2
* USB network interface driver for Samsung Kalmia based LTE USB modem like the
3
* Samsung GT-B3730 and GT-B3710.
5
* Copyright (C) 2011 Marius Bjoernstad Kotsbak <marius@kotsbak.com>
7
* Sponsored by Quicklink Video Distribution Services Ltd.
9
* Based on the cdc_eem module.
11
* This program is free software; you can redistribute it and/or modify
12
* it under the terms of the GNU General Public License as published by
13
* the Free Software Foundation; either version 2 of the License, or
14
* (at your option) any later version.
17
#include <linux/module.h>
18
#include <linux/init.h>
19
#include <linux/netdevice.h>
20
#include <linux/etherdevice.h>
21
#include <linux/ctype.h>
22
#include <linux/ethtool.h>
23
#include <linux/workqueue.h>
24
#include <linux/mii.h>
25
#include <linux/usb.h>
26
#include <linux/crc32.h>
27
#include <linux/usb/cdc.h>
28
#include <linux/usb/usbnet.h>
29
#include <linux/gfp.h>
32
* The Samsung Kalmia based LTE USB modems have a CDC ACM port for modem control
33
* handled by the "option" module and an ethernet data port handled by this
36
* The stick must first be switched into modem mode by usb_modeswitch
37
* or similar tool. Then the modem gets sent two initialization packets by
38
* this module, which gives the MAC address of the device. User space can then
39
* connect the modem using AT commands through the ACM port and then use
40
* DHCP on the network interface exposed by this module. Network packets are
41
* sent to and from the modem in a proprietary format discovered after watching
42
* the behavior of the windows driver for the modem.
44
* More information about the use of the modem is available in usb_modeswitch
45
* forum and the project page:
47
* http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?t=465
48
* https://github.com/mkotsbak/Samsung-GT-B3730-linux-driver
54
#define KALMIA_HEADER_LENGTH 6
55
#define KALMIA_ALIGN_SIZE 4
56
#define KALMIA_USB_TIMEOUT 10000
58
/*-------------------------------------------------------------------------*/
61
kalmia_send_init_packet(struct usbnet *dev, u8 *init_msg, u8 init_msg_len,
62
u8 *buffer, u8 expected_len)
67
netdev_dbg(dev->net, "Sending init packet");
69
status = usb_bulk_msg(dev->udev, usb_sndbulkpipe(dev->udev, 0x02),
70
init_msg, init_msg_len, &act_len, KALMIA_USB_TIMEOUT);
73
"Error sending init packet. Status %i, length %i\n",
77
else if (act_len != init_msg_len) {
79
"Did not send all of init packet. Bytes sent: %i",
83
netdev_dbg(dev->net, "Successfully sent init packet.");
86
status = usb_bulk_msg(dev->udev, usb_rcvbulkpipe(dev->udev, 0x81),
87
buffer, expected_len, &act_len, KALMIA_USB_TIMEOUT);
91
"Error receiving init result. Status %i, length %i\n",
93
else if (act_len != expected_len)
94
netdev_err(dev->net, "Unexpected init result length: %i\n",
101
kalmia_init_and_get_ethernet_addr(struct usbnet *dev, u8 *ethernet_addr)
103
const static char init_msg_1[] =
104
{ 0x57, 0x50, 0x04, 0x00, 0x00, 0x00, 0x00, 0x20, 0x00, 0x00,
106
const static char init_msg_2[] =
107
{ 0x57, 0x50, 0x04, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0xf4,
109
const static int buflen = 28;
113
usb_buf = kmalloc(buflen, GFP_DMA | GFP_KERNEL);
117
memcpy(usb_buf, init_msg_1, 12);
118
status = kalmia_send_init_packet(dev, usb_buf, sizeof(init_msg_1)
119
/ sizeof(init_msg_1[0]), usb_buf, 24);
123
memcpy(usb_buf, init_msg_2, 12);
124
status = kalmia_send_init_packet(dev, usb_buf, sizeof(init_msg_2)
125
/ sizeof(init_msg_2[0]), usb_buf, 28);
129
memcpy(ethernet_addr, usb_buf + 10, ETH_ALEN);
136
kalmia_bind(struct usbnet *dev, struct usb_interface *intf)
139
u8 ethernet_addr[ETH_ALEN];
141
/* Don't bind to AT command interface */
142
if (intf->cur_altsetting->desc.bInterfaceClass != USB_CLASS_VENDOR_SPEC)
145
dev->in = usb_rcvbulkpipe(dev->udev, 0x81 & USB_ENDPOINT_NUMBER_MASK);
146
dev->out = usb_sndbulkpipe(dev->udev, 0x02 & USB_ENDPOINT_NUMBER_MASK);
149
dev->net->hard_header_len += KALMIA_HEADER_LENGTH;
150
dev->hard_mtu = 1400;
151
dev->rx_urb_size = dev->hard_mtu * 10; // Found as optimal after testing
153
status = kalmia_init_and_get_ethernet_addr(dev, ethernet_addr);
156
usb_set_intfdata(intf, NULL);
157
usb_driver_release_interface(driver_of(intf), intf);
161
memcpy(dev->net->dev_addr, ethernet_addr, ETH_ALEN);
162
memcpy(dev->net->perm_addr, ethernet_addr, ETH_ALEN);
167
static struct sk_buff *
168
kalmia_tx_fixup(struct usbnet *dev, struct sk_buff *skb, gfp_t flags)
170
struct sk_buff *skb2 = NULL;
172
unsigned char *header_start;
173
unsigned char ether_type_1, ether_type_2;
174
u8 remainder, padlen = 0;
176
if (!skb_cloned(skb)) {
177
int headroom = skb_headroom(skb);
178
int tailroom = skb_tailroom(skb);
180
if ((tailroom >= KALMIA_ALIGN_SIZE) && (headroom
181
>= KALMIA_HEADER_LENGTH))
184
if ((headroom + tailroom) > (KALMIA_HEADER_LENGTH
185
+ KALMIA_ALIGN_SIZE)) {
186
skb->data = memmove(skb->head + KALMIA_HEADER_LENGTH,
187
skb->data, skb->len);
188
skb_set_tail_pointer(skb, skb->len);
193
skb2 = skb_copy_expand(skb, KALMIA_HEADER_LENGTH,
194
KALMIA_ALIGN_SIZE, flags);
198
dev_kfree_skb_any(skb);
202
header_start = skb_push(skb, KALMIA_HEADER_LENGTH);
203
ether_type_1 = header_start[KALMIA_HEADER_LENGTH + 12];
204
ether_type_2 = header_start[KALMIA_HEADER_LENGTH + 13];
206
netdev_dbg(dev->net, "Sending etherType: %02x%02x", ether_type_1,
209
/* According to empiric data for data packages */
210
header_start[0] = 0x57;
211
header_start[1] = 0x44;
212
content_len = skb->len - KALMIA_HEADER_LENGTH;
214
put_unaligned_le16(content_len, &header_start[2]);
215
header_start[4] = ether_type_1;
216
header_start[5] = ether_type_2;
218
/* Align to 4 bytes by padding with zeros */
219
remainder = skb->len % KALMIA_ALIGN_SIZE;
221
padlen = KALMIA_ALIGN_SIZE - remainder;
222
memset(skb_put(skb, padlen), 0, padlen);
227
"Sending package with length %i and padding %i. Header: %02x:%02x:%02x:%02x:%02x:%02x.",
228
content_len, padlen, header_start[0], header_start[1],
229
header_start[2], header_start[3], header_start[4],
236
kalmia_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
239
* Our task here is to strip off framing, leaving skb with one
240
* data frame for the usbnet framework code to process.
242
const static u8 HEADER_END_OF_USB_PACKET[] =
243
{ 0x57, 0x5a, 0x00, 0x00, 0x08, 0x00 };
244
const static u8 EXPECTED_UNKNOWN_HEADER_1[] =
245
{ 0x57, 0x43, 0x1e, 0x00, 0x15, 0x02 };
246
const static u8 EXPECTED_UNKNOWN_HEADER_2[] =
247
{ 0x57, 0x50, 0x0e, 0x00, 0x00, 0x00 };
250
/* incomplete header? */
251
if (skb->len < KALMIA_HEADER_LENGTH)
255
struct sk_buff *skb2 = NULL;
257
u16 usb_packet_length, ether_packet_length;
260
header_start = skb->data;
262
if (unlikely(header_start[0] != 0x57 || header_start[1] != 0x44)) {
263
if (!memcmp(header_start, EXPECTED_UNKNOWN_HEADER_1,
264
sizeof(EXPECTED_UNKNOWN_HEADER_1)) || !memcmp(
265
header_start, EXPECTED_UNKNOWN_HEADER_2,
266
sizeof(EXPECTED_UNKNOWN_HEADER_2))) {
269
"Received expected unknown frame header: %02x:%02x:%02x:%02x:%02x:%02x. Package length: %i\n",
270
header_start[0], header_start[1],
271
header_start[2], header_start[3],
272
header_start[4], header_start[5],
273
skb->len - KALMIA_HEADER_LENGTH);
278
"Received unknown frame header: %02x:%02x:%02x:%02x:%02x:%02x. Package length: %i\n",
279
header_start[0], header_start[1],
280
header_start[2], header_start[3],
281
header_start[4], header_start[5],
282
skb->len - KALMIA_HEADER_LENGTH);
289
"Received header: %02x:%02x:%02x:%02x:%02x:%02x. Package length: %i\n",
290
header_start[0], header_start[1], header_start[2],
291
header_start[3], header_start[4], header_start[5],
292
skb->len - KALMIA_HEADER_LENGTH);
294
/* subtract start header and end header */
295
usb_packet_length = skb->len - (2 * KALMIA_HEADER_LENGTH);
296
ether_packet_length = get_unaligned_le16(&header_start[2]);
297
skb_pull(skb, KALMIA_HEADER_LENGTH);
299
/* Some small packets misses end marker */
300
if (usb_packet_length < ether_packet_length) {
301
ether_packet_length = usb_packet_length
302
+ KALMIA_HEADER_LENGTH;
306
netdev_dbg(dev->net, "Correct package length #%i", i
309
is_last = (memcmp(skb->data + ether_packet_length,
310
HEADER_END_OF_USB_PACKET,
311
sizeof(HEADER_END_OF_USB_PACKET)) == 0);
313
header_start = skb->data + ether_packet_length;
316
"End header: %02x:%02x:%02x:%02x:%02x:%02x. Package length: %i\n",
317
header_start[0], header_start[1],
318
header_start[2], header_start[3],
319
header_start[4], header_start[5],
320
skb->len - KALMIA_HEADER_LENGTH);
328
skb2 = skb_clone(skb, GFP_ATOMIC);
333
skb_trim(skb2, ether_packet_length);
339
usbnet_skb_return(dev, skb2);
340
skb_pull(skb, ether_packet_length);
350
static const struct driver_info kalmia_info = {
351
.description = "Samsung Kalmia LTE USB dongle",
354
.rx_fixup = kalmia_rx_fixup,
355
.tx_fixup = kalmia_tx_fixup
358
/*-------------------------------------------------------------------------*/
360
static const struct usb_device_id products[] = {
361
/* The unswitched USB ID, to get the module auto loaded: */
362
{ USB_DEVICE(0x04e8, 0x689a) },
363
/* The stick swithed into modem (by e.g. usb_modeswitch): */
364
{ USB_DEVICE(0x04e8, 0x6889),
365
.driver_info = (unsigned long) &kalmia_info, },
366
{ /* EMPTY == end of list */} };
367
MODULE_DEVICE_TABLE( usb, products);
369
static struct usb_driver kalmia_driver = {
371
.id_table = products,
372
.probe = usbnet_probe,
373
.disconnect = usbnet_disconnect,
374
.suspend = usbnet_suspend,
375
.resume = usbnet_resume
378
static int __init kalmia_init(void)
380
return usb_register(&kalmia_driver);
382
module_init( kalmia_init);
384
static void __exit kalmia_exit(void)
386
usb_deregister(&kalmia_driver);
388
module_exit( kalmia_exit);
390
MODULE_AUTHOR("Marius Bjoernstad Kotsbak <marius@kotsbak.com>");
391
MODULE_DESCRIPTION("Samsung Kalmia USB network driver");
392
MODULE_LICENSE("GPL");