lte语音业务-CSFB
一 相关概念
我们知道，2g网络存在ps域 与cs域分别为 GPRS GSM网络，3g没有区分ps cs，4g的域变成了IMS 和 EPC
lte网络语音解决方案有如下几种
| 方案 | 特点 |
|---|---|
| 双通双待 | 两套收发器，分别驻留lte网络和2g/3g网络 |
| CSFB | 回落到2g或者3g网络 |
| volte | ims域，4g高清语音 |
| ott | 类似微信的语音通信方式 |
关于cs ps ims域介绍
cs 电路交换域，用于语音通信
ps 分组交换域 用于数据通信
ims 多媒体子系统，支持语音业务
本文主要介绍下CSFB相关内容,至于volte后面再说
现在终端如果使用4g网络，并且不支持volte，如何进行语音业务呢，那就采用回落到2g/3g网络的cs域进行语音业务。
但是终端要支持CSFB必须有一下条件：
1.终端所在区域重叠覆盖4g网络和2g/3g网络
2.终端要同时支持4g网络和2g/3g网络
注：lte的MME通过SGs接口与2G/3G的MSC-S通信
二 lte注册log分析
本文使用高通的qxdmlog分析
分析qxdm log之前先说几个概念
1.联合附着类型
lte网络附着前面我已经说过了，这里解释下lte附着方式(EPS attach type)，相关内容在attach request中
分为下面几种方式：
| 类型（取值） | 含义 |
|---|---|
| EPS Attach（001） | 普通附着 |
| combined EPS/IMSI attach（010） | 联合附着 |
| EPS Emergency attach（110） | 紧急附着 |
| 保留位（111） | 保留 |
2.UE’s Usage Setting
次参数关系到联合附着失败后，采用何种方式来支持语音业务。
| 类型（取值） | 说明 |
|---|---|
| voice centric（0） | 语音业务为主，联合附着失败，转到2G/3G网络重新发起附着 |
| data centric（1） | 数据业务为主，联合附着失败，只能支持volte语音 |
3.voice domain preference
用于配置优先选择哪个语音域
| 类型（取值） | 说明 |
|---|---|
| CS voice Only（00） | 仅支持CSFB |
| IMS PS Voice only（01） | 仅支持volte |
| CS Voice Preferred,IMS PS Voice as Secondary（10） | 优先支持CSFB，其次volte |
| IMS PS Voice preferred, CS Voice as secondary（11） | 优先支持volte，其次CSFB |
下面重点说下上述内容在qxdm log中的说明
attach request
07:42:25.220 [0xB0ED] LTE NAS EMM Plain OTA Outgoing Message
pkt_version = 1 (0x1)
rel_number = 9 (0x9)
rel_version_major = 5 (0x5)
rel_version_minor = 0 (0x0)
security_header_or_skip_ind = 0 (0x0)
prot_disc = 7 (0x7) (EPS mobility management messages)
msg_type = 65 (0x41) (Attach request)
lte_emm_msg
emm_attach_request
tsc = 0 (0x0) (cached sec context)
nas_key_set_id = 3 (0x3)
att_type = 2 (0x2) (combined EPS/IMSI attach) //联合附着方式
eps_mob_id //终端用户标识
id_type = 6 (0x6) (GUTI)
odd_even_ind = 0 (0x0)
Guti_1111 = 15 (0xf)
mcc_1 = 4 (0x4)
mcc_2 = 6 (0x6)
mcc_3 = 0 (0x0)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 0 (0x0)
MME_group_id = 610 (0x262)
MME_code = 242 (0xf2)
m_tmsi = 3733388296 (0xde86fc08)
ue_netwk_cap //终端安全能力
EEA0 = 1 (0x1)
EEA1_128 = 1 (0x1)
EEA2_128 = 1 (0x1)
EEA3_128 = 1 (0x1)
EEA4 = 0 (0x0)
EEA5 = 0 (0x0)
EEA6 = 0 (0x0)
EEA7 = 0 (0x0)
EIA0 = 0 (0x0)
EIA1_128 = 1 (0x1)
EIA2_128 = 1 (0x1)
EIA3_128 = 1 (0x1)
EIA4 = 0 (0x0)
EIA5 = 0 (0x0)
EIA6 = 0 (0x0)
EIA7 = 0 (0x0)
oct5_incl = 1 (0x1)
UEA0 = 0 (0x0)
UEA1 = 0 (0x0)
UEA2 = 0 (0x0)
UEA3 = 0 (0x0)
UEA4 = 0 (0x0)
UEA5 = 0 (0x0)
UEA6 = 0 (0x0)
UEA7 = 0 (0x0)
oct6_incl = 1 (0x1)
UCS2 = 0 (0x0)
UIA1 = 0 (0x0)
UIA2 = 0 (0x0)
UIA3 = 0 (0x0)
UIA4 = 0 (0x0)
UIA5 = 0 (0x0)
UIA6 = 0 (0x0)
UIA7 = 0 (0x0)
oct7_incl = 1 (0x1)
ProSedd = 0 (0x0)
ProSe = 0 (0x0)
H_245_ASH = 0 (0x0)
ACC_CSFB = 1 (0x1)
LPP = 0 (0x0)
LCS = 0 (0x0)
vcc_1xsr = 0 (0x0)
NF = 1 (0x1)
oct8_incl = 0 (0x0)
oct9_incl = 0 (0x0)
oct10_incl = 0 (0x0)
oct11_incl = 0 (0x0)
oct12_incl = 0 (0x0)
oct13_incl = 0 (0x0)
oct14_incl = 0 (0x0)
oct15_incl = 0 (0x0)
esm_msg_container
eps_bearer_id_or_skip_id = 0 (0x0)
prot_disc = 2 (0x2) (EPS session management messages)
trans_id = 5 (0x5)
msg_type = 208 (0xd0) (PDN connectivity request) //pdn connectivity request
lte_esm_msg //lte网络
pdn_connectivity_req //PDN 连接请求消息
pdn_type = 3 (0x3) (Ipv4v6)
req_type = 1 (0x1) (initial request)
info_trans_flag_incl = 0 (0x0)
access_pt_name_incl = 0 (0x0)
prot_config_incl = 1 (0x1)
prot_config
ext = 1 (0x1)
conf_prot = 0 (0x0)
num_recs = 5 (0x5)
sm_prot[0]
protocol_id = 32801 (0x8021) (IPCP)
prot_len = 16 (0x10)
ipcp_prot
ipcp_prot_id = 1 (0x1) (CONF_REQ)
identifier = 0 (0x0)
rfc1332_conf_req
num_options = 2 (0x2)
conf_options[0]
type = 129 (0x81)
rfc1877_primary_dns_server_add
length = 6 (0x6)
ip_addr = 0 (0x0) (0.0.0.0)
conf_options[1]
type = 131 (0x83)
rfc1877_sec_dns_server_add
length = 6 (0x6)
ip_addr = 0 (0x0) (0.0.0.0)
sm_prot[1]
protocol_id = 13 (0xd) (DNS Server IPv4 Address Requestt)
prot_len = 0 (0x0)
sm_prot[2]
protocol_id = 3 (0x3) (DNS Server IPv6 Addr Req)
prot_len = 0 (0x0)
sm_prot[3]
protocol_id = 10 (0xa) (IP address allocation via NAS signalling)
prot_len = 0 (0x0)
sm_prot[4]
protocol_id = 5 (0x5) (NWK Req Bearer Control indicator)
prot_len = 0 (0x0)
num_recs2 = 1 (0x1)
sm_container[0]
container_id = 16 (0x10) (Ipv4 Link MTU Request)
container_len = 0 (0x0)
dev_properties_incl = 0 (0x0)
nbifom_incl = 0 (0x0)
header_compression_config_inclu = 0 (0x0)
ext_prot_config_incl = 0 (0x0)
p_tmsi_sig_incl = 0 (0x0)
add_guti_incl = 0 (0x0)
reg_tai_incl = 1 (0x1)
tracking_area_id //TAI
mcc_mnc
mcc_1 = 4 (0x4)
mcc_2 = 6 (0x6)
mcc_3 = 0 (0x0)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 0 (0x0)
tracking_area_id = 6150 (0x1806)
drx_params_incl = 1 (0x1)
drx_params
split_pg_cycle_code = 10 (0xa)
cycle_len_coeff = 0 (0x0)
split_on_ccch = 0 (0x0)
non_drx_timer = 0 (0x0)
ms_netwk_cap_incl = 1 (0x1)
ms_netwk_cap //GSM 终端能力
length = 3 (0x3)
r99 = 1 (0x1)
GEA1 bits
GEA/1 = 1 (0x1)
SM capabilities via dedicated channels = 1 (0x1)
SM capabilities via GPRS channels = 1 (0x1)
UCS2 support = 0 (0x0)
SS Screening Indicator = 1 (0x1)
SoLSA Capability = 0 (0x0)
Revision level indicator = 1 (0x1)
PFC feature mode = 1 (0x1)
Extended GEA bits
GEA/2 = 1 (0x1)
GEA/3 = 1 (0x1)
GEA/4 = 0 (0x0)
GEA/5 = 0 (0x0)
GEA/6 = 0 (0x0)
GEA/7 = 0 (0x0)
LCS VA capability = 0 (0x0)
PS inter-RAT HO from GERAN to UTRAN Iu mode capability = 0 (0x0)
PS inter-RAT HO from GERAN to E-UTRAN S1 mode capability = 0 (0x0)
EMM Combined procedures Capability = 1 (0x1)
ISR support = 1 (0x1)
SRVCC to GERAN/UTRAN capability = 1 (0x1)
EPC capability = 1 (0x1)
NF capability = 1 (0x1)
spare_bits0_count = 0 (0x0)
old_loc_area_id_incl = 1 (0x1)
old_loc_area_id
mcc_1 = 4 (0x4)
mcc_2 = 6 (0x6)
mcc_3 = 0 (0x0)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 0 (0x0)
loc_area_code = 6150 (0x1806)
tmsi_stat_incl = 0 (0x0)
ms_class_mark2_incl = 1 (0x1)
ms_class_mark2
rev_level = 2 (0x2)
es_ind = 1 (0x1)
a5_1_alg_sup = 0 (0x0)
rf_power_cap = 7 (0x7)
pseudo_sync_cap = 1 (0x1)
ss_screen_ind = 1 (0x1)
sm_cap = 1 (0x1)
vbs = 0 (0x0)
vgcs = 0 (0x0)
freq_cap = 0 (0x0)
class_3_avail = 1 (0x1)
lcsva_cap = 1 (0x1)
ucs2 = 0 (0x0)
solsa = 0 (0x0)
cmsp = 1 (0x1)
a5_3_alg_sup = 1 (0x1)
a5_2_alg_sup = 0 (0x0)
ms_class_mark3_incl = 1 (0x1)
ms_class_mark3
spare_bit0 = 0 (0x0)
const_110 = 6 (0x6)
A5 bits struct
A5/7 = 0 (0x0)
A5/6 = 0 (0x0)
A5/5 = 0 (0x0)
A5/4 = 0 (0x0)
Associated Radio Capability 2 = 1 (0x1)
Associated Radio Capability 1 = 4 (0x4)
r_support_present = 0 (0x0)
hscsd_multi_slot_capability_present = 0 (0x0)
UCS2 treatment = 0 (0x0)
Extended Measurement Capability = 0 (0x0)
ms_measurement_capability_present = 0 (0x0)
ms_positioning_method_capability_present = 1 (0x1)
MS Positioning Method Capability
MS Positioning Method = 1 (0x1)
ecsd_multi_slot_capability_present = 0 (0x0)
gsm_8_psk_struct_present = 0 (0x0)
gsm_400_bands_supported_present = 0 (0x0)
gsm_850_associated_radio_capability_present = 1 (0x1)
GSM 850 Associated Radio Capability = 4 (0x4)
gsm_1900_associated_radio_capability_present = 1 (0x1)
GSM 1900 Associated Radio Capability = 1 (0x1)
UMTS FDD Radio Access Technology Capability = 0 (0x0)
UMTS 3.84 Mcps TDD Radio Access Technology Capability = 0 (0x0)
CDMA 2000 Radio Access Technology Capability = 0 (0x0)
dtm_gprs_multi_slot_class_present = 0 (0x0)
single_band_support_present = 0 (0x0)
gsm_750_associated_radio_capability_present = 0 (0x0)
UMTS 1.28 Mcps TDD Radio Access Technology Capability = 0 (0x0)
GERAN Feature Package 1 = 1 (0x1)
extended_dtm_gprs_multi_slot_class_present = 0 (0x0)
high_multislot_capability_present = 0 (0x0)
geran_iu_mode_capabilities_present = 0 (0x0)
GERAN Feature Package 2 = 0 (0x0)
GMSK Multislot Power Profile = 0 (0x0)
gsm 8-PSK Multislot Power Profile = 3 (0x3)
t_gsm_400_bands_supported_present = 0 (0x0)
t_gsm_900_associated_radio_capability_present = 0 (0x0)
Downlink Advanced Receiver Performance = 1 (0x1)
DTM Enhancements Capability = 0 (0x0)
dtm_gprs_high_multi_slot_class_present = 0 (0x0)
Repeated ACCH Capability = 1 (0x1)
gsm_710_associated_radio_capability_present = 0 (0x0)
t_gsm_810_associated_radio_capability_present = 0 (0x0)
Ciphering Mode Setting Capability = 0 (0x0)
Additional Positioning Capabilities = 0 (0x0)
E-UTRA FDD support = 1 (0x1)
E-UTRA TDD support = 1 (0x1)
E-UTRA Measurement and Reporting support = 1 (0x1)
Priority-based reselection support = 1 (0x1)
UTRA CSG Cells Reporting = 0 (0x0)
VAMOS Level = 1 (0x1)
spare_bits0_count = 1 (0x1)
spare_bits0 = 0 (0x0)
supp_codecs_incl = 1 (0x1)
supp_codecs
num_codecs = 2 (0x2)
codecs[0]
sysid = 4 (0x4)
length = 2 (0x2)
bitmap[0] = 96 (0x60)
bitmap[1] = 4 (0x4)
codecs[1]
sysid = 0 (0x0)
length = 2 (0x2)
bitmap[0] = 31 (0x1f)
bitmap[1] = 2 (0x2)
add_update_type_incl = 0 (0x0)
voice_domain_pref_incl = 1 (0x1)
voice_domain_pref //语音域的特性
length = 1 (0x1)
UE_usage_setting = 1 (0x1) (Data centric) //数据优先
voice_domain_pref_for_EUTRAN = 3 (0x3) (IMS PS Voice preferred, CS Voice as secondary) //语音优先volte，CSFB次之
dev_properties_incl = 0 (0x0)
old_guti_incl = 1 (0x1)
old_guti
guti_type = 0 (0x0) (Native GUTI) //guti 类型
ms_network_feature_incl = 1 (0x1)
ms_network_feature_support
ext_periodic_timers = 1 (0x1)
network_resource_id_container_incl = 0 (0x0)
t3324_incl = 0 (0x0)
t3412_ext_incl = 0 (0x0)
ext_drx_par_incl = 0 (0x0)
ue_add_security_cap_incl = 0 (0x0)
ue_status_incl = 0 (0x0)
我们从上面attach request中可以得到有关语音相关信息如下
注册lte 网络plmn为 460 00，采用联合附着方式，优先数据业务，关于语音特性，优先volte语音，CSFB次之。
Attach Accept 消息
07:42:25.490 [0xB0EC] LTE NAS EMM Plain OTA Incoming Message
pkt_version = 1 (0x1)
rel_number = 9 (0x9)
rel_version_major = 5 (0x5)
rel_version_minor = 0 (0x0)
security_header_or_skip_ind = 0 (0x0)
prot_disc = 7 (0x7) (EPS mobility management messages)
msg_type = 66 (0x42) (Attach accept)
lte_emm_msg
emm_attach_accept
attach_result = 2 (0x2) (comb EPS/IMSI attach) //附着结果
t3412 //GPRS timer，控制周期性位置更新定时器
unit = 2 (0x2)
timer_value = 9 (0x9)
tai_list //TAI list
num_tai_list = 1 (0x1)
tai_list[0]
list_type = 0 (0x0)
num_element = 0 (0x0)
mcc_mnc
mcc_1 = 4 (0x4)
mcc_2 = 6 (0x6)
mcc_3 = 0 (0x0)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 0 (0x0)
tac[0] = 6150 (0x1806)
esm_msg_container
eps_bearer_id_or_skip_id = 5 (0x5)
prot_disc = 2 (0x2) (EPS session management messages)
trans_id = 5 (0x5)
msg_type = 193 (0xc1) (Activate default EPS bearer context request) //atcivate default eps bearer context 请求
lte_esm_msg
act_def_eps_bearer_context_req
eps_qos
qci = 9 (0x9) (QC9)
oct4_incl = 0 (0x0)
oct5_incl = 0 (0x0)
oct6_incl = 0 (0x0)
oct7_incl = 0 (0x0)
oct8_incl = 0 (0x0)
oct9_incl = 0 (0x0)
oct10_incl = 0 (0x0)
oct11_incl = 0 (0x0)
oct12_incl = 0 (0x0)
oct13_incl = 0 (0x0)
oct14_incl = 0 (0x0)
oct15_incl = 0 (0x0)
access_point // APN信息 CMNET
num_acc_pt_val = 25 (0x19)
acc_pt_name_val[0] = 5 (0x5) (length)
acc_pt_name_val[1] = 99 (0x63) (c)
acc_pt_name_val[2] = 109 (0x6d) (m)
acc_pt_name_val[3] = 110 (0x6e) (n)
acc_pt_name_val[4] = 101 (0x65) (e)
acc_pt_name_val[5] = 116 (0x74) (t)
acc_pt_name_val[6] = 6 (0x6) (length)
acc_pt_name_val[7] = 109 (0x6d) (m)
acc_pt_name_val[8] = 110 (0x6e) (n)
acc_pt_name_val[9] = 99 (0x63) (c)
acc_pt_name_val[10] = 48 (0x30) (0)
acc_pt_name_val[11] = 48 (0x30) (0)
acc_pt_name_val[12] = 50 (0x32) (2)
acc_pt_name_val[13] = 6 (0x6) (length)
acc_pt_name_val[14] = 109 (0x6d) (m)
acc_pt_name_val[15] = 99 (0x63) (c)
acc_pt_name_val[16] = 99 (0x63) (c)
acc_pt_name_val[17] = 52 (0x34) (4)
acc_pt_name_val[18] = 54 (0x36) (6)
acc_pt_name_val[19] = 48 (0x30) (0)
acc_pt_name_val[20] = 4 (0x4) (length)
acc_pt_name_val[21] = 103 (0x67) (g)
acc_pt_name_val[22] = 112 (0x70) (p)
acc_pt_name_val[23] = 114 (0x72) (r)
acc_pt_name_val[24] = 115 (0x73) (s)
pdn_addr //分配的pdn地址
pdn_addr_len = 13 (0xd)
pdn_type = 3 (0x3) (IPv4v6)
ipv6_interface_id = 0x83d26b12ad5af20d (83d2:6b12:ad5a:f20d)
ipv4_addr = 180244164 (0xabe4ec4) (10.190.78.196)
trans_id_incl = 1 (0x1)
trans_id
length = 1 (0x1)
ti_flag = 0 (0x0)
ti_value = 0 (0x0)
qos_incl = 1 (0x1)
qos
delay_class = 4 (0x4) (Delay class 4 (best effort))
reliability_class = 3 (0x3) (Unacknowledged GTP and LLC; Acknowledged RLC, Protected data)
peak_throughput = 9 (0x9) (Up to 256 000 octet/s)
precedence_class = 3 (0x3) (Low priority)
mean_throughput = 31 (0x1f) (Best effort)
traffic_class = 4 (0x4) (Background class)
delivery_order = 2 (0x2) (Without delivery order ('no'))
delivery_err_sdu = 3 (0x3) (Erroneous SDUs are not delivered ('no'))
max_sdu_size = 150 (0x96) (1500 octets)
max_bitrate_uplink = 254 (0xfe) (8640 kbps)
max_bitrate_downlink = 254 (0xfe) (8640 kbps)
residual_ber = 7 (0x7) (1*10^(-5))
sdu_error_ratio = 4 (0x4) (1*10^(-4))
transfer_delay = 18 (0x12) (300 ms)
traffic_hand_pri = 3 (0x3) (Priority level 3)
guar_bitrate_uplink = 255 (0xff) (0kbps)
guar_bitrate_downlink = 255 (0xff) (0kbps)
signalling_ind = 0 (0x0) (Not optimised for signalling traffic)
source_stat_desc = 0 (0x0) (spare)
downlink_ext_incl = 1 (0x1)
max_bitrate_downlink_ext = 250 (0xfa) (256 Mbps)
guar_bitrate_downlink_ext = 0 (0x0) (Use value in oct 13)
uplink_ext_incl = 1 (0x1)
max_bitrate_uplink_ext = 133 (0x85) (75 Mbps)
guar_bitrate_uplink_ext = 0 (0x0) (Use value in oct 12)
llc_sapi_incl = 1 (0x1)
llc_sapi
llc_sapi_value = 11 (0xb)
radio_priority_incl = 1 (0x1)
radio_priority
radio_pri_val = 4 (0x4)
pkt_flow_id_incl = 1 (0x1)
pkt_flow_id
length = 1 (0x1)
packet_flow_id = 8 (0x8)
apn_ambr_incl = 1 (0x1)
apn_ambr
apn_ambr_dl = 254 (0xfe) (8640 kbps)
apn_ambr_ul = 254 (0xfe) (8640 kbps)
oct5_incl = 1 (0x1)
apn_ambr_dl_ext = 102 (0x66) (44 Mbps)
oct6_incl = 1 (0x1)
apn_ambr_ul_ext = 133 (0x85) (75 Mbps)
oct7_incl = 1 (0x1)
apn_ambr_dl_ext2 = 1 (0x1) (308.640000 Mbps)
oct8_incl = 1 (0x1)
apn_ambr_ul_ext2 = 0 (0x0) (Use value in oct 4 and oct 6)
esm_cause_incl = 0 (0x0)
prot_config_incl = 1 (0x1)
prot_config
ext = 1 (0x1)
conf_prot = 0 (0x0)
num_recs = 1 (0x1)
sm_prot[0]
protocol_id = 32801 (0x8021) (IPCP)
prot_len = 16 (0x10)
ipcp_prot
ipcp_prot_id = 3 (0x3) (CONF_NAK)
identifier = 0 (0x0)
rfc1332_conf_nak
num_options = 2 (0x2)
conf_options[0]
type = 129 (0x81)
rfc1877_primary_dns_server_add
length = 6 (0x6)
ip_addr = 3548934194 (0xd3887032) (211.136.112.50)
conf_options[1]
type = 131 (0x83)
rfc1877_sec_dns_server_add
length = 6 (0x6)
ip_addr = 3548943938 (0xd3889642) (211.136.150.66)
num_recs2 = 6 (0x6)
sm_container[0]
container_id = 3 (0x3) (DNS Server IPv6 Address)
container_len = 16 (0x10)
address = 0x2409801e200000000000000000000001 (2409:801e:2000:0:0:0:0:1)
sm_container[1]
container_id = 3 (0x3) (DNS Server IPv6 Address)
container_len = 16 (0x10)
address = 0x2409801e200000000000000000000002 (2409:801e:2000:0:0:0:0:2)
sm_container[2]
container_id = 13 (0xd) (DNS Server IPv4 Address)
container_len = 4 (0x4)
container_contents[0] = 211 (0xd3)
container_contents[1] = 136 (0x88)
container_contents[2] = 112 (0x70)
container_contents[3] = 50 (0x32)
sm_container[3]
container_id = 13 (0xd) (DNS Server IPv4 Address)
container_len = 4 (0x4)
container_contents[0] = 211 (0xd3)
container_contents[1] = 136 (0x88)
container_contents[2] = 150 (0x96)
container_contents[3] = 66 (0x42)
sm_container[4]
container_id = 5 (0x5) (Selected Bearer Control Mode)
container_len = 1 (0x1)
container_contents[0] = 2 (0x2)
sm_container[5]
container_id = 16 (0x10) (Ipv4 Link MTU Request)
container_len = 2 (0x2)
container_contents[0] = 5 (0x5)
container_contents[1] = 220 (0xdc)
connectivity_type_incl = 0 (0x0)
wlan_offload_acceptability_incl = 0 (0x0)
nbifom_incl = 0 (0x0)
header_compression_config_inclu = 0 (0x0)
ctrl_plane_only_ind_incl = 0 (0x0)
ext_prot_config_incl = 0 (0x0)
serv_plmn_rate_ctrl_incl = 0 (0x0)
ext_apn_ambr_incl = 0 (0x0)
ext_eps_qos_incl = 0 (0x0)
guti_incl = 1 (0x1)
guti //mme 分配的guti
id_type = 6 (0x6) (GUTI)
odd_even_ind = 0 (0x0)
Guti_1111 = 15 (0xf)
mcc_1 = 4 (0x4)
mcc_2 = 6 (0x6)
mcc_3 = 0 (0x0)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 0 (0x0)
MME_group_id = 610 (0x262)
MME_code = 242 (0xf2)
m_tmsi = 3733388324 (0xde86fc24) //MSC-S为终端分配的TMSI
loc_id_incl = 1 (0x1)
loc_area_id //位置区标识LAI=mcc+mnc+lac
mcc_1 = 4 (0x4)
mcc_2 = 6 (0x6)
mcc_3 = 0 (0x0)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 0 (0x0)
loc_area_code = 6150 (0x1806)
ms_id_incl = 0 (0x0)
emm_cause_incl = 0 (0x0)
T3402_incl = 0 (0x0)
T3423_incl = 0 (0x0)
equ_plmns_incl = 0 (0x0)
emergnecy_num_list_incl = 0 (0x0)
eps_netwk_feature_support_incl = 1 (0x1)
eps_netwk_feature_support //网络特性
length = 1 (0x1)
CPCIoT = 0 (0x0)
ERwoPDN = 0 (0x0)
ESRPS = 0 (0x0)
CS_LCS = 0 (0x0) (No info about support of loc service via cs is available)
EPC_LCS = 0 (0x0) (Location Services via EPC not supported)
EMC_BS = 0 (0x0) (Emergency bearer services in S1 Mode not supported)
IMSVoPS = 1 (0x1) (IMS Vo PS Session in S1 Mode supported)
add_update_result_incl = 0 (0x0)
t3412_ext_incl = 0 (0x0)
t3324_incl = 0 (0x0)
ext_drx_par_incl = 0 (0x0)
dcn_id_incl = 0 (0x0)
sms_srvc_status_incl = 0 (0x0)
non_3gpp_access_emerg_num_policy_incl = 0 (0x0)
t3448_incl = 0 (0x0)
nwk_policy_incl = 0 (0x0)
t3447_ext_incl = 0 (0x0)
ext_emergency_number_incl = 0 (0x0)
cipher_ket_data_incl = 0 (0x0)
从本文中只有了解，如何从log中分析出，我们的终端会使用那种语音业务即可。