重要。
.2.2 频间测量（inter frequency measurement）
 事件2a（event 2a）–最好频点变更
 事件2b（event 2b）–当前使用频点的质量低于某一门限同时发现一个未使用频点的质量高于此门限
 事件2c（event 2c）–一个未使用频点的质量高于某一门限
 事件2d（event 2d）–当前使用频点的质量低于某一门限
 事件2e（event 2e）–一个未使用频点的质量低于某一门限
 事件2f（event 2f）–当前使用频点的质量高于某一门限
.2.3 系统间测量（Inter-RAT measurement）
 事件3a（event 3a）–当前使用的UTRAN频点的质量低于某一门限同时发现一个未使用的其它系统（如：GSM）的频点的质量高于此门限
 事件3b（event 3b）–一个未使用的其它系统（如：GSM）的频点的质量低于某一门限
 事件3c（event 3c）–一个未使用的其它系统（如：GSM）的频点的质量高于某一门限
 事件3d（event 3d）–最好小区变更到其它系统（如：GSM）
.3 系统间切换（Inter-RAT HO）过程示例
.3.1 系统间切换步骤
步骤1—包含压缩模式参数的RB建立信息
步骤2—包含事件3c门限值的测量控制信息并激活压缩模式
步骤3—传输间隙打开，压缩模式工作
步骤4—RSSI测量
步骤5—BSIC确认
步骤6—BSIC再确认
步骤7—报告事件3c
步骤8—UTRAN发出切换命令
步骤9—BSIC、TCH同步到GSM，切换完成
.3.2 系统间切换示例Log
Day 10483 19:19:40.298 [C0] 0x412F WCDMA Signaling Messages – DL_DCCH
Channel Type = DL_DCCH, Radio Bearer ID = 2, Message Length = 62
Interpreted PDU:
value DL-DCCH-Message ::=
integrityCheckInfo
messageAuthenticationCode '10100101 00111111 10001000 00100111’B,
rrc-MessageSequenceNumber 5
message measurementControl : r3 :
measurementControl-r3
rrc-TransactionIdentifier 3,
measurementIdentity 3,
measurementCommand setup : interRATMeasurement :
…
reportCriteria interRATReportingCriteria :
interRATEventList
event3a :
thresholdOwnSystem 0,
w 0,
thresholdOtherSystem -98,
hysteresis 0,
timeToTrigger ttt100,
reportingCellStatus withinActSetOrVirtualActSet-InterRATcells : e4
…
dpch-CompressedModeStatusInfo
tgps-Reconfiguration-CFN 64,
tgp-SequenceShortList
tgpsi 1,
tgps-Status activate :
tgcfn 64
tgpsi 2,
tgps-Status activate :
tgcfn 66
tgpsi 3,
tgps-Status activate :
tgcfn 70
…
Day 10483 19:19:40.305 [C1] 0x1FEB Extended Debug Message
l1cmmgr.c 1539 H L1CMMGR:Info validate
 压缩模式信息到达CFN193
Day 10483 19:19:40.305 [C1] 0x1FEB Extended Debug Message
l1cmmgr.c 1562 H L1CMMGR:Validating Id 1 at idx 0
Day 10483 19:19:40.305 [C1] 0x1FEB Extended Debug Message
l1cmmgr.c 1562 H L1CMMGR:Validating Id 2 at idx 1
Day 10483 19:19:40.305 [C1] 0x1FEB Extended Debug Message
l1cmmgr.c 1562 H L1CMMGR:Validating Id 3 at idx 2
Day 10483 19:19:40.305 [C1] 0x1FEB Extended Debug Message
l1cmmgr.c 2566 H L1CMMGR:Info Update CFN 193 SFN 1730
 压缩模式的样式在TGCFN64中激活且当前CFN为193
Day 10483 19:19:40.306 [C1] 0x1FEB Extended Debug Message
l1cmmgr.c 2238 H L1CMMGR:Id 1 P_ACT[2] CFN 64 cur 193
Day 10483 19:19:40.306 [C1] 0x1FEB Extended Debug Message
l1cmmgr.c 2238 H L1CMMGR:Id 2 P_ACT[2] CFN 66 cur 193
Day 10483 19:19:40.306 [C1] 0x1FEB Extended Debug Message
l1cmmgr.c 2238 H L1CMMGR:Id 3 P_ACT[2] CFN 70 cur 193
Day 10483 19:19:40.306 [C1] 0x1FEB Extended Debug Message
l1cmmgr.c 2290 H L1CMMGR:#info 3 CMact e Act e De 0
 压缩模式TSPSI 1被激活在CFN64且当前CFN为63
Day 10483 19:19:41.551 [3E] 0x1FEB Extended Debug Message
l1cmmgr.c 4219 H L1CMMGR:Id 1 ACT CFN 64 cur 63
 ID1的压缩模式传输间隙样式序列已被激活在CFN64
Day 10483 19:19:41.571 [40] 0x1FEB Extended Debug Message
l1cmmgr.c 3793 H L1CMMGR:Id 1 going ACT CFN 64
Day 10483 19:19:41.571 [40] 0x1FEB Extended Debug Message
l1cmmgr.c 4219 H L1CMMGR:Id 2 ACT CFN 66 cur 65
Day 10483 19:19:41.591 [42] 0x1FEB Extended Debug Message
l1cmmgr.c 3793 H L1CMMGR:Id 2 going ACT CFN 66
Day 10483 19:19:41.611 [44] 0x1FEB Extended Debug Message
l1cmmgr.c 4219 H L1CMMGR:Id 3 ACT CFN 70 cur 69
Day 10483 19:19:41.631 [46] 0x1FEB Extended Debug Message
l1cmmgr.c 3793 H L1CMMGR:Id 3 going ACT CFN 70

Day 10483 19:19:41.434 [32] 0x4010 WCDMA Uplink and Downlink Power Control
# samples = 50
Start CFN = 49
Tx Tx Rate Adj
CFN Es/Nt(dB) Accum(dB) + DIP (dBm) DL TPC DHist UL TPC DHist
---- --------- --------- ------------ ---------------- ----------------
49 12.84 7.00 -7.00 000000000000000 100010101110001
50 12.13 6.00 -7.00 000000000000000 010001110011001
51 12.33 7.00 -7.00 000000000000000 111000110111000
52 12.86 6.00 -7.00 000000000000000 000111110000011
53 12.48 7.00 -7.00 000000000000000 110000111100110
54 12.17 6.00 -7.00 000000000000001 011000111001001
55 11.69 9.00 -7.00 100000000000000 111000011100111
56 12.11 4.00 -7.00 000000000000000 000010110101000
57 12.94 7.00 -5.67 000000000000000 111100011100011
58 12.15 6.00 -5.67 000000000000000 000111110000011
59 12.92 7.00 -7.00 000000000000000 111100001001101
60 12.35 6.00 -7.00 000000000000000 100111110000100
61 12.25 7.00 -7.00 000000000000000 011100101100011
62 13.19 6.00 -7.00 000000000000000 100100111100001
61 12.25 7.00 -7.00 000000000000000 011100101100011
62 13.19 6.00 -7.00 000000000000000 100100111100001
63 12.33 7.00 -7.00 000000000000000 110000110111100
64 13.39 5.00 -7.00 10000011 00110100
65 12.48 8.00 -5.25 000000001000000 011110001001011
66 11.41 6.00 -7.00 11111100 10010001
67 11.73 7.00 -5.25 000000000000000 110001011101100
68 10.99 8.00 -7.00 000000000000000 100001111001011
69 11.89 5.00 -7.00 000000000000000 010001110001100
70 11.75 11.00 -7.00 11111011 11110110
71 12.90 6.00 -5.25 000000000000000 000011111100001
72 11.66 6.00 -7.00 11101011 11100100
73 12.79 9.00 -3.67 000000000000000 011100000110111
74 10.86 7.00 -5.67 11111010 00000011
75 12.57 6.00 -5.25 000000000000000 110000110011001
76 11.51 7.00 -7.00 000000000000000 101010111000011
77 12.23 6.00 -7.00 000000000000000 000011100111001
…
Day 10483 19:19:41.561 [3F] 0x1FEB Extended Debug Message
srchcmmeas.c 6524 H CM_MEAS:Starting GSM RSSI meas period
Day 10483 19:19:42.064 [71] 0x1FEB Extended Debug Message
srchcmmeas.c 7269 H Setting RSSI measurement done signal
…
 BSIC确认
Day 10483 19:19:44.646 [73] 0x1FEB Extended Debug Message
srchcmmeas.c 7841 H CM_MEAS:Gcell ARFCN 523 RSSI -1758->BSICver
Day 10483 19:19:44.646 [73] 0x1FEB Extended Debug Message
srchcmmeas.c 7841 H CM_MEAS:Gcell ARFCN 534 RSSI -1759->BSICver
…
Day 10483 19:19:45.101 [A1] 0x4000 WCDMA Compressed Mode GSM Measurements
Num Entities = 23
Entity[0]:
ID: 0 => GSM_RSSI_MEASUREMENTS
GAP Start CFN = 96
GAP Start FN = 3
GAP Start Offset = 3656
Number of RSSI Bursts = 6
Burst[0]:
ARFCN = 18
Burst Start GSM Offset = 4041
LNA Gain State = 1
RSSI = -112.19 dBm
Band = 0 (900/1800)
Burst[1]:
ARFCN = 570
Burst Start GSM Offset = 4637
LNA Gain State = 1
RSSI = -109.63 dBm
Band = 0 (900/1800)
Burst[2]:
ARFCN = 16
Burst Start GSM Offset = 5233
LNA Gain State = 1
RSSI = -112.44 dBm
Band = 0 (900/1800)
Burst[3]:
ARFCN = 8
Burst Start GSM Offset = 829
LNA Gain State = 1
RSSI = -113.69 dBm
Band = 0 (900/1800)
Burst[4]:
ARFCN = 20
Burst Start GSM Offset = 1425
LNA Gain State = 1
RSSI = -112.56 dBm
Band = 0 (900/1800)
Burst[5]:
ARFCN = 19
Burst Start GSM Offset = 2021
LNA Gain State = 1
RSSI = -112.94 dBm
Band = 0 (900/1800)
Entity[1]:
ID: 3 => GSM_CARRIERS
Number of Carriers = 9
Number of Frames = 0
Number of RSSI Samples = 0
Carrier[0]:
ARFCN = 570
RSSI = -110.44 dBm
State = SRCH_GSM_MEAS_RSSI
Band = 0 (900/1800)
Carrier[1]:
ARFCN = 534
RSSI = -110.63 dBm
State = SRCH_GSM_MEAS_RSSI
Band = 0 (900/1800)
Carrier[2]:
ARFCN = 523
RSSI = -110.63 dBm
State = SRCH_GSM_MEAS_RSSI
Band = 0 (900/1800)
Carrier[3]:
ARFCN = 19
RSSI = -111.88 dBm
State = SRCH_GSM_MEAS_RSSI
Band = 0 (900/1800)
Carrier[4]:
…
 解码FCCh
Entity[8]:
ID: 1 => GSM_FCCH_DETECTION
GAP Start CFN = 118
GAP Start FN = 0
GAP Start Offset = 1989
ARFCN = 523
ACQ Start QS Offset = 2525
Number of FCCH Tone Det = 0
FCCH Tone QS Offset = 63756
SNR Estimate = N/A
Band = 0 (900/1800)
Entity[9]:
ID: 0 => GSM_RSSI_MEASUREMENTS
GAP Start CFN = 120
GAP Start FN = 4
GAP Start Offset = 3656
Number of RSSI Bursts = 6
Burst[0]:
ARFCN = 8
Burst Start GSM Offset = 4041
LNA Gain State = 1
RSSI = -113.94 dBm
Band = 0 (900/1800)
Burst[1]:
ARFCN = 20
Burst Start GSM Offset = 4637
LNA Gain State = 1
RSSI = -113.13 dBm
Band = 0 (900/1800)
Burst[2]:
ARFCN = 19
Burst Start GSM Offset = 5233
LNA Gain State = 1
RSSI = -112.13 dBm
Band = 0 (900/1800)
Burst[3]:
ARFCN = 22
Burst Start GSM Offset = 829
LNA Gain State = 1
RSSI = -112.44 dBm
Band = 0 (900/1800)
Burst[4]:
ARFCN = 523
Burst Start GSM Offset = 1425
LNA Gain State = 1
RSSI = -110.38 dBm
Band = 0 (900/1800)
Burst[5]:
ARFCN = 534
Burst Start GSM Offset = 2021
LNA Gain State = 1
RSSI = -110.69 dBm
Band = 0 (900/1800)
…
 解码SCh
Entity[3]:
ID: 2 => GSM_SCH_DECODE
GAP Start CFN = 182
GAP Start FN = 31
GAP Start Offset = 322
ARFCN = 570
GSM FN SCH Decoded = 31
SCH Burst QS Offset = 1992
SCH Decoded FN = 21
BSIC Verification = 0
: Cell Not Yet Identified
: CRC Failed
SCH Decoded Data = 0x14F80400
BSIC: <0,0>
HFN: 12904
T1: 9
T2: 30
T3’: 0
RSSI = -89.25 dBm
Band = 0 (900/1800)

Entity[7]:
ID: 2 => GSM_SCH_DECODE
GAP Start CFN = 206
GAP Start FN = 32
GAP Start Offset = 322
ARFCN = 570
GSM FN SCH Decoded = 32
SCH Burst QS Offset = 1992
SCH Decoded FN = 22
BSIC Verification = 8
: Cell Not Yet Identified
: CRC Passed
SCH Decoded Data = 0x0158A803
BSIC: <0,0>
HFN: 2483048
T1: 1872
T2: 22
T3’: 1
RSSI = -86.44 dBm
Band = 0 (900/1800)
…
 BSIC再确认
Entity[10]:
ID: 3 => GSM_CARRIERS
Number of Carriers = 9
Number of Frames = 0
Number of RSSI Samples = 0
Carrier[0]:
ARFCN = 570
RSSI = -93.38 dBm
State = SRCH_GSM_BSIC_RECONF
Band = 0 (900/1800)
Carrier[1]:
ARFCN = 534
RSSI = -110.81 dBm
State = SRCH_GSM_MEAS_RSSI
Band = 0 (900/1800)
Carrier[2]:
ARFCN = 523
RSSI = -111.25 dBm
State = SRCH_GSM_MEAS_RSSI
Band = 0 (900/1800)
Carrier[3]:
ARFCN = 19
RSSI = -113.13 dBm
State = SRCH_GSM_MEAS_RSSI
Band = 0 (900/1800)
Carrier[4]:
ARFCN = 20
RSSI = -113.56 dBm
State = SRCH_GSM_MEAS_RSSI
Band = 0 (900/1800)
2008 Sep 18 19:21:08.164 [04] 0x1FEB Extended Debug Message
srchcmmeas.c 9472 H CM_MEAS:RSSI SCH decode -1258 dBmx16 (-78 dBm)
2008 Sep 18 19:21:08.164 [04] 0x1FEB Extended Debug Message
srchcmmeas.c 9811 H CM_MEAS:ARFCN 570 (0,0)->BSIC_RECONF
2008 Sep 18 19:21:08.445 [07] 0x1FEB Extended Debug Message
srchcmmeas.c 9472 H CM_MEAS:RSSI SCH decode -1257 dBmx16 (-78 dBm)
2008 Sep 18 19:21:08.166 [04] 0x1FEB Extended Debug Message
l1cmmeas.c 5759 H BSIC Found [ARFCN: 570, f(0/0)] Cell_id:7 RSSI:-1260
Day 10483 19:21:08.169 [14] 0x1FEB Extended Debug Message
rrcirat.c 5693 H Validate Inter-RAT Measured Results
Day 10483 19:21:08.169 [14] 0x1FEB Extended Debug Message
rrcirat.c 5505 H Inter-RAT Event Triggered Report
Day 10483 19:21:08.169 [14] 0x1FEB Extended Debug Message
l1cmmeas.c 3026 H [MeasId=3] 3A Event Proc, fc(1)
Day 10483 19:21:08.170 [14] 0x1FEB Extended Debug Message
rrcirat.c 5511 H EVENT 3A reported
2008 Sep 18 19:21:08.171 [04] 0x1FEB Extended Debug Message
rrcirat.c 5220 H Verified BSIC is 7
 发送测量报告信息
Day 10483 19:21:08.172 [14] 0x412F WCDMA Signaling Messages – UL_DCCH
Channel Type = UL_DCCH, Radio Bearer ID = 2, Message Length = 12
Interpreted PDU:
value UL-DCCH-Message ::=
integrityCheckInfo
messageAuthenticationCode '10000011 00001100 11010011 10100100’B,
rrc-MessageSequenceNumber 12
message measurementReport :
measurementIdentity 3,
measuredResults interRATMeasuredResultsList :
gsm :
gsm-CarrierRSSI '100001’B,
bsicReported verifiedBSIC : 7
eventResults interRATEventResults :
eventID e3a,
cellToReportList
bsicReported verifiedBSIC : 7
 发送切换命令
Day 10483 19:21:08.571 [3C] 0x412F WCDMA Signaling Messages – DL_DCCH
Channel Type = DL_DCCH, Radio Bearer ID = 2, Message Length = 30
Interpreted PDU:
value DL-DCCH-Message ::=
integrityCheckInfo
messageAuthenticationCode '01001110 10111100 00100100 01010101’B,
rrc-MessageSequenceNumber 12
message handoverFromUTRANCommand-GSM : r3 :
handoverFromUTRANCommand-GSM-r3
rrc-TransactionIdentifier 0,
toHandoverRAB-Info
Day 10483 19:21:08.574 [3D] 0x1FEB Extended Debug Message
rrciho.c 4012 H Rvd Handover From UTRAN Command GSM
Day 10483 19:21:08.576 [3D] 0x1FEB Extended Debug Message
rrciho.c 968 H RRC_CHANGE_MODE_REQ sent to MCM
Day 10483 19:21:08.576 [3D] 0x1FEB Extended Debug Message
rrcmcm.c 1203 H CPHY_SUSPEND_WCDMA_MODE_REQ sent to L1
Day 10483 19:21:08.578 [3D] 0x1FEB Extended Debug Message
l1cmmgr.c 8026 H L1CMMGR:Suspend rece CFN 61 st 256 PendSeqNum 2
2008 Sep 18 19:21:08.584 [09] 0x1FEB Extended Debug Message
l1cmmgr.c 3436 H L1CMMGR:CM suspend time CFN 62
Day 10483 19:21:08.596 [3F] 0x1FEB Extended Debug Message
wl1m.c 6721 H mDSP received go_to_sleep cmd
Day 10483 19:21:08.597 [3F] 0x1FEB Extended Debug Message
l1msetup.c 4039 E L1 state now SUSPENDED
Day 10483 19:21:08.598 [3F] 0x7001 UMTS Call Flow Analysis
Type # Dir SRC/DST MESSAGE
---- — --- ------------ -------
Decoded Message:
----------------
Warning: Calculated Packet Length(1562) exceeds given buffer length (260)
MSG_SET: MS_RRC_RR (0x62)
MSG_ID: RR_INTERRAT_HANDOVER_REQ (0x01)
MSG_LEN: 1552 bytes
frequency_band: RRC_RR_DCS_1800
cipher_enabled: TRUE
irat_meas_data: Number of Cells = 1:
CELL #00:
arfcn:
arfcn: 570
band: SYS_BAND_DCS_1800 bsic=(0,22) fn_off=1224746296 q_off=8 rssi=15.688
Day 10483 19:21:08.598 [3F] 0x1FEB Extended Debug Message
rrciho.c 773 H RR_INTERRAT_HANDOVER_REQ sent to GSM RR
Day 10483 19:21:08.599 [40] 0x1FEB Extended Debug Message
rr_inter_ho.c 1945 H InterRAT WCDMA To GSM HandoverCommand received
Day 10483 19:21:08.629 [43] 0x1FEB Extended Debug Message
l1_null_if.c 940 H HO command ARFCN=570, BCC=0, NCC=0
Day 10483 19:21:08.629 [43] 0x1FEB Extended Debug Message
l1_null_if.c 948 H ARFCN 570 found
Day 10483 19:21:08.629 [43] 0x1FEB Extended Debug Message
l1_null_if.c 957 H BSIC found, BCC=0, NCC=0
Day 10483 19:21:08.630 [43] 0x1FEB Extended Debug Message
l1_null_if.c 355 H Performing Compressed Mode Handover
Day 10483 19:21:08.634 [43] 0x1FEB Extended Debug Message
l1_null_if.c 1214 H W2G HO TA = 0
Day 10483 19:21:08.634 [43] 0x1FEB Extended Debug Message
l1_null_if.c 1228 H Tgt cell: BSIC=0x0 Qlag=1496 FNlag=276237
Day 10483 19:21:08.634 [43] 0x1FEB Extended Debug Message
l1_null_if.c 1288 H Interrat Handover success
Day 10483 19:21:08.730 [4D] 0x1FEB Extended Debug Message
rr_inter_ho.c 2891 H Stopping T3124
Day 10483 19:21:08.731 [4D] 0x1FEB Extended Debug Message
rr_inter_ho.c 330 H OMsg(NW,W2G_HANDOVER_COMPLETE(0)
Day 10483 19:21:08.850 [59] 0x1FEB Extended Debug Message
rrciho.c 4638 H Inter-RAT HO CNF received from RR
六、 系统间切换（2G->3G）
1压缩模式介绍

1. 对于多模终端来说，网络通过参数Qsearch_C控制其他接入技术的小区的测量和认证,该参数承载在SACCH上，若Qsearch_C未收到，则使用BCCH上的Qsearch_C_Initial.当服务小区的RXLEV低于或高于Qsearch_C时，这些任务是否会被启动；
2. UE将使用搜索帧来完成这些测量，但不做BSIC解码。假如带有参数3G_SEARCH_PRIO，UE将每13s用25个搜索帧；
3. UE在最近的5s内要上报一个新的最好的UTRAN小区，该小区必须在邻小区列表中，且同时没有新的信号质量好的GSM小区；
4. 允许的报告时间随着UTRAN频率的增加而增加，每个频率增加5s，同一频率下的小区不会增加允许报告时间；
5. 多模终端最多可以监测64个其他接入技术的小区。对于FDD小区，最多可以有3个FDD频率，每个频率最多32个小区；
   G->W handover的参数：
   1.Qsearch_C：从测量信息中获得，UE的服务小区的RXLEV低于或高于该门限值，将执行系统间测量；
   2.Qsearch_C_initial：如果PBCCH不存在，则从SI2quater读取；否则从PSI3quater读取。假如在专用模式下未收到Qsearch_C，则Qsearch_C_initial将被使用；
   3.3G_SEARCH_PRIO：标示3G小区是否被搜索，默认为yes；
   4.FDD_MULTIRAT_REPORTING：在BCCH上传输，该值标示最好的FDD小区的数量，取值范围为0-3；
   5.FDD_REP_QUANT：上报UTRAN FDD小区的质量，0为RSCP,1为Ec/No。
   切换成功流程图如下：

切换失败流程图如下：

切换取消流程图如下：

G->W Handover sample：

1. This is the starting point of G→W handover

2. At the starting of G→W handover, RR sends DL_SUSPEND_REQ to L2 and waits for DL_SUSPEND_CNF.

3. After receiving DL_SUSPEND_CNF, RR sends MPH_STOP_MODE_REQ to L1 and waits for MPH_STOP_GSM_MODE_CNF.

4. After receiving MPH_STOP_GSM_MODE_CNF, RR sends
   RRC_INTERRAT_HANDOVER_REQ then waits for
   RRC_INTERRAT_HANDOVER_CNF.

5. After receiving RRC_INTERAT_HANDOVER_CNF, forward the buffered NAS message to RRC (if any), then wait for RR_STOP_GSM_MODE_REQ.

6. After receiving RR_STOP_GSM_MODE_REQ, RR release L2, send GRR_MAC_NO_SERVICE.

7. Finally, reset relevant submodules. and clean up.

高通modem log分析基础相关推荐

1. Android 功耗（3）---高通功耗问题分析方法

   高通功耗问题分析 高通官方提供了一篇文档extensive_power_debug_guide_(simplified_chinese功耗调试).pdf  用来分析中断功耗问题. 本文结合该文档简单的 ...

2. 高通功耗问题分析手段

   高通官方提供了一篇文档extensive_power_debug_guide_(simplified_chinese功耗调试).pdf  用来分析中断功耗问题. 本文结合该文档简单的总结了AP端功耗问 ...

3. 高通android逆向分析,浅谈Android高通(Qualcomm)和联发科（MTK）平台

   一款CPU好不好是要从多个方面考虑的,并不是说简简单单看一个主频.几个核心数就完了,更重要的是它的综合实力到底有多强,这里面当然也会牵扯到价格问题,性能相似当然是便宜的获胜,这是毋庸置疑的. 事实上, ...

4. 高通modem启动过程_苹果首次承认正自研基带芯片，高通要被抛弃了？

   以苹果技术实力,摆脱依赖,只是时间的问题." 作者 | 肖漫 苹果和高通的基带芯片故事续集,又开始上映了. 据彭博社 12 月 10 日报道,苹果公司芯片负责人对员工表示,苹果已开始为未来的 ...

5. 高通马达代码分析 msm_actuator

   1.概述 actuator驱动信息文件是指vendor目录下的$ActuatorName_actuator.h文件(如gigaset_actuator.h).此信息文件就是一个actuator_dri ...

6. 高通modem启动过程_高通modem代码中的NV读写

   NVRAM非易失性随机访问存储器(Non-Volatile Random Access Memory) ,是指断电后仍能保持数据的一种RAM.在手机中,NVRAM位于flash芯片中. 手机上所谓的N ...

7. 高通MSM8909 CAMERA TUNING 基础 ------ super Good

   come from : http://blog.chinaunix.net/uid-7213935-id-5750641.html 一． 重要概念: 1．色温 所谓色温,简而言之,就是定量地以开尔文温 ...

8. 高通camera驱动分析

   点击打开链接 1.Sensor slave配置 结构体msm_camera_sensor_slave_info定义在media/msm_cam_sensor.h中: struct msm_camera ...

9. 高通modem和linux区别,qualcomm qmi（modem-linux通信）

   *参考文档:     搜索modem qmi       qmi-qualcomm *    http://wenku.baidu.com/link?url=WtNOI1ojokVsXT3LiWmCR ...

10. 手机modem开发（3）---Android Modem log分析

    Modem相关问题,如何查看mdlog的整理 1.掉卡问题: 搜索MSG_ID_SIM_ERROR_IND,如果有这个错误肯定是掉卡 在这个ID的结构体里会有具体掉卡的原因SIM_ACCESS_ERR ...

最新文章

1. 去大厂面试，说了没高并发经验，面试官还是抓着这个问！
2. 信号灯文件锁linux线程,linux——线程同步（互斥量、条件变量、信号灯、文件锁）...
3. __attribute__((always_inline))
4. Java Web实现信息管理
5. java 中 的 =,java 中的 |=、=、^=
6. 数据结构期末复习之排序
7. Android自定义滑动进度条,Android自定义View实现圆形水波进度条
8. SQL Server 2012：SQL Server体系结构
9. 如何用U盘安装Windows操作系统
10. Vmware虚拟机win10详细安装之自定义安装
11. 大中型企业建立IT服务台的意义及实践
12. 多传感器融合算法，单目测距、基于双目，长焦短焦，图像拼接，环视等
13. 通用路由封装协议--GRE的简单配置
14. G - Tiling
15. 手把手教你做树莓派魔镜-MagicMirror（一）-准备工作
16. 视频加密后的录屏行为怎么做防范？
17. 校园版网络教学平台搭建方案（学生端）
18. VS2015调试dump文件时提示未找到xxx.exe或xxx.dll
19. 武汉纺织大学计算机专业考研985难吗,武汉纺织大学考研难吗
20. 64层的汉诺塔问题究竟需要几步才能完成？

热门文章

1. Word入门教程之编辑脚注和尾注(转)
2. Git学习8 Git分支操作
3. ubuntu测试网络速度
4. 说白了那就是在一个池里放些亲亲鱼
5. war3鸿蒙大陆攻略,【魔兽rpg地图失落大陆攻略汇总】
6. MATLAB基础语法之蒙特卡罗模拟_1（布丰投针）
7. iOS NSLayoutConstraint priority
8. python 版权保护,python爬虫篇4——爬取专利著作权信息
9. 计算机的组装怎么学,如何学习组装电脑
10. 对于ros中launch文件的解读