关于搜网的故障实例

最新推荐文章于 2025-05-20 17:58:48 发布

转载

最新推荐文章于 2025-05-20 17:58:48 发布 · 4.1k 阅读

17 ·

CC 4.0 BY-SA版权

原文链接：https://my.oschina.net/u/2829875/blog/841360

文章标签：

#java #移动开发 #python

这篇博客详细分析了移动设备在网络连接方面遇到的问题，包括LTE网络掉网、GSM网络下的掉网以及4G网络下的attach被拒。通过分析设备日志，博主探讨了网络搜不到、信号强度变化、重选失败以及attach被拒导致禁止TA列表等问题，并提供了相关网络协议和指标的解释。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

2019独角兽企业重金招聘Python工程师标准>>>

AT+CREG

PLMN_SEARCH

一、显示搜不到网
看到08:59:49.354842时间点RIL_CMD_PROXY_3发现请求列表没有request于是一直sleep：
12-17 08:59:49.350004 12091 12103 D RILC-MTK: proxyLoop free pRI=0xb41d8200 p=0xb61f90a0
12-17 08:59:49.350036 12091 12103 D RILC-MTK: proxyLoop free pRequest=0xb41d4500
12-17 08:59:49.350063 12091 12103 D RILC-MTK: proxy id:1, proxyName: RIL_CMD_PROXY_3
12-17 08:59:49.350092 12091 12103 D RILC-MTK: QUERY_NETWORK_SELECTION_MODE pRI=0xb41d8240 p=0xb61f9148 execute on RIL_CMD_PROXY_3 using channel 1
12-17 08:59:49.354790 12091 12103 D RILC-MTK: proxyLoop free pRI=0xb41d8240 p=0xb61f9148
12-17 08:59:49.354819 12091 12103 D RILC-MTK: proxyLoop free pRequest=0xb41d4510
12-17 08:59:49.354842 12091 12103 I RILC-MTK: RIL_CMD_PROXY_3 sleep
……
12-17 08:59:51.689278 12091 12103 I RILC-MTK: RIL_CMD_PROXY_3 sleep

但是，08:59:56时间点modem上报已驻网，通知Framework去同步状态，RILJ有下request到rild，：
12-17 08:59:56.055780 12091 12117 D AT : AT< +CREG: 1,"255F","0000FD9F",0,0,0
12-17 08:59:56.055808 12091 12117 D AT : RIL_URC_READER Enter processLine:+CREG: 1,"255F","0000FD9F",0,0,0
12-17 08:59:56.056728 1533 1796 V RILJ : [UNSL]< UNSOL_RESPONSE_VOICE_NETWORK_STATE_CHANGED {1, 255f, fd9f, 0, 0} [SUB0]
12-17 08:59:56.058354 1533 1533 D GsmSST : [GsmSST0] pollState RadioState is RADIO_ON, currentNetworkMode= 9
12-17 08:59:56.063300 1533 1533 D RILJ : [5491]> VOICE_REGISTRATION_STATE [SUB0] -->该请求在rild中没有看到有建立

怀疑rild的request派发线程一直被占用导致无法处理后续新到的请求。
但是代码中有userloaded的判断，关键log无法看到，请使用eng版本帮忙复现提供log进一步分析确认。
二、LTE网络掉网分析

1.从log中看09:37:15:419 这个时间点就loss了，但是并没有给AP侧上报掉网，这个中间modem做了什么动作呢
302470, 0, 54292552, 09:37:15:419 2017/04/26, MOD_EMM, MOD_EVAL, EVAL_EMM_SAP, MSG_ID_EVAL_EMM_PLMN_LOSS_IND
SYS (PCORE) 1481057 55073116 09:38:04:666 NIL [AT_R p25, s15]+CREG: 3,4,"FFFF","0FFFFFFF",0,0,0
[A] 因为手机必须先进行搜索，如果找不到合适的CELL 才会报掉网到AP

[Q]那中间modem重新找网一直没找到吗，从37:15到38:04，这个过程是否正常要怎么确认呢？按我理解手机不是应该会再去搜索其他小区吗，包括23G的
[A] 是的，从log看来手机有不断进行234G的搜索，尝试很久都搜不到才会上报MM_IDLE_LIMITED_SERVICE    ，上报CREG: 0,"给AP，这时候才会显示掉网
Type    Index    Time    Local Time    Module    Message    Comment    Time Different
PS (PCORE)    302465    54292552    09:37:15:419    EMM_PLMNSEL - EMM_EVALIF    MSG_ID_EMM_PLMNSEL_EVALIF_PLMN_LOSS_IND
PS (PCORE)    302470    54292552    09:37:15:419    EMM - EVAL    MSG_ID_EVAL_EMM_PLMN_LOSS_IND
PS (PCORE)    302481    54292554    09:37:15:419    EVAL - NWSEL    MSG_ID_NWSEL_EVAL_PLMN_LOSS_IND
PS (PCORE)    303647    54292738    09:37:15:419    NWSEL - MM    MSG_ID_NWSEL_MM_PLMN_SEARCH_REQ
PS (PCORE)    303649    54292738    09:37:15:419    MM - RATCM    MSG_ID_MM_RATCM_PLMN_SEARCH_REQ
PS (PCORE)    303680    54292749    09:37:15:419    CSE_TDD - SLCE_TDD    MSG_ID_TDD_CSE_SLCE_FREQ_SCAN_REQ
PS (PCORE)    303863    54292904    09:37:15:419    SLCE_TDD - RSVAU    MSG_ID_TDD_CPHY_FREQUENCY_SCAN_REQ
PS (PCORE)    303865    54292905    09:37:15:419    RSVAU - SLCE_TDD    MSG_ID_TDD_CPHY_FREQUENCY_SCAN_CNF
PS (PCORE)    303973    54295566    09:37:15:630    CSE_TDD - CSCE_TDD    MSG_ID_TDD_CSCE_CSE_CELL_SELECTION_CNF
PS (PCORE)    303976    54295567    09:37:15:630    CSCE_TDD - RATCM    MSG_ID_RATCM_CSCE_PLMN_SEARCH_CNF
PS (PCORE)    303999    54295570    09:37:15:630    RATCM - MM    MSG_ID_MM_RATCM_PLMN_SEARCH_CNF
PS (PCORE)    304000    54295570    09:37:15:630    MM - NWSEL    MSG_ID_NWSEL_MM_PLMN_SEARCH_CNF
PS (PCORE)    304012    54295573    09:37:15:630    NWSEL - MM    MSG_ID_NWSEL_MM_PLMN_SEARCH_REQ
PS (PCORE)    304120    54295726    09:37:15:630    RATCM - RRM_TDD    MSG_ID_RATCM_GAS_PLMN_SEARCH_REQ
PS (PCORE)    304302    54305128    09:37:16:321    RRM_TDD - RATCM    MSG_ID_RATCM_GAS_PLMN_SEARCH_CNF
PS (PCORE)    304354    54305136    09:37:16:321    MM - NWSEL    MSG_ID_NWSEL_MM_PLMN_SEARCH_CNF
PS (PCORE)    304366    54305139    09:37:16:321    NWSEL - MM    MSG_ID_NWSEL_MM_DEACTIVATE_REQ
PS (PCORE)    322024    54343879    09:37:18:647    EMM - EVAL    MSG_ID_EVAL_EMM_PLMN_SEARCH_CNF
PS (PCORE)    331737    54363627    09:37:19:900    MM - RATCM    MSG_ID_MM_RATCM_PLMN_SEARCH_REQ
PS (PCORE)    331738    54363627    09:37:19:900    RATCM - CSCE_TDD    MSG_ID_RATCM_CSCE_PLMN_SEARCH_REQ
PS (PCORE)    331980    54366508    09:37:20:249    CSCE_TDD - RATCM    MSG_ID_RATCM_CSCE_PLMN_SEARCH_CNF
PS (PCORE)    371531    54613068    09:37:36:029    CSCE_TDD - RATCM    MSG_ID_RATCM_CSCE_PLMN_SEARCH_CNF
PS (PCORE)    374021    54885109    09:37:53:283    RRM_TDD - RATCM    MSG_ID_RATCM_GAS_PLMN_SEARCH_CNF
PS (PCORE)    374082    54885120    09:37:53:283    RATCM - MM    MSG_ID_MM_RATCM_PLMN_SEARCH_CNF
PS (PCORE)    374136    54885127    09:37:53:283    RATCM - RRM_TDD    MSG_ID_RATCM_GAS_PLMN_SEARCH_REQ
PS (PCORE)    374873    54901161    09:37:54:464    MM - RAC    MSG_ID_GMMREG_DETACH_IND
PS (PCORE)    374880    54901162    09:37:54:464    MM    MM new State: MM_IDLE_LIMITED_SERVICE
SYS (PCORE)    375270    54901204    09:37:54:464    NIL    [AT_U p19, s8]+CREG: 0,"255F","0000FD8D",0,0,0
SYS (PCORE)    375280    54901207    09:37:54:464    NIL    [AT_U p19, s8]+CGREG: 4,"255F","0000FD8D",0,"00",0,0

2.另外这个q_rxlevmin和UE S 准则这些在log里怎么看呢？对应协议是哪份，可否告知下
【A】 Srxlev[-41] = RSRP[-481] - (q_rxlevmin[-440] + q_rxlevmin_offset[0]) - pcomp[0]，这是根据36304的S 准则计算出来的

[Q]网络下发的这个q_rxlevmin在log中怎么看呢，还有手机使用s准则计算的过程
【A】可以从SIB1 里面看出 q-RxLevMin: -110dBm (-55)，S准则的使用就是如 Srxlev[-41] = RSRP[-481] - (q_rxlevmin[-440] + q_rxlevmin_offset[0]) - pcomp[0]，SRXLEV 必须大于0才会显示可以驻留该CELL

三、GSM网络下的掉网问题

1. 先是在服务小区，从-83dBm降到-106.5dBm
Type    Index    Time    Local Time    Module    Message    Comment    Time Different
PS    1706982    19082596    19:25:07:880    MPAL_2 - RRM_2    MSG_ID_MPAL_RR_SERV_IDLE_MEAS_IND
PS    1729172    19097470    19:26:22:260    MPAL_2 - RRM_2    MSG_ID_MPAL_RR_SERV_IDLE_MEAS_IND
2. 换到其他小区，信号同样很弱，最终掉网
Type    Index    Time    Local Time    Module    Message    Comment    Time Different
PS    1732209    19099353    19:26:31:605    RRM_2    [RMC] C1_reselection on arfcn = 51
PS    1734579    19100672    19:26:38:265    MPAL_2 - RRM_2    MSG_ID_MPAL_RR_SERV_IDLE_MEAS_IND
PS    1736335    19101708    19:26:43:435    MM_2 - NWSEL_2    MSG_ID_NWSEL_MM_PLMN_LOSS_IND
3. 搜索40410，没有搜到
Type    Index    Time    Local Time    Module    Message    Comment    Time Different
PS    1741062    19105708    19:27:03:405    NWSEL_2 - MM_2    MSG_ID_NWSEL_MM_PLMN_SEARCH_REQ    40410
PS    1741619    19105850    19:27:04:150    MM_2 - NWSEL_2    MSG_ID_NWSEL_MM_PLMN_SEARCH_CNF
PS    1741623    19105850    19:27:04:150    NWSEL_2 - MM_2    MSG_ID_NWSEL_MM_PLMN_SEARCH_REQ    40410
PS    1747960    19109407    19:27:21:750    MM_2 - NWSEL_2    MSG_ID_NWSEL_MM_PLMN_SEARCH_CNF
4. 找到40505网络，要么随机接入失败，要么出现N200问题
Type    Index    Time    Local Time    Module    Message    Comment    Time Different
PS    1747990    19109407    19:27:21:750    NWSEL_2 - MM_2    MSG_ID_NWSEL_MM_PLMN_SEARCH_REQ    40505
PS    1748860    19109707    19:27:23:435    MM_2 - NWSEL_2    MSG_ID_NWSEL_MM_PLMN_SEARCH_CNF
OTA    1748903    19109707    19:27:23:435    MM_2    [MS->NW] MM__LOCATION_UPDATING_REQUEST (LU type: MM_NORMAL_LU)
OTA    1749207    19109708    19:27:23:435    RRM_2    [MS->NW] RR__CHANNEL_REQUEST
OTA    1749748    19109716    19:27:23:435    RRM_2    [MS->NW] RR__CHANNEL_REQUEST
OTA    1749982    19109924    19:27:24:435    RRM_2    [MS->NW] RR__CHANNEL_REQUEST
OTA    1750234    19110144    19:27:25:435    RRM_2    [MS->NW] RR__CHANNEL_REQUEST
OTA    1750579    19110347    19:27:26:635    RRM_2    [MS->NW] RR__CHANNEL_REQUEST
OTA    1872436    19126325    19:28:46:525    MM_2    [MS->NW] MM__LOCATION_UPDATING_REQUEST (LU type: MM_NORMAL_LU)
OTA    1872738    19126327    19:28:46:525    RRM_2    [MS->NW] RR__CHANNEL_REQUEST
OTA    1873274    19126334    19:28:46:525    RRM_2    [MS->NW] RR__CHANNEL_REQUEST
OTA    1873304    19126353&nbs