Activation Codes and Methods, Hardware Details, Sniffing
Post Reply
jiajie961
Posts: 5
Joined: 25 Apr 2016, 11:36

ZTE MF710(MOVISTAR)

Post by jiajie961 » 10 Sep 2016, 13:07

I have a zte dongle, MF710(MOVISTAR), product id before switch is 0x1595, switched to 0x1534
TargetVendor= 0x19d2
TargetProductList="1534,1592,1596,1600"
StandardEject=1
MessageContent="55534243123456702000000080000c85010101180101010101000000000000"
after switch, I can see one "usb0" cdc_ether device and /dev/ttyUSB0, /dev/ttyUSB1, /dev/ttyUSB2
I tried usb0 for ethernet, failed,also tried use /dev/ttyUSBx to dail but failed too.
switch log:
usb_modeswitch -c /etc/usb_modeswitch.d/19d2:1595 -v 0x19d2 -p 0x1595 -W &
* usb_modeswitch: handle USB devices with multiple modes
* Version 2.4.0 (C) Josua Dietze 2016
* Based on libusb1/libusbx

! PLEASE REPORT NEW CONFIGURATIONS !

DefaultVendor= 0x19d2
DefaultProduct= 0x1595
TargetVendor= 0x19d2
TargetProductList="1534,1592,1596,1600"

StandardEject=1
MessageContent="55534243123456702000000080000c85010101180101010101000000000000"

Look for target devices ...
found USB ID 1d6b:0002
found USB ID 1d6b:0001
found USB ID 1d6b:0001
found USB ID 19d2:1595
vendor ID matched
No devices in target mode or class found
Look for default devices ...
found USB ID 1d6b:0002
found USB ID 1d6b:0001
found USB ID 1d6b:0001
found USB ID 19d2:1595
vendor ID matched
product ID matched
Found devices in default mode (1)
Access device 003 on bus 001
Get the current dev[ 356.530000] usb 1-2: USB disconnect, address 3
ice configuration ...
Current configuration number is 1
Use interface number 0
Use endpoints 0x01 (out) and 0x81 (in)

USB description data (for identification)
-------------------------
Manufacturer: ZTE,Incorporated
Product: ZTE Mobile Broadband Station
Serial No.: 1234567890ABCDEF
-------------------------
Sending standard EJECT sequence
Looking for active driver ...
OK, driver detached
Set up interface 0
Use endpoint 0x01 for message sending ...
Trying to send message 1 to endpoint 0x01 ...
OK, message successfully sent
Read the response to message 1 (CSW) ...
Response successfully read (13 bytes), status 1
Trying to send message 2 to endpoint 0x01 ...
OK, message successfully sent
Read the response to message 2 (CSW) ...
Response successfully read (13 bytes), status 1
Trying to send message 3 to endpoint 0x01 ...
OK, message successfully sent
Read the response to message 3 (CSW) ...
Device seems to have vanished after reading. Good.
Device is gone, skip any further commands
-> Run lsusb to note any changes. Bye!

[ 357.350000] usb 1-2: new high speed USB device using EHCI-NationalChip and address 4
[ 357.510000] usb 1-2: configuration #1 chosen from 1 choice
[ 357.530000] usb0: register 'cdc_ether' at usb-EHCI-NationalChip-2, CDC Ethernet Device, 02:00:ff:aa:aa:aa
[ 357.590000] option 1-2:1.2: GSM modem (1-port) converter detected
[ 357.610000] usb 1-2: GSM modem (1-port) converter now attached to ttyUSB0
[ 357.660000] option 1-2:1.3: GSM modem (1-port) converter detected
[ 357.690000] usb 1-2: GSM modem (1-port) converter now attached to ttyUSB1
[ 357.730000] option 1-2:1.4: GSM modem (1-port) converter detected
[ 357.750000] usb 1-2: GSM modem (1-port) converter now attached to ttyUSB2
[ 357.790000] scsi2 : SCSI emulation for USB Mass Storage devices
[ 362.800000] scsi 2:0:0:0: CD-ROM ZTE USB SCSI CD-ROM 2.31 PQ: 0 ANSI: 0 CCS
[ 362.830000] scsi 2:0:0:0: Attached scsi generic sg0 type 5


I used this dongle in win7 and find it used mbim driver to make a zte wireless network.

But I want to used it in serial mode, any way?

jiajie961
Posts: 5
Joined: 25 Apr 2016, 11:36

Re: ZTE MF710(MOVISTAR)

Post by jiajie961 » 10 Sep 2016, 13:10

I tried more than 20 HUAWEI/ZTE dongles in my device, they work well.
I used usb-modeswitch-2.4.0 and the newest usb-modeswitch-data-20160803

jiajie961
Posts: 5
Joined: 25 Apr 2016, 11:36

Re: ZTE MF710(MOVISTAR)

Post by jiajie961 » 10 Sep 2016, 13:14

Does any body known linux compatible mode for ZTE device?

LOM
Posts: 1404
Joined: 11 Jul 2012, 15:14
Location: Koh Samui, TH

Re: ZTE MF710(MOVISTAR)

Post by LOM » 10 Sep 2016, 14:38

jiajie961 wrote:I used this dongle in win7 and find it used mbim driver to make a zte wireless network.

But I want to used it in serial mode, any way?
Please show a verbose lsusb listing for the device, both before it has been switch and after it has been switched.

Commands:
"lsusb -vd 19d2:1595" and "lsusb -vd 19d2:1534"

jiajie961
Posts: 5
Joined: 25 Apr 2016, 11:36

Re: ZTE MF710(MOVISTAR)

Post by jiajie961 » 14 Sep 2016, 04:45

Thanks for you reply, before switch

Code: Select all

Bus 003 Device 006: ID 19d2:1595 ZTE WCDMA Technologies MSM 
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0 (Defined at Interface level)
  bDeviceSubClass         0 
  bDeviceProtocol         0 
  bMaxPacketSize0        64
  idVendor           0x19d2 ZTE WCDMA Technologies MSM
  idProduct          0x1595 
  bcdDevice            0.00
  iManufacturer           2 
  iProduct                3 
  iSerial                 5 
  bNumConfigurations      3
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength           32
    bNumInterfaces          1
    bConfigurationValue     1
    iConfiguration          0 
    bmAttributes         0xa0
      (Bus Powered)
      Remote Wakeup
    MaxPower              500mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         8 Mass Storage
      bInterfaceSubClass      6 SCSI
      bInterfaceProtocol     80 Bulk-Only
      iInterface              1 
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x01  EP 1 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength           32
    bNumInterfaces          1
    bConfigurationValue     2
    iConfiguration          0 
    bmAttributes         0xa0
      (Bus Powered)
      Remote Wakeup
    MaxPower               98mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         8 Mass Storage
      bInterfaceSubClass      6 SCSI
      bInterfaceProtocol     80 Bulk-Only
      iInterface              1 
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x01  EP 1 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength           32
    bNumInterfaces          1
    bConfigurationValue     3
    iConfiguration          0 
    bmAttributes         0xe0
      Self Powered
      Remote Wakeup
    MaxPower                0mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         8 Mass Storage
      bInterfaceSubClass      6 SCSI
      bInterfaceProtocol     80 Bulk-Only
      iInterface              1 
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x01  EP 1 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0

jiajie961
Posts: 5
Joined: 25 Apr 2016, 11:36

Re: ZTE MF710(MOVISTAR)

Post by jiajie961 » 14 Sep 2016, 04:52

after switch

Code: Select all

Bus 003 Device 008: ID 19d2:1534 ZTE WCDMA Technologies MSM 
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            2 Communications
  bDeviceSubClass         0 
  bDeviceProtocol         0 
  bMaxPacketSize0        64
  idVendor           0x19d2 ZTE WCDMA Technologies MSM
  idProduct          0x1534 
  bcdDevice            0.00
  iManufacturer           9 ZTE,Incorporated
  iProduct               10 ZTE Mobile Broadband Station
  iSerial                12 1234567890ABCDEF
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength          206
    bNumInterfaces          6
    bConfigurationValue     1
    iConfiguration          0 
    bmAttributes         0xa0
      (Bus Powered)
      Remote Wakeup
    MaxPower              500mA
    Interface Association:
      bLength                 8
      bDescriptorType        11
      bFirstInterface         0
      bInterfaceCount         2
      bFunctionClass          2 Communications
      bFunctionSubClass       6 Ethernet Networking
      bFunctionProtocol       0 
      iFunction               2 COM(comm_if)
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           1
      bInterfaceClass         2 Communications
      bInterfaceSubClass      6 Ethernet Networking
      bInterfaceProtocol      0 
      iInterface              2 COM(comm_if)
      CDC Header:
        bcdCDC               1.10
      CDC Union:
        bMasterInterface        0
        bSlaveInterface         1 
      CDC Ethernet:
        iMacAddress                      1 0200FFAAAAAA
        bmEthernetStatistics    0x7f180000
        wMaxSegmentSize               1514
        wNumberMCFilters            0x0000
        bNumberPowerFilters             16
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x88  EP 8 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               1
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       0
      bNumEndpoints           0
      bInterfaceClass        10 CDC Data
      bInterfaceSubClass      0 Unused
      bInterfaceProtocol      0 
      iInterface              3 COM(data_if)
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       1
      bNumEndpoints           2
      bInterfaceClass        10 CDC Data
      bInterfaceSubClass      0 Unused
      bInterfaceProtocol      0 
      iInterface              0 
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x01  EP 1 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        2
      bAlternateSetting       0
      bNumEndpoints           3
      bInterfaceClass       255 Vendor Specific Class
      bInterfaceSubClass    255 Vendor Specific Subclass
      bInterfaceProtocol    255 Vendor Specific Protocol
      iInterface              4 COM(comm_if)
      ** UNRECOGNIZED:  05 24 00 10 01
      ** UNRECOGNIZED:  04 24 02 0f
      ** UNRECOGNIZED:  05 24 06 02 03
      ** UNRECOGNIZED:  05 24 01 03 03
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x87  EP 7 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               3
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x82  EP 2 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x02  EP 2 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        3
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass       255 Vendor Specific Class
      bInterfaceSubClass    255 Vendor Specific Subclass
      bInterfaceProtocol    255 Vendor Specific Protocol
      iInterface              6 COM(data_if)
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x83  EP 3 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x03  EP 3 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        4
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass       255 Vendor Specific Class
      bInterfaceSubClass    255 Vendor Specific Subclass
      bInterfaceProtocol    255 Vendor Specific Protocol
      iInterface              7 COM(data_if)
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x84  EP 4 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x04  EP 4 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        5
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         8 Mass Storage
      bInterfaceSubClass      6 SCSI
      bInterfaceProtocol     80 Bulk-Only
      iInterface              8 Mass Storage 
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x85  EP 5 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x05  EP 5 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
Device Qualifier (for other device speed):
  bLength                10
  bDescriptorType         6
  bcdUSB               2.00
  bDeviceClass            2 Communications
  bDeviceSubClass         0 
  bDeviceProtocol         0 
  bMaxPacketSize0        64
  bNumConfigurations      1
Device Status:     0x0002
  (Bus Powered)
  Remote Wakeup Enabled

LOM
Posts: 1404
Joined: 11 Jul 2012, 15:14
Location: Koh Samui, TH

Re: ZTE MF710(MOVISTAR)

Post by LOM » 14 Sep 2016, 13:01

jiajie961 wrote: [ 357.590000] option 1-2:1.2: GSM modem (1-port) converter detected
[ 357.610000] usb 1-2: GSM modem (1-port) converter now attached to ttyUSB0
[ 357.660000] option 1-2:1.3: GSM modem (1-port) converter detected
[ 357.690000] usb 1-2: GSM modem (1-port) converter now attached to ttyUSB1
[ 357.730000] option 1-2:1.4: GSM modem (1-port) converter detected
[ 357.750000] usb 1-2: GSM modem (1-port) converter now attached to ttyUSB2
[ 357.790000] scsi2 : SCSI emulation for USB Mass Storage devices
[ 362.800000] scsi 2:0:0:0: CD-ROM ZTE USB SCSI CD-ROM 2.31 PQ: 0 ANSI: 0 CCS
[ 362.830000] scsi 2:0:0:0: Attached scsi generic sg0 type 5


I used this dongle in win7 and find it used mbim driver to make a zte wireless network.

But I want to used it in serial mode, any way?
Yes you should be able to use it in serial mode (ppp dialup).

19d2:1534 is what Windows7 and WinXP (no mbim support) will switch the dongle into and
the Windows driver list the interface usage as:

MI_00 ZTE Wireless Ethernet Adapter
MI_02 ZTE Modem Device
MI_03 ZTE UI AT Interface
MI_04 ZTE Diagnostics Device
MI_05 USB Mass Storage Device

Interface 02, 03, 04 corresponds to the ttyUSB0, ttyUSB1, ttyUSB2 you got created.

Post Reply