2 * USB network interface driver for Samsung Kalmia based LTE USB modem like the
3 * Samsung GT-B3730 and GT-B3710.
5 * Copyright (C) 2011 Marius Bjoernstad Kotsbak <marius@kotsbak.com>
7 * Sponsored by Quicklink Video Distribution Services Ltd.
9 * Based on the cdc_eem module.
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License as published by
13 * the Free Software Foundation; either version 2 of the License, or
14 * (at your option) any later version.
17 #include <linux/module.h>
18 #include <linux/init.h>
19 #include <linux/netdevice.h>
20 #include <linux/etherdevice.h>
21 #include <linux/ctype.h>
22 #include <linux/ethtool.h>
23 #include <linux/workqueue.h>
24 #include <linux/mii.h>
25 #include <linux/usb.h>
26 #include <linux/crc32.h>
27 #include <linux/usb/cdc.h>
28 #include <linux/usb/usbnet.h>
29 #include <linux/gfp.h>
32 * The Samsung Kalmia based LTE USB modems have a CDC ACM port for modem control
33 * handled by the "option" module and an ethernet data port handled by this
36 * The stick must first be switched into modem mode by usb_modeswitch
37 * or similar tool. Then the modem gets sent two initialization packets by
38 * this module, which gives the MAC address of the device. User space can then
39 * connect the modem using AT commands through the ACM port and then use
40 * DHCP on the network interface exposed by this module. Network packets are
41 * sent to and from the modem in a proprietary format discovered after watching
42 * the behavior of the windows driver for the modem.
44 * More information about the use of the modem is available in usb_modeswitch
45 * forum and the project page:
47 * http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?t=465
48 * https://github.com/mkotsbak/Samsung-GT-B3730-linux-driver
54 #define KALMIA_HEADER_LENGTH 6
55 #define KALMIA_ALIGN_SIZE 4
56 #define KALMIA_USB_TIMEOUT 10000
58 /*-------------------------------------------------------------------------*/
61 kalmia_send_init_packet(struct usbnet
*dev
, u8
*init_msg
, u8 init_msg_len
,
62 u8
*buffer
, u8 expected_len
)
67 netdev_dbg(dev
->net
, "Sending init packet");
69 status
= usb_bulk_msg(dev
->udev
, usb_sndbulkpipe(dev
->udev
, 0x02),
70 init_msg
, init_msg_len
, &act_len
, KALMIA_USB_TIMEOUT
);
73 "Error sending init packet. Status %i, length %i\n",
77 else if (act_len
!= init_msg_len
) {
79 "Did not send all of init packet. Bytes sent: %i",
83 netdev_dbg(dev
->net
, "Successfully sent init packet.");
86 status
= usb_bulk_msg(dev
->udev
, usb_rcvbulkpipe(dev
->udev
, 0x81),
87 buffer
, expected_len
, &act_len
, KALMIA_USB_TIMEOUT
);
91 "Error receiving init result. Status %i, length %i\n",
93 else if (act_len
!= expected_len
)
94 netdev_err(dev
->net
, "Unexpected init result length: %i\n",
101 kalmia_init_and_get_ethernet_addr(struct usbnet
*dev
, u8
*ethernet_addr
)
103 static const char init_msg_1
[] =
104 { 0x57, 0x50, 0x04, 0x00, 0x00, 0x00, 0x00, 0x20, 0x00, 0x00,
106 static const char init_msg_2
[] =
107 { 0x57, 0x50, 0x04, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0xf4,
109 static const int buflen
= 28;
113 usb_buf
= kmalloc(buflen
, GFP_DMA
| GFP_KERNEL
);
117 memcpy(usb_buf
, init_msg_1
, 12);
118 status
= kalmia_send_init_packet(dev
, usb_buf
, sizeof(init_msg_1
)
119 / sizeof(init_msg_1
[0]), usb_buf
, 24);
123 memcpy(usb_buf
, init_msg_2
, 12);
124 status
= kalmia_send_init_packet(dev
, usb_buf
, sizeof(init_msg_2
)
125 / sizeof(init_msg_2
[0]), usb_buf
, 28);
129 memcpy(ethernet_addr
, usb_buf
+ 10, ETH_ALEN
);
136 kalmia_bind(struct usbnet
*dev
, struct usb_interface
*intf
)
139 u8 ethernet_addr
[ETH_ALEN
];
141 /* Don't bind to AT command interface */
142 if (intf
->cur_altsetting
->desc
.bInterfaceClass
!= USB_CLASS_VENDOR_SPEC
)
145 dev
->in
= usb_rcvbulkpipe(dev
->udev
, 0x81 & USB_ENDPOINT_NUMBER_MASK
);
146 dev
->out
= usb_sndbulkpipe(dev
->udev
, 0x02 & USB_ENDPOINT_NUMBER_MASK
);
149 dev
->net
->hard_header_len
+= KALMIA_HEADER_LENGTH
;
150 dev
->hard_mtu
= 1400;
151 dev
->rx_urb_size
= dev
->hard_mtu
* 10; // Found as optimal after testing
153 status
= kalmia_init_and_get_ethernet_addr(dev
, ethernet_addr
);
156 usb_set_intfdata(intf
, NULL
);
157 usb_driver_release_interface(driver_of(intf
), intf
);
161 memcpy(dev
->net
->dev_addr
, ethernet_addr
, ETH_ALEN
);
166 static struct sk_buff
*
167 kalmia_tx_fixup(struct usbnet
*dev
, struct sk_buff
*skb
, gfp_t flags
)
169 struct sk_buff
*skb2
= NULL
;
171 unsigned char *header_start
;
172 unsigned char ether_type_1
, ether_type_2
;
173 u8 remainder
, padlen
= 0;
175 if (!skb_cloned(skb
)) {
176 int headroom
= skb_headroom(skb
);
177 int tailroom
= skb_tailroom(skb
);
179 if ((tailroom
>= KALMIA_ALIGN_SIZE
) && (headroom
180 >= KALMIA_HEADER_LENGTH
))
183 if ((headroom
+ tailroom
) > (KALMIA_HEADER_LENGTH
184 + KALMIA_ALIGN_SIZE
)) {
185 skb
->data
= memmove(skb
->head
+ KALMIA_HEADER_LENGTH
,
186 skb
->data
, skb
->len
);
187 skb_set_tail_pointer(skb
, skb
->len
);
192 skb2
= skb_copy_expand(skb
, KALMIA_HEADER_LENGTH
,
193 KALMIA_ALIGN_SIZE
, flags
);
197 dev_kfree_skb_any(skb
);
201 header_start
= skb_push(skb
, KALMIA_HEADER_LENGTH
);
202 ether_type_1
= header_start
[KALMIA_HEADER_LENGTH
+ 12];
203 ether_type_2
= header_start
[KALMIA_HEADER_LENGTH
+ 13];
205 netdev_dbg(dev
->net
, "Sending etherType: %02x%02x", ether_type_1
,
208 /* According to empiric data for data packages */
209 header_start
[0] = 0x57;
210 header_start
[1] = 0x44;
211 content_len
= skb
->len
- KALMIA_HEADER_LENGTH
;
213 put_unaligned_le16(content_len
, &header_start
[2]);
214 header_start
[4] = ether_type_1
;
215 header_start
[5] = ether_type_2
;
217 /* Align to 4 bytes by padding with zeros */
218 remainder
= skb
->len
% KALMIA_ALIGN_SIZE
;
220 padlen
= KALMIA_ALIGN_SIZE
- remainder
;
221 memset(skb_put(skb
, padlen
), 0, padlen
);
225 "Sending package with length %i and padding %i. Header: %6phC.",
226 content_len
, padlen
, header_start
);
232 kalmia_rx_fixup(struct usbnet
*dev
, struct sk_buff
*skb
)
235 * Our task here is to strip off framing, leaving skb with one
236 * data frame for the usbnet framework code to process.
238 static const u8 HEADER_END_OF_USB_PACKET
[] =
239 { 0x57, 0x5a, 0x00, 0x00, 0x08, 0x00 };
240 static const u8 EXPECTED_UNKNOWN_HEADER_1
[] =
241 { 0x57, 0x43, 0x1e, 0x00, 0x15, 0x02 };
242 static const u8 EXPECTED_UNKNOWN_HEADER_2
[] =
243 { 0x57, 0x50, 0x0e, 0x00, 0x00, 0x00 };
246 /* incomplete header? */
247 if (skb
->len
< KALMIA_HEADER_LENGTH
)
251 struct sk_buff
*skb2
= NULL
;
253 u16 usb_packet_length
, ether_packet_length
;
256 header_start
= skb
->data
;
258 if (unlikely(header_start
[0] != 0x57 || header_start
[1] != 0x44)) {
259 if (!memcmp(header_start
, EXPECTED_UNKNOWN_HEADER_1
,
260 sizeof(EXPECTED_UNKNOWN_HEADER_1
)) || !memcmp(
261 header_start
, EXPECTED_UNKNOWN_HEADER_2
,
262 sizeof(EXPECTED_UNKNOWN_HEADER_2
))) {
264 "Received expected unknown frame header: %6phC. Package length: %i\n",
266 skb
->len
- KALMIA_HEADER_LENGTH
);
270 "Received unknown frame header: %6phC. Package length: %i\n",
272 skb
->len
- KALMIA_HEADER_LENGTH
);
278 "Received header: %6phC. Package length: %i\n",
279 header_start
, skb
->len
- KALMIA_HEADER_LENGTH
);
281 /* subtract start header and end header */
282 usb_packet_length
= skb
->len
- (2 * KALMIA_HEADER_LENGTH
);
283 ether_packet_length
= get_unaligned_le16(&header_start
[2]);
284 skb_pull(skb
, KALMIA_HEADER_LENGTH
);
286 /* Some small packets misses end marker */
287 if (usb_packet_length
< ether_packet_length
) {
288 ether_packet_length
= usb_packet_length
289 + KALMIA_HEADER_LENGTH
;
293 netdev_dbg(dev
->net
, "Correct package length #%i", i
296 is_last
= (memcmp(skb
->data
+ ether_packet_length
,
297 HEADER_END_OF_USB_PACKET
,
298 sizeof(HEADER_END_OF_USB_PACKET
)) == 0);
300 header_start
= skb
->data
+ ether_packet_length
;
302 "End header: %6phC. Package length: %i\n",
304 skb
->len
- KALMIA_HEADER_LENGTH
);
312 skb2
= skb_clone(skb
, GFP_ATOMIC
);
317 skb_trim(skb2
, ether_packet_length
);
323 usbnet_skb_return(dev
, skb2
);
324 skb_pull(skb
, ether_packet_length
);
334 static const struct driver_info kalmia_info
= {
335 .description
= "Samsung Kalmia LTE USB dongle",
338 .rx_fixup
= kalmia_rx_fixup
,
339 .tx_fixup
= kalmia_tx_fixup
342 /*-------------------------------------------------------------------------*/
344 static const struct usb_device_id products
[] = {
345 /* The unswitched USB ID, to get the module auto loaded: */
346 { USB_DEVICE(0x04e8, 0x689a) },
347 /* The stick swithed into modem (by e.g. usb_modeswitch): */
348 { USB_DEVICE(0x04e8, 0x6889),
349 .driver_info
= (unsigned long) &kalmia_info
, },
350 { /* EMPTY == end of list */} };
351 MODULE_DEVICE_TABLE( usb
, products
);
353 static struct usb_driver kalmia_driver
= {
355 .id_table
= products
,
356 .probe
= usbnet_probe
,
357 .disconnect
= usbnet_disconnect
,
358 .suspend
= usbnet_suspend
,
359 .resume
= usbnet_resume
,
360 .disable_hub_initiated_lpm
= 1,
363 module_usb_driver(kalmia_driver
);
365 MODULE_AUTHOR("Marius Bjoernstad Kotsbak <marius@kotsbak.com>");
366 MODULE_DESCRIPTION("Samsung Kalmia USB network driver");
367 MODULE_LICENSE("GPL");