作为笔记
1.涉及的Packets
PSS主同步信号数据捕获 (Initial Acquisition)
信令 | 说明 |
[0xB113][LL1] LTE LL1 PSS Results | 主同步信号结果,返回周围小区 接收功率 及 小区频点,获取子帧同步(时隙同步)以及小区索引 |
[0xB115][LL1] LTE LL1 SSS Results | 辅同步信号结果,确定信息在哪个子帧上,同时能获得在哪个组 (0 - 167共68个组) |
[0xB176][ML1] LTE Initial Acquisition Results | LTE初始化结果采集 |
随机接入信道过程 (RACH Procedure)
信令 | 说明 |
[0xB0C0][RRC Layer] LTE RRC OTA Packet | 获取手机随机接入信道过程中配置的参数信息 |
[0xB061][Mac Layer] LTE MAC Rach Trigger | 获得随机接入RACH的配置信息 |
[0xB167][ML1] LTE Random Access Request (MSG1) Report | 获取MSG1 消息的相关信息(起始帧号),由手机发送给网络 |
[0xB168][ML1] LTE Random Access Response (MSG2) Report | 获取MSG2 消息的相关信息,由网络发送给手机 |
[0xB169][ML1] LTE UE Identification Message (MSG3) Report | 获取MSG3 消息的相关信息,由手机发送给网络 |
[0xB16B][ML1] LTE PDCCH-PHICH Indication Report | 发送MSG3后,网络通过物理信道响应MSG3,由网络发送给手机 |
[0xB16A][ML1] LTE Contention Resolution Message (MSG4) Report | 竞争解决结果响应,由网络发送给手机 |
SRB1消息建立 (SRB1 Establishment)
信令 | 说明 |
[0xB0C0][RRC Layer] LTE RRC OTA Packet | |
[0xB060][MAC Layer] LTE MAC Configuration | 查看LC ID (SRB1 和 LC ID 1 (逻辑信道ID 1)是一一对应的。) |
[0xB081][RLC Layer] LTE RLC DL Config Log packet | 查看RB 索引(RB Cfg Idx) |
上行数据传输 (UL Data Transmission)
信令 | 说明 |
[0xB092][RLC Layer] LTE RLC UL AM All PDU | 查看上行RLC 信息,帧号、子帧号、PDU多大 |
[0xB064][MAC Layer] LTE MAC UL Transport Block | |
[0xB130][LL1 Layer] LTE LL1 PDCCH Decoding Result | PDCCH信息解调结果可以知道是DCI0上行信息 还是DCI1下行信息 |
[0xB16C][ML1] LTE DCI Information Report | DCI信息结果 |
[0xB172][ML1] LTE Uplink PKT Build Indication | 上行传输信息 |
[0xB16D][ML1] LTE GM TX Report | 物理层的TX 报告 |
[0xB146][LL1 Layer] LTE LL1 UL AGC Tx Report |
LTE Access Stratum Log Analysis
PSS主同步信号数据捕获 (Initial Acquisition)
① [0xB113] LTE LL1 PSS Results : 主同步信号结果,返回周围小区 接收功率 及 小区频点
PSS的全称是Primary Synchronization Signal,即主同步信号,用于传输组内ID即N(2)_ID值。
通过PSS 就能够找到子帧同步(时隙同步)以及小区索引。
PSS Peak Value:获取小区的接收功率
Peak Position: 小区频点
PSS Indicies:获得小区索引
2019 Mar 7 06:23:53.237 [E3] 0xB113 LTE LL1 PSS Results
Version = 22
Number of Half Frames = 2
Sub-frame Number = 3 # 小区子帧索引
System Frame Number = 651 # 小区主帧索引
Number of PSS Records = 7 # 搜索到的下去刷领
PSS Records
-------------------------------
| |PSS | | |
| |Peak | | |
| |Value |Peak |PSS |
|# |(dB) |Position|Indicies|
-------------------------------
| 0| 24.023| 8383| 2|
| 1| 14.370| 8382| 2|
| 2| 11.681| 8384| 2|
| 3| 7.932| 8314| 2|
| 4| 7.888| 8452| 2|
| 5| 7.150| 8442| 2|
| 6| 6.901| 8383| 0|
② [0xB115] LTE LL1 SSS Results : 辅同步信号结果,
SSS的全称是Secondary Synchronization Signal,即辅同步信号,用于传输组ID即N(1)_ID值。
通过SSS 能够确定信息在哪个子帧上,同时能获得在哪个组 (0 - 167共68个组)
结合前面PSS 获取到的小区索引,就能够计算出真正的物理小区ID (此处为 422)
2019 Mar 7 06:24:02.301 [9F] 0xB115 LTE LL1 SSS Results
Version = 22
Number of Barred Cells = 0
Number of Detected Cells = 1 # 检测到小区的数量
Detected Cells
----------------------------------------------------------------------------------------------------
| |SSS | | | | | | | |Min |Max |
| |Peak |Cell| |Half Frame| |Rx0 LNA |Rx1 LNA | |Frame |Frame |
|# |Value|ID |CP |Hypothesis|EARFCN|Offset |Offset |Frame Boundary |Boundary|Boundary|
----------------------------------------------------------------------------------------------------
| 0| 3589| 422| Normal| Mid| 39148| 0.000| 0.000| 310136411| 153584| 153616|
③ [0xB176] LTE Initial Acquisition Results:LTE初始化结果采集
2019 Mar 7 06:32:56.264 [76] 0xB176 LTE Initial Acquisition Results
Version = 16
E-ARFCN = 38950 # 频点
Band = 40 # band 41 (这个 band 需要 +1)
Duplex Mode = TDD # TDD 模式
Result = Success # 成功捕获
Min Search Half Frames = 1
Min Search Half Frames Early Abort = 1
Max Search Half Frames = 4
Max PBCH Frames = 20
Number of Blocked Cells = 0
Number PBCH Decode Attemp Cells = 1
Number of Search Results = 1
# Physical Cell ID :物理小区ID 422
Search Results
----------------------------------------------------------------------
| | | | | |Frequency|PSS | |
| |Frame |Sample|Physical| |Offset |Correlation|SSS Power|
|# |Offset |Offset|Cell ID |CP |(Hz) |Result |Value |
----------------------------------------------------------------------
| 0|Unknown|215152| 422| Normal| -38| 0| 0.000211|
# 在捕获 PSS 和 SSS 后,就要解调 PBCH 信息
# PBCH 信息是使用 QPSK 方式调制的 MIB 信息 (所谓MIB的索引号:表示在某一固定配置时(子载波间隔+频点),PBCH在半帧内,按照slot递增出现的编号)
# MIB 信息包括: 天线个数(Number of Tx Antennas),系统帧号,带宽 等信息
PBCH Decode Attempt Cells
----------------------------------------------------------------------------
| | | | |Updated | |Number | | |
| | | | |Frequency| |of | |Number |
| |Frame |Sample|MIB |Offset |Physical|Decode |Decode |of Tx |
|# |Offset |Offset|Payload |(Hz) |Cell ID |Attempts|Result |Antennas|
----------------------------------------------------------------------------
| 0|Unknown|215152|0xAABC0000| 0| 422| 1|Success| 1|
2.随机接入信道过程 (RACH Procedure)
①[0xB0C0] [RRC Layer] LTE RRC OTA Packet:
随机接入过程是由MAC层触发的
(1) 0xB0C0 LTE RRC OTA Packet – BCCH_DL_SCH / SystemInformation : 获取手机随机接入信道过程中配置的参数信息
RACH 参数保存在 SystemInformation 中
2019 Mar 7 06:23:52.784 [14] 0xB0C0 LTE RRC OTA Packet -- BCCH_DL_SCH / SystemInformation
Pkt Version = 15
RRC Release Number.Major.minor = 13.2.1
Radio Bearer ID = 0, Physical Cell ID = 422
Freq = 39148
SysFrameNum = 608, SubFrameNum = 4
PDU Number = BCCH_DL_SCH Message, Msg Length = 49
SIB Mask in SI = 0x0C
Interpreted PDU:
value BCCH-DL-SCH-Message ::=
{
message c1 : systemInformation :
{
criticalExtensions systemInformation-r8 :
{
sib-TypeAndInfo
{
sib2 :
{
radioResourceConfigCommon
{
rach-ConfigCommon
{
preambleInfo # RACH preamble 信息
{
numberOfRA-Preambles n52, # 有52个preamble组 ,协议中最多可以有64个preamble
preamblesGroupAConfig
{
sizeOfRA-PreamblesGroupA n28,
messageSizeGroupA b56,
messagePowerOffsetGroupB dB10
}
},
powerRampingParameters # 当手机收不到preamble 时候,基站会重发一个preamble,两个preamble的功率差
{
powerRampingStep dB2, # 再次发送时,增加 2 dB
preambleInitialReceivedTargetPower dBm-104 # 初始上行功率 -104dBm
},
ra-SupervisionInfo # 当preamble 接收失败后,可以重新发送的次数
{
preambleTransMax n10, # 可以发送 10 次
ra-ResponseWindowSize sf10, # 当发送preamble后,需要再 10个子帧 内收取
mac-ContentionResolutionTimer sf64 # MSG 3 发送后等64个子帧 后收取 MSG 4
},
maxHARQ-Msg3Tx 5 # 当MSG 4 接收失败后,能够 重新 发送 5 次 MSG3
},
bcch-Config
{
modificationPeriodCoeff n2
},
pcch-Config
{
defaultPagingCycle rf64, # 每个paging 有 64个 子帧
nB oneT
},
prach-Config
{
rootSequenceIndex 702,
prach-ConfigInfo
{
prach-ConfigIndex 3, # PRACH 信道索引为3 (物理随机接入信道: 是UE一开始发起呼叫时的接入信道,UE接收到FPACH响应消息后,会根据Node B指示的信息在PRACH信道发送RRC Connection Request消息,进行RRC连接的建立。)
highSpeedFlag FALSE,
zeroCorrelationZoneConfig 1,
prach-FreqOffset 12 # PRACH 频率偏置,确定在频率上的位置
}
},
pdsch-ConfigCommon
{
referenceSignalPower 15,
p-b 1
},
pusch-ConfigCommon
{
pusch-ConfigBasic
{
n-SB 4,
hoppingMode interSubFrame,
pusch-HoppingOffset 22,
enable64QAM TRUE
},
ul-ReferenceSignalsPUSCH
{
groupHoppingEnabled FALSE,
groupAssignmentPUSCH 0,
sequenceHoppingEnabled FALSE,
cyclicShift 0
}
},
pucch-ConfigCommon
{
deltaPUCCH-Shift ds1,
nRB-CQI 8,
nCS-AN 0,
n1PUCCH-AN 108
},
soundingRS-UL-ConfigCommon setup :
{
srs-BandwidthConfig bw0,
srs-SubframeConfig sc0,
ackNackSRS-SimultaneousTransmission TRUE,
srs-MaxUpPts true
},
uplinkPowerControlCommon
{
p0-NominalPUSCH -90,
alpha al08,
p0-NominalPUCCH -115,
deltaFList-PUCCH
{
deltaF-PUCCH-Format1 deltaF0,
deltaF-PUCCH-Format1b deltaF3,
deltaF-PUCCH-Format2 deltaF1,
deltaF-PUCCH-Format2a deltaF2,
deltaF-PUCCH-Format2b deltaF2
},
deltaPreambleMsg3 4
},
ul-CyclicPrefixLength len1,
pusch-ConfigCommon-v1270
{
enable64QAM-v1270 true
}
},
ue-TimersAndConstants
{
t300 ms1000,
t301 ms600,
t310 ms1000,
n310 n20,
t311 ms1000,
n311 n1
},
freqInfo
{
additionalSpectrumEmission 1
},
timeAlignmentTimerCommon sf10240
},
sib3 :
{
cellReselectionInfoCommon
{
q-Hyst dB4
},
cellReselectionServingFreqInfo
{
s-NonIntraSearch 10,
threshServingLow 2,
cellReselectionPriority 7
},
intraFreqCellReselectionInfo
{
q-RxLevMin -60,
s-IntraSearch 19,
presenceAntennaPort1 FALSE,
neighCellConfig '01'B,
t-ReselectionEUTRA 1,
t-ReselectionEUTRA-SF
{
sf-Medium lDot0,
sf-High oDot75
}
},
s-IntraSearch-v920
{
s-IntraSearchP-r9 19,
s-IntraSearchQ-r9 5
},
s-NonIntraSearch-v920
{
s-NonIntraSearchP-r9 10,
s-NonIntraSearchQ-r9 4
},
q-QualMin-r9 -18
}
}
}
}
}
②[0xB061][Mac Layer] LTE MAC Rach Trigger: 获得随机接入RACH的配置信息
Rach reason 数据连接的原因: 包括5种连接原因
初次连接请求(Connection Request)、上行数据传输(UL data arrival)、下行数据传输(DL data arrival)、
无线电链路故障(Radio link failure)、网络切换(Handover)
2019 Mar 7 06:25:43.631 [0C] 0xB061 LTE MAC Rach Trigger
Version = 1
Number of SubPackets = 2
SubPacket ID = 3
SubPacket - ( RACH Config Subpacket )
Version = 4
SubPacket Size = 32
RACH Config V4
Sub Id = 0
Num Active Cell = 1
Cell Rach Info[0]
Cell Id = 0
Preamble initial power = -104 dB # 初始化功率
Power ramping step = 2 dB # 每个功率的步长
RA index1 = 28 # index1 有28个preamble
RA index2 = 52 # index1 有52个preamble
Preamble trans max = 10
Contention resolution timer = 64 ms
Message size Group_A = 7
Power offset Group_B = -10 dB
PMax = 23 dBm
Delta preamble Msg3 = 8
PRACH config = 3
CS zone length = 1
Root seq index = 702
PRACH Freq Offset = 12
Preamble Format = 0
High speed flag = 0
Max retx Msg3 = 5
RA rsp win size = 10 ms
SubPacket ID = 5
SubPacket - ( RACH Reason Subpacket )
Version = 2
Subpacket Size = 24 bytes
RACH Reason V2
Sub Id = 0
Cell Id = 0
Rach reason = HO # 数据连接的原因
RACH Contention = Contention Free RACH procedure # 基于非竞争的 RACH 随机接入过程 , 如果是Contention based :基于竞争的RACH
Preamble = 63
Preamble RA mask = 0x0
Group chosen = Group A (0)
Radio condn = 139 dB
CRNTI = 0xD37A
③[0xB167][ML1] LTE Random Access Request (MSG1) Report:获取MSG1 消息的相关信息(起始帧号)
MSG1 消息是在 PRACH 信道(物理随机接入信道)上发送的,从手机往外发送给网络
2019 Mar 7 06:23:52.897 [89] 0xB167 LTE Random Access Request (MSG1) Report
Version = 25
Cell Index = 0
Preamble Sequence = 25 ## preamble ID
Physical Root Index = 331
Cyclic Shift = 325
PRACH Tx Power = 15 dBm ## 发送功率是 -95 dBm
Beta PRACH = 242
PRACH Frequency Offset = 12
Preamble Format = 0
Duplex Mode = TDD
f_ra = 0
t_0_ra = Resource reoccurring in all radio frames
t_1_ra = RA resources in first half frame
t_2_ra = 0
Density Per 10 ms = 1
PRACH Timing SFN = 620 ## 发送的帧号为 620帧
PRACH Timing Sub-fn = 2 ## 子帧号为 第2帧
PRACH Window Start SFN = 620 ## 起始帧号为 620帧
RACH Window Start Sub-fn = 5 ## 起始子帧为 第4帧
PRACH Window End SFN = 621 ## 起始帧号为 621帧
PRACH Window End Sub-fn = 5 ## 结束子帧为 5帧 , 刚好10个子帧,接收MSG 2 的消息
RA RNTI = 3 ## 手机发送MSG1 以后,要接收MSG2 跟 RA RNIT 相关
PRACH Actual Tx Power = 15
PRACH RX Freq Error = -1143
④[0xB168] LTE Random Access Response (MSG2) Report:获取MSG2 消息的相关信息
当从手机发送MSG1消息给网络后,网络收到MSG1消息,就会发送给MSG2消息给手机。 从网络发送到手机
2019 Mar 7 06:23:52.906 [7D] 0xB168 LTE Random Access Response (MSG2) Report
Version = 24
Cell Index = 0
RACH Procedure Type = Contention Based ## 基于竞争的 RACH 接入方式
RACH Procedure Mode = Initial Access
RNTI Type = TEMP_C_RNTI ## Temp RNTI assigned by network,后续会转换为C_INIT
RNTI Value = 60235
Timing Advance Included = Included
SFN = 620
Sub-fn = 6
Timing Advance = 1 ## 在RAR中接收的定时信息 Received TA value in RAR
⑤[0xB169] LTE UE Identification Message (MSG3) Report
手机收到MSG2 后,就可以发送MSG3到网络端
2019 Mar 7 06:23:52.906 [7D] 0xB169 LTE UE Identification Message (MSG3) Report
Version = 24
Cell Index = 0
TPC = 6
MCS = 0
RIV = 284
CQI = Disabled
UL Delay = Don't Delay
SFN = 621 # 帧号 621帧
Sub-fn = 2 # 子帧号: 2号子帧
Hopping Flag = Disabled
Starting Resource Block = 84
Num Resource Blocks = 3
Transport Block Size Index = 0
Modulation Type = QPSK
Redundancy Version Index = 0
HARQ ID = 0
⑥0xB16B LTE PDCCH-PHICH Indication Report:网络通过物理信道响应MSG3
从下面看到 ACK 则说明网络正常收到了 MSG3
2019 Mar 7 06:23:52.937 [45] 0xB16B LTE PDCCH-PHICH Indication Report
Version = 25
Duplex Mode = TDD
UL DL Config = 2
Number of Records = 25
Info Records
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| | | | | |PHICH |PDCCH Info |
| |Num |Num |PDCCH |PDCCH | | | | |PHICH|Serv | |PDCCH | | | | | | | | | | | |Fake |
| |PDCCH |PHICH |Timing|Timing|Cell |PHICH |PHICH 1 |PHICH|1 |Cell | |Payload|Aggregation|Search|SPS Grant |New |Num DL|S0 |S1 |S2 |S3 | | |Pdcch|
|# |Results|Results|SFN |Sub-fn|Index|Included|Included|Value|Value|Index|RNTI Type |Size |Level |Space |Type |DL Tx|Trblks|Index|Index|Index|Index|Msleep|Usleep|Sf |
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| 0| 0| 0| 620| 9| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 1| 0| 0| 621| 0| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 2| 0| 0| 621| 1| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 3| 0| 0| 621| 3| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 4| 0| 0| 621| 4| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 5| 0| 0| 621| 5| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 6| 0| 0| 621| 6| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 7| 0| 1| 621| 8| 0| Yes| No| ACK| | | | | | | | | | | | | | 0| 0| 0|
| 8| 1| 0| 621| 9| | | | | | 0| TEMP_C_RNTI| 47| Agg8|Common| |false| 1| 0| 0| 0| 0| 0| 0| 0|
| 9| 0| 0| 622| 0| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 10| 0| 0| 622| 1| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 11| 0| 0| 622| 3| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 12| 0| 0| 622| 4| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 13| 0| 0| 622| 5| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 14| 0| 0| 622| 6| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 15| 0| 0| 622| 8| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 16| 0| 0| 622| 9| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 17| 0| 0| 623| 0| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 18| 0| 0| 623| 1| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 19| 1| 0| 623| 3| | | | | | 0| C_RNTI| 47| Agg8| UE| | true| 1| 0| 0| 0| 0| 0| 0| 0|
| 20| 0| 0| 623| 4| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 21| 0| 0| 623| 5| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 22| 0| 0| 623| 6| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 23| 0| 0| 623| 8| | | | | | | | | | | | | | | | | | 0| 0| 0|
| 24| 0| 0| 623| 9| | | | | | | | | | | | | | | | | | 0| 0| 0|
⑦[0xB16A] LTE Contention Resolution Message (MSG4) Report:竞争解决结果响应
如果是竞争失败,则说明要么MSG4在connection resolution timer超时前没有接收到,或者就是MSG4接收成功了,但是ID匹配失败。
2019 Mar 7 06:23:52.919 [39] 0xB16A LTE Contention Resolution Message (MSG4) Report
Version = 1
SFN = 621
Sub-fn = 9
Contention Result = Pass ## 竞争解决成功了还是失败了,如果是失败,则说明要么MSG4在connection resolution timer超时前没有接收到,或者就是MSG4接收成功了,但是ID匹配失败。
UL ACK Timing SFN = 622
UL ACK Timing Sub-fn = 7
3. SRB1消息建立 (SRB1 Establishment)
在LTE信令中存在三个,分别是 SRB0、SRB1、SRB2
SRB | 描述 |
SRB0 | 不需要建立,上下行就有的 |
SRB1 | 需要建立,它主要用于上下行的信令 和 部分NAS 信令 |
SRB2 | 需要建议,用于NAS层的消息 |
①[0xB0C0][RRC Layer] LTE RRC OTA Packet
2019 Mar 7 06:23:52.919 [39] 0xB0C0 LTE RRC OTA Packet -- DL_CCCH / RRCConnectionSetup
Pkt Version = 15
RRC Release Number.Major.minor = 13.2.1
Radio Bearer ID = 0, Physical Cell ID = 422
Freq = 39148
SysFrameNum = 621, SubFrameNum = 9
PDU Number = DL_CCCH Message, Msg Length = 30
SIB Mask in SI = 0x00
Interpreted PDU:
value DL-CCCH-Message ::=
{
message c1 : rrcConnectionSetup :
{
rrc-TransactionIdentifier 1,
criticalExtensions c1 : rrcConnectionSetup-r8 :
{
radioResourceConfigDedicated
{
srb-ToAddModList
{
{
srb-Identity 1, #### SRB 1
rlc-Config explicitValue : am :
{
ul-AM-RLC
{
t-PollRetransmit ms45,
pollPDU pInfinity,
pollByte kBinfinity,
maxRetxThreshold t32
},
dl-AM-RLC
{
t-Reordering ms35,
t-StatusProhibit ms0
}
},
②[0xB060][MAC Layer] LTE MAC Configuration
SRB1 和 LC ID 1 (逻辑信道ID 1)是一一对应的。
2019 Mar 7 06:25:23.034 [D4] 0xB060 LTE MAC Configuration
Version = 1
Number of SubPackets = 6
SubPacket ID = 0
SubPacket - ( Config Type SubPacket )
Version = 2
SubPacket Size = 8 bytes
Config Type V2
Sub Id = 0
Config reason = NORMAL
SubPacket ID = 1
SubPacket - ( DL Config SubPacket )
Version = 2
SubPacket Size = 12 bytes
DL Config V2
Sub Id = 0
Num Active Stag = 1
Scell Tag Info
------------------------------
| | |Scell|Ta |TA |
| |STAG|Id |Timer |Timer|
|# |Id |Mask |Present|(ms) |
------------------------------
| 0| 255| 255| 255|10240|
SubPacket ID = 2
SubPacket - ( UL Config Subpacket )
Version = 2
SubPacket Size = 16 bytes
UL Config V2
Sub Id = 0
SR resource present = Yes (1)
SR periodicity = 20 ms
BSR timer = 10 ms
SPS Number of Tx release = 0
Retx BSR timer = 320 ms
SubPacket ID = 14
SubPacket - (All Rach Config SubPacket) {
Version = 1
Subpacket Size = 200 bytes
Sub Id = 0
Valid Cell Cfg Mask = 00000001b
New Cell Cfg Mask = 00000000b
Cell Rach Info
-------------------------------------------------------------------------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | |RA |
| | |Preamble|Power | | | | | | | | | | | | | | |rsp |
| | |initial |ramping| | |Preamble|Contention|Message|Power | |Delta | |CS |Root |PRACH |High |Max |win |
| |Scell|power |step |RA |RA |trans |resolution|size |offset |PMax |preamble|PRACH |zone |seq |Freq |speed|retx|size|
|# |Id |(dB) |(dB) |index1|index2|max |timer (ms)|Group_A|Group_B |(dBm)|Msg3 |config|length|index|Offset|flag |Msg3|(ms)|
-------------------------------------------------------------------------------------------------------------------------------------------
| 0| 0| -104| 2| 28| 52| 10| 64| 7| -10 dB| 23| 8| 3| 1| 702| 12| 0| 5| 10|
| 1| 0| 0| 0| 0| 0| 0| 0| 0|- Infinity| 0| 0| 0| 0| 0| 0| 0| 0| 0|
| 2| 0| 0| 0| 0| 0| 0| 0| 0|- Infinity| 0| 0| 0| 0| 0| 0| 0| 0| 0|
| 3| 0| 0| 0| 0| 0| 0| 0| 0|- Infinity| 0| 0| 0| 0| 0| 0| 0| 0| 0|
| 4| 0| 0| 0| 0| 0| 0| 0| 0|- Infinity| 0| 0| 0| 0| 0| 0| 0| 0| 0|
| 5| 0| 0| 0| 0| 0| 0| 0| 0|- Infinity| 0| 0| 0| 0| 0| 0| 0| 0| 0|
| 6| 0| 0| 0| 0| 0| 0| 0| 0|- Infinity| 0| 0| 0| 0| 0| 0| 0| 0| 0|
| 7| 0| 0| 0| 0| 0| 0| 0| 0|- Infinity| 0| 0| 0| 0| 0| 0| 0| 0| 0|
}
SubPacket ID = 4
SubPacket - ( LC Config Subpacket )
Version = 2
SubPacket Size = 328 bytes
Version 2 {
Sub Id = 0
Number of deleted LC = 0
Number of added/modified LC = 1
---------------------------------------------------
| | | | |Token |
| | | | |bucket |
| |PBR | | |size |
|LC ID|(KBytes/s)|Priority |LC group |(bytes) |
---------------------------------------------------
| 1| 65535| 1| 0| 19660500|
}
SubPacket ID = 13
SubPacket - (eMBMS Config SubPacket)
Version = 2
Subpacket Size = 8 bytes
Sub Id = 0
Num eMBMS Active LCs = 0
③[0xB081][RLC Layer] LTE RLC DL Config Log packet
SRB1 和 SRB2 将会映射的 RB Cfg Idx 索引会大于 32。
RBs 小于32 时是 DRBs。
LC ID 和 RB ID 的 上行UL 和 下行DL 都是一样的。
2019 Mar 7 06:31:56.729 [0E] 0xB081 LTE RLC DL Config Log packet
Version = 1
Number of SubPackets = 1
Subpacket ID = 64
SubPacket - ( RLCDL Configuration )
Version = 1
SubPacket Size = 76 bytes
Reason = Configuration
Number of released RB = 0
Number of added/modified RB = 3
Added/Modified RB
-----------------------
|RB Cfg Idx|Action |
-----------------------
| 34| ADD|
| 1| ADD|
| 2| ADD|
Number of active RB = 4
Active RB Info
--------------------------------------------------------------------------
| | | | |RB | |T | |T Status |
| |RB | | |Cfg |RB |Reordering| |Prohibit |
|RLCDL CFG |mode |LC ID|RB ID|Idx |Type |(ms) |SN Length |(ms) |
--------------------------------------------------------------------------
| RLCDL CFG| AM| 1| 1| 33| SRB| 35| 10| 0 |
| RLCDL CFG| AM| 2| 2| 34| SRB| 35| 10| 0 |
| RLCDL CFG| AM| 3| 1| 1| DRB| 50| 10| 50 |
| RLCDL CFG| AM| 4| 2| 2| DRB| 50| 10| 50 |
4. 上行数据传输 (UL Data Transmission)
①[0xB092][RLC Layer] LTE RLC UL AM All PDU:查看上行RLC 信息,帧号、子帧号、PDU多大
rb_cfg_idx = 33 : 序列号
sys_fn = 1007 : 帧号
sub_fn = 7 : 子帧号
2019 Mar 7 06:25:59.474 [F3] 0xB092 LTE RLC UL AM All PDU
Version = 1
Number of SubPackets = 1
Subpacket ID = 70
SubPacket - ( RLCUL PDU )
Version = 3
Subpacket Size = 44 bytes
RB Cfg Idx = 33, RB Mode = AM, SN Length = 10 bits
Reserved = 135
Enabled PDU Log Packets:
RLCUL Config (0xB091) = 1
RLCUL AM ALL PDU (0xB092) = 1
RLCUL AM CONTROL PDU (0xB093) = 1
RLCUL AM POLLING PDU (0xB094) = 1
RLCUL AM SIGNALING PDU (0xB095) = 1
RLCUL UM DATA PDU (0xB096) = 1
RLCUL STATISTICS (0xB097) = 1
VT(A) = 24, VT(S) = 25, PDU Without Poll = 0, Byte Without Poll = 0, Poll SN = 24
Number of PDUs = 2
RLCUL PDU[0]
PDU TYPE = RLCUL CTRL, rb_cfg_idx = 33, ACK_SN = 6, sys_fn = 1007, sub_fn = 7, pdu_bytes = 2, cpt = STATUS (0)
RLCUL CTRL : ACK_SN = 6
Hex Dump = { 00 18 }
RLCUL PDU[1]
PDU TYPE = RLCUL DATA, rb_cfg_idx = 33, SN = 24, sys_fn = 1007, sub_fn = 7, pdu_bytes = 20, RF = 0, P = 1, FI = 00, E = 1 # P =1 说明手机告诉网络,收到PDU 后,网络需要给手机一个应答
---------------------------------------------------------------
|RLCUL DATA LI|LI |LI |LI |LI |LI |LI |LI |LI |
---------------------------------------------------------------
|RLCUL DATA LI| 9| | | | | | | |
②[0xB064][MAC Layer] LTE MAC UL Transport Block
2019 Mar 7 06:24:29.844 [E3] 0xB064 LTE MAC UL Transport Block
Version = 1
Number of SubPackets = 1
SubPacket ID = 8
SubPacket - ( UL Transport Block Subpacket )
Version = 2
Subpacket Size = 92
Uplink Transport Block V2
Number of samples = 5
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|Sub|Cell| | | | |Grant |RLC |Padding| | |HDR | | | |BSR |BSR |BSR |BSR | |BSR LCG 0|BSR LCG 1|BSR LCG 2|BSR LCG 3| |PH |Pcmax_c|PH |Pcmax_c|
|Id |Id |HARQ ID|RNTI Type |Sub-FN|SFN |(bytes)|PDUs |(bytes)|BSR event |BSR trig |LEN |Mac Hdr + CE |LC ID |LEN |LCG 0|LCG 1|LCG 2|LCG 3|PHR Ind|(bytes) |(bytes) |(bytes) |(bytes) |Pcmax_c|SCell1|SCell1 |SCell2|SCell2 |
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| 0| 0| 1| C-RNTI| 7| 228| 79| 1| 0|High Data Arrival| S-BSR| 3| 3D 04 D6 | S-BSR| 1| | | | 22| | | | | 274| | | | | |
| | | | | | | | | | | | | | 4| -1| | | | | | | | | | | | | | |
| 0| 0| 0| C-RNTI| 2| 230| 87| 1| 0| Periodic| S-BSR| 3| 3D 04 D4 | S-BSR| 1| | | | 20| | | | | 200| | | | | |
| | | | | | | | | | | | | | 4| -1| | | | | | | | | | | | | | |
| 0| 0| 1| C-RNTI| 7| 230| 87| 1| 0| None| No BSR| 1| 04 | 4| -1| | | | | | | | | | | | | | |
| 0| 0| 0| C-RNTI| 2| 231| 87| 1| 0| Periodic| S-BSR| 3| 3D 04 C8 | S-BSR| 1| | | | 8| | | | | 31| | | | | |
| | | | | | | | | | | | | | 4| -1| | | | | | | | | | | | | | |
| 0| 0| 1| C-RNTI| 7| 231| 117| 1| 80| None| Pad L-BSR| 7| 3E 24 1E 1F 00 00 00 | L-BSR| 3| 0| 0| 0| 0| | 0| 0| 0| 0| | | | | |
| | | | | | | | | | | | | | 4| 30| | | | | | | | | | | | | | |
| | | | | | | | | | | | | | Padding| -1| | | | | | | | | | | | | | |
③[0xB130][LL1 Layer] LTE LL1 PDCCH Decoding Result:PDCCH信息解调结果可以知道是DCI0上行信息还是DCI1下行信息
PDCCH 信息解调结果
SUCCESS_DCI0:说明解调的是 DCI0 ,上行
SUCCESS_DCI1:说明解调的是 DCI1 ,下行
2019 Mar 7 06:23:55.578 [74] 0xB130 LTE LL1 PDCCH Decoding Result
Version = 21
Sub-frame Number = 1
System Frame Number = 906
Demback Mode Select = 0
Carrier Index = PCC
Number of Hypothesis = 2
Hypothesis
---------------------------------------------------------------------------------------------------------------------------------------------------
| | | | |Search| | | | | | |Norm |Symbol |
| | |Aggregation| |Space |DCI | |Start|Payload|Tail | |Energy |Error |
|# |Payload |Level |Candidate|Type |Format|Decode Status |CCE |Size |Match |Prune Status |Metric |Rate |
---------------------------------------------------------------------------------------------------------------------------------------------------
| 0|0x6000000331000000| Agg4| 0| User| 1| C_RNTI| 0| 58| Match| SUCCESS_DCI1| 1.0000|0.000000|
| 1|0x6000000331000000| Agg8| 0| User| 1| C_RNTI| 0| 58| Match| FAIL_SURVIVOR_SELECT| 1.0000|0.000000|
④[0xB16C][ML1] LTE DCI Information Report:DCI信息结果
重点需要关注的是 MCS Index、TPC、DAI、RB 起始值和起始个数
2019 Mar 7 06:24:15.935 [5C] 0xB16C LTE DCI Information Report
Version = 28
Duplex Mode = TDD
Number of Records = 20
DCI Info Records
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| | | | |UL Grant Info | |DL Grant Info | | | | | |
| | | | | | | | | | | | | | | | | | | |Number | | | |Number | | | | | | | | | | |DL | |DL | |DL | | | | | | | | | |
| | | |Num | | |Resource | | | | | | |Cyclic| | | | |Start of|of | | |Start of|of | |Redundancy| | | | |TX | |DL |Dl |Grant |Num |Grant | |Grant|DL | | | |PDCCH | |TPC DCI | |TPC DCI|
| | | |UL |Grant |Cell |Allocation|RIV |RIV |Hopping |MCS | | |Shift |K of |UL |CQI |SRS |Resource|Resource|TBS |Modulation|Resource|Resource|Rbg |Version |HARQ| |Aggregation|Search|Antenna |Num DL|Grant |Grant|Format|ACK/NAK|TPC | |Srs |Grant| |Aggregation|Search|Order |TPC DCI|Format |TPC DCI RNTI |TPC |
|# |SFN |Sub-fn|Grant|Present |Index|Type |Width|Value|Flag |Index|NDI|TPC|DMRS |DCI 0|Index/DAI|Request|Request|Block |Blocks |Index|Type |Block 2 |Blocks 2|Size|Index |ID |Rnti Type |Level |Space |Selection|Grants|Present|CC Id|Type |Bits |Command|DAI|Req |N CCE|Rnti Type |Level |Space |Present|Present|Type |Type |Command|
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| 0| 875| 3| 1| Yes| 0| 0| 13| 1109|Disabled| 3| 0| 2| 0| 4| 4| 0| No| 9| 12| 3| QPSK| 0| 0| 0| 0| 1| C_RNTI| 0| 0| 0| 0| | | | | | | | | | | | No| No| | | |
| 1| 876| 3| 1| Yes| 0| 0| 13| 2309|Disabled| 3| 1| 2| 0| 4| 4| 0| No| 9| 24| 3| QPSK| 0| 0| 0| 0| 1| C_RNTI| 0| 0| 0| 0| | | | | | | | | | | | No| No| | | |
| 2| 876| 5| 0| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1| Yes| 0| 1| 1| 1| 1| No| 16| C_RNTI| 0| 0| No| No| | | |
| 3| 877| 3| 0| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1| Yes| 0| 1| 1| 1| 1| No| 24| C_RNTI| 0| 0| No| No| | | |
| 4| 878| 3| 1| Yes| 0| 0| 13| 1409|Disabled| 2| 0| 1| 0| 4| 4| 0| No| 9| 15| 2| QPSK| 0| 0| 0| 0| 1| C_RNTI| 0| 0| 0| 0| | | | | | | | | | | | No| No| | | |
| 5| 879| 1| 0| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1| Yes| 0| 1| 1| 1| 1| No| 32| C_RNTI| 0| 0| No| No| | | |
| 6| 879| 6| 0| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1| Yes| 0| 1| 1| 1| 1| No| 48| C_RNTI| 0| 0| No| No| | | |
| 7| 880| 6| 0| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1| Yes| 0| 1| 1| 1| 1| No| 48| C_RNTI| 0| 0| No| No| | | |
| 8| 881| 3| 1| Yes| 0| 0| 13| 775|Disabled| 5| 1| 1| 0| 4| 4| 0| No| 75| 8| 5| QPSK| 0| 0| 0| 0| 1| C_RNTI| 0| 0| 0| 0| | | | | | | | | | | | No| No| | | |
| 9| 883| 3| 1| Yes| 0| 0| 13| 552|Disabled| 6| 0| 1| 0| 4| 4| 0| No| 52| 6| 6| QPSK| 0| 0| 0| 0| 1| C_RNTI| 0| 0| 0| 0| | | | | | | | | | | | No| No| | | |
| 10| 884| 3| 1| Yes| 0| 0| 13| 952|Disabled| 6| 1| 1| 0| 4| 4| 0| No| 52| 10| 6| QPSK| 0| 0| 0| 0| 1| C_RNTI| 0| 0| 0| 0| | | | | | | | | | | | No| No| | | |
| 11| 885| 1| 0| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1| Yes| 0| 1| 1| 1| 1| No| 32| C_RNTI| 0| 0| No| No| | | |
| 12| 885| 3| 1| Yes| 0| 0| 13| 282|Disabled| 6| 0| 1| 0| 4| 1| 0| No| 82| 3| 6| QPSK| 0| 0| 0| 0| 1| C_RNTI| 0| 0| 0| 0| | | | | | | | | | | | No| No| | | |
| 13| 886| 3| 0| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1| Yes| 0| 1| 1| 1| 1| No| 60| C_RNTI| 0| 0| No| No| | | |
| 14| 889| 9| 0| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1| Yes| 0| 1| 1| 1| 1| No| 16| C_RNTI| 0| 0| No| No| | | |
| 15| 891| 3| 1| Yes| 0| 0| 13| 427|Disabled| 8| 1| 0| 0| 4| 4| 0| No| 27| 5| 8| QPSK| 0| 0| 0| 0| 1| C_RNTI| 0| 0| 0| 0| | | | | | | | | | | | No| No| | | |
| 16| 891| 4| 0| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1| Yes| 0| 1| 1| 1| 1| No| 68| C_RNTI| 0| 0| No| No| | | |
| 17| 892| 3| 1| Yes| 0| 0| 13| 2465|Disabled| 7| 0| 2| 0| 4| 4| 0| No| 65| 25| 7| QPSK| 0| 0| 0| 0| 1| C_RNTI| 0| 0| 0| 0| | | | | | | | | | | | No| No| | | |
| 18| 893| 3| 1| Yes| 0| 0| 13| 1970|Disabled| 7| 1| 1| 0| 4| 4| 0| No| 70| 20| 7| QPSK| 0| 0| 0| 0| 1| C_RNTI| 0| 0| 0| 0| | | | | | | | | | | | No| No| | | |
| 19| 893| 8| 1| Yes| 0| 0| 13| 447|Disabled| 7| 0| 1| 0| 4| 4| 0| No| 47| 5| 7| QPSK| 0| 0| 0| 0| 0| C_RNTI| 0| 0| 0| 0| | | | | | | | | | | | No| No| | | |
⑤[0xB172][ML1] LTE Uplink PKT Build Indication: 上行传输信息
第一行说明 :上行传输在帧号148,子帧号7 的时候,上行通过C_RINTI 发送了一个75个字节的数据,用的HARQ ID=7
2019 Mar 7 06:24:19.347 [31] 0xB172 LTE Uplink PKT Build Indication
Version = 25
Number of Records = 12
PKT Build Record
------------------------------------------------------------------------------------------------
| | | | |Transport| | |Power | | | | |
| |Cell |Tx |Tx |Block |EIB | |Headroom|HARQ|Tx |Corrupt|Commit |
|# |Index|Sfn |Sub-fn|Size |Address |RNTI Type |(dB) |ID |Type|CRC |Time |
------------------------------------------------------------------------------------------------
| 0| 0| 148| 7| 75|0x000024E0| C_RNTI| -23| 1| New| No| 14838864|
| 1| 0| 149| 7| 75|0x000024E0| C_RNTI| -23| 1| DTX| No| 15030864|
| 2| 0| 150| 7| 75|0x000024E0| C_RNTI| -23| 1| DTX| No| 15222864|
| 3| 0| 151| 7| 75|0x000024E0| C_RNTI| -23| 1| DTX| No| 15414864|
| 4| 0| 160| 7| 73|0x000024E0| C_RNTI| -23| 1| New| No| 365648|
| 5| 0| 161| 7| 73|0x000024E0| C_RNTI| -23| 1| DTX| No| 557648|
| 6| 0| 162| 7| 73|0x000024E0| C_RNTI| -23| 1| DTX| No| 749648|
| 7| 0| 163| 7| 73|0x000024E0| C_RNTI| -23| 1| DTX| No| 941648|
| 8| 0| 175| 7| 73|0x000024E0| C_RNTI| -23| 1| New| No| 3245649|
| 9| 0| 176| 7| 73|0x000024E0| C_RNTI| -23| 1| DTX| No| 3437649|
| 10| 0| 177| 7| 73|0x000024E0| C_RNTI| -23| 1| DTX| No| 3629650|
| 11| 0| 178| 7| 73|0x000024E0| C_RNTI| -23| 1| DTX| No| 3821650|
⑥ [0xB16D][ML1] LTE GM TX Report:物理层的TX 报告
UL Channel type 上行通道类型: PUSCH(包含数据信息的是) 、PUCCH(没有数据信息,只有控制信息的时候)
Ack / Nack 相应时隙
Calculated Tx Power:发送功率
2019 Mar 7 06:24:08.047 [60] 0xB16D LTE GM TX Report
Version = 26
Number of Records = 18
Tx Report Records[0]
Chan Type = PUCCH
Tx SFN = 1014 # 1014帧, 子帧为2 ,用的是 PUCCH 的类型,只有控制信息
Tx Sub-fn = 2
Total Tx Power = 16 dBm # 发射功率
UL ACK/NAK Present = ACK/NAK present
CA Mode Enabled = Disabled # 关闭 CA 载波聚合
ACK/NAK Reporting Mode = TDD Single Cell PUCCH format 1b with CS
ACK/NAK Length = 1
ACK to Send Mask for PCell = 000000010
Beta PUCCH = 242
N 1 PUCCH = 0
n_1_pucch
Number of n_1_pucch = 4
n_1_pucch_array[0]
n_1_pucch_array = 108
n_1_pucch_array[1]
n_1_pucch_array = 130
n_1_pucch_array[2]
n_1_pucch_array = 152
n_1_pucch_array[3]
n_1_pucch_array = 178
N 2 PUCCH = 0
N 3 PUCCH = 0
Scheduling Request Present = Not Present
Temp RNTI ACK Flag = Not Present
SRS Present Flag = 0
SRS UE/Cell Specific = 0
CSF Present = Not Present
AFC Rx Freq Error = -768 Hz
Tx Report Records[1]
Chan Type = PUCCH
Tx SFN = 1015
Tx Sub-fn = 2
Total Tx Power = 14 dBm
UL ACK/NAK Present = ACK/NAK not present
CA Mode Enabled = Disabled
ACK/NAK Reporting Mode = FDD Mode
ACK/NAK Length = 0
Beta PUCCH = 242
N 1 PUCCH = 0
n_1_pucch
Number of n_1_pucch = 4
n_1_pucch_array[0]
n_1_pucch_array = 0
n_1_pucch_array[1]
n_1_pucch_array = 0
n_1_pucch_array[2]
n_1_pucch_array = 0
n_1_pucch_array[3]
n_1_pucch_array = 0
N 2 PUCCH = 26
N 3 PUCCH = 0
Scheduling Request Present = Not Present
Temp RNTI ACK Flag = Not Present
SRS Present Flag = 0
SRS UE/Cell Specific = 0
CSF Present = Present
AFC Rx Freq Error = -768 Hz
⑦ [0xB146] [LL1 Layer] LTE LL1 UL AGC Tx Report
2019 Mar 7 06:23:52.934 [F8] 0xB146 LTE LL1 UL AGC Tx Report
Version = 43
Subframe Number = 7
System Frame Number = 623
UL Chan Type = PUCCH
UL Bandwidth = BW_20
PRACH Format = FORMAT_0
Carrier Index = PCC
USTMR Start Call Time = 0x29F197
USTMR Return Call Time = 0x29F9F9
IQ Gain Backoff = 0.0 dB
AFC SF Active = true
AFC Action Time = 0x2A1CDF
DRIF Group Index = 0
UL Fed API Input per Slot
--------------------------------------------------------------
| | | | |LTE Tx| |Tx |USTMR |
| |Slot |Number|Start|Power |Modulation|Ant |Action |
|# |Active |of RBs|RB |(dB10)|Type |Index|Time |
--------------------------------------------------------------
| 0| Active| 0| 0| 100| QPSK| 0| 0x2A1CDF|
| 1| Active| 0| 0| 100| QPSK| 0| 0x2A425F|
| 2|Inactive| 0| 0| 0| BPSK| 0| 0x000000|
| 3|Inactive| 0| 0| 0| BPSK| 0| 0x000000|
UL DTR Config
-----------------------------------------------------------------------------------------------------------------
| | | | | | |DAC Iref |DAC Iref | | | | |
| |Update|Block|Sample|Ref Log |Ref Log |Update |Update |Tx DAC |Tx DAC |Cluster |Cluster |
|# |Enable|Index|Index |Start Time|Stop Time |Start Time|Stop Time |Conf2 Reg |Conf3 Reg |Mask Fed |Mask FW |
-----------------------------------------------------------------------------------------------------------------
| 0|000000| 0| 0|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|
| 1|000000| 0| 0|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|
| 2|000000| 0| 0|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|
| 3|000000| 0| 0|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|0x00000000|