2 * USB network interface driver for Samsung Kalmia based LTE USB modem like the
3 * Samsung GT-B3730 and GT-B3710.
5 * Copyright (C) 2011 Marius Bjoernstad Kotsbak <marius@kotsbak.com>
7 * Sponsored by Quicklink Video Distribution Services Ltd.
9 * Based on the cdc_eem module.
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License as published by
13 * the Free Software Foundation; either version 2 of the License, or
14 * (at your option) any later version.
17 #include <linux/module.h>
18 #include <linux/init.h>
19 #include <linux/netdevice.h>
20 #include <linux/etherdevice.h>
21 #include <linux/ctype.h>
22 #include <linux/ethtool.h>
23 #include <linux/workqueue.h>
24 #include <linux/mii.h>
25 #include <linux/usb.h>
26 #include <linux/crc32.h>
27 #include <linux/usb/cdc.h>
28 #include <linux/usb/usbnet.h>
29 #include <linux/gfp.h>
32 * The Samsung Kalmia based LTE USB modems have a CDC ACM port for modem control
33 * handled by the "option" module and an ethernet data port handled by this
36 * The stick must first be switched into modem mode by usb_modeswitch
37 * or similar tool. Then the modem gets sent two initialization packets by
38 * this module, which gives the MAC address of the device. User space can then
39 * connect the modem using AT commands through the ACM port and then use
40 * DHCP on the network interface exposed by this module. Network packets are
41 * sent to and from the modem in a proprietary format discovered after watching
42 * the behavior of the windows driver for the modem.
44 * More information about the use of the modem is available in usb_modeswitch
45 * forum and the project page:
47 * http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?t=465
48 * https://github.com/mkotsbak/Samsung-GT-B3730-linux-driver
54 #define KALMIA_HEADER_LENGTH 6
55 #define KALMIA_ALIGN_SIZE 4
56 #define KALMIA_USB_TIMEOUT 10000
58 /*-------------------------------------------------------------------------*/
61 kalmia_send_init_packet(struct usbnet
*dev
, u8
*init_msg
, u8 init_msg_len
,
62 u8
*buffer
, u8 expected_len
)
67 netdev_dbg(dev
->net
, "Sending init packet");
69 status
= usb_bulk_msg(dev
->udev
, usb_sndbulkpipe(dev
->udev
, 0x02),
70 init_msg
, init_msg_len
, &act_len
, KALMIA_USB_TIMEOUT
);
73 "Error sending init packet. Status %i, length %i\n",
77 else if (act_len
!= init_msg_len
) {
79 "Did not send all of init packet. Bytes sent: %i",
83 netdev_dbg(dev
->net
, "Successfully sent init packet.");
86 status
= usb_bulk_msg(dev
->udev
, usb_rcvbulkpipe(dev
->udev
, 0x81),
87 buffer
, expected_len
, &act_len
, KALMIA_USB_TIMEOUT
);
91 "Error receiving init result. Status %i, length %i\n",
93 else if (act_len
!= expected_len
)
94 netdev_err(dev
->net
, "Unexpected init result length: %i\n",
101 kalmia_init_and_get_ethernet_addr(struct usbnet
*dev
, u8
*ethernet_addr
)
103 const static char init_msg_1
[] =
104 { 0x57, 0x50, 0x04, 0x00, 0x00, 0x00, 0x00, 0x20, 0x00, 0x00,
106 const static char init_msg_2
[] =
107 { 0x57, 0x50, 0x04, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0xf4,
109 const static int buflen
= 28;
113 usb_buf
= kmalloc(buflen
, GFP_DMA
| GFP_KERNEL
);
117 memcpy(usb_buf
, init_msg_1
, 12);
118 status
= kalmia_send_init_packet(dev
, usb_buf
, sizeof(init_msg_1
)
119 / sizeof(init_msg_1
[0]), usb_buf
, 24);
123 memcpy(usb_buf
, init_msg_2
, 12);
124 status
= kalmia_send_init_packet(dev
, usb_buf
, sizeof(init_msg_2
)
125 / sizeof(init_msg_2
[0]), usb_buf
, 28);
129 memcpy(ethernet_addr
, usb_buf
+ 10, ETH_ALEN
);
136 kalmia_bind(struct usbnet
*dev
, struct usb_interface
*intf
)
139 u8 ethernet_addr
[ETH_ALEN
];
141 /* Don't bind to AT command interface */
142 if (intf
->cur_altsetting
->desc
.bInterfaceClass
!= USB_CLASS_VENDOR_SPEC
)
145 dev
->in
= usb_rcvbulkpipe(dev
->udev
, 0x81 & USB_ENDPOINT_NUMBER_MASK
);
146 dev
->out
= usb_sndbulkpipe(dev
->udev
, 0x02 & USB_ENDPOINT_NUMBER_MASK
);
149 dev
->net
->hard_header_len
+= KALMIA_HEADER_LENGTH
;
150 dev
->hard_mtu
= 1400;
151 dev
->rx_urb_size
= dev
->hard_mtu
* 10; // Found as optimal after testing
153 status
= kalmia_init_and_get_ethernet_addr(dev
, ethernet_addr
);
156 usb_set_intfdata(intf
, NULL
);
157 usb_driver_release_interface(driver_of(intf
), intf
);
161 memcpy(dev
->net
->dev_addr
, ethernet_addr
, ETH_ALEN
);
162 memcpy(dev
->net
->perm_addr
, ethernet_addr
, ETH_ALEN
);
167 static struct sk_buff
*
168 kalmia_tx_fixup(struct usbnet
*dev
, struct sk_buff
*skb
, gfp_t flags
)
170 struct sk_buff
*skb2
= NULL
;
172 unsigned char *header_start
;
173 unsigned char ether_type_1
, ether_type_2
;
174 u8 remainder
, padlen
= 0;
176 if (!skb_cloned(skb
)) {
177 int headroom
= skb_headroom(skb
);
178 int tailroom
= skb_tailroom(skb
);
180 if ((tailroom
>= KALMIA_ALIGN_SIZE
) && (headroom
181 >= KALMIA_HEADER_LENGTH
))
184 if ((headroom
+ tailroom
) > (KALMIA_HEADER_LENGTH
185 + KALMIA_ALIGN_SIZE
)) {
186 skb
->data
= memmove(skb
->head
+ KALMIA_HEADER_LENGTH
,
187 skb
->data
, skb
->len
);
188 skb_set_tail_pointer(skb
, skb
->len
);
193 skb2
= skb_copy_expand(skb
, KALMIA_HEADER_LENGTH
,
194 KALMIA_ALIGN_SIZE
, flags
);
198 dev_kfree_skb_any(skb
);
202 header_start
= skb_push(skb
, KALMIA_HEADER_LENGTH
);
203 ether_type_1
= header_start
[KALMIA_HEADER_LENGTH
+ 12];
204 ether_type_2
= header_start
[KALMIA_HEADER_LENGTH
+ 13];
206 netdev_dbg(dev
->net
, "Sending etherType: %02x%02x", ether_type_1
,
209 /* According to empiric data for data packages */
210 header_start
[0] = 0x57;
211 header_start
[1] = 0x44;
212 content_len
= skb
->len
- KALMIA_HEADER_LENGTH
;
214 put_unaligned_le16(content_len
, &header_start
[2]);
215 header_start
[4] = ether_type_1
;
216 header_start
[5] = ether_type_2
;
218 /* Align to 4 bytes by padding with zeros */
219 remainder
= skb
->len
% KALMIA_ALIGN_SIZE
;
221 padlen
= KALMIA_ALIGN_SIZE
- remainder
;
222 memset(skb_put(skb
, padlen
), 0, padlen
);
227 "Sending package with length %i and padding %i. Header: %02x:%02x:%02x:%02x:%02x:%02x.",
228 content_len
, padlen
, header_start
[0], header_start
[1],
229 header_start
[2], header_start
[3], header_start
[4],
236 kalmia_rx_fixup(struct usbnet
*dev
, struct sk_buff
*skb
)
239 * Our task here is to strip off framing, leaving skb with one
240 * data frame for the usbnet framework code to process.
242 const static u8 HEADER_END_OF_USB_PACKET
[] =
243 { 0x57, 0x5a, 0x00, 0x00, 0x08, 0x00 };
244 const static u8 EXPECTED_UNKNOWN_HEADER_1
[] =
245 { 0x57, 0x43, 0x1e, 0x00, 0x15, 0x02 };
246 const static u8 EXPECTED_UNKNOWN_HEADER_2
[] =
247 { 0x57, 0x50, 0x0e, 0x00, 0x00, 0x00 };
250 /* incomplete header? */
251 if (skb
->len
< KALMIA_HEADER_LENGTH
)
255 struct sk_buff
*skb2
= NULL
;
257 u16 usb_packet_length
, ether_packet_length
;
260 header_start
= skb
->data
;
262 if (unlikely(header_start
[0] != 0x57 || header_start
[1] != 0x44)) {
263 if (!memcmp(header_start
, EXPECTED_UNKNOWN_HEADER_1
,
264 sizeof(EXPECTED_UNKNOWN_HEADER_1
)) || !memcmp(
265 header_start
, EXPECTED_UNKNOWN_HEADER_2
,
266 sizeof(EXPECTED_UNKNOWN_HEADER_2
))) {
269 "Received expected unknown frame header: %02x:%02x:%02x:%02x:%02x:%02x. Package length: %i\n",
270 header_start
[0], header_start
[1],
271 header_start
[2], header_start
[3],
272 header_start
[4], header_start
[5],
273 skb
->len
- KALMIA_HEADER_LENGTH
);
278 "Received unknown frame header: %02x:%02x:%02x:%02x:%02x:%02x. Package length: %i\n",
279 header_start
[0], header_start
[1],
280 header_start
[2], header_start
[3],
281 header_start
[4], header_start
[5],
282 skb
->len
- KALMIA_HEADER_LENGTH
);
289 "Received header: %02x:%02x:%02x:%02x:%02x:%02x. Package length: %i\n",
290 header_start
[0], header_start
[1], header_start
[2],
291 header_start
[3], header_start
[4], header_start
[5],
292 skb
->len
- KALMIA_HEADER_LENGTH
);
294 /* subtract start header and end header */
295 usb_packet_length
= skb
->len
- (2 * KALMIA_HEADER_LENGTH
);
296 ether_packet_length
= get_unaligned_le16(&header_start
[2]);
297 skb_pull(skb
, KALMIA_HEADER_LENGTH
);
299 /* Some small packets misses end marker */
300 if (usb_packet_length
< ether_packet_length
) {
301 ether_packet_length
= usb_packet_length
302 + KALMIA_HEADER_LENGTH
;
306 netdev_dbg(dev
->net
, "Correct package length #%i", i
309 is_last
= (memcmp(skb
->data
+ ether_packet_length
,
310 HEADER_END_OF_USB_PACKET
,
311 sizeof(HEADER_END_OF_USB_PACKET
)) == 0);
313 header_start
= skb
->data
+ ether_packet_length
;
316 "End header: %02x:%02x:%02x:%02x:%02x:%02x. Package length: %i\n",
317 header_start
[0], header_start
[1],
318 header_start
[2], header_start
[3],
319 header_start
[4], header_start
[5],
320 skb
->len
- KALMIA_HEADER_LENGTH
);
328 skb2
= skb_clone(skb
, GFP_ATOMIC
);
333 skb_trim(skb2
, ether_packet_length
);
339 usbnet_skb_return(dev
, skb2
);
340 skb_pull(skb
, ether_packet_length
);
350 static const struct driver_info kalmia_info
= {
351 .description
= "Samsung Kalmia LTE USB dongle",
354 .rx_fixup
= kalmia_rx_fixup
,
355 .tx_fixup
= kalmia_tx_fixup
358 /*-------------------------------------------------------------------------*/
360 static const struct usb_device_id products
[] = {
361 /* The unswitched USB ID, to get the module auto loaded: */
362 { USB_DEVICE(0x04e8, 0x689a) },
363 /* The stick swithed into modem (by e.g. usb_modeswitch): */
364 { USB_DEVICE(0x04e8, 0x6889),
365 .driver_info
= (unsigned long) &kalmia_info
, },
366 { /* EMPTY == end of list */} };
367 MODULE_DEVICE_TABLE( usb
, products
);
369 static struct usb_driver kalmia_driver
= {
371 .id_table
= products
,
372 .probe
= usbnet_probe
,
373 .disconnect
= usbnet_disconnect
,
374 .suspend
= usbnet_suspend
,
375 .resume
= usbnet_resume
378 static int __init
kalmia_init(void)
380 return usb_register(&kalmia_driver
);
382 module_init( kalmia_init
);
384 static void __exit
kalmia_exit(void)
386 usb_deregister(&kalmia_driver
);
388 module_exit( kalmia_exit
);
390 MODULE_AUTHOR("Marius Bjoernstad Kotsbak <marius@kotsbak.com>");
391 MODULE_DESCRIPTION("Samsung Kalmia USB network driver");
392 MODULE_LICENSE("GPL");