OpenWrt support for Zyxel LTE5398-M904

Thank you @ncompact and @AndrewZ
You were right!
Somehow I missed the part that I have to configure the Quectel modem separately.

This is my latest configuration:

config interface '4G'
	option proto 'qmi'
	option device '/dev/cdc-wdm0'
	option apn 'web.vodafone.de'
	option auth 'none'
	option pdptype 'ipv4'
	option delay '30'
	option timeout '120'

For future reference, I am posting my command history for anyone else who might land here via a search engine
Screenshot 2024-07-24 at 19.33.31

picocom /dev/ttyUSB3

>AT+CGDCONT?
>+CGDCONT: 1,"IPV4V6","internet","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0
>+CGDCONT: 2,"IPV4V6","ims","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0
>+CGDCONT: 3,"IPV4V6","sos","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,1
>
>OK
>
>AT+CGDCONT=1,"IP","web.vodafone.de"
>OK
>
>AAT+CGDCONT?
>+CGDCONT: 1,"IP","web.vodafone.de","0.0.0.0",0,0,0,0
>+CGDCONT: 2,"IPV4V6","ims","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0
>+CGDCONT: 3,"IPV4V6","sos","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,1
>
>OK

reboot

Since I set the record straight, this is what my last log looks like.

Fri Jul 19 17:58:37 2024 daemon.notice netifd: Interface '4G' is setting up now
Fri Jul 19 17:59:07 2024 daemon.notice netifd: 4G (4903): Waiting for SIM initialization
Fri Jul 19 17:59:10 2024 daemon.notice netifd: 4G (4903): Failed to parse message data
Fri Jul 19 17:59:10 2024 daemon.notice netifd: 4G (4903): SIM in illegal state - Power-cycling SIM
Fri Jul 19 17:59:10 2024 daemon.notice netifd: 4G (4903): "Failed to connect to service"
Fri Jul 19 17:59:13 2024 daemon.notice netifd: 4G (4903): "Failed to connect to service"
Fri Jul 19 17:59:14 2024 daemon.notice netifd: 4G (4903): Failed to parse message data
Fri Jul 19 17:59:14 2024 daemon.notice netifd: 4G (4903): SIM in illegal state - Power-cycling SIM
Fri Jul 19 17:59:15 2024 daemon.notice netifd: 4G (4903): "Failed to connect to service"
Fri Jul 19 17:59:18 2024 daemon.notice netifd: 4G (4903): "Failed to connect to service"
Fri Jul 19 17:59:19 2024 daemon.notice netifd: 4G (4903): Failed to parse message data
Fri Jul 19 17:59:19 2024 daemon.notice netifd: 4G (4903): SIM in illegal state - Power-cycling SIM
Fri Jul 19 17:59:20 2024 daemon.notice netifd: 4G (4903): Request timed out
Fri Jul 19 17:59:20 2024 daemon.notice netifd: 4G (4903): "Unknown error"
Fri Jul 19 17:59:23 2024 daemon.notice netifd: 4G (4903): "No effect"
Fri Jul 19 17:59:24 2024 daemon.notice netifd: 4G (4903): Failed to parse message data
Fri Jul 19 17:59:24 2024 daemon.notice netifd: 4G (4903): PIN verification is disabled
Fri Jul 19 17:59:25 2024 daemon.notice netifd: 4G (4903): Device does not support 802.3 mode. Informing driver of raw-ip only for wwan0 ..
Fri Jul 19 17:59:26 2024 daemon.notice netifd: 4G (4903): Waiting for network registration
Fri Jul 19 17:59:31 2024 daemon.notice netifd: 4G (4903): Starting network 4G
Fri Jul 19 17:59:31 2024 daemon.notice netifd: 4G (4903): Setting up wwan0
Fri Jul 19 17:59:32 2024 daemon.notice netifd: Interface '4G' is now up
Fri Jul 19 17:59:32 2024 daemon.notice netifd: Network device 'wwan0' link is up
Fri Jul 19 17:59:32 2024 daemon.notice netifd: Network alias 'wwan0' link is up
Fri Jul 19 17:59:32 2024 daemon.notice netifd: Interface '4G_4' is enabled
Fri Jul 19 17:59:32 2024 daemon.notice netifd: Interface '4G_4' has link connectivity
Fri Jul 19 17:59:32 2024 daemon.notice netifd: Interface '4G_4' is setting up now
Fri Jul 19 17:59:32 2024 daemon.notice netifd: 4G_4 (5040): udhcpc: started, v1.36.1
Fri Jul 19 17:59:32 2024 daemon.notice netifd: 4G_4 (5040): udhcpc: broadcasting discover
Fri Jul 19 17:59:32 2024 daemon.notice netifd: 4G_4 (5040): udhcpc: broadcasting select for xxx.xxx.xxx.243, server xxx.xxx.xxx.244
Fri Jul 19 17:59:32 2024 daemon.notice netifd: 4G_4 (5040): udhcpc: lease of xxx.xxx.xxx.243 obtained from xxx.xxx.xxx.244, lease time 7200
Fri Jul 19 17:59:33 2024 daemon.notice netifd: Interface '4G_4' is now up
Fri Jul 19 17:59:33 2024 user.notice nlbwmon: Reloading nlbwmon due to ifup of 4G (wwan0)
Fri Jul 19 17:59:35 2024 user.notice nlbwmon: Reloading nlbwmon due to ifup of 4G_4 (wwan0)

Hello Guys,

i want to give an update on my issue with frequent disconnects and stability.
After the tests mentioned in this thread, the first thing i tried, was using modemmanager. i found that it reconnects automatically every 4h (maybe ip reset?) though the stability was greatly improved. My (cell locked) line never changed to 3g or to any other bts anymore. Also it always reconnected automatically really fast, so service monitor couldnt even recognize any downtime anymore.
for me modemmanager did the trick and got me a pretty stable and reliable connection.

The overall experience for me is now a lot better then before with stock rom or OpenWRT with qmi.

Thanks to all and special thanks to @ncompact for all the ideas

hoping to do you a favor ... :grinning:

I suggest you switch to ECM mode that was recommended to me by user @brada4

https://openwrt.org/docs/guide-user/network/wan/wwan/ethernetoverusb_cdc


if you're interested:

for AT commands use "picocom"
for sms management use "sms-tool"

uptime 10 days
no reconnection script needed,

2 connectivity failures detected during use but resolved autonomously by the router for about 2 minutes of no internet signal

if you want to detect all possible disconnections and you have a connection with unlimited gigabytes

set AT command AT+QCFG="usbnet",1

+QCFG: "usbnet",1

edit /etc/config/network (only part of interest)

config interface 'wan'
        option proto 'dhcp'
        option modes 'all'
        option autoconnect '1'
        option device 'usb0'

ps: and reboot your router ... :grinning: because if you don't do this you may detect a lack of connection ...

2 Likes

It depends on actual hardware and wiring, you must roll through all modes and measure which works best. One reconnects gsm with no updown to host ,another gives you perfect control over that aspect etc.

Probably, that is your ISP.

Hi, if anyone need to restore to stock i followed this method:
prerequisites:
You must have Kernel2 stock image not erased

in openwrt do:
fw_setenv CheckBypass 0
mtd -r erase Kernel

Doing this, Bootloader will check the Kernel1 image, and will not pass the checksum
so this trigger the copy of Kernel2 to Kernel1

How to check kernel2 is not erased?

hoping to help you (As for the question, I may have misunderstood it, in that case I apologize in advance) ...

if you have not done this step:

https://openwrt.org/toh/zyxel/lte5398-m904#copying_openwrt_to_the_recovery_partition

"Kernel2" has not been touched

show:

if you want to go back to the original firmware you can do this:

what i did to install Openwrt:

Log in as β€œroot” on 192.168.1.1 port 22
scp OpenWrt initramfs-recovery.bin image to 192.168.1.1:/tmp

Prepare bootloader config by running:

nvram setro uboot DebugFlag 0x1
nvram setro uboot CheckBypass 0
nvram commit

Run mtd_write -w write initramfs-recovery.bin Kernel and reboot

Wait for OpenWrt to boot and ssh to root@192.168.1.1

Sysupgrade to the OpenWrt sysupgrade image and reboot

I made a dump of the partitions before and after the migration on Openwrt and the md5sum of "Kernel2" remained unchanged since I did not touch this partition..

how to dump the current "Kernel2" partition and find its md5sum:

ssh to the router and then:

cat /proc/mtd 
dev:    size   erasesize  name
mtd0: 00080000 00020000 "Bootloader"
mtd1: 00080000 00020000 "Config"
mtd2: 00040000 00020000 "Factory"
mtd3: 01ec0000 00020000 "Kernel"
mtd4: 01ac0000 00020000 "ubi"
mtd5: 01ec0000 00020000 "Kernel2"
mtd6: 00100000 00020000 "wwan"
mtd7: 01000000 00020000 "data"
mtd8: 00100000 00020000 "rom-d"
mtd9: 00080000 00020000 "reserve"

cd /tmp

dd if=/dev/mtd5 of=mtd5.bin
62976+0 records in
62976+0 records out

md5sum mtd5.bin 
c371cadac1f973151f5850f30ed0201f  mtd5.bin

my archive on pc (before migrating to Openwrt):

date
Sat Dec  9 22:33:27 GMT 2023
cat /proc/mtd
dev:    size   erasesize  name
mtd0: 07f80000 00020000 "ALL"
mtd1: 00080000 00020000 "Bootloader"
mtd2: 00080000 00020000 "Config"
mtd3: 00040000 00020000 "Factory"
mtd4: 01ec0000 00020000 "Kernel"
mtd5: 01ec0000 00020000 "Kernel2"
mtd6: 00100000 00020000 "wwan"
mtd7: 01000000 00020000 "data"
mtd8: 00100000 00020000 "rom-d"
mtd9: 00080000 00020000 "reserve"

dc7b20f210e261637f08c198ebe02778  /dev/mtd0
84ed520d76000b93199318ff68f15ed0  /dev/mtd1
aba9ac2c0a14bcb523c908b25e1987b9  /dev/mtd2
3eb342775b89e2e4a14dae5eadda6c31  /dev/mtd3
104ccf1763aedd8dfe8d5b307a302cd7  /dev/mtd4
c371cadac1f973151f5850f30ed0201f  /dev/mtd5
2fdd6851b32ae931637d4845c037b550  /dev/mtd6
187b869ef737120af2ac1b235cbe798d  /dev/mtd7
53a4e0e6351dcd4f313de7991c9ff3e7  /dev/mtd8
38eb11b49b828dc070270680a8a37845  /dev/mtd9

How to improve speeds on this router?

On ZTE MF289F i have 360Mb/s, but on this Zyxel 299Mb/s. Same ISP, same place.

There is no solution for that yet. It looks like the problem is in the MT7621 USB3 driver affecting other platforms as well.

2 Likes

Thanks! This saved my ass I believe. Being on a working "vacation" and QMI was unstable. For every reboot I had no connection and had to change the APN between two known valid options and restart the interface to connect. Even then it only lastet hours before it went down.

I tried MBIM as well but it refused to connect.

Now I'm running ECM mode like described here:
https://openwrt.org/docs/guide-user/network/wan/wwan/ethernetoverusb_cdc

Now I got a connection after reboot. Just crossing my fingers it will stay connected of I will hear it from my wife and kids :rofl:

Update after a few days. ECM mode is stable but now I get an extra NAT in the picture. The USB-device always get an 192.168.225.0/24 address. I have an APN for public IP but that's no use now.

I would like to use QMI or MBIM.

Then use it )
Switch the modem to MBIM and configure router as shown in the wiki:
https://openwrt.org/docs/guide-user/network/wan/wwan/ltedongle

I did try MBIM but got connection refused every time. I might give it a new try in the weekend as my wife uses the wifi for work :smiley:

I'm trying to get MBIM to work again. I use the same APN as in QMI or ECM where it works. There is no PIN on the SIM.

config/network:

config interface 'wan_mbim'
	option proto 'mbim'
	option device '/dev/cdc-wdm0'
	option apn 'vpn.telia.no'
	option auth 'none'
	option pdptype 'ipv4'
	option ipv6 '0'

logread:

Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12004): mbim[12004] Stopping network
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12004): Command failed: ubus call network.interface notify_proto { "action": 0, "link-up": false, "keep": false, "interface": "wan_mbim" } (Permission denied)
Sun Oct 13 00:14:03 2024 daemon.notice netifd: Interface 'wan_mbim' is now down
Sun Oct 13 00:14:03 2024 daemon.notice netifd: Interface 'wan_mbim' is setting up now
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012): mbim[12012] Reading capabilities
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012):   devicetype: 0003 - remote
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012):   cellularclass: 0001
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012):   voiceclass: 0001 - no-voice
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012):   simclass: 0002
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012):   dataclass: 003C
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012):   smscaps: 0003
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012):   controlcaps: 0001
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012):   maxsessions: 0008
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012):   deviceid: 351963110369844
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012):   firmwareinfo: EG18EAPAR01A12M4G
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012):   hardwareinfo: EG18-EA
Sun Oct 13 00:14:03 2024 daemon.notice netifd: wan_mbim (12012): mbim[12012] Checking pin
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012): required pin: 3 - pin2
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012): remaining attempts: 3
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012): mbim[12012] Checking subscriber
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012):   readystate: 0001 - initialized
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012):   simiccid: 8947080050300525278F
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012):   subscriberid: 242026601551141
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012): mbim[12012] Register with network
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012):   nwerror: 0000 - unknown
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012):   registerstate: 0004 - roaming
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012):   registermode: 0002 - manual
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012):   availabledataclasses: 0020 - lte
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012):   currentcellularclass: 0001 - gsm
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012):   provider_id: 21407
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012):   provider_name: Telia N
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012):   roamingtext: (null)
Sun Oct 13 00:14:04 2024 daemon.notice netifd: wan_mbim (12012): mbim[12012] Subscriber registration failed (code 4)
Sun Oct 13 00:14:04 2024 user.notice root: mbim bringup failed, retry in 15s
Sun Oct 13 00:14:04 2024 daemon.warn odhcpd[2427]: No default route present, overriding ra_lifetime to 0!

Please show the output of the following commands:

AT+CEREG?
AT+CGDCONT?
AT+QMBNCFG="List"
AT+QCFG="roamservice"

Did you switch modem to mbim mode ? ( Changing proto in interface is not enough)
So also answer for AT command will be good:

AT+QCFG="usbnet"

As well as answer for commad:

cat /sys/kernel/debug/usb/devices

in the terminal

Here:

Terminal ready

+CEREG: 0,5

OK

+CGDCONT: 1,"IP","telia","0.0.0.0",0,0,0,0
+CGDCONT: 2,"IPV4V6","ims","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0
+CGDCONT: 3,"IPV4V6","sos","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,1

OK

+QMBNCFG: "List",0,1,1,"ROW_Commercial",0x0801080A,201904121
+QMBNCFG: "List",1,0,0,"Telenor_Norway_Commercial",0x08014300,201902181
+QMBNCFG: "List",2,0,0,"ROW_ReduceComb",0x0801FC02,202010291
+QMBNCFG: "List",3,0,0,"ROW_Generic_3GPP_PTCRB_GCF",0x0801FE02,201910231
+QMBNCFG: "List",4,0,0,"Norway_Telia_Commercial",0x08012420,201906131
+QMBNCFG: "List",5,0,0,"Optus_Australia_Commercial",0x08014400,201812291
+QMBNCFG: "List",6,0,0,"Telstra_Australia_Commercial",0x08010F00,201908191
+QMBNCFG: "List",7,0,0,"TIM_Italy_Commercial",0x08012B00,201902181
+QMBNCFG: "List",8,0,0,"France-Commercial-Orange",0x08010B21,201906281
+QMBNCFG: "List",9,0,0,"UK-VoLTE-Vodafone",0x08010426,201908011
+QMBNCFG: "List",10,0,0,"Spain-Non_VoLTE-Telefonica",0x08010C20,201910291
+QMBNCFG: "List",11,0,0,"Telia_Sweden",0x08012400,201902251

OK

+QCFG: "roamservice",2

OK

5 is "Registered, roaming"

For the rest please see my post:

Hi, yes. I switched.

Terminal ready

OK

+QLTS: "2024/10/14,15:52:04+04,1"

OK

+QCFG: "usbnet",2

OK


Terminating...
Thanks for using picocom
root@airborne:~#
root@airborne:~# cat /sys/kernel/debug/usb/devices

T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480  MxCh= 2
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=01 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 6.06
S:  Manufacturer=Linux 6.6.56 xhci-hcd
S:  Product=xHCI Host Controller
S:  SerialNumber=1e1c0000.xhci
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=01 Lev=01 Prnt=01 Port=01 Cnt=01 Dev#=  2 Spd=480  MxCh= 0
D:  Ver= 2.10 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=0781 ProdID=5591 Rev= 1.00
S:  Manufacturer= USB
S:  Product= SanDisk 3.2Gen1
S:  SerialNumber=0401f06f33401d9d9b1778477b41595ecd21d943397f234a562d678b6b1e99d41f6e00000000000000000000d474d1f0ff83
C:* #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=224mA
I:* If#= 0 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb-storage
E:  Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms

T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=5000 MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 3.00 Cls=09(hub  ) Sub=00 Prot=03 MxPS= 9 #Cfgs=  1
P:  Vendor=1d6b ProdID=0003 Rev= 6.06
S:  Manufacturer=Linux 6.6.56 xhci-hcd
S:  Product=xHCI Host Controller
S:  SerialNumber=1e1c0000.xhci
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=02 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  2 Spd=5000 MxCh= 0
D:  Ver= 3.10 Cls=00(>ifc ) Sub=02 Prot=01 MxPS= 9 #Cfgs=  1
P:  Vendor=2c7c ProdID=0512 Rev= 3.18
S:  Manufacturer=Quectel
S:  Product=EG18-EA
S:  SerialNumber=0123456789ABCDEF
C:* #Ifs= 6 Cfg#= 1 Atr=a0 MxPwr=896mA
A:  FirstIf#= 8 IfCount= 2 Cls=02(comm.) Sub=0e Prot=00
I:* If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
E:  Ad=81(I) Atr=02(Bulk) MxPS=1024 Ivl=0ms
E:  Ad=01(O) Atr=02(Bulk) MxPS=1024 Ivl=0ms
I:* If#= 1 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=option
E:  Ad=83(I) Atr=03(Int.) MxPS=  10 Ivl=32ms
E:  Ad=82(I) Atr=02(Bulk) MxPS=1024 Ivl=0ms
E:  Ad=02(O) Atr=02(Bulk) MxPS=1024 Ivl=0ms
I:* If#= 2 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=option
E:  Ad=85(I) Atr=03(Int.) MxPS=  10 Ivl=32ms
E:  Ad=84(I) Atr=02(Bulk) MxPS=1024 Ivl=0ms
E:  Ad=03(O) Atr=02(Bulk) MxPS=1024 Ivl=0ms
I:* If#= 3 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=option
E:  Ad=87(I) Atr=03(Int.) MxPS=  10 Ivl=32ms
E:  Ad=86(I) Atr=02(Bulk) MxPS=1024 Ivl=0ms
E:  Ad=04(O) Atr=02(Bulk) MxPS=1024 Ivl=0ms
I:* If#= 8 Alt= 0 #EPs= 1 Cls=02(comm.) Sub=0e Prot=00 Driver=cdc_mbim
E:  Ad=88(I) Atr=03(Int.) MxPS=  64 Ivl=32ms
I:  If#= 9 Alt= 0 #EPs= 0 Cls=0a(data ) Sub=00 Prot=02 Driver=cdc_mbim
I:* If#= 9 Alt= 1 #EPs= 2 Cls=0a(data ) Sub=00 Prot=02 Driver=cdc_mbim
E:  Ad=8e(I) Atr=02(Bulk) MxPS=1024 Ivl=0ms
E:  Ad=0f(O) Atr=02(Bulk) MxPS=1024 Ivl=0ms