Activation Codes and Methods, Hardware Details, Sniffing
akhilesh_s
Posts: 5
Joined: 25 Apr 2009, 11:15
Contact:

ZTE AC8710 USBSniff output

Post by akhilesh_s » 15 May 2009, 04:59

http://pastebin.com/m353a27d9

Here is sniffed output for another similar device. Here the default product ID is 0xfff6 and after switching it should become 0xfff1


Please let me know I've done correctly.

khurtsiya
Posts: 28
Joined: 09 May 2009, 21:55
Contact:

Post by khurtsiya » 15 May 2009, 08:09

Josh wrote:Hi, I must have missed your first post.

As you can see from this thread, none of the participants so far was willing to do the basic work of sniffing this device in Windows (or to share any findings). So there is not much useful information at the moment.
The first poster found a default product ID of 0xfff6, contrary to your data. So there might even be several variants of the device around.

Will you try to find the right sequence?

You'll get your first geek stripes afterwards :lol:
All I have done before is commands from this post (bold)

http://www.draisberghof.de/usb_modeswit ... ?p=692#692

Will try to connect now.

khurtsiya
Posts: 28
Joined: 09 May 2009, 21:55
Contact:

Post by khurtsiya » 15 May 2009, 08:43

Unplugged modem and plugged it again.

Code: Select all

khurtsiya@khurtsiya-laptop:/usr/sbin$ sudo usb_modeswitch -c test.config 

 * usb_modeswitch: tool for controlling "flip flop" mode USB devices 
 * Version 0.9.7 (C) Josua Dietze 2009 
 * Works with libusb 0.1.12 and probably other versions 

Looking for target devices ... 
 No devices in target mode or class found 
Looking for default devices ... 
 Found default devices (1) 
Prepare switching, accessing device 003 on bus 005 ... 
-> Run lsusb to note any changes. Bye 

Code: Select all

khurtsiya@khurtsiya-laptop:/usr/sbin$ lsusb 
Bus 002 Device 004: ID 064e:a103 Suyin Corp. 
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub 
Bus 007 Device 002: ID 0a5c:2101 Broadcom Corp. A-Link BlueUsbA2 Bluetooth 
Bus 007 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub 
Bus 006 Device 002: ID 0458:0036 KYE Systems Corp. (Mouse Systems) Pocket Mouse LE 
Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub 
Bus 005 Device 003: ID 19d2:fff5  
Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub 
Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub 
Bus 001 Device 002: ID 07ca:a309 AVerMedia Technologies, Inc. 
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub 
Bus 004 Device 002: ID 138a:0001  
Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub 

Code: Select all

[   20.712353] Registered led device: iwl-phy0:TX 
[   20.737027] ADDRCONF(NETDEV_UP): wlan0: link is not ready 
[   94.550609] UDF-fs: No VRS found 
[   94.613465] ISO 9660 Extensions: Microsoft Joliet Level 3 
[   94.734578] ISO 9660 Extensions: RRIP_1991A 
[  528.656471] usb 5-1: USB disconnect, address 2 
[  558.900125] usb 5-1: new full speed USB device using uhci_hcd and address 3 
[  559.055460] usb 5-1: configuration #1 chosen from 1 choice 
[  559.120809] Initializing USB Mass Storage driver... 
[  559.121121] scsi5 : SCSI emulation for USB Mass Storage devices 
[  559.121300] usbcore: registered new interface driver usb-storage 
[  559.121306] USB Mass Storage support registered. 
[  559.121523] usb-storage: device found at 3 
[  559.121528] usb-storage: waiting for device to settle before scanning 
[  564.121719] usb-storage: device scan complete 
[  564.124606] scsi 5:0:0:0: CD-ROM            ZTE      USB Storage FFFF 2.31 PQ: 0 ANSI: 2 
[  564.161075] sr1: scsi-1 drive 
[  564.164767] sr 5:0:0:0: Attached scsi CD-ROM sr1 
[  564.164902] sr 5:0:0:0: Attached scsi generic sg2 type 5 
[  565.856090] CE: hpet increasing min_delta_ns to 15000 nsec 
[  566.562566] sr1: CDROM (ioctl) error, command: Get configuration 46 00 00 00 00 00 00 00 20 00 
[  566.562594] sr: Sense Key : No Sense [current] 
[  566.562602] sr: Add. Sense: No additional sense information 
[  567.090883] sr1: CDROM (ioctl) error, command: Get configuration 46 00 00 00 00 00 00 00 20 00 
[  567.090892] sr: Sense Key : No Sense [current] 
[  567.090895] sr: Add. Sense: No additional sense information 
[  567.097504] sr1: CDROM (ioctl) error, command: Get configuration 46 00 00 28 00 00 00 00 10 00 
[  567.097519] sr: Sense Key : No Sense [current] 
[  567.097524] sr: Add. Sense: No additional sense information 
[  567.104512] sr1: CDROM (ioctl) error, command: Get configuration 46 00 00 20 00 00 00 00 18 00 
[  567.104527] sr: Sense Key : No Sense [current] 
[  567.104533] sr: Add. Sense: No additional sense information 
[  567.125524] sr1: CDROM (ioctl) error, command: Get configuration 46 00 00 00 00 00 00 00 20 00 
[  567.125540] sr: Sense Key : No Sense [current] 
[  567.125546] sr: Add. Sense: No additional sense information 
[  567.135542] ISO 9660 Extensions: Microsoft Joliet Level 3 
[  567.140527] ISOFS: changing to secondary root 

Josh
Site Admin
Posts: 6570
Joined: 03 Nov 2007, 00:30

Post by Josh » 15 May 2009, 10:43

This time the message was not sent ... I have to check for bugs.

Try adding this to the "test.config" and run again:

Code: Select all

MessageEndpoint=0x05

khurtsiya
Posts: 28
Joined: 09 May 2009, 21:55
Contact:

Post by khurtsiya » 15 May 2009, 10:49

Wait.

My fault. I have not added

MessageContent="5553424312345678c00000008000069f030000000000000000000000000000"

to test.config

Now will try again.

Josh
Site Admin
Posts: 6570
Joined: 03 Nov 2007, 00:30

Re: ZTE AC8710 USBSniff output

Post by Josh » 15 May 2009, 11:19

akhilesh_s wrote:Please let me know I've done correctly.
I think you sniffed on a device after switching. Did you install the logging filter on the device that says "Pid_fff6"?

If your modem changes IDs when switched, there must be some final lines in the log that say "DEVICE_REMOVED" or "SURPRISE_REMOVAL". See the end of khurtsiya's log.

khurtsiya
Posts: 28
Joined: 09 May 2009, 21:55
Contact:

Post by khurtsiya » 15 May 2009, 13:12

So here is my new report:

khurtsiya@khurtsiya-laptop:/usr/sbin$ sudo usb_modeswitch -c test.config

* usb_modeswitch: tool for controlling "flip flop" mode USB devices
* Version 0.9.7 (C) Josua Dietze 2009
* Works with libusb 0.1.12 and probably other versions

Looking for target devices ...
No devices in target mode or class found
Looking for default devices ...
Found default devices (1)
Prepare switching, accessing device 003 on bus 005 ...
No MessageEndpoint given. Trying to autodetect ...
OK, using endpoint 0x05
Looking for active driver ...
OK, driver found ("usb-storage")
OK, driver "usb-storage" detached
Setting up communication with interface 0 ...
Trying to send the message to endpoint 0x05 ...
OK, message successfully sent
-> Run lsusb to note any changes. Bye

khurtsiya@khurtsiya-laptop:/usr/sbin$ lsusb
Bus 002 Device 005: ID 064e:a103 Suyin Corp.
Bus 002 Device 004: ID 04a9:26b4 Canon, Inc. MF4010 Series
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 007 Device 002: ID 0a5c:2101 Broadcom Corp. A-Link BlueUsbA2 Bluetooth
Bus 007 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 006 Device 002: ID 0458:0036 KYE Systems Corp. (Mouse Systems) Pocket Mouse LE
Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 005 Device 004: ID 19d2:ffff
Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 001 Device 002: ID 07ca:a309 AVerMedia Technologies, Inc.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 004 Device 002: ID 138a:0001
Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub

dmesg

[ 11.044781] iwlagn: Copyright(c) 2003-2008 Intel Corporation
[ 11.044856] iwlagn 0000:08:00.0: PCI INT A -> GSI 19 (level, low) -> IRQ 19
[ 11.044867] iwlagn 0000:08:00.0: setting latency timer to 64
[ 11.044919] iwlagn: Detected Intel Wireless WiFi Link 4965AGN REV=0x4
[ 11.087020] iwlagn: Tunable channels: 13 802.11bg, 19 802.11a channels
[ 11.087088] iwlagn 0000:08:00.0: irq 2296 for MSI/MSI-X
[ 11.088016] phy0: Selected rate control algorithm 'iwl-agn-rs'
[ 11.356334] usb 7-1: new full speed USB device using uhci_hcd and address 2
[ 11.483923] af9013: firmware version:4.65.0
[ 11.488425] DVB: registering adapter 0 frontend 0 (Afatech AF9013 DVB-T)...
[ 11.524229] usb 7-1: configuration #1 chosen from 1 choice
[ 11.524867] MXL5005S: Attached at address 0xc6
[ 11.524870] dvb-usb: AVerMedia A309 successfully initialized and connected.
[ 11.532472] usbcore: registered new interface driver dvb_usb_af9015
[ 11.560983] Bluetooth: Generic Bluetooth USB driver ver 0.3
[ 11.561139] usbcore: registered new interface driver btusb
[ 11.720948] lp: driver loaded but no devices found
[ 11.741888] Synaptics Touchpad, model: 1, fw: 6.3, id: 0x12a0b1, caps: 0xa04711/0xa04000
[ 11.776867] Adding 9100780k swap on /dev/sda6. Priority:-1 extents:1 across:9100780k
[ 11.779565] input: SynPS/2 Synaptics TouchPad as /devices/platform/i8042/serio2/input/input9
[ 12.306559] EXT3 FS on sda5, internal journal
[ 12.500049] Clocksource tsc unstable (delta = -278067451 ns)
[ 13.333412] type=1505 audit(1242384859.897:2): operation="profile_load" name="/usr/share/gdm/guest-session/Xsession" name2="default" pid=2241
[ 13.366529] type=1505 audit(1242384859.929:3): operation="profile_load" name="/sbin/dhclient-script" name2="default" pid=2245
[ 13.366601] type=1505 audit(1242384859.929:4): operation="profile_load" name="/sbin/dhclient3" name2="default" pid=2245
[ 13.366634] type=1505 audit(1242384859.929:5): operation="profile_load" name="/usr/lib/NetworkManager/nm-dhcp-client.action" name2="default" pid=2245
[ 13.366662] type=1505 audit(1242384859.929:6): operation="profile_load" name="/usr/lib/connman/scripts/dhclient-script" name2="default" pid=2245
[ 13.458170] type=1505 audit(1242384860.021:7): operation="profile_load" name="/usr/lib/cups/backend/cups-pdf" name2="default" pid=2250
[ 13.458301] type=1505 audit(1242384860.021:8): operation="profile_load" name="/usr/sbin/cupsd" name2="default" pid=2250
[ 13.478164] type=1505 audit(1242384860.042:9): operation="profile_load" name="/usr/sbin/tcpdump" name2="default" pid=2254
[ 15.088810] usblp0: nonzero read bulk status received: -71
[ 15.261631] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 15.261634] Bluetooth: BNEP filters: protocol multicast
[ 15.276259] Bridge firewalling registered
[ 16.872411] ppdev: user-space parallel port driver
[ 19.856477] usblp0: nonzero read bulk status received: -71
[ 20.436002] ATL1E 0000:02:00.0: irq 2295 for MSI/MSI-X
[ 20.436261] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 20.436830] iwlagn 0000:08:00.0: firmware: requesting iwlwifi-4965-2.ucode
[ 20.692545] Registered led device: iwl-phy0:radio
[ 20.692571] Registered led device: iwl-phy0:assoc
[ 20.692597] Registered led device: iwl-phy0:RX
[ 20.692608] Registered led device: iwl-phy0:TX
[ 20.717376] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 65.625126] usb 5-1: USB disconnect, address 2
[ 82.844096] usb 5-1: new full speed USB device using uhci_hcd and address 3
[ 83.000433] usb 5-1: configuration #1 chosen from 1 choice
[ 83.078027] Initializing USB Mass Storage driver...
[ 83.079365] scsi5 : SCSI emulation for USB Mass Storage devices
[ 83.080129] usbcore: registered new interface driver usb-storage
[ 83.080136] USB Mass Storage support registered.
[ 83.081872] usb-storage: device found at 3
[ 83.081879] usb-storage: waiting for device to settle before scanning
[ 88.082625] usb-storage: device scan complete
[ 88.085558] scsi 5:0:0:0: CD-ROM ZTE USB Storage FFFF 2.31 PQ: 0 ANSI: 2
[ 88.126445] sr1: scsi-1 drive
[ 88.126656] sr 5:0:0:0: Attached scsi CD-ROM sr1
[ 88.126791] sr 5:0:0:0: Attached scsi generic sg2 type 5
[ 90.555513] sr1: CDROM (ioctl) error, command: Get configuration 46 00 00 00 00 00 00 00 20 00
[ 90.555542] sr: Sense Key : No Sense [current]
[ 90.555551] sr: Add. Sense: No additional sense information
[ 91.269577] sr1: CDROM (ioctl) error, command: Get configuration 46 00 00 00 00 00 00 00 20 00
[ 91.269605] sr: Sense Key : No Sense [current]
[ 91.269613] sr: Add. Sense: No additional sense information
[ 91.276603] sr1: CDROM (ioctl) error, command: Get configuration 46 00 00 28 00 00 00 00 10 00
[ 91.276630] sr: Sense Key : No Sense [current]
[ 91.276639] sr: Add. Sense: No additional sense information
[ 91.283577] sr1: CDROM (ioctl) error, command: Get configuration 46 00 00 20 00 00 00 00 18 00
[ 91.283603] sr: Sense Key : No Sense [current]
[ 91.283612] sr: Add. Sense: No additional sense information
[ 91.305571] sr1: CDROM (ioctl) error, command: Get configuration 46 00 00 00 00 00 00 00 20 00
[ 91.305598] sr: Sense Key : No Sense [current]
[ 91.305606] sr: Add. Sense: No additional sense information
[ 91.315565] ISO 9660 Extensions: Microsoft Joliet Level 3
[ 91.320594] ISOFS: changing to secondary root
[ 140.202764] ACPI: EC: non-query interrupt received, switching to interrupt mode
[ 182.267040] scsi 5:0:0:0: rejecting I/O to dead device
[ 182.432173] usb 5-1: USB disconnect, address 3
[ 183.696413] usb 5-1: new full speed USB device using uhci_hcd and address 4
[ 183.908948] usb 5-1: configuration #1 chosen from 1 choice

Josh
Site Admin
Posts: 6570
Joined: 03 Nov 2007, 00:30

Post by Josh » 15 May 2009, 13:57

That looks excellent indeed.

Did you make sure you had fff5 before? In that case, it really worked!

Now say:

Code: Select all

modprobe -v usbserial -vendor 0x19d2 -product 0xffff
and see what changes with "dmesg".

khurtsiya
Posts: 28
Joined: 09 May 2009, 21:55
Contact:

Post by khurtsiya » 15 May 2009, 14:11

I have done this again and before checked there was fff5 =)

But last command gave this:

Code: Select all

khurtsiya@khurtsiya-laptop:/usr/sbin$ modprobe -v usbserial -vendor 0x19d2 -product 0xffff 
modprobe: invalid option -- 'e' 
Usage: modprobe [-v] [-V] [-C config-file] [-d <dirname> ] [-n] [-i] [-q] [-b] [-o <modname>] [ --dump-modversions ] <modname> [parameters...] 
modprobe -r [-n] [-i] [-v] <modulename> ... 
modprobe -l -t <dirname> [ -a <modulename> ...]

Josh
Site Admin
Posts: 6570
Joined: 03 Nov 2007, 00:30

Post by Josh » 15 May 2009, 16:33

Now I was wrong.

It must be:

Code: Select all

modprobe -v usbserial vendor=0x19d2 product=0xffff

khurtsiya
Posts: 28
Joined: 09 May 2009, 21:55
Contact:

Post by khurtsiya » 15 May 2009, 16:43

=(

Code: Select all

khurtsiya@khurtsiya-laptop:~$ modprobe -v usbserial vendor=0x19d2 product=0xffffFATAL: Module usbserial not found.

khurtsiya
Posts: 28
Joined: 09 May 2009, 21:55
Contact:

Post by khurtsiya » 15 May 2009, 17:08

Found this https://bugs.launchpad.net/ubuntu/+sour ... bug/345002

and added

Code: Select all

usbserial.vendor=0x19d2 usbserial.product=0xffff
to /boot/grub/menu.lst

Now:

Code: Select all

[    3.675721] kjournald starting.  Commit interval 5 seconds
[    3.675733] EXT3-fs: mounted filesystem with ordered data mode.
[    3.780050] usb 2-6: new high speed USB device using ehci_hcd and address 4
[    3.956695] usb 2-6: configuration #1 chosen from 1 choice
[    4.196061] usb 4-2: new full speed USB device using uhci_hcd and address 2
[    4.354634] usb 4-2: configuration #1 chosen from 1 choice
[    4.596070] usb 5-1: new full speed USB device using uhci_hcd and address 2
[    4.750862] usb 5-1: configuration #1 chosen from 1 choice
[    4.752818] usbserial_generic 5-1:1.0: generic converter detected
[b][    4.752880] usb 5-1: generic converter now attached to ttyUSB0
[    4.755932] usbserial_generic 5-1:1.1: generic converter detected
[    4.755958] usb 5-1: generic converter now attached to ttyUSB1
[    4.757898] usbserial_generic 5-1:1.2: generic converter detected
[    4.757935] usb 5-1: generic converter now attached to ttyUSB2
[    4.759896] usbserial_generic 5-1:1.3: generic converter detected
[    4.759934] usb 5-1: generic converter now attached to ttyUSB3[/b]
[    5.001067] usb 6-2: new low speed USB device using uhci_hcd and address 2
[    5.177097] usb 6-2: configuration #1 chosen from 1 choice
[   10.102826] udev: starting version 141
[   10.312219] sdhci: Secure Digital Host Controller Interface driver
[   10.312223] sdhci: Copyright(c) Pierre Ossman
So I set up gnome-ppp and it detected modem!

Many thanks!!! =)

Though there is another problem now...

After pushing Connect button I have this log:

Code: Select all

--> Ignoring malformed input line: ";Do NOT edit this file by hand!"
--> WvDial: Internet dialer version 1.60
--> Cannot get information for serial port.
--> Initializing modem.
--> Sending: ATZ
ATZ
OK
--> Sending: ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0
ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0
OK
--> Modem initialized.
--> Please enter password (or empty password to stop):
and

Image

khurtsiya
Posts: 28
Joined: 09 May 2009, 21:55
Contact:

Post by khurtsiya » 15 May 2009, 17:15

Ok this solved by checking Save password.

BUT

still can not connect:

Code: Select all

khurtsiya@khurtsiya-laptop:~$ wvdial
--> WvDial: Internet dialer version 1.60
--> Cannot get information for serial port.
--> Initializing modem.
--> Sending: ATZ
--> Sending: ATQ0
--> Re-Sending: ATZ
--> Modem not responding.

Josh
Site Admin
Posts: 6570
Joined: 03 Nov 2007, 00:30

Post by Josh » 15 May 2009, 17:23

Wow, you were quicker than me. I was just beginning to type the answer about the driver in the kernel ...

I really don't know which password wvdial wants. I am not using it myself. But I think all those initializing parameters are useless for 3G modems.

Josh
Site Admin
Posts: 6570
Joined: 03 Nov 2007, 00:30

Post by Josh » 15 May 2009, 17:27

It may have been switched back by one of these AT commands. wvdial was talking to the modem without problems before. Try "lsusb" and "dmesg".

If you find out how to set that command string with all these "E0 &C1 etc." parameters, try to remove them.

Post Reply